last executing test programs:

6m58.718265632s ago: executing program 0 (id=185):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000000c0)={[{@dioread_nolock}, {@jqfmt_vfsv1}, {@nodioread_nolock}], [{@seclabel}, {@measure}, {@obj_role={'obj_role', 0x3d, 'sysadm_u'}}, {@dont_appraise}, {@pcr={'pcr', 0x3d, 0x5}}, {@dont_appraise}]}, 0x4, 0xbc7, &(0x7f0000001800)="$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")
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/2)

6m58.591094377s ago: executing program 0 (id=188):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r2, 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a)
flock(r3, 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8)
flock(r4, 0x1)
close_range(r1, 0xffffffffffffffff, 0x0)

6m58.459336991s ago: executing program 0 (id=190):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

6m58.279360997s ago: executing program 0 (id=192):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@nodioread_nolock}, {@minixdf}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0)

6m58.161651934s ago: executing program 0 (id=193):
syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000000)='.\x02\x00', 0x4000, &(0x7f0000000080)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e012a1d950f746fd8a192b6e048d4bcb62d5ee3a79d7ff9522014e3c0881f4cdda0cd5c0458cae665", @ANYRES8, @ANYRES8], 0x1, 0x11f0, &(0x7f0000001b00)="$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")
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x40, 0x0, 0x3, 0x0, &(0x7f0000000240))

6m56.899281613s ago: executing program 0 (id=196):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="e02753e868a10000000000000000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

6m56.61654024s ago: executing program 32 (id=196):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="e02753e868a10000000000000000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

6m28.879953462s ago: executing program 1 (id=558):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x4, 0xfffffffffffffffc})

6m28.801262378s ago: executing program 1 (id=559):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
readv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000003a40)=""/4093, 0xffd}, {&(0x7f0000001680)=""/4082, 0xff2}], 0x3)

6m28.801039955s ago: executing program 1 (id=560):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='\x00', 0x89901)
fcntl$setflags(r0, 0x2, 0x0)

6m28.731389872s ago: executing program 1 (id=561):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x210000, &(0x7f0000000480)={[{@nodelalloc}, {@dioread_lock}, {@noquota}, {@minixdf}, {@dioread_lock}, {@barrier}, {@resuid}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x58d, &(0x7f0000001240)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3001009, 0x0, 0x1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x1)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

6m28.635675752s ago: executing program 1 (id=562):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0)
write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x7}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff9, 0x9, 0x4, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffff, 0x1, 0xc000, 0x0, r2, r3, 0x20, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000140)={&(0x7f0000000200)={0x50, 0x0, 0xb, {0x7, 0x2d, 0x2, 0xffffffff880a0100, 0xff9c, 0xfffe, 0x10004, 0xfe000000, 0x0, 0x0, 0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6m28.211443757s ago: executing program 1 (id=567):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000640), 0x68000)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000680)={{0x2, 0x3}, 'port0\x00', 0x60, 0x0, 0x78, 0x2, 0x4, 0x5, 0xc165, 0x0, 0x4, 0x1})

6m28.193210804s ago: executing program 33 (id=567):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000640), 0x68000)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000680)={{0x2, 0x3}, 'port0\x00', 0x60, 0x0, 0x78, 0x2, 0x4, 0x5, 0xc165, 0x0, 0x4, 0x1})

5m58.513419409s ago: executing program 3 (id=903):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@sysvgroups}, {@nodelalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x90001)
r1 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4)
preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7)

5m58.384063732s ago: executing program 3 (id=906):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r2 = syz_open_pts(r1, 0x800)
r3 = dup3(r2, r1, 0x80000)
read(r3, &(0x7f00000000c0)=""/226, 0xe2)
read$watch_queue(r3, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000000280)=@raw=[@jmp={0x5, 0x1, 0xc, 0xa, 0xb, 0x50, 0x1}, @exit, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
unshare(0x8000000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}]}, 0x5c}}, 0x0)
socket$unix(0x1, 0x5, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xba01}, 0x0)
syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000403512108040000102030109028a000301046008080b0001012430010904000000010120000a2401f5260005000000132403050004030306070000000400010004000924050679"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0})

5m57.045752043s ago: executing program 3 (id=914):
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0)

5m56.969166094s ago: executing program 3 (id=918):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)

5m56.889790153s ago: executing program 3 (id=921):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000540)={0x40, 0x8, 0x2, "024b"}, 0x0, 0x0, 0x0, 0x0})

5m56.680706478s ago: executing program 3 (id=924):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000080)='/dev/mapper/control', 0x13)
lseek(r0, 0x0, 0x0)
read(r0, &(0x7f0000000100), 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r1, 0xc138fd30, &(0x7f0000000200)="04")

5m56.639109304s ago: executing program 34 (id=924):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000080)='/dev/mapper/control', 0x13)
lseek(r0, 0x0, 0x0)
read(r0, &(0x7f0000000100), 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r1, 0xc138fd30, &(0x7f0000000200)="04")

5m14.26757456s ago: executing program 4 (id=1325):
syz_emit_ethernet(0x11, &(0x7f00000005c0)={@remote, @random="001a00e100", @void, {@mpls_uc={0x8847, {[], @llc={@llc={0x42, 0xaa, "d4"}}}}}}, 0x0)

5m14.206137251s ago: executing program 4 (id=1326):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x3, 0x2, {0x5, 0x400}}}, @TCA_STAB={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x0)

5m14.205861452s ago: executing program 4 (id=1327):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
syz_emit_ethernet(0x7d, &(0x7f0000000280)={@local, @link_local, @void, {@mpls_uc={0x8847, {[{0x7}, {0xe65}, {0xff}], @ipv6=@generic={0x0, 0x6, "10b7e6", 0x3b, 0x16, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], "2df2963de8c8965c979609f6880060f6660cbd847051c490af2a8629502092d208299262e870342887e65c46402f44502b5eeb171038f1919ca9b8"}}}}}}, 0x0)
syz_io_uring_complete(0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$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")
open(0x0, 0x482fe, 0x20)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

5m13.891981501s ago: executing program 4 (id=1328):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0xfffffe70)

5m13.766330161s ago: executing program 4 (id=1329):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40880)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0xfffffffffffffe88, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d5, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x20}, [@proto={0x5, 0x19, 0x33}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x100}}, 0x20000844)
r4 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast2, 0x72}}, 0x1, 0x4, [{{0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00', 0xffe}}, {{0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e20, 0x1ff, @private0}}, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd6}}]}, 0x290)

5m13.466893941s ago: executing program 4 (id=1330):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x20000800)

5m13.121058599s ago: executing program 35 (id=1330):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x20000800)

4m16.950585254s ago: executing program 6 (id=1876):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0xffffffff, @local, 0x9}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)

4m16.950457977s ago: executing program 6 (id=1877):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mlockall(0x7)
modify_ldt$write2(0x11, &(0x7f0000000200)={0x7, 0x20000800, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10)

4m16.829197236s ago: executing program 6 (id=1879):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44050)

4m16.777713926s ago: executing program 6 (id=1880):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

4m16.560914278s ago: executing program 6 (id=1883):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14)

4m16.078021251s ago: executing program 6 (id=1889):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
syz_mount_image$fuse(0x0, &(0x7f0000000e80)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

4m15.960223284s ago: executing program 36 (id=1889):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
syz_mount_image$fuse(0x0, &(0x7f0000000e80)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

2m57.041023591s ago: executing program 2 (id=2697):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x505, &(0x7f0000001f40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

2m56.798178362s ago: executing program 2 (id=2698):
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x8, 0xa}, {0x0, 0x5, 0x200, 0x6, 0x5}}}}, 0x17)

2m56.612064315s ago: executing program 2 (id=2699):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x4000, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x20069, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

2m56.342023319s ago: executing program 2 (id=2700):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2010002, &(0x7f0000000140)={[{@bsdgroups}, {@usrquota}, {@noinit_itable}, {@resuid}, {@errors_remount}, {@bh}]}, 0x1, 0x558, &(0x7f0000001000)="$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")
unlink(&(0x7f00000000c0)='./file1\x00')
r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10)

2m56.234556674s ago: executing program 2 (id=2701):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c400000000328000480"], 0xa4}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x0)

2m56.154860525s ago: executing program 2 (id=2702):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xe0, 0x2}}]}, 0x90}}, 0x20000000)

2m55.168695059s ago: executing program 37 (id=2702):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xe0, 0x2}}]}, 0x90}}, 0x20000000)

2m17.018447653s ago: executing program 5 (id=2917):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b090a, 0x8000, '\x00', @value=0xb}})

2m17.018268326s ago: executing program 5 (id=2918):
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4)

2m16.928037267s ago: executing program 5 (id=2919):
r0 = syz_usb_connect$hid(0x5, 0x67, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc295, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0xc1, 0xaf}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x0, 0x5, 0x28, {0x28, 0x24, "826313612b8526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c55"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2m15.337943441s ago: executing program 5 (id=2925):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x400, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x3f, 0x186)

2m15.167228148s ago: executing program 5 (id=2927):
socket$unix(0x1, 0x5, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

2m13.776686185s ago: executing program 5 (id=2938):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14)

2m13.583509296s ago: executing program 38 (id=2938):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14)

1m40.683724322s ago: executing program 8 (id=3195):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x46000a})

1m40.555930145s ago: executing program 8 (id=3197):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000002ac0)=[@clear_death={0x400c630f, 0x3}, @acquire_done={0x40106309, 0x3}, @request_death={0x400c630e, 0x1}, @acquire_done, @exit_looper], 0x0, 0x0, 0x0})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0x6)

1m40.436366058s ago: executing program 8 (id=3199):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x5c, 0x41, 0x1, 0x7fffc, 0x4, {0x2}, [@nested={0x48, 0x1, 0x0, 0x1, [@nested={0x44, 0x10, 0x0, 0x1, [@nested={0x3d, 0xf, 0x0, 0x1, [@generic="2b28d400b54ad879b34ae92801bcf7a6d789d056068b0f2ea4e7192d37fb3e22f9381aa23b77e69cd284bd992f2878b19ac3e19f034da60f89"]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4)

1m40.336725194s ago: executing program 8 (id=3201):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1m40.255742587s ago: executing program 9 (id=3202):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4)

1m40.255450434s ago: executing program 8 (id=3203):
syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000001040)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@commit={'commit', 0x3d, 0xd1}}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x42, 0x38, 0x36, 0x35, 0x36, 0x34, 0x2d, 0x2d, 0x33]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f000000a280)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb)
fallocate(r1, 0x10, 0x800, 0x8000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
pwrite64(r2, &(0x7f00000000c0)='2*LL', 0x4, 0x4e7c)

1m40.026309959s ago: executing program 7 (id=3204):
r0 = msgget$private(0x0, 0x193)
msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x2}, 0x8, 0x0)
msgctl$IPC_RMID(r0, 0x0)

1m39.84889854s ago: executing program 9 (id=3205):
r0 = io_uring_setup(0x5ba4, &(0x7f0000000000)={0x0, 0xfca0, 0x2, 0x1, 0x5})
io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000001bc0), 0x2)

1m39.848723937s ago: executing program 7 (id=3206):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_AIE_ON(r0, 0x7001)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1c, 0x0, 0x13, 0x9, 0xa9, 0x6, 0x6, 0x1})

1m39.605948179s ago: executing program 9 (id=3207):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x3, 0x4}})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})

1m39.500597189s ago: executing program 7 (id=3208):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f00000001c0)="93e1", 0x2, 0x201, 0x0, 0x0)
shutdown(r1, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
splice(r1, 0x0, r0, 0x0, 0x1, 0x0)

1m39.3649786s ago: executing program 9 (id=3209):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a2320c7ffc6b506e6e3c7f8bd478c56beb9520ea32612337688c4905af416fe75be77c3f12e55f3f657129e6daf6844369cf70c947ab82e778a4263f9b75692d4e5c905bb9119b28241e191e54e38a5357ad888c9cd225dae2276839bfcc7dc87c05ba539e435888d6677bd00"/169, 0xa9}, {&(0x7f0000000440)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c", 0x47}], 0x2, 0x0, 0x0, 0x40880}], 0x1, 0x4814)
recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000c80)=""/148, 0x94}, {&(0x7f0000000d40)=""/181, 0xb5}], 0x2}, 0xfffffff4}], 0x1, 0x2001, 0x0)

1m38.560563272s ago: executing program 7 (id=3210):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x400, &(0x7f0000000240)=ANY=[], 0x0, 0x1b6, &(0x7f00000002c0)="$eJzKKC4s5mdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlq+4pc0DE5NL7TFyY2PgkWBmCE09sqi4sio7MScntaiYjaHiFsxa+2sqzRKcDn/kORySNB10mI74eGTB3MXGlqlw9swH+XVsGkcYHq1g3ljnyclQV5g6NS8tL6kqqypr3sSJG2c2djY2rpxYF5Xmt4qxJcVFA6pZYDOzofokG06Gd+2rHiY5sPZ4+DWfMlZ6ncp8yXhhkdSpFVUzJ3xRms1o+J3hDk/ZCgkNDSeJKxIWDSYMR+psG1wZKm4lpzQwpCmEMSapsYm1bTkzJ4SZn40NavpRjqUzJSwOCFWd/Gmp+dYh0W3GtqcsULmCPkGj4xIMTgsF/8uAjEloaCjTWMu01HbBlyKNvxJeq42dMhjc7ZmWwQKUpQFEroTyZJlBehKSV3joaGoapSQnNGxqBEsoM2zdw7laoIEBKdpUGBgYtjPC4hYCrsEYo2AUjIJRMApGwSgYBaNgFIyCUTAKRgQABAAA///GHoTO")

1m36.564908276s ago: executing program 9 (id=3211):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x103, 0x0, {0xffffffff, 0xbdf, 0xb, 0x10000}})

1m35.534884117s ago: executing program 7 (id=3212):
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/dax/drivers/device_dax/new_id\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='d', 0x1)

1m35.263034598s ago: executing program 9 (id=3213):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[], 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x5, r4, 0x0, 0x0, 0x0, 0x0, 0x2}])
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)

1m34.974308092s ago: executing program 8 (id=3214):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1)

1m34.302228978s ago: executing program 7 (id=3215):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="86b704", 0x3}], 0x1}, 0x1)
recvfrom$inet(r0, &(0x7f0000000a40)=""/236, 0xec, 0x103, 0x0, 0x0)

0s ago: executing program 39 (id=3213):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[], 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x5, r4, 0x0, 0x0, 0x0, 0x0, 0x2}])
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)

kernel console output (not intermixed with test programs):

 EXT4-fs (loop5): orphan cleanup on readonly fs
[  297.256270][T12738] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present
[  297.267869][T12738] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  297.277950][T12738] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.2606: Failed to acquire dquot type 1
[  297.287859][T12738] loop5: lost filesystem error report for type 5 error -5
[  297.288667][T12738] EXT4-fs (loop5): Remounting filesystem read-only
[  297.291155][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  297.291165][    C1] EXT4-fs (loop5): initial error at time 2000000039: ext4_acquire_dquot:7041
[  297.291174][    C1] EXT4-fs (loop5): last error at time 2000000039: ext4_acquire_dquot:7041
[  297.383162][T12738] EXT4-fs (loop5): 1 truncate cleaned up
[  297.892610][T12738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  297.946358][ T8228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.146214][T12759] loop5: detected capacity change from 0 to 1024
[  298.163419][T12759] hfsplus: catalog record size mismatch (type 1, got 62, expected 88)
[  298.929460][T12773] loop5: detected capacity change from 0 to 128
[  299.707335][T12809] loop7: detected capacity change from 0 to 512
[  299.734331][T12809] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.2638: corrupted in-inode xattr: e_value out of bounds
[  299.740551][T12809] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  299.740989][T12809] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2638: couldn't read orphan inode 15 (err -117)
[  299.750046][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  299.750062][    C1] EXT4-fs (loop7): initial error at time 2000000042: ext4_iget_extra_inode:5180: inode 15
[  299.750084][    C1] EXT4-fs (loop7): last error at time 2000000042: ext4_iget_extra_inode:5180: inode 15
[  299.764156][T12809] loop7: lost filesystem error report for type 5 error -117
[  299.765880][T12809] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.808886][T10843] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.182012][T12821] loop5: detected capacity change from 0 to 32768
[  300.187846][T12821] (syz.5.2643,12821,1):ocfs2_journal_addressable:1934 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2
[  300.187862][T12821] (syz.5.2643,12821,1):ocfs2_check_volume:2429 ERROR: status = -27
[  300.195572][T11005] usb 8-1: new low-speed USB device number 14 using dummy_hcd
[  300.199198][T12821] (syz.5.2643,12821,1):ocfs2_mount_volume:1763 ERROR: status = -27
[  300.225041][T12821] (syz.5.2643,12821,1):ocfs2_fill_super:1177 ERROR: status = -27
[  300.351952][T11005] usb 8-1: unable to get BOS descriptor or descriptor too short
[  300.357510][T11005] usb 8-1: config 142 has an invalid interface number: 251 but max is 0
[  300.366015][T11005] usb 8-1: config 142 has no interface number 0
[  300.370583][T11005] usb 8-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  300.383752][T11005] usb 8-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt
[  300.395345][T11005] usb 8-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt
[  300.404562][T11005] usb 8-1: config 142 interface 251 has no altsetting 0
[  300.413203][T11005] usb 8-1: string descriptor 0 read error: -22
[  300.418723][T11005] usb 8-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80
[  300.431097][T11005] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.447401][T12816] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  300.458463][T12816] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  300.469030][T11005] cypress_m8 8-1:142.251: HID->COM RS232 Adapter converter detected
[  300.480251][T11005] usb 8-1: HID->COM RS232 Adapter converter now attached to ttyUSB0
[  300.609466][T12830] loop5: detected capacity change from 0 to 256
[  300.803396][T11005] usb 8-1: USB disconnect, device number 14
[  300.823727][T11005] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0
[  300.841478][T11005] cypress_m8 8-1:142.251: device disconnected
[  301.495687][T12860] netlink: 'syz.7.2661': attribute type 1 has an invalid length.
[  301.498443][T12860] netlink: 'syz.7.2661': attribute type 12 has an invalid length.
[  301.501182][T12860] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2661'.
[  302.791766][T12875] trusted_key: syz.2.2669 sent an empty control message without MSG_MORE.
[  302.935594][T12878] overlayfs: failed to clone upperpath
[  303.524715][T12886] loop7: detected capacity change from 0 to 32768
[  303.552821][T12886] (syz.7.2673,12886,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xe03c4605, computed 0x9efb3e14. Applying ECC.
[  303.568554][T12886] (syz.7.2673,12886,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xe03c4605, computed 0x9efb3e14
[  303.590628][T12886] (syz.7.2673,12886,1):ocfs2_verify_volume:2328 ERROR: status = -5
[  303.597108][T12886] (syz.7.2673,12886,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  303.606351][T12886] (syz.7.2673,12886,1):ocfs2_fill_super:1177 ERROR: status = -5
[  304.264131][T12909] loop7: detected capacity change from 0 to 512
[  304.274534][T12909] EXT4-fs: Ignoring removed mblk_io_submit option
[  304.292478][T12909] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  304.295356][T12909] EXT4-fs (loop7): first meta block group too large: 9 (group descriptor block count 1)
[  304.800014][T11005] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  304.850192][ T5673] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  305.018460][T11005] usb 8-1: config 0 has an invalid interface number: 50 but max is 0
[  305.022250][T11005] usb 8-1: config 0 has no interface number 0
[  305.024854][T11005] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  305.030010][ T5673] usb 6-1: Using ep0 maxpacket: 32
[  305.037141][ T5673] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  305.041894][T11005] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  305.045894][ T5673] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  305.050153][T11005] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.056221][ T5673] usb 6-1: config 0 interface 0 has no altsetting 0
[  305.058995][T11005] usb 8-1: Product: syz
[  305.061892][T11005] usb 8-1: Manufacturer: syz
[  305.064547][T11005] usb 8-1: SerialNumber: syz
[  305.069794][ T5673] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  305.075334][ T5673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.079432][T11005] usb 8-1: config 0 descriptor??
[  305.084178][ T5673] usb 6-1: Product: syz
[  305.090739][ T5673] usb 6-1: Manufacturer: syz
[  305.092763][ T5673] usb 6-1: SerialNumber: syz
[  305.106208][T11005] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0
[  305.118073][ T5673] usb 6-1: config 0 descriptor??
[  305.386796][    C1] usb 8-1: yurex_control_callback - control failed: -2
[  305.395526][   T24] usb 8-1: USB disconnect, device number 15
[  305.409417][   T24] yurex 8-1:0.50: USB YUREX #0 now disconnected
[  305.533565][ T5673] gs_usb 6-1:0.0: Configuring for 1 interfaces
[  306.360290][ T5673] usb 6-1: USB disconnect, device number 32
[  306.427501][ T5608] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  307.146159][T12961] sg_write: data in/out 484352/136 bytes for SCSI command 0x0-- guessing data in;
[  307.146159][T12961]    program syz.5.2704 not setting count and/or reply_len properly
[  307.345582][T12967] loop5: detected capacity change from 0 to 512
[  307.592125][ T5810] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.744344][T12969] loop7: detected capacity change from 0 to 32768
[  307.782058][ T5810] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.802595][T12969] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  307.819139][T12969] XFS (loop7): Ending clean mount
[  307.901846][T10843] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  308.041944][ T5810] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.358380][ T5810] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.380664][T12982] nbd5: detected capacity change from 0 to 63
[  308.412055][T12983] block nbd5: NBD_DISCONNECT
[  308.454750][T12983] block nbd5: Disconnected due to user request.
[  308.459637][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  308.471858][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  308.483250][T12983] block nbd5: shutting down sockets
[  308.486178][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  308.497078][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  308.500851][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  308.539896][    C0] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  308.543333][    C0] buffer_io_error: 7 callbacks suppressed
[  308.543339][    C0] Buffer I/O error on dev nbd5, logical block 0, async page read
[  308.567085][    C0] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  308.570695][    C0] Buffer I/O error on dev nbd5, logical block 1, async page read
[  308.573640][    C0] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  308.577234][    C0] Buffer I/O error on dev nbd5, logical block 2, async page read
[  308.579777][    C0] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  308.583170][    C0] Buffer I/O error on dev nbd5, logical block 3, async page read
[  308.588390][   T94] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  308.591994][   T94] Buffer I/O error on dev nbd5, logical block 0, async page read
[  308.594820][   T94] Buffer I/O error on dev nbd5, logical block 1, async page read
[  308.597568][   T94] Buffer I/O error on dev nbd5, logical block 2, async page read
[  308.604979][   T94] Buffer I/O error on dev nbd5, logical block 3, async page read
[  308.614574][   T94] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  308.617749][   T94] Buffer I/O error on dev nbd5, logical block 0, async page read
[  308.620630][   T94] Buffer I/O error on dev nbd5, logical block 1, async page read
[  308.625847][   T94] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  308.629554][   T94] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  308.633450][   T94] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  308.637485][   T94] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  308.642919][ T7894] ldm_validate_partition_table(): Disk read failed.
[  308.653606][ T7894] Dev nbd5: unable to read RDB block 0
[  308.670077][ T7894]  nbd5: unable to read partition table
[  308.690623][ T7894] ldm_validate_partition_table(): Disk read failed.
[  308.696557][ T7894] Dev nbd5: unable to read RDB block 0
[  308.709599][ T7894]  nbd5: unable to read partition table
[  308.762421][ T5666] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  308.961178][ T5666] usb 8-1: unable to get BOS descriptor or descriptor too short
[  308.988364][ T5666] usb 8-1: config 1 has an invalid interface number: 16 but max is 0
[  308.998105][ T5666] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  309.013280][ T5666] usb 8-1: config 1 has no interface number 0
[  309.020513][ T5666] usb 8-1: config 1 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  309.053179][ T5666] usb 8-1: string descriptor 0 read error: -22
[  309.065872][ T5666] usb 8-1: New USB device found, idVendor=0441, idProduct=4248, bcdDevice= 0.40
[  309.075410][ T5666] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.146025][ T5666] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  309.176369][ T5666] usb 8-1: MIDIStreaming interface descriptor not found
[  309.689074][   T12] netdevsim netdevsim2 eth21: set [1, 0] type 2 family 0 port 6081 - 0
[  310.066262][ T5810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  310.075708][ T5810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  310.079687][ T5810] bond0 (unregistering): Released all slaves
[  310.091747][   T12] netdevsim netdevsim2 eth22: set [1, 0] type 2 family 0 port 6081 - 0
[  310.095228][   T12] netdevsim netdevsim2 eth23: set [1, 0] type 2 family 0 port 6081 - 0
[  310.104718][   T12] netdevsim netdevsim2 eth24: set [1, 0] type 2 family 0 port 6081 - 0
[  310.206671][ T5673] usb 8-1: USB disconnect, device number 16
[  310.538264][ T5352] 8021q: adding VLAN 0 to HW filter on device eth21
[  310.600288][ T5608] Bluetooth: hci2: command tx timeout
[  310.844500][T13035] loop7: detected capacity change from 0 to 256
[  310.860517][T13035] FAT-fs (loop7): data area starts beyond volume (274 > 64)
[  310.865848][T13035] FAT-fs (loop7): Can't find a valid FAT filesystem
[  310.872736][ T5810] hsr_slave_0: left promiscuous mode
[  310.895552][ T5810] hsr_slave_1: left promiscuous mode
[  310.927012][ T5810] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.929638][ T5810] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.937468][ T5810] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.953128][ T5810] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.968882][T13039] loop5: detected capacity change from 0 to 128
[  310.984946][T13039] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  310.988921][T13039] ext4 filesystem being mounted at /475/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  310.995914][T13039] fscrypt (loop5, inode 12): Unsupported encryption flags (0x7b)
[  311.014050][ T8228] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  311.050677][ T5810] veth1_macvtap: left promiscuous mode
[  311.056362][ T5810] veth0_macvtap: left promiscuous mode
[  311.073303][ T5810] veth1_vlan: left promiscuous mode
[  311.083980][ T5810] veth0_vlan: left promiscuous mode
[  311.168926][T13050] loop7: detected capacity change from 0 to 1024
[  311.193244][T13050] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  311.204242][T13050] EXT4-fs error (device loop7): __ext4_remount:6844: comm syz.7.2727: Abort forced by user
[  311.217448][T13050] EXT4-fs (loop7): Remounting filesystem read-only
[  311.219673][T13050] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  311.298350][T10843] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.321981][T11005] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  311.454801][T13054] loop7: detected capacity change from 0 to 32768
[  311.469976][T11005] usb 6-1: Using ep0 maxpacket: 8
[  311.472431][T13054] OCFS2: ERROR (device loop7): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 69 has invalid tree depth 2048 in extent list
[  311.479867][T13054] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  311.485404][T13054] OCFS2: File system is now read-only.
[  311.485490][T11005] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  311.490610][T11005] usb 6-1: config 0 has no interface number 0
[  311.492655][T13054] (syz.7.2728,13054,1):ocfs2_find_leaf:1958 ERROR: status = -30
[  311.495058][T11005] usb 6-1: config 0 interface 1 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  311.498415][T13054] (syz.7.2728,13054,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  311.502959][T11005] usb 6-1: config 0 interface 1 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0
[  311.506093][T13054] (syz.7.2728,13054,1):ocfs2_get_clusters:634 ERROR: status = -30
[  311.508535][T11005] usb 6-1: config 0 interface 1 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  311.512639][T13054] (syz.7.2728,13054,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30
[  311.515608][T13054] (syz.7.2728,13054,1):ocfs2_map_slot_buffers:399 ERROR: status = -30
[  311.518129][T11005] usb 6-1: config 0 interface 1 has no altsetting 0
[  311.521580][T13054] (syz.7.2728,13054,1):ocfs2_init_slot_info:448 ERROR: status = -30
[  311.524074][T11005] usb 6-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00
[  311.526920][T13054] (syz.7.2728,13054,1):ocfs2_initialize_super:2219 ERROR: status = -30
[  311.529512][T11005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.532661][T13054] (syz.7.2728,13054,1):ocfs2_fill_super:1177 ERROR: status = -30
[  311.543956][T11005] usb 6-1: config 0 descriptor??
[  311.753517][ T5810] team0 (unregistering): Port device team_slave_1 removed
[  311.833632][ T5810] team0 (unregistering): Port device team_slave_0 removed
[  311.949501][ T5352] 8021q: adding VLAN 0 to HW filter on device eth22
[  312.254162][T11005] uclogic 0003:28BD:1903.0014: interface is invalid, ignoring
[  312.459294][T11005] usb 6-1: USB disconnect, device number 33
[  312.497606][T12986] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.520694][T12986] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.523136][T12986] bridge_slave_0: entered allmulticast mode
[  312.525914][T12986] bridge_slave_0: entered promiscuous mode
[  312.585571][T12986] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.595270][T12986] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.601781][T12986] bridge_slave_1: entered allmulticast mode
[  312.606152][T12986] bridge_slave_1: entered promiscuous mode
[  312.680661][ T5608] Bluetooth: hci2: command tx timeout
[  312.684355][T12986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.706046][T12986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.782229][T12986] team0: Port device team_slave_0 added
[  312.793782][T12986] team0: Port device team_slave_1 added
[  312.866040][T12986] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.875190][T12986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  312.912077][T12986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.933984][T12986] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.936417][T12986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  312.945289][T12986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  313.262336][T12986] hsr_slave_0: entered promiscuous mode
[  313.282650][T12986] hsr_slave_1: entered promiscuous mode
[  313.287984][T12986] debugfs: 'hsr0' already exists in 'hsr'
[  313.292845][T12986] Cannot create hsr debugfs directory
[  313.298346][ T5352] 8021q: adding VLAN 0 to HW filter on device eth24
[  313.364284][T13091] nbd: must specify a size in bytes for the device
[  313.446208][T13093] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[  313.472327][T13093] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  313.510667][T11005] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  313.689547][T11005] usb 6-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e
[  313.701002][T11005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.710615][T11005] usb 6-1: Product: syz
[  313.713909][T11005] usb 6-1: Manufacturer: syz
[  313.717887][T11005] usb 6-1: SerialNumber: syz
[  313.910665][T12986] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  313.925753][T12986] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  313.936023][T12986] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  313.956820][T11005] usb 6-1: USB disconnect, device number 34
[  313.990864][T12986] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  313.997292][T12986] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  314.015372][T12986] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  314.019042][T12986] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  314.029773][T12986] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  314.105064][T12986] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.115912][T12986] 8021q: adding VLAN 0 to HW filter on device team0
[  314.121007][T11638] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.123800][T11638] bridge0: port 1(bridge_slave_0) entered forwarding state
[  314.135934][T11638] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.138170][T11638] bridge0: port 2(bridge_slave_1) entered forwarding state
[  314.198362][T13114] tipc: Started in network mode
[  314.203150][T13114] tipc: Node identity 4, cluster identity 4711
[  314.205147][T13114] tipc: Node number set to 4
[  314.399476][ T5352] 8021q: adding VLAN 0 to HW filter on device eth23
[  314.542941][T13128] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  314.548360][T13128] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  314.628688][T13128] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  314.633863][T13128] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  314.701610][T13128] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2744'.
[  314.710464][T13128] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2744'.
[  314.793351][T13132] loop5: detected capacity change from 0 to 4096
[  314.803402][T12986] 8021q: adding VLAN 0 to HW filter on device batadv0
[  314.845808][T13132] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  314.878233][T13132] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  314.889128][T13132] ntfs3(loop5): Failed to load $Secure (-22).
[  314.897007][T13132] ntfs3(loop5): Failed to initialize $Secure (-22).
[  315.254816][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2749'.
[  315.393347][T12986] veth0_vlan: entered promiscuous mode
[  315.419307][T12986] veth1_vlan: entered promiscuous mode
[  315.522309][T12986] veth0_macvtap: entered promiscuous mode
[  315.544696][T12986] veth1_macvtap: entered promiscuous mode
[  315.579744][T12986] batman_adv: batadv0: Interface activated: batadv_slave_0
[  315.587055][T12986] batman_adv: batadv0: Interface activated: batadv_slave_1
[  315.594535][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.601234][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.614257][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.632273][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.722698][T11644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.732761][T11644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.748564][T11638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.752454][T11638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.040465][T11005] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  316.190745][T11005] usb 9-1: Using ep0 maxpacket: 32
[  316.195110][T11005] usb 9-1: config 0 has an invalid interface number: 119 but max is 0
[  316.198567][T11005] usb 9-1: config 0 has no interface number 0
[  316.204870][T11005] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  316.209432][T11005] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  316.215949][T11005] usb 9-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  316.220547][T11005] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  316.228533][T11005] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  316.229927][T13168] loop7: detected capacity change from 0 to 32768
[  316.237598][T13168] btrfs: Deprecated parameter 'usebackuproot'
[  316.239691][T13168] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  316.243731][T11005] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.253947][T13168] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2751 (13168)
[  316.262715][T11005] usb 9-1: Product: syz
[  316.272672][T11005] usb 9-1: Manufacturer: syz
[  316.277535][T13168] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  316.278431][T11005] usb 9-1: SerialNumber: syz
[  316.281300][T13168] BTRFS info (device loop7): using crc32c checksum algorithm
[  316.297543][T11005] usb 9-1: config 0 descriptor??
[  316.308761][T11005] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.119/input/input29
[  316.353223][   T82] BTRFS warning (device loop7): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  316.361648][T13168] BTRFS error (device loop7): failed to load root extent
[  316.364073][T13168] BTRFS warning (device loop7): try to load backup roots slot 1
[  316.367842][   T51] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  316.373259][T13168] BTRFS warning (device loop7): couldn't read tree root
[  316.375719][T13168] BTRFS warning (device loop7): try to load backup roots slot 2
[  316.379288][ T1110] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  316.384654][T13168] BTRFS warning (device loop7): couldn't read tree root
[  316.386893][T13168] BTRFS warning (device loop7): try to load backup roots slot 3
[  316.478085][T13168] BTRFS info (device loop7): rebuilding free space tree
[  316.528837][T13168] BTRFS info (device loop7): checking UUID tree
[  316.529737][ T8330] usb 9-1: USB disconnect, device number 2
[  316.537829][T13168] BTRFS info (device loop7): enabling ssd optimizations
[  316.542636][T13168] BTRFS info (device loop7): turning on async discard
[  316.545459][T13168] BTRFS info (device loop7): enabling free space tree
[  316.548210][T13168] BTRFS info (device loop7): force clearing of disk cache
[  316.550606][T13168] BTRFS info (device loop7): enabling auto defrag
[  316.552761][T13168] BTRFS info (device loop7): trying to use backup root at mount time
[  316.567644][T13168] BTRFS info (device loop7): use zstd compression, level 3
[  316.662253][T13194] hsr0: entered allmulticast mode
[  316.667313][T13194] hsr_slave_0: entered allmulticast mode
[  316.672890][T13194] hsr_slave_1: entered allmulticast mode
[  316.685293][T13194] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  316.779500][T10843] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  316.795341][T13198] loop5: detected capacity change from 0 to 128
[  316.839395][T13198] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  316.861041][T13198] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  317.104405][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  317.109733][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  317.276036][T13201] loop7: detected capacity change from 0 to 32768
[  317.308515][T13201] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  317.334659][T13201] (syz.7.2757,13201,1):ocfs2_read_blocks_sync:110 ERROR: status = -12
[  317.363591][T13201] (syz.7.2757,13201,1):ocfs2_get_suballoc_slot_bit:3160 ERROR: read block 124554051584 failed -12
[  317.375000][T13201] (syz.7.2757,13201,1):ocfs2_get_suballoc_slot_bit:3192 ERROR: status = -12
[  317.395211][T13201] (syz.7.2757,13201,1):ocfs2_test_inode_bit:3278 ERROR: get alloc slot and bit failed -12
[  317.412386][T13201] (syz.7.2757,13201,1):ocfs2_test_inode_bit:3323 ERROR: status = -12
[  317.424688][T13201] (syz.7.2757,13201,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[  317.435953][T13215] (syz.7.2757,13215,1):ocfs2_read_blocks_sync:110 ERROR: status = -12
[  317.518508][T13215] (syz.7.2757,13215,1):ocfs2_get_suballoc_slot_bit:3160 ERROR: read block 124554051584 failed -12
[  317.527352][T13215] (syz.7.2757,13215,1):ocfs2_get_suballoc_slot_bit:3192 ERROR: status = -12
[  317.535101][T13215] (syz.7.2757,13215,1):ocfs2_test_inode_bit:3278 ERROR: get alloc slot and bit failed -12
[  317.538257][T13215] (syz.7.2757,13215,1):ocfs2_test_inode_bit:3323 ERROR: status = -12
[  317.541103][T13215] (syz.7.2757,13215,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[  317.598682][T13224] loop8: detected capacity change from 0 to 1024
[  317.601257][T10843] ocfs2: Unmounting device (7,7) on (node local)
[  317.624006][T13224] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  317.629436][T13224] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  317.635854][T13224] EXT4-fs (loop8): orphan cleanup on readonly fs
[  317.637925][T13224] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #3: comm syz.8.2765: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0)
[  317.648063][T13224] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  317.650377][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  317.655147][    C1] EXT4-fs (loop8): initial error at time 2000000059: ext4_ext_check_inode:521: inode 3
[  317.658052][    C1] EXT4-fs (loop8): last error at time 2000000059: ext4_ext_check_inode:521: inode 3
[  317.665648][T13224] EXT4-fs (loop8): Remounting filesystem read-only
[  317.674333][T13224] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  317.692861][T13224] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  317.695595][T13224] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  317.738564][T12986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.772544][T13227] loop7: detected capacity change from 0 to 256
[  318.290345][   T24] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  318.440317][   T24] usb 8-1: Using ep0 maxpacket: 32
[  318.443956][   T24] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[  318.447442][   T24] usb 8-1: config 0 interface 0 has no altsetting 0
[  318.450040][   T24] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  318.455924][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.497419][   T24] usb 8-1: config 0 descriptor??
[  318.734002][   T24] usbhid 8-1:0.0: can't add hid device: -71
[  318.748286][   T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  318.771568][   T24] usb 8-1: USB disconnect, device number 17
[  318.853979][T13240] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  319.560817][   T24] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  319.710016][   T24] usb 8-1: Using ep0 maxpacket: 8
[  319.716009][   T24] usb 8-1: config 0 has an invalid interface number: 200 but max is 0
[  319.718923][   T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  319.723033][   T24] usb 8-1: config 0 has no interface number 0
[  319.725100][   T24] usb 8-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  319.729331][   T24] usb 8-1: config 0 interface 200 has no altsetting 0
[  319.734724][   T24] usb 8-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[  319.745790][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.756643][   T24] usb 8-1: Product: syz
[  319.757999][   T24] usb 8-1: Manufacturer: syz
[  319.765221][   T24] usb 8-1: SerialNumber: syz
[  319.772224][   T24] usb 8-1: config 0 descriptor??
[  320.074186][T13249] loop5: detected capacity change from 0 to 32768
[  320.086877][   T24] usbhid 8-1:0.200: couldn't find an input interrupt endpoint
[  320.096441][   T24] usb 8-1: USB disconnect, device number 18
[  320.123271][T13249]  loop5: p1 p2 p3 < p5 p6 >
[  320.128766][T13249] loop5: p2 size 16775168 extends beyond EOD, truncated
[  320.132250][T13249] loop5: p5 start 4294970168 is beyond EOD, truncated
[  320.140068][ T8330] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  320.291079][ T8330] usb 9-1: Using ep0 maxpacket: 8
[  320.300762][ T8330] usb 9-1: config 0 has an invalid interface number: 31 but max is 0
[  320.303567][ T8330] usb 9-1: config 0 has no interface number 0
[  320.312162][ T8330] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  320.324643][ T8330] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.333092][ T8330] usb 9-1: Product: syz
[  320.334440][ T8330] usb 9-1: Manufacturer: syz
[  320.339942][ T8330] usb 9-1: SerialNumber: syz
[  320.344538][ T8330] usb 9-1: config 0 descriptor??
[  320.555028][ T8330] uvcvideo 9-1:0.31: probe with driver uvcvideo failed with error -22
[  320.563190][ T8330] usb 9-1: USB disconnect, device number 3
[  320.645673][T13259] loop7: detected capacity change from 0 to 2048
[  320.659982][   T24] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[  320.811684][   T24] usb 6-1: config 8 has an invalid interface number: 188 but max is 0
[  320.814484][T13259]  loop7: p1 < > p4 < >
[  320.817445][   T24] usb 6-1: config 8 has no interface number 0
[  320.827004][   T24] usb 6-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  320.840458][   T24] usb 6-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 10
[  320.854406][   T24] usb 6-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  320.866402][   T24] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[  320.876508][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.883469][   T24] usb 6-1: Product: syz
[  320.884781][   T24] usb 6-1: Manufacturer: syz
[  320.892550][   T24] usb 6-1: SerialNumber: syz
[  320.955015][T13261] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  321.017577][T13263] netlink: 232 bytes leftover after parsing attributes in process `syz.7.2781'.
[  321.197030][T13265] loop7: detected capacity change from 0 to 32768
[  321.229283][T13265] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  321.262838][T13265] XFS (loop7): Ending clean mount
[  321.276897][T13265] XFS (loop7): Quotacheck needed: Please wait.
[  321.306452][   T24] vmk80xx 6-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[  321.336856][   T24] vmk80xx 6-1:8.188: probe with driver vmk80xx failed with error -22
[  321.351922][   T24] usb 6-1: USB disconnect, device number 35
[  321.404741][T13265] XFS (loop7): Quotacheck: Done.
[  321.780136][   T33] audit: type=1800 audit(2000000064.110:129): pid=13280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2782" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=4428 res=0 errno=0
[  322.253560][T13285] bridge0: port 3(syz_tun) entered blocking state
[  322.256600][T13285] bridge0: port 3(syz_tun) entered disabled state
[  322.259473][T13285] syz_tun: entered allmulticast mode
[  322.263546][T13285] syz_tun: entered promiscuous mode
[  322.266200][T13285] bridge0: port 3(syz_tun) entered blocking state
[  322.269045][T13285] bridge0: port 3(syz_tun) entered forwarding state
[  323.226883][T13303] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  323.229848][T13303] i2c i2c-1: DVB: adapter 0 frontend 0 symbol rate 1 out of range (1000000..45000000)
[  323.500644][   T24] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  323.651686][   T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  323.659152][   T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  323.668502][   T24] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  323.678720][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  323.685401][   T24] usb 6-1: SerialNumber: syz
[  323.903483][   T24] usb 6-1: skipping empty audio interface (v1)
[  323.934115][   T24] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  323.945413][   T24] usb 6-1: USB disconnect, device number 36
[  323.962820][ T7894] udevd[7894]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  324.037634][T13319] loop8: detected capacity change from 0 to 512
[  324.043695][T13319] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  324.056573][T13319] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #15: block 1803188595: comm syz.8.2799: lblock 0 mapped to illegal pblock 1803188595 (length 1)
[  324.062694][T13319] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  324.062891][T13319] EXT4-fs (loop8): Remounting filesystem read-only
[  324.069046][T13319] EXT4-fs (loop8): mount failed
[  324.071024][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  324.071036][    C1] EXT4-fs (loop8): initial error at time 2000000066: ext4_map_blocks:791: inode 15: block 1803188595
[  324.071053][    C1] EXT4-fs (loop8): last error at time 2000000066: ext4_map_blocks:791: inode 15: block 1803188595
[  324.158500][T10843] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  325.300141][   T32] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[  325.463039][   T32] usb 6-1: config 9 interface 0 has no altsetting 0
[  325.479410][   T32] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15
[  325.492357][   T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.507443][   T32] usb 6-1: Product: syz
[  325.513476][   T32] usb 6-1: Manufacturer: syz
[  325.525330][   T32] usb 6-1: SerialNumber: syz
[  326.131126][T11005] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  326.163780][   T32] snd-usb-caiaq 6-1:9.0: invalid EPs
[  326.167694][   T32] usb 6-1: unable to init card! (ret=-22)
[  326.175012][   T32] snd-usb-caiaq 6-1:9.0: probe with driver snd-usb-caiaq failed with error -22
[  326.330216][   T32] IPVS: starting estimator thread 0...
[  326.340382][T11005] usb 8-1: Using ep0 maxpacket: 32
[  326.343717][T11005] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  326.349230][T11005] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  326.352340][T11005] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.355192][T11005] usb 8-1: Product: syz
[  326.356479][T11005] usb 8-1: Manufacturer: syz
[  326.358132][T11005] usb 8-1: SerialNumber: syz
[  326.364949][   T32] usb 6-1: USB disconnect, device number 37
[  326.369502][T11005] usb 8-1: config 0 descriptor??
[  326.378936][T11005] cdc_ether 8-1:0.0: missing cdc header descriptor
[  326.384952][T11005] usb 8-1: unsupported MDLM descriptors
[  326.420115][T13354] IPVS: using max 84 ests per chain, 201600 per kthread
[  326.585609][   T32] usb 8-1: USB disconnect, device number 19
[  326.955486][T13365] loop5: detected capacity change from 0 to 2048
[  326.985612][T13367] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  327.013918][T13365] syz.5.2811: attempt to access beyond end of device
[  327.013918][T13365] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  327.032788][T13365] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  327.040251][T13365] syz.5.2811: attempt to access beyond end of device
[  327.040251][T13365] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  327.051916][T13365] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  327.057083][T13365] syz.5.2811: attempt to access beyond end of device
[  327.057083][T13365] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  327.068490][T13365] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  327.071653][T13365] syz.5.2811: attempt to access beyond end of device
[  327.071653][T13365] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  327.076283][T13365] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  327.079147][T13365] syz.5.2811: attempt to access beyond end of device
[  327.079147][T13365] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  327.085259][T13365] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  327.088685][T13365] syz.5.2811: attempt to access beyond end of device
[  327.088685][T13365] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  327.093533][T13365] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  327.096254][T13365] syz.5.2811: attempt to access beyond end of device
[  327.096254][T13365] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  327.104930][T13365] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  327.110617][T13365] syz.5.2811: attempt to access beyond end of device
[  327.110617][T13365] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  327.125272][T13365] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  327.135530][T13365] syz.5.2811: attempt to access beyond end of device
[  327.135530][T13365] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  327.148712][T13365] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  327.159141][   T33] audit: type=1800 audit(2000000069.500:130): pid=13365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2811" name="file2" dev="loop5" ino=16 res=0 errno=0
[  327.175794][T13365] syz.5.2811: attempt to access beyond end of device
[  327.175794][T13365] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  327.198667][T13365] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  327.222991][T13365] NILFS (loop5): error -5 truncating bmap (ino=16)
[  327.449681][T13371] loop7: detected capacity change from 0 to 32768
[  327.455178][T13371] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2812 (13371)
[  327.473521][T13371] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  328.185083][T13371] BTRFS info (device loop7): using sha256 checksum algorithm
[  328.444085][T13371] BTRFS info (device loop7): turning on flush-on-commit
[  328.452387][T13371] BTRFS info (device loop7): turning on async discard
[  328.460661][T13371] BTRFS info (device loop7): enabling free space tree
[  328.630860][   T24] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  328.681810][T13371] BTRFS info (device loop7): balance: start 
[  328.685785][T13371] BTRFS info (device loop7): balance: ended with status: 0
[  328.751234][T10843] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  328.782619][   T24] usb 6-1: Using ep0 maxpacket: 8
[  328.798072][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[  328.804997][   T24] usb 6-1: config 0 has an invalid interface number: 88 but max is 0
[  328.821673][   T24] usb 6-1: config 0 has no interface number 0
[  328.829745][   T24] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 50, changing to 9
[  328.844657][   T24] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 41107, setting to 1024
[  328.859249][   T24] usb 6-1: config 0 interface 88 has no altsetting 0
[  328.871993][   T24] usb 6-1: string descriptor 0 read error: -22
[  328.875902][   T24] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  328.883996][   T24] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  328.900462][   T24] usb 6-1: config 0 descriptor??
[  328.919368][   T24] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input30
[  330.332816][ T5673] usb 6-1: USB disconnect, device number 38
[  330.354283][ T7894] udevd[7894]: Error opening device "/dev/input/event3": Input/output error
[  330.359098][ T7894] udevd[7894]: Unable to EVIOCGABS device "/dev/input/event3"
[  330.365467][ T7894] udevd[7894]: Unable to EVIOCGABS device "/dev/input/event3"
[  330.540576][T13417] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[  330.573524][T13417] loop7: detected capacity change from 0 to 256
[  330.587122][T13417] exfat: Deprecated parameter 'namecase'
[  330.596185][T13417] exfat: Deprecated parameter 'namecase'
[  330.605138][T13417] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d)
[  331.936197][T13438] loop7: detected capacity change from 0 to 256
[  331.945742][T13438] exFAT-fs (loop7): bogus fat length
[  331.955402][T13438] exFAT-fs (loop7): failed to read boot sector
[  331.958352][T13438] exFAT-fs (loop7): failed to recognize exfat type
[  332.123610][   T24] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  332.270148][   T24] usb 6-1: Using ep0 maxpacket: 32
[  332.274494][   T24] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  332.278945][   T24] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  332.287811][   T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  332.294645][   T24] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  332.297761][   T24] usb 6-1: Product: syz
[  332.299397][   T24] usb 6-1: Manufacturer: syz
[  332.310763][   T24] hub 6-1:4.0: USB hub found
[  332.530274][   T24] hub 6-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  332.850300][ T5673] usb 6-1: USB disconnect, device number 39
[  332.866693][T13444] loop7: detected capacity change from 0 to 512
[  332.929307][T13444] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)!
[  332.933699][T13444] EXT4-fs (loop7): group descriptors corrupted!
[  333.036944][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2836'.
[  333.182903][T13453] vlan2: entered promiscuous mode
[  333.185127][T13453] bond0: entered promiscuous mode
[  333.189719][T13453] bond_slave_0: entered promiscuous mode
[  333.198408][T13453] bond_slave_1: entered promiscuous mode
[  333.520182][ T5673] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  333.585140][T13471] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0
[  333.610135][   T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  333.670069][ T5673] usb 8-1: Using ep0 maxpacket: 16
[  333.677100][ T5673] usb 8-1: config 4 has an invalid interface number: 247 but max is 0
[  333.684727][ T5673] usb 8-1: config 4 has no interface number 0
[  333.690570][ T5673] usb 8-1: config 4 interface 247 has no altsetting 0
[  333.700691][ T5673] usb 8-1: New USB device found, idVendor=03f0, idProduct=421d, bcdDevice=b1.47
[  333.703580][ T5673] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.706119][ T5673] usb 8-1: Product: syz
[  333.707478][ T5673] usb 8-1: Manufacturer: syz
[  333.708896][ T5673] usb 8-1: SerialNumber: syz
[  333.849943][   T24] usb 9-1: Using ep0 maxpacket: 16
[  333.853820][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  333.857540][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  333.860752][   T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  333.864706][   T24] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  333.867625][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.874454][   T24] usb 9-1: config 0 descriptor??
[  333.926602][ T5673] qmi_wwan 8-1:4.247: bogus CDC Union: master=0, slave=0
[  333.934388][ T5673] qmi_wwan 8-1:4.247: probe with driver qmi_wwan failed with error -22
[  333.945276][ T5673] usb 8-1: USB disconnect, device number 20
[  334.500532][   T24] microsoft 0003:045E:07DA.0015: item 0 4 0 9 parsing failed
[  334.505258][   T24] microsoft 0003:045E:07DA.0015: parse failed
[  334.507975][   T24] microsoft 0003:045E:07DA.0015: probe with driver microsoft failed with error -22
[  334.701945][   T24] usb 9-1: USB disconnect, device number 4
[  334.760372][ T5673] kernel read not supported for file /input/event1 (pid: 5673 comm: kworker/1:4)
[  334.795148][    C0] unchecked MSR access error: WRMSR to 0x400 (tried to write 0x0000000000000001) at rIP: 0xffffffff81709042 (__mcheck_cpu_init_prepare_banks+0x1f2/0x3d0)
[  334.801115][    C0] Call Trace:
[  334.802447][    C0]  <IRQ>
[  334.803623][    C0]  ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10
[  334.806277][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  334.808300][    C0]  ? sched_clock_cpu+0x74/0x440
[  334.810192][    C0]  mce_cpu_restart+0x11a/0x2c0
[  334.812048][    C0]  ? __pfx_mce_cpu_restart+0x10/0x10
[  334.814132][    C0]  __flush_smp_call_function_queue+0x32c/0xa20
[  334.816603][    C0]  ? __pfx_mce_cpu_restart+0x10/0x10
[  334.818797][    C0]  __sysvec_call_function_single+0x9a/0x3d0
[  334.821199][    C0]  sysvec_call_function_single+0x4f/0xc0
[  334.823376][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  334.825781][    C0] RIP: 0010:rcu_lockdep_current_cpu_online+0x6/0x120
[  334.828309][    C0] Code: e9 54 ff ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 8b 0d c0 0c c1 11 b0 01 f7 c1 00 00 f0 00 0f 85 d5 00
[  334.835743][    C0] RSP: 0018:ffffc90000007478 EFLAGS: 00000202
[  334.838098][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000102
[  334.841130][    C0] RDX: 0000000000000100 RSI: ffffffff8c4be160 RDI: ffffffff8c4be120
[  334.844149][    C0] RBP: 1ffff11022b4e1e0 R08: ffff888116e08083 R09: 1ffff11022dc1010
[  334.846947][    C0] R10: dffffc0000000000 R11: ffffed1022dc1011 R12: 1ffff11022b4e1eb
[  334.850133][    C0] R13: dffffc0000000000 R14: ffff888115a70f00 R15: ffff888115a70f58
[  334.853375][    C0]  rcu_read_lock_held+0x1e/0x50
[  334.855292][    C0]  ip_sublist_rcv_finish+0x146/0x240
[  334.857467][    C0]  ip_sublist_rcv+0x767/0xa70
[  334.859340][    C0]  ? __pfx_ip_sublist_rcv+0x10/0x10
[  334.861379][    C0]  ? __asan_memset+0x22/0x50
[  334.863206][    C0]  ? ip_rcv_core+0x88d/0xd50
[  334.865033][    C0]  ip_list_rcv+0x3ec/0x440
[  334.866840][    C0]  ? __pfx_ip_list_rcv+0x10/0x10
[  334.868773][    C0]  ? irqentry_exit+0x218/0x8f0
[  334.870642][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  334.872660][    C0]  ? __pfx_ip_list_rcv+0x10/0x10
[  334.874620][    C0]  __netif_receive_skb_list_core+0x804/0x830
[  334.876973][    C0]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  334.879553][    C0]  ? __list_add_valid_or_report+0x6a/0x130
[  334.881812][    C0]  netif_receive_skb_list_internal+0x995/0xcf0
[  334.884254][    C0]  ? dev_gro_receive+0x1097/0x2380
[  334.886330][    C0]  ? netif_receive_skb_list_internal+0x501/0xcf0
[  334.888876][    C0]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  334.891550][    C0]  ? __swiotlb_tbl_unmap_single+0x5a4/0x670
[  334.893799][    C0]  ? eth_type_trans+0x352/0x800
[  334.895654][    C0]  gro_receive_skb+0x5fb/0xc30
[  334.897521][    C0]  e1000_clean_rx_irq+0x9da/0x1240
[  334.899534][    C0]  ? __pfx_e1000_clean_rx_irq+0x10/0x10
[  334.901662][    C0]  e1000_clean+0xc9c/0x2bf0
[  334.903446][    C0]  ? __pfx_e1000_clean+0x10/0x10
[  334.905401][    C0]  ? lock_acquire+0x115/0x350
[  334.907253][    C0]  __napi_poll+0xaa/0x330
[  334.908933][    C0]  net_rx_action+0x61d/0xf50
[  334.910765][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  334.912771][    C0]  ? xfrm_dev_backlog+0x24b/0x3c0
[  334.914789][    C0]  handle_softirqs+0x225/0x840
[  334.916570][    C0]  ? do_softirq+0x76/0xd0
[  334.918269][    C0]  ? __dev_queue_xmit+0x29b/0x3820
[  334.920276][    C0]  do_softirq+0x76/0xd0
[  334.921910][    C0]  </IRQ>
[  334.923092][    C0]  <TASK>
[  334.924257][    C0]  __local_bh_enable_ip+0xf8/0x130
[  334.926259][    C0]  ? __dev_queue_xmit+0x29b/0x3820
[  334.928240][    C0]  __dev_queue_xmit+0x1edc/0x3820
[  334.930227][    C0]  ? __dev_queue_xmit+0x29b/0x3820
[  334.932237][    C0]  ? __lock_acquire+0x6df/0x2e50
[  334.934163][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  334.936281][    C0]  ? lock_acquire+0x115/0x350
[  334.938130][    C0]  ? lock_acquire+0x115/0x350
[  334.939959][    C0]  ? ip_output+0x29f/0x450
[  334.941740][    C0]  ? ip_finish_output2+0x972/0x10b0
[  334.943704][    C0]  ip_finish_output2+0xbda/0x10b0
[  334.945655][    C0]  ? ip_finish_output2+0x3de/0x10b0
[  334.947679][    C0]  ip_output+0x29f/0x450
[  334.949370][    C0]  ? ip_output+0x5a/0x450
[  334.951025][    C0]  ? __ip_queue_xmit+0x65/0x1b10
[  334.952844][    C0]  __ip_queue_xmit+0x10df/0x1b10
[  334.954817][    C0]  ? __ip_queue_xmit+0x65/0x1b10
[  334.956665][    C0]  ? __pfx_ip_queue_xmit+0x10/0x10
[  334.958644][    C0]  __tcp_transmit_skb+0x2d18/0x47c0
[  334.960570][    C0]  ? __pfx___tcp_transmit_skb+0x10/0x10
[  334.962617][    C0]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  334.964774][    C0]  ? tcp_small_queue_check+0x1b9/0x3a0
[  334.966690][    C0]  tcp_write_xmit+0x1bfa/0x6400
[  334.968482][    C0]  __tcp_push_pending_frames+0x96/0x380
[  334.970435][    C0]  tcp_sendmsg_locked+0x498e/0x55c0
[  334.972330][    C0]  ? __lock_acquire+0x6df/0x2e50
[  334.974188][    C0]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  334.976218][    C0]  ? tcp_sendmsg+0x21/0x50
[  334.977811][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  334.980055][    C0]  tcp_sendmsg+0x2f/0x50
[  334.981593][    C0]  ? __pfx_inet_sendmsg+0x10/0x10
[  334.983502][    C0]  sock_sendmsg_nosec+0x10e/0x180
[  334.985468][    C0]  sock_write_iter+0x2de/0x3e0
[  334.987277][    C0]  ? __pfx_sock_write_iter+0x10/0x10
[  334.989239][    C0]  ? bpf_lsm_file_permission+0x9/0x20
[  334.991207][    C0]  ? security_file_permission+0x75/0x260
[  334.993399][    C0]  vfs_write+0x612/0xba0
[  334.995099][    C0]  ? lock_acquire+0x115/0x350
[  334.997032][    C0]  ? __pfx_vfs_write+0x10/0x10
[  334.998928][    C0]  ? _copy_to_user+0x8a/0xb0
[  335.001450][    C0]  ksys_write+0x150/0x270
[  335.003246][    C0]  ? __pfx_ksys_write+0x10/0x10
[  335.005247][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.007588][    C0]  do_syscall_64+0x174/0x580
[  335.009608][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.011943][    C0] RIP: 0033:0x7f74f7316bf2
[  335.013714][    C0] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83
[  335.021040][    C0] RSP: 002b:00007ffc710e66b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  335.024917][    C0] RAX: ffffffffffffffda RBX: 000000000000227c RCX: 00007f74f7316bf2
[  335.028016][    C0] RDX: 000000000000227c RSI: 00005572ad346a90 RDI: 0000000000000004
[  335.031076][    C0] RBP: 00005572ad320ca0 R08: 0000000000000000 R09: 0000000000000000
[  335.034157][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00005572ab627aa4
[  335.037208][    C0] R13: 000000000000014e R14: 00005572ab6283e8 R15: 00007ffc710e6728
[  335.040280][    C0]  </TASK>
[  335.463123][   T33] audit: type=1326 audit(2000000077.800:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.5.2856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b33f9e019 code=0x7ffc0000
[  335.491835][   T33] audit: type=1326 audit(2000000077.800:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.5.2856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b33f9e019 code=0x7ffc0000
[  335.527650][   T33] audit: type=1326 audit(2000000077.810:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.5.2856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b33f9e019 code=0x7ffc0000
[  335.547579][   T33] audit: type=1326 audit(2000000077.810:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.5.2856" exe="/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f9b33f9e019 code=0x7ffc0000
[  335.565277][   T33] audit: type=1326 audit(2000000077.810:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.5.2856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b33f9e019 code=0x7ffc0000
[  335.592732][   T33] audit: type=1326 audit(2000000077.810:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.5.2856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b33f9e019 code=0x7ffc0000
[  335.634875][   T33] audit: type=1326 audit(2000000077.810:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.5.2856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b33f9e019 code=0x7ffc0000
[  335.665442][   T33] audit: type=1326 audit(2000000077.820:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.5.2856" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9b33f9e019 code=0x7ffc0000
[  335.679828][T13505] xt_hashlimit: size too large, truncated to 1048576
[  335.682596][   T33] audit: type=1326 audit(2000000077.820:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.5.2856" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9b33f9e019 code=0x7ffc0000
[  336.304711][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2865'.
[  336.307884][T13523] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2865'.
[  336.337698][ T5810] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  336.338464][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2865'.
[  336.341261][ T5810] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  336.341302][ T5810] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  336.341323][ T5810] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  336.359397][T13523] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2865'.
[  337.093199][ T6120] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  337.328162][T13530] loop5: detected capacity change from 0 to 1024
[  337.354003][T13530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.376741][ T6120] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  337.383042][ T6120] usb 9-1: config 0 has no interface number 0
[  337.385885][ T6120] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.387075][ T8228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.389848][ T6120] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.408916][ T6120] usb 9-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  337.414524][ T6120] usb 9-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  337.418548][ T6120] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.759068][ T6120] usb 9-1: config 0 descriptor??
[  337.826859][T13539] netlink: 'syz.7.2871': attribute type 1 has an invalid length.
[  337.833447][T13539] netlink: 240 bytes leftover after parsing attributes in process `syz.7.2871'.
[  337.838833][T13539] netlink: 'syz.7.2871': attribute type 1 has an invalid length.
[  337.915373][T13541] loop7: detected capacity change from 0 to 64
[  337.961032][ T5673] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  338.113423][ T5673] usb 6-1: Using ep0 maxpacket: 16
[  338.119517][ T5673] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  338.127301][ T5673] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  338.134478][ T5673] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  338.138235][ T5673] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  338.144629][ T5673] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  338.151730][ T5673] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  338.151750][ T5673] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  338.151764][ T5673] usb 6-1: Manufacturer: syz
[  338.153906][ T5673] usb 6-1: config 0 descriptor??
[  338.269753][T13547] /dev/nullb0: Can't open blockdev
[  338.560275][ T5673] rc_core: IR keymap rc-hauppauge not found
[  338.562571][ T5673] Registered IR keymap rc-empty
[  338.564538][ T5673] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  338.581764][ T5673] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  338.602576][ T5673] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  338.609205][ T5673] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input31
[  338.616529][ T5673] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  338.630064][ T5673] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  338.651096][ T5673] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  338.670109][ T5673] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  338.692458][ T5673] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  338.710113][ T5673] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  338.730086][ T5673] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  338.750085][ T5673] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  338.770142][ T5673] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  338.790589][ T5673] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  338.813729][ T5673] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  338.816522][ T5673] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  338.969171][ T5673] usb 6-1: USB disconnect, device number 40
[  339.470650][ T6120] uclogic 0003:28BD:0042.0016: failed retrieving string descriptor #100: -71
[  340.936831][    C0] clocksource: Marking clocksource tsc unstable due to frequency skew
[  340.942133][    C0] clocksource: Watchdog               kvm-clock interval:             4190ns
[  340.945030][    C0] clocksource: Clocksource                  tsc interval:             3855ns
[  340.948098][    C0] tsc: Marking TSC unstable due to clocksource watchdog
[  340.967402][ T6120] uclogic 0003:28BD:0042.0016: failed retrieving pen parameters: -71
[  340.970944][ T6120] uclogic 0003:28BD:0042.0016: pen probing failed: -71
[  340.973337][ T6120] uclogic 0003:28BD:0042.0016: failed probing parameters: -71
[  340.976193][ T6120] uclogic 0003:28BD:0042.0016: probe with driver uclogic failed with error -71
[  341.270055][ T5673] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  341.430025][ T5673] usb 6-1: Using ep0 maxpacket: 16
[  341.433705][ T5673] usb 6-1: unable to get BOS descriptor or descriptor too short
[  341.438084][ T5673] usb 6-1: config 1 has an invalid interface number: 78 but max is 0
[  341.442058][ T5673] usb 6-1: config 1 has no interface number 0
[  341.444607][ T5673] usb 6-1: config 1 interface 78 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64
[  341.448620][ T5673] usb 6-1: config 1 interface 78 altsetting 93 endpoint 0x83 has invalid wMaxPacketSize 0
[  341.453407][ T5673] usb 6-1: config 1 interface 78 altsetting 93 bulk endpoint 0x83 has invalid maxpacket 0
[  341.457348][ T5673] usb 6-1: config 1 interface 78 has no altsetting 0
[  341.462761][ T5673] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice=df.57
[  341.466445][ T5673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.469599][ T5673] usb 6-1: Product: syz
[  341.472461][ T5673] usb 6-1: Manufacturer: syz
[  341.474034][ T5673] usb 6-1: SerialNumber: syz
[  341.478116][T13559] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  341.692761][ T5673] spcp8x5 6-1:1.78: SPCP8x5 converter detected
[  341.698431][ T5673] usb 6-1: SPCP8x5 converter now attached to ttyUSB0
[  341.705011][ T5673] usb 6-1: USB disconnect, device number 41
[  341.714050][ T5673] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  341.722053][ T5673] spcp8x5 6-1:1.78: device disconnected
[  341.945305][ T6120] usb 9-1: USB disconnect, device number 5
[  342.147738][T13564] loop8: detected capacity change from 0 to 64
[  342.172046][T13564] syz.8.2881: attempt to access beyond end of device
[  342.172046][T13564] loop8: rw=8388608, sector=412, nr_sectors = 2 limit=64
[  342.184788][T13564] Trying to free block not in datazone
[  342.650073][   T24] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  342.788075][T13573] loop8: detected capacity change from 0 to 32768
[  342.795571][T13574] loop5: detected capacity change from 0 to 32768
[  342.798337][T13573] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2885 (13573)
[  342.806643][   T24] usb 8-1: Using ep0 maxpacket: 16
[  342.817486][   T24] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.830963][   T24] usb 8-1: config 0 interface 0 has no altsetting 0
[  342.841012][T13574] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  342.845807][   T24] usb 8-1: New USB device found, idVendor=0b05, idProduct=1837, bcdDevice= 0.00
[  342.863659][T13574] JBD2: Ignoring recovery information on journal
[  342.866328][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.917357][   T24] usb 8-1: config 0 descriptor??
[  342.954231][T13573] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  342.996329][T13573] BTRFS info (device loop8): using xxhash64 checksum algorithm
[  343.005317][T13574] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  343.083562][T13574] (syz.5.2886,13574,1):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options
[  343.146381][ T8228] ocfs2: Unmounting device (7,5) on (node local)
[  343.363696][   T24] asus 0003:0B05:1837.0017: unknown main item tag 0x1
[  343.371151][T13573] BTRFS info (device loop8): enabling ssd optimizations
[  343.380867][   T24] asus 0003:0B05:1837.0017: unknown main item tag 0x0
[  343.383753][T13573] BTRFS info (device loop8): turning on flush-on-commit
[  343.386778][   T24] asus 0003:0B05:1837.0017: unknown main item tag 0x0
[  343.389553][T13573] BTRFS info (device loop8): turning on async discard
[  343.395776][   T24] asus 0003:0B05:1837.0017: unknown main item tag 0x0
[  343.398508][T13573] BTRFS info (device loop8): enabling free space tree
[  343.406058][   T24] asus 0003:0B05:1837.0017: unknown main item tag 0x0
[  343.408890][T13573] BTRFS info (device loop8): force zlib compression, level 3
[  343.415653][   T24] asus 0003:0B05:1837.0017: item fetching failed at offset 23/40
[  343.420490][T13573] BTRFS info (device loop8): max_inline set to 0
[  343.425491][   T24] asus 0003:0B05:1837.0017: Asus hid parse failed: -22
[  343.437183][   T24] asus 0003:0B05:1837.0017: probe with driver asus failed with error -22
[  343.544637][T12986] BTRFS info (device loop8): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  343.588986][   T24] usb 8-1: USB disconnect, device number 21
[  344.473723][T13598] loop5: detected capacity change from 0 to 32768
[  344.536187][T13598] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  344.617963][T13598] XFS (loop5): Ending clean mount
[  344.796554][ T8228] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  344.947528][   T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  345.100225][   T24] usb 9-1: Using ep0 maxpacket: 16
[  345.104688][   T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 119, changing to 10
[  345.112523][   T24] usb 9-1: config 0 interface 0 has no altsetting 0
[  345.119262][   T24] usb 9-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  345.129106][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.141865][   T24] usb 9-1: config 0 descriptor??
[  345.582827][   T24] sunplus 0003:04FC:05D8.0018: unexpected long global item
[  345.589744][   T24] sunplus 0003:04FC:05D8.0018: probe with driver sunplus failed with error -22
[  345.593419][T13646] program syz.5.2909 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  345.620744][   T32] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  345.773669][   T32] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  345.782207][   T32] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  345.795064][   T32] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.808827][   T32] usb 8-1: config 0 descriptor??
[  345.811114][   T24] usb 9-1: USB disconnect, device number 6
[  345.829186][   T32] pwc: Askey VC010 type 2 USB webcam detected.
[  346.050690][   T32] pwc: send_video_command error -71
[  346.052427][   T32] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  346.065254][   T32] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71
[  346.072155][   T32] usb 8-1: USB disconnect, device number 22
[  346.450033][   T24] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  346.490107][   T32] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  346.610008][   T24] usb 6-1: Using ep0 maxpacket: 32
[  346.614982][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  346.617848][   T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00
[  346.622682][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.630486][   T24] usb 6-1: config 0 descriptor??
[  346.643709][   T32] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  346.654800][   T32] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  346.664650][   T32] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.682559][   T32] usb 8-1: config 0 descriptor??
[  346.696812][   T32] pwc: Askey VC010 type 2 USB webcam detected.
[  347.067599][   T24] logitech 0003:046D:C295.0019: unknown main item tag 0x6
[  347.076572][   T24] logitech 0003:046D:C295.0019: ignoring exceeding usage max
[  347.088744][   T24] logitech 0003:046D:C295.0019: hidraw0: USB HID v0.81 Device [HID 046d:c295] on usb-dummy_hcd.5-1/input0
[  347.095746][   T32] pwc: recv_control_msg error -32 req 02 val 2b00
[  347.107041][   T24] logitech 0003:046D:C295.0019: no inputs found
[  347.121829][   T32] pwc: recv_control_msg error -32 req 02 val 2700
[  347.136028][   T32] pwc: recv_control_msg error -32 req 02 val 2c00
[  347.143043][   T32] pwc: recv_control_msg error -32 req 04 val 1000
[  347.148952][   T32] pwc: recv_control_msg error -32 req 04 val 1300
[  347.155190][   T32] pwc: recv_control_msg error -32 req 04 val 1400
[  347.159148][   T32] pwc: recv_control_msg error -32 req 02 val 2000
[  347.169351][   T32] pwc: recv_control_msg error -32 req 02 val 2100
[  347.173653][   T32] pwc: recv_control_msg error -32 req 04 val 1500
[  347.277444][ T5673] usb 6-1: USB disconnect, device number 42
[  347.377890][   T32] pwc: recv_control_msg error -71 req 02 val 2400
[  347.383868][   T32] pwc: recv_control_msg error -71 req 02 val 2600
[  347.386640][   T32] pwc: recv_control_msg error -71 req 02 val 2900
[  347.388940][   T32] pwc: recv_control_msg error -71 req 02 val 2800
[  347.393468][   T32] pwc: recv_control_msg error -71 req 04 val 1100
[  347.396003][   T32] pwc: recv_control_msg error -71 req 04 val 1200
[  347.417631][   T32] pwc: Registered as video103.
[  347.422129][   T32] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input32
[  347.439781][   T32] usb 8-1: USB disconnect, device number 23
[  347.626357][T13678] loop8: detected capacity change from 0 to 128
[  347.630623][T13678] EXT4-fs: inline encryption not supported
[  347.635991][T13678] EXT4-fs (loop8): Test dummy encryption mode enabled
[  347.642764][T13678] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  347.646625][T13678] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  347.677034][   T33] audit: type=1800 audit(2000000090.020:140): pid=13678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2923" name="file1" dev="loop8" ino=15 res=0 errno=0
[  347.708026][T12986] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  347.840389][T13682] loop5: detected capacity change from 0 to 2048
[  347.856777][T13683] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  347.875267][T13682] overlayfs: upper fs does not support tmpfile.
[  347.878165][T13682] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  347.880594][T13682] overlayfs: failed to set xattr on upper
[  347.882344][T13682] overlayfs: ...falling back to redirect_dir=nofollow.
[  347.884389][T13682] overlayfs: ...falling back to index=off.
[  347.886102][T13682] overlayfs: ...falling back to uuid=null.
[  347.986008][T13683] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  348.008860][T13683] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  348.034179][T13683] Remounting filesystem read-only
[  348.131069][ T8228] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=2)
[  348.156394][T13693] loop7: detected capacity change from 0 to 256
[  348.158874][ T8228] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=2)
[  348.164192][T13693] exfat: Deprecated parameter 'namecase'
[  348.181188][T13693] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  348.465219][T13701] loop7: detected capacity change from 0 to 32768
[  348.494502][T13701] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  348.516013][T13701] XFS (loop7): Ending clean mount
[  348.537418][   T33] audit: type=1800 audit(2000000090.880:141): pid=13701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2934" name="file1" dev="loop7" ino=4428 res=0 errno=0
[  348.622764][T10843] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  349.315733][ T8228] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  349.661724][T13717] loop7: detected capacity change from 0 to 32768
[  349.687435][T13717] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  349.729142][T13717] XFS (loop7): Ending clean mount
[  349.799679][T13717] XFS (loop7): Quotacheck needed: Please wait.
[  349.924256][T13734] loop8: detected capacity change from 0 to 1024
[  349.939332][T13734] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (47942!=20869)
[  349.961629][T13734] EXT4-fs (loop8): orphan cleanup on readonly fs
[  349.966059][T13717] XFS (loop7): Quotacheck: Done.
[  349.968243][T13734] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[  349.985670][T13734] EXT4-fs (loop8): Cannot turn on quotas: error -13
[  349.998830][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  350.011842][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  350.015414][T13734] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2943: couldn't read orphan inode 12 (err -116)
[  350.020097][T13734] loop8: lost filesystem error report for type 5 error -116
[  350.024306][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  350.028826][T13734] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  350.041253][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  350.044180][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  350.135108][T12986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.172056][T10843] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  351.198984][T13736] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.201733][T13736] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.204066][T13736] bridge_slave_0: entered allmulticast mode
[  351.206810][T13736] bridge_slave_0: entered promiscuous mode
[  351.211523][T13736] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.213802][T13736] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.216130][T13736] bridge_slave_1: entered allmulticast mode
[  351.218729][T13736] bridge_slave_1: entered promiscuous mode
[  351.237439][T13736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.300754][T13736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.330039][ T5673] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  351.342039][T13736] team0: Port device team_slave_0 added
[  351.345195][T13736] team0: Port device team_slave_1 added
[  351.390585][T13736] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.408945][T13736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  351.417478][T13736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  351.424968][T13736] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.427220][T13736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  351.437166][T13736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  351.463678][T13736] hsr_slave_0: entered promiscuous mode
[  351.466258][T13736] hsr_slave_1: entered promiscuous mode
[  351.468387][T13736] debugfs: 'hsr0' already exists in 'hsr'
[  351.471866][T13736] Cannot create hsr debugfs directory
[  351.492046][ T5673] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  351.495975][ T5673] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  351.499466][ T5673] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  351.511584][ T5673] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  351.528355][ T5673] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  351.534731][ T5673] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.539234][ T5673] usb 8-1: Product: syz
[  351.542135][ T5673] usb 8-1: Manufacturer: syz
[  351.543681][ T5673] usb 8-1: SerialNumber: syz
[  351.552695][ T5673] usb 8-1: config 0 descriptor??
[  351.561781][ T5673] iguanair 8-1:0.0: failed to get version
[  351.566109][ T5673] iguanair 8-1:0.0: probe with driver iguanair failed with error -90
[  351.786704][T13736] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  351.794935][T13736] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  351.798692][T13736] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  351.808404][T13736] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  351.815282][T13736] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  351.827639][  T797] usb 8-1: USB disconnect, device number 24
[  351.830840][T13736] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  351.841294][T13736] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  351.893526][T13736] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  351.939587][T13736] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.942596][T13736] bridge0: port 2(bridge_slave_1) entered forwarding state
[  351.945692][T13736] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.948548][T13736] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.110632][T13736] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.123631][T11632] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.127428][T11632] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.132202][   T53] Bluetooth: hci0: command tx timeout
[  352.163155][T13736] 8021q: adding VLAN 0 to HW filter on device team0
[  352.173060][T11632] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.176112][T11632] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.184926][T11632] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.187939][T11632] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.499567][T13796] loop8: detected capacity change from 0 to 256
[  352.768123][T13806] autofs4:pid:13806:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.1000000), cmd(0xc0189375)
[  352.777401][T13806] autofs4:pid:13806:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375)
[  352.794503][T13804] loop8: detected capacity change from 0 to 2048
[  352.813626][T13804] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  352.916186][T13811] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  352.925476][T13804] syz.8.2962: attempt to access beyond end of device
[  352.925476][T13804] loop8: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[  353.008245][T13804] syz.8.2962: attempt to access beyond end of device
[  353.008245][T13804] loop8: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048
[  353.026761][T13804] NILFS (loop8): I/O error reading meta-data file (ino=6, block-offset=3)
[  353.124165][T13736] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.367556][T13736] veth0_vlan: entered promiscuous mode
[  353.375297][T13736] veth1_vlan: entered promiscuous mode
[  353.433016][T13835] gadgetfs: bound to dummy_udc driver
[  353.509190][T13736] veth0_macvtap: entered promiscuous mode
[  353.529714][T13838] ima: rule for LSM 'unconfined_t' is undefined
[  353.534524][   T33] audit: type=1807 audit(2000000095.870:142): action=measure func=FILE_CHECK obj_type=unconfined_t res=0
[  353.537630][T13736] veth1_macvtap: entered promiscuous mode
[  353.542014][   T33] audit: type=1802 audit(2000000095.890:143): pid=13838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.8.2972" res=0 errno=0
[  353.548769][T13838] ima: policy update failed
[  353.554220][   T33] audit: type=1802 audit(2000000095.900:144): pid=13838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.2972" res=0 errno=0
[  353.618630][   T33] audit: type=1800 audit(2000000095.960:145): pid=13840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2973" name="file2" dev="overlay" ino=441 res=0 errno=0
[  353.642691][T13736] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.688199][T13736] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.729998][ T5673] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  353.733411][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.744531][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.767564][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.779037][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.859514][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.864194][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.876393][T11632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.879372][T11632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.911181][T13848] webusb: landingPage URL too long
[  353.927265][ T5673] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  353.944524][ T5673] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  353.957341][ T5673] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  353.980524][ T5673] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  353.989737][ T5673] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.034898][T13850] loop8: detected capacity change from 0 to 512
[  354.058625][T13850] fscrypt (loop8, inode 2): Error -61 getting encryption context
[  354.068352][T13850] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -61
[  354.075496][T13850] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #13: comm syz.8.2978: iget: bad i_size value: 12154757448730
[  354.079718][T13850] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  354.079940][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  354.084843][    C1] EXT4-fs (loop8): initial error at time 2000000096: ext4_orphan_get:1399: inode 13
[  354.087739][    C1] EXT4-fs (loop8): last error at time 2000000096: ext4_orphan_get:1399: inode 13
[  354.092277][T13850] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2978: couldn't read orphan inode 13 (err -117)
[  354.095990][T13850] loop8: lost filesystem error report for type 5 error -117
[  354.097308][T13850] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.170181][T13854] loop9: detected capacity change from 0 to 8
[  354.170647][T12986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.210362][   T53] Bluetooth: hci0: command tx timeout
[  354.253550][ T5673] cxacru 8-1:1.0: receive of cm 0x90 failed (-71)
[  354.256373][ T5673] cxacru 8-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[  354.259005][ T5673] cxacru 8-1:1.0: probe with driver cxacru failed with error -22
[  354.265773][ T5673] usb 8-1: USB disconnect, device number 25
[  354.268838][T13854] SQUASHFS error: lzo decompression failed, data probably corrupt
[  354.294136][T13854] SQUASHFS error: Failed to read block 0x91: -5
[  354.302254][T13854] SQUASHFS error: Unable to read metadata cache entry [8f]
[  354.313209][T13854] SQUASHFS error: Unable to read inode 0x11f
[  354.581352][T13866] loop9: detected capacity change from 0 to 512
[  354.631781][T13866] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.2984: bad orphan inode 11862016
[  354.638507][T13866] loop9: lost filesystem error report for type 5 error -117
[  354.639583][T13866] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  354.647099][T13866] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  354.686228][T13736] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  354.852365][T13876] loop8: detected capacity change from 0 to 512
[  354.858314][T13876] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  354.876449][T13876] EXT4-fs (loop8): 1 truncate cleaned up
[  354.881586][T13876] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.406806][T13872] loop9: detected capacity change from 0 to 32768
[  355.466238][T13872] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  355.536135][T13872] XFS (loop9): Ending clean mount
[  355.547355][T13872] XFS (loop9): Quotacheck needed: Please wait.
[  355.615709][T13872] XFS (loop9): Quotacheck: Done.
[  355.799689][T12986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.131135][T13736] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  356.282710][   T53] Bluetooth: hci0: command tx timeout
[  356.450677][T13898] loop7: detected capacity change from 0 to 32768
[  356.454628][T13898] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2995 (13898)
[  356.462597][T13898] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  356.466729][T13898] BTRFS info (device loop7): using crc32c checksum algorithm
[  356.550105][T13898] BTRFS info (device loop7): enabling ssd optimizations
[  356.561970][T13898] BTRFS info (device loop7): turning on flush-on-commit
[  356.578005][T13898] BTRFS info (device loop7): enabling free space tree
[  356.587266][T13898] BTRFS info (device loop7): enabling auto defrag
[  356.589736][T13898] BTRFS info (device loop7): use lzo compression, level 1
[  356.592982][T13898] BTRFS info (device loop7): max_inline set to 4096
[  356.722787][T10843] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  357.412742][T13919] loop8: detected capacity change from 0 to 32768
[  357.734523][T13936] syz.7.3005 (13936) used obsolete PPPIOCDETACH ioctl
[  357.986626][T13940] loop7: detected capacity change from 0 to 32768
[  357.994695][T13946] loop9: detected capacity change from 0 to 16
[  358.001785][T13946] MTD: Attempt to mount non-MTD device "/dev/loop9"
[  358.014949][T13946] cramfs: bad root offset 238129228
[  358.031266][T13940] JBD2: Ignoring recovery information on journal
[  358.087541][T13940] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  358.199698][T13940] OCFS2: ERROR (device loop7): int ocfs2_xattr_ibody_lookup_header(struct inode *, struct ocfs2_dinode *, struct ocfs2_xattr_header **): Invalid xattr inline size 0 in inode 65
[  358.216436][T13950] bond0: (slave bond_slave_1): Releasing backup interface
[  358.235794][T13940] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  358.240731][T13940] OCFS2: File system is now read-only.
[  358.243219][T13940] (syz.7.3007,13940,0):ocfs2_calc_xattr_init:642 ERROR: status = -117
[  358.276390][T13940] (syz.7.3007,13940,0):ocfs2_mknod:338 ERROR: status = -117
[  358.283215][T13940] (syz.7.3007,13940,0):ocfs2_mknod:506 ERROR: status = -117
[  358.288256][T13940] (syz.7.3007,13940,0):ocfs2_mkdir:662 ERROR: status = -117
[  358.360231][   T53] Bluetooth: hci0: command tx timeout
[  358.482585][T10843] ocfs2: Unmounting device (7,7) on (node local)
[  358.843609][T13961] loop7: detected capacity change from 0 to 40427
[  358.846950][T13961] F2FS-fs (loop7): build fault injection rate: 173
[  358.853248][T13961] F2FS-fs (loop7): invalid crc value
[  358.859514][T13961] F2FS-fs (loop7): Wrong cp_pack_start_sum: 1
[  358.866049][T13961] F2FS-fs (loop7): Failed to get valid F2FS checkpoint
[  358.995190][T13961] bond0: (slave bond_slave_0): Releasing backup interface
[  359.002565][T13961] bond_slave_0: left promiscuous mode
[  359.286245][T13982] loop7: detected capacity change from 0 to 16
[  359.292708][T13982] erofs (device loop7): mounted with root inode @ nid 36.
[  359.602166][   T32] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  359.760073][   T32] usb 8-1: Using ep0 maxpacket: 16
[  359.784881][   T32] usb 8-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  359.802662][   T32] usb 8-1: config 0 interface 0 has no altsetting 0
[  359.805670][   T32] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  359.829322][   T32] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.853856][   T32] usb 8-1: config 0 descriptor??
[  360.296439][   T32] kovaplus 0003:1E7D:2D50.001A: global environment stack underflow
[  360.307355][   T32] kovaplus 0003:1E7D:2D50.001A: item 0 0 1 11 parsing failed
[  360.323892][   T32] kovaplus 0003:1E7D:2D50.001A: parse failed
[  360.329110][   T32] kovaplus 0003:1E7D:2D50.001A: probe with driver kovaplus failed with error -22
[  360.750024][   T32] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  360.902037][   T32] usb 10-1: config 1 interface 0 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 1024
[  360.906348][   T32] usb 10-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  360.912913][   T32] usb 10-1: config 1 interface 0 has no altsetting 0
[  360.917569][   T32] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  360.922281][   T32] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  360.925564][   T32] usb 10-1: SerialNumber: syz
[  360.939214][T13997] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  361.153005][   T32] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71
[  361.176911][   T32] usb 10-1: USB disconnect, device number 2
[  361.950039][T14004] loop9: detected capacity change from 0 to 65536
[  362.005775][T14004] XFS (loop9): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  362.036040][T14004] XFS (loop9): Ending clean mount
[  362.038646][T14004] XFS (loop9): Quotacheck needed: Please wait.
[  362.059354][   T27] XFS (loop9): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 
[  362.065211][   T27] XFS (loop9): Unmount and run xfs_repair
[  362.067998][   T27] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[  362.080450][   T27] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  362.086133][   T27] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  362.089664][   T27] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  362.093955][   T27] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  362.097561][   T27] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  362.101367][   T27] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  362.106975][   T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  362.110890][   T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  362.114252][   T27] XFS (loop9): metadata I/O error in "xfs_read_agf+0x272/0x5c0" at daddr 0x1 len 1 error 74
[  362.117945][   T27] loop9: lost filesystem error report for type 5 error -117
[  362.124369][T14004] XFS (loop9): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  362.130520][T14004] loop9: lost filesystem error report for type 5 error -117
[  362.208708][T13736] XFS (loop9): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  362.232047][T13736] XFS (loop9): Uncorrected metadata errors detected; please run xfs_repair.
[  362.314859][   T32] usb 8-1: USB disconnect, device number 26
[  362.863617][T14022] loop9: detected capacity change from 0 to 4096
[  362.870702][T14022] nilfs2: Unknown parameter 'oi/|i!Irder'
[  363.092487][T14030] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3040'.
[  363.872894][T14034] loop7: detected capacity change from 0 to 512
[  363.911062][T14034] EXT4-fs (loop7): VFS: Can't find ext4 filesystem
[  364.012899][   T33] audit: type=1400 audit(2000000106.360:146): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3ADB5EEE93C7BDCCBD5C23D14869792E5C pid=14033 comm="syz.7.3042"
[  364.913610][T14040] loop7: detected capacity change from 0 to 65536
[  365.153962][T14040] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  365.189751][T14040] XFS (loop7): Ending clean mount
[  365.200190][T14040] XFS (loop7): Quotacheck needed: Please wait.
[  365.235209][T11642] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 
[  365.280448][T11642] XFS (loop7): Unmount and run xfs_repair
[  365.293983][T11642] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  365.335229][T11642] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  365.358738][T11642] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  365.362505][T11642] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  365.368517][T11642] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  365.372591][T11642] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  365.376138][T11642] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  365.379630][T11642] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  365.388008][T11642] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  365.391748][   T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  365.396076][T11642] XFS (loop7): metadata I/O error in "xfs_read_agf+0x272/0x5c0" at daddr 0x1 len 1 error 74
[  365.402028][T11642] loop7: lost filesystem error report for type 5 error -117
[  365.407343][T14040] XFS (loop7): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  365.414035][T14040] loop7: lost filesystem error report for type 5 error -117
[  365.435759][T14040] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 
[  365.442675][T14040] XFS (loop7): Unmount and run xfs_repair
[  365.444433][T14040] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  365.446737][T14040] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  365.449612][T14040] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  365.452449][T14040] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  365.455245][T14040] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  365.458821][T14040] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  365.462367][T14040] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  365.465676][T14040] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  365.469188][T14040] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  365.472928][T14040] XFS (loop7): metadata I/O error in "xfs_read_agf+0x272/0x5c0" at daddr 0x1 len 1 error 74
[  365.496333][T14040] XFS (loop7): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280).  Shutting down filesystem.
[  365.501998][T14040] XFS (loop7): Please unmount the filesystem and rectify the problem(s)
[  365.551930][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  365.558069][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  365.564365][   T24] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  365.568121][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.574098][   T24] usb 10-1: config 0 descriptor??
[  365.604810][T10843] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  365.899258][T14054] xt_hashlimit: size too large, truncated to 1048576
[  366.006067][   T24] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0
[  366.018347][   T24] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0
[  366.204935][T14047] cp2112 0003:10C4:EA90.001B: pid 14047 passed too short report
[  366.231617][   T24] cp2112 0003:10C4:EA90.001B: error requesting version
[  366.242269][   T24] cp2112 0003:10C4:EA90.001B: probe with driver cp2112 failed with error -71
[  366.265704][   T24] usb 10-1: USB disconnect, device number 3
[  366.380676][   T33] audit: type=1326 audit(2000000108.720:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14061 comm="syz.8.3051" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e6399e019 code=0x0
[  366.399194][T14063] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.422324][T14063] syzkaller0: entered promiscuous mode
[  366.424110][T14063] syzkaller0: entered allmulticast mode
[  366.426162][T14063] tipc: Resetting bearer <eth:syzkaller0>
[  366.444255][T14058] tipc: Resetting bearer <eth:syzkaller0>
[  367.854069][T14073] loop8: detected capacity change from 0 to 4096
[  367.894943][T14074] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  368.806673][T14085] loop8: detected capacity change from 0 to 164
[  368.937216][T14089] loop8: detected capacity change from 0 to 512
[  368.955545][T14089] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3062: bg 0: block 5: invalid block bitmap
[  368.970614][T14089] loop8: lost filesystem error report for type 5 error -117
[  368.982653][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  368.987809][    C1] EXT4-fs (loop8): initial error at time 2000000111: ext4_validate_block_bitmap:432
[  368.991282][    C1] EXT4-fs (loop8): last error at time 2000000111: ext4_validate_block_bitmap:432
[  369.008702][T14089] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  369.012118][T14089] loop8: lost filesystem error report for type 5 error -117
[  369.015402][T14089] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3062: invalid indirect mapped block 3 (level 2)
[  369.023588][T14089] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  369.025652][T14089] EXT4-fs (loop8): 1 orphan inode deleted
[  369.031530][T14089] EXT4-fs (loop8): 1 truncate cleaned up
[  369.034837][T14089] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.066814][T12986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.359070][T14095] loop8: detected capacity change from 0 to 32768
[  369.362317][T14095] btrfs: Deprecated parameter 'usebackuproot'
[  369.364540][T14095] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  369.369406][T14095] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3064 (14095)
[  369.378284][T14095] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  369.382082][T14095] BTRFS info (device loop8): using crc32c checksum algorithm
[  369.384862][T14095] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  369.506035][ T6035] BTRFS warning (device loop8): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  369.525960][T14095] BTRFS error (device loop8): failed to load root extent
[  369.528660][T14095] BTRFS warning (device loop8): try to load backup roots slot 1
[  369.531905][T11640] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  369.538331][T14095] BTRFS warning (device loop8): couldn't read tree root
[  369.540987][T14095] BTRFS warning (device loop8): try to load backup roots slot 2
[  369.543999][ T6035] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  369.550228][T14095] BTRFS warning (device loop8): couldn't read tree root
[  369.552896][T14095] BTRFS warning (device loop8): try to load backup roots slot 3
[  369.576865][T14095] BTRFS info (device loop8): rebuilding free space tree
[  369.637616][T14095] BTRFS info (device loop8): disabling free space tree
[  369.640420][T14095] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  369.643930][T14095] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  369.653707][T14095] BTRFS info (device loop8): checking UUID tree
[  369.656835][T14095] BTRFS info (device loop8): enabling ssd optimizations
[  369.659501][T14095] BTRFS info (device loop8): turning on async discard
[  369.663040][T14095] BTRFS info (device loop8): enabling disk space caching
[  369.665544][T14095] BTRFS info (device loop8): force clearing of disk cache
[  369.668011][T14095] BTRFS info (device loop8): enabling auto defrag
[  369.670374][T14095] BTRFS info (device loop8): trying to use backup root at mount time
[  369.673241][T14095] BTRFS info (device loop8): use zstd compression, level 3
[  369.764210][T12986] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  370.345006][T14058] tipc: Disabling bearer <eth:syzkaller0>
[  370.415370][T14066] team0: Port device vxlan0 added
[  370.419705][ T5810] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  370.425403][ T5810] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  370.436896][ T5810] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  370.441496][ T5810] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  370.778963][   T33] audit: type=1326 audit(2000000113.120:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14124 comm="syz.7.3072" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2ed9e019 code=0x7ffc0000
[  370.803052][   T33] audit: type=1326 audit(2000000113.120:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14124 comm="syz.7.3072" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2ed9e019 code=0x7ffc0000
[  370.821986][   T33] audit: type=1326 audit(2000000113.140:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14124 comm="syz.7.3072" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8e2ed9e019 code=0x7ffc0000
[  370.883486][   T33] audit: type=1326 audit(2000000113.230:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14124 comm="syz.7.3072" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2ed9e019 code=0x7ffc0000
[  370.896358][   T33] audit: type=1326 audit(2000000113.230:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14124 comm="syz.7.3072" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2ed9e019 code=0x7ffc0000
[  370.937183][T14127] loop9: detected capacity change from 0 to 4096
[  370.946452][T14127] EXT4-fs: Ignoring removed i_version option
[  370.950567][T14127] EXT4-fs: Ignoring removed oldalloc option
[  370.963269][T14127] EXT4-fs (loop9): Test dummy encryption mode enabled
[  370.971701][T14127] EXT4-fs (loop9): bad geometry: first data block 0 is beyond end of filesystem (0)
[  371.499067][T14141] Bluetooth: MGMT ver 1.23
[  371.621815][ T5673] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  371.780095][ T5673] usb 8-1: Using ep0 maxpacket: 16
[  371.783989][ T5673] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  371.788870][ T5673] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  371.801980][ T5673] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  371.807493][ T5673] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.813778][ T5673] usb 8-1: Product: syz
[  371.815098][ T5673] usb 8-1: Manufacturer: syz
[  371.819403][ T5673] usb 8-1: SerialNumber: syz
[  371.826347][ T5673] usb 8-1: config 0 descriptor??
[  371.835478][ T5673] appledisplay 8-1:0.0: Could not find int-in endpoint
[  371.848968][ T5673] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  371.986833][T14160] loop8: detected capacity change from 0 to 256
[  371.991228][T14160] exfat: Deprecated parameter 'namecase'
[  372.009704][T14160] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d)
[  372.041402][   T32] usb 8-1: USB disconnect, device number 27
[  372.848824][T14170] loop9: detected capacity change from 0 to 4096
[  372.856755][T14170] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[  372.880006][   T32] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  372.883297][T14170] ntfs3(loop9): Inode r=19 is not in use!
[  372.885242][T14170] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  372.899611][T14170] ntfs3(loop9): ino=1b, mi_enum_attr
[  372.903826][T14170] ntfs3(loop9): ino=1b, mi_enum_attr
[  373.036047][   T32] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  373.047836][   T32] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.059100][   T32] usb 8-1: Product: syz
[  373.064625][   T32] usb 8-1: Manufacturer: syz
[  373.067805][   T32] usb 8-1: SerialNumber: syz
[  373.112400][   T24] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  373.361029][T14178] loop9: detected capacity change from 0 to 32768
[  373.423501][T14178] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  373.485254][T14178] XFS (loop9): Ending clean mount
[  373.815642][T14180] loop8: detected capacity change from 0 to 32768
[  373.867223][T14180] btrfs: Deprecated parameter 'usebackuproot'
[  373.869308][T14180] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  373.875535][T14180] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3098 (14180)
[  374.130694][   T32] usb 8-1: USB disconnect, device number 28
[  374.184354][T13736] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  374.195395][T14180] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  374.199642][T14180] BTRFS info (device loop8): using crc32c checksum algorithm
[  374.202974][T14180] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  374.361772][   T24] usb 8-1: Service connection timeout for: 256
[  374.365829][ T1112] BTRFS warning (device loop8): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  374.370155][   T24] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services
[  374.370553][   T24] ath9k_htc: Failed to initialize the device
[  374.390635][T14180] BTRFS error (device loop8): failed to load root extent
[  374.393909][T14180] BTRFS warning (device loop8): try to load backup roots slot 1
[  374.397585][   T82] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  374.400209][   T32] usb 8-1: ath9k_htc: USB layer deinitialized
[  374.405021][T14180] BTRFS warning (device loop8): couldn't read tree root
[  374.407379][T14180] BTRFS warning (device loop8): try to load backup roots slot 2
[  374.410892][ T1112] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  374.414389][T14180] BTRFS warning (device loop8): couldn't read tree root
[  374.416593][T14180] BTRFS warning (device loop8): try to load backup roots slot 3
[  374.454280][T14180] BTRFS info (device loop8): rebuilding free space tree
[  374.513137][T14180] BTRFS info (device loop8): disabling free space tree
[  374.515783][T14180] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  374.519356][T14180] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  374.536203][T14180] BTRFS info (device loop8): checking UUID tree
[  374.555169][T14180] BTRFS info (device loop8): enabling ssd optimizations
[  374.558115][T14180] BTRFS info (device loop8): turning on async discard
[  374.560847][T14180] BTRFS info (device loop8): enabling disk space caching
[  374.563305][T14180] BTRFS info (device loop8): force clearing of disk cache
[  374.565888][T14180] BTRFS info (device loop8): enabling auto defrag
[  374.568254][ T5673] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  374.568271][ T5673] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  374.568281][ T5673] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  374.568290][ T5673] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  374.568299][ T5673] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  374.568308][ T5673] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  374.568319][ T5673] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  374.568329][ T5673] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  374.578176][ T5673] hid-generic 0000:0000:0000.001C: hidraw0: <UNKNOWN> HID v0.10 Device [syz0] on syz1
[  374.579390][T14180] BTRFS info (device loop8): trying to use backup root at mount time
[  374.600060][T14180] BTRFS info (device loop8): use zstd compression, level 3
[  374.727577][T12986] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  375.242560][T14230] bridge_slave_0: default FDB implementation only supports local addresses
[  375.349333][ T5673] IPVS: starting estimator thread 0...
[  375.436271][T14240] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3115'.
[  375.440836][T14240] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3115'.
[  375.482081][T14237] IPVS: using max 82 ests per chain, 196800 per kthread
[  375.973331][T14261] netlink: 'syz.7.3125': attribute type 4 has an invalid length.
[  375.976229][T14261] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3125'.
[  376.017026][T14262] loop9: detected capacity change from 0 to 128
[  376.044449][T14262] EXT4-fs (loop9): Test dummy encryption mode enabled
[  376.084719][T14262] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  376.099778][T14262] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  376.139813][T14272] loop7: detected capacity change from 0 to 2048
[  376.145879][T14272] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  376.155663][T14273] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  376.160128][T14272] syz.7.3129: attempt to access beyond end of device
[  376.160128][T14272] loop7: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[  376.174540][T14262] EXT4-fs warning (device loop9): ext4_group_extend:1885: will only finish group (8193 blocks, 8129 new)
[  376.191006][T14262] EXT4-fs warning (device loop9): ext4_group_extend:1890: can't read last block, resize aborted
[  376.284498][T13736] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  376.602217][   T32] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  376.761840][   T32] usb 10-1: config 171 has an invalid interface number: 109 but max is 0
[  376.765502][   T32] usb 10-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config
[  376.780143][   T32] usb 10-1: config 171 has no interface number 0
[  376.782920][   T32] usb 10-1: config 171 interface 109 altsetting 0 endpoint 0x4 has invalid maxpacket 14129, setting to 64
[  376.787469][   T32] usb 10-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  376.807797][   T32] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e
[  376.815402][   T32] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.825816][   T32] usb 10-1: Product: syz
[  376.835772][   T32] usb 10-1: Manufacturer: syz
[  376.841103][   T32] usb 10-1: SerialNumber: syz
[  377.077741][   T32] ath6kl: Failed to submit usb control message: -71
[  377.083801][   T32] ath6kl: unable to send the bmi data to the device: -71
[  377.086342][   T32] ath6kl: Unable to send get target info: -71
[  377.091732][   T32] ath6kl: Failed to init ath6kl core: -71
[  377.108527][   T32] ath6kl_usb 10-1:171.109: probe with driver ath6kl_usb failed with error -71
[  377.132898][   T32] usb 10-1: USB disconnect, device number 4
[  377.863792][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3147'.
[  377.907194][T14315] loop9: detected capacity change from 0 to 256
[  378.090385][  T797] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  378.254077][  T797] usb 9-1: unable to get BOS descriptor or descriptor too short
[  378.261867][  T797] usb 9-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config
[  378.265614][  T797] usb 9-1: config 66 has 1 interface, different from the descriptor's value: 2
[  378.277204][  T797] usb 9-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  378.280620][  T797] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.284781][  T797] usb 9-1: Product: syz
[  378.286359][  T797] usb 9-1: Manufacturer: syz
[  378.288252][  T797] usb 9-1: SerialNumber: syz
[  378.390421][ T7368] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  378.530285][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  378.532364][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  378.572586][  T797] ati_remote2 9-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint
[  378.592016][ T7368] usb 10-1: Using ep0 maxpacket: 32
[  378.604120][  T797] usb 9-1: USB disconnect, device number 7
[  378.614233][ T7368] usb 10-1: config index 0 descriptor too short (expected 164, got 36)
[  378.623414][ T7368] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  378.637856][ T7368] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  378.647927][ T7368] usb 10-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  378.651986][ T7368] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.668075][ T7368] usb 10-1: config 0 descriptor??
[  379.011028][T14330] loop7: detected capacity change from 0 to 2048
[  379.041998][T14330] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  379.066712][T14330] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #12: block 2: comm syz.7.3154: lblock 0 mapped to illegal pblock 2 (length 1)
[  379.092538][T10843] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.136138][   T33] audit: type=1326 audit(2000000121.480:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.8.3155" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6399e019 code=0x7ffc0000
[  379.155771][ T7368] logitech 0003:046D:C29C.001D: unknown main item tag 0x2
[  379.158767][   T33] audit: type=1326 audit(2000000121.490:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.8.3155" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6399e019 code=0x7ffc0000
[  379.176093][   T33] audit: type=1326 audit(2000000121.490:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.8.3155" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6399e019 code=0x7ffc0000
[  379.191793][   T33] audit: type=1326 audit(2000000121.490:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.8.3155" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6399e019 code=0x7ffc0000
[  379.206825][   T33] audit: type=1326 audit(2000000121.490:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.8.3155" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e6399e019 code=0x7ffc0000
[  379.218856][   T33] audit: type=1326 audit(2000000121.490:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.8.3155" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6399e019 code=0x7ffc0000
[  379.225570][ T7368] logitech 0003:046D:C29C.001D: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.9-1/input0
[  379.230532][   T33] audit: type=1326 audit(2000000121.490:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.8.3155" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6399e019 code=0x7ffc0000
[  379.237642][   T33] audit: type=1326 audit(2000000121.490:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.8.3155" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6399e019 code=0x7ffc0000
[  379.254411][   T33] audit: type=1326 audit(2000000121.490:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.8.3155" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e6399dcab code=0x7ffc0000
[  379.270119][   T33] audit: type=1326 audit(2000000121.490:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.8.3155" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6399e019 code=0x7ffc0000
[  379.366605][T14345] loop8: detected capacity change from 0 to 256
[  379.367628][ T7368] logitech 0003:046D:C29C.001D: no inputs found
[  379.418984][ T7368] usb 10-1: USB disconnect, device number 5
[  380.152620][T14375] bridge0: port 3(macvlan2) entered blocking state
[  380.155644][T14375] bridge0: port 3(macvlan2) entered disabled state
[  380.161855][T14375] macvlan2: entered allmulticast mode
[  380.167449][T14375] bridge0: entered allmulticast mode
[  380.169730][T14375] bridge0: entered promiscuous mode
[  380.244197][T14375] macvlan2: left allmulticast mode
[  380.246786][T14375] bridge0: left allmulticast mode
[  380.474692][ T2231] bridge0: left promiscuous mode
[  380.872729][T14396] loop7: detected capacity change from 0 to 16
[  380.905486][T14396] erofs (device loop7): mounted with root inode @ nid 36.
[  381.929018][T14402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.066808][T14408] netlink: 'syz.8.3189': attribute type 4 has an invalid length.
[  382.245624][T14416] loop9: detected capacity change from 0 to 512
[  382.317901][T14416] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  382.323248][T14416] ext4 filesystem being mounted at /67/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  382.334889][T14416] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.3191: Failed to acquire dquot type 0
[  382.394256][T13736] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  383.178030][T14437] loop8: detected capacity change from 0 to 32768
[  383.185801][T14437] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3203 (14437)
[  383.222940][T14437] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  383.230165][T14437] BTRFS info (device loop8): using sha256 checksum algorithm
[  383.237198][T14437] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  383.352085][T14437] BTRFS info (device loop8): rebuilding free space tree
[  383.422471][T14437] BTRFS info (device loop8): disabling free space tree
[  383.425278][T14437] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  383.428618][T14437] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  383.567081][T14437] BTRFS info (device loop8): enabling ssd optimizations
[  383.585555][T14437] BTRFS info (device loop8): enabling disk space caching
[  383.601432][T14437] BTRFS info (device loop8): force clearing of disk cache
[  383.617203][T14437] BTRFS info (device loop8): enabling auto defrag
[  383.629570][T14437] BTRFS info (device loop8): max_inline set to 0
[  386.007948][T14485] loop7: detected capacity change from 0 to 8
[  386.722529][T14485] SQUASHFS error: zlib decompression failed, data probably corrupt
[  386.772348][T14485] SQUASHFS error: Failed to read block 0x9b: -5
[  386.774564][T14485] SQUASHFS error: Unable to read metadata cache entry [99]
[  386.837808][T14485] SQUASHFS error: Unable to read inode 0x127
[  388.527783][T12986] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  394.046516][    C1] sched: DL replenish lagged too much
[  440.602139][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  440.608738][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  503.289486][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  503.299334][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  533.898664][   T53] Bluetooth: hci0: command tx timeout
[  563.041122][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  563.052212][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  625.611895][   T34] INFO: task kworker/u8:1:13 blocked for more than 147 seconds.
[  625.614561][   T34]       Tainted: G             L      syzkaller #0
[  625.616640][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  625.619299][   T34] task:kworker/u8:1    state:D stack:23200 pid:13    tgid:13    ppid:2      task_flags:0x4208060 flags:0x00080000
[  625.977878][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  625.992470][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  628.404802][   T34] Workqueue: ipv6_addrconf addrconf_verify_work
[  628.415635][   T34] Call Trace:
[  628.425542][   T34]  <TASK>
[  628.435453][   T34]  __schedule+0x17d9/0x56c0
