last executing test programs:

8m34.757942908s ago: executing program 3 (id=446):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28)
recvmmsg(r5, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0)
recvfrom$inet6(r5, 0x0, 0x0, 0x87b0cc373e1cda89, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r0, 0x0, 0x0)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x40, 0x1d6844efefe48d79)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000440)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {}, {@uid}, {@rootdir={'rootdir', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp850'}}]}, 0x1, 0xc43, &(0x7f00000010c0)="$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")
r7 = creat(&(0x7f0000000080)='./bus\x00', 0x84)
r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r6], 0x2b)
sendfile(r8, r6, 0x0, 0x4000000053d2)

8m29.717310914s ago: executing program 3 (id=453):
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x7ff, @mcast1, 0x6}}, 0x6, 0x800, 0x6, 0x2, 0x4}, &(0x7f0000000280)=0x98)
unshare(0x26020280)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400))
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb)
setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080)=0x7fe00, 0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0)
ioctl$TCFLSH(r4, 0x540b, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000740)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa7c, &(0x7f0000001400)="$eJzs3UuMHEcZAODu3Z21nTh4HGxinJDYBJIIyG68a8zDgjiKL1gx4hYp4mI5TrBwDMKRIFEkbJ+4kcgyN8RDnHKJACGRC7Jy4hKJWOKSU+DAActIkThAgj1oZ6tmZ37PpGe9j97Z+T6ppqa7arqqZ3t6+1VVBTC2Jtqvjfbr5TcvHf3nQ//YtvD+8U6OZvt1qmtqIXeZpqfC8t6bXIxvvP/KyX5xWcy1X/P0ZNdn7yyK4nyxr7hSNIu9l6++9vbcU8cvHLu4/53XD19bg1UHAICx860rhw/u/ttf7t35wRv3Hym2dObn4/Nmmt6ejvuPpAP/hWiqzOcPS+cDZVfoNh3yTaUwEfJN9slXdOVr5Hxbez8Xy58Oy20MyLelovzJcI5ShvrAKMvbcbMoJ2Z6picmZmYWz8mL9nn9dDlz9vSZ587VVFFg1f37gaIo9gnCuIXWjs6PoPa61Be6vgWAWsX7hbc4H68srExnaVPDlX/9iYn+n+/VWM06Mj7We/tXflx+bz3Wu/yq9f/NhTVef8bK8FvT1jWtx2rL65V/R9vTdLyPEJ9fWu7+Jy9vMixv2AOAQfcRRuX+wqB6Tq5zPW7XoPrH7WKz+lqK8/fw9ZDe/fuJf9NR+RsD/f1nw13/37ZUudrrIgibO7Tq3PkA9ao4rY/PzbWSnB6f64vpWyrSt1akb6tIv6Mi/c6KdBhnv3/xp8WrZdG3PV6xeP7f/rEMez0sX2e7K8UfW2Z94vXI5V6Pi8/9LtdKy4/PE8NG9scTT5/68rPPXF18/r/sbP830/a+L00302/rSsqQrxfG6+qdZ/+bveVMDMh3d6jPXX3yt9/v6s1X7lpaTtG1n7mlHnt6P7djUL77evM1Q75tKcTDpXh8ckf4XD7+yPvV/H1NhfVthPWYDvXI+5WdKR6tuzFsVHl7HPT8f94+9xSN8rnTZ049lqbzdvrnycaWhfkH1rnewMoN2/5nT9Hb/md7Z35jonu/sGNpftm9X2iG+XMD5s+n6fx/7juT29rzZ05+78yzq73yMObOvfTyd0+cOXPqB9544403nTd175mAtTb74gvfnz330suPnn7hxPOnnj91dv7Qofm5uUNfmT842z6un+0+ugc2k6V/+nXXBAAAAAAAAAAAABjWD48dvfrXt7707mL7/6X2f7n9f37yN7f//0lo/x/byed28Lkd4M4+6e08oYPV6ZCvkcLHQ313hXJ2h899IsWdcfxS+/9cXOzXNdfnnjA/9t+b84XuBG7pL2U69EESxwv8dIovpvjXBdSo/Hn/2Smu6t86b+u5fwr9Uoym/HfL/Znkfkxy++9B/Trl/f/O/ov98WrXk9W1Hs0J615HoL9/bbj+v9ckLHX4WXtdus4Yaq+LsNHCjVartZ7ltVofNYqHsaaA9VP3+J/5umeOz/7pG1sXQs52/Yne/WXsvxRWou7xL2srP19YHNf1H7L81R7/szP+3dD7vzBiXvP2yv3vL66921VssXdg+VuKnvLj+ud+oHctr/wPUvl5bR4uBpXfu/6tX4Xy4w2hIX0Yyr9jyPLj+l9absGpwP+l8vPX9siDw5a/uIByorce8bpxvv8XrxtnN8L65749l7v+tztQ481UPoyzURlndrl6xv+90Fr/8X9XOMJQfA7ji2k67wjzcw5xvJNh65/v1+bnK/L/gd1h+WXF/zfj/462r6a46veQx//N22Ozz/RE13Sjz3e7Wfc1MKreW7X7f11PzG2A+yjC+ITSNnfbodVq1XqTzx3GetX9/dd9nlB3+XV//1Xi+L/xGD6O/xvT4/i/MT2O/xvT29cVP1watDd+X3H835gex/+N6feEcuP4wHsq0j9Zkb63Iv3eivT7KtI/VZG+vyL9/or0ByrS765If7Ai/TPhLx7TP1vx+Ycq0h/56PT5H1V8frPL7VHGdf1hnMX2eX7/MD7y/Z9Bv/9dFenA6PrZGweefOZ3324utv+f7lwPyffxjqTpRjp3judL8frJZEp7K03/PaRv9OsdME5i/xnx//vDFenA6MrPefl9wxgq+/fYM2y/VYOO8xktn0vx51P8hRQ/muKZFM+m+ECK59apfqyNJ3/7h8Ovlkvn+ztC+rDPk8f2QLGfqPkh6xOvDyz3efzYj99yrbT822wOBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUJuJ9uvBg3vKorj85qWjTx8/Pbsw5/FOjmb7daprqtH5XFE8luLJFP8yvbnx/isnu+ObKS6LuaIsys784pvXOyXdWRTF+WJfcaVoFnsvX33t7bmnjl84dnH/O68fvrZ23wAAAABsfv8PAAD//+ZXHDE=")
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000003600"/20, @ANYRES32=0x1], 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x3, 0x8, 0x0, 0x7}, {0x9, 0x7, 0x3, 0x4}, {0x7ff, 0x22, 0xe6, 0x8}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0182101, &(0x7f0000000080))

8m25.814922023s ago: executing program 3 (id=459):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r4 = fanotify_init(0xf00, 0x0)
fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1)
r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2})
ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x81, @value=0x327})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r6=>0x0})
bind$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r6}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x18, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000d40)='GPL\x00', 0xa}, 0x94)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x0, 0x24}}, 0x0)
epoll_create1(0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()

8m19.957755581s ago: executing program 3 (id=472):
r0 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ef, &(0x7f00000001c0)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
socket(0x8, 0x3, 0xff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = epoll_create(0x207ffd)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0xfffc, 0x4e23, 0x5, 0x0, 0x20, 0x80}, {0x9, 0x3, 0x8, 0x1, 0x9, 0xc8, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x99, 0x4}}, 0xe8)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x70002012})
mlockall(0x7)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f00000003c0))
prlimit64(0x0, 0xe, 0x0, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x8, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], 0x1, 0x5510, &(0x7f00000079c0)="$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")

8m16.209905437s ago: executing program 3 (id=476):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES32=r0], &(0x7f00000002c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
syz_io_uring_submit(0x0, 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000240), 0x57, 0x200002)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0c00000004000000040000000000010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
chdir(&(0x7f00000000c0)='./file0\x00')
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r4, 0x101, 0x1)
getdents64(r4, 0x0, 0x0)

8m9.640858386s ago: executing program 3 (id=482):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r4 = fanotify_init(0xf00, 0x0)
fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1)
r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2})
ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x81, @value=0x327})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r6=>0x0})
bind$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r6}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x18, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000d40)='GPL\x00', 0xa}, 0x94)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x0, 0x24}}, 0x0)
epoll_create1(0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()

7m54.348698435s ago: executing program 32 (id=482):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r4 = fanotify_init(0xf00, 0x0)
fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1)
r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2})
ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x81, @value=0x327})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r6=>0x0})
bind$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r6}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x18, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000d40)='GPL\x00', 0xa}, 0x94)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x0, 0x24}}, 0x0)
epoll_create1(0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()

3m10.329362471s ago: executing program 0 (id=1424):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f2, 0x418, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f0000000540)={0x40, 0x4, 0x6, {0x6, 0xd, "19648961"}}, 0x0}, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m7.128520319s ago: executing program 0 (id=1444):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x3}, @TCA_FQ_CODEL_ECN={0x0, 0x4, 0x1}, @TCA_FQ_CODEL_LIMIT={0xfffffc1f, 0x2, 0x7f}]}}]}, 0x58}}, 0x8010)

3m6.016820746s ago: executing program 0 (id=1447):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x3c}}, 0x0)

3m5.74549623s ago: executing program 0 (id=1450):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@nogrpid}, {@noblock_validity}, {@nodelalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@orlov}]}, 0x4, 0x4fc, &(0x7f0000000540)="$eJzs3T9sXEkZAPDvPXttn8855+AKQMCF4yCgKOs/ubNOR0GuAaEoEkpERZEYe2NZ3s1aXjvEJoVT0iMRiQpqKjoKpFQUdHTQ0UCBFCACxQXFovf22V5sr9dJbK/P+/tJz/tmxvE3483MvDfr3Qmgb12KiM2IGIqIuxExXuQnxRHXW0f2fS+eP5rbev5oLolm8/Y/k7w8y4u2f5N5s/iZIxFx67sRP0r2x22sbyzNVquVlSI9sVpbnmisb1xdTIuc6ZmpmcmPrn04fWxtfbf2m2ffWbzxg9/99kt//ePmN3+SVWvspxfysvZ2vJRbw4cWt5peirG2vMGIuPFKwc6mweL/z4EFnGlZb/tMRLyX9//xGPCkAcC512yOR3O8PQ0AnHfZ/f9YJGm5WAsYizQtl1treO/EaFqtN1avjNfX7s9HvoZ1MUrpvcVqZbJYK7wYpSRLT+Xnu+npPelrEfF2RPxs+I08XZ6rV+d7eeEDAH3szT3z/3+G07QcB7xgBwCcLyO9rgAAcOrM/wDQf8z/ANB/XmL+9+5AADgn3P8DQP8x/wNA/+k6/z8+nXoAAKfi+zdvZkdzq/j86/kH62vfGntwdb7SWCrX1ubKc/WV5fJCvb5QrZTnms1uP69ary9PfbCTbKxv3KnV1+6v3lmszS5U7lRKJ9weAKC7t999+uckIjY/fiM/om0vB3M1nG9prysA9MxArysA9Iz380D/OsI9vmUAOOe6feJ3xz8RetJp81fgrLv8eev/0K+s/0P/erX1/28fez2A02f9H/pXs5nY8x8A+ow1fuC1Xv8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPjWWH0lazvcC38y+puVyxIWIuBil5N5itTIZEW9FxJ+GS8NZeqrXlQYAXlP696TY/+vy+PvZ5UAMtZUObTaHt/N+/IvbP384u7q6MhUxlPxrJ3/1SZE/PdSrRgAA267vz2rN08Vj2438i+eP5raP06zis09am4tmcbeKo1UyGIP540iUImL030mRbsmuVwaOIf7m44j43G77H7ZFGMvXQFo7n+6Nn8W+cALxd3//e+On/xc/zcuyx1L+u/jsMdQF+s3TT1rjZNH3si5W9L80LuWPB/f/kXyEen3b49/WvvEv3Rn/BvbFT/I+f2knfXhNnn3w++/ty2yOt8oeR3xh8KD4yU78pMP4+/4R2/iXL375vU5lzV9GXI6D47fU8mF2YrW2PNFY37i6WJtdqCxU7k9Pz0zNTH507cPpiXyNuvX1DwfF+MfHV97qFD9r/2iH+CNd2v+1I7b/V/+9+8OvHBL/G189+Pl/55D42Zz49SPGnx293nH77iz+fIf2d3v+r7ReFujq13/bmD9iVQGAU9BY31iarVYrK11OsmvNbt/j5NN5EpsRZ6AaTs7USa9HJuCk7Xb6XtcEAAAAAAAAAAAAAADopLG+sTQcJ/t2ol63EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPPrfwEAAP//i/LPhA==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

3m3.885271878s ago: executing program 0 (id=1457):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
setuid(0xee01)
ioctl$KDFONTOP_SET(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m1.558854523s ago: executing program 0 (id=1466):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r5 = fanotify_init(0xf00, 0x0)
fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1)
r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2})
ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0x81, @value=0x327})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r7=>0x0})
bind$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r7}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x18, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000d40)='GPL\x00', 0xa}, 0x94)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x0, 0x24}}, 0x0)
epoll_create1(0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()

3m1.379084956s ago: executing program 33 (id=1466):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r5 = fanotify_init(0xf00, 0x0)
fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1)
r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2})
ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0x81, @value=0x327})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r7=>0x0})
bind$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r7}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x18, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000d40)='GPL\x00', 0xa}, 0x94)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x0, 0x24}}, 0x0)
epoll_create1(0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()

2m10.344638213s ago: executing program 6 (id=1709):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
socket$inet(0x2, 0x3, 0x5)
socket(0x10, 0x803, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_SLAVE(r4, 0x703, 0x1c4)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
getsockname(r5, 0x0, 0x0)
creat(0x0, 0x0)
acct(&(0x7f0000000100)='./file0/bus\x00')
chroot(&(0x7f0000000040)='./file0\x00')
umount2(&(0x7f0000000280)='./file0\x00', 0x0)

2m8.946343454s ago: executing program 6 (id=1712):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$eJzs3M1vFOUfAPDvTLulwI9fK+ILCFJFI/GlpeVFDl40mnDQxEQPGE+1LaRSqKE1EUK0esCjIfFu/C+MJ70Y9aKJV70bEmK4gHpZMzsztLS77ZZud4H9fJLZfZ6Z2X2e78w8O8/Ms7sBdK2h7CGJ+F9E/B4RA3n29hWG8qeb1y9N/H390kQS1epbfyW19W5cvzRRrlq+bnueqVaL/JY65V5+N2J8ZmbqfJEfmT/7wcjchYsvTJ8dPz11eurc2PHjRw7v6zs2drQlcWZx3djz8eze3SfeufLGxMkr7/2UpJHHHcviaJWhfOvW9XSrC+uwHUvSSW/22F/k9v+yuKTekUAn9UREtrsqtfY/ED2x9daygXjts45WDthU1Wq1usqn8kIVuI8l0ekaAJ1Rnuiz699yalPX465w7eX8AiiL+2Yx5Ut6I80T+yvLrm9baSgiTi7881U2xSbdhwAAWOq7rP/zfL3+XxoP54m+7OH/xRjKYEQ8EBE7I+LBiNgVEQ9F1NZ9JCIeXWf5y0dIVvZ/0qt3HFwTsv7fS8XY1u39v7RcZbCnyO2oxV9JTk3PTB0qtsnBqGw5NZ1Mja5Sxvev/vZFo2VL+3/ZlJVf9gWLelztXXaDbnJ8fnwjMS917dOIPb314k9q4wJRjOvtjog9d1jG9LO9DZetHf8qGr9t06pfRzyT7/+FWBZ/KWk4Pjn64rGxoyP9MTN1aKQ8Klb6+dfLbzYqf0Pxt0C2/7fVPf5vxT+Y9EfMXbh4pjZeO7f+Mi7/8XnDa5p1Hv8ndhTHf1/ydm1GX7Hgo/H5+fOjEX3J6yvnjy2+W5kv18/iP3igfvvfGYtb4rGI2BsR+yLi8eyisKj7ExHxZEQcWCX+H1956v31x9+esdIs/sm19n8s3f/rT/Sc+eHbtePvj4hG+/9ILXWwmNPM51+zFdzItgMAAIB7Rf4d+CQdXkwnw8P5d/h3xbZ0ZnZu/rlTsx+em8y/Kz8YlbS80zWw5H7oaHFvuMyPLcsfLu4bf9mztZYfnpidmex08NDltq9o/2matf/Mnz2drh2w6Vowjgbco7R/6F7aP3SnZM32X2lbXYD2c/6H7lWv/X/ScO3hbza1MkBbOf9D92qi/S/kT417BcC9yfkfupf2D12p4W/j0w395L/tiX+L/zO8W+pz/ycivSuqcf8nepv+M4tGicrKtlwdyNt/NmdL3Vd1+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNf4LAAD///R05PQ=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0)
pwrite64(r0, &(0x7f0000000000)="c0e09acc8049", 0x6, 0x8080c61)
fallocate(r0, 0x3, 0x80007, 0x8000c60)

2m7.655038923s ago: executing program 6 (id=1720):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
close_range(r1, r1, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4)

2m5.432153157s ago: executing program 6 (id=1731):
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8}, {@overriderock}, {@nojoliet}, {@nojoliet}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x3}}, {@nocompress}, {@mode={'mode', 0x3d, 0x80}}, {}, {@block={'block', 0x3d, 0x200}}, {@map_acorn}, {@overriderock}, {@check_relaxed}, {@hide}]}, 0x1, 0xa51, &(0x7f0000001240)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)

2m5.057141892s ago: executing program 6 (id=1734):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0)
ioctl$I2C_SLAVE(0xffffffffffffffff, 0x703, 0x1c4)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)

2m2.702087077s ago: executing program 6 (id=1742):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000480)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m1.700647032s ago: executing program 34 (id=1742):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000480)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.437850428s ago: executing program 1 (id=2331):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e22, 0x6, @remote, 0x3}, {0xa, 0x4e20, 0xa, @empty, 0x5}, 0x1, {[0x4, 0x9, 0x9, 0xfffffe01, 0x932, 0x9, 0x7ff]}}, 0x5c)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0)

5.303586391s ago: executing program 1 (id=2332):
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
mlockall(0x2)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000))
clock_gettime(0x0, 0x0)
recvmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000002300)=""/4096, 0x1000}, 0x100}, {{&(0x7f0000000700)=@hci, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000000880)=""/207, 0xcf}, {0x0}, {&(0x7f0000000a40)=""/167, 0xa7}, {0x0}, {&(0x7f0000000b00)=""/198, 0xc6}, {&(0x7f0000000c00)=""/66, 0x42}, {&(0x7f0000000c80)=""/52, 0x34}], 0x8, &(0x7f0000000d80)=""/220, 0xdc}, 0x10000}], 0x2, 0x40000042, 0x0)
r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0)
write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0)
shmat(0x0, &(0x7f0000136000/0x4000)=nil, 0x4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x56}, 0x80)

4.347800765s ago: executing program 1 (id=2335):
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
sendmmsg$inet(r5, &(0x7f0000000800)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0xf00)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_stats})
mlockall(0x2)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000006c0)='rpcb_unregister\x00', 0xffffffffffffffff, 0x0, 0xffffeffffffffff0}, 0x18)
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000))
clock_gettime(0x0, 0x0)
recvmmsg(r3, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000002300)=""/4096, 0x1000}, 0x100}, {{&(0x7f0000000700)=@hci, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000000880)=""/207, 0xcf}, {0x0}, {&(0x7f0000000a40)=""/167, 0xa7}, {0x0}, {&(0x7f0000000b00)=""/198, 0xc6}, {&(0x7f0000000c00)=""/66, 0x42}, {&(0x7f0000000c80)=""/52, 0x34}], 0x8, &(0x7f0000000d80)=""/220, 0xdc}, 0x10000}], 0x2, 0x40000042, 0x0)
r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0)
write$dsp(r7, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0)
shmat(0x0, &(0x7f0000136000/0x4000)=nil, 0x4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x56}, 0x80)

4.347516215s ago: executing program 7 (id=2336):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="050200000000000000100f00000008000300", @ANYRES32=r2, @ANYBLOB="4d000e0080000000080211000001ffffffffffff0802110000000000000000000000000064007f5d0100060204022a01022d1a0020190900000000000000c90007001900000008000b0000000400000004000f00080026006c09000008000c006400000008000d00ffffffff0500d50003"], 0x90}}, 0x0)

3.851825773s ago: executing program 7 (id=2340):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x2}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r4, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000001c0)=0x7ff, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10)
shutdown(r5, 0x0)
setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20)

3.141991113s ago: executing program 4 (id=2342):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x50, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}}, 0x1040)

2.585763201s ago: executing program 4 (id=2344):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl(r1, 0x7, 0x0)

2.585081691s ago: executing program 7 (id=2345):
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6b8, &(0x7f0000000900)="$eJzs3c9vHGcZB/DvrNc/NpVct03TgCrVNFJBWCRxrBTCJQEhFKQKoSDB2WqcxsomDY6L0h6IW5C4cuAPKIdwgRMIISEhRSpnuFXcLE6VkLj0lPbAoJ2d3azdXf9IiNeBz8eaneedd/adZ57dmdldyZoA/7cuLqR5L61cXHjtdqe9eXepvXl36Xo3brSTTCdpJM3uLMWNpPgguZDulM91FtbDFaO288vVc5c+/Hjzo26rmQfjdR5aoxNs7mUvNuop80km6vkj2DLe6w833vSDsOhXplOwE73CwbhNJim3+NGxBz3DlBMDjZHHO/DkKLrXzQHd438uOZJkpndB2+h2Ng4+w13t61y08fjyAAAAgEPj6ft3ktuZHXceAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CSp7/9f1FOjF8+n6N3/f2rgHvtTY053tJ0zm+kF9xoHkQwAAAAAAAAAPF4v3c9vLpXlbK9dFmn8YKJuHK0en8pbuZWVrOVkbmc561nPWhaTzA0MNHV7eX19bTEvd5/5aVmWI555Zugzz+wx4daj7zMAAAAAAAAA/A85X8/fy8XMjjkXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYokgmurNqOtqL59JoJplJMtVZbyP5Wy9+kt0bdwIAAABwAJ6+n/u5ndleuyyq7/zHqu/9M3krN7Ke1aynnZVcrn4L6H7rb2zeXWpv3l263pk+O+43/vUg/v3srmlUI6b728PwLR+v1mjlSlarJSfzet5MO5fTqJ7ZcbyXz/C83u3kVJzvKstM76VAl+t5Z89/Uc8Ph7mqIpP9ipzu5FZ06/jMzpUYfHUeYkuLafR/+Tm6j5qf33Erxb/LshsdSS6kW+unvrN7zSf3tTOPZHslzgy8+47tXInki3/47Q+vtm9cu1psLPR2af7gct+Hl4Yvnv5H7xXqVaJrIytZGqjEC3uuxJVbC4fngNqX5pZWI8/344v5dr6fhczne1nLan6c5axnJfP5VhUt1+/nzuPczpW6sKU1sVtOU/XrMrEtpy883Z3vlNPL1XNns5rv5s1czkperf7OZDFfzdmczbmBV/j5PRz1jSFH/R9HJ3/iS3XQSvLzer7dzG4leCw6dX1moK6D59y5qm9wSSNlfWV59r92buxrfr4OOq/ETweOwfHrV2Im/atEL7vnehWYHFqJX1WnlVvtG9fWri7f3DZusTF8e69k6+4fnhNJ5/3ybP8csfXd0el7bmjfYtV3tN/X2N7361a/b7cjdar+DPfZkc5UfS8M7Vuq+o4P9HU+b3WOuZV8WpZl9/MWAIfekS8fmWr9s/XX1vutn7Wutl6b+eb016ZfnMrkXya/3jw98UrjxeJ3eT8/ye7f0AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF3devuda8vt9sratqAsyzsjuh5LkGayZcmf/zSwTnWvsSR7H7Cz9oVGUi1ppg62rvNeXYNR49x5uN1592GL8Pdd8jl8wczI98/24JOyLA9HznsJytphyWccwdhOScABObV+/eapW2+/85XV68tvrLyxcuPc2bPnTp87++rSqSur7fHcdhE4GNW1vvqcM+5MAAAAAAAAAAAAgL3a2z/nFP0lzST7/t8eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEdwcSHNeymyePrk6U578+5SuzP14gdrfpKkkaSYT4oPkgvpTpkbGK4YtZ2N5NKHH29+1G0166lav/Hoe7FRT5lPMlHPh5gZtrC8M2q8ohrn5ujx9qjoV6ZTsBO9wsG4/ScAAP//LrES8w==")
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
setreuid(0xffffffffffffffff, 0xee00)
fchown(r0, 0xffffffffffffffff, 0x0)

2.473535523s ago: executing program 5 (id=2346):
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000180)=0x86)
r0 = syz_clone(0x80020080, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
rt_sigqueueinfo(r0, 0x31, &(0x7f0000000000)={0x10, 0x7, 0xffffffc4})

2.369330594s ago: executing program 1 (id=2347):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x19, "90737f0000fbffffffffffffff679495ffffeb"})
r1 = dup(r0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x5, 0x9, 0xfefe, 0x2, 0x12, "fa72171135e46a6c"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff)

2.184958387s ago: executing program 7 (id=2348):
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000800)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0xf00)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_stats})
mlockall(0x2)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000006c0)='rpcb_unregister\x00', 0xffffffffffffffff, 0x0, 0xffffeffffffffff0}, 0x18)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000))
clock_gettime(0x0, 0x0)
recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000002300)=""/4096, 0x1000}, 0x100}, {{&(0x7f0000000700)=@hci, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000000880)=""/207, 0xcf}, {0x0}, {&(0x7f0000000a40)=""/167, 0xa7}, {0x0}, {&(0x7f0000000b00)=""/198, 0xc6}, {&(0x7f0000000c00)=""/66, 0x42}, {&(0x7f0000000c80)=""/52, 0x34}], 0x8, &(0x7f0000000d80)=""/220, 0xdc}, 0x10000}], 0x2, 0x40000042, 0x0)
r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0)
write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0)
shmat(0x0, &(0x7f0000136000/0x4000)=nil, 0x4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x56}, 0x80)

2.061425829s ago: executing program 1 (id=2349):
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
mlockall(0x2)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xffffeffffffffff0}, 0x18)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000))
clock_gettime(0x0, 0x0)
recvmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000002300)=""/4096, 0x1000}, 0x100}, {{&(0x7f0000000700)=@hci, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000000880)=""/207, 0xcf}, {0x0}, {&(0x7f0000000a40)=""/167, 0xa7}, {0x0}, {&(0x7f0000000b00)=""/198, 0xc6}, {&(0x7f0000000c00)=""/66, 0x42}, {&(0x7f0000000c80)=""/52, 0x34}], 0x8, &(0x7f0000000d80)=""/220, 0xdc}, 0x10000}], 0x2, 0x40000042, 0x0)
r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0)
write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0)
shmat(0x0, &(0x7f0000136000/0x4000)=nil, 0x4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x56}, 0x80)

2.061211719s ago: executing program 5 (id=2350):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, &(0x7f0000000100))

1.869800052s ago: executing program 4 (id=2351):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x2ffff, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x404c404, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback, 0x6}, 0x1c)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x83, &(0x7f00000000c0), 0x8)

1.676606865s ago: executing program 5 (id=2352):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@getroute={0x14, 0x1a, 0x4, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)

1.562979987s ago: executing program 5 (id=2354):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x20000800)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000240)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x78, 0x1, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffe, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6c7d56961af82eacb593aecc16eb8876552d4a77c33b1d8c9d0bb268e00aea77", "b5200517034fbe734c491867262fbe98", {"634dcc7ca667d7eb3cee735315079fd3", "e790d578e4c7ae3aca0a851e53b99eec"}}}}}}}, 0x0)

1.423244009s ago: executing program 5 (id=2357):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0)

1.280246971s ago: executing program 2 (id=2358):
timer_create(0x3, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)
unshare(0x40000000)
timer_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)

1.208399102s ago: executing program 7 (id=2359):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0xdddd0000, 0xeeef0000, 0x1, 0x0, 0x251cc4ca})

1.137647203s ago: executing program 1 (id=2360):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x1, 0x4, &(0x7f0000000040)={0x19, "78b3060abe61f6304382447c087935e141a6349f941d4dc197ce00"}})

962.005436ms ago: executing program 5 (id=2361):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl(r1, 0x7, 0x0)

915.678707ms ago: executing program 7 (id=2362):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

858.759537ms ago: executing program 4 (id=2363):
r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080))

851.432277ms ago: executing program 2 (id=2364):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
fchown(r0, r2, r3)

748.323209ms ago: executing program 2 (id=2365):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}]}})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r1, &(0x7f0000000c40)={0x2020}, 0x2020)

657.93841ms ago: executing program 2 (id=2366):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@utf8no}, {@uni_xlate}, {@fat=@errors_remount}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@rodir}]}, 0x2a, 0x33c, &(0x7f0000000a40)="$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")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.idle_time\x00', 0x275a, 0x0)

235.629346ms ago: executing program 4 (id=2367):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000100)={[{@quota}, {@bsdgroups}, {@nobh}, {@nodelalloc}, {@abort}]}, 0x4, 0x756, &(0x7f00000002c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000040)={0x2, 0x2, 0x0, 0x0})

87.605199ms ago: executing program 2 (id=2368):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x2, {0x2, 0xf0, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24040097)

268.26µs ago: executing program 2 (id=2369):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r1, 0x4)

0s ago: executing program 4 (id=2370):
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
mlockall(0x2)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xffffeffffffffff0}, 0x18)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000))
clock_gettime(0x0, 0x0)
recvmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000002300)=""/4096, 0x1000}, 0x100}, {{&(0x7f0000000700)=@hci, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000000880)=""/207, 0xcf}, {0x0}, {&(0x7f0000000a40)=""/167, 0xa7}, {0x0}, {&(0x7f0000000b00)=""/198, 0xc6}, {&(0x7f0000000c00)=""/66, 0x42}, {&(0x7f0000000c80)=""/52, 0x34}], 0x8, &(0x7f0000000d80)=""/220, 0xdc}, 0x10000}], 0x2, 0x40000042, 0x0)
r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0)
write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0)
shmat(0x0, &(0x7f0000136000/0x4000)=nil, 0x4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x56}, 0x80)

kernel console output (not intermixed with test programs):

65] FAT-fs (loop0): Directory bread(block 70) failed
[  673.712663][ T9165] FAT-fs (loop0): Directory bread(block 71) failed
[  673.738672][ T9165] FAT-fs (loop0): Directory bread(block 72) failed
[  673.790139][ T9165] FAT-fs (loop0): Directory bread(block 73) failed
[  674.056213][  T126] net_ratelimit: 18 callbacks suppressed
[  674.056234][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.126022][ T9182] netlink: 'syz.1.1132': attribute type 9 has an invalid length.
[  674.184277][ T9186] loop5: detected capacity change from 0 to 256
[  674.210039][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.249610][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.257825][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.266379][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.274982][ T3741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.421612][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.442236][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.522941][ T9208] netlink: 'syz.1.1141': attribute type 30 has an invalid length.
[  675.827110][ T9215] loop0: detected capacity change from 0 to 4096
[  675.855891][ T9215] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  675.971428][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.979917][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1146'.
[  675.996447][ T9215] ntfs3: loop0: failed to convert "c46c" to cp864
[  676.290071][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.359298][ T9196] loop5: detected capacity change from 0 to 40427
[  676.401077][ T9196] F2FS-fs (loop5): Wrong segment_count / block_count (64 > 16384)
[  676.408972][ T9196] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  676.461855][ T9196] F2FS-fs (loop5): Found nat_bits in checkpoint
[  676.561131][ T9196] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  676.568499][ T9196] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  676.683333][ T7235] syz-executor: attempt to access beyond end of device
[  676.683333][ T7235] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  676.886385][ T9228] loop0: detected capacity change from 0 to 4096
[  676.943640][ T9228] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00
[  676.984789][ T9228] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00
[  677.015263][ T9228] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00
[  677.066641][ T9228] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00
[  677.110009][ T9228] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00
[  677.135904][ T9228] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00
[  677.160016][ T9228] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00
[  677.181026][ T9228] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00
[  677.237243][ T9228] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00
[  677.288884][ T9238] netlink: 'syz.5.1148': attribute type 9 has an invalid length.
[  677.299980][ T9228] ntfs3: loop0: try to read out of volume at offset 0x3fffffe0c00
[  678.758808][ T9256] loop5: detected capacity change from 0 to 256
[  678.782884][ T9256] exfat: Deprecated parameter 'namecase'
[  678.845017][ T9256] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  678.865175][ T9258] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1162'.
[  679.139505][ T9246] Process accounting resumed
[  679.329770][ T9274] net_ratelimit: 14 callbacks suppressed
[  679.329792][ T9274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.347256][ T9274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.363289][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.371926][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.380403][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.410066][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.521526][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.533841][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.034820][ T9266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.039922][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.101312][ T9287] loop5: detected capacity change from 0 to 128
[  681.187611][ T9287] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  681.197042][ T9287] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  681.307950][ T7235] EXT4-fs (loop5): unmounting filesystem.
[  681.330342][ T5612] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  681.389951][ T4332] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  681.443762][ T9294] loop5: detected capacity change from 0 to 1024
[  681.464226][ T9294] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  681.475359][ T9294] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  681.487038][ T9294] jbd2_journal_init_inode: Cannot locate journal superblock
[  681.494699][ T9294] EXT4-fs (loop5): Could not load journal inode
[  681.520186][ T5612] usb 2-1: Using ep0 maxpacket: 8
[  681.529825][ T5612] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  681.539292][ T5612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.547892][ T5612] usb 2-1: Product: syz
[  681.565526][ T5612] usb 2-1: Manufacturer: syz
[  681.582199][ T5612] usb 2-1: SerialNumber: syz
[  681.595667][ T4332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  681.602523][ T5612] usb 2-1: config 0 descriptor??
[  681.626309][ T5612] gspca_main: se401-2.14.0 probing 047d:5003
[  681.630366][ T4332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  681.660064][ T4332] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  681.686915][ T4332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.717425][ T4332] usb 1-1: config 0 descriptor??
[  681.818440][ T9300] loop5: detected capacity change from 0 to 190
[  681.840426][ T9300] ntfs: (device loop5): is_boot_sector_ntfs(): Invalid boot sector checksum.
[  681.860537][ T9300] ntfs: (device loop5): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing.
[  681.877001][ T9300] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  681.911451][ T9300] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  681.936869][ T9300] ntfs: volume version 3.1.
[  681.944400][ T9300] ntfs: (device loop5): load_system_files(): Volume is dirty.  Will not be able to remount read-write.  Run chkdsk and mount in Windows.
[  681.965553][ T9300] ntfs: (device loop5): ntfs_read_locked_inode(): Inode is an extent inode!
[  681.974602][ T9300] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x2 as bad.  Run chkdsk.
[  682.004748][ T9300] ntfs: (device loop5): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  682.020448][ T9300] ntfs: (device loop5): ntfs_lookup_inode_by_name(): No index allocation attribute but index entry requires one. Directory inode 0x5 is corrupt or driver bug.
[  682.036682][ T9300] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  682.050870][ T9300] syz.5.1178: attempt to access beyond end of device
[  682.050870][ T9300] loop5: rw=0, sector=224, nr_sectors = 8 limit=190
[  682.069816][ T5612] gspca_se401: Wrong descriptor type
[  682.078298][ T9300] syz.5.1178: attempt to access beyond end of device
[  682.078298][ T9300] loop5: rw=0, sector=240, nr_sectors = 8 limit=190
[  682.193216][ T4332] razer 0003:1532:010E.0001: unknown main item tag 0x1
[  682.202282][ T4332] razer 0003:1532:010E.0001: ignoring exceeding usage max
[  682.291204][ T3741] usb 2-1: USB disconnect, device number 9
[  682.364603][ T4332] razer 0003:1532:010E.0001: failed to enable macro keys: -71
[  682.400458][ T4332] razer 0003:1532:010E.0001: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0
[  682.432547][ T4332] usb 1-1: USB disconnect, device number 8
[  682.540251][ T4273] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  682.550817][ T5612] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  682.552166][ T4273] Bluetooth: hci2: Injecting HCI hardware error event
[  682.568862][   T48] Bluetooth: hci2: hardware error 0x00
[  682.641090][ T9308] fido_id[9308]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  682.681853][ T9303] Process accounting resumed
[  682.788383][ T5612] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  682.799436][ T5612] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  682.817142][ T5612] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  682.826817][ T5612] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.844044][ T5612] usb 6-1: config 0 descriptor??
[  683.186467][ T9321] loop0: detected capacity change from 0 to 64
[  683.826297][ T5612] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0
[  683.859081][ T5612] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0
[  683.877165][ T5612] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0
[  683.897500][ T5612] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0
[  683.908021][ T5612] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0
[  683.924787][ T5612] kone 0003:1E7D:2CED.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0
[  684.039295][ T3741] usb 6-1: USB disconnect, device number 3
[  684.218310][ T9332] fido_id[9332]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  684.318052][  T126] Process accounting resumed
[  684.610106][   T48] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  684.770027][    C0] net_ratelimit: 29 callbacks suppressed
[  684.770049][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.046083][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.054575][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.078665][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.100068][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.343997][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.453298][ T9347] loop0: detected capacity change from 0 to 1024
[  685.506754][ T9347] hfsplus: bad catalog entry type
[  685.565210][ T4346] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  685.573644][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.574613][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.593058][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.607985][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.693827][   T56] hfsplus: b-tree write err: -5, ino 4
[  685.835513][ T4346] usb 6-1: Using ep0 maxpacket: 32
[  685.853040][ T4346] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  685.874678][ T4346] usb 6-1: config 0 has no interface number 0
[  685.898745][ T4346] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  685.913430][ T4346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.927159][ T4346] usb 6-1: Product: syz
[  685.936990][ T4346] usb 6-1: Manufacturer: syz
[  685.943176][ T4346] usb 6-1: SerialNumber: syz
[  685.956212][ T4346] usb 6-1: config 0 descriptor??
[  685.987705][ T4346] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  686.290021][ T5612] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  686.504606][ T4415] Process accounting resumed
[  686.513359][ T5612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  686.584276][ T5612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  686.678049][ T5612] usb 1-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[  686.783365][ T5612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.960327][ T5612] usb 1-1: config 0 descriptor??
[  687.177388][ T4346] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  687.232977][ T4346] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  687.372524][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  687.372966][  T126] usb 6-1: USB disconnect, device number 4
[  687.465078][  T126] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  687.482934][ T5612] waltop 0003:172F:0038.0003: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.0-1/input0
[  687.540660][  T126] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  687.569465][  T126] quatech2 6-1:0.51: device disconnected
[  687.684343][ T5612] usb 1-1: USB disconnect, device number 9
[  687.828365][ T9381] fido_id[9381]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  688.260458][ T4332] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  688.452419][ T4332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  688.479997][ T4332] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00
[  688.489110][ T4332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.522305][ T4332] usb 6-1: config 0 descriptor??
[  688.552014][  T126] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  688.567837][ T9405] can0: slcan on ptm1.
[  688.694187][ T9404] can0 (unregistered): slcan off ptm1.
[  688.753226][  T126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  688.780128][  T126] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  688.819979][  T126] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  688.864507][  T126] usb 2-1: config 0 interface 0 has no altsetting 0
[  688.887543][  T126] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  688.924727][  T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.952482][ T4332] lenovo 0003:17EF:60A3.0004: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.5-1/input0
[  688.982523][  T126] usb 2-1: config 0 descriptor??
[  689.142809][ T4332] usb 6-1: USB disconnect, device number 5
[  689.153668][ T9416] loop0: detected capacity change from 0 to 4096
[  689.218207][ T9416] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  689.266486][ T9416] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096)
[  689.273113][ T9419] fido_id[9419]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  689.366133][ T9424] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  689.415493][  T126] kye 0003:0458:5015.0005: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0
[  689.460182][  T126] kye 0003:0458:5015.0005: tablet-enabling feature report not found
[  689.477634][  T126] kye 0003:0458:5015.0005: tablet enabling failed
[  689.614556][ T3741] usb 2-1: USB disconnect, device number 10
[  689.867243][ T9420] Process accounting resumed
[  689.934216][ T9427] fido_id[9427]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  689.970000][    C0] net_ratelimit: 24 callbacks suppressed
[  689.970019][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.411984][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.422418][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.494456][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.502918][ T3741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.543399][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.693191][ T1265] ieee802154 phy0 wpan0: encryption failed: -22
[  690.706207][ T1265] ieee802154 phy1 wpan1: encryption failed: -22
[  691.040238][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.333870][ T4400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.348935][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.581057][ T3741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  693.262198][ T5730] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  694.019702][ T4660] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  694.481297][ T4660] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  694.556932][ T4660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  694.603166][ T4660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  694.637948][ T4660] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  694.666443][ T9505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1246'.
[  694.670715][ T4660] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  694.702424][ T4660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.715297][ T4660] usb 2-1: config 0 descriptor??
[  694.771550][ T9498] Process accounting resumed
[  694.968872][ T9515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1250'.
[  695.170088][    C0] net_ratelimit: 22 callbacks suppressed
[  695.170106][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  695.200144][ T4346] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  695.282668][ T4660] hid-picolcd 0003:04D8:C002.0006: No report with id 0x11 found
[  695.420120][ T4346] usb 6-1: Using ep0 maxpacket: 32
[  695.429431][ T4346] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  695.469211][ T4346] usb 6-1: config 0 has no interface number 0
[  695.479949][ T4346] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  695.483569][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1254'.
[  695.489036][ T4346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.489063][ T4346] usb 6-1: Product: syz
[  695.489085][ T4346] usb 6-1: Manufacturer: syz
[  695.516200][ T4660] usb 2-1: USB disconnect, device number 11
[  695.528557][ T4346] usb 6-1: SerialNumber: syz
[  695.548616][ T4346] usb 6-1: config 0 descriptor??
[  695.594243][ T4346] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  695.614841][ T4346] usb 6-1: selecting invalid altsetting 1
[  695.622935][ T4346] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  695.667096][ T4346] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  695.701131][ T4346] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  695.711407][ T4346] usb 6-1: media controller created
[  695.740779][ T4346] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  696.011963][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.025764][ T4346] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  696.042311][ T4346] zl10353_read_register: readreg error (reg=127, ret==-71)
[  696.059352][ T4346] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  696.210023][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.602399][ T3741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.611193][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.623814][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.773146][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.782663][ T4346] usb 6-1: USB disconnect, device number 6
[  696.783860][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.808122][ T4400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.888363][ T9548] Process accounting resumed
[  696.900615][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.930084][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  697.093998][ T9558] loop5: detected capacity change from 0 to 1024
[  697.194810][ T9558] hfsplus: bad catalog entry type
[  698.114180][ T4400] hfsplus: b-tree write err: -5, ino 4
[  698.263123][    T7] usb 2-1: new low-speed USB device number 12 using dummy_hcd
[  698.454102][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  698.474074][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  698.509089][    T7] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  698.535051][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.552992][    T7] usb 2-1: config 0 descriptor??
[  698.797834][ T9572] loop0: detected capacity change from 0 to 32768
[  698.815907][ T9572] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1269 (9572)
[  699.618272][    T7] glorious 0003:258A:0036.0007: item fetching failed at offset 0/2
[  699.627000][    T7] glorious: probe of 0003:258A:0036.0007 failed with error -22
[  699.685625][ T9572] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  699.720135][ T9572] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  699.740943][    T7] usb 2-1: USB disconnect, device number 12
[  699.772934][ T9572] BTRFS info (device loop0): using free space tree
[  700.530004][    C0] net_ratelimit: 15 callbacks suppressed
[  700.530025][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.540474][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.591599][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.642648][ T3741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.651980][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.698156][ T9572] BTRFS info (device loop0): enabling ssd optimizations
[  700.884804][ T5730] Process accounting resumed
[  701.547636][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.570060][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.570393][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.658674][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.685729][ T4275] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  701.740460][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.019939][   T48] Bluetooth: hci4: command 0x0406 tx timeout
[  704.431334][ T3741] Process accounting resumed
[  704.770095][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  705.474492][ T9676] futex_wake_op: syz.1.1300 tries to shift op by -1; fix this program
[  705.498087][ T9678] loop5: detected capacity change from 0 to 64
[  705.520093][ T9646] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  705.858166][ T9646] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  705.874146][ T9646] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  705.884399][ T9646] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  705.899389][ T9646] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  706.210680][ T5730] net_ratelimit: 27 callbacks suppressed
[  706.210700][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  706.650052][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  706.661590][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  706.670059][ T3741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  706.671083][ T9646] usb 1-1: config 0 descriptor??
[  706.684908][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  706.913530][    T7] Process accounting resumed
[  707.070552][    T7] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  707.196269][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.331065][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.370249][    T7] usb 2-1: Using ep0 maxpacket: 32
[  707.403059][    T7] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  707.484343][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.497218][ T9646] isku 0003:1E7D:319C.0008: ignoring exceeding usage max
[  707.510895][    T7] usb 2-1: config 0 has no interface number 0
[  707.518861][ T9646] isku 0003:1E7D:319C.0008: unbalanced collection at end of report description
[  707.538722][    T7] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  707.552911][ T9646] isku 0003:1E7D:319C.0008: parse failed
[  707.559519][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.567861][ T9646] isku: probe of 0003:1E7D:319C.0008 failed with error -22
[  707.576553][    T7] usb 2-1: Product: syz
[  707.583674][    T7] usb 2-1: Manufacturer: syz
[  707.588624][    T7] usb 2-1: SerialNumber: syz
[  707.618556][    T7] usb 2-1: config 0 descriptor??
[  707.686439][    T7] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  707.730082][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.774825][    T7] usb 2-1: selecting invalid altsetting 1
[  707.860439][    T7] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  708.395940][    T7] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  708.400289][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.509073][    T7] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  708.528403][    T7] usb 2-1: media controller created
[  708.571244][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  708.874095][ T9646] usb 1-1: USB disconnect, device number 10
[  709.083413][    T7] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  709.347646][    T7] zl10353_read_register: readreg error (reg=127, ret==-71)
[  709.460236][    T7] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  709.568187][ T9716] loop5: detected capacity change from 0 to 2048
[  709.575684][    T7] usb 2-1: USB disconnect, device number 13
[  709.647799][ T9712] Process accounting resumed
[  709.677315][ T9725] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  709.819170][   T27] kauditd_printk_skb: 11 callbacks suppressed
[  709.819190][   T27] audit: type=1800 audit(1751661036.437:247): pid=9716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1314" name="file2" dev="loop5" ino=16 res=0 errno=0
[  709.895453][ T9716] NILFS error (device loop5): nilfs_sufile_mark_dirty: active segment 3 is erroneous
[  709.935007][ T9716] Remounting filesystem read-only
[  709.942889][ T9724] loop0: detected capacity change from 0 to 4096
[  710.469754][ T9724] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  710.775608][ T9724] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  710.803585][ T7235] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  711.152126][ T9646] Process accounting resumed
[  711.787942][ T4346] net_ratelimit: 13 callbacks suppressed
[  711.787963][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.813166][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.821662][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.889982][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.993735][ T4437] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22.
[  712.018435][ T4275] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  712.852364][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  712.861530][ T3741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  712.930140][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.084265][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.093253][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.103900][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.448889][ T4310] Process accounting resumed
[  714.821244][ T9774] Process accounting resumed
[  715.281201][    T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  715.374850][ T9809] tipc: Started in network mode
[  715.407805][ T9809] tipc: Node identity 4, cluster identity 4711
[  715.427859][ T9809] tipc: Node number set to 4
[  715.470001][    T7] usb 1-1: Using ep0 maxpacket: 32
[  715.477386][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  715.496785][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  715.543914][    T7] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  716.075804][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  716.094377][    T7] usb 1-1: config 0 descriptor??
[  716.376782][ T9816] Process accounting resumed
[  716.508069][ T9830] kAFS: unable to lookup cell ''
[  716.518750][    T7] greenasia 0003:0E8F:0012.0009: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.0-1/input0
[  716.532877][ T9832] loop5: detected capacity change from 0 to 64
[  716.542722][    T7] greenasia 0003:0E8F:0012.0009: no inputs found
[  716.658636][   T27] audit: type=1800 audit(1751661043.337:248): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1356" name="bus" dev="loop5" ino=21 res=0 errno=0
[  716.718045][    T7] usb 1-1: USB disconnect, device number 11
[  716.766784][ T9834] fido_id[9834]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  716.920080][ T4310] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  716.994771][ T9646] Process accounting resumed
[  717.665195][    T7] net_ratelimit: 16 callbacks suppressed
[  717.665215][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.679157][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.687782][ T3741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.972417][ T4310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  717.985450][ T4310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  717.995319][ T4310] usb 2-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00
[  718.004506][ T4310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.420211][ T4346] Process accounting resumed
[  718.515809][ T4310] usb 2-1: config 0 descriptor??
[  718.700793][ T3741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  718.712655][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  718.788928][ T9865] loop5: detected capacity change from 0 to 4096
[  718.834625][ T9865] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512)
[  718.893132][ T9865] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  718.954373][ T4310] wacom 0003:056A:0090.000A: hidraw0: USB HID v40.00 Device [HID 056a:0090] on usb-dummy_hcd.1-1/input0
[  718.984319][ T9873] tipc: Started in network mode
[  718.999995][ T9873] tipc: Node identity , cluster identity 4711
[  719.006154][ T9873] tipc: Failed to obtain node identity
[  719.066711][ T9873] tipc: Enabling of bearer <eth:wg0> rejected, failed to enable media
[  719.139541][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1372'.
[  719.145880][ T4310] usb 2-1: USB disconnect, device number 14
[  719.163949][ T4577] ntfs3: loop5: ntfs3_write_inode r=5 failed, -22.
[  719.180542][ T7235] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22.
[  719.230130][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  719.250196][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  719.288115][ T9874] fido_id[9874]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  719.413255][ T9885] syz.2.1376 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  719.610469][ T5730] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  720.130000][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  720.161672][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  720.172610][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  720.179713][    T7] Process accounting resumed
[  720.251072][ T5730] usb 6-1: Using ep0 maxpacket: 8
[  720.265919][ T5730] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  720.282688][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.299434][ T5730] usb 6-1: Product: syz
[  720.309415][ T5730] usb 6-1: Manufacturer: syz
[  720.318552][ T5730] usb 6-1: SerialNumber: syz
[  720.332187][ T5730] usb 6-1: config 0 descriptor??
[  720.347632][ T5730] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  720.364204][ T5730] usb 6-1: setting power ON
[  720.372915][ T5730] dvb-usb: bulk message failed: -22 (2/0)
[  720.383291][ T5730] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  720.398279][ T5730] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  720.435051][ T5730] usb 6-1: media controller created
[  720.500047][ T5730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  720.550807][ T9880] dvb-usb: bulk message failed: -22 (3/0)
[  720.574281][ T5730] usb 6-1: selecting invalid altsetting 6
[  720.594327][ T5730] usb 6-1: digital interface selection failed (-22)
[  720.614738][ T5730] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  720.646798][ T5730] usb 6-1: setting power OFF
[  720.663987][ T5730] dvb-usb: bulk message failed: -22 (2/0)
[  720.684122][ T5730] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  720.715336][ T5730] (NULL device *): no alternate interface
[  720.767947][ T5730] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  720.822916][ T5730] usb 6-1: USB disconnect, device number 7
[  720.906832][  T126] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  721.111433][  T126] usb 2-1: Using ep0 maxpacket: 8
[  721.196036][  T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  721.385017][  T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  721.560804][  T126] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  721.690859][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  721.716152][  T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  721.791824][  T126] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  721.801846][  T126] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  721.811375][  T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.829014][  T126] usb 2-1: config 0 descriptor??
[  721.853251][   T48] Bluetooth: hci5: urb ffff888023a25e00 submission failed (90)
[  722.041779][  T126] usb 2-1: USB disconnect, device number 15
[  722.090565][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1390'.
[  722.473822][ T9934] netlink: 'syz.5.1396': attribute type 1 has an invalid length.
[  722.782327][ T5730] net_ratelimit: 3 callbacks suppressed
[  722.782347][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  722.989976][ T4310] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  723.010096][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  723.188953][ T5730] Process accounting resumed
[  723.210071][ T4310] usb 1-1: Using ep0 maxpacket: 32
[  723.233041][ T4310] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  723.352248][ T4310] usb 1-1: config 0 has no interface number 0
[  723.460850][ T4310] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  723.581222][ T4310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.715122][ T4310] usb 1-1: Product: syz
[  723.790396][ T4310] usb 1-1: Manufacturer: syz
[  723.861510][ T4310] usb 1-1: SerialNumber: syz
[  723.865400][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  723.967241][ T4310] usb 1-1: config 0 descriptor??
[  723.982671][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.021690][ T4310] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  724.060423][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.202368][ T4310] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  724.228814][ T4310] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  724.370144][ T9646] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  724.585758][ T9646] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  724.640983][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  724.660194][ T9646] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  724.746332][ T9646] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  724.824392][ T9646] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  725.011723][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  725.303126][ T9646] usb 6-1: config 0 descriptor??
[  725.323670][  T126] usb 1-1: USB disconnect, device number 12
[  725.330299][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  725.352721][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  725.361149][ T4660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  725.377449][  T126] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  725.398382][  T126] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  725.435605][  T126] quatech2 1-1:0.51: device disconnected
[  725.730659][ T4332] Process accounting resumed
[  726.052286][ T3741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  726.412681][ T9646] hid (null): usage index exceeded
[  726.421300][ T9646] magicmouse 0003:05AC:0269.000B: ignoring exceeding usage max
[  726.430449][ T9646] magicmouse 0003:05AC:0269.000B: ignoring exceeding usage max
[  726.439072][ T9646] magicmouse 0003:05AC:0269.000B: usage index exceeded
[  726.446082][ T9646] magicmouse 0003:05AC:0269.000B: item 0 1 2 2 parsing failed
[  726.498517][ T9646] magicmouse 0003:05AC:0269.000B: magicmouse hid parse failed
[  726.515797][ T9646] magicmouse: probe of 0003:05AC:0269.000B failed with error -22
[  726.712701][ T4332] Process accounting resumed
[  726.981952][ T4332] usb 6-1: USB disconnect, device number 8
[  727.794246][T10016] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  728.636954][ T3741] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  728.657959][ T9646] net_ratelimit: 4 callbacks suppressed
[  728.657979][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.688723][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.700325][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.709137][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  729.237682][ T9646] Process accounting resumed
[  729.260088][ T3741] usb 1-1: Using ep0 maxpacket: 16
[  729.270890][ T3741] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  729.282159][ T3741] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  729.292079][ T3741] usb 1-1: config 0 interface 0 has no altsetting 0
[  729.299011][ T3741] usb 1-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00
[  729.308532][ T3741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.325931][ T3741] usb 1-1: config 0 descriptor??
[  729.534617][T10033] Process accounting resumed
[  729.730489][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  729.739187][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  729.829478][ T3741] chicony 0003:04F2:0418.000C: hidraw0: USB HID v0.00 Device [HID 04f2:0418] on usb-dummy_hcd.0-1/input0
[  730.047148][ T9646] usb 1-1: USB disconnect, device number 13
[  730.135461][T10043] fido_id[10043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  730.263890][T10045] loop5: detected capacity change from 0 to 4096
[  730.296744][T10045] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  730.378465][T10045] ntfs: volume version 3.1.
[  730.755267][T10056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1444'.
[  730.777460][ T3741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  730.786098][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  731.730434][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  731.738928][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.864816][T10074] loop0: detected capacity change from 0 to 512
[  732.894779][T10074] EXT4-fs: Ignoring removed orlov option
[  732.903292][ T4332] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  732.942597][T10074] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  732.992882][T10074] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  733.094606][ T4332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  733.130146][ T4332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  733.177992][ T4332] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  733.229949][ T4332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.243191][ T4332] usb 2-1: config 0 descriptor??
[  733.277747][T10083] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #12: comm syz.0.1450: Directory hole found for htree leaf block 0
[  733.323712][T10083] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only
[  733.919039][ T4275] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  733.939195][ T4275] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  733.966429][ T4275] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  733.980883][ T3741] net_ratelimit: 5 callbacks suppressed
[  733.980901][ T3741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.995608][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  734.010715][ T4275] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  734.030564][ T4275] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  734.053288][ T4275] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  734.074470][ T4332] playstation 0003:054C:0DF2.000D: item fetching failed at offset 1/5
[  734.078955][ T4275] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  734.090964][ T4332] playstation 0003:054C:0DF2.000D: Parse failed
[  734.101557][ T4275] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  734.115734][ T4332] playstation: probe of 0003:054C:0DF2.000D failed with error -22
[  734.173582][ T4275] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  734.188073][ T4275] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  734.278602][ T4332] usb 2-1: USB disconnect, device number 16
[  734.339480][T10103] 9pnet_fd: Insufficient options for proto=fd
[  734.770446][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  735.344459][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  735.352686][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  735.352796][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  735.862162][ T4751] EXT4-fs (loop0): unmounting filesystem.
[  735.940535][ T4346] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  736.161036][ T4346] usb 6-1: Using ep0 maxpacket: 8
[  736.178669][ T4346] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  736.262530][ T4346] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  736.313533][ T4346] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  736.364632][ T4346] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  736.399884][ T4346] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  736.435434][ T4346] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  736.461182][ T4346] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  736.492941][ T4346] usb 6-1: config 0 descriptor??
[  736.556598][   T48] Bluetooth: hci3: urb ffff888079485d00 submission failed (90)
[  736.583079][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  736.656329][T10115] Process accounting resumed
[  736.687495][   T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.736900][ T4310] usb 6-1: USB disconnect, device number 9
[  736.788342][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  736.927528][ T4273] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  736.939740][ T4273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  736.949646][ T4273] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  736.959798][ T4273] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  736.967553][ T4273] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  736.975124][ T4273] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  736.983646][   T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.651083][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  737.823691][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  737.867122][   T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.957315][T10133] loop5: detected capacity change from 0 to 1024
[  737.999262][T10133] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  738.053860][   T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  739.153041][T10123] chnl_net:caif_netlink_parms(): no params data found
[  739.250273][ T4270] Bluetooth: hci3: command 0x0409 tx timeout
[  739.257330][T10150] device bridge0 entered promiscuous mode
[  739.274335][T10150] device macsec1 entered promiscuous mode
[  739.288525][T10150] bridge0: port 3(macsec1) entered blocking state
[  739.303394][T10150] bridge0: port 3(macsec1) entered disabled state
[  739.588371][T10150] device bridge0 left promiscuous mode
[  740.161063][ T3741] net_ratelimit: 1 callbacks suppressed
[  740.161082][ T3741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.210468][T10155] Process accounting resumed
[  740.381867][T10158] Process accounting resumed
[  740.715172][T10123] bridge0: port 1(bridge_slave_0) entered blocking state
[  740.751131][T10123] bridge0: port 1(bridge_slave_0) entered disabled state
[  740.778893][T10123] device bridge_slave_0 entered promiscuous mode
[  740.854449][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.869931][  T126] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  740.883518][T10123] bridge0: port 2(bridge_slave_1) entered blocking state
[  740.896178][T10123] bridge0: port 2(bridge_slave_1) entered disabled state
[  740.906580][T10123] device bridge_slave_1 entered promiscuous mode
[  741.025859][T10123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  741.041775][T10123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  741.064168][  T126] usb 6-1: config 0 has an invalid interface number: 151 but max is 2
[  741.093828][  T126] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3
[  741.115679][  T126] usb 6-1: config 0 has no interface number 0
[  741.133753][  T126] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  741.160024][  T126] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  741.179446][T10123] team0: Port device team_slave_0 added
[  741.190222][ T3741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  741.192306][  T126] usb 6-1: Dual-Role OTG device on HNP port
[  741.227281][  T126] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  741.239368][  T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.248716][  T126] usb 6-1: Product: syz
[  741.258028][  T126] usb 6-1: Manufacturer: syz
[  741.276381][T10123] team0: Port device team_slave_1 added
[  741.288452][  T126] usb 6-1: SerialNumber: syz
[  741.318697][  T126] usb 6-1: config 0 descriptor??
[  741.330332][ T4270] Bluetooth: hci3: command 0x041b tx timeout
[  741.409025][T10123] batman_adv: batadv0: Adding interface: batadv_slave_0
[  741.426783][T10123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  741.475075][T10123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  741.784109][T10123] batman_adv: batadv0: Adding interface: batadv_slave_1
[  741.834459][T10123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  741.980522][   T27] audit: type=1326 audit(1751661068.668:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.1.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5f58e929 code=0x7ffc0000
[  742.190848][T10123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  742.202804][   T27] audit: type=1326 audit(1751661068.738:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.1.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5f58e929 code=0x7ffc0000
[  742.229486][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  742.267313][  T126] usb 6-1: USB disconnect, device number 10
[  742.338524][   T27] audit: type=1326 audit(1751661068.758:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.1.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f1d5f58e929 code=0x7ffc0000
[  742.522686][   T27] audit: type=1326 audit(1751661068.768:252): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.1.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5f58e929 code=0x7ffc0000
[  742.522734][   T27] audit: type=1326 audit(1751661068.778:253): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.1.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5f58e929 code=0x7ffc0000
[  742.522771][   T27] audit: type=1326 audit(1751661068.798:254): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.1.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f1d5f58e929 code=0x7ffc0000
[  742.522809][   T27] audit: type=1326 audit(1751661068.848:255): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.1.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5f58e929 code=0x7ffc0000
[  743.055556][T10123] device hsr_slave_0 entered promiscuous mode
[  743.070666][T10123] device hsr_slave_1 entered promiscuous mode
[  743.089200][T10123] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  743.089606][T10123] Cannot create hsr debugfs directory
[  743.345932][T10203] Process accounting resumed
[  743.390612][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  743.425035][ T4270] Bluetooth: hci3: command 0x040f tx timeout
[  743.631090][  T126] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  743.833152][  T126] usb 6-1: Using ep0 maxpacket: 32
[  743.843604][  T126] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  743.876119][  T126] usb 6-1: config 0 has no interface number 0
[  743.885089][  T126] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  743.910071][  T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.918233][  T126] usb 6-1: Product: syz
[  743.941439][  T126] usb 6-1: Manufacturer: syz
[  743.946674][  T126] usb 6-1: SerialNumber: syz
[  743.952163][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  743.971442][  T126] usb 6-1: config 0 descriptor??
[  743.980237][  T126] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  744.188510][  T126] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  744.237700][  T126] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  744.282374][ T7483] udevd[7483]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  744.450613][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.662617][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  744.663852][ T3741] usb 6-1: USB disconnect, device number 11
[  744.680825][ T3741] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  744.828996][ T3741] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  745.081696][ T3741] quatech2 6-1:0.51: device disconnected
[  745.490072][ T4270] Bluetooth: hci3: command 0x0419 tx timeout
[  745.507048][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.539639][   T46] device hsr_slave_0 left promiscuous mode
[  745.602844][   T46] device hsr_slave_1 left promiscuous mode
[  745.619099][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  745.646774][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  745.662428][ T4270] Bluetooth: hci0: command 0x2016 tx timeout
[  745.681665][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  745.706211][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  745.716915][   T46] device dummy0 left promiscuous mode
[  745.755950][   T46] bridge0: port 3(dummy0) entered disabled state
[  745.810329][T10233] IPVS: persistence engine module ip_vs_pe_six not found
[  745.821286][   T46] device bridge_slave_1 left promiscuous mode
[  745.827591][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  745.881484][   T46] device bridge_slave_0 left promiscuous mode
[  745.889580][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  745.998991][   T46] device veth1_macvtap left promiscuous mode
[  746.015635][   T46] device veth0_macvtap left promiscuous mode
[  746.036950][   T46] device veth1_vlan left promiscuous mode
[  746.060133][   T46] device veth0_vlan left promiscuous mode
[  746.370467][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.440562][   T46] bond1 (unregistering): Released all slaves
[  746.543757][ T3741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.867566][T10265] trusted_key: encrypted_key: insufficient parameters specified
[  747.017999][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.570224][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.730007][   T48] Bluetooth: hci0: command 0x0419 tx timeout
[  748.427146][   T46] team0 (unregistering): Port device team_slave_1 removed
[  748.490811][   T46] team0 (unregistering): Port device team_slave_0 removed
[  748.551772][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  748.560828][   T46] device bond_slave_1 left promiscuous mode
[  748.621157][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  748.630482][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  748.639718][   T46] device bond_slave_0 left promiscuous mode
[  749.365753][   T46] bond0 (unregistering): Released all slaves
[  749.490038][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'.
[  749.650452][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  749.810193][   T48] Bluetooth: hci0: command 0x0406 tx timeout
[  749.971818][T10123] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  749.990084][ T4346] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  750.055345][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  750.077908][T10123] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  750.099745][T10306] loop5: detected capacity change from 0 to 128
[  750.122258][T10123] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  750.160370][T10306] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  750.205334][ T4346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  750.217561][T10123] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  750.231601][ T4346] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  750.253154][ T4346] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  750.262631][ T4346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  750.280659][ T4346] usb 2-1: config 0 descriptor??
[  750.289557][T10306] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  750.291266][ T4346] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  750.305327][ T4346] dvb-usb: bulk message failed: -22 (3/0)
[  750.315875][ T4346] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  750.327471][ T4346] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  750.335013][ T4346] usb 2-1: media controller created
[  750.349675][ T4346] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  750.352568][T10306] ext2 filesystem being mounted at /163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  750.362243][ T4346] dvb-usb: bulk message failed: -22 (6/0)
[  750.420223][ T4346] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  750.471822][ T4346] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20
[  750.524126][ T4346] dvb-usb: schedule remote query interval to 150 msecs.
[  750.544357][ T4346] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  750.690721][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  750.703742][ T3741] dvb-usb: bulk message failed: -22 (1/0)
[  750.711578][ T3741] dvb-usb: error while querying for an remote control event.
[  750.739169][T10123] 8021q: adding VLAN 0 to HW filter on device bond0
[  750.859990][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  750.917696][ T4346] dvb-usb: bulk message failed: -22 (1/0)
[  751.005185][ T4346] dvb-usb: error while querying for an remote control event.
[  751.188495][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  751.278757][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  751.379493][ T3741] dvb-usb: bulk message failed: -22 (1/0)
[  751.404985][ T3741] dvb-usb: error while querying for an remote control event.
[  751.470497][T10123] 8021q: adding VLAN 0 to HW filter on device team0
[  751.544355][ T7235] EXT4-fs (loop5): unmounting filesystem.
[  751.558383][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  751.633797][T10328] Process accounting resumed
[  751.648222][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  751.657231][ T4577] bridge0: port 1(bridge_slave_0) entered blocking state
[  751.664434][ T4577] bridge0: port 1(bridge_slave_0) entered forwarding state
[  751.683501][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  751.730639][ T3741] dvb-usb: bulk message failed: -22 (1/0)
[  751.736451][ T3741] dvb-usb: error while querying for an remote control event.
[  751.739331][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  751.772938][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  751.786079][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  751.823010][ T4409] bridge0: port 2(bridge_slave_1) entered blocking state
[  751.830283][ T4409] bridge0: port 2(bridge_slave_1) entered forwarding state
[  751.865813][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  751.882810][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  751.926255][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  751.940131][ T4310] dvb-usb: bulk message failed: -22 (1/0)
[  751.946522][ T4310] dvb-usb: error while querying for an remote control event.
[  751.987209][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  752.012058][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  752.046476][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  752.123582][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  752.142016][ T1265] ieee802154 phy0 wpan0: encryption failed: -22
[  752.142440][ T4310] dvb-usb: bulk message failed: -22 (1/0)
[  752.148509][ T1265] ieee802154 phy1 wpan1: encryption failed: -22
[  752.163649][ T4310] dvb-usb: error while querying for an remote control event.
[  752.174222][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  752.207700][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  752.218306][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  752.233614][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  752.350558][ T4310] dvb-usb: bulk message failed: -22 (1/0)
[  752.374622][ T4310] dvb-usb: error while querying for an remote control event.
[  752.559985][ T4310] dvb-usb: bulk message failed: -22 (1/0)
[  752.566019][ T4310] dvb-usb: error while querying for an remote control event.
[  752.759937][ T4310] dvb-usb: bulk message failed: -22 (1/0)
[  752.765760][ T4310] dvb-usb: error while querying for an remote control event.
[  752.807792][ T4660] usb 2-1: USB disconnect, device number 17
[  752.860566][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  752.910910][ T4660] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  753.090952][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  753.120648][T10338] loop5: detected capacity change from 0 to 32768
[  753.223839][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  753.262632][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  753.306960][T10123] 8021q: adding VLAN 0 to HW filter on device batadv0
[  753.393685][T10338] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  753.643675][T10373] device bond_slave_0 entered promiscuous mode
[  753.650629][T10373] device bond_slave_1 entered promiscuous mode
[  753.656845][T10373] device wlan1 entered promiscuous mode
[  753.766633][T10373] device bond_slave_0 left promiscuous mode
[  753.772715][T10373] device bond_slave_1 left promiscuous mode
[  753.778734][T10373] device wlan1 left promiscuous mode
[  753.883978][ T7235] ocfs2: Unmounting device (7,5) on (node local)
[  753.962686][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  754.875948][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  754.914291][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  754.981380][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  754.992486][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  755.020676][T10123] device veth0_vlan entered promiscuous mode
[  755.029587][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  755.173602][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  755.891841][T10123] device veth1_vlan entered promiscuous mode
[  755.993093][T10426] loop5: detected capacity change from 0 to 1024
[  756.003419][T10123] device veth0_macvtap entered promiscuous mode
[  756.012206][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  756.037799][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  756.059406][T10123] device veth1_macvtap entered promiscuous mode
[  756.093801][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  756.126901][T10426] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  756.165987][T10123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  756.188476][T10123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  756.200015][T10123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  756.210882][T10123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  756.221128][T10123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  756.231964][T10123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  756.244964][T10123] batman_adv: batadv0: Interface activated: batadv_slave_0
[  756.255022][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  756.276338][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  756.317624][T10123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  756.338515][T10123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  756.346975][T10439] EXT4-fs error (device loop5): mb_free_blocks:1815: group 0, inode 16: block 161:freeing already freed block (bit 10); block bitmap corrupt.
[  756.359229][T10123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  756.383162][T10123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  756.396970][T10123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  756.414911][T10123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  756.427620][T10123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  756.440990][T10123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  756.453808][T10123] batman_adv: batadv0: Interface activated: batadv_slave_1
[  756.461894][ T7235] EXT4-fs (loop5): unmounting filesystem.
[  756.464684][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  756.478412][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  756.545621][T10123] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  756.563829][T10123] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  756.575107][T10123] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  756.587361][T10123] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  756.789241][   T48] Bluetooth: hci0: unknown advertising packet type: 0x65
[  756.789340][   T48] Bluetooth: hci0: unknown advertising packet type: 0x20
[  756.797539][   T48] Bluetooth: hci0: unknown advertising packet type: 0x40
[  756.830665][   T48] Bluetooth: hci0: unknown advertising packet type: 0x09
[  756.837787][   T48] Bluetooth: hci0: Malformed LE Event: 0x02
[  756.900888][ T4437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  756.909587][ T4437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  756.971386][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  757.076835][ T4633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  757.093255][ T4633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  757.139660][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  758.280756][T10479] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1569'.
[  759.434377][T10492] Process accounting resumed
[  759.670222][T10508] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1581'.
[  759.881049][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1583'.
[  760.319063][T10530] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1589'.
[  760.391487][T10529] team_slave_1: mtu greater than device maximum
[  760.423069][T10529] team0: Device team_slave_1 failed to change mtu
[  761.495678][T10541] Process accounting resumed
[  761.586043][ T4332] Process accounting resumed
[  762.436188][T10562] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1599'.
[  762.659251][T10570] loop5: detected capacity change from 0 to 1024
[  762.777517][T10574] loop6: detected capacity change from 0 to 1024
[  762.780938][T10570] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  762.933861][   T27] audit: type=1800 audit(1751661089.618:256): pid=10570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1602" name="file1" dev="loop5" ino=15 res=0 errno=0
[  763.029281][ T4393] hfsplus: b-tree write err: -5, ino 4
[  763.078027][ T7235] EXT4-fs (loop5): unmounting filesystem.
[  764.133942][T10608] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1614'.
[  764.368051][T10605] Process accounting resumed
[  765.975334][T10643] Process accounting resumed
[  766.238067][ T9646] Process accounting resumed
[  767.440072][ T9646] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  767.670099][ T9646] usb 2-1: Using ep0 maxpacket: 8
[  767.689164][ T9646] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  767.888285][ T9646] usb 2-1: config 179 has no interface number 0
[  768.050766][ T9646] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  768.112977][ T9646] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  768.176281][ T9646] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  768.239789][ T9646] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  768.274296][ T9646] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  768.328805][ T9646] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  768.353411][ T9646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  768.371595][T10672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  768.519649][T10678] Process accounting resumed
[  769.156341][ T9644] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input21
[  769.273416][T10695] Process accounting resumed
[  769.284915][ T3741] usb 2-1: USB disconnect, device number 18
[  769.284983][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  769.300333][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  769.333903][ T3741] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  769.445409][T10706] tmpfs: Bad value for 'mpol'
[  771.224850][T10713] Process accounting resumed
[  771.474799][T10727] loop6: detected capacity change from 0 to 512
[  771.482307][T10728] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1652'.
[  771.573592][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'.
[  771.594913][T10727] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  771.610135][T10727] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  771.783016][T10123] EXT4-fs (loop6): unmounting filesystem.
[  772.701373][T10743] Process accounting resumed
[  775.922185][T10776] tmpfs: Bad value for 'mpol'
[  776.690126][T10789] loop8: detected capacity change from 0 to 1
[  776.729239][T10789] Dev loop8: unable to read RDB block 1
[  776.748670][T10789]  loop8: unable to read partition table
[  776.769124][T10789] loop8: partition table beyond EOD, truncated
[  776.799493][T10789] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  777.220713][T10800] overlayfs: failed to resolve './file1': -2
[  778.672407][ T4310] Process accounting resumed
[  779.919034][T10837] serio: Serial port ptm0
[  782.203469][T10856] loop6: detected capacity change from 0 to 32768
[  782.792682][T10856] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  785.069907][ T4660] Process accounting resumed
[  785.765649][T10123] ocfs2: Unmounting device (7,6) on (node local)
[  788.439103][T10943] Process accounting resumed
[  788.962006][T10956] loop6: detected capacity change from 0 to 512
[  788.969741][T10956] EXT4-fs: Ignoring removed orlov option
[  789.051789][T10956] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  789.204204][T10956] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  789.265289][T10956] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.1712: corrupted in-inode xattr
[  789.303747][T10969] loop5: detected capacity change from 0 to 256
[  789.318204][T10956] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1712: couldn't read orphan inode 15 (err -117)
[  789.824462][T10956] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  790.130882][T10976] Process accounting resumed
[  790.192730][T10123] EXT4-fs (loop6): unmounting filesystem.
[  790.825277][ T9646] Process accounting resumed
[  792.478992][T11027] loop6: detected capacity change from 0 to 1764
[  793.118591][ T4332] Process accounting resumed
[  794.934539][T11051] Process accounting resumed
[  794.948630][T11048] Process accounting resumed
[  795.142609][ T4633] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.934971][ T4633] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  796.233384][ T4633] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  797.045172][T11076] Process accounting resumed
[  797.601106][ T4633] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.154658][T11098] Process accounting resumed
[  799.878361][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  799.913414][ T4273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  799.930060][ T4273] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  799.969704][ T4273] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  799.982900][T11116] Process accounting resumed
[  800.045559][ T4273] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  800.065187][ T4273] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  800.381106][ T9644] Process accounting resumed
[  802.045190][T11150] Process accounting resumed
[  802.132182][   T48] Bluetooth: hci3: command 0x0409 tx timeout
[  803.635745][T11114] chnl_net:caif_netlink_parms(): no params data found
[  804.209888][   T48] Bluetooth: hci3: command 0x041b tx timeout
[  804.575129][T11184] Process accounting resumed
[  804.790483][T11193] device vlan2 entered promiscuous mode
[  804.810137][T11193] device bridge0 entered promiscuous mode
[  805.883064][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  805.931288][T11114] bridge0: port 1(bridge_slave_0) entered blocking state
[  805.938460][T11114] bridge0: port 1(bridge_slave_0) entered disabled state
[  805.969095][T11114] device bridge_slave_0 entered promiscuous mode
[  806.054001][T11114] bridge0: port 2(bridge_slave_1) entered blocking state
[  806.077865][T11114] bridge0: port 2(bridge_slave_1) entered disabled state
[  806.120516][T11114] device bridge_slave_1 entered promiscuous mode
[  806.300047][ T4273] Bluetooth: hci3: command 0x040f tx timeout
[  806.637444][T11114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  806.679369][T11114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  807.444926][T11114] team0: Port device team_slave_0 added
[  807.476256][T11114] team0: Port device team_slave_1 added
[  808.262626][ T4633] device hsr_slave_0 left promiscuous mode
[  808.292226][T11236] Process accounting resumed
[  808.370141][ T4273] Bluetooth: hci3: command 0x0419 tx timeout
[  808.419957][ T4633] device hsr_slave_1 left promiscuous mode
[  808.458696][ T4633] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  808.469292][ T4633] batman_adv: batadv0: Removing interface: batadv_slave_0
[  808.477526][ T4633] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  808.485279][ T4633] batman_adv: batadv0: Removing interface: batadv_slave_1
[  808.494676][ T4633] device bridge_slave_1 left promiscuous mode
[  808.502593][ T4633] bridge0: port 2(bridge_slave_1) entered disabled state
[  808.583740][ T4633] device bridge_slave_0 left promiscuous mode
[  808.598123][ T4633] bridge0: port 1(bridge_slave_0) entered disabled state
[  808.636943][ T4660] Process accounting resumed
[  808.676135][ T4633] device veth1_macvtap left promiscuous mode
[  808.682534][ T4633] device veth0_macvtap left promiscuous mode
[  808.695957][ T4633] device veth1_vlan left promiscuous mode
[  808.709383][ T4633] device veth0_vlan left promiscuous mode
[  812.418958][ T4633] team0 (unregistering): Port device team_slave_1 removed
[  812.509222][ T4633] team0 (unregistering): Port device team_slave_0 removed
[  812.572665][ T4633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  812.637555][ T4633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  813.413753][ T4633] bond0 (unregistering): Released all slaves
[  813.507805][T11114] batman_adv: batadv0: Adding interface: batadv_slave_0
[  813.515023][T11114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  813.541062][T11114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  813.573120][ T1265] ieee802154 phy0 wpan0: encryption failed: -22
[  813.573249][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  813.579949][ T1265] ieee802154 phy1 wpan1: encryption failed: -22
[  813.610854][T11114] batman_adv: batadv0: Adding interface: batadv_slave_1
[  813.648377][T11114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  813.766119][T11114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  813.926836][T11114] device hsr_slave_0 entered promiscuous mode
[  813.959216][T11114] device hsr_slave_1 entered promiscuous mode
[  813.996538][T11114] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  814.036305][T11114] Cannot create hsr debugfs directory
[  814.169536][ T4310] Process accounting resumed
[  815.521947][T11310] Process accounting resumed
[  815.807129][T11114] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  815.846923][T11114] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  815.873607][T11114] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  815.900511][T11114] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  816.143371][T11114] 8021q: adding VLAN 0 to HW filter on device bond0
[  816.201584][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  816.220920][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  816.246836][T11114] 8021q: adding VLAN 0 to HW filter on device team0
[  816.276843][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  816.299213][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  816.320619][ T4409] bridge0: port 1(bridge_slave_0) entered blocking state
[  816.327786][ T4409] bridge0: port 1(bridge_slave_0) entered forwarding state
[  816.357376][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  816.368416][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  816.393760][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  816.408345][ T4409] bridge0: port 2(bridge_slave_1) entered blocking state
[  816.415599][ T4409] bridge0: port 2(bridge_slave_1) entered forwarding state
[  816.445891][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  816.554633][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  816.580616][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  816.623723][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  816.642819][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  816.685148][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  816.738231][T11114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  816.762208][T11114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  816.782067][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  816.791267][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  816.800673][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  816.811245][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  816.842763][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  817.054878][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  818.833101][T11372] Process accounting resumed
[  819.048288][T11362] Process accounting resumed
[  819.269511][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1823'.
[  819.605975][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  819.636702][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  819.688998][T11114] 8021q: adding VLAN 0 to HW filter on device batadv0
[  821.773166][ T9646] Process accounting resumed
[  822.232301][T11441] loop5: detected capacity change from 0 to 256
[  822.286199][T11423] Process accounting resumed
[  822.321793][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  822.340719][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  822.399496][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  822.420942][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  822.456650][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  822.489722][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  822.508301][T11114] device veth0_vlan entered promiscuous mode
[  822.589339][T11114] device veth1_vlan entered promiscuous mode
[  822.653180][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  822.668485][T11448] netlink: 608 bytes leftover after parsing attributes in process `syz.5.1837'.
[  822.701615][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  822.731297][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  822.750581][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  822.777949][T11114] device veth0_macvtap entered promiscuous mode
[  822.785779][T11456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1840'.
[  823.114429][T11114] device veth1_macvtap entered promiscuous mode
[  823.346416][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  823.410815][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  823.584694][T11458] Process accounting resumed
[  823.614725][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  823.689857][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  823.699745][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  823.769344][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  823.786682][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  823.797554][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  823.856867][T11114] batman_adv: batadv0: Interface activated: batadv_slave_0
[  824.212606][  T126] Process accounting resumed
[  824.279201][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  824.357755][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  824.539928][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  824.625846][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.684354][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  824.695516][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.705872][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  824.716961][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.727524][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  824.740824][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.753391][T11114] batman_adv: batadv0: Interface activated: batadv_slave_1
[  824.768487][T11114] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  824.778406][T11114] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  824.787488][T11114] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  824.804198][T11114] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  824.843262][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  824.876110][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  825.008553][T11483] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1847'.
[  825.048149][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  825.066013][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  825.148534][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  825.165071][ T4538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  825.178462][ T4538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  825.218594][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  825.271063][ T4310] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  825.433887][T11495] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1743'.
[  825.465157][ T4310] usb 6-1: Using ep0 maxpacket: 32
[  825.478414][ T4310] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  825.524101][ T4310] usb 6-1: config 0 has no interfaces?
[  825.529680][ T4310] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84
[  825.595781][ T4310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  825.646157][ T4310] usb 6-1: config 0 descriptor??
[  825.904635][  T126] usb 6-1: USB disconnect, device number 12
[  828.154761][T11478] Process accounting resumed
[  832.300160][ T4273] Bluetooth: hci0: command 0x0406 tx timeout
[  832.851297][T11592] Process accounting resumed
[  834.303238][T11638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1885'.
[  834.350745][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'.
[  835.417175][T11651] Process accounting resumed
[  837.301736][T11683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1898'.
[  838.449925][ T5612] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  838.673816][ T5612] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  838.699991][ T5612] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  838.740705][ T5612] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  838.770779][ T5612] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  838.801351][ T5612] usb 8-1: config 0 descriptor??
[  838.821515][ T5612] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  838.828216][ T5612] dvb-usb: bulk message failed: -22 (3/0)
[  838.863703][ T5612] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  838.886736][ T5612] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  838.903719][ T5612] usb 8-1: media controller created
[  838.916653][ T5612] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  838.959056][ T5612] dvb-usb: bulk message failed: -22 (6/0)
[  838.978921][ T5612] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  839.020567][ T5612] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input22
[  839.065761][ T5612] dvb-usb: schedule remote query interval to 150 msecs.
[  839.090098][ T5612] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  839.121266][ T5612] usb 8-1: USB disconnect, device number 2
[  839.187708][ T5612] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  840.349989][ T5612] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  840.379859][ T4660] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  840.539863][ T5612] usb 8-1: Using ep0 maxpacket: 32
[  840.547118][ T5612] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  840.579924][ T4660] usb 6-1: Using ep0 maxpacket: 8
[  840.585159][ T5612] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  840.597329][ T4660] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  840.623954][ T4660] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  840.644705][ T5612] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  840.674188][ T5612] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  840.683244][ T4660] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  840.703971][ T5612] usb 8-1: Product: syz
[  840.710095][ T4660] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  840.734093][ T5612] usb 8-1: Manufacturer: syz
[  840.774150][ T5612] hub 8-1:4.0: USB hub found
[  840.781925][ T4660] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  840.809960][ T4660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  840.976708][ T5612] hub 8-1:4.0: 2 ports detected
[  841.065354][ T4660] usb 6-1: GET_CAPABILITIES returned 0
[  841.071108][ T4660] usbtmc 6-1:16.0: can't read capabilities
[  841.181354][ T5612] hub 8-1:4.0: hub_hub_status failed (err = -71)
[  841.188667][ T5612] hub 8-1:4.0: config failed, can't get hub status (err -71)
[  841.250867][ T5612] usb 8-1: USB disconnect, device number 3
[  841.295407][ T4660] usb 6-1: USB disconnect, device number 13
[  841.645164][T11799] tmpfs: Bad value for 'mpol'
[  842.053468][T11813] tmpfs: Bad value for 'mpol'
[  842.200734][ T4332] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  842.451889][ T4332] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  842.604378][ T4332] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  842.722507][ T4332] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  842.962068][ T4332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.192641][ T4332] usb 6-1: config 0 descriptor??
[  843.214472][ T4332] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  843.282795][ T4332] dvb-usb: bulk message failed: -22 (3/0)
[  843.327237][T11820] tmpfs: Bad value for 'mpol'
[  843.467553][ T4332] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  843.659524][ T4332] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  843.773125][ T4332] usb 6-1: media controller created
[  843.895877][ T4332] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  844.152621][ T4332] dvb-usb: bulk message failed: -22 (6/0)
[  844.259016][ T4332] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  844.453498][ T4332] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input23
[  844.752705][ T4332] dvb-usb: schedule remote query interval to 150 msecs.
[  844.873206][ T4332] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  845.144212][ T4332] usb 6-1: USB disconnect, device number 14
[  845.633227][ T4332] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  846.531516][T11858] device macsec1 entered promiscuous mode
[  846.555283][T11858] bridge0: port 3(macsec1) entered blocking state
[  846.589419][T11854] loop5: detected capacity change from 0 to 4096
[  846.590771][T11858] bridge0: port 3(macsec1) entered disabled state
[  846.681452][T11854] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  846.739388][T11854] ntfs3: loop5: Failed to load $Extend.
[  847.257569][T11880] tmpfs: Bad value for 'mpol'
[  849.098537][T11890] trusted_key: encrypted_key: insufficient parameters specified
[  850.191934][T11907] Process accounting resumed
[  852.318913][T11954] Process accounting resumed
[  852.698136][T11935] loop5: detected capacity change from 0 to 32768
[  852.755797][T11935] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1973 (11935)
[  852.788759][T11935] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  852.816979][T11935] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  852.863396][T11935] BTRFS info (device loop5): force clearing of disk cache
[  852.913166][T11935] BTRFS info (device loop5): enabling auto defrag
[  852.940243][T11935] BTRFS info (device loop5): max_inline at 0
[  852.946323][T11935] BTRFS info (device loop5): enabling disk space caching
[  852.971649][T11935] BTRFS info (device loop5): disk space caching is enabled
[  853.260019][T11935] BTRFS info (device loop5): enabling ssd optimizations
[  853.308475][T11935] BTRFS info (device loop5): rebuilding free space tree
[  853.377327][T11935] BTRFS info (device loop5): disabling free space tree
[  853.385573][T11935] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  853.396439][T11935] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  853.547346][   T27] audit: type=1800 audit(1751661180.228:257): pid=11935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1973" name="file1" dev="loop5" ino=260 res=0 errno=0
[  854.328048][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'.
[  854.337583][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1991'.
[  854.432445][ T7235] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  854.811832][T12028] tun0: tun_chr_ioctl cmd 2147767511
[  854.903350][T12031] sctp: [Deprecated]: syz.4.1997 (pid 12031) Use of int in maxseg socket option.
[  854.903350][T12031] Use struct sctp_assoc_value instead
[  854.928055][T11706] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop5 scanned by udevd (11706)
[  856.089199][T12053] Process accounting resumed
[  856.361722][T12066] device bond_slave_0 entered promiscuous mode
[  856.367991][T12066] device bond_slave_1 entered promiscuous mode
[  856.413792][T12066] device bond_slave_0 left promiscuous mode
[  856.419877][T12066] device bond_slave_1 left promiscuous mode
[  858.693727][T12101] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  858.727671][T12101] FAT-fs (loop5): unable to read boot sector
[  861.029880][T12041] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  861.270798][T12041] usb 6-1: Using ep0 maxpacket: 16
[  861.286763][T12041] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  861.552901][T12041] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  861.579918][T12041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  861.655062][T12041] usb 6-1: SerialNumber: syz
[  863.009910][T12033] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  863.077089][T12041] cdc_ether: probe of 6-1:1.0 failed with error -71
[  863.111652][T12041] usb 6-1: USB disconnect, device number 15
[  863.191646][T12033] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  863.209838][T12033] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  863.240089][T12033] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  863.265488][T12033] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  863.295779][T12033] usb 8-1: config 0 descriptor??
[  863.726535][T12033] hid-steam 0003:28DE:1142.000E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0
[  863.822790][T12033] hid-steam 0003:28DE:1142.000F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0
[  863.959869][T12033] hid-steam 0003:28DE:1142.000E: Steam wireless receiver connected
[  863.998679][T12033] usb 8-1: USB disconnect, device number 4
[  864.079517][T12033] hid-steam 0003:28DE:1142.000E: Steam wireless receiver disconnected
[  864.303311][T12179] fido_id[12179]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  864.426370][T12158] Process accounting resumed
[  864.584326][T12189] netlink: 'syz.4.2040': attribute type 4 has an invalid length.
[  865.146472][T12208] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2046'.
[  866.016597][  T126] Process accounting resumed
[  867.287055][T12242] loop7: detected capacity change from 0 to 128
[  867.305766][T12242] EXT4-fs: Ignoring removed nobh option
[  867.349656][T12242] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  867.374156][T12242] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  867.439897][T12033] usb 6-1: new low-speed USB device number 16 using dummy_hcd
[  867.594097][T11114] EXT4-fs (loop7): unmounting filesystem.
[  867.651985][T12033] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  867.674738][T12033] usb 6-1: config 0 has no interface number 0
[  867.699886][T12033] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  867.724761][T12033] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  867.775012][T12033] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  867.785258][T12033] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  867.812759][T12033] usb 6-1: config 0 descriptor??
[  867.827570][T12238] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  867.848107][T12033] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  868.636868][    C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1
[  868.667239][  T126] Process accounting resumed
[  868.667874][T12033] usb 6-1: USB disconnect, device number 16
[  868.711476][T12254] loop7: detected capacity change from 0 to 32768
[  868.894979][T12254] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode.
[  869.073240][T11114] ocfs2: Unmounting device (7,7) on (node local)
[  870.019365][   T48] Bluetooth: hci1: unknown advertising packet type: 0x65
[  870.019415][   T48] Bluetooth: hci1: unknown advertising packet type: 0x20
[  870.026633][   T48] Bluetooth: hci1: unknown advertising packet type: 0x40
[  870.034079][   T48] Bluetooth: hci1: unknown advertising packet type: 0x09
[  870.041243][   T48] Bluetooth: hci1: Malformed LE Event: 0x02
[  870.079832][T12033] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  870.292047][T12033] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  870.302390][T12033] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  870.312257][T12033] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  870.322103][T12033] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.335550][T12033] usb 6-1: config 0 descriptor??
[  870.353977][T12033] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  870.369482][T12033] dvb-usb: bulk message failed: -22 (3/0)
[  870.395980][T12033] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  870.427201][T12033] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  870.450495][T12033] usb 6-1: media controller created
[  870.472638][T12033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  870.517737][T12033] dvb-usb: bulk message failed: -22 (6/0)
[  870.528133][T12033] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  870.548355][T12033] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input24
[  870.608321][T12033] dvb-usb: schedule remote query interval to 150 msecs.
[  870.627711][T12033] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  870.779864][ T4332] dvb-usb: bulk message failed: -22 (1/0)
[  870.785899][ T4332] dvb-usb: error while querying for an remote control event.
[  871.667241][ T4332] dvb-usb: bulk message failed: -22 (1/0)
[  871.673129][ T4332] dvb-usb: error while querying for an remote control event.
[  871.855239][ T4332] dvb-usb: bulk message failed: -22 (1/0)
[  871.861221][ T4332] dvb-usb: error while querying for an remote control event.
[  872.043009][ T4332] dvb-usb: bulk message failed: -22 (1/0)
[  872.050451][ T4332] dvb-usb: error while querying for an remote control event.
[  872.239972][ T4332] dvb-usb: bulk message failed: -22 (1/0)
[  872.249919][ T4332] dvb-usb: error while querying for an remote control event.
[  872.396596][T12339] ALSA: mixer_oss: invalid OSS volume 'A1�4�1�=w���Ve]'
[  872.405411][T12339] ALSA: mixer_oss: invalid OSS volume '�ұB���;T`�@$���E��cX�MYd��,'
[  872.414084][T12339] ALSA: mixer_oss: invalid OSS volume 'b��@h�#'
[  872.420728][T12339] ALSA: mixer_oss: invalid OSS volume '��h4���X��S4v=0�_>�&��'
[  872.433661][ T4332] dvb-usb: bulk message failed: -22 (1/0)
[  872.439652][ T4332] dvb-usb: error while querying for an remote control event.
[  872.447335][T12339] ALSA: mixer_oss: invalid OSS volume '|�/"tj'
[  872.463516][T12339] ALSA: mixer_oss: invalid OSS volume '-z5��c^�J��6�$���'
[  872.478751][T12339] ALSA: mixer_oss: invalid OSS volume '0��T���y����󉴪���j�P&��a�t'
[  872.495963][T12339] ALSA: mixer_oss: invalid OSS volume '�|��~�\'
[  872.509604][T12339] ALSA: mixer_oss: invalid OSS volume '��@�^3bɜ�}��G�$�#\�("/�o�L�'
[  872.525467][T12339] ALSA: mixer_oss: invalid OSS volume ''
[  872.629960][ T4332] dvb-usb: bulk message failed: -22 (1/0)
[  872.637774][ T4332] dvb-usb: error while querying for an remote control event.
[  872.799873][ T4332] dvb-usb: bulk message failed: -22 (1/0)
[  872.805968][ T4332] dvb-usb: error while querying for an remote control event.
[  872.990028][ T4332] dvb-usb: bulk message failed: -22 (1/0)
[  872.996085][ T4332] dvb-usb: error while querying for an remote control event.
[  873.297175][ T4332] dvb-usb: bulk message failed: -22 (1/0)
[  873.309474][ T4332] dvb-usb: error while querying for an remote control event.
[  873.692234][ T4332] usb 6-1: USB disconnect, device number 17
[  873.737555][ T4332] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  873.963244][T12368] syz.4.2102[12368] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  873.963372][T12368] syz.4.2102[12368] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  874.486327][T12384] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2108'.
[  874.607801][T12388] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2110'.
[  874.980017][ T4332] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  875.030873][ T1265] ieee802154 phy0 wpan0: encryption failed: -22
[  875.040550][ T1265] ieee802154 phy1 wpan1: encryption failed: -22
[  875.246379][ T4332] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  875.269858][ T4332] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  875.316004][ T4332] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  875.368960][ T4332] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.385087][ T4332] usb 8-1: config 0 descriptor??
[  875.405613][ T4332] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  875.453648][ T4332] dvb-usb: bulk message failed: -22 (3/0)
[  875.486629][ T4332] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  875.506018][ T4332] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  875.529894][ T4332] usb 8-1: media controller created
[  875.547151][ T4332] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  875.585544][ T4332] dvb-usb: bulk message failed: -22 (6/0)
[  875.609325][ T4332] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  875.651851][ T4332] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input25
[  875.691068][ T4332] dvb-usb: schedule remote query interval to 150 msecs.
[  875.711422][ T4332] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  875.720891][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2119'.
[  875.847634][T12416] device syz_tun entered promiscuous mode
[  875.870016][T12033] dvb-usb: bulk message failed: -22 (1/0)
[  875.886060][T12033] dvb-usb: error while querying for an remote control event.
[  875.905154][T12416] device syz_tun left promiscuous mode
[  876.142700][T12033] dvb-usb: bulk message failed: -22 (1/0)
[  876.671144][T12033] dvb-usb: error while querying for an remote control event.
[  876.939831][ T4332] dvb-usb: bulk message failed: -22 (1/0)
[  876.946578][ T4332] dvb-usb: error while querying for an remote control event.
[  877.160834][T12433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2124'.
[  877.213288][ T4332] dvb-usb: bulk message failed: -22 (1/0)
[  877.223255][ T4332] dvb-usb: error while querying for an remote control event.
[  877.424690][ T4332] dvb-usb: bulk message failed: -22 (1/0)
[  877.431913][ T4332] dvb-usb: error while querying for an remote control event.
[  877.620096][ T4332] dvb-usb: bulk message failed: -22 (1/0)
[  877.626420][ T4332] dvb-usb: error while querying for an remote control event.
[  878.682588][T12449] Process accounting resumed
[  878.695913][ T4310] dvb-usb: bulk message failed: -22 (1/0)
[  878.731262][ T4310] dvb-usb: error while querying for an remote control event.
[  878.817889][ T4310] usb 8-1: USB disconnect, device number 5
[  878.926578][ T4310] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  879.284594][ T4660] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  879.531065][ T4660] usb 6-1: Using ep0 maxpacket: 32
[  879.905142][ T4660] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  879.919878][ T4660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.940724][ T4660] usb 6-1: config 0 descriptor??
[  879.950897][ T4660] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  880.289248][T12484] Process accounting resumed
[  880.508778][ T5612] Process accounting resumed
[  880.611463][ T4660] gspca_vc032x: reg_w err -71
[  880.623947][ T4660] gspca_vc032x: I2c Bus Busy Wait 00
[  880.658686][ T4660] gspca_vc032x: I2c Bus Busy Wait 00
[  880.696895][ T4660] gspca_vc032x: I2c Bus Busy Wait 00
[  880.729906][ T4660] gspca_vc032x: I2c Bus Busy Wait 00
[  880.773802][ T4660] gspca_vc032x: I2c Bus Busy Wait 00
[  880.810991][ T4660] gspca_vc032x: I2c Bus Busy Wait 00
[  880.844908][ T4660] gspca_vc032x: I2c Bus Busy Wait 00
[  880.890066][ T4660] gspca_vc032x: I2c Bus Busy Wait 00
[  880.915253][ T4660] gspca_vc032x: I2c Bus Busy Wait 00
[  880.941547][ T4660] gspca_vc032x: I2c Bus Busy Wait 00
[  880.954541][ T4660] gspca_vc032x: I2c Bus Busy Wait 00
[  880.978036][ T4660] gspca_vc032x: I2c Bus Busy Wait 00
[  881.008706][ T4660] gspca_vc032x: I2c Bus Busy Wait 00
[  881.039774][ T4660] gspca_vc032x: I2c Bus Busy Wait 00
[  881.056822][ T4660] gspca_vc032x: I2c Bus Busy Wait 00
[  881.086497][ T4660] gspca_vc032x: I2c Bus Busy Wait 00
[  881.109090][ T4660] gspca_vc032x: I2c Bus Busy Wait 00
[  881.145814][ T4660] gspca_vc032x: I2c Bus Busy Wait 00
[  881.176802][ T4660] gspca_vc032x: Unknown sensor...
[  881.218687][ T4660] vc032x: probe of 6-1:0.0 failed with error -22
[  881.281799][ T4660] usb 6-1: USB disconnect, device number 18
[  881.549528][ T5612] Process accounting resumed
[  883.022192][T12547] loop7: detected capacity change from 0 to 4096
[  883.049126][T12547] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512)
[  884.153599][T11114] ntfs3: loop7: ntfs_sync_fs r=1a failed, -22.
[  884.187886][T11114] ntfs3: loop7: ntfs_evict_inode r=1a failed, -22.
[  884.233999][T11114] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  885.581958][T12586] overlayfs: failed to resolve './file1': -2
[  888.549965][T12043] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  888.761547][T12043] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  888.793342][T12043] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  888.833696][T12043] usb 8-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  888.877416][T12043] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  888.917661][T12043] usb 8-1: config 0 descriptor??
[  889.594021][T12043] hid-led 0003:1D34:000A.0010: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.7-1/input0
[  890.057638][T12043] hid-led 0003:1D34:000A.0010: Dream Cheeky Webmail Notifier initialized
[  890.167779][T12043] usb 8-1: USB disconnect, device number 6
[  890.773439][T12659] fido_id[12659]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  891.056050][T12648] loop5: detected capacity change from 0 to 32768
[  891.111496][T12648] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2189 (12648)
[  891.171376][ T4577] Bluetooth: hci5: Frame reassembly failed (-84)
[  891.238591][T12648] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  891.314088][T12648] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  891.356932][T12648] BTRFS info (device loop5): using free space tree
[  891.537570][T12648] BTRFS info (device loop5): enabling ssd optimizations
[  891.647754][ T7235] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  893.170028][ T4273] Bluetooth: hci5: command 0x1003 tx timeout
[  893.177086][   T48] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  893.497104][   T27] audit: type=1326 audit(1751661220.178:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12775 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727c38e929 code=0x7ffc0000
[  893.524077][T12774] device syz_tun entered promiscuous mode
[  893.558350][   T27] audit: type=1326 audit(1751661220.188:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12775 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f727c38e929 code=0x7ffc0000
[  893.604947][T12774] device syz_tun left promiscuous mode
[  893.656231][   T27] audit: type=1326 audit(1751661220.188:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12775 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727c38e929 code=0x7ffc0000
[  893.688750][   T27] audit: type=1326 audit(1751661220.188:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12775 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727c38e929 code=0x7ffc0000
[  893.725370][   T27] audit: type=1326 audit(1751661220.188:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12775 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f727c38e929 code=0x7ffc0000
[  893.817050][   T27] audit: type=1326 audit(1751661220.188:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12775 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727c38e929 code=0x7ffc0000
[  893.845973][ T4310] Process accounting resumed
[  893.915679][   T27] audit: type=1326 audit(1751661220.188:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12775 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f727c38e929 code=0x7ffc0000
[  894.049634][   T27] audit: type=1326 audit(1751661220.188:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12775 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727c38e929 code=0x7ffc0000
[  894.178200][   T27] audit: type=1326 audit(1751661220.188:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12775 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f727c38e929 code=0x7ffc0000
[  894.206357][   T27] audit: type=1326 audit(1751661220.188:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12775 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727c38e929 code=0x7ffc0000
[  894.295261][T12794] device vlan2 entered promiscuous mode
[  894.317567][T12794] device bridge0 entered promiscuous mode
[  894.737345][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2229'.
[  894.813335][T10696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  896.040319][    T7] Process accounting resumed
[  896.866777][T12857] tipc: Started in network mode
[  896.894225][T12857] tipc: Node identity 68a, cluster identity 4711
[  896.911666][T12861] loop5: detected capacity change from 0 to 128
[  896.945194][T12857] tipc: Node number set to 1674
[  897.006480][T12861] FAT-fs (loop5): Unrecognized mount option "�" or missing value
[  897.028024][T12857] tipc: Cannot configure node identity twice
[  898.783782][ T4660] Process accounting resumed
[  898.903779][T12898] device macvlan1 entered promiscuous mode
[  898.932170][T12898] device macvlan1 left promiscuous mode
[  899.192793][T12873] loop7: detected capacity change from 0 to 32768
[  899.519677][T12873] JBD2: Ignoring recovery information on journal
[  900.102974][T12917] loop5: detected capacity change from 0 to 128
[  900.129549][T12917] FAT-fs (loop5): bogus number of FAT sectors
[  900.171357][T12917] FAT-fs (loop5): Can't find a valid FAT filesystem
[  900.183302][T12873] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  900.562464][T11114] ocfs2: Unmounting device (7,7) on (node local)
[  902.525511][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2275'.
[  903.784966][T12976] 9pnet_fd: Insufficient options for proto=fd
[  903.830184][T12043] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  904.745085][T12043] usb 2-1: Using ep0 maxpacket: 32
[  904.752607][T12043] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  904.770200][T12043] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  904.809788][T12043] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  904.818634][T12987] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2286'.
[  904.829799][T12043] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  904.854107][T12043] usb 2-1: config 0 interface 0 has no altsetting 0
[  904.880580][T12043] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  904.896639][T12043] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  904.905613][T12043] usb 2-1: Product: syz
[  904.910313][T12043] usb 2-1: Manufacturer: syz
[  904.914951][T12043] usb 2-1: SerialNumber: syz
[  904.919035][T12968] loop5: detected capacity change from 0 to 32768
[  904.960633][T12043] usb 2-1: config 0 descriptor??
[  904.977827][T12043] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  905.032226][T12968] JBD2: Ignoring recovery information on journal
[  905.043592][T12043] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  905.108108][T12968] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  905.363652][ T7235] ocfs2: Unmounting device (7,5) on (node local)
[  905.731657][ T9646] usb 2-1: USB disconnect, device number 19
[  905.749153][ T9646] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  906.025073][T13015] overlayfs: failed to resolve './file1': -2
[  907.164668][T13027] Process accounting resumed
[  908.494500][T13062] loop5: detected capacity change from 0 to 2048
[  908.555875][T13062] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  910.792762][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2319'.
[  910.838027][T13086] loop7: detected capacity change from 0 to 2048
[  910.916098][T13089] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  913.528502][T13094] loop5: detected capacity change from 0 to 32768
[  913.537645][T13094] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2322 (13094)
[  913.582563][T13094] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  913.616327][T13094] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  913.656799][T13094] BTRFS info (device loop5): setting nodatacow, compression disabled
[  913.688047][T13094] BTRFS info (device loop5): disabling tree log
[  913.707694][T13094] BTRFS info (device loop5): turning on sync discard
[  913.738560][T13094] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  913.771337][T13094] BTRFS info (device loop5): force zstd compression, level 3
[  913.778817][T13094] BTRFS info (device loop5): using free space tree
[  914.780176][T13094] BTRFS error (device loop5): open_ctree failed: -22
[  915.297164][T11706] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (11706)
[  915.370358][T13180] loop7: detected capacity change from 0 to 1024
[  916.265091][T13207] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2354'.
[  916.963739][  T126] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  917.070045][ T4660] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  917.150024][  T126] usb 2-1: Using ep0 maxpacket: 16
[  917.156956][  T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  917.168390][  T126] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  917.177616][  T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  917.187313][  T126] usb 2-1: config 0 descriptor??
[  917.220034][T12033] usb 8-1: new low-speed USB device number 7 using dummy_hcd
[  917.259841][ T4660] usb 6-1: Using ep0 maxpacket: 8
[  917.266567][ T4660] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  917.274988][ T4660] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  917.284918][ T4660] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  917.298018][ T4660] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  917.308418][ T4660] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  917.322134][ T4660] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  917.331416][ T4660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  917.401454][T12033] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  917.409847][T12033] usb 8-1: config 0 has no interface number 0
[  917.416178][T12033] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  917.427805][T12033] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  917.438905][T12033] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  917.452539][T12033] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  917.470002][T12033] usb 8-1: config 0 descriptor??
[  917.476012][T13230] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  917.504853][T12033] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  917.559040][ T4660] usb 6-1: GET_CAPABILITIES returned 0
[  917.564859][ T4660] usbtmc 6-1:16.0: can't read capabilities
[  917.602015][  T126] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0
[  917.634289][  T126] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0
[  917.665336][  T126] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0
[  917.677636][  T126] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0
[  917.700089][  T126] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  917.727568][T13242] vxcan1: tx drop: invalid sa for name 0x0000000000000002
[  917.812248][T13225] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  917.816940][T12033] usb 6-1: USB disconnect, device number 19
[  917.824022][T13225] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  917.824042][T13225] CPU: 0 PID: 13225 Comm: syz.1.2360 Not tainted 6.1.142-syzkaller #0
[  917.824062][T13225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  917.824074][T13225] RIP: 0010:mcp_smbus_xfer+0x5a/0x1280
[  917.824109][T13225] Code: c3 a8 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 85 3f 35 fa 48 8b 1b 48 89 d8 48 c1 e8 03 48 89 44 24 10 <42> 80 3c 38 00 74 08 48 89 df e8 67 3f 35 fa 4c 8b 3b 4d 8d a7 a8
[  917.824127][T13225] RSP: 0018:ffffc90005cef9a8 EFLAGS: 00010246
[  917.824146][T13225] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000
[  917.824165][T13225] RDX: ffffc900055b1000 RSI: 00000000000003ad RDI: 00000000000003ae
[  917.824179][T13225] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000004
[  917.824191][T13225] R10: fffffbfff1c3ebc6 R11: 1ffffffff1c3ebc5 R12: dffffc0000000000
[  917.824207][T13225] R13: 0000000000000000 R14: 0000000000000004 R15: dffffc0000000000
[  917.824220][T13225] FS:  00007f1d603b76c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  917.857978][T13247] sctp: [Deprecated]: syz.2.2369 (pid 13247) Use of int in maxseg socket option.
[  917.857978][T13247] Use struct sctp_assoc_value instead
[  917.862207][T13225] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  917.862228][T13225] CR2: 000000110c3e5cab CR3: 000000005693d000 CR4: 00000000003506f0
[  917.862247][T13225] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  917.862259][T13225] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  917.862274][T13225] Call Trace:
[  917.862281][T13225]  <TASK>
[  917.862293][T13225]  __i2c_smbus_xfer+0x771/0x1fc0
[  917.862331][T13225]  ? _raw_spin_unlock+0x40/0x40
[  917.862352][T13225]  ? mcp_i2c_xfer+0x420/0x420
[  917.862387][T13225]  ? i2c_smbus_write_i2c_block_data+0x1a0/0x1a0
[  918.008719][T13225]  ? rt_mutex_adjust_prio_chain+0x22c0/0x22c0
[  918.014824][T13225]  ? __might_fault+0xa6/0x120
[  918.019514][T13225]  ? i2c_smbus_xfer+0x11d/0x3a0
[  918.024387][T13225]  i2c_smbus_xfer+0x263/0x3a0
[  918.029089][T13225]  ? i2c_smbus_read_byte+0x1b0/0x1b0
[  918.034398][T13225]  ? __might_fault+0xc2/0x120
[  918.039086][T13225]  ? __might_fault+0xa6/0x120
[  918.043780][T13225]  i2cdev_ioctl_smbus+0x3e3/0x650
[  918.048813][T13225]  ? i2cdev_ioctl_rdwr+0x6c0/0x6c0
[  918.053934][T13225]  ? __might_fault+0xa6/0x120
[  918.058634][T13225]  ? __might_fault+0xc2/0x120
[  918.063337][T13225]  ? __might_fault+0xa6/0x120
[  918.068028][T13225]  i2cdev_ioctl+0x545/0x750
[  918.072540][T13225]  ? i2cdev_write+0x120/0x120
[  918.077228][T13225]  ? bpf_lsm_file_ioctl+0x5/0x10
[  918.082174][T13225]  ? security_file_ioctl+0x7c/0xa0
[  918.087312][T13225]  ? i2cdev_write+0x120/0x120
[  918.092018][T13225]  __se_sys_ioctl+0xfa/0x170
[  918.096630][T13225]  do_syscall_64+0x4c/0xa0
[  918.101074][T13225]  ? clear_bhb_loop+0x60/0xb0
[  918.105769][T13225]  ? clear_bhb_loop+0x60/0xb0
[  918.110477][T13225]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  918.116393][T13225] RIP: 0033:0x7f1d5f58e929
[  918.120833][T13225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  918.140454][T13225] RSP: 002b:00007f1d603b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  918.148900][T13225] RAX: ffffffffffffffda RBX: 00007f1d5f7b5fa0 RCX: 00007f1d5f58e929
[  918.156881][T13225] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 0000000000000004
[  918.164861][T13225] RBP: 00007f1d5f610b39 R08: 0000000000000000 R09: 0000000000000000
[  918.172840][T13225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  918.180836][T13225] R13: 0000000000000000 R14: 00007f1d5f7b5fa0 R15: 00007ffc0f7e41d8
[  918.188844][T13225]  </TASK>
[  918.191890][T13225] Modules linked in:
[  918.207665][T13225] ---[ end trace 0000000000000000 ]---
[  918.214786][T13225] RIP: 0010:mcp_smbus_xfer+0x5a/0x1280
[  918.226677][T13225] Code: c3 a8 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 85 3f 35 fa 48 8b 1b 48 89 d8 48 c1 e8 03 48 89 44 24 10 <42> 80 3c 38 00 74 08 48 89 df e8 67 3f 35 fa 4c 8b 3b 4d 8d a7 a8
[  918.249433][T13225] RSP: 0018:ffffc90005cef9a8 EFLAGS: 00010246
[  918.256202][T13225] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000
[  918.265730][T13225] RDX: ffffc900055b1000 RSI: 00000000000003ad RDI: 00000000000003ae
[  918.275045][T13225] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000004
[  918.283738][T13225] R10: fffffbfff1c3ebc6 R11: 1ffffffff1c3ebc5 R12: dffffc0000000000
[  918.292166][T13225] R13: 0000000000000000 R14: 0000000000000004 R15: dffffc0000000000
[  918.300451][T13225] FS:  00007f1d603b76c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  918.309573][T13225] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  918.316616][T13225] CR2: 00002000000012c0 CR3: 000000005693d000 CR4: 00000000003506f0
[  918.324874][T13225] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  918.333800][T13225] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  918.342015][T13225] Kernel panic - not syncing: Fatal exception
[  918.348442][T13225] Kernel Offset: disabled
[  918.352773][T13225] Rebooting in 86400 seconds..