last executing test programs:

7m16.282580944s ago: executing program 0 (id=19):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000b00)={[{@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@mode={'mode', 0x3d, 0x8}}, {@dmode={'dmode', 0x3d, 0x4}}, {@adinicb}, {@gid}, {@lastblock={'lastblock', 0x3d, 0x7}}, {@gid_forget}, {@uid}, {@partition={'partition', 0x3d, 0x6}}, {@session={'session', 0x3d, 0x6}}, {@umask={'umask', 0x3d, 0x32}}]}, 0x1, 0xc67, &(0x7f0000001dc0)="$eJzs3U9sHNd9B/DfG5LiSm5rJk4VJ42DTVuksmK5+hdTtgp3VdNsA8iyEIq5BeBKpNSFKZIgqUY23JbppYceAhRFDzkRaIUCKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAAVoEW8zsW3FFkZYskiIlfz429d2deW/mvZnxjCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOJ3Xj13/ETaZEXfHjQGAHgoLox99fjJzZ7/AMBj69JW//8PAAAAAAAAAAAAAADsFymKeCpSzF1YSxPV947a+dbAjZvjI6ObVzuYqpp9Vfnyp3bi5KnTX35h+Ew3z7dmPqT+TvtsvD526Vz9ldnrc/NTCwtTk/XxmdaV2cmp+97CdutvdLQ6APXrb9yYvHp1oX7y+VN3rL459MHgE4eHzg4/e+yZbtnxkdHRsfUitd7y/Q/ckI6tRngciCKORYrnvvuT1IyIIrZ/LGoP99xvdLDqxNGqE+Mjo1VHplvNmcVy5cXugSgi6j2VGt1jtPm5iP6Bh9qHrTUilsrmlw0+WnZvbK4537w8PVW/2JxfbC22Zmcupk5ry/7Uo4gzKWI5IlYH797cQBTRHym+/eRaupzf+lEdhy9VA4O3bkexi328D2U76wMRy8UjcM72scEo4rVI8dN3j8SVfJ+p7jVfjHitzO9H3Crz5YhUXhinI97f5Dri0dQfRfxZef7PrqXJ6n7Qva+c/1r9KzNXZ3vKdu8rH/H5cNedYo+eDwc35MOxz+9NtSiiWd3x19KD/2YHAAAAAAAAAAAAAAAAgJ12MIr4TKR49V//oBpXHNW49CfPDv/u0C/2jhl/+h7bKcs+HxFLxf2NyT2QBwZeTBdT2uOxxB9ntSjiD/P4v2/udWMAAAAAAAAAAAAAAAAAAAA+1or4caR46b0jaTl65xRvzVyrX2penu7MCtud+7c7Z3q73W7XUycbOSdyLuVczrmSczVnFLl+zkbOiZxLOZdzruRczRl9uX7ORs6JnEs5l3Ou5FzNGf25fs5GzomcSzmXc67kXM0Z+2TuXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx0kRRfw8UnzrG2spUkQ0IiaikyuDe906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0mIr4XqSo/17j9rL+iEjVvx1Hyl9OR+NAmZ+MxnCZL0fjXM5mlf2Nb+5B+9megVTEjyLFYO2d2yc8n/+Bzrfbl0Hcenv922f7O9nXXTn0weATh588Ozz6+ae3+pw2a8DR862ZGzfr4yOjo2M9i/vz3j/Zs2wo77fYma4TEQtvvvVGc3p6av7BP5SXwANW757Jbez9YX5I/Y9MU33YiQ/Rvy+asTd9v0NtL25O7Lry+f9+pPjN9/6t+8DvPP9r8Qudb7ef8PGzP1p//r+0cUP3+fzv31gvP//LJ8Fmz/+nepa9lH83MtAfUVu8PjdwOKK28OZbx1rXm9emrk3NnD5+/MXh4RdPHR84EFG72pqe6vm0I4cLAAAAAAAAAAAAAAAA4OFJRfx2pGj+aC3VI+JmNV5r6Ozws8ee6Yu+arzVHeO2Xx+7dK7+yuz1ufmphYWpyfr4TOvK7OTU/e6uVg33Gh8Z3ZXO3NPBXW7/wdors3Nvzreu/f7ipusP1c5dXlicb17ZfHUcjCKi0bvkaNXg8ZHRqtHTreZMVfXipoPpP7qBVMS/R4orp+vpC3lZHv+/cYR/3Hr7xdvXwtLGDe3g+P/PH1of//eJnqLlPlMq4meR4jf+/On4QtXOQ3HXMcvl/jpSHD3zuVwuDpTlum3ovFegMzKwLPvfkeLvf35n2e54yKfWy574SAf3EVCe/ycjxff+9Dvxq3nZne9/6D3/68fv0MYN7dL7Hz7Vs+zQHe8r2HbXyef/WKR4+al34teqJf/7oe//6L6x4Uin8Pr7OXbp/P9yz7KhvN9f36nOAwAAAAAAAAAAPMIGUhF/Eyl+MNqfXsjL7ufv/01u3NAu/f2vT/csm9yZ+Yru+WHbBxUAAAAA9omBVMSPI8W1xXduj6G+c/x3z/jP31of/zmSNqyt/pzvl6r3Buzkn//1Gsr7ndh+twEAAAAAAAAAAAAAAAAAAGBfSamIF/J86hPVeP7JLedTX4kUr/7nc7lcOlyW684DP1T9WrswO3Ps3PT0bC0Wm5enp+pjc80rU2XdT0WKtb/6XK5bVPOrd+eb78zxvj4X+3ykGP3bbtnOXOzduck784HX2u2IE2XZT0SK//i7O8vmqanz3NHVdk+WZf8yUnz9Hzcve3i97Kmy7HcixQ+/Xu+WPVSW7b4f9dPrZZ+/MlvswlkBAAAAAAAAAAAAAAAAAADg42YgFfEnkeK/ri/fHsuf5/8f6PlaufV2z3z/G9ys5vkfqub/3+rzg8z/X71XYGmrvQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOMpRRFvRYq5C2tpZbD83lE735q5cXN8ZHTzagdTVbOvKl/+1E6cPHX6yy8Mn+nmh9ffaZ+J18cunau/Mnt9bn5qYWFqsj4+07oyOzl131vYbv2NjlYHoH79jRuTV68u1E8+f+qO1TeHPhh84vDQ2eFnjz3TLTs+Mjo61lOmf+CB936XtMXyA1HEX0SK5777k/SDwYgitn8s7nHt7LaDVSeOVp0YHxmtOjLdas4slisvdg9EEVHvqdToHqN7nov/a7fbD6srm2hELJXNLxt8tOze2Fxzvnl5eqp+sTm/2Fpszc5cTJ3Wlv2pRxFnUsRyRKwO3r25gSjijUjx7SfX0j8NRvR1j8OXLox99fjJrdtR7GIf70PZzvpAxHJxP+eMrQxGEf8QKX767pH458GI/uj8xBcjXivz+xG3onO+U3lhnI54f5PriEdTfxTxP+X5P7uW3h0s7wfd+8r5r9W/MnN1tqds976yzedDu93+4zL37vnwMO3ze1MtivhhdcdfS//iv2sAAAAAAAAAAAAAAACAfaSIX4kUL713JFXjg2+PKW7NXKtfal6e7gzr6479646Zbrfb7XrqZCPnRM6lnMs5V3Ku5owi18/ZKLPWbk/k70s5l3Ou5FzNGX25fl81XLHdyN8nci7lXM65knM1Z/Tn+jkbOSdyLuVczrmSczVn7JOxewAAAAAAAAAAAAAAAAAAwOOlqP5J8a1vrKX2YGd+6Yno5Ir5QB97/x8AAP//Jhb4VQ==")

7m15.29880639s ago: executing program 0 (id=22):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)={0x30, r1, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}]]}, 0x30}}, 0x0)

7m14.950554996s ago: executing program 0 (id=23):
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x1000, 0x4, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x6}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8000000000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0)
write$FUSE_INIT(r2, 0x0, 0x3c00)

7m14.442069443s ago: executing program 0 (id=25):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})
mount$bind(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x825, 0x0)
chmod(&(0x7f0000000140)='./file0\x00', 0x0)

7m12.949122847s ago: executing program 0 (id=27):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
lseek(r0, 0x4, 0x4)
ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
listen(r1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

7m11.213244305s ago: executing program 0 (id=31):
syz_open_dev$radio(0x0, 0x0, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file3\x00', 0x8, &(0x7f00000003c0)=ANY=[], 0x4, 0x1c0, &(0x7f0000000440)="$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")
r1 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000500)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0)
mkdir(&(0x7f00000017c0)='./bus\x00', 0x100)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
sendfile(r6, r6, 0x0, 0x40008)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="47c8178e1fc7d489dce1f9794c65ee64c3c01ea00e1d05ac97d020ff807623ac37279986e71f2f1fce1d302eebb3819e144d765cbd5473239f54c95d8b5ac20b1ed15041a5f51362f638fccea19e50f0d0e4ccaafd398060302acd", @ANYRES8=r5], 0x50)

7m10.743595452s ago: executing program 32 (id=31):
syz_open_dev$radio(0x0, 0x0, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file3\x00', 0x8, &(0x7f00000003c0)=ANY=[], 0x4, 0x1c0, &(0x7f0000000440)="$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")
r1 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000500)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0)
mkdir(&(0x7f00000017c0)='./bus\x00', 0x100)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
sendfile(r6, r6, 0x0, 0x40008)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="47c8178e1fc7d489dce1f9794c65ee64c3c01ea00e1d05ac97d020ff807623ac37279986e71f2f1fce1d302eebb3819e144d765cbd5473239f54c95d8b5ac20b1ed15041a5f51362f638fccea19e50f0d0e4ccaafd398060302acd", @ANYRES8=r5], 0x50)

21.45827838s ago: executing program 4 (id=993):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x28, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000}, [@RTA_MULTIPATH={0xc, 0x9, {0x6, 0xc, 0x3}}]}, 0x28}}, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xf, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000))
getpid()

16.889266432s ago: executing program 4 (id=1003):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f00000082c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x29, 0x4, 0xffffffff89000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0x50)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)={0x62f41, 0x109, 0x10}, 0x18)

16.467954689s ago: executing program 4 (id=1005):
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0xa000, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000500)=""/138, 0x8a}, {&(0x7f00000005c0)=""/171, 0xab}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}, {&(0x7f00000010c0)=""/192, 0xc0}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000000740)=""/26, 0x1a}], 0x7}, 0x1ff}, {{&(0x7f0000001340)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f00000013c0)=""/187, 0xbb}, {&(0x7f0000001480)=""/245, 0xf5}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/122, 0x7a}], 0x4, &(0x7f0000000980)=""/33, 0x21}, 0x5963}], 0x2, 0x40, &(0x7f0000001680))
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_int(r3, 0x0, 0xb, 0x0, &(0x7f0000000300))

13.691480383s ago: executing program 4 (id=1009):
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xb)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0)

12.834628507s ago: executing program 5 (id=1013):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x28, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000}, [@RTA_MULTIPATH={0xc, 0x9, {0x6, 0xc, 0x3}}]}, 0x28}}, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xf, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000))
getpid()

10.566029523s ago: executing program 2 (id=1016):
r0 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001440)={0x1c, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x44}, [@nested={0x8, 0xe, 0x0, 0x1, [@nested={0x4, 0x151}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

10.230215808s ago: executing program 5 (id=1017):
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x1000, 0x4, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x6}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8000000000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0)
write$FUSE_INIT(r2, 0x0, 0x3c00)

9.508497219s ago: executing program 2 (id=1019):
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0xa000, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000500)=""/138, 0x8a}, {&(0x7f00000005c0)=""/171, 0xab}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}, {&(0x7f00000010c0)=""/192, 0xc0}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000000740)=""/26, 0x1a}], 0x7}, 0x1ff}, {{&(0x7f0000001340)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f00000013c0)=""/187, 0xbb}, {&(0x7f0000001480)=""/245, 0xf5}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/122, 0x7a}], 0x4, &(0x7f0000000980)=""/33, 0x21}, 0x5963}], 0x2, 0x40, &(0x7f0000001680))
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_int(r3, 0x0, 0xb, 0x0, &(0x7f0000000300))

7.974507544s ago: executing program 5 (id=1021):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, 0x0, 0x0, 0x0)

7.974120394s ago: executing program 2 (id=1022):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000000da66000000004b64ffec850000006d000000c50000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x2}, 0x94)
dup(0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota'])
openat(0xffffffffffffff9c, 0x0, 0x351142, 0x1cd)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020033797a30000000000800410073697700140033006c6f0000000000000000200000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)

7.947370444s ago: executing program 4 (id=1023):
shutdown(0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x10)
landlock_restrict_self(0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x84)
add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb}, 0x38)

6.222663142s ago: executing program 5 (id=1028):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x28, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000}, [@RTA_MULTIPATH={0xc, 0x9, {0x6, 0xc, 0x3}}]}, 0x28}}, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xf, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
getpid()

5.09355146s ago: executing program 5 (id=1029):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB='utf8,utf8,iocharset=cp862,iocharset=cp864,discard,errors=remount-ro,fmask=00000000000000000007777,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466382c616c6c6f775f7574696d653d3030303030303030303030303030303030312c616c6c6f775f7574696d653d30303030303030303030303030303030303030333737372c0002e5cc2c3640db32594e71db"], 0x1, 0x1526, &(0x7f0000000780)="$eJzs3Au4TdXXMPAx5pyLQ9JOcjmsMcdip4NJkuSSkEuSJEmSW0KSJElIbrklIQm5J7knndw6Tjru9/s16eSVJElISDK/53T5e3v7+vzf99/3eb/3jN/zrLPnOGuPsefc46y9117POeebLsNrNKpZtQEzw79C/XbbGwASAGAQAFwDAAEAlMlVJhcgQDaNvf+lBxF/swdnXekZiCtJ+p+5Sf8zN+l/5ib9z9yk/5mb9D9zk/5nbtJ/ITKzrbPzXytb5t2+6TK8xrJ/6vq//T/vxl9v5Pr/fyfZLrNf3v//x/qnjjTpf+Ym/c/cpP+Zm/Q/c5P+Z27S/8xN+p+5Sf+FyMyu9PXn/w+235+qKz2Py2zBfynvyv70CSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTILM75SwwA/D6+0vMSQgghhBBCCCHE38dnvdIzEEIIIYQQQgghxP99CGA0GAggC2SFBMgG2eEqyAFXQ064BmJwLeSC6yA3XA95IC/kg/yQCAWgIIRAYIEhgkJQGOLgPcCNkARFoRgUBwcloCTcBKXgZigNt0AZSE4BuA3KQXmoABXhdqgEd0BlqAJV4U6oBtWhBtSEu6AW3A214R6oA/dCXbgP6sH9UB8egAbwIDSEh6ARPAyN4RFoAk2hGTSHFv+l/BegB7wIPaEX9IY+0Bdegn7QHwbAQBgEL8NgeAWGwKswFIbBcHgNRsDrMBLegFEwGsbAmzAWxsF4mAATYRJMhrdgCrwNU+EdmAbTYQbMhFkwG+bAuzAX3oN58D4kI8B8WAALYREshg8hBZZAKnwES+FjSINlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbATtgFu2FPlb3wCeyDT2E/fAbp8Pl/Mv8s/DG/KwICKlRo0GAWzIIJmIDZMTvmwByYE3NiDGOYC3NhbsyNeTAP5sN8mIiJWBALIiEhI2MhLIRxjGMRLIJJmITFsBg6dFgSS2IpvBlLY2ksg2WwLJbFclgey2NFrIiVsBJWxspY9bYFAFgNa2ANvAvvwruxNtbGOlgH62JdrIf1sD7WxwbYABtiQ2yEjbAxNsYm2ASbYTNsgS2wJbbEVtgK22AbbIttsR22w/bYHjtgB+yIHbETdsLO2Bm7YBfsit2wG76AL+CL+CL2wmqqD/bFvtgP++EAHIgD8WUcjK/gK/gqDsVhOBxfw9fwdRyJZ3AUjsYxOAYrqXE4Hicgq0k4GSfjFJyCU3EqTsPpOB1n4iycjXNwDs7F9zDjCEvGD/ADXIALcBEuxsWYgkswFVNxKZ7FNFyGy3EFrsRVuBLX4Fpcg+txA67HTbgJt+AW3IbbcAfuwF24C/fgHvwEP8FP8VMciumYjgfwAB7Eg3gID+FhPIxH8Mi2qwDwGB7D43gcT+BJPIUn8TSexjN4Fs/hOTyP5/ECPpf4VcM9RdcNBZXBKKOyqCwqQSWo7Cq7yqFyqJwqp4qpmMqlcqncKrfKo/KofCqfSlSJqqAqqEiRYhWpQqqQiqu4KqKKqCSVpIqpYsopp0qqkqqUKqVKq9KqjLpVlVW3qXKqvGrtKqqKqpJq4yqrKqqqqqqqqeqqhqqpaqpaqpaqrWqrOqqOqqvqqnrqflVf9cEB+KDK6EwjNQwbq+HYRDVVzVRz9To+qlqqkdhKtVZt1ONqNI7Cdqqla6+eUh3UeOyonkn4/YWui3pedVXdVHf1guqhWrmeqpeahn1UXzUT+6n+aoAaqOZidfU+JmMN9aoaqoap4eo1tQhfVyPVG2qUGq3GqDfVWDVOjVcT1EQ1SU1Wb6kp6m01Vb2jpqnpaoaaqWap2WqOelfNVe+peep9law+UPPVArVQLVKL1YcqRS1RqeojtVR9rNLUMrVcrVAr1Sq1Wq1Ra9U6tV5tUBvVJrVZbVFb1Ta1Xe1QO9UutVvtUXvVJ2qf+lTtV5+pdPW5ynj9Pqi+UIfUl+qw+kodUV+ro+obdUx9q46rXuqEOqlOqe/VafWDOqPO9jmnflTn1U/qgvpZXVRegUattNZGBzqLzqoTdDadXV+lc+irdU59jY7pa3UufZ3Ora/XeXRenU/n14m6gC6oQ03aataRLqQL67i+QRfRN+okXVQX08W10yV0SX2TLqVv1qX1LbqMvlWX1bfpcrq8rqAr6tt1JX2Hrqyr6Kr6Tl1NV9c1dE19l66l79a19T26jr5X19X36Xr6fl1fP6Ab6Ad1Q/2QbqQf1o31I7qJbqqb6ea6hX5Ut9SP6Va6tW6jH9dt9RO6nX5St9dP6Q76ad1RP6M76Wd1Z/2c7qKf1111N91d/6wvaq976l66t+6j++qXdD/dXw/QA/Ug/bIerF/RQ/Sreqgepofr1/QI/boeqd/Qo/RoPUa/qcfqcXq8nqAn6kl6sn5LT9Fv66n6HT1NT9czdFaYpWfrAb9VmvdP5L/9h/yZOiN/yC+PvkVv1dv0dr1D79S79G69R+/Ve/U+vU/v1/t1uk7XB/QBfVAf1If0IX1YH9ZH9BF9VB/Vx/QxfVwf1yf0Sf2j/l6f1j/oM/qsPqt/1Of1eX3ht+cADBpltDEmMFlMVpNgspns5iqTw1xtcpprTMxca3KZ60xuc73JY/KafCa/STQFTEETGjLWsIlMIVPYxM0Npoi50SSZoqaYKW6cKWFKmptMzCD8K/l/Mb8VM349pk0L08K0NC1NK9PKtDFtTFvT1rQz7Ux70950MB1MR9PRdDKdTGfT2XQxXUxX09V0N91ND9PD9EQwvU1v09e8ZPqZ/maAGWgGmZdNRuEhZogZaoaa4Wa4GWFGmJFmpBllRpmMnWPNWDPejDcTzUQz2Uw2U8wUM9VMNdPMNDPDzDCzzCwzx8wxc81cM8/MM8km2cw3881Cs9AsNotNikkxqSbVLDVLTZpZZpaZFWaFWWVWmTVmjVln1pkNZoPZZDaZNLPVbDXbzXaz0+w0u81us9fsNfvMPrPf7DfpJt0cMAfMQXPQHDKHzGFz2BwxR8xRc9QcM8fMcXPcnDAnzClzypw2p80Zc8acM+fMeXPeXDAXzEVzMeO0L1CBCkxggixBliAhSAiyB9mDHEGOIGeQM4gFsSBXkCvIHVwf5AnyBvmC/EFiUCAoGIQBBTbgIAoKBYWDeHBDUCS4MUgKigbFguKBC0oEJYObglLBzUHp4JagTHBrUDa4LSgXlA8qBBWD24NKwR1B5aBKUDW4M6gWVA9qBDWDu4Jawd1B7eCeoE5wb1A3uC+oF9wf1A8eCBoEDwYNg4eCRsHDQePgkaBJ0DRoFjQPWvyt9b0/k/cx1zPsFWaFPmHf8KWwX9g/HBAODAeFL4eDw1fCIeGr4dBwWDg8fC0cEb4ejgzfCEeFo8Mx4Zvh2HBcOD6cEE4MJ4WTw7fCKeHb4dTwnXBaOD2cEc4MZ4Wzwznhu+Hc8L1wXvh+mBx+EM4PF4QLw0Xh4vDDMCVcEqaGH4VLw4/DtHBZuDxcEa4MV4WrwzXh2nBduD7cEG4MN4Wbwy3h1nBbuD3cEe4Md4W7wz3h3vCTcF/4abg//CxMDz8PD4S/v+19GR4OvwqPhF+HR8NvwmPht+Hx8LvwRHgyPBV+H54OfwjPhGfDc+GP4fnwp/BC+HN4MfQZJ/cZb+9kyFAWykIJlEDZKTvloByUk3JSjGKUi3JRbspNeSgP5aN8lEiJVJAKUgYmpkJUiOIUpyJUhJIoiYpRMXLkqCSVpFJUikpTaSpDZagslaVyVI4qUAW6nW6nO+gOqkJV6E66k6pTdapJNakW1aLaVJvqUB2qS3WpHtWj+lSfGlADakgNqRE1osbUmJpQE2pGzagFtaCW1JJaUStqQ22oLbWldtSO2lN76kAdqCN1pE7UiTpTZ+pCXagrdaXu1J16UA/qST2pN/WmvtSX+lE/GkADaBANosE0mIbQEBpKQ2k4DacRNIJG0kgaRaNpDL1JY2kcjacJNJEm0WSaTFNoCk2lqTSNptEMmkGzaBbNoTk0l+bSPJpHyZRM82k+LaSFtJgWUwqlUCql0lJaSmmURstpOa2klbSaVtNaWkvraT1tpI20mTbTVtpK22k77aSdtJt2017aS/toH+2n/ZRO6XSADtBBOkiH6BAdpsN0hI7QUTpKx+gYHafjdIJO0Ck6RafpNJ2hM3SOztF5+oku0M90kTwl2Gw2u73K5rBX25z2Gvsf43w2v020BWxBG9o8Nu8fYrLWJtmitpgtbp0tYUvam/4Ul7PlbQVb0d5uK9k7bOXfYoDf41prd/76i+j2XlvT3mVr2bttbXuPrWPvtXXtfbaefdjWt4/YBrapbWib20b2YdvYPmKb2Ka2mW1u29onbDv7pG1vn7Id7NN/ilPsErvWrrPr7Qa7z35qz9kf7VH7jT1vf7I9bS87yL5sB9tX7BD7qh1qh/0pHmPftGPtODveTrAT7aQ/xTPsTDvLzrZz7Lt2rn3vT/Fi+6FNtql2vl1gF9pFv8QZc0q1H9ml9mObZpfZ5XaFXWlX2dV2zT/musJuspvtFrvXfmK32x12p91ld9s9v8QZ69hvP7Pp9nN7xH5tD9ov7CF7zB62X/0SZ6zvmP3WHrff2RP2pD1lv7en7Q/2jD37y/oz1v69/dletN4CIyvWbDjgLJyVEzgbZ+erOAdfzTn5Go7xtZyLr+PcfD3n4bycj/NzIhfgghwysWXmiAtxYY7zDVyEb+QkLsrFuDg7LsEl+SYuxTdzac44e72Vy/JtXI7LcwWuyLdzJb6DK3MVrsp3cjWuzjW4Jt/Ftfhurs33cB2+l+vyfVyP7+f6/AA34Ae5IT/EjfhhbsyPcBNuys24ObfgR7klP8atuDW34ce5LT/B7fhJbs9PcQd+mjvyM9yJn+XO/Bx34ee5K3fj7vwC9+AXuSf34t7ch/vyS9yP+/MAHsiD+GUezK/wEH6Vh/IwHs6v8Qh+nUfyGzyKR/MYfpPH8jgezxN4Ik/iyfwWT+G3eSq/w9N4Os/gmTyLZ/Mcfpfn8ns8j9/nZP6A5/MCXsiLeDF/yCm8hFP5I17KH3MaL+PlvIJX8ipezWt4La/j9byBN/Im3sxbeCtv4+28g5F38W7ew3v5E97Hn/J+/ozT+XM+wP/GB/kLPsRf8mH+io/w13yUv+Fj/C0f5+/4BJ/kU/w9n+Yf+Ayf5XP8I5/nn/gC/8wX2TNEGKlIRyYKoixR1ighyhZlj66KckRXRzmja6JYdG2UK7ouyh1dH+WJ8kb5ovxRYlQgKhiFEUU24iiKCkWFo3h0Q1QkujFKiopGxaLikYtKRCWjm6JS0c1R6eiWqEx0a1Q2ui0qF5WPHr63YnR7VCm6I6ocVYmqRndG1aLqUY2oZnRXVCu6O6od3RPVie6NSkf3RfWi+6P60QNRA3gwahg9FDWKHo4aR49ETaKmUbOoedQiejRqGT0WtYpaR22ix6O20RNRu+jJqH30VNQhevqy+3tHfaK+0UvRS5H39+iF8UXxxfEP4ynxJfHU+EfxpfGP42nxZfHl8RXxlfFV8dXxNfG18XXx9fEN8Y3xTfHN8S1x72tmBYdOOe2MC1wWl9UluGwuu7vK5XBXu5zuGhdz17pc7jqX213v8ri8Lp/L7xJdAVfQhY6cdewiV8gVdnF3gyvibnRJrqgr5oo750q4kq65a+FauJbuMdfKtXZt3OPucfeEe8I96Z50T7kO7mnX0T3jOrlnXWf3nHvOPe+6um6uu3vB9XAvup6ul+vteru+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6im+wmuyluipvqprppbpqb4Wa4WW6Wm+PmuLlurpvn5rnkpGQ33813C91Ct9gtdikuxaW6VLfULXVpLs0td8vdSrfSrXar3Vq31q13691Gt9FtdpvdVrfVbXfb3U630+12u91et9ftc/vcfrffpbt0d8AdOOfdQXfIfekOu6/cEfe1O+q+ccfct+64+86dcCfdKfe9O+1+cGfcWXfO/ejOu5/cBfezu+i8mxx7KzYl9nZsauyd2LTY9NiM2MzYrNjs2JzYu7G5sfdi82Lvx5JjH8TmxxbEFsYWxRbHPoylxJbEUmMfxZbGPo6lxZbFlsdWxFbGVsW8L7A98oV8YR/3N/gi/kaf5Iv6Yr64d76EL+lv8qX8zb60v8WX8bf6sv42X86X9xX8I76Jb+qb+ea+hX/Ut/SP+Va+tW/jH/dt/RO+nX/St/dP+Q7+ad/RP+M7+Wd9Z/+c7+Kf9119N9/dv+B7+Bd9T699b9/H9/Uv+X6+vx/gB/pB/mU/2L/ih/hX/VA/zA/3r/kR/nU/0r/hR/nRfox/04/14/x4P8FP9JP8ZP+Wn+Lf9lP9O36an+5n+Jl+lp/t5/h3/Vz/np/n3/fJ/gM/3y/wC/0iv9h/6FP8Ep/qP/JL/cc+zS/zy/0KDwmr/Gq/xq/16/x6v8Fv9Jv8Zr/Fb/Xb/Ha/w+/0u/xuv8fv9Z/4ff5Tv99/5tP95/6A/zd/0H/hD/kv/WH/lT/iv/ZH/Tf+mP/WH/ff+RP+pD/lv/en/Q/+jD/rz/kf/Xn/k7/gf/YX5W/WhBBCCCH+Kfoy+/v8IVL/+Kp++05fALh6R/7D/7Hmxjy/jvurxLYxAHiqV5cHf9+qVevdu/dv903TEBReAACxS/lZ4FK8DNrAE9AeWkOp/+38+qtu5/ky9eO3AmT/dzkJcCm+VP/mv6g/Lvmy9RcAJBW+lJMNLsWX6pf+U+3gl/p5W16mfrYvJgO0+nd5OeBSfKl+SXgMnob2f7inEEIIIYQQQgjxq/6qQqfLfb7N+HyeaC7lZIVL8eU+nwshhBBCCCGEEOLKe7Zb9ycfbd++dae/GFT5610yyCyDLP89pnElBpc9QP4zA4ArvZx/DBDgl0t8f32fK/3KJIQQQgghhPi7XTrpv9IzEUIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghMq//F/9y7EqvUQghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhLjS/lcAAAD//98IJ/w=")

4.853799253s ago: executing program 1 (id=1031):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x78, 0x6c, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x14}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

3.544219314s ago: executing program 1 (id=1033):
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0xa000, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000500)=""/138, 0x8a}, {&(0x7f00000005c0)=""/171, 0xab}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}, {&(0x7f00000010c0)=""/192, 0xc0}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000000740)=""/26, 0x1a}], 0x7}, 0x1ff}, {{&(0x7f0000001340)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f00000013c0)=""/187, 0xbb}, {&(0x7f0000001480)=""/245, 0xf5}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/122, 0x7a}], 0x4, &(0x7f0000000980)=""/33, 0x21}, 0x5963}], 0x2, 0x40, &(0x7f0000001680))
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_int(r3, 0x0, 0xb, 0x0, &(0x7f0000000300))

2.822634005s ago: executing program 2 (id=1037):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sysinfo(0x0)

2.786762186s ago: executing program 3 (id=1038):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, 0x0, 0x0, 0x0)

2.267731015s ago: executing program 1 (id=1039):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x28, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000}, [@RTA_MULTIPATH={0xc, 0x9, {0x6, 0xc, 0x3}}]}, 0x28}}, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xf, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
getpid()

1.598400855s ago: executing program 2 (id=1040):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f00000082c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x29, 0x4, 0xffffffff89000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0x50)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)={0x62f41, 0x109, 0x10}, 0x18)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.506901727s ago: executing program 3 (id=1041):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x14, r1, 0xb01, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000"], 0x18}, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0xba100, 0x0)
r4 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0xd80f, 0x10100}, &(0x7f0000000100), &(0x7f0000006100)=<r5=>0x0)
syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0)
io_uring_enter(r4, 0x48e9, 0x0, 0x0, 0x0, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/consoles\x00', 0x0, 0x0)
preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0)
recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0)

1.476751317s ago: executing program 4 (id=1042):
r0 = syz_usb_connect(0x2, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[])

1.266498021s ago: executing program 1 (id=1043):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "2b1a"}, @TCA_NETEM_CORR={0x10, 0x1, {0x6, 0x6, 0x8000}}, @TCA_NETEM_RATE={0x14, 0x6, {0xffff8001, 0x4, 0x7, 0x80000000}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.228674271s ago: executing program 3 (id=1044):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x78, 0x6c, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x14}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

1.026108174s ago: executing program 3 (id=1045):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="14005ec0080005"], 0x30}}, 0x0)

945.644306ms ago: executing program 1 (id=1046):
memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32], 0x20}}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14)

825.013517ms ago: executing program 1 (id=1047):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000000da66000000004b64ffec850000006d000000c50000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x2}, 0x94)
dup(0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota'])
openat(0xffffffffffffff9c, 0x0, 0x351142, 0x1cd)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020033797a30000000000800410073697700140033006c6f0000000000000000200000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)

781.469298ms ago: executing program 3 (id=1048):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
socket$netlink(0x10, 0x3, 0x400000000000004)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x18c)
creat(0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440), 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x3c, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x1, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10)

737.188779ms ago: executing program 5 (id=1049):
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0xa000, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000500)=""/138, 0x8a}, {&(0x7f00000005c0)=""/171, 0xab}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}, {&(0x7f00000010c0)=""/192, 0xc0}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000000740)=""/26, 0x1a}], 0x7}, 0x1ff}, {{&(0x7f0000001340)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f00000013c0)=""/187, 0xbb}, {&(0x7f0000001480)=""/245, 0xf5}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/122, 0x7a}], 0x4, &(0x7f0000000980)=""/33, 0x21}, 0x5963}], 0x2, 0x40, &(0x7f0000001680))
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_int(r3, 0x0, 0xb, 0x0, &(0x7f0000000300))

131.031198ms ago: executing program 2 (id=1050):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x100005, 0x2, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a44a, 0x3, 0x40200003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe65, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]})

0s ago: executing program 3 (id=1051):
openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="fe"])
ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000440)=ANY=[])

kernel console output (not intermixed with test programs):

 on: batadv_slave_0
[   84.246058][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.257431][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.268387][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.282771][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.295881][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.307587][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.317704][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.328884][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.342142][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.353568][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.365236][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.376742][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.387594][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.399208][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.412404][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.424947][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.433486][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.441808][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   84.450492][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   84.460740][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   84.468885][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.477188][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.486434][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.496007][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.505039][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.514582][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.523728][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.535354][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.546732][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.557021][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.567913][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.578915][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.589539][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.601011][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.620153][ T4268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.628914][ T4268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.639245][ T4268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.648089][ T4268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.666527][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.678603][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.691144][ T4269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.700336][ T4269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.709057][ T4269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.718109][ T4269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.763784][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   84.773239][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.818502][ T4270] device veth0_macvtap entered promiscuous mode
[   84.887250][ T4270] device veth1_macvtap entered promiscuous mode
[   84.922961][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.938596][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.953616][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   84.963167][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.973225][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.030939][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.037831][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.038990][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.050286][ T4285] Bluetooth: hci0: command 0x0419 tx timeout
[   85.057530][ T4284] Bluetooth: hci4: command 0x0419 tx timeout
[   85.063497][ T4277] Bluetooth: hci1: command 0x0419 tx timeout
[   85.069416][ T4284] Bluetooth: hci2: command 0x0419 tx timeout
[   85.076065][ T4272] Bluetooth: hci3: command 0x0419 tx timeout
[   85.090253][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.100316][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.111028][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.125739][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.137576][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.147665][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.158288][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.171716][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.180295][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.188276][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.205034][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.221054][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.230189][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.240995][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.251300][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.261905][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.271843][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.282709][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.293174][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.304300][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.314548][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.325216][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.340201][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.360246][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.368279][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.377525][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.386928][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.395953][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.418177][ T4270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.431025][ T4270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.442874][ T4270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.453001][ T4270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.506882][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.528725][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.548069][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.591569][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.613059][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.654967][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.683624][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.732802][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.746075][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.777023][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.788567][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.819083][ T4394] loop3: detected capacity change from 0 to 2048
[   85.847388][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.945946][ T4394] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   85.976576][ T4399] loop4: detected capacity change from 0 to 64
[   86.009646][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.018134][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.026549][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   86.035323][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   86.044419][    T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!!
[   86.053027][    T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!!
[   86.062206][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   86.070980][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   86.079283][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   86.089154][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   86.200698][ T4399] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[   87.086219][   T14] cfg80211: failed to load regulatory.db
[   89.159239][ T4392] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   89.999208][ T4392] usb 4-1: Using ep0 maxpacket: 32
[   90.016450][ T4392] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[   90.040376][ T4392] usb 4-1: config 0 has no interface number 0
[   90.315110][ T4392] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   90.435375][ T4435] lo speed is unknown, defaulting to 1000
[   90.441776][ T4435] lo speed is unknown, defaulting to 1000
[   90.454881][ T4435] lo speed is unknown, defaulting to 1000
[   90.487592][ T4435] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   90.504930][ T4435] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98
[   91.928594][ T4435] lo speed is unknown, defaulting to 1000
[   91.935745][ T4435] lo speed is unknown, defaulting to 1000
[   91.942531][ T4435] lo speed is unknown, defaulting to 1000
[   91.949555][ T4435] lo speed is unknown, defaulting to 1000
[   91.957094][ T4435] lo speed is unknown, defaulting to 1000
[   91.973716][ T4392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.999163][ T4392] usb 4-1: Product: syz
[   92.009370][ T4392] usb 4-1: Manufacturer: syz
[   92.034435][ T4392] usb 4-1: SerialNumber: syz
[   92.082354][ T4392] usb 4-1: config 0 descriptor??
[   92.145222][ T4392] usb 4-1: can't set config #0, error -71
[   92.208741][ T4442] loop2: detected capacity change from 0 to 16
[   92.250666][ T4392] usb 4-1: USB disconnect, device number 2
[   92.301459][ T4442] erofs: (device loop2): mounted with root inode @ nid 36.
[   92.749494][ T2120] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   92.989298][ T2120] usb 5-1: Using ep0 maxpacket: 8
[   93.132100][ T2120] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   93.192401][ T2120] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[   93.259158][ T2120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.315830][ T2120] usb 5-1: config 0 descriptor??
[   93.316309][ T4452] loop0: detected capacity change from 0 to 2048
[   93.398556][ T2120] usb 5-1: can't set config #0, error -71
[   93.432411][ T4452] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.436449][ T2120] usb 5-1: USB disconnect, device number 2
[   94.026518][ T4441] loop1: detected capacity change from 0 to 32768
[   94.140883][   T27] audit: type=1800 audit(1753180830.512:2): pid=4441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.15" name="file1" dev="loop1" ino=4 res=0 errno=0
[   94.670115][ T4466] loop0: detected capacity change from 0 to 1024
[   94.841422][ T4466] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   95.561278][ T4319] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   95.678481][ T4456] loop4: detected capacity change from 0 to 32768
[   95.756433][ T4456] XFS: attr2 mount option is deprecated.
[   95.774186][ T4319] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.815134][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   95.884509][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[   95.934713][ T4319] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[   96.013521][ T4319] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   96.034553][ T4268] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[   96.062820][ T4319] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   96.085574][ T4268] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[   96.107861][ T4319] usb 4-1: Manufacturer: syz
[   96.136034][ T4456] XFS (loop4): Mounting V5 Filesystem
[   96.178722][ T4319] usb 4-1: config 0 descriptor??
[   96.319155][ T4456] XFS (loop4): Ending clean mount
[   96.435054][ T4456] XFS (loop4): Quotacheck needed: Please wait.
[   96.784389][ T4456] XFS (loop4): Quotacheck: Done.
[   97.374101][ T4269] XFS (loop4): Unmounting Filesystem
[   97.394266][ T4319] rc_core: IR keymap rc-hauppauge not found
[   97.403353][ T4319] Registered IR keymap rc-empty
[   97.419449][ T4319] mceusb 4-1:0.0: Error: mce write urb status = -71
[   97.431523][ T4489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.28'.
[   97.445178][ T4489] device bridge0 entered promiscuous mode
[   97.452828][ T4489] bridge0: port 3(macvlan2) entered blocking state
[   97.459506][ T4489] bridge0: port 3(macvlan2) entered disabled state
[   97.478157][ T4319] mceusb 4-1:0.0: Error: mce write urb status = -71
[   97.510825][ T4489] device bridge0 left promiscuous mode
[   97.552402][ T4319] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[   97.572984][ T4319] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5
[   97.589662][ T4268] EXT4-fs (loop0): unmounting filesystem.
[   97.649436][ T4319] mceusb 4-1:0.0: Error: mce write urb status = -71
[   97.680761][ T4493] lo speed is unknown, defaulting to 1000
[   97.689904][ T4319] mceusb 4-1:0.0: Error: mce write urb status = -71
[   97.729578][ T4319] mceusb 4-1:0.0: Error: mce write urb status = -71
[   97.759500][ T4319] mceusb 4-1:0.0: Error: mce write urb status = -71
[   97.789498][ T4319] mceusb 4-1:0.0: Error: mce write urb status = -71
[   97.839361][ T4319] mceusb 4-1:0.0: Error: mce write urb status = -71
[   97.880979][ T4319] mceusb 4-1:0.0: Error: mce write urb status = -71
[   97.919883][ T4319] mceusb 4-1:0.0: Error: mce write urb status = -71
[   97.979479][ T4319] mceusb 4-1:0.0: Error: mce write urb status = -71
[   98.022673][ T4319] mceusb 4-1:0.0: Error: mce write urb status = -71
[   98.055877][ T4369] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.070796][ T4319] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   98.099171][ T4319] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   98.159219][ T4319] usb 4-1: USB disconnect, device number 3
[   98.229066][ T4369] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.300241][ T4500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'.
[   98.324641][ T4500] veth0_macvtap: Device is already in use.
[   98.399033][ T4369] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.634551][ T4369] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.850235][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   99.860594][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   99.875509][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   99.886757][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   99.898940][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   99.907684][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  100.181804][ T4512] lo speed is unknown, defaulting to 1000
[  100.682319][ T4520] loop4: detected capacity change from 0 to 4096
[  101.447202][ T4508] loop3: detected capacity change from 0 to 32768
[  101.528029][   T27] audit: type=1800 audit(1753180837.892:3): pid=4508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.35" name="file1" dev="loop3" ino=4 res=0 errno=0
[  101.590107][ T4536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39'.
[  101.929435][ T4285] Bluetooth: hci0: command 0x0409 tx timeout
[  102.229968][ T4531] loop1: detected capacity change from 0 to 40427
[  102.297897][ T4531] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff
[  102.437299][ T4531] F2FS-fs (loop1): invalid crc value
[  102.495118][ T4531] F2FS-fs (loop1): Found nat_bits in checkpoint
[  102.935368][ T4531] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  103.121289][   T27] audit: type=1800 audit(1753180839.492:4): pid=4531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.38" name="file1" dev="loop1" ino=10 res=0 errno=0
[  103.667872][ T4553] F2FS-fs (loop1) : inject no more block in inc_valid_block_count of __allocate_data_block+0x479/0x9f0
[  103.969119][    C1] sched: RT throttling activated
[  104.009938][ T4285] Bluetooth: hci0: command 0x041b tx timeout
[  104.084668][ T4512] chnl_net:caif_netlink_parms(): no params data found
[  104.109750][ T4541] loop4: detected capacity change from 0 to 262144
[  104.117096][ T4541] =======================================================
[  104.117096][ T4541] WARNING: The mand mount option has been deprecated and
[  104.117096][ T4541]          and is ignored by this kernel. Remove the mand
[  104.117096][ T4541]          option from the mount to silence this warning.
[  104.117096][ T4541] =======================================================
[  104.156388][ T4541] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.41 (4541)
[  104.230553][ T4541] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  104.241265][ T4541] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  104.250669][ T4541] BTRFS info (device loop4): using free space tree
[  104.710253][ T4541] BTRFS info (device loop4): enabling ssd optimizations
[  105.577953][ T4269] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  105.652598][ T4575] netlink: 16 bytes leftover after parsing attributes in process `syz.3.42'.
[  105.665754][ T4575] device bridge0 entered promiscuous mode
[  105.673061][ T4575] bridge0: port 3(macvlan2) entered blocking state
[  105.679728][ T4575] bridge0: port 3(macvlan2) entered disabled state
[  105.700489][ T4575] device bridge0 left promiscuous mode
[  105.730562][ T4454] Set syz1 is full, maxelem 65536 reached
[  106.089311][ T4285] Bluetooth: hci0: command 0x040f tx timeout
[  106.282411][ T4589] netlink: 76 bytes leftover after parsing attributes in process `syz.2.44'.
[  107.189801][ T4369] device hsr_slave_0 left promiscuous mode
[  107.199820][ T4369] device hsr_slave_1 left promiscuous mode
[  107.260429][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.261346][ T4271] syz-executor: attempt to access beyond end of device
[  107.261346][ T4271] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  107.267958][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.352966][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.390210][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.443469][ T4403] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 9 /dev/loop4 scanned by udevd (4403)
[  107.448015][ T4369] device bridge_slave_1 left promiscuous mode
[  107.500781][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.550683][ T4369] device bridge_slave_0 left promiscuous mode
[  107.557020][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.778972][ T4369] device veth1_macvtap left promiscuous mode
[  107.800660][ T4585] loop3: detected capacity change from 0 to 32768
[  107.812433][ T4369] device veth0_macvtap left promiscuous mode
[  107.839539][ T4369] device veth1_vlan left promiscuous mode
[  107.853813][ T4369] device veth0_vlan left promiscuous mode
[  109.846233][ T4285] Bluetooth: hci0: command 0x0419 tx timeout
[  111.616320][ T4631] loop3: detected capacity change from 0 to 128
[  111.646171][ T4631] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4558: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  111.710712][ T4631] EXT4-fs (loop3): Encoding requested by superblock is unknown
[  112.191282][ T4396] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  113.323819][ T4633] loop1: detected capacity change from 0 to 262144
[  113.340557][ T4631] loop3: detected capacity change from 0 to 764
[  113.341476][ T4396] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  113.384315][ T4633] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  115.016796][ T4405] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  115.773045][ T4636] loop3: detected capacity change from 0 to 32768
[  115.945920][   T27] audit: type=1800 audit(1753180852.312:5): pid=4636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.55" name="file1" dev="loop3" ino=4 res=0 errno=0
[  116.191533][ T4369] team0 (unregistering): Port device team_slave_1 removed
[  116.291958][ T4369] team0 (unregistering): Port device team_slave_0 removed
[  116.444744][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.614986][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.853525][ T4643] loop2: detected capacity change from 0 to 32768
[  116.880201][ T4643] gfs2: Bad value for 'quota'
[  117.477352][ T4654] process 'syz.2.60' launched './file0' with NULL argv: empty string added
[  118.355328][ T4650] loop3: detected capacity change from 0 to 40427
[  118.379901][ T4650] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  118.386734][ T4650] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  118.455850][ T4650] F2FS-fs (loop3): Found nat_bits in checkpoint
[  118.578958][ T4650] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  118.593280][ T4650] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  118.642197][ T4650] syz.3.59: attempt to access beyond end of device
[  118.642197][ T4650] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  118.727322][ T4275] syz-executor: attempt to access beyond end of device
[  118.727322][ T4275] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  118.914604][ T4369] bond0 (unregistering): Released all slaves
[  119.013793][ T4512] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.041940][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.050418][ T4512] device bridge_slave_0 entered promiscuous mode
[  119.072358][ T4609] device team0 entered promiscuous mode
[  119.077966][ T4609] device team_slave_0 entered promiscuous mode
[  119.094454][ T4609] device team_slave_1 entered promiscuous mode
[  119.135496][ T4640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.54'.
[  119.136311][ T4312] lo speed is unknown, defaulting to 1000
[  119.149331][ T4640] device bridge0 entered promiscuous mode
[  119.157829][ T4640] bridge0: port 3(macvlan2) entered blocking state
[  119.164546][ T4640] bridge0: port 3(macvlan2) entered disabled state
[  119.180680][ T4640] device bridge0 left promiscuous mode
[  119.279967][ T4512] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.287129][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.298336][ T4512] device bridge_slave_1 entered promiscuous mode
[  119.464994][ T4668] loop4: detected capacity change from 0 to 128
[  119.490368][ T4668] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4558: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  119.579309][ T4668] EXT4-fs (loop4): Encoding requested by superblock is unknown
[  120.999303][ T4512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  121.062255][ T4668] loop4: detected capacity change from 0 to 764
[  121.400054][ T4680] loop1: detected capacity change from 0 to 40427
[  121.419752][ T4680] F2FS-fs (loop1): invalid crc value
[  121.431110][ T4680] F2FS-fs (loop1): Found nat_bits in checkpoint
[  121.474079][ T4680] F2FS-fs (loop1): Start checkpoint disabled!
[  121.495885][ T4680] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  121.538532][ T4670] loop3: detected capacity change from 0 to 262144
[  121.548496][ T4670] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  122.353191][ T4403] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  122.372073][ T4512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.353988][ T4711] loop2: detected capacity change from 0 to 16
[  127.387217][ T4512] team0: Port device team_slave_0 added
[  127.407753][ T4512] team0: Port device team_slave_1 added
[  127.461896][ T4711] erofs: (device loop2): mounted with root inode @ nid 36.
[  127.721619][ T4512] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.735966][ T4512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.763449][ T4512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.776423][ T4512] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.783880][ T4512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.419133][    T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  128.975136][ T4512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.184039][    T7] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  129.395929][   T11] kworker/u4:1: attempt to access beyond end of device
[  129.395929][   T11] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  129.410254][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.418286][    T7] usb 4-1: Product: syz
[  129.423688][    T7] usb 4-1: Manufacturer: syz
[  129.428322][    T7] usb 4-1: SerialNumber: syz
[  129.442285][   T11] kworker/u4:1: attempt to access beyond end of device
[  129.442285][   T11] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  129.461145][    T7] usb 4-1: config 0 descriptor??
[  129.474689][    T7] ch341 4-1:0.0: ch341-uart converter detected
[  129.584531][ T4512] device hsr_slave_0 entered promiscuous mode
[  129.639787][ T4512] device hsr_slave_1 entered promiscuous mode
[  129.799511][ T4512] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  129.808267][ T4512] Cannot create hsr debugfs directory
[  130.285341][ T4732] loop4: detected capacity change from 0 to 128
[  130.307742][ T4732] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4558: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  130.352198][ T4732] EXT4-fs (loop4): Encoding requested by superblock is unknown
[  130.425076][ T4512] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  130.446339][ T4732] loop4: detected capacity change from 0 to 764
[  130.447392][ T4396] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  130.646447][    T7] usb 4-1: failed to send control message: -71
[  130.663287][    T7] ch341-uart: probe of ttyUSB0 failed with error -71
[  130.674117][    T7] usb 4-1: USB disconnect, device number 4
[  130.681765][    T7] ch341 4-1:0.0: device disconnected
[  130.713328][ T4737] loop1: detected capacity change from 0 to 256
[  130.726551][ T4512] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  130.771318][ T4512] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  131.001764][ T4512] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  132.370489][ T4744] lo speed is unknown, defaulting to 1000
[  132.376325][ T4744] lo speed is unknown, defaulting to 1000
[  132.383738][ T4744] lo speed is unknown, defaulting to 1000
[  132.396503][ T4744] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98
[  132.416193][ T4744] lo speed is unknown, defaulting to 1000
[  132.423243][ T4744] lo speed is unknown, defaulting to 1000
[  132.430158][ T4744] lo speed is unknown, defaulting to 1000
[  132.437398][ T4744] lo speed is unknown, defaulting to 1000
[  132.444294][ T4744] lo speed is unknown, defaulting to 1000
[  132.731184][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  132.737988][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  134.215645][ T4760] loop2: detected capacity change from 0 to 262144
[  134.243163][ T4760] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  134.258053][ T4760] overlayfs: failed to resolve './bus': -2
[  136.875476][ T4512] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.074897][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  137.112887][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  137.177069][ T4512] 8021q: adding VLAN 0 to HW filter on device team0
[  137.202009][ T4403] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  137.224765][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  137.251295][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  137.309832][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.316987][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.451541][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  137.496515][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  137.557965][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  137.609339][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.616490][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.705639][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  137.790546][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  137.889704][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  137.967867][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  138.037395][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  138.108614][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  138.185708][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  138.235011][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  138.261535][ T4778] sctp: failed to load transform for md5: -2
[  138.334347][ T4512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  138.441346][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  138.623573][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  138.632976][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  138.846982][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  138.978740][ T4773] loop3: detected capacity change from 0 to 32768
[  139.093652][ T4773] XFS (loop3): Mounting V5 Filesystem
[  139.499000][ T4773] XFS (loop3): Ending clean mount
[  139.531783][ T4773] XFS (loop3): Quotacheck needed: Please wait.
[  139.769673][ T4811] netlink: 68 bytes leftover after parsing attributes in process `syz.1.89'.
[  140.206722][ T4773] XFS (loop3): Quotacheck: Done.
[  140.341122][ T4275] XFS (loop3): Unmounting Filesystem
[  140.837813][ T4820] input: syz1 as /devices/virtual/input/input6
[  140.911456][   T27] audit: type=1326 audit(1753180877.282:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4817 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f878e9a9 code=0x7ffc0000
[  141.031829][ T4824] siw: device registration error -23
[  141.455584][   T27] audit: type=1326 audit(1753180877.282:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4817 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f878e9a9 code=0x7ffc0000
[  141.739289][   T27] audit: type=1326 audit(1753180877.282:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4817 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f85f878e9a9 code=0x7ffc0000
[  141.762141][   T27] audit: type=1326 audit(1753180877.282:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4817 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f878e9a9 code=0x7ffc0000
[  141.784608][   T27] audit: type=1326 audit(1753180877.282:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4817 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f85f878e9a9 code=0x7ffc0000
[  141.806944][   T27] audit: type=1326 audit(1753180877.282:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4817 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f878e9a9 code=0x7ffc0000
[  141.849208][   T27] audit: type=1326 audit(1753180877.282:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4817 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f85f878e9a9 code=0x7ffc0000
[  142.165121][   T27] audit: type=1326 audit(1753180877.282:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4817 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f878e9a9 code=0x7ffc0000
[  142.224317][ T4828] loop3: detected capacity change from 0 to 764
[  143.331878][ T4512] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.368292][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  143.421988][ T4841] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  143.459575][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  143.704135][ T4846] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.171937][ T4312] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  144.384421][ T4312] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  144.422187][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.529748][ T4312] usb 4-1: config 0 descriptor??
[  145.205441][ T4838] loop4: detected capacity change from 0 to 262144
[  145.291396][ T4838] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  145.301701][ T4838] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  145.311030][ T4838] BTRFS info (device loop4): using free space tree
[  145.572423][ T4312] usb 4-1: Cannot set autoneg
[  145.582163][ T4312] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -61
[  145.942046][ T4427] usb 4-1: USB disconnect, device number 5
[  146.106952][ T4838] BTRFS info (device loop4): enabling ssd optimizations
[  146.206020][ T4887] overlayfs: failed to resolve './bus': -2
[  146.495597][ T4269] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  146.625443][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  146.635387][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  146.720052][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  146.735169][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  146.787692][ T4512] device veth0_vlan entered promiscuous mode
[  146.801368][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  146.844704][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  147.004225][ T4512] device veth1_vlan entered promiscuous mode
[  147.629400][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  147.647987][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  147.720224][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  147.740281][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  147.773720][ T4512] device veth0_macvtap entered promiscuous mode
[  147.850149][ T4512] device veth1_macvtap entered promiscuous mode
[  147.941395][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.973528][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.997114][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.028124][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.057695][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.097723][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.143274][ T4890] loop2: detected capacity change from 0 to 32768
[  148.154807][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.185468][ T4890] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.103 (4890)
[  148.207375][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.254827][ T4512] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.280465][ T4890] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  148.320783][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  148.337991][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  148.352816][ T4890] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  148.384872][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  148.401531][ T4890] BTRFS info (device loop2): using free space tree
[  148.443175][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  148.475984][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.523914][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.593571][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.679179][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.689822][ T4890] BTRFS info (device loop2): enabling ssd optimizations
[  148.702906][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.742910][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.783443][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.829211][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.895593][ T4512] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.933747][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  148.957981][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  149.001464][ T4512] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.033167][ T4512] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.082599][ T4512] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.145047][ T4512] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.313370][ T4270] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  149.983489][ T4705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.106515][ T4705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.180751][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  150.198007][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.220839][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.338835][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  150.980375][ T4949] sctp: failed to load transform for md5: -2
[  151.125051][ T4960] loop5: detected capacity change from 0 to 4096
[  151.137945][ T4966] loop4: detected capacity change from 0 to 128
[  151.294473][ T4966] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  151.319245][ T4966] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  151.583699][ T4971] Zero length message leads to an empty skb
[  151.873233][ T4955] loop3: detected capacity change from 0 to 32768
[  151.892794][ T4269] EXT4-fs (loop4): unmounting filesystem.
[  151.906042][ T4955] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.109 (4955)
[  152.047593][ T4955] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  152.196079][ T4955] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  152.248363][ T4957] loop1: detected capacity change from 0 to 32768
[  152.251710][ T4984] overlayfs: conflicting options: userxattr,redirect_dir=follow
[  152.259635][ T4955] BTRFS info (device loop3): force clearing of disk cache
[  152.448662][ T4957] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.110 (4957)
[  152.464631][ T4955] BTRFS info (device loop3): enabling auto defrag
[  152.887483][ T4955] BTRFS info (device loop3): max_inline at 0
[  153.037171][ T4955] BTRFS info (device loop3): enabling disk space caching
[  153.078938][ T4955] BTRFS info (device loop3): disk space caching is enabled
[  153.258643][ T4992] loop2: detected capacity change from 0 to 1024
[  154.535709][ T4955] BTRFS error (device loop3): open_ctree failed: -12
[  154.816287][ T4384] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4384)
[  155.268967][ T5032] overlayfs: failed to resolve './file0': -2
[  156.964936][ T5049] loop5: detected capacity change from 0 to 40427
[  156.976290][ T5049] F2FS-fs (loop5): invalid crc value
[  157.020910][ T5049] F2FS-fs (loop5): Found nat_bits in checkpoint
[  157.133066][ T5049] F2FS-fs (loop5): Start checkpoint disabled!
[  157.269181][ T5049] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  159.749278][ T5072] siw: device registration error -23
[  160.358491][   T56] kworker/u4:4: attempt to access beyond end of device
[  160.358491][   T56] loop5: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  160.360558][ T5077] loop4: detected capacity change from 0 to 256
[  160.426922][    T9] kworker/u4:0: attempt to access beyond end of device
[  160.426922][    T9] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  160.451502][ T5077] exfat: Deprecated parameter 'namecase'
[  160.510007][ T5077] exfat: Deprecated parameter 'utf8'
[  160.550520][ T5077] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  161.436190][ T5079] loop1: detected capacity change from 0 to 32768
[  161.551366][   T27] audit: type=1800 audit(1753180897.922:14): pid=5093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.136" name="file1" dev="loop1" ino=4 res=0 errno=0
[  161.685727][ T5071] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  162.125523][ T5082] loop4: detected capacity change from 0 to 32768
[  162.224163][ T5082] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  162.396037][ T5082] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  164.041804][ T5082] BTRFS info (device loop4): using free space tree
[  164.644368][ T5137] fuse: Bad value for 'fd'
[  164.812139][ T5082] BTRFS error (device loop4): open_ctree failed: -12
[  164.869251][ T5020] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  165.267895][ T5145] loop5: detected capacity change from 0 to 32768
[  165.299087][ T5020] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  166.113057][ T4396] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4396)
[  166.168013][ T5020] usb 2-1: config 0 has no interface number 0
[  166.174632][ T5020] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.185795][ T5020] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.195815][ T5020] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  166.205140][ T5020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.216261][ T5020] usb 2-1: config 0 descriptor??
[  166.310003][ T5151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'.
[  166.382563][ T5142] loop3: detected capacity change from 0 to 4096
[  166.530142][ T5142] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  166.643198][ T5020] prodikeys 0003:041E:2801.0001: item fetching failed at offset 6/7
[  166.739775][ T5020] prodikeys 0003:041E:2801.0001: hid parse failed
[  166.807659][ T5020] prodikeys: probe of 0003:041E:2801.0001 failed with error -22
[  166.882402][ T5163] ntfs3: loop3: ino=5, "/" directory corrupted
[  166.983194][ T5020] usb 2-1: USB disconnect, device number 2
[  168.286038][ T5177] siw: device registration error -23
[  169.088133][ T5160] netlink: 16 bytes leftover after parsing attributes in process `syz.5.151'.
[  169.126862][ T5160] device bridge0 entered promiscuous mode
[  169.155323][ T5182] fuse: Bad value for 'fd'
[  169.191189][ T5160] bridge0: port 3(macvlan2) entered blocking state
[  169.279883][ T5160] bridge0: port 3(macvlan2) entered disabled state
[  169.380159][ T5160] device bridge0 left promiscuous mode
[  171.851586][ T5200] loop3: detected capacity change from 0 to 32768
[  172.405026][ T5204] loop2: detected capacity change from 0 to 16
[  172.556350][ T5204] erofs: (device loop2): mounted with root inode @ nid 36.
[  172.712504][ T5209] loop4: detected capacity change from 0 to 8
[  172.795673][ T5211] autofs4:pid:5211:autofs_fill_super: called with bogus options
[  172.971325][ T5209] unable to read xattr id index table
[  173.338825][ T5220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'.
[  173.980789][ T5227] fuse: Bad value for 'fd'
[  174.541986][ T5232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.171'.
[  174.553336][ T5231] overlayfs: overlapping lowerdir path
[  175.896485][ T5251] autofs4:pid:5251:autofs_fill_super: called with bogus options
[  176.878868][ T5235] loop5: detected capacity change from 0 to 32768
[  177.010562][   T27] audit: type=1800 audit(1753180913.382:15): pid=5261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.173" name="file1" dev="loop5" ino=4 res=0 errno=0
[  177.259566][ T5263] loop4: detected capacity change from 0 to 16
[  177.304870][ T5263] erofs: (device loop4): mounted with root inode @ nid 36.
[  177.458926][ T5245] loop1: detected capacity change from 0 to 32768
[  179.288676][ T5245] (syz.1.176,5245,0):ocfs2_initialize_super:2286 ERROR: status = -12
[  179.330014][ T5245] (syz.1.176,5245,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70
[  179.502419][ T5245] (syz.1.176,5245,1):ocfs2_fill_super:1176 ERROR: status = -12
[  179.714202][ T5277] netlink: 16 bytes leftover after parsing attributes in process `syz.4.181'.
[  179.738701][ T5277] device bridge0 entered promiscuous mode
[  179.749112][ T5277] bridge0: port 3(macvlan2) entered blocking state
[  179.755796][ T5277] bridge0: port 3(macvlan2) entered disabled state
[  179.867807][ T5277] device bridge0 left promiscuous mode
[  180.506852][ T5281] loop1: detected capacity change from 0 to 16
[  180.712023][ T5281] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  183.549636][ T5314] loop2: detected capacity change from 0 to 40427
[  183.580592][ T5314] F2FS-fs (loop2): invalid crc value
[  183.608868][ T5314] F2FS-fs (loop2): Found nat_bits in checkpoint
[  183.642536][ T5314] F2FS-fs (loop2): Start checkpoint disabled!
[  183.652127][ T5314] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  184.239246][ T5315] autofs4:pid:5315:autofs_fill_super: called with bogus options
[  184.416969][ T5329] loop5: detected capacity change from 0 to 16
[  184.494769][ T5329] erofs: (device loop5): mounted with root inode @ nid 36.
[  184.753752][ T4505] kworker/u4:12: attempt to access beyond end of device
[  184.753752][ T4505] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  184.870717][ T5296] kworker/u4:18: attempt to access beyond end of device
[  184.870717][ T5296] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  185.821980][ T5344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.196'.
[  185.835164][ T5344] device bridge0 entered promiscuous mode
[  185.842449][ T5344] bridge0: port 3(macvlan2) entered blocking state
[  185.849270][ T5344] bridge0: port 3(macvlan2) entered disabled state
[  186.128331][ T5347] loop5: detected capacity change from 0 to 128
[  186.207711][ T5347] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4558: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  186.312109][ T5347] EXT4-fs (loop5): Encoding requested by superblock is unknown
[  186.342165][ T5344] device bridge0 left promiscuous mode
[  187.293017][ T5356] input: syz1 as /devices/virtual/input/input8
[  190.979783][ T5387] loop4: detected capacity change from 0 to 40427
[  191.054250][ T5387] F2FS-fs (loop4): invalid crc value
[  191.070957][ T5387] F2FS-fs (loop4): Found nat_bits in checkpoint
[  191.147379][ T5387] F2FS-fs (loop4): Start checkpoint disabled!
[  191.159839][ T5387] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  191.942995][ T5400] binder_alloc: 5398: binder_alloc_buf, no vma
[  191.972466][ T5403] loop5: detected capacity change from 0 to 128
[  192.004364][   T11] kworker/u4:1: attempt to access beyond end of device
[  192.004364][   T11] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  192.046666][ T5403] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4558: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  192.071642][   T11] kworker/u4:1: attempt to access beyond end of device
[  192.071642][   T11] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  192.105706][ T5403] EXT4-fs (loop5): Encoding requested by superblock is unknown
[  192.207028][ T5403] loop5: detected capacity change from 0 to 764
[  192.270012][ T4396] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  194.026829][ T5409] loop3: detected capacity change from 0 to 262144
[  194.074271][ T5409] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.212 (5409)
[  194.105263][ T5409] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  194.115486][ T5409] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  194.124743][ T5409] BTRFS info (device loop3): using free space tree
[  194.172112][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  194.179036][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  194.269168][ T5409] BTRFS info (device loop3): enabling ssd optimizations
[  194.655796][ T4275] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  195.658095][ T5435] loop5: detected capacity change from 0 to 32768
[  195.819977][ T5162] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 10 /dev/loop3 scanned by udevd (5162)
[  195.834838][ T5435] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  195.896920][ T5435] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  195.992776][ T5449] input: syz1 as /devices/virtual/input/input9
[  196.120355][ T5435] BTRFS info (device loop5): using free space tree
[  197.050037][ T5477] loop2: detected capacity change from 0 to 16
[  197.113854][ T5482] binder_alloc: 5481: binder_alloc_buf, no vma
[  197.156719][ T5477] erofs: (device loop2): mounted with root inode @ nid 36.
[  197.402060][ T5435] BTRFS error (device loop5): open_ctree failed: -22
[  199.491196][ T5471] loop4: detected capacity change from 0 to 32768
[  200.333914][ T4281] Bluetooth: hci0: unexpected event for opcode 0x0000
[  200.439303][ T5522] input: syz1 as /devices/virtual/input/input10
[  200.795663][ T5532] loop3: detected capacity change from 0 to 16
[  200.829459][ T5532] erofs: (device loop3): mounted with root inode @ nid 36.
[  201.541720][ T5537] siw: device registration error -23
[  201.724344][ T4285] Bluetooth: hci3: command 0x0406 tx timeout
[  201.730450][ T4277] Bluetooth: hci4: command 0x0406 tx timeout
[  201.736523][ T4281] Bluetooth: hci1: command 0x0406 tx timeout
[  202.129387][ T4272] Bluetooth: hci2: command 0x0406 tx timeout
[  203.791119][ T5542] loop5: detected capacity change from 0 to 32768
[  203.869430][ T5542] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.235 (5542)
[  203.945921][ T5542] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  204.889695][ T5542] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  204.898401][ T5542] BTRFS info (device loop5): using free space tree
[  205.072437][ T5551] loop3: detected capacity change from 0 to 32768
[  206.157283][ T5542] BTRFS error (device loop5): open_ctree failed: -12
[  206.269205][ T4403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (4403)
[  206.426343][ T5607] overlayfs: overlapping lowerdir path
[  208.821603][ T4272] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  208.830411][ T4272] Bluetooth: hci2: Injecting HCI hardware error event
[  208.839093][ T4272] Bluetooth: hci2: hardware error 0x00
[  212.676290][ T4272] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  212.993202][ T5654] loop4: detected capacity change from 0 to 128
[  213.070894][ T5654] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4558: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  213.134401][ T5636] loop2: detected capacity change from 0 to 32768
[  213.135383][ T5654] EXT4-fs (loop4): Encoding requested by superblock is unknown
[  213.310652][   T27] audit: type=1800 audit(1753180949.682:16): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.253" name="file1" dev="loop2" ino=4 res=0 errno=0
[  213.624435][ T5654] loop4: detected capacity change from 0 to 764
[  213.681694][ T4396] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  214.559672][ T5667] loop1: detected capacity change from 0 to 16
[  214.596998][ T5667] erofs: (device loop1): mounted with root inode @ nid 36.
[  220.389654][ T5706] fuse: Unknown parameter 'use00000000000000000000'
[  220.540199][ T5702] overlayfs: overlapping lowerdir path
[  220.561308][ T5716] loop2: detected capacity change from 0 to 16
[  220.598682][ T5716] erofs: (device loop2): mounted with root inode @ nid 36.
[  222.164718][ T5711] loop5: detected capacity change from 0 to 32768
[  223.026963][ T5728] loop1: detected capacity change from 0 to 32768
[  223.105704][ T5728] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  223.213464][ T5728] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  223.238403][ T5721] loop3: detected capacity change from 0 to 40427
[  223.257494][ T5728] BTRFS info (device loop1): using free space tree
[  223.297847][ T5721] F2FS-fs (loop3): invalid crc value
[  223.335702][ T5721] F2FS-fs (loop3): Found nat_bits in checkpoint
[  223.529249][ T5728] BTRFS info (device loop1): enabling ssd optimizations
[  223.594698][ T5728] overlayfs: missing 'lowerdir'
[  223.675448][ T5721] F2FS-fs (loop3): Start checkpoint disabled!
[  223.693047][ T5733] loop2: detected capacity change from 0 to 32768
[  223.889426][   T27] audit: type=1800 audit(1753180960.252:17): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.276" name="file1" dev="loop2" ino=4 res=0 errno=0
[  224.119481][ T4271] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  225.861262][ T5792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.284'.
[  225.874440][ T5792] device bridge0 entered promiscuous mode
[  225.881687][ T5792] bridge0: port 3(macvlan2) entered blocking state
[  225.888274][ T5792] bridge0: port 3(macvlan2) entered disabled state
[  227.239667][ T5792] device bridge0 left promiscuous mode
[  229.873916][ T5834] overlayfs: overlapping lowerdir path
[  230.271793][ T5805] loop1: detected capacity change from 0 to 32768
[  230.611365][ T5842] lo speed is unknown, defaulting to 1000
[  232.039182][ T5856] netlink: 76 bytes leftover after parsing attributes in process `syz.1.299'.
[  233.046604][ T5863] loop5: detected capacity change from 0 to 1024
[  233.180566][ T5863] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  233.263157][   T27] audit: type=1800 audit(1753180969.632:18): pid=5863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.300" name="bus" dev="loop5" ino=18 res=0 errno=0
[  233.415220][ T4512] EXT4-fs (loop5): unmounting filesystem.
[  236.048974][ T5915] overlayfs: overlapping lowerdir path
[  236.056025][ T5915] overlayfs: missing 'lowerdir'
[  237.416537][ T5900] loop2: detected capacity change from 0 to 40427
[  237.556009][ T5900] F2FS-fs (loop2): invalid crc value
[  237.589412][ T5900] F2FS-fs (loop2): Found nat_bits in checkpoint
[  237.787693][ T5946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.319'.
[  237.800767][ T5946] device bridge0 entered promiscuous mode
[  237.807939][ T5946] bridge0: port 3(macvlan2) entered blocking state
[  237.814581][ T5946] bridge0: port 3(macvlan2) entered disabled state
[  240.438119][ T5946] device bridge0 left promiscuous mode
[  240.837262][ T5900] F2FS-fs (loop2): Start checkpoint disabled!
[  248.719243][ T6033] siw: device registration error -23
[  250.539322][ T6052] tipc: Started in network mode
[  250.572388][ T6052] tipc: Node identity ca24540272b4, cluster identity 4711
[  250.614994][ T6052] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.675138][ T6053] tipc: Resetting bearer <eth:syzkaller0>
[  250.715877][ T6050] tipc: Disabling bearer <eth:syzkaller0>
[  251.035648][ T6045] loop2: detected capacity change from 0 to 32768
[  251.219261][   T27] audit: type=1800 audit(1753180987.582:19): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.353" name="file1" dev="loop2" ino=4 res=0 errno=0
[  252.853804][ T6073] netlink: 76 bytes leftover after parsing attributes in process `syz.1.361'.
[  255.004694][ T6090] loop5: detected capacity change from 0 to 32768
[  255.097211][ T6092] tipc: Started in network mode
[  255.247783][ T6092] tipc: Node identity 8aac867a4c73, cluster identity 4711
[  255.288056][ T6092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  255.611351][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  255.716994][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  256.081004][ T6102] tipc: Resetting bearer <eth:syzkaller0>
[  256.101741][ T6091] tipc: Disabling bearer <eth:syzkaller0>
[  257.389789][ T6118] fuse: Bad value for 'fd'
[  257.644254][ T6123] input: syz0 as /devices/virtual/input/input15
[  258.625820][ T6129] binder: BINDER_SET_CONTEXT_MGR already set
[  258.640387][ T6129] binder: 6127:6129 ioctl 4018620d 200000000040 returned -16
[  258.687929][ T6131] netlink: 76 bytes leftover after parsing attributes in process `syz.2.378'.
[  262.353277][ T6149] loop5: detected capacity change from 0 to 32768
[  262.464235][ T6146] loop1: detected capacity change from 0 to 32768
[  262.511123][ T6146] XFS (loop1): Mounting V5 Filesystem
[  262.681123][ T6146] XFS (loop1): Ending clean mount
[  262.727694][ T6146] XFS (loop1): Quotacheck needed: Please wait.
[  262.864567][ T6146] XFS (loop1): Quotacheck: Done.
[  263.569243][   T27] audit: type=1804 audit(1753180999.922:20): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.382" name="/newroot/77/file0/bus" dev="loop1" ino=9291 res=1 errno=0
[  264.789489][ T4271] XFS (loop1): Unmounting Filesystem
[  264.915963][ T6181] binder: BINDER_SET_CONTEXT_MGR already set
[  264.949625][ T6181] binder: 6180:6181 ioctl 4018620d 200000000040 returned -16
[  265.337243][ T6191] input: syz1 as /devices/virtual/input/input17
[  265.457710][ T6172] loop5: detected capacity change from 0 to 40427
[  265.478498][ T6172] F2FS-fs (loop5): invalid crc value
[  265.528751][ T6172] F2FS-fs (loop5): Found nat_bits in checkpoint
[  265.821252][ T6196] loop3: detected capacity change from 0 to 32768
[  265.950581][ T6199] netlink: 76 bytes leftover after parsing attributes in process `syz.1.391'.
[  266.794883][ T6172] F2FS-fs (loop5): Start checkpoint disabled!
[  268.694030][ T6226] loop1: detected capacity change from 0 to 256
[  268.752083][ T6228] binder: BINDER_SET_CONTEXT_MGR already set
[  268.758131][ T6228] binder: 6225:6228 ioctl 4018620d 200000000040 returned -16
[  268.762769][ T6226] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  268.778846][ T6229] input: syz1 as /devices/virtual/input/input18
[  269.189232][ T6235] netlink: 36 bytes leftover after parsing attributes in process `syz.3.410'.
[  269.405595][ T6236] loop5: detected capacity change from 0 to 40427
[  269.429282][ T6236] F2FS-fs (loop5): invalid crc value
[  269.517331][ T6236] F2FS-fs (loop5): Found nat_bits in checkpoint
[  269.553240][ T6236] F2FS-fs (loop5): Start checkpoint disabled!
[  269.643578][ T6236] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  269.682032][ T6241] autofs4:pid:6241:autofs_fill_super: called with bogus options
[  269.906390][ T6246] netlink: 76 bytes leftover after parsing attributes in process `syz.3.413'.
[  271.769274][ T4425] kworker/u4:9: attempt to access beyond end of device
[  271.769274][ T4425] loop5: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  271.794381][ T4425] kworker/u4:9: attempt to access beyond end of device
[  271.794381][ T4425] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  272.095047][ T6265] input: syz1 as /devices/virtual/input/input19
[  272.559887][ T6274] netlink: 36 bytes leftover after parsing attributes in process `syz.5.423'.
[  273.011692][ T6278] autofs4:pid:6278:autofs_fill_super: called with bogus options
[  273.518311][ T6280] loop2: detected capacity change from 0 to 40427
[  273.553004][ T6280] F2FS-fs (loop2): invalid crc value
[  273.602808][ T6280] F2FS-fs (loop2): Found nat_bits in checkpoint
[  273.644778][ T6280] F2FS-fs (loop2): Start checkpoint disabled!
[  273.703641][ T6280] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  274.107293][ T6269] loop4: detected capacity change from 0 to 262144
[  274.134648][ T6269] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  274.147679][ T6269] overlayfs: missing 'lowerdir'
[  274.435135][ T4426] kworker/u4:10: attempt to access beyond end of device
[  274.435135][ T4426] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  274.617991][ T4426] kworker/u4:10: attempt to access beyond end of device
[  274.617991][ T4426] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  275.638306][ T4403] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  275.924409][ T6296] netlink: 76 bytes leftover after parsing attributes in process `syz.1.431'.
[  277.124510][ T6300] netlink: 188 bytes leftover after parsing attributes in process `syz.2.428'.
[  277.851765][ T6311] loop4: detected capacity change from 0 to 128
[  277.918999][ T6311] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4558: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  277.960032][ T6311] EXT4-fs (loop4): Encoding requested by superblock is unknown
[  278.053724][ T6311] loop4: detected capacity change from 0 to 764
[  278.382482][ T6317] loop2: detected capacity change from 0 to 40427
[  279.518074][ T6320] loop3: detected capacity change from 0 to 262144
[  279.526951][ T4259] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  279.696613][ T6320] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  279.699918][ T6317] F2FS-fs (loop2): invalid crc value
[  279.706838][ T6320] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  279.721537][ T6320] BTRFS info (device loop3): using free space tree
[  280.174885][ T6317] F2FS-fs (loop2): Found nat_bits in checkpoint
[  280.225346][ T6317] F2FS-fs (loop2): Start checkpoint disabled!
[  280.251522][ T4259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.253528][ T6317] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  280.269085][ T4259] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  280.288771][ T4259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.359174][ T4259] usb 2-1: config 0 descriptor??
[  280.594992][ T4259] usbhid 2-1:0.0: can't add hid device: -71
[  280.603288][ T4259] usbhid: probe of 2-1:0.0 failed with error -71
[  280.633720][ T4259] usb 2-1: USB disconnect, device number 3
[  280.668443][ T6320] BTRFS info (device loop3): enabling ssd optimizations
[  280.693974][ T6320] overlayfs: missing 'lowerdir'
[  280.805443][ T4425] kworker/u4:9: attempt to access beyond end of device
[  280.805443][ T4425] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  280.885692][ T4275] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  280.895958][ T4425] kworker/u4:9: attempt to access beyond end of device
[  280.895958][ T4425] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  281.008780][ T6349] netlink: 76 bytes leftover after parsing attributes in process `syz.4.443'.
[  283.029333][ T6372] loop4: detected capacity change from 0 to 16
[  283.063525][ T6372] erofs: (device loop4): mounted with root inode @ nid 36.
[  283.249359][ T5018] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  283.489148][ T5018] usb 3-1: Using ep0 maxpacket: 16
[  283.496193][ T5018] usb 3-1: config 6 has an invalid descriptor of length 191, skipping remainder of the config
[  283.526314][ T6376] fuse: Unknown parameter '0x0000000000000003'
[  283.567414][ T5018] usb 3-1: config 6 has 0 interfaces, different from the descriptor's value: 1
[  283.633660][ T5018] usb 3-1: string descriptor 0 read error: -71
[  283.672035][ T5018] usb 3-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c
[  283.700974][ T5018] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.737730][ T5018] usb 3-1: rejected 1 configuration due to insufficient available bus power
[  283.841303][ T5018] usb 3-1: no configuration chosen from 1 choice
[  283.888439][ T5018] usb 3-1: USB disconnect, device number 2
[  284.341980][ T6389] netlink: 36 bytes leftover after parsing attributes in process `syz.1.455'.
[  284.474219][ T6392] netlink: 76 bytes leftover after parsing attributes in process `syz.2.456'.
[  287.138512][ T6407] loop1: detected capacity change from 0 to 32768
[  287.606736][ T6410] loop2: detected capacity change from 0 to 16
[  287.638521][ T6410] erofs: (device loop2): mounted with root inode @ nid 36.
[  287.835509][ T6413] fuse: Unknown parameter '0x0000000000000003'
[  288.900775][ T6406] loop5: detected capacity change from 0 to 32768
[  289.026741][ T6406] XFS (loop5): Mounting V5 Filesystem
[  289.032557][ T6430] vivid-000: =================  START STATUS  =================
[  289.062119][ T6430] vivid-000: Test Pattern: 75% Colorbar
[  289.075547][ T6430] vivid-000: Fill Percentage of Frame: 100
[  289.086812][ T6430] vivid-000: Horizontal Movement: No Movement
[  289.093392][ T6430] vivid-000: Vertical Movement: No Movement
[  289.099556][ T6430] vivid-000: OSD Text Mode: All
[  289.105248][ T6430] vivid-000: Show Border: false
[  289.110394][ T6430] vivid-000: Show Square: true
[  289.115287][ T6430] vivid-000: Sensor Flipped Horizontally: false
[  289.121819][ T6430] vivid-000: Sensor Flipped Vertically: false
[  289.128001][ T6430] vivid-000: Insert SAV Code in Image: false
[  289.134443][ T6430] vivid-000: Insert EAV Code in Image: false
[  289.140633][ T6430] vivid-000: Insert Video Guard Band: false
[  289.146725][ T6430] vivid-000: Reduced Framerate: false
[  289.152298][ T6430] vivid-000: Enable Capture Cropping: true grabbed
[  289.173639][ T6430] vivid-000: Enable Capture Composing: true grabbed
[  289.187534][ T6430] vivid-000: Enable Capture Scaler: true grabbed
[  289.194295][ T6430] vivid-000: Timestamp Source: End of Frame
[  289.200410][ T6430] vivid-000: Colorspace: sRGB
[  289.205278][ T6430] vivid-000: Transfer Function: Default
[  289.211626][ T6430] vivid-000: Y'CbCr Encoding: Default
[  289.217207][ T6430] vivid-000: HSV Encoding: Hue 0-179
[  289.222680][ T6430] vivid-000: Quantization: Default
[  289.227998][ T6430] vivid-000: Apply Alpha To Red Only: false
[  289.234100][ T6430] vivid-000: Standard Aspect Ratio: 4x3
[  289.239893][ T6430] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  289.247736][ T6430] vivid-000: DV Timings: 640x480p59 inactive
[  289.254059][ T6430] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  289.264877][ T6430] vivid-000: Maximum EDID Blocks: 2
[  289.278607][ T6430] vivid-000: Limited RGB Range (16-235): false
[  289.279622][ T6406] XFS (loop5): Ending clean mount
[  289.301339][ T6430] vivid-000: Rx RGB Quantization Range: Automatic
[  289.322437][ T6430] vivid-000: Power Present: 0x00000001
[  289.346418][ T6430] tpg source WxH: 640x360 (Y'CbCr)
[  289.367298][ T6430] tpg field: 1
[  289.378759][ T6430] tpg crop: 640x360@0x0
[  289.392336][ T6430] tpg compose: 640x360@0x0
[  289.404718][ T6430] tpg colorspace: 8
[  289.426367][ T6430] tpg transfer function: 0/2
[  289.447227][ T6430] tpg Y'CbCr encoding: 0/1
[  289.467417][ T6430] tpg quantization: 0/2
[  289.496782][ T6430] tpg RGB range: 0/2
[  289.521324][ T4512] XFS (loop5): Unmounting Filesystem
[  289.532559][ T6430] vivid-000: ==================  END STATUS  ==================
[  290.856884][ T6419] loop2: detected capacity change from 0 to 32768
[  290.948803][ T6419] XFS (loop2): Mounting V5 Filesystem
[  291.032056][ T6423] loop4: detected capacity change from 0 to 32768
[  291.095107][ T6423] (syz.4.465,6423,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  291.118730][ T6423] (syz.4.465,6423,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  291.158326][ T6419] XFS (loop2): Ending clean mount
[  291.257946][ T6419] XFS (loop2): Quotacheck needed: Please wait.
[  291.316941][ T6449] loop5: detected capacity change from 0 to 4096
[  291.329540][ T6449] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  291.438042][ T6458] siw: device registration error -23
[  291.628850][ T6419] XFS (loop2): Quotacheck: Done.
[  291.853050][ T6423] JBD2: Ignoring recovery information on journal
[  292.077839][ T6449] ntfs3: loop5: failed to convert "076c" to cp932
[  292.169732][ T4270] XFS (loop2): Unmounting Filesystem
[  292.319162][ T6423] JBD2: recovery failed
[  292.323385][ T6423] (syz.4.465,6423,1):ocfs2_journal_load:1134 ERROR: Failed to load journal!
[  292.389085][ T6423] (syz.4.465,6423,1):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5
[  292.428776][ T6423] (syz.4.465,6423,1):ocfs2_check_volume:2489 ERROR: status = -5
[  292.469142][ T6423] (syz.4.465,6423,1):ocfs2_mount_volume:1821 ERROR: status = -5
[  292.544391][ T6423] (syz.4.465,6423,1):ocfs2_fill_super:1176 ERROR: status = -5
[  292.703547][ T6467] loop2: detected capacity change from 0 to 16
[  292.740674][ T6467] erofs: (device loop2): mounted with root inode @ nid 36.
[  293.978560][ T6482] loop4: detected capacity change from 0 to 16
[  294.026775][ T6482] erofs: (device loop4): mounted with root inode @ nid 36.
[  295.547852][ T6500] siw: device registration error -23
[  296.142153][ T6502] loop3: detected capacity change from 0 to 128
[  296.372840][ T6503] syz.3.487: attempt to access beyond end of device
[  296.372840][ T6503] loop3: rw=2049, sector=145, nr_sectors = 264 limit=128
[  296.428962][ T6502] syz.3.487: attempt to access beyond end of device
[  296.428962][ T6502] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128
[  296.854445][ T6511] fuse: Bad value for 'fd'
[  296.858834][ T6512] loop3: detected capacity change from 0 to 16
[  296.894534][ T6512] erofs: (device loop3): mounted with root inode @ nid 36.
[  298.228131][ T6520] loop2: detected capacity change from 0 to 16
[  298.249289][ T6499] loop5: detected capacity change from 0 to 32768
[  298.264429][ T6495] loop1: detected capacity change from 0 to 32768
[  298.306064][ T6520] erofs: (device loop2): mounted with root inode @ nid 36.
[  299.569367][ T6540] siw: device registration error -23
[  299.816576][ T6535] loop1: detected capacity change from 0 to 4096
[  300.526951][ T6547] loop4: detected capacity change from 0 to 16
[  300.549697][ T6547] erofs: (device loop4): mounted with root inode @ nid 36.
[  300.754955][ T6532] loop3: detected capacity change from 0 to 32768
[  300.993144][  T107] read_mapping_page failed!
[  302.254446][ T6548] loop5: detected capacity change from 0 to 32768
[  302.460160][ T6548] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.501 (6548)
[  302.556500][ T6558] fuse: Bad value for 'fd'
[  302.586783][ T6548] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  302.684037][ T6548] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  302.691585][ T6560] loop4: detected capacity change from 0 to 16
[  302.764984][ T6560] erofs: (device loop4): mounted with root inode @ nid 36.
[  302.770331][ T6548] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  302.829123][ T6548] BTRFS info (device loop5): trying to use backup root at mount time
[  303.014364][ T6548] BTRFS info (device loop5): metadata ratio 5
[  303.021294][ T6548] BTRFS info (device loop5): force clearing of disk cache
[  303.028462][ T6548] BTRFS info (device loop5): turning off barriers
[  303.053388][ T6548] BTRFS info (device loop5): turning on async discard
[  303.112816][ T6548] BTRFS info (device loop5): turning off async discard
[  303.187374][ T6548] BTRFS info (device loop5): enabling ssd optimizations
[  303.267679][ T6548] BTRFS info (device loop5): using spread ssd allocation scheme
[  303.338053][ T6548] BTRFS info (device loop5): not using ssd optimizations
[  303.588052][ T6548] BTRFS info (device loop5): not using spread ssd allocation scheme
[  303.607085][ T6548] BTRFS info (device loop5): using free space tree
[  303.708701][ T6591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'.
[  303.728855][ T6591] device bridge0 entered promiscuous mode
[  303.739786][ T6591] bridge0: port 3(macvlan0) entered blocking state
[  303.747578][ T6591] bridge0: port 3(macvlan0) entered disabled state
[  303.895317][ T6590] fuse: Bad value for 'fd'
[  304.309909][ T6591] device bridge0 left promiscuous mode
[  304.806704][ T6548] BTRFS error (device loop5): open_ctree failed: -12
[  305.406236][ T6606] siw: device registration error -23
[  306.217330][ T6609] loop1: detected capacity change from 0 to 4096
[  306.234831][ T6609] ntfs3: Unknown parameter 'windows_names'
[  307.575138][ T6625] loop2: detected capacity change from 0 to 16
[  307.589166][ T4900] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  307.664107][ T6625] erofs: (device loop2): mounted with root inode @ nid 36.
[  308.086539][ T6629] loop4: detected capacity change from 0 to 32768
[  308.093701][ T6629] XFS: ikeep mount option is deprecated.
[  308.197176][ T6629] XFS (loop4): Mounting V5 Filesystem
[  308.279213][ T4900] usb 2-1: Using ep0 maxpacket: 16
[  308.303898][ T4900] usb 2-1: config index 0 descriptor too short (expected 1828, got 36)
[  308.363464][ T4900] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  308.379158][ T4900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  308.392876][ T4900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  308.407405][ T4900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  308.423972][ T4900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  308.464120][ T6629] XFS (loop4): Ending clean mount
[  308.472177][ T6629] XFS (loop4): Quotacheck needed: Please wait.
[  308.493899][ T4900] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[  308.544310][ T4900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.571800][ T4900] usb 2-1: Product: syz
[  308.577425][ T4900] usb 2-1: Manufacturer: syz
[  308.586847][ T4900] usb 2-1: SerialNumber: syz
[  308.671854][ T4900] usb 2-1: config 0 descriptor??
[  308.706219][ T4900] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected
[  308.747174][ T4900] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87
[  308.803738][ T4900] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7
[  308.847788][ T4900] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81
[  308.871376][ T4900] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1
[  308.915367][ T4900] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2
[  308.955434][ T4900] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85
[  308.967767][ T4900] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5
[  309.032301][ T4900] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  309.081194][ T4900] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83
[  309.088968][ T4900] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4
[  309.123039][ T4900] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86
[  309.132863][ T4900] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6
[  309.162168][ T4900] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  309.254420][ T4900] usb 2-1: USB disconnect, device number 4
[  309.318396][ T6629] XFS (loop4): Quotacheck: Done.
[  309.885043][ T4900] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  309.920558][ T4269] XFS (loop4): Unmounting Filesystem
[  310.003437][ T4900] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  310.057189][ T4900] keyspan 2-1:0.0: device disconnected
[  310.288785][ T6652] loop1: detected capacity change from 0 to 512
[  310.308894][ T6652] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  310.340440][ T6652] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  310.376671][ T6652] EXT4-fs (loop1): 1 truncate cleaned up
[  310.383829][ T6652] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  310.414745][ T6652] syz.1.529 (pid 6652) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  310.457765][ T6652] EXT4-fs (loop1): shut down requested (2)
[  310.481151][ T6652] fscrypt (loop1, inode 18): Error -5 getting encryption context
[  310.541968][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  310.634933][ T4943] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  310.836304][ T4943] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  310.865852][ T4943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.886064][ T4943] usb 6-1: Product: syz
[  310.896189][ T4943] usb 6-1: Manufacturer: syz
[  310.916399][ T4943] usb 6-1: SerialNumber: syz
[  310.929800][ T4943] usb 6-1: config 0 descriptor??
[  312.169303][ T4943] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  312.205373][ T4943] asix: probe of 6-1:0.0 failed with error -71
[  312.235735][ T4943] usb 6-1: USB disconnect, device number 2
[  312.254698][ T6675] loop3: detected capacity change from 0 to 16
[  312.306902][ T6675] erofs: (device loop3): mounted with root inode @ nid 36.
[  313.846765][ T6690] loop1: detected capacity change from 0 to 256
[  313.857922][ T6690] exfat: Deprecated parameter 'utf8'
[  313.863688][ T6690] exfat: Deprecated parameter 'utf8'
[  313.871044][ T6690] exfat: Deprecated parameter 'utf8'
[  314.206484][ T6690] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  314.301369][ T6704] netlink: 76 bytes leftover after parsing attributes in process `syz.1.540'.
[  314.323505][ T6702] loop4: detected capacity change from 0 to 512
[  314.416407][ T6702] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  314.509635][ T6702] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  314.578556][ T6702] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.544: corrupted in-inode xattr
[  314.668245][ T6702] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.544: couldn't read orphan inode 15 (err -117)
[  314.683819][ T6710] loop2: detected capacity change from 0 to 1024
[  314.744351][ T6702] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  314.874064][ T6702] EXT4-fs error (device loop4): ext4_check_dx_root:2266: inode #2: comm syz.4.544: Corrupt dir, invalid name_len for '.', running e2fsck is recommended
[  314.894180][ T6710] hfsplus: xattr searching failed
[  314.912481][ T6710] hfsplus: xattr searching failed
[  314.918528][ T6710] hfsplus: xattr searching failed
[  315.079372][ T5021] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  315.097921][ T4269] EXT4-fs (loop4): unmounting filesystem.
[  315.281970][ T5021] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  315.314731][ T5021] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41
[  315.369129][ T5021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.387649][ T5021] usb 4-1: Product: syz
[  315.514039][ T5021] usb 4-1: Manufacturer: syz
[  315.519186][ T5021] usb 4-1: SerialNumber: syz
[  315.533533][ T5021] usb 4-1: config 0 descriptor??
[  315.562577][ T5021] usb 4-1: ucan: probing device on interface #0
[  315.573055][ T5021] usb 4-1: ucan: invalid EP count (0)
[  315.636292][ T6718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.548'.
[  315.649457][ T6718] device bridge0 entered promiscuous mode
[  315.656594][ T6718] bridge0: port 3(macvlan0) entered blocking state
[  315.663246][ T6718] bridge0: port 3(macvlan0) entered disabled state
[  315.703407][ T5021] usb 4-1: ucan: probe failed; try to update the device firmware
[  315.834979][ T5021] usb 4-1: USB disconnect, device number 6
[  316.088750][ T6695] loop5: detected capacity change from 0 to 40427
[  316.256556][ T6695] F2FS-fs (loop5): Unrecognized mount option "18446744073709551615ÿÿ18446744073709551615«¨;§¾÷èB@¬˜\¢DðT_&¦pÁ*%w„" or missing value
[  316.486951][ T6718] device bridge0 left promiscuous mode
[  317.051509][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  317.057921][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  320.320899][ T6744] loop5: detected capacity change from 0 to 40427
[  320.360266][ T6744] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  320.395496][ T6744] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  320.500854][ T6768] loop1: detected capacity change from 0 to 1024
[  320.516325][ T6744] F2FS-fs (loop5): Found nat_bits in checkpoint
[  320.754732][ T6744] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  320.770428][ T6744] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  321.326080][ T6744] overlayfs: './file0' not a directory
[  321.350969][ T6750] loop3: detected capacity change from 0 to 32768
[  321.477950][ T6750] JBD2: Ignoring recovery information on journal
[  322.356325][ T6750] JBD2: recovery failed
[  322.381025][ T6750] (syz.3.558,6750,1):ocfs2_journal_load:1134 ERROR: Failed to load journal!
[  322.445942][ T6750] (syz.3.558,6750,1):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5
[  322.501615][ T6784] overlayfs: overlapping lowerdir path
[  322.560393][ T6785] overlayfs: missing 'lowerdir'
[  322.891813][ T6750] (syz.3.558,6750,0):ocfs2_check_volume:2489 ERROR: status = -5
[  322.955528][ T6750] (syz.3.558,6750,1):ocfs2_mount_volume:1821 ERROR: status = -5
[  322.982162][ T6750] (syz.3.558,6750,1):ocfs2_fill_super:1176 ERROR: status = -5
[  326.182442][ T6833] loop2: detected capacity change from 0 to 128
[  326.243257][ T6833] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4558: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  326.304010][ T6833] EXT4-fs (loop2): Encoding requested by superblock is unknown
[  326.321218][ T6801] loop1: detected capacity change from 0 to 32768
[  326.386202][ T6801] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.571 (6801)
[  326.495154][ T6837] siw: device registration error -23
[  326.497489][ T6833] loop2: detected capacity change from 0 to 764
[  326.699502][ T6801] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  326.815884][ T6801] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  327.172558][ T6801] BTRFS info (device loop1): using free space tree
[  327.546070][ T6801] BTRFS error (device loop1): open_ctree failed: -12
[  327.672159][ T6821] overlayfs: overlapping lowerdir path
[  327.683255][ T4403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4403)
[  327.703639][ T6863] overlayfs: missing 'workdir'
[  330.606040][ T6889] loop3: detected capacity change from 0 to 32768
[  330.671441][ T6890] loop2: detected capacity change from 0 to 8
[  330.713344][ T6890] SQUASHFS error: lzo decompression failed, data probably corrupt
[  330.794346][ T6890] SQUASHFS error: Failed to read block 0x91: -5
[  330.845892][ T6890] SQUASHFS error: Unable to read metadata cache entry [8f]
[  330.879112][ T6890] SQUASHFS error: Unable to read inode 0x11f
[  331.294380][ T6894] siw: device registration error -23
[  332.046250][ T6902] loop4: detected capacity change from 0 to 16
[  332.129930][ T6902] erofs: (device loop4): mounted with root inode @ nid 36.
[  332.355282][ T6897] loop3: detected capacity change from 0 to 32768
[  332.443318][ T6897] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  332.546488][ T6897] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  332.609397][ T6897] BTRFS info (device loop3): using free space tree
[  333.579217][    T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  333.783083][    T7] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  333.868165][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.886777][ T6897] BTRFS info (device loop3): enabling ssd optimizations
[  333.909122][    T7] usb 2-1: Product: syz
[  333.913404][    T7] usb 2-1: Manufacturer: syz
[  333.965113][    T7] usb 2-1: SerialNumber: syz
[  333.987204][    T7] usb 2-1: config 0 descriptor??
[  335.064111][ T4275] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  335.623272][    T7] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  335.659161][    T7] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  335.722087][    T7] asix: probe of 2-1:0.0 failed with error -71
[  335.779791][    T7] usb 2-1: USB disconnect, device number 5
[  336.107846][ T6957] loop4: detected capacity change from 0 to 16
[  336.134744][ T6957] erofs: (device loop4): mounted with root inode @ nid 36.
[  338.667431][ T6970] loop1: detected capacity change from 0 to 32768
[  338.785805][ T6975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.837883][ T6975] tipc: Resetting bearer <eth:syzkaller0>
[  338.909489][ T6978] netlink: 76 bytes leftover after parsing attributes in process `syz.4.616'.
[  338.925965][ T6956] loop5: detected capacity change from 0 to 32768
[  339.021620][ T6971] tipc: Disabling bearer <eth:syzkaller0>
[  340.773525][ T6991] loop3: detected capacity change from 0 to 256
[  340.783589][ T6991] exfat: Deprecated parameter 'utf8'
[  340.788925][ T6991] exfat: Deprecated parameter 'utf8'
[  340.794835][ T6991] exfat: Deprecated parameter 'utf8'
[  340.821163][ T6991] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  341.093458][ T6995] loop4: detected capacity change from 0 to 16
[  341.150025][ T6995] erofs: (device loop4): mounted with root inode @ nid 36.
[  341.742091][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.623'.
[  341.770647][ T7000] device bridge0 entered promiscuous mode
[  341.781709][ T7000] bridge0: port 3(macvlan0) entered blocking state
[  341.788610][ T7000] bridge0: port 3(macvlan0) entered disabled state
[  342.138786][ T7000] device bridge0 left promiscuous mode
[  342.269455][ T4403] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (4403)
[  343.087957][ T7017] siw: device registration error -23
[  343.214339][ T7012] siw: device registration error -23
[  343.961301][ T7024] loop4: detected capacity change from 0 to 32768
[  344.087408][ T7026] netlink: 76 bytes leftover after parsing attributes in process `syz.3.630'.
[  345.638586][ T7042] loop4: detected capacity change from 0 to 16
[  345.800993][ T7042] erofs: (device loop4): mounted with root inode @ nid 36.
[  346.612648][ T7057] netlink: 16 bytes leftover after parsing attributes in process `syz.5.637'.
[  346.649235][ T7057] device bridge0 entered promiscuous mode
[  346.662759][ T7057] bridge0: port 3(macvlan0) entered blocking state
[  346.669937][ T7057] bridge0: port 3(macvlan0) entered disabled state
[  348.439224][ T7062] siw: device registration error -23
[  348.795357][ T7057] device bridge0 left promiscuous mode
[  349.227308][ T7069] netlink: 76 bytes leftover after parsing attributes in process `syz.4.642'.
[  351.808579][ T7081] loop5: detected capacity change from 0 to 32768
[  352.486531][ T7090] loop4: detected capacity change from 0 to 16
[  352.522930][ T7090] erofs: (device loop4): mounted with root inode @ nid 36.
[  353.858076][ T7085] loop3: detected capacity change from 0 to 32768
[  354.768580][ T7107] siw: device registration error -23
[  354.785528][ T7085] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  354.826959][ T7085] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  355.457119][ T7085] BTRFS info (device loop3): setting nodatacow, compression disabled
[  355.565852][ T7110] device syzkaller0 entered promiscuous mode
[  355.572223][ T7085] BTRFS info (device loop3): max_inline at 0
[  355.586484][ T7085] BTRFS info (device loop3): enabling disk space caching
[  355.604047][ T7085] BTRFS info (device loop3): turning off barriers
[  355.611529][ T7085] BTRFS info (device loop3): turning on flush-on-commit
[  355.620137][ T7085] BTRFS info (device loop3): doing ref verification
[  355.627153][ T7085] BTRFS info (device loop3): force clearing of disk cache
[  355.635086][ T7085] BTRFS info (device loop3): enabling ssd optimizations
[  355.642527][ T7085] BTRFS info (device loop3): max_inline at 4096
[  355.652140][ T7085] BTRFS info (device loop3): disk space caching is enabled
[  355.921193][ T7085] BTRFS error (device loop3): open_ctree failed: -12
[  356.067232][ T4403] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4403)
[  356.271009][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'.
[  356.619400][ T7140] loop2: detected capacity change from 0 to 32768
[  357.396906][ T7144] netlink: 76 bytes leftover after parsing attributes in process `syz.3.660'.
[  359.849189][ T4272] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  359.858083][ T4272] Bluetooth: hci3: Injecting HCI hardware error event
[  359.867978][ T4277] Bluetooth: hci3: hardware error 0x00
[  362.029325][ T4277] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  363.280805][ T7192] loop2: detected capacity change from 0 to 32768
[  364.168477][ T7197] loop1: detected capacity change from 0 to 40427
[  364.212088][ T7197] F2FS-fs (loop1): invalid crc value
[  364.242836][ T7197] F2FS-fs (loop1): Found nat_bits in checkpoint
[  364.289159][ T7197] F2FS-fs (loop1): Start checkpoint disabled!
[  364.298039][ T7197] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  364.320123][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'.
[  364.538937][ T7208] netlink: 76 bytes leftover after parsing attributes in process `syz.5.675'.
[  366.375376][ T4491] kworker/u4:11: attempt to access beyond end of device
[  366.375376][ T4491] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  366.579941][ T4505] kworker/u4:12: attempt to access beyond end of device
[  366.579941][ T4505] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  368.995297][ T7241] netlink: 16 bytes leftover after parsing attributes in process `syz.5.685'.
[  369.151417][ T7236] device syzkaller0 entered promiscuous mode
[  369.562727][ T7246] siw: device registration error -23
[  369.957884][ T7257] loop5: detected capacity change from 0 to 1024
[  370.045020][ T7257] EXT4-fs: Ignoring removed orlov option
[  370.071419][ T7257] EXT4-fs: Ignoring removed nomblk_io_submit option
[  370.380564][ T7257] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  371.417575][ T4512] EXT4-fs (loop5): unmounting filesystem.
[  371.812573][ T7269] loop4: detected capacity change from 0 to 32768
[  371.819596][ T7269] XFS: ikeep mount option is deprecated.
[  371.881133][ T7269] XFS (loop4): Mounting V5 Filesystem
[  372.013957][ T7283] netlink: 'syz.5.695': attribute type 10 has an invalid length.
[  372.040435][ T7269] XFS (loop4): Ending clean mount
[  372.048898][ T7269] XFS (loop4): Quotacheck needed: Please wait.
[  372.127599][ T7283] device veth0_macvtap left promiscuous mode
[  372.213538][ T7269] XFS (loop4): Quotacheck: Done.
[  373.934484][ T7283] batman_adv: batadv0: Adding interface: macvtap0
[  373.941330][ T7283] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  373.971344][ T7283] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  374.235960][ T7291] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  374.250268][ T4269] XFS (loop4): Unmounting Filesystem
[  374.258807][ T7291] batman_adv: batadv0: Removing interface: batadv_slave_0
[  374.283029][ T7291] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  374.303284][ T7291] batman_adv: batadv0: Removing interface: batadv_slave_1
[  374.321929][ T7291] batman_adv: batadv0: Removing interface: macvtap0
[  374.658864][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'.
[  375.803310][ T7303] fuse: Bad value for 'group_id'
[  376.164332][ T7305] siw: device registration error -23
[  376.486184][ T7309] device syzkaller0 entered promiscuous mode
[  378.491860][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  378.498727][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  378.853175][ T7332] binder_alloc: 7331: binder_alloc_buf, no vma
[  379.715240][ T7338] loop3: detected capacity change from 0 to 16
[  379.734305][ T7338] erofs: (device loop3): mounted with root inode @ nid 36.
[  380.319304][ T7345] siw: device registration error -23
[  380.588310][ T7343] loop1: detected capacity change from 0 to 32768
[  381.929311][ T7359] fuse: Bad value for 'group_id'
[  384.726712][ T7369] device syzkaller0 entered promiscuous mode
[  385.185833][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'.
[  386.561410][ T7390] loop5: detected capacity change from 0 to 32768
[  389.063209][ T7405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.728'.
[  389.076309][ T7405] device bridge0 entered promiscuous mode
[  389.083509][ T7405] bridge0: port 3(macvlan0) entered blocking state
[  389.090151][ T7405] bridge0: port 3(macvlan0) entered disabled state
[  389.547294][ T7405] device bridge0 left promiscuous mode
[  389.907298][ T7415] siw: device registration error -23
[  390.561219][ T7425] siw: device registration error -23
[  390.855334][ T7430] loop5: detected capacity change from 0 to 16
[  390.879437][ T7430] erofs: (device loop5): mounted with root inode @ nid 36.
[  390.926369][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'.
[  391.224302][ T7435] loop2: detected capacity change from 0 to 32768
[  391.709252][ T7412] loop3: detected capacity change from 0 to 32768
[  391.768878][ T7412] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  391.867052][ T7412] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  391.927529][ T7412] BTRFS info (device loop3): setting nodatacow, compression disabled
[  392.005270][ T7412] BTRFS info (device loop3): max_inline at 0
[  392.073421][ T7412] BTRFS info (device loop3): enabling disk space caching
[  392.260104][ T7412] BTRFS info (device loop3): turning off barriers
[  392.266605][ T7412] BTRFS info (device loop3): turning on flush-on-commit
[  393.602474][ T7412] BTRFS info (device loop3): doing ref verification
[  393.609241][ T7412] BTRFS info (device loop3): force clearing of disk cache
[  393.616538][ T7412] BTRFS info (device loop3): enabling ssd optimizations
[  393.659940][ T7412] BTRFS info (device loop3): max_inline at 4096
[  393.726713][ T7412] BTRFS info (device loop3): disk space caching is enabled
[  394.054625][ T7412] BTRFS error (device loop3): open_ctree failed: -12
[  394.451380][ T7477] siw: device registration error -23
[  397.219214][ T4899] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  397.429376][ T4899] usb 4-1: unable to get BOS descriptor or descriptor too short
[  397.465119][ T4899] usb 4-1: config 6 has an invalid interface number: 200 but max is 0
[  397.503518][ T4899] usb 4-1: config 6 has no interface number 0
[  398.403979][ T4899] usb 4-1: config 6 interface 200 has no altsetting 0
[  398.609092][ T7502] loop5: detected capacity change from 0 to 32768
[  399.458856][ T4899] usb 4-1: string descriptor 0 read error: -71
[  399.479125][ T4899] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  399.488217][ T4899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.523741][ T4899] usb 4-1: can't set config #6, error -71
[  399.720350][ T4899] usb 4-1: USB disconnect, device number 7
[  401.375581][ T7524] binder: BINDER_SET_CONTEXT_MGR already set
[  401.386822][ T7524] binder: 7521:7524 ioctl 4018620d 200000000040 returned -16
[  401.807060][ T7529] loop4: detected capacity change from 0 to 16
[  401.875231][ T7529] erofs: (device loop4): mounted with root inode @ nid 36.
[  403.315451][ T7531] loop3: detected capacity change from 0 to 256
[  403.870351][ T7531] exfat: Deprecated parameter 'utf8'
[  403.875715][ T7531] exfat: Deprecated parameter 'utf8'
[  403.933426][ T7531] exfat: Deprecated parameter 'utf8'
[  404.046902][ T7531] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  404.253892][ T7540] loop2: detected capacity change from 0 to 16
[  404.436101][ T7542] loop5: detected capacity change from 0 to 32768
[  404.715017][ T7540] erofs: (device loop2): mounted with root inode @ nid 36.
[  407.480909][ T7558] input: syz0 as /devices/virtual/input/input20
[  409.099151][ T7571] loop3: detected capacity change from 0 to 16
[  409.107636][ T7571] erofs: (device loop3): mounted with root inode @ nid 36.
[  410.450773][ T7575] loop1: detected capacity change from 0 to 40427
[  410.503300][ T7575] F2FS-fs (loop1): invalid crc value
[  410.530267][ T7575] F2FS-fs (loop1): Found nat_bits in checkpoint
[  410.567250][ T7575] F2FS-fs (loop1): Start checkpoint disabled!
[  410.637481][ T7575] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  411.286640][ T7586] netlink: 16 bytes leftover after parsing attributes in process `syz.3.777'.
[  411.313475][ T7586] device bridge0 entered promiscuous mode
[  411.323751][ T7586] bridge0: port 3(macvlan2) entered blocking state
[  411.330640][ T7586] bridge0: port 3(macvlan2) entered disabled state
[  411.558609][ T7586] device bridge0 left promiscuous mode
[  411.888168][ T4491] kworker/u4:11: attempt to access beyond end of device
[  411.888168][ T4491] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  411.919937][ T7589] siw: device registration error -23
[  411.995652][ T7593] device syzkaller0 entered promiscuous mode
[  412.439655][ T7603] loop5: detected capacity change from 0 to 256
[  412.448161][ T7603] exfat: Deprecated parameter 'utf8'
[  412.511915][ T7603] exfat: Deprecated parameter 'utf8'
[  412.541175][ T7603] exfat: Deprecated parameter 'utf8'
[  412.563549][ T7608] loop4: detected capacity change from 0 to 16
[  412.613915][ T7603] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  412.761632][ T7608] erofs: (device loop4): mounted with root inode @ nid 36.
[  414.769925][ T7616] fuse: Unknown parameter 'grou00000000000000000000'
[  415.498165][ T7622] loop2: detected capacity change from 0 to 40427
[  415.521746][ T7622] F2FS-fs (loop2): invalid crc value
[  415.576664][ T7622] F2FS-fs (loop2): Found nat_bits in checkpoint
[  415.587383][ T7624] binder: 7623:7624 ioctl 4018620d 0 returned -22
[  415.646165][ T7622] F2FS-fs (loop2): Start checkpoint disabled!
[  415.681991][ T7622] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  416.455108][    T9] kworker/u4:0: attempt to access beyond end of device
[  416.455108][    T9] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  416.788554][ T7639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.795'.
[  416.809087][ T7639] device bridge0 entered promiscuous mode
[  416.818077][ T7639] bridge0: port 3(macvlan2) entered blocking state
[  416.824879][ T7639] bridge0: port 3(macvlan2) entered disabled state
[  416.885662][ T7639] device bridge0 left promiscuous mode
[  417.988154][ T7644] device syzkaller0 entered promiscuous mode
[  418.197045][ T7637] loop5: detected capacity change from 0 to 32768
[  418.237063][ T7637] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.796 (7637)
[  418.498323][ T7637] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  418.682526][ T7637] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  418.813631][ T7637] BTRFS info (device loop5): setting nodatacow, compression disabled
[  418.960291][ T7637] BTRFS info (device loop5): max_inline at 0
[  419.033099][ T7652] fuse: Unknown parameter 'grou00000000000000000000'
[  419.062994][ T7637] BTRFS info (device loop5): enabling disk space caching
[  419.158107][ T7637] BTRFS info (device loop5): turning off barriers
[  419.206006][ T7657] netlink: 'syz.1.801': attribute type 20 has an invalid length.
[  419.214697][ T7637] BTRFS info (device loop5): turning on flush-on-commit
[  419.265186][ T7637] BTRFS info (device loop5): doing ref verification
[  419.309163][ T7637] BTRFS info (device loop5): force clearing of disk cache
[  419.693193][ T7637] BTRFS info (device loop5): enabling ssd optimizations
[  419.840680][ T7637] BTRFS info (device loop5): max_inline at 4096
[  420.080322][ T7637] BTRFS info (device loop5): disk space caching is enabled
[  420.196640][ T7637] BTRFS error (device loop5): open_ctree failed: -12
[  420.342785][ T7678] loop4: detected capacity change from 0 to 128
[  420.362500][ T7678] befs: (loop4): No write support. Marking filesystem read-only
[  420.441573][ T7678] befs: (loop4): invalid magic header
[  421.233335][ T6344] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (6344)
[  421.678134][ T7686] loop2: detected capacity change from 0 to 40427
[  421.709567][ T7686] F2FS-fs (loop2): invalid crc value
[  421.723102][ T7686] F2FS-fs (loop2): Found nat_bits in checkpoint
[  421.887794][ T7686] F2FS-fs (loop2): Start checkpoint disabled!
[  421.916665][ T7698] siw: device registration error -23
[  421.922941][ T7694] loop4: detected capacity change from 0 to 1024
[  421.943237][ T7686] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  422.050188][ T7699] netlink: 16 bytes leftover after parsing attributes in process `syz.5.808'.
[  422.070985][ T7699] device bridge0 entered promiscuous mode
[  422.080003][ T7699] bridge0: port 3(macvlan0) entered blocking state
[  422.086744][ T7699] bridge0: port 3(macvlan0) entered disabled state
[  422.806639][ T7699] device bridge0 left promiscuous mode
[  422.951140][ T7694] hfsplus: Filesystem is marked locked, mounting read-only.
[  423.119478][ T7694] hfsplus: filesystem is marked locked, leaving read-only.
[  423.315174][ T7704] loop3: detected capacity change from 0 to 16
[  423.382497][ T7704] erofs: (device loop3): mounted with root inode @ nid 36.
[  423.391378][ T4425] kworker/u4:9: attempt to access beyond end of device
[  423.391378][ T4425] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  423.426816][ T7706] binder: 7705:7706 ioctl 4018620d 0 returned -22
[  424.469554][ T7713] fuse: Unknown parameter 'group_i00000000000000000000'
[  426.593306][ T7729] loop2: detected capacity change from 0 to 32768
[  429.037288][ T7738] loop3: detected capacity change from 0 to 40427
[  429.067404][ T7738] F2FS-fs (loop3): invalid crc value
[  429.114420][ T7738] F2FS-fs (loop3): Found nat_bits in checkpoint
[  429.152973][ T7738] F2FS-fs (loop3): Start checkpoint disabled!
[  429.196643][ T7738] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  429.842381][ T7754] binder: 7752:7754 ioctl c0306201 0 returned -14
[  430.103970][ T4529] kworker/u4:13: attempt to access beyond end of device
[  430.103970][ T4529] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  431.378429][ T7767] netlink: 76 bytes leftover after parsing attributes in process `syz.4.827'.
[  432.450785][ T7774] loop4: detected capacity change from 0 to 16
[  432.596534][ T7774] erofs: (device loop4): mounted with root inode @ nid 36.
[  433.670588][ T7781] loop3: detected capacity change from 0 to 32768
[  436.014785][ T7790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.832'.
[  436.027832][ T7790] device bridge0 entered promiscuous mode
[  436.035197][ T7790] bridge0: port 3(macvlan2) entered blocking state
[  436.041826][ T7790] bridge0: port 3(macvlan2) entered disabled state
[  436.479656][ T7790] device bridge0 left promiscuous mode
[  436.566710][ T7796] fuse: Unknown parameter 'grou00000000000000000000'
[  437.052545][ T7798] loop5: detected capacity change from 0 to 40427
[  437.099073][ T7798] F2FS-fs (loop5): invalid crc value
[  437.159703][ T7798] F2FS-fs (loop5): Found nat_bits in checkpoint
[  437.206116][ T7798] F2FS-fs (loop5): Start checkpoint disabled!
[  437.243502][ T7798] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  437.766465][ T7806] binder: 7802:7806 ioctl c0306201 0 returned -14
[  439.133332][ T7822] device syzkaller0 entered promiscuous mode
[  439.219534][ T2933] kworker/u4:5: attempt to access beyond end of device
[  439.219534][ T2933] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  439.689718][ T7831] loop4: detected capacity change from 0 to 32768
[  439.932132][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  439.940653][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  440.439082][   T26] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  440.650682][   T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  440.697368][   T26] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  440.726404][ T7839] loop3: detected capacity change from 0 to 64
[  440.786719][   T26] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  440.910354][   T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  440.950894][ T7843] netlink: 'syz.3.846': attribute type 4 has an invalid length.
[  440.958824][ T7843] netlink: 152 bytes leftover after parsing attributes in process `syz.3.846'.
[  441.167634][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.177339][   T26] usb 2-1: Product: syz
[  441.183266][   T26] usb 2-1: Manufacturer: syz
[  441.188188][   T26] usb 2-1: SerialNumber: syz
[  441.390206][ T7841] loop5: detected capacity change from 0 to 256
[  441.406306][ T7841] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  441.417118][ T7841] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  441.481095][ T7841] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  441.540103][ T7845] netlink: 36 bytes leftover after parsing attributes in process `syz.4.847'.
[  442.295744][   T26] cdc_ncm 2-1:1.0: bind() failure
[  442.306106][   T26] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  442.324479][   T26] cdc_ncm 2-1:1.1: bind() failure
[  442.365637][   T26] usb 2-1: USB disconnect, device number 6
[  442.608033][ T7852] loop2: detected capacity change from 0 to 16
[  442.660182][ T7854] siw: device registration error -23
[  442.694956][ T7852] erofs: (device loop2): mounted with root inode @ nid 36.
[  443.201619][ T7863] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  443.928872][ T7861] sctp: failed to load transform for md5: -2
[  444.159713][ T7870] loop5: detected capacity change from 0 to 32768
[  446.395458][ T7887] netlink: 36 bytes leftover after parsing attributes in process `syz.5.859'.
[  447.407143][ T7896] loop1: detected capacity change from 0 to 256
[  447.416042][ T7896] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  447.426728][ T7896] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  447.441119][ T7896] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  447.914617][ T7906] fuse: Unknown parameter 'group_i00000000000000000000'
[  449.183837][ T7912] siw: device registration error -23
[  450.255614][ T7914] loop2: detected capacity change from 0 to 16
[  450.286479][ T7914] erofs: (device loop2): mounted with root inode @ nid 36.
[  450.845122][ T7931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.873'.
[  451.395820][ T7940] fuse: Unknown parameter 'group_i00000000000000000000'
[  453.667955][ T7955] loop3: detected capacity change from 0 to 1024
[  454.202109][ T7958] netlink: 36 bytes leftover after parsing attributes in process `syz.3.883'.
[  455.859238][ T7956] loop4: detected capacity change from 0 to 32768
[  455.915667][ T7956] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  455.991107][ T7956] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  456.044298][ T7956] BTRFS info (device loop4): setting nodatacow, compression disabled
[  456.088211][ T7956] BTRFS info (device loop4): max_inline at 0
[  456.123752][ T7956] BTRFS info (device loop4): enabling disk space caching
[  456.194783][ T7956] BTRFS info (device loop4): turning off barriers
[  456.307467][ T7956] BTRFS info (device loop4): turning on flush-on-commit
[  456.442802][ T7956] BTRFS info (device loop4): doing ref verification
[  456.533379][ T7956] BTRFS info (device loop4): force clearing of disk cache
[  456.588310][ T7956] BTRFS info (device loop4): enabling ssd optimizations
[  456.642696][ T7956] BTRFS info (device loop4): max_inline at 4096
[  456.670478][ T7956] BTRFS info (device loop4): disk space caching is enabled
[  457.217294][ T7956] BTRFS error (device loop4): open_ctree failed: -12
[  457.284484][ T7998] fuse: Unknown parameter 'group_i00000000000000000000'
[  458.248839][ T8001] loop2: detected capacity change from 0 to 1024
[  460.413825][ T8011] loop4: detected capacity change from 0 to 1024
[  460.544493][ T8011] hfsplus: xattr searching failed
[  460.776951][ T8014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.895'.
[  462.003161][ T8022] netlink: 76 bytes leftover after parsing attributes in process `syz.3.897'.
[  464.678322][ T8037] loop5: detected capacity change from 0 to 16
[  464.693393][ T8037] erofs: (device loop5): mounted with root inode @ nid 36.
[  464.765171][ T8038] fuse: Unknown parameter 'group_id00000000000000000000'
[  465.776187][ T8043] device syzkaller0 entered promiscuous mode
[  466.117558][ T8046] loop3: detected capacity change from 0 to 40427
[  466.133954][ T8046] F2FS-fs (loop3): invalid crc value
[  466.149641][ T8046] F2FS-fs (loop3): Found nat_bits in checkpoint
[  466.180388][ T8046] F2FS-fs (loop3): Start checkpoint disabled!
[  466.209367][ T8046] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  467.231356][ T4425] kworker/u4:9: attempt to access beyond end of device
[  467.231356][ T4425] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  467.308083][ T4425] kworker/u4:9: attempt to access beyond end of device
[  467.308083][ T4425] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  468.963817][ T8072] netlink: 76 bytes leftover after parsing attributes in process `syz.4.909'.
[  470.261693][ T8069] loop2: detected capacity change from 0 to 1024
[  470.464772][ T8069] hfsplus: xattr searching failed
[  472.175429][ T8091] fuse: Unknown parameter 'group_id00000000000000000000'
[  472.449123][ T5018] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  472.649373][ T5018] usb 5-1: Using ep0 maxpacket: 16
[  472.662526][ T5018] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  472.693766][ T5018] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  472.736251][ T5018] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.763389][ T5018] usb 5-1: Product: syz
[  472.775434][ T5018] usb 5-1: Manufacturer: syz
[  472.783676][ T5018] usb 5-1: SerialNumber: syz
[  472.804453][ T5018] usb 5-1: config 0 descriptor??
[  472.827885][ T5018] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  472.838535][ T5018] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  473.232006][ T8102] loop2: detected capacity change from 0 to 1024
[  473.434794][ T5018] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  473.712131][ T8108] netlink: 76 bytes leftover after parsing attributes in process `syz.5.922'.
[  475.043591][ T5018] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[  475.078349][ T5018] em28xx 5-1:0.0: board has no eeprom
[  475.081434][ T8115] loop3: detected capacity change from 0 to 512
[  475.185189][ T8115] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  475.195989][ T5018] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  475.223690][ T5018] em28xx 5-1:0.0: dvb set to bulk mode.
[  475.343949][ T8115] EXT4-fs (loop3): 1 truncate cleaned up
[  475.387813][ T5018] usb 5-1: USB disconnect, device number 3
[  475.389050][ T8115] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  475.411572][ T5018] em28xx 5-1:0.0: Disconnecting em28xx
[  475.417964][ T4943] em28xx 5-1:0.0: Binding DVB extension
[  476.380900][ T8115] EXT4-fs (loop3): shut down requested (2)
[  476.475280][ T8124] fscrypt (loop3, inode 18): Error -5 getting encryption context
[  477.496986][ T4943] em28xx 5-1:0.0: Registering input extension
[  477.510579][ T5018] em28xx 5-1:0.0: Closing input extension
[  477.560943][ T5018] em28xx 5-1:0.0: Freeing device
[  477.740017][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  479.170730][ T8146] siw: device registration error -23
[  479.198813][ T8148] loop5: detected capacity change from 0 to 1024
[  479.362789][ T8153] netlink: 76 bytes leftover after parsing attributes in process `syz.2.934'.
[  483.595144][ T8183] loop5: detected capacity change from 0 to 40427
[  483.627305][ T8183] F2FS-fs (loop5): invalid crc value
[  483.695067][ T8183] F2FS-fs (loop5): Found nat_bits in checkpoint
[  483.695571][ T8188] loop4: detected capacity change from 0 to 2048
[  483.713169][ T8188] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  483.760075][ T8183] F2FS-fs (loop5): Start checkpoint disabled!
[  483.848192][ T8183] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  484.647010][ T8196] netlink: 76 bytes leftover after parsing attributes in process `syz.3.947'.
[  488.530262][ T8207] sctp: failed to load transform for md5: -2
[  488.555792][ T5296] kworker/u4:18: attempt to access beyond end of device
[  488.555792][ T5296] loop5: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  488.572311][ T5296] kworker/u4:18: attempt to access beyond end of device
[  488.572311][ T5296] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  491.906105][ T8243] loop2: detected capacity change from 0 to 1024
[  493.049117][ T8253] loop3: detected capacity change from 0 to 40427
[  493.081748][ T8253] F2FS-fs (loop3): invalid crc value
[  493.640652][ T8253] F2FS-fs (loop3): Found nat_bits in checkpoint
[  493.669866][ T8253] F2FS-fs (loop3): Start checkpoint disabled!
[  493.777681][ T8253] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  494.454148][ T8259] siw: device registration error -23
[  494.457109][ T4369] kworker/u4:7: attempt to access beyond end of device
[  494.457109][ T4369] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  494.474787][ T4369] kworker/u4:7: attempt to access beyond end of device
[  494.474787][ T4369] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  494.561645][ T8265] capability: warning: `syz.1.962' uses deprecated v2 capabilities in a way that may be insecure
[  497.051423][ T8273] sctp: failed to load transform for md5: -2
[  500.175628][ T8303] loop4: detected capacity change from 0 to 40427
[  500.198336][ T8303] F2FS-fs (loop4): invalid crc value
[  500.210736][ T8303] F2FS-fs (loop4): Found nat_bits in checkpoint
[  500.254993][ T8303] F2FS-fs (loop4): Start checkpoint disabled!
[  500.287012][ T8303] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  501.419464][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  501.426016][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  501.531433][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.975'.
[  501.547790][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.975'.
[  502.046971][ T8321] fuse: Bad value for 'rootmode'
[  502.115530][ T4529] kworker/u4:13: attempt to access beyond end of device
[  502.115530][ T4529] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  502.567673][ T8326] siw: device registration error -23
[  503.215010][ T8334] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  503.593221][ T8351] netlink: 'syz.2.985': attribute type 17 has an invalid length.
[  504.912809][ T8362] fuse: Bad value for 'fd'
[  505.963570][ T8365] loop4: detected capacity change from 0 to 40427
[  506.000774][ T8365] F2FS-fs (loop4): invalid crc value
[  506.020290][ T8365] F2FS-fs (loop4): Found nat_bits in checkpoint
[  506.050437][ T8365] F2FS-fs (loop4): Start checkpoint disabled!
[  506.070999][ T8367] binder: BINDER_SET_CONTEXT_MGR already set
[  506.079217][ T8365] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  506.101634][ T8367] binder: 8366:8367 ioctl 4018620d 200000000040 returned -16
[  506.729928][ T8353] loop2: detected capacity change from 0 to 32768
[  506.747425][ T8353] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.986 (8353)
[  506.852361][ T8353] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  507.339815][ T8353] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  507.405908][ T8353] BTRFS info (device loop2): setting nodatacow, compression disabled
[  507.446631][ T8353] BTRFS info (device loop2): max_inline at 0
[  507.476936][ T8353] BTRFS info (device loop2): enabling disk space caching
[  507.498995][ T2933] kworker/u4:5: attempt to access beyond end of device
[  507.498995][ T2933] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  507.517453][ T8353] BTRFS info (device loop2): turning off barriers
[  507.589429][ T2933] kworker/u4:5: attempt to access beyond end of device
[  507.589429][ T2933] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  507.638984][ T8353] BTRFS info (device loop2): turning on flush-on-commit
[  507.646012][ T8353] BTRFS info (device loop2): doing ref verification
[  507.719274][ T8353] BTRFS info (device loop2): force clearing of disk cache
[  507.752666][ T8353] BTRFS info (device loop2): enabling ssd optimizations
[  507.886883][ T8383] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  508.607105][ T8382] sctp: failed to load transform for md5: -2
[  508.715027][ T8353] BTRFS info (device loop2): max_inline at 4096
[  508.722146][ T8353] BTRFS info (device loop2): disk space caching is enabled
[  508.887920][ T8353] BTRFS error (device loop2): open_ctree failed: -12
[  516.334354][ T8466] siw: device registration error -23
[  519.405045][ T8485] fuse: Unknown parameter 'use00000000000000000000'
[  521.153720][ T8502] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  525.166718][ T8524] loop5: detected capacity change from 0 to 256
[  525.227782][ T8524] exfat: Deprecated parameter 'utf8'
[  525.254854][ T8524] exfat: Deprecated parameter 'utf8'
[  525.279383][ T8524] exfat: Deprecated parameter 'utf8'
[  525.488113][ T8524] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  525.944317][ T8543] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem
[  527.653823][ T8564] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  527.674713][ T8564] device syzkaller0 entered promiscuous mode
[  527.889084][ T4945] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  528.091742][ T4945] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  528.130223][ T4945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  528.151781][ T4945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[  528.166645][ T4945] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  528.659026][ T4945] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  528.668141][ T4945] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  528.762073][ T4945] usb 5-1: Manufacturer: syz
[  528.790996][ T4945] usb 5-1: config 0 descriptor??
[  528.944239][ T8581] siw: device registration error -23
[  529.202959][ T8582] ================================================================================
[  529.221923][ T8582] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/aio_iiro_16.c:180:9
[  529.230815][ T8582] shift exponent 1048581 is too large for 32-bit type 'int'
[  529.238670][ T8582] CPU: 1 PID: 8582 Comm: syz.2.1050 Not tainted 6.1.146-syzkaller #0
[  529.246784][ T8582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  529.256863][ T8582] Call Trace:
[  529.260149][ T8582]  <TASK>
[  529.263090][ T8582]  dump_stack_lvl+0x168/0x22e
[  529.267801][ T8582]  ? show_regs_print_info+0x12/0x12
[  529.273013][ T8582]  ? load_image+0x3b0/0x3b0
[  529.277540][ T8582]  ? __lock_acquire+0x7c50/0x7c50
[  529.282584][ T8582]  ? do_raw_write_lock+0x119/0x250
[  529.287716][ T8582]  ubsan_epilogue+0xa/0x30
[  529.292181][ T8582]  __ubsan_handle_shift_out_of_bounds+0x37c/0x400
[  529.298624][ T8582]  ? __request_region+0xbe/0xd0
[  529.303513][ T8582]  ? comedi_request_region+0x77/0x170
[  529.308903][ T8582]  aio_iiro_16_attach+0x5dc/0x790
[  529.313958][ T8582]  comedi_device_attach+0x515/0x650
[  529.319185][ T8582]  comedi_unlocked_ioctl+0x5ec/0xe90
[  529.324487][ T8582]  ? tomoyo_path_number_perm+0x4ae/0x600
[  529.330136][ T8582]  ? comedi_poll+0x8b0/0x8b0
[  529.334807][ T8582]  ? __fget_files+0x28/0x4d0
[  529.339436][ T8582]  ? bpf_lsm_file_ioctl+0x5/0x10
[  529.344389][ T8582]  ? security_file_ioctl+0x7c/0xa0
[  529.349515][ T8582]  ? comedi_poll+0x8b0/0x8b0
[  529.354118][ T8582]  __se_sys_ioctl+0xfa/0x170
[  529.358737][ T8582]  do_syscall_64+0x4c/0xa0
[  529.363169][ T8582]  ? clear_bhb_loop+0x60/0xb0
[  529.367866][ T8582]  ? clear_bhb_loop+0x60/0xb0
[  529.372570][ T8582]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  529.378498][ T8582] RIP: 0033:0x7f85f878e9a9
[  529.382938][ T8582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  529.402559][ T8582] RSP: 002b:00007f85f9625038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  529.410988][ T8582] RAX: ffffffffffffffda RBX: 00007f85f89b6080 RCX: 00007f85f878e9a9
[  529.418974][ T8582] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003
[  529.427039][ T8582] RBP: 00007f85f8810d69 R08: 0000000000000000 R09: 0000000000000000
[  529.435018][ T8582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  529.442997][ T8582] R13: 0000000000000001 R14: 00007f85f89b6080 R15: 00007ffcdf9b7378
[  529.450992][ T8582]  </TASK>
[  529.466391][ T8582] ================================================================================
[  529.478610][ T8582] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  529.485842][ T8582] CPU: 0 PID: 8582 Comm: syz.2.1050 Not tainted 6.1.146-syzkaller #0
[  529.494086][ T8582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  529.504151][ T8582] Call Trace:
[  529.507439][ T8582]  <TASK>
[  529.510379][ T8582]  dump_stack_lvl+0x168/0x22e
[  529.515067][ T8582]  ? memcpy+0x3c/0x60
[  529.519104][ T8582]  ? show_regs_print_info+0x12/0x12
[  529.524310][ T8582]  ? load_image+0x3b0/0x3b0
[  529.528832][ T8582]  panic+0x2c9/0x710
[  529.532750][ T8582]  ? bpf_jit_dump+0xd0/0xd0
[  529.537311][ T8582]  check_panic_on_warn+0x80/0xa0
[  529.542269][ T8582]  __ubsan_handle_shift_out_of_bounds+0x37c/0x400
[  529.548707][ T8582]  ? __request_region+0xbe/0xd0
[  529.553568][ T8582]  ? comedi_request_region+0x77/0x170
[  529.558975][ T8582]  aio_iiro_16_attach+0x5dc/0x790
[  529.564023][ T8582]  comedi_device_attach+0x515/0x650
[  529.569242][ T8582]  comedi_unlocked_ioctl+0x5ec/0xe90
[  529.574548][ T8582]  ? tomoyo_path_number_perm+0x4ae/0x600
[  529.580194][ T8582]  ? comedi_poll+0x8b0/0x8b0
[  529.584829][ T8582]  ? __fget_files+0x28/0x4d0
[  529.589442][ T8582]  ? bpf_lsm_file_ioctl+0x5/0x10
[  529.594387][ T8582]  ? security_file_ioctl+0x7c/0xa0
[  529.599524][ T8582]  ? comedi_poll+0x8b0/0x8b0
[  529.604123][ T8582]  __se_sys_ioctl+0xfa/0x170
[  529.608747][ T8582]  do_syscall_64+0x4c/0xa0
[  529.613177][ T8582]  ? clear_bhb_loop+0x60/0xb0
[  529.617857][ T8582]  ? clear_bhb_loop+0x60/0xb0
[  529.622540][ T8582]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  529.628453][ T8582] RIP: 0033:0x7f85f878e9a9
[  529.632869][ T8582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  529.652490][ T8582] RSP: 002b:00007f85f9625038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  529.660916][ T8582] RAX: ffffffffffffffda RBX: 00007f85f89b6080 RCX: 00007f85f878e9a9
[  529.668902][ T8582] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003
[  529.676892][ T8582] RBP: 00007f85f8810d69 R08: 0000000000000000 R09: 0000000000000000
[  529.684878][ T8582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  529.692865][ T8582] R13: 0000000000000001 R14: 00007f85f89b6080 R15: 00007ffcdf9b7378
[  529.700890][ T8582]  </TASK>
[  529.704172][ T8582] Kernel Offset: disabled
[  529.708574][ T8582] Rebooting in 86400 seconds..