last executing test programs:

4m40.135514958s ago: executing program 0 (id=67):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@discard}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50)
mknod$loop(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1)

4m40.004413467s ago: executing program 0 (id=69):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000480)='asymmetric\x00', 0x0, &(0x7f00000007c0)="1082da76", 0x4, r0)

4m39.905783433s ago: executing program 0 (id=72):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1)

4m39.796174495s ago: executing program 0 (id=73):
r0 = socket(0xa, 0x5, 0x0)
listen(r0, 0x100)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0xc810)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f450, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

4m38.455881153s ago: executing program 0 (id=80):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0), 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)=ANY=[])

4m38.082613182s ago: executing program 0 (id=81):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000009c0), 0x20002, 0x0)
ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000021c0)=0x6)

4m37.895720216s ago: executing program 32 (id=81):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000009c0), 0x20002, 0x0)
ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000021c0)=0x6)

4m1.24168633s ago: executing program 1 (id=443):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d80402f0000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x8, "b0ecfded"}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_4={0x3, 0x1, 0x1, "1020e851"}]}}, 0x0}, 0x0)

3m59.611588547s ago: executing program 1 (id=457):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x44, r1, 0x503, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x40000000)

3m59.611135522s ago: executing program 1 (id=459):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, 0x0)

3m59.532017172s ago: executing program 1 (id=461):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

3m59.426687429s ago: executing program 1 (id=463):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

3m58.537975083s ago: executing program 1 (id=477):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000006b00000008000300", @ANYRES32=r2], 0x28}}, 0x0)

3m43.534132883s ago: executing program 33 (id=477):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000006b00000008000300", @ANYRES32=r2], 0x28}}, 0x0)

3m5.317166061s ago: executing program 4 (id=965):
syz_emit_ethernet(0x76, &(0x7f0000000780)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000300", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, @ipv4={'\x00', '\xff\xff', @local}, [@srh={0x2c, 0x0, 0x4, 0x0, 0x4}, @hopopts={0x3c}]}}}}}}}, 0x0)

3m5.247491837s ago: executing program 4 (id=966):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="e904a20000000180c20000000800450000200000d9000011"], 0x0)

3m5.247161057s ago: executing program 4 (id=967):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e80", 0x3)
write$char_usb(r0, &(0x7f0000002600)="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", 0xffd)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40)

3m5.136585702s ago: executing program 4 (id=968):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@shortname_winnt}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@fat=@flush}, {@shortname_winnt}, {@fat=@showexec}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@tz_utc}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000a00)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

3m5.057660329s ago: executing program 4 (id=969):
prlimit64(0x0, 0x9, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
io_setup(0x8, &(0x7f0000000600))

3m5.05745775s ago: executing program 4 (id=970):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000000200000000000018001600100001000900000000000000000010000000550708000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x44}}, 0x0)

3m4.880310621s ago: executing program 34 (id=970):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000000200000000000018001600100001000900000000000000000010000000550708000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x44}}, 0x0)

2m17.784030666s ago: executing program 2 (id=1405):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_getaddr={0x18, 0x16, 0x205, 0x0, 0x0, {0xa, 0x80}}, 0x18}}, 0x0)

2m17.514729904s ago: executing program 2 (id=1407):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0xa, {0xa, 0xe, "a421871424fb8253"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2m15.842992367s ago: executing program 2 (id=1440):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$snddsp(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = getpgrp(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x80000000, '\x00', 0x4}, 0x4, 0x10, 0x4, r2, 0x4, 0x80000, 'syz0\x00', &(0x7f0000000600)=['/dev/net/tun\x00', '>/.4\x8e\xc5\x16+\xec\xf6\bP\xca.v%\x05k\xa9\xcb\x00.\xa1\x82\xb5F\x03\xb8\x04\xd6%\x91-a\xb2\xd5\x00\xe5\xa5V8\x16sd@F\r\xb2Y\x8b!r~\xc1\x02\xee,\x93\a\xa2{}h\xaa\xc1e\xc0\x8e\xf4;\x7f\x90\\\'\xc3\r\x9a\x8d\x1d\x86\xff\x03\x973hr\xa3\"w\xf2\xea\xff\xb2\xe3\x9c\x81-\x92\x85\xa4\xf8\'\xc7\x11\xf4\x19\xa0\x1c\x03\x14\xc4P\\\x95h\xb5\x9b\xa3\x1fG5+\x84\xc3(\'\tCA6^)\xa73\xa4|\x04\x84\x03\xadQ\xd1\xf8\xea8\\\x97{F4\xdc\x99)b\xdb.\x9b\xfd2e{#\x8d\xaa\x00', '}&[}', '{)#5\x00'], 0xbb})
r3 = socket(0x400000000010, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
socket$rds(0x15, 0x5, 0x0)
chdir(&(0x7f0000000080)='./file0\x00')
mount$nfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)

2m14.887970726s ago: executing program 2 (id=1446):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000540)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc36, &(0x7f0000002540)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000001c40)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

2m14.755266296s ago: executing program 2 (id=1449):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000010)

2m14.361234569s ago: executing program 2 (id=1456):
r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%/,c\xbe\xfbL:', 0x0)

2m14.152565825s ago: executing program 35 (id=1456):
r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%/,c\xbe\xfbL:', 0x0)

1m3.456327633s ago: executing program 5 (id=2181):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e1d, @multicast2}, {0x306, @remote}, 0x28, {0x2, 0x4e20, @empty}})

1m3.455756959s ago: executing program 5 (id=2183):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000500)={0x7, 0x8, 0xfa00, {r1, 0x6}}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20)

1m3.39575002s ago: executing program 5 (id=2185):
r0 = semget$private(0x0, 0x6, 0x0)
semtimedop(r0, &(0x7f00000003c0)=[{0x0, 0x1}, {0x2, 0x4, 0x1800}], 0x2, 0x0)
semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2)
semop(r0, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2)
semctl$GETZCNT(r0, 0x2, 0xf, 0x0)

1m2.299950957s ago: executing program 5 (id=2196):
syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f00000005c0)=ANY=[], 0x1, 0x6a4, &(0x7f0000000cc0)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

1m2.169170534s ago: executing program 5 (id=2199):
syz_mount_image$hfsplus(&(0x7f0000001cc0), &(0x7f00000016c0)='./file2\x00', 0x44, &(0x7f0000000300)=ANY=[@ANYBLOB='umask=00000000000000000000000,decompose,nls=cp932,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f626172726965722c0000000000000b9c00000030303030303030c8f71132e94930303030342c00"], 0x20, 0x6e3, &(0x7f00000003c0)="$eJzs3U9sW3cdAPDvsx0n7qTMG+1WEFKjVVSwQpvEjBYJiYIQymGCSlx2DW26RnWyKslQWiHqAYMjnFAPOwyhcNgJcUAa4oAYZyQk7r1X4sCt4oDRe34vsZ3EibM47rrPR3p+v+f3+/N9X//es/3SygF8ai28EROtSGLh4uub6fajrUbz0VZjpShHxGRElCIqnVUkqxHJRxHXorPEZ9Mn8+6S/cZ57fGH7114+EGjs1XJl6x+aVC7He0BI7TyJWYiopyvh1TZr78be/T3YKiuk+2404SdLxIH49bepTVM80Oct8DT7kFEeWKP5+sRpyJiKv8cEPnVoXTC4R27oa5yAAAA8HQqH1Th+SfxJDZj+mTCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGdD0vnNwCRfSkV5JpL89/+/n1fLVKvjDfcAXz5g/7u3TigQAAAAAAAAADh+EzvFc0/iSWzGdLHdTrK/+b+SbZzOHp+Lt2M9lmItLsVmLMZGbMRazEVMTHf1Wd1c3NhYm9vd8jeRtmy32w/ylvMRUd/Vcn7ExwwAAAAAAAAAz7afxkJMjzsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADolkSUO6tsOV2U61GqRMRURFTTeq2IvxTlT7K/jjsAAAAAGL1avp5O/tcptJPsO/9L2ff+qXg7VmMjlmMjmrEUN7N7AZ1v/aV/thrNR1uNlXTZ3fG3/j1UHFmPEVGOd/YZeTarcWa7xUJ8N34QF2MmrsdaLMePYjE2YilmopYeRCxGEvVa5+5FvYizN95y3tW1nlCu98d2rm/7bBZJLW7FchbbpbhRLXorZTWSONs12p+qEX0ZeifNTvLN3CFzdLPr9fp1fl8m137+kH2MRj078ontjMymuc+z8cLeuS8MOU/6R5qL0vY9qNM7o6Sb/SMVOf/hMDk/la/TXP+iN+fHbchbaf2ZmI9SPvsiXurN+d0vPHyxt/GX/vW367dLq3du31q/OMJDGqmJotCfiUZXJl4ePPvyTDTTTLQOn4mJ/iemPsZxHKNqno3Ohe1wV8vvZKXFeKVrCr4VN2MprsRszMXVmI2vx3w0embYmZ68VhorvTnJzrXS7utbbUDw57/YVemXB1Q+WWleXujKayG90tWzffnsu/armO3K0ouDZ99R3gUqn8sL6Rg/64lm3HoykV+bi+iKN6h9MvHbdvq43ly9s3Z78e7204Pf1S7k6/S0fbf32vy7YzmgI0vnS3rFrWRbWU5qxTtjuu8z29H25qua/8Wl0660a9+Z7X31mI7l+N6+Z2o1/wy3u6fOvpf33NfI9p3t2tfzKSfeimb2KaTPzMlkFYBDO/XqqWrtce0ftfdrP6/drr0+9e3Jq5Ofr8bE3yt/Lv+h9PvSN5JX4/34SUyPO1IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWrN+7f2ex2VxaG2GhesSxonRgna3nDtdh1CMGj5Xkheqos/EUFP4zNTAbtRjR6H+MiAF1qh97iGT08zmdyMfSYfHDadkz7fIQzStFq73rVGJ9ar9XcHLndY/6ncXmf9s9dWrRdcoAz7jLGyt3L6/fu/+V5ZXFN5feXFqdv3rl6pXG1+a+evnWcnNptvM47iiBUVi/d7887hgAAAAAAAAAAACA4eT/+n/jyP+ZoXJAnera+t4jnzvpQwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+oRbeiIlWJDE3e2k23X601WimS1HeqVmJiFJEJD+OSD6KuBadJepd3SX7jfPa4w/fu/Dwg8ZOX5WifmlQu8Np5UvMREQ5Xx9sco9uYq2/vxtd/bWOFF6yfYRpws4XiYNx+38AAAD//6IW9NQ=")
mkdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x24)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

1m1.84604778s ago: executing program 5 (id=2201):
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x9be7f6eccba41a2f, 0x0, &(0x7f0000000080))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e1e, @broadcast}, 0x10)

1m1.616989853s ago: executing program 36 (id=2201):
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x9be7f6eccba41a2f, 0x0, &(0x7f0000000080))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e1e, @broadcast}, 0x10)

35.203882655s ago: executing program 6 (id=2429):
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0x40000be2)
inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960)

35.153803206s ago: executing program 6 (id=2430):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703667726574617000000020000680140007002001000100000000000000100000000206000e00000000000a0001"], 0x60}}, 0x0)

35.088845815s ago: executing program 6 (id=2431):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9, 0x4}, 0x10)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a60000000000a600080008001d000000", 0x24)

35.006612054s ago: executing program 6 (id=2434):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x48c5, &(0x7f0000000b80)={[{@uni_xlateno}, {@shortname_winnt}, {@rodir}, {@fat=@gid}, {@fat=@nfs_nostale_ro}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlateno}, {@fat=@sys_immutable}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000780)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

34.932250577s ago: executing program 6 (id=2436):
prctl$PR_GET_SECCOMP(0x15)

34.243109367s ago: executing program 6 (id=2444):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x151, 0x0, 0x86c4, 0x0, 0x4, 0x0, 0x9, 0x0, 0x5})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000500)={0x2020}, 0x2020)

34.168297154s ago: executing program 37 (id=2444):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x151, 0x0, 0x86c4, 0x0, 0x4, 0x0, 0x9, 0x0, 0x5})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000500)={0x2020}, 0x2020)

7.619283978s ago: executing program 3 (id=2685):
syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040), 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090)

7.519794096s ago: executing program 3 (id=2686):
r0 = socket(0xa, 0x3, 0x87)
sendmmsg$unix(r0, &(0x7f000000ac00)=[{{&(0x7f00000013c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001440)="0ebb13b2", 0x4}], 0x1, 0x0, 0x0, 0x20044001}}, {{&(0x7f0000001d80)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x80c4)

7.519673917s ago: executing program 3 (id=2687):
setresuid(0x0, 0xee01, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)

7.459889335s ago: executing program 3 (id=2688):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$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")
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3853008, 0x0, 0x1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

7.347053003s ago: executing program 3 (id=2689):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000003180)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @empty, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0x18, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdea}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e1e3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x29}, 0x94)
recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0)

6.980613284s ago: executing program 3 (id=2690):
r0 = timerfd_create(0x0, 0x0)
r1 = syz_io_uring_setup(0x58f7, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a})
timerfd_settime(r0, 0x3, &(0x7f0000000840)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
io_uring_enter(r1, 0x1f82, 0x0, 0x0, 0x0, 0x0)

6.832147422s ago: executing program 38 (id=2690):
r0 = timerfd_create(0x0, 0x0)
r1 = syz_io_uring_setup(0x58f7, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a})
timerfd_settime(r0, 0x3, &(0x7f0000000840)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
io_uring_enter(r1, 0x1f82, 0x0, 0x0, 0x0, 0x0)

2.260590815s ago: executing program 8 (id=2730):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x0)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="f9aa8a10fc07", 0x6}], 0x1}, 0x0)

1.285234418s ago: executing program 8 (id=2738):
r0 = syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xfd, 0x1500, &(0x7f00000002c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x4012011, r1, 0x1000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000017c0)={0x0, 0x5, 0x100000000, 0x1})
write$binfmt_format(r1, &(0x7f0000000000)='1\x00', 0x2400)

1.108150687s ago: executing program 9 (id=2741):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000041c0)=@base={0x2, 0x4, 0x9, 0x9}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004240)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37)

1.105647461s ago: executing program 7 (id=2742):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xffffffff, "030000000000000023000000debd12ffff00000000000000000020000400", <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000001})

1.077561057s ago: executing program 8 (id=2743):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f00000003c0)="76389e147583ddd0569ba56a5cfd5588", 0x0, 0x20f7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

973.301821ms ago: executing program 9 (id=2744):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'sha3-224\x00'}})

973.158359ms ago: executing program 7 (id=2745):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x1)
ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000))

898.021115ms ago: executing program 8 (id=2746):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x34, r1, 0x5, 0x2, 0x1000000c, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac01, 0xc]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4811}, 0x880)

897.797966ms ago: executing program 9 (id=2747):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000000)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x573, &(0x7f0000000ec0)="$eJzs3T1sG+UbAPDnzvG/X/mTIoEEqEMFSEWq6iT9gMLUrohKlTogsUDkuFEVJ47iBJooQ7pXiA4IUJeywcAIYmBALIysLCBmpIpGIDUdwMhfaZo4wSl1XHK/n3T2vfee/bzvnZ/XvtOdHEBmHa0/pBHPRsTFJGJoXd1AtCqPNtdbXVkq3ltZKiZRq136LYkkIu6uLBXb6yet50MRsRwRz0TEd/mI4+nmuNWFxcmxcrk02yoPz03NDFcXFk9cmRqbKE2Upk+98uqZs6fPjJ4cXf+ye7X1pfzO+nr95xvvX//h9Vs3Pv/iyHLxw7EkzsVgq259Px6l5jbJx7kNy0/3IlgfJf1uAA8l18rzeio9HUORa2V9J7WhXW0a0GO1fRE1IKMS+Q8Z1f4dUD/+bU+7+fvj9vnmAUg97mpratYMNM9NxP7GscnB35MHjkzqx5uHd7Oh7EnL1yJiZGBg8+c/aX3+Ht7Io2ggPfXt+eaO2rz/07XxJzqMP4Ptc6f/Unv8W900/t2Pn9ti/LvYZYw/3/rlky3jX4t4rmP8ZC1+0iF+GhHvdBn/5ptfn92qrvZpxLHoHL8t2f788PDlK+XSSPOxY4xvjh15bbv+H9wifvOc7f7G10yn7T/TZf+/+v7L55e3if/SC9vv/07b/0BEfNBl/CfvfvbGVnW3ryV36r8Cdrr/68tudRn/5XNHf+pyVQAAAAAAAAAAYAfSxrVsSVpYm0/TQqF5D+9TcTAtV6pzxy9X5qfHm9e8HY582r7SaqhZTurl0db1uO3yyQ3lU7lWwNyBRrlQrJTH+9x3AAAAAAAAAAAAAAAAAAAAeFwc2nD//x+5xv3/G/+uGtirtv7Lb2Cvk/+QXQ/mf9K3dgC7z/c/ZFZN/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv8AAAAAAAAAAAAAAAAAAAAAAAAAANATFy9cqE+1eytLxXp5fGBhfrLy7onxUnWyMDVfLBQrszOFiUplolwqFCtT//R+SaUyMxLT81eH50rVueHqwuLbU5X56fZ/ipbyPe8RAAAAAAAAAAAAAAAAAAAA/PcMNqYkLURE2phP00Ih4v8RcTjyyeUr5dJIRDwRET/m8vvq5dF+NxoAAAAAAAAAAAAAAAAAAAD2mOrC4uRYuVyazcjMwE5WjojlR9uM+jvu+FX51r56XLahmSzM9HlgAgAAAAAAAAAAAAAAAACADLp/02+3r/irtw0CAAAAAAAAAAAAAAAAAACATEp/TSKiPh0benFwY+3/ktVc4zki3rt56aOrY3Nzs6P15XfWls993Fp+sh/tB7rVztN2HgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3VRcWJ8fK5dJsD2f63UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh/F3AAAA///pCdd8")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000009e40)=ANY=[@ANYBLOB="000000004c9002000900000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000006e0d00000000000001"])

818.578934ms ago: executing program 7 (id=2748):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="10000000010001"], 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x4010)

816.767278ms ago: executing program 8 (id=2749):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f00000000c0)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@noquota}, {@errors_continue}, {@discard_size={'discard', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@quota}, {@errors_remount}, {@grpquota}]}, 0x1, 0x60b9, &(0x7f0000013cc0)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='system.posix_acl_access\x00', 0x0, 0x0, 0x2)

728.617318ms ago: executing program 7 (id=2750):
ioprio_set$pid(0x1, 0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023892)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

640.002649ms ago: executing program 9 (id=2751):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1800000028"], 0x20)

639.762486ms ago: executing program 7 (id=2752):
syz_io_uring_setup(0x23d, &(0x7f0000000300)={0x0, 0xa57b, 0x8000, 0x0, 0x1d4}, 0x0, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000080007"], 0xc0}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
write$binfmt_script(r0, &(0x7f0000000180), 0xfefc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r0}, 0x68)

528.201269ms ago: executing program 7 (id=2753):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840)
syz_mount_image$xfs(&(0x7f0000009580), &(0x7f00000095c0)='./file1\x00', 0x22080c6, &(0x7f0000000000)={[{@pquota}, {@uqnoenforce}, {@pquota}, {@lazytime}, {@pquota}]}, 0x1, 0x96df, &(0x7f000001c340)="$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")

470.82799ms ago: executing program 9 (id=2754):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x148, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe831cb58833da74d, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@rand_addr=0x64010100, {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd2a, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}, @mark={0xc, 0x15, {0x35075a, 0x8}}]}, 0x148}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

238.951413ms ago: executing program 8 (id=2755):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})

0s ago: executing program 9 (id=2756):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c)

kernel console output (not intermixed with test programs):

 high-speed USB device number 6 using dummy_hcd
[  253.576147][ T5899] usb 7-1: Using ep0 maxpacket: 16
[  253.583374][ T5899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.588182][ T5899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.591373][ T5899] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  253.595660][ T5899] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  253.598582][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.604406][ T5899] usb 7-1: config 0 descriptor??
[  254.018361][ T5899] HID 045e:07da: Invalid code 65791 type 1
[  254.023960][ T5899] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0015/input/input12
[  254.044984][ T5899] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  254.219238][ T5899] usb 7-1: USB disconnect, device number 6
[  254.226972][ T5312] usb 4-1: new low-speed USB device number 33 using dummy_hcd
[  254.387232][ T5312] usb 4-1: config index 0 descriptor too short (expected 36, got 30)
[  254.389800][ T5312] usb 4-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config
[  254.399320][ T5312] usb 4-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  254.403905][ T5312] usb 4-1: config 0 interface 0 has no altsetting 0
[  254.406742][ T5312] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00
[  254.414456][ T5312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.422482][ T5312] usb 4-1: config 0 descriptor??
[  254.431810][ T5312] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  254.636624][ T5899] usb 4-1: USB disconnect, device number 33
[  254.877717][T11273] loop5: detected capacity change from 0 to 32768
[  254.892518][T11273] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1826 (11273)
[  254.906745][T11273] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  254.915616][T11273] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  254.919461][T11273] BTRFS info (device loop5): using free-space-tree
[  255.112921][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.115513][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.232127][ T8805] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  255.835200][ T5900] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  255.983785][T11328] loop5: detected capacity change from 0 to 40427
[  255.987465][T11328] F2FS-fs (loop5): build fault injection rate: 16
[  255.989611][T11328] F2FS-fs (loop5): build fault injection type: 0x77
[  255.997385][T11328] F2FS-fs (loop5): invalid crc value
[  256.000791][T11328] F2FS-fs (loop5): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4429/0x6ff0
[  256.008995][T11328] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-12)
[  256.015577][ T5900] usb 4-1: Using ep0 maxpacket: 16
[  256.020147][ T5900] usb 4-1: config 0 has no interfaces?
[  256.021984][ T5900] usb 4-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 1.00
[  256.028573][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.037663][ T5900] usb 4-1: config 0 descriptor??
[  256.258439][ T5900] usb 4-1: USB disconnect, device number 34
[  256.384260][T11336] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1847'.
[  256.889729][T11347] loop3: detected capacity change from 0 to 128
[  256.902213][T11347] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  256.908971][T11343] loop6: detected capacity change from 0 to 32768
[  256.914149][T11343] bcachefs (/dev/loop6): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 1497488896)
[  256.918704][T11347] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  256.920531][T11343] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size
[  257.021998][   T27] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  257.144025][T11354] input: syz0 as /devices/virtual/input/input13
[  257.261781][T11361] batman_adv: batadv0: Adding interface: dummy0
[  257.264373][T11361] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.283924][T11361] batman_adv: batadv0: Interface activated: dummy0
[  257.758104][ T5854] Bluetooth: hci2: command 0x0405 tx timeout
[  257.855377][ T5899] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  258.005156][ T5899] usb 7-1: Using ep0 maxpacket: 32
[  258.010243][ T5899] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  258.016911][ T5899] usb 7-1: config 0 interface 0 has no altsetting 0
[  258.019942][ T5899] usb 7-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  258.023421][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.034256][ T5899] usb 7-1: config 0 descriptor??
[  258.486903][ T5899] uclogic 0003:5543:0781.0016: ignoring exceeding usage max
[  258.497679][ T5899] uclogic 0003:5543:0781.0016: unbalanced collection at end of report description
[  258.506809][ T5899] uclogic 0003:5543:0781.0016: parse failed
[  258.514020][ T5899] uclogic 0003:5543:0781.0016: probe with driver uclogic failed with error -22
[  258.673695][ T5899] usb 7-1: USB disconnect, device number 7
[  258.945263][ T5886] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  259.098790][ T5886] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  259.103163][ T5886] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  259.107918][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64
[  259.112366][ T5886] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  259.120108][ T5886] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  259.123863][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.128706][ T5886] usb 6-1: Product: syz
[  259.130339][ T5886] usb 6-1: Manufacturer: syz
[  259.132097][ T5886] usb 6-1: SerialNumber: syz
[  259.137011][ T5886] usb 6-1: config 0 descriptor??
[  259.139902][T11388] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  259.197121][T11391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1872'.
[  259.205493][T11391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1872'.
[  259.237267][ T5886] rc_core: IR keymap rc-imon-rsc not found
[  259.239669][ T5886] Registered IR keymap rc-empty
[  259.243186][ T5886] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  259.268451][ T5886] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input14
[  259.368443][T11388] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[  259.372398][T11388] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  259.382978][T11388] vhci_hcd vhci_hcd.0: Device attached
[  259.411245][T11388] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6)
[  259.413858][T11388] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  259.425344][T11388] vhci_hcd vhci_hcd.0: Device attached
[  259.431384][ T5900] usb 6-1: USB disconnect, device number 13
[  259.432517][T11399] vhci_hcd: connection closed
[  259.434778][T11402] vhci_hcd: connection closed
[  259.439485][   T12] vhci_hcd: stop threads
[  259.444924][   T12] vhci_hcd: release socket
[  259.447562][   T12] vhci_hcd: disconnect device
[  259.452028][   T12] vhci_hcd: stop threads
[  259.462500][   T12] vhci_hcd: release socket
[  259.464451][   T12] vhci_hcd: disconnect device
[  259.709560][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1882'.
[  260.265177][ T5899] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  260.292622][T11444] loop5: detected capacity change from 0 to 32768
[  260.298891][T11444] ocfs2: Bad value for 'localalloc'
[  260.425766][ T5899] usb 7-1: Using ep0 maxpacket: 16
[  260.442550][ T5899] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  260.450931][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.457594][ T5899] usb 7-1: Product: syz
[  260.461348][ T5899] usb 7-1: Manufacturer: syz
[  260.468493][ T5899] usb 7-1: SerialNumber: syz
[  260.485288][ T5899] usb 7-1: config 0 descriptor??
[  260.701250][ T5899] speedtch 7-1:0.0: speedtch_bind: wrong device class 68
[  260.704088][ T5899] speedtch 7-1:0.0: usbatm_usb_probe: bind failed: -19!
[  260.731852][ T5899] usb 7-1: USB disconnect, device number 8
[  260.888288][ T5900] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  261.045210][ T5900] usb 6-1: Using ep0 maxpacket: 32
[  261.051880][ T5900] usb 6-1: config 0 has an invalid interface number: 146 but max is 0
[  261.057632][ T5900] usb 6-1: config 0 has no interface number 0
[  261.060399][ T5900] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  261.073475][ T5900] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  261.082812][ T5900] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  261.088505][ T5900] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  261.093003][ T5900] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  261.099379][ T5900] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  261.103314][ T5900] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  261.108280][ T5900] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024
[  261.113470][ T5900] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  261.119870][ T5900] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  261.137534][ T5900] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  261.141185][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.145549][ T5900] usb 6-1: Product: syz
[  261.147459][ T5900] usb 6-1: Manufacturer: syz
[  261.149389][ T5900] usb 6-1: SerialNumber: syz
[  261.154437][ T5900] usb 6-1: config 0 descriptor??
[  261.158785][T11451] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  261.161911][T11451] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  261.168713][ T5900] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[  261.172040][ T5900] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[  261.192720][ T5900] scsi host6: microtekX6
[  261.370050][T11451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.391729][T11451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.405523][ T5899] usb 6-1: USB disconnect, device number 14
[  262.398777][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810628e800: rx timeout, send abort
[  262.784423][T11497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1918'.
[  262.788108][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1918'.
[  262.904138][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810628e800: abort rx timeout. Force session deactivation
[  262.923498][T11503] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1921'.
[  263.244250][T11534] loop5: detected capacity change from 0 to 64
[  263.562196][T11546] ALSA: mixer_oss: invalid OSS volume ''
[  263.709072][T11552] netlink: 'syz.5.1942': attribute type 10 has an invalid length.
[  263.724509][T11552] bridge0: port 3(netdevsim0) entered blocking state
[  263.726935][T11552] bridge0: port 3(netdevsim0) entered disabled state
[  263.729553][T11552] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  263.733510][T11552] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  263.783897][T11554] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  264.387530][T11579] loop3: detected capacity change from 0 to 24
[  264.445170][T11570] loop5: detected capacity change from 0 to 32768
[  264.448425][T11570] bcachefs (/dev/loop5): error validating superblock: Invalid superblock: member info area missing
[  264.453100][T11570] bcachefs: bch2_fs_get_tree() error: invalid_sb_members_missing
[  264.839580][T11598] loop5: detected capacity change from 0 to 2048
[  264.898075][ T6138] Dev loop5: RDB in block 1 has bad checksum
[  265.275832][T11598] Dev loop5: RDB in block 1 has bad checksum
[  265.662199][T11621] loop6: detected capacity change from 0 to 64
[  265.688694][T11621] MINIX-fs: bad superblock or unable to read bitmaps
[  266.261030][T11637] input: syz0 as /devices/virtual/input/input15
[  266.519834][T11650] Invalid ELF header len 8
[  266.833383][T11648] loop6: detected capacity change from 0 to 32768
[  266.858272][T11648] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1985 (11648)
[  266.885976][T11648] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  266.890078][T11648] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  266.906885][T11648] BTRFS info (device loop6): using free-space-tree
[  267.147167][T11680] loop3: detected capacity change from 0 to 4096
[  267.308976][T10196] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  267.552608][T11693] loop6: detected capacity change from 0 to 128
[  267.580041][   T33] audit: type=1800 audit(1755246939.039:146): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1997" name="file1" dev="loop6" ino=1048629 res=0 errno=0
[  267.607258][T11693] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 52)
[  267.611637][T11693] FAT-fs (loop6): Filesystem has been set read-only
[  267.657267][T10843] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  267.827287][T10843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.833440][T10843] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  267.837164][T10843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.841054][T10843] usb 4-1: config 0 descriptor??
[  267.949754][T11701] input: syz0 as /devices/virtual/input/input16
[  268.432333][T10843] nintendo 0003:057E:200E.0017: unbalanced delimiter at end of report description
[  268.436675][T10843] nintendo 0003:057E:200E.0017: HID parse failed
[  268.439936][T10843] nintendo 0003:057E:200E.0017: probe - fail = -22
[  268.442548][T10843] nintendo 0003:057E:200E.0017: probe with driver nintendo failed with error -22
[  268.463522][ T5899] usb 4-1: USB disconnect, device number 35
[  269.443633][T11736] loop3: detected capacity change from 0 to 128
[  269.446638][T11735] netlink: 'syz.5.2016': attribute type 2 has an invalid length.
[  269.449936][T11735] netlink: 'syz.5.2016': attribute type 8 has an invalid length.
[  269.458836][T11735] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2016'.
[  269.479987][T11736] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  269.486947][T11736] ext4 filesystem being mounted at /658/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  269.509728][T11736] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  269.512392][T11736] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  269.525320][T11736] vhci_hcd vhci_hcd.0: Device attached
[  269.589782][T11745] loop5: detected capacity change from 0 to 64
[  269.775882][ T5886] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  269.996429][T10843] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  270.147563][T10843] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[  270.152432][T10843] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[  270.156850][T10843] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  270.161500][T10843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  270.168080][T10843] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  270.171821][T10843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.175462][T10843] usb 6-1: Product: syz
[  270.177376][T10843] usb 6-1: Manufacturer: syz
[  270.179395][T10843] usb 6-1: SerialNumber: syz
[  270.184625][T10843] usb 6-1: config 0 descriptor??
[  270.189366][T11748] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  270.196765][T10843] usb 6-1: ucan: probing device on interface #0
[  270.199477][T10843] usb 6-1: ucan: invalid endpoint configuration
[  270.201925][T10843] usb 6-1: ucan: probe failed; try to update the device firmware
[  270.272384][T11740] vhci_hcd: connection reset by peer
[  270.276802][ T5862] vhci_hcd: stop threads
[  270.278591][ T5862] vhci_hcd: release socket
[  270.282628][ T5862] vhci_hcd: disconnect device
[  270.398477][T10843] usb 6-1: USB disconnect, device number 15
[  270.816473][ T6140] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  271.441603][T11774] loop6: detected capacity change from 0 to 1024
[  271.479273][T11776] loop5: detected capacity change from 0 to 128
[  271.500079][T11776] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  271.505930][T11776] ext4 filesystem being mounted at /355/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  271.517394][T11774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.549345][ T8805] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  271.625881][T10196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.829876][T11781] loop5: detected capacity change from 0 to 32768
[  271.971528][T11791] loop6: detected capacity change from 0 to 256
[  271.981380][T11791] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x467a0815, utbl_chksum : 0xe619d30d)
[  272.005964][T11791] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  272.040243][T11781] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  272.040266][T11781]   allowing incompatible features above 0.0: (unknown version)
[  272.040275][T11781]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  272.056981][T11781] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  272.060245][T11781] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  272.063793][T11781] bcachefs (loop5): Version upgrade required:
[  272.063793][T11781] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  272.063793][T11781] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  272.063793][T11781]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  272.066071][T11791] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000006)
[  272.096352][T11781] bcachefs (loop5): dropping and reconstructing all alloc info
[  272.473026][T11781] bcachefs (loop5): accounting_read... done
[  272.498358][T11781] bcachefs (loop5): alloc_read... done
[  272.501605][T11781] bcachefs (loop5): snapshots_read... done
[  272.505286][T11781] bcachefs (loop5): check_allocations... done
[  272.538671][T11781] bcachefs (loop5): going read-write
[  272.555333][T11781] bcachefs (loop5): done starting filesystem
[  272.605396][T11781] bcachefs (loop5): inode 536870913 truncated to 0 but i_blocks 24 (ondisk 24)
[  272.640772][ T8805] bcachefs (loop5): shutting down
[  272.643154][ T1090] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  272.643204][ T1090]   u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing
[  272.649164][ T8805] bcachefs (loop5): going read-only
[  272.649195][ T8805] bcachefs (loop5): finished waiting for writes to stop
[  272.653848][ T8805] bcachefs (loop5): flushing journal and stopping allocators, journal seq 11
[  272.744296][T11805] loop6: detected capacity change from 0 to 512
[  272.782636][T11805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.793441][ T1090] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  272.793457][ T1090]   u64s 5 type deleted 0:36:0 len 0 ver 0, , continuing
[  272.803413][ T1090] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  272.803428][ T1090]   u64s 5 type deleted 0:33:0 len 0 ver 0, , continuing
[  272.805328][T11805] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  272.828022][   T36] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  272.828038][   T36]   u64s 5 type deleted 0:46:0 len 0 ver 0, , continuing
[  272.855437][ T8805] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 11
[  272.878051][ T8805] bcachefs (loop5): unclean shutdown complete, journal seq 12
[  272.885290][ T8805] bcachefs (loop5): done going read-only, filesystem not clean
[  272.922560][ T8805] bcachefs (loop5): shutdown complete
[  273.431544][T10196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.772453][T11835] loop3: detected capacity change from 0 to 4096
[  273.811385][T11835] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  273.829996][T11835] ntfs3(loop3): failed to replay log file. Can't mount rw!
[  274.038323][T11827] loop6: detected capacity change from 0 to 32768
[  274.073822][T11827] read_mapping_page failed!
[  274.084849][T11827] jfs_create: dtInsert returned -EIO
[  274.094392][T11827] ERROR: (device loop6): jfs_create: 
[  274.094392][T11827] 
[  274.111097][T11827] ERROR: (device loop6): remounting filesystem as read-only
[  274.446214][T10843] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  274.587025][T11855] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2062'.
[  274.613009][T10843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.617096][T10843] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  274.621163][T10843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.624327][T11855] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2062'.
[  274.636476][T10843] usb 4-1: config 0 descriptor??
[  274.726522][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2064'.
[  274.855248][ T5886] vhci_hcd: vhci_device speed not set
[  275.035368][ T5899] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  275.069780][T10843] prodikeys 0003:041E:2801.0018: unknown main item tag 0x2
[  275.075273][T10843] prodikeys 0003:041E:2801.0018: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0
[  275.187553][ T5899] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  275.191486][ T5899] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  275.198463][ T5899] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  275.202103][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  275.206957][ T5899] usb 6-1: SerialNumber: syz
[  275.276202][T10843] usb 4-1: USB disconnect, device number 36
[  275.425869][ T5899] usb 6-1: 0:2 : does not exist
[  275.443815][ T5899] usb 6-1: USB disconnect, device number 16
[  275.472669][ T6138] udevd[6138]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  275.820740][T11870] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  276.110494][ T5913] usb 4-1: new low-speed USB device number 37 using dummy_hcd
[  276.125324][T11878] loop5: detected capacity change from 0 to 4096
[  276.175756][T11878] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  276.179996][T11878] ntfs3(loop5): Failed to load $Secure (-22).
[  276.182452][T11878] ntfs3(loop5): Failed to initialize $Secure (-22).
[  276.272618][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short
[  276.283452][ T5913] usb 4-1: config 7 has an invalid interface number: 67 but max is 0
[  276.287355][ T5913] usb 4-1: config 7 has no interface number 0
[  276.304333][ T5913] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  276.311034][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.314811][ T5913] usb 4-1: Product: 㯑
[  276.330192][T11884] input: syz1 as /devices/virtual/input/input17
[  276.549406][ T5913] usb 4-1: USB disconnect, device number 37
[  277.395217][ T5886] psmouse serio3: Failed to reset mouse on : -5
[  277.881150][T11913] loop6: detected capacity change from 0 to 2048
[  277.889367][T11913] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  277.896243][T11913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  278.121664][T11915] loop6: detected capacity change from 0 to 32768
[  278.134357][T11915] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  278.214569][T10196] ocfs2: Unmounting device (7,6) on (node local)
[  278.738374][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2096'.
[  278.888003][T11928] loop5: detected capacity change from 0 to 32768
[  279.285439][ T5913] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  279.435337][ T5913] usb 6-1: Using ep0 maxpacket: 16
[  279.446836][ T5913] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  279.450591][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.453891][ T5913] usb 6-1: Product: syz
[  279.459956][ T5913] usb 6-1: Manufacturer: syz
[  279.461977][ T5913] usb 6-1: SerialNumber: syz
[  279.479843][ T5913] r8152-cfgselector 6-1: Unknown version 0x0000
[  279.482539][ T5913] r8152-cfgselector 6-1: config 0 descriptor??
[  279.693569][ T5913] r8152-cfgselector 6-1: Unknown version 0x0000
[  279.701859][ T5913] r8152-cfgselector 6-1: bad CDC descriptors
[  279.713463][ T5913] r8152-cfgselector 6-1: USB disconnect, device number 17
[  279.728222][T11938] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2099'.
[  280.040048][T11942] loop6: detected capacity change from 0 to 32768
[  280.045410][T11942] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2101 (11942)
[  280.059800][T11942] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  280.064025][T11942] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  280.067643][T11942] BTRFS info (device loop6): disk space caching is enabled
[  280.070468][T11942] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  280.121656][T11942] BTRFS info (device loop6): rebuilding free space tree
[  280.138665][T11942] BTRFS info (device loop6): disabling free space tree
[  280.141572][T11942] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  280.148930][T11942] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  280.212954][T10196] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  280.580931][T11961] loop5: detected capacity change from 0 to 32768
[  280.583562][T11961] XFS: noikeep mount option is deprecated.
[  280.603743][T11961] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  280.630714][T11961] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  280.639575][T11961] XFS (loop5): Starting recovery (logdev: internal)
[  280.653747][T11961] XFS (loop5): Ending recovery (logdev: internal)
[  280.676266][T11961] XFS (loop5): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 
[  280.680693][T11961] XFS (loop5): Unmount and run xfs_repair
[  280.683196][T11961] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  280.687155][T11961] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  280.690447][T11961] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  280.693933][T11961] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  280.697616][T11961] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  280.701018][T11961] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  280.704027][T11961] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  280.707595][T11961] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  280.710567][T11961] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  280.713452][T11961] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x8 len 8 error 117
[  280.732983][ T8805] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  280.737163][ T8805] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair.
[  280.931245][T11979] loop5: detected capacity change from 0 to 4096
[  280.960193][T11977] loop6: detected capacity change from 0 to 32768
[  280.960736][T11979] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  280.963412][T11977] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section members_v2: device 0: too many buckets (got 2251799813685376, max 2147483583)
[  280.963412][T11977] members_v2 (size 152):
[  280.963412][T11977] Device:                        0
[  280.963412][T11977]   Label:                       (none)
[  280.963412][T11977]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  280.963412][T11977]   Size:                        1073741824
[  280.963412][T11977]   read errors:                 0
[  280.963412][T11977]   write errors:                0
[  280.963412][T11977]   checksum errors:             0
[  280.963412][T11977]   seqread iops:                0
[  280.963412][T11977]   seqwrite iops:               0
[  280.963412][T11977]   randread iops:               0
[  280.963412][T11977]   randwrite iops:              0
[  280.963412][T11977]   Bucket size:                 8388608
[  280.963412][T11977]   First bucket:                0
[  280.963412][T11977]   Buckets:                     2251799813685376
[  280.963412][T11977]   Last mount:                  1714681267
[  280.963412][T11977]   Last superblock write:       42
[  280.963412][T11977]   State:                       rw
[  280.963412][T11977]   Data allowed:                journal,btree,user
[  280.963412][T11977]   Has data:                    (none)
[  280.963412][T11977]   Btree allocated bitmap blocksize:256
[  280.963412][T11977]   Btree allocated bitmap:      00000000000000000000010000100000100110000
[  280.965457][T11977] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  281.034728][T11979] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  281.039234][T11979] ntfs3(loop5): Failed to initialize $Secure::$SII (-22).
[  281.042155][T11979] ntfs3(loop5): Failed to initialize $Secure (-22).
[  281.127542][T11983] loop6: detected capacity change from 0 to 512
[  281.141387][T11983] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  281.312146][T11985] loop5: detected capacity change from 0 to 32768
[  281.331123][T11985] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  281.345984][ T5886] misc userio: Buffer overflowed, userio client isn't keeping up
[  281.612097][T11999] loop5: detected capacity change from 0 to 4096
[  281.634142][T11999] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  281.636784][T11999] ntfs3(loop5): Failed to load $Extend (-22).
[  281.638708][T11999] ntfs3(loop5): Failed to initialize $Extend.
[  282.137374][T12021] mmap: syz.5.2127 (12021) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  282.515428][T10843] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  282.681516][T10843] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  282.686082][T10843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.690320][T12014] loop6: detected capacity change from 0 to 131072
[  282.692106][T10843] usb 6-1: config 0 descriptor??
[  282.775569][T12014] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  282.780258][T12014] F2FS-fs (loop6): Mounted with checkpoint version = 1b41e955
[  282.917037][T10843] kaweth 6-1:0.0: Firmware present in device.
[  283.108416][T10843] kaweth 6-1:0.0: Statistics collection: 0
[  283.110713][T10843] kaweth 6-1:0.0: Multicast filter limit: 0
[  283.113211][T10843] kaweth 6-1:0.0: MTU: 0
[  283.114925][T10843] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00
[  283.120141][ T5886] input: PS/2 Generic Mouse as /devices/serio3/input/input18
[  283.311299][T10843] kaweth 6-1:0.0: probe with driver kaweth failed with error -5
[  283.319877][T10843] usb 6-1: USB disconnect, device number 18
[  283.366476][ T5886] psmouse serio3: Failed to enable mouse on 
[  283.656579][T12036] loop3: detected capacity change from 0 to 32768
[  283.670617][T12036] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  283.701337][T12036] XFS (loop3): Ending clean mount
[  283.739585][ T6140] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  283.817642][T12042] loop6: detected capacity change from 0 to 32768
[  283.826310][T12042] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2135 (12042)
[  283.876686][T12042] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  283.881074][T12042] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  283.884514][T12042] BTRFS info (device loop6): disk space caching is enabled
[  283.925340][T12042] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  284.077877][T12065] loop5: detected capacity change from 0 to 1024
[  284.081304][T12042] BTRFS info (device loop6): rebuilding free space tree
[  284.099235][T12042] BTRFS info (device loop6): disabling free space tree
[  284.118296][T12042] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  284.122480][T12042] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  284.181844][ T1090] hfsplus: b-tree write err: -5, ino 8
[  284.203234][T10196] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  285.013173][T12089] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  285.814087][T12101] loop5: detected capacity change from 0 to 2048
[  287.340797][T12121] ptrace attach of "/syz-executor exec"[8805] was attempted by "/syz-executor exec"[12121]
[  287.365729][  T792] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  287.563779][  T792] usb 4-1: unable to get BOS descriptor or descriptor too short
[  287.581102][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  287.600593][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  287.612257][  T792] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39
[  287.623409][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.629194][  T792] usb 4-1: Product: syz
[  287.630801][  T792] usb 4-1: Manufacturer: syz
[  287.632273][  T792] usb 4-1: SerialNumber: syz
[  287.673316][  T792] usb 4-1: config 0 descriptor??
[  287.723608][  T792] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  287.930537][T12131] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095
[  287.961881][ T5900] usb 4-1: USB disconnect, device number 38
[  288.467494][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[  288.931030][T12147] loop5: detected capacity change from 0 to 2048
[  288.934880][T12147] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 98: 0x1f != 0x1e
[  288.939794][T12147] UDF-fs: warning (device loop5): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor.
[  288.943844][T12147] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2)
[  289.139169][T12159] loop3: detected capacity change from 0 to 128
[  289.218065][T12159] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  289.228100][T12159] ext4 filesystem being mounted at /696/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.334261][ T6140] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  289.685401][   T33] audit: type=1326 audit(1755246961.139:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12174 comm="syz.6.2177" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c2b8ebe9 code=0x7ffc0000
[  289.694253][   T33] audit: type=1326 audit(1755246961.149:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12174 comm="syz.6.2177" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c2b8ebe9 code=0x7ffc0000
[  289.709276][   T33] audit: type=1326 audit(1755246961.159:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12174 comm="syz.6.2177" exe="/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f91c2b8ebe9 code=0x7ffc0000
[  289.719022][   T33] audit: type=1326 audit(1755246961.159:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12174 comm="syz.6.2177" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c2b8ebe9 code=0x7ffc0000
[  289.726846][   T33] audit: type=1326 audit(1755246961.159:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12174 comm="syz.6.2177" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c2b8ebe9 code=0x7ffc0000
[  290.068390][T12197] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  290.068390][T12197] The task syz.5.2185 (12197) triggered the difference, watch for misbehavior.
[  290.160436][T12201] loop6: detected capacity change from 0 to 4096
[  290.173649][T12201] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  290.180262][ T6138] udevd[6138]: incorrect nilfs2 checksum on /dev/loop6
[  290.190964][T12201] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 4096)
[  290.194931][T12201] NILFS (loop6): mounting unchecked fs
[  290.200966][ T6138] udevd[6138]: incorrect nilfs2 checksum on /dev/loop6
[  290.202266][T12201] NILFS (loop6): invalid segment: Checksum error in segment payload
[  290.208629][T12201] NILFS (loop6): unable to fall back to spare super block
[  290.211816][T12201] NILFS (loop6): error -22 while searching super root
[  290.347468][T12203] loop6: detected capacity change from 0 to 4096
[  290.402842][T12203] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  290.412963][T12203] ntfs3(loop6): Failed to load $Extend (-22).
[  290.421423][T12203] ntfs3(loop6): Failed to initialize $Extend.
[  291.113401][T12223] loop5: detected capacity change from 0 to 1024
[  291.175723][ T8805] hfsplus: bad catalog entry type
[  291.199294][ T8805] hfsplus: bad catalog entry type
[  291.276242][   T36] hfsplus: b-tree write err: -5, ino 4
[  291.563808][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.820438][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.954147][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.281121][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode
[  292.284575][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode
[  292.308469][   T12] bridge0: port 3(netdevsim0) entered disabled state
[  292.389578][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.499760][T12236] smc: net device bond0 applied user defined pnetid SYZ2
[  293.186296][   T12] bridge_slave_1: left allmulticast mode
[  293.194040][   T12] bridge_slave_1: left promiscuous mode
[  293.215341][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.215786][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  293.232048][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  293.241486][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  293.246701][   T12] bridge_slave_0: left allmulticast mode
[  293.253300][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  293.260163][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  293.260213][   T12] bridge_slave_0: left promiscuous mode
[  293.264694][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.966326][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  293.971840][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  293.978492][   T12] bond0 (unregistering): Released all slaves
[  293.990632][   T12] bond1 (unregistering): Released all slaves
[  294.557009][   T12] hsr_slave_0: left promiscuous mode
[  294.560142][   T12] hsr_slave_1: left promiscuous mode
[  294.562765][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  294.572362][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  294.585525][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  294.588445][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  294.610551][   T12] veth1_macvtap: left promiscuous mode
[  294.612823][   T12] veth0_macvtap: left promiscuous mode
[  294.615030][   T12] veth1_vlan: left promiscuous mode
[  294.618555][   T12] veth0_vlan: left promiscuous mode
[  295.106982][   T12] team0 (unregistering): Port device team_slave_1 removed
[  295.157454][   T12] team0 (unregistering): Port device team_slave_0 removed
[  295.355431][ T5854] Bluetooth: hci0: command tx timeout
[  295.526159][   T12] batadv0 (unregistering): left allmulticast mode
[  295.879120][T12277] loop3: detected capacity change from 0 to 64
[  295.954588][T12277] syz.3.2216: attempt to access beyond end of device
[  295.954588][T12277] loop3: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  295.968704][T12237] chnl_net:caif_netlink_parms(): no params data found
[  296.375955][T12237] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.378961][T12237] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.397032][T12237] bridge_slave_0: entered allmulticast mode
[  296.410837][T12237] bridge_slave_0: entered promiscuous mode
[  296.433962][T12237] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.437996][T12237] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.440843][T12237] bridge_slave_1: entered allmulticast mode
[  296.444485][T12237] bridge_slave_1: entered promiscuous mode
[  296.461089][   T12] IPVS: stop unused estimator thread 0...
[  296.534055][T12237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  296.552174][T12237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.616938][T12237] team0: Port device team_slave_0 added
[  296.622052][T12237] team0: Port device team_slave_1 added
[  296.724645][T12237] batman_adv: batadv0: Adding interface: batadv_slave_0
[  296.740135][T12237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.767825][T12318] loop3: detected capacity change from 0 to 512
[  296.781402][T12318] EXT4-fs: Ignoring removed orlov option
[  296.790723][T12237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  296.824658][T12318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.843743][T12318] ext4 filesystem being mounted at /713/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  296.843763][T12237] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.843777][T12237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.869762][T12237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  296.989010][T12237] hsr_slave_0: entered promiscuous mode
[  296.992702][T12237] hsr_slave_1: entered promiscuous mode
[  297.010980][ T6140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.338994][T12237] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  297.359884][T12237] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  297.420134][T12237] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  297.436879][ T5854] Bluetooth: hci0: command tx timeout
[  297.444143][T12237] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  297.574434][T12237] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.622857][T12237] 8021q: adding VLAN 0 to HW filter on device team0
[  297.649638][T12353] macvtap0: entered allmulticast mode
[  297.651668][T12353] veth0_macvtap: entered allmulticast mode
[  297.668409][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.671305][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.747060][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.749855][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.888935][T12363] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2232'.
[  297.892532][T12363] 0: renamed from hsr_slave_1 (while UP)
[  297.904462][T12340] loop3: detected capacity change from 0 to 32768
[  297.910310][T12363] 0: entered allmulticast mode
[  297.912640][T12363] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  298.012623][T12237] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.329099][T12390] io-wq is not configured for unbound workers
[  298.363805][T12237] veth0_vlan: entered promiscuous mode
[  298.392714][T12237] veth1_vlan: entered promiscuous mode
[  298.449287][T12237] veth0_macvtap: entered promiscuous mode
[  298.458797][T12237] veth1_macvtap: entered promiscuous mode
[  298.503741][T12237] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.527620][T12237] batman_adv: batadv0: Interface activated: batadv_slave_1
[  298.561536][ T5862] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.635105][ T5862] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.638539][ T5862] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.672866][ T5862] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.821490][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.824116][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.854070][T12412] loop6: detected capacity change from 0 to 512
[  298.858232][T12410] loop3: detected capacity change from 0 to 16
[  298.861555][T12410] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  298.879653][T12412] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  298.888125][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.891471][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.894919][T12412] EXT4-fs (loop6): 1 truncate cleaned up
[  298.903763][T12412] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.952808][T12412] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.2244: Logical block already allocated
[  298.962267][T12412] EXT4-fs (loop6): Remounting filesystem read-only
[  299.041458][T10196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.279154][T12429] netlink: 'syz.3.2248': attribute type 3 has an invalid length.
[  299.285923][ T1090] wlan1: Trigger new scan to find an IBSS to join
[  299.542383][ T5854] Bluetooth: hci0: command tx timeout
[  299.777676][ T5886] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  299.945552][ T5886] usb 4-1: Using ep0 maxpacket: 16
[  299.951110][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  299.956877][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  299.964044][ T5886] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  299.971462][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.974648][ T5886] usb 4-1: Product: syz
[  299.980280][ T5886] usb 4-1: Manufacturer: syz
[  299.982217][ T5886] usb 4-1: SerialNumber: syz
[  299.992439][ T5886] usb 4-1: config 0 descriptor??
[  300.003203][ T5886] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  300.025520][ T5886] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  300.512822][T12452] loop7: detected capacity change from 0 to 40427
[  300.515885][T12452] F2FS-fs: heap/no_heap options were deprecated
[  300.531681][T12452] F2FS-fs (loop7): build fault injection rate: 19
[  300.534156][T12452] F2FS-fs (loop7): build fault injection type: 0x3bfe8c
[  300.547627][T12452] F2FS-fs (loop7): invalid crc value
[  300.560114][T12452] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  300.606831][T12452] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  300.609759][ T5886] em28xx 4-1:0.0: chip ID is em2874
[  300.612148][T12452] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  300.621155][T12452] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  300.630940][T12452] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  300.636581][T12452] syz.7.2254: attempt to access beyond end of device
[  300.636581][T12452] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  300.655612][T12237] syz-executor: attempt to access beyond end of device
[  300.655612][T12237] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  300.661920][T12237] CPU: 0 UID: 0 PID: 12237 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  300.661935][T12237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  300.661940][T12237] Call Trace:
[  300.661944][T12237]  <TASK>
[  300.661949][T12237]  dump_stack_lvl+0x189/0x250
[  300.661965][T12237]  ? __pfx_dump_stack_lvl+0x10/0x10
[  300.661975][T12237]  ? __pfx_queue_work_on+0x10/0x10
[  300.661983][T12237]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  300.661994][T12237]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  300.662010][T12237]  f2fs_handle_critical_error+0x37c/0x540
[  300.662026][T12237]  f2fs_write_end_io+0x886/0xb60
[  300.662043][T12237]  __submit_merged_bio+0x27a/0x6a0
[  300.662058][T12237]  __submit_merged_write_cond+0x255/0x530
[  300.662098][T12237]  f2fs_write_data_pages+0x261d/0x3000
[  300.662129][T12237]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  300.662149][T12237]  ? is_bpf_text_address+0x26/0x2b0
[  300.662174][T12237]  ? kernel_text_address+0xa5/0xe0
[  300.662186][T12237]  ? __kernel_text_address+0xd/0x40
[  300.662196][T12237]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  300.662214][T12237]  ? stack_trace_save+0x9c/0xe0
[  300.662227][T12237]  ? __lock_acquire+0xab9/0xd20
[  300.662247][T12237]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  300.662259][T12237]  do_writepages+0x32e/0x550
[  300.662278][T12237]  ? do_raw_spin_unlock+0x4d/0x240
[  300.662291][T12237]  filemap_fdatawrite+0x199/0x240
[  300.662302][T12237]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  300.662337][T12237]  ? do_raw_spin_unlock+0x4d/0x240
[  300.662349][T12237]  f2fs_sync_dirty_inodes+0x31f/0x830
[  300.662366][T12237]  f2fs_write_checkpoint+0x95a/0x1df0
[  300.662387][T12237]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  300.662419][T12237]  ? kill_f2fs_super+0x298/0x6c0
[  300.662431][T12237]  kill_f2fs_super+0x2c3/0x6c0
[  300.662442][T12237]  ? __pfx_kill_f2fs_super+0x10/0x10
[  300.662450][T12237]  ? radix_tree_delete_item+0x2b6/0x400
[  300.662470][T12237]  ? shrinker_free+0x2ce/0x3e0
[  300.662486][T12237]  deactivate_locked_super+0xbc/0x130
[  300.662503][T12237]  cleanup_mnt+0x425/0x4c0
[  300.662524][T12237]  ? lockdep_hardirqs_on+0x9c/0x150
[  300.662543][T12237]  task_work_run+0x1d4/0x260
[  300.662562][T12237]  ? __pfx_task_work_run+0x10/0x10
[  300.662575][T12237]  ? __x64_sys_umount+0x122/0x160
[  300.662595][T12237]  ? exit_to_user_mode_loop+0x40/0x110
[  300.662616][T12237]  exit_to_user_mode_loop+0xec/0x110
[  300.662635][T12237]  do_syscall_64+0x2bd/0x3b0
[  300.662653][T12237]  ? lockdep_hardirqs_on+0x9c/0x150
[  300.662669][T12237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.662681][T12237]  ? exc_page_fault+0x9f/0xf0
[  300.662698][T12237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.662710][T12237] RIP: 0033:0x7fb07238ff17
[  300.662724][T12237] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  300.662736][T12237] RSP: 002b:00007ffefc52f878 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  300.662751][T12237] RAX: 0000000000000000 RBX: 00007fb072411c05 RCX: 00007fb07238ff17
[  300.662760][T12237] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffefc52f930
[  300.662768][T12237] RBP: 00007ffefc52f930 R08: 0000000000000000 R09: 0000000000000000
[  300.662776][T12237] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffefc5309c0
[  300.662785][T12237] R13: 00007fb072411c05 R14: 00000000000497b4 R15: 00007ffefc530a00
[  300.662811][T12237]  </TASK>
[  300.662818][T12237] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  300.818354][  T792] usb 4-1: USB disconnect, device number 39
[  300.826357][  T792] em28xx 4-1:0.0: Disconnecting em28xx
[  300.839159][  T792] em28xx 4-1:0.0: Freeing device
[  301.433349][T12469] loop3: detected capacity change from 0 to 512
[  301.451120][T12469] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  301.464583][T12466] loop7: detected capacity change from 0 to 131072
[  301.465609][T12469] EXT4-fs (loop3): 1 truncate cleaned up
[  301.470199][T12466] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0)
[  301.472807][T12466] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  301.479653][T12466] F2FS-fs (loop7): invalid crc value
[  301.489910][T12469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.516687][T12466] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  301.524471][T12466] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  301.527790][T12466] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  301.568533][ T6140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.587376][ T5854] Bluetooth: hci0: command tx timeout
[  301.691704][T12479] loop3: detected capacity change from 0 to 128
[  301.830149][T12481] loop3: detected capacity change from 0 to 64
[  302.035743][T12485] loop3: detected capacity change from 0 to 4096
[  302.044689][T12485] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  302.629337][T12512] loop7: detected capacity change from 0 to 22
[  302.631954][T12512] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  302.648769][T12512] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  302.701128][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2276'.
[  302.819124][T12520] loop3: detected capacity change from 0 to 16
[  302.829422][T12520] erofs (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  302.833969][T12520] erofs (device loop3): mounted with root inode @ nid 36.
[  303.531168][T12540] loop3: detected capacity change from 0 to 40427
[  303.538923][T12540] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  303.554319][T12540] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  303.571545][T12540] F2FS-fs (loop3): build fault injection rate: 17008
[  303.580055][T12540] F2FS-fs (loop3): build fault injection type: 0x1f8
[  303.588099][ T5913] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  303.596345][T12540] F2FS-fs (loop3): invalid crc value
[  303.647653][T12540] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  303.652692][T12540] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  303.657032][T12540] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  303.683726][T12540] syz.3.2285: attempt to access beyond end of device
[  303.683726][T12540] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  303.692994][T12540] CPU: 0 UID: 0 PID: 12540 Comm: syz.3.2285 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  303.693010][T12540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  303.693016][T12540] Call Trace:
[  303.693020][T12540]  <TASK>
[  303.693024][T12540]  dump_stack_lvl+0x189/0x250
[  303.693041][T12540]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.693052][T12540]  ? __pfx_queue_work_on+0x10/0x10
[  303.693061][T12540]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  303.693072][T12540]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  303.693087][T12540]  f2fs_handle_critical_error+0x37c/0x540
[  303.693103][T12540]  f2fs_write_end_io+0x886/0xb60
[  303.693120][T12540]  __submit_merged_bio+0x27a/0x6a0
[  303.693135][T12540]  __submit_merged_write_cond+0x255/0x530
[  303.693164][T12540]  f2fs_write_data_pages+0x261d/0x3000
[  303.693177][T12540]  ? f2fs_new_node_folio+0x131/0xa40
[  303.693186][T12540]  ? f2fs_new_inode_folio+0xe0/0x140
[  303.693195][T12540]  ? f2fs_init_inode_metadata+0x10f/0xf70
[  303.693219][T12540]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  303.693265][T12540]  ? __lock_acquire+0xab9/0xd20
[  303.693281][T12540]  ? do_raw_spin_lock+0x121/0x290
[  303.693296][T12540]  ? do_raw_spin_unlock+0x4d/0x240
[  303.693305][T12540]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  303.693318][T12540]  do_writepages+0x32e/0x550
[  303.693334][T12540]  ? do_raw_spin_unlock+0x4d/0x240
[  303.693346][T12540]  filemap_fdatawrite+0x199/0x240
[  303.693357][T12540]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  303.693390][T12540]  ? do_raw_spin_unlock+0x4d/0x240
[  303.693402][T12540]  f2fs_sync_dirty_inodes+0x31f/0x830
[  303.693418][T12540]  f2fs_write_checkpoint+0x95a/0x1df0
[  303.693438][T12540]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  303.693464][T12540]  ? down_write+0x162/0x1f0
[  303.693472][T12540]  ? __pfx_down_write+0x10/0x10
[  303.693478][T12540]  ? __x64_sys_mknodat+0xa7/0xc0
[  303.693507][T12540]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.693520][T12540]  f2fs_issue_checkpoint+0x3ac/0x570
[  303.693531][T12540]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  303.693544][T12540]  ? do_raw_spin_lock+0x121/0x290
[  303.693559][T12540]  ? __pfx_wake_up_var+0x10/0x10
[  303.693575][T12540]  ? f2fs_sync_fs+0x200/0x3d0
[  303.693587][T12540]  f2fs_create+0x44b/0x5c0
[  303.693603][T12540]  vfs_create+0x24e/0x400
[  303.693616][T12540]  do_mknodat+0x3c6/0x4d0
[  303.693628][T12540]  ? __pfx_do_mknodat+0x10/0x10
[  303.693638][T12540]  ? getname_flags+0x1e5/0x540
[  303.693648][T12540]  __x64_sys_mknodat+0xa7/0xc0
[  303.693659][T12540]  do_syscall_64+0xfa/0x3b0
[  303.693669][T12540]  ? lockdep_hardirqs_on+0x9c/0x150
[  303.693680][T12540]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.693687][T12540]  ? exc_page_fault+0x9f/0xf0
[  303.693699][T12540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.693707][T12540] RIP: 0033:0x7ff69498ebe9
[  303.693716][T12540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.693722][T12540] RSP: 002b:00007ff6957e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[  303.693731][T12540] RAX: ffffffffffffffda RBX: 00007ff694bb5fa0 RCX: 00007ff69498ebe9
[  303.693737][T12540] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  303.693742][T12540] RBP: 00007ff694a11e19 R08: 0000000000000000 R09: 0000000000000000
[  303.693747][T12540] R10: 0000000000000706 R11: 0000000000000246 R12: 0000000000000000
[  303.693752][T12540] R13: 00007ff694bb6038 R14: 00007ff694bb5fa0 R15: 00007fff4975e8b8
[  303.693766][T12540]  </TASK>
[  303.693885][T12540] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  303.857161][ T5913] usb 8-1: config index 0 descriptor too short (expected 69, got 36)
[  303.859976][ T5913] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  303.865706][ T5913] usb 8-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  303.869924][ T5913] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.872420][ T5913] usb 8-1: Product: syz
[  303.874022][ T5913] usb 8-1: Manufacturer: syz
[  303.876346][ T5913] usb 8-1: SerialNumber: syz
[  303.879429][ T5913] usb 8-1: config 0 descriptor??
[  303.887136][ T5913] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  304.235504][ T1089] wlan1: Trigger new scan to find an IBSS to join
[  304.273308][T12555] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.297948][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.301048][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.493076][ T5913] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  304.495933][ T5913] gspca_pac7302 8-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  304.504560][ T5913] usb 8-1: USB disconnect, device number 2
[  304.632415][T12575] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2299'.
[  305.083341][T12583] netlink: 'syz.7.2301': attribute type 4 has an invalid length.
[  305.172472][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.540223][T12609] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2313'.
[  307.003892][T12650] loop3: detected capacity change from 0 to 1024
[  307.039590][T12650] hfsplus: bad catalog folder thread
[  307.077394][T12653] loop3: detected capacity change from 0 to 164
[  307.257243][T12665] loop3: detected capacity change from 0 to 128
[  307.277300][T12665] omfs: sysblock size (-58445445) is out of range
[  307.587038][T12669] loop3: detected capacity change from 0 to 32768
[  307.603276][T12669] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type clock overruns end of section
[  307.603276][T12669] clean (size 2912):
[  307.603276][T12669] flags:          0
[  307.603276][T12669] journal_seq:    10
[  307.603276][T12669] dev_usage: 
[  307.603276][T12669] usage: type=key_version v=0
[  307.603276][T12669] (unknown jset_entry_type 255)
[  307.603276][T12669] usage: type=reserved v=0
[  307.603276][T12669] usage: type=reserved v=0
[  307.603276][T12669] usage: type=reserved v=0
[  307.603276][T12669] data_usage: btree: 1/1 [0]=2816
[  307.603276][T12669] data_usage: journal: 1/1 [0]=0
[  307.603276][T12669] data_usage: user: 1/1 [0]=16
[  307.603276][T12669] dev_usage: dev=0  
[  307.603276][T12669]   free: buckets=83 sectors=0 fragmented=0
[  307.603276][T12669]   sb: buckets=25 sectors=6152 fragmented=248
[  307.603276][T12669]   journal: buckets=8 sectors=2048 fragmented=0
[  307.603276][T12669]   btree: buckets=11 sectors=2816 fragmented=0
[  307.603276][T12669]   user: buckets=1 sectors=16 fragmented=240
[  307.603276][T12669]   cached: buckets=0 sectors=0 fragmented=0
[  307.603276][T12669]   parity: buckets=0 sectors=0 fragmented=0
[  307.603276][T12669]   stripe: buckets=0 sectors=0 fragmented=0
[  307.603276][T12669]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  307.603276][T12669]   need_discard: buckets=0 sectors=0 fragmented=0
[  307.603276][T12669] 
[  307.647560][    C0] vkms_vblank_simulate: vblank timer overrun
[  307.672832][T12669] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  308.056884][T12677] loop3: detected capacity change from 0 to 256
[  308.454364][T12698] loop7: detected capacity change from 0 to 512
[  308.470482][T12698] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  308.497385][T12698] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  308.500526][T12698] System zones: 0-2, 18-18, 34-34
[  308.504430][T12698] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  308.510548][T12698] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.527766][T12698] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1792 out of range 0-5
[  308.532081][T12698] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  308.539660][T12698] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2352: Failed to acquire dquot type 1
[  308.572055][T12237] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.641046][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2355'.
[  308.881692][T12709] loop3: detected capacity change from 0 to 32768
[  309.789052][T12724] netlink: 'syz.3.2359': attribute type 2 has an invalid length.
[  309.817043][T12724] : entered promiscuous mode
[  310.097581][T12743] loop7: detected capacity change from 0 to 2048
[  310.132217][T12748] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  310.213441][T12754] netlink: 'syz.3.2366': attribute type 3 has an invalid length.
[  310.221690][T12754] netlink: 'syz.3.2366': attribute type 27 has an invalid length.
[  310.233678][T12743] NILFS (loop7): error -2 truncating bmap (ino=16)
[  310.264866][T12748] NILFS (loop7): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3)
[  310.275550][T12748] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=16)
[  310.280339][T12748] Remounting filesystem read-only
[  310.335552][T12237] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer
[  310.877565][T12780] loop6: detected capacity change from 0 to 128
[  310.963126][T12780] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  310.990399][T12780] ext4 filesystem being mounted at /289/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  311.012565][T12757] loop3: detected capacity change from 0 to 131072
[  311.016554][T12757] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  311.019692][T12757] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  311.026090][T12757] F2FS-fs (loop3): invalid crc value
[  311.108726][T12757] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  311.121013][T12757] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  311.123670][T10196] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  311.123734][T12757] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  311.262010][   T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  311.427423][   T10] usb 8-1: Using ep0 maxpacket: 8
[  311.512403][   T10] usb 8-1: config 0 has an invalid interface number: 151 but max is 1
[  311.522569][   T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  311.529894][   T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  311.533856][   T10] usb 8-1: config 0 has no interface number 0
[  311.546034][   T10] usb 8-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  311.550584][   T10] usb 8-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  311.561070][   T10] usb 8-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024
[  311.568890][   T10] usb 8-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  311.586815][   T10] usb 8-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  311.611076][   T10] usb 8-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  311.614898][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.623510][   T10] usb 8-1: Product: syz
[  311.626479][   T10] usb 8-1: Manufacturer: syz
[  311.628650][   T10] usb 8-1: SerialNumber: syz
[  311.642555][   T10] usb 8-1: config 0 descriptor??
[  311.669030][T12785] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  311.683774][   T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  311.930676][   T10] usb 8-1: USB disconnect, device number 3
[  312.001665][ T5846] udevd[5846]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory
[  312.020776][ T5846] udevd[5846]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory
[  312.661783][T12811] loop6: detected capacity change from 0 to 2048
[  312.707069][T12811] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  312.707440][T12814] overlay: Bad value for 'uuid'
[  312.734585][T12811] UDF-fs: warning (device loop6): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 3200 lbcount: 4096 extent 56+4096
[  313.029680][T12829] netlink: 'syz.7.2385': attribute type 1 has an invalid length.
[  313.044827][T12829] netlink: 'syz.7.2385': attribute type 1 has an invalid length.
[  313.462905][T12853] Bluetooth: MGMT ver 1.23
[  313.464566][T12853] Bluetooth: hci0: invalid length 0, exp 2 for type 2
[  313.735147][ T5899] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  313.784507][T12858] loop3: detected capacity change from 0 to 40427
[  313.792212][T12858] F2FS-fs (loop3): invalid crc value
[  313.852210][T12858] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  313.858262][T12858] F2FS-fs (loop3): Start checkpoint disabled!
[  313.864812][T12858] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  313.888678][ T5899] usb 8-1: config 0 has an invalid interface number: 41 but max is 0
[  313.892011][ T5899] usb 8-1: config 0 has no interface number 0
[  313.894532][ T5899] usb 8-1: config 0 interface 41 has no altsetting 0
[  313.899271][T12858] syz.3.2381: attempt to access beyond end of device
[  313.899271][T12858] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  313.910255][ T5899] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  313.913950][ T5899] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.925122][ T5899] usb 8-1: Product: syz
[  313.926857][ T5899] usb 8-1: Manufacturer: syz
[  313.928743][ T5899] usb 8-1: SerialNumber: syz
[  313.933672][ T5899] usb 8-1: config 0 descriptor??
[  313.953372][   T52] kworker/u9:2: attempt to access beyond end of device
[  313.953372][   T52] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  313.959300][   T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  313.959322][   T52] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  313.959331][   T52] Workqueue: writeback wb_workfn (flush-7:3)
[  313.959354][   T52] Call Trace:
[  313.959360][   T52]  <TASK>
[  313.959368][   T52]  dump_stack_lvl+0x189/0x250
[  313.959390][   T52]  ? __pfx_dump_stack_lvl+0x10/0x10
[  313.959407][   T52]  ? __pfx_queue_work_on+0x10/0x10
[  313.959420][   T52]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  313.959438][   T52]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  313.959467][   T52]  f2fs_handle_critical_error+0x37c/0x540
[  313.959493][   T52]  f2fs_write_end_io+0x886/0xb60
[  313.959524][   T52]  __submit_merged_bio+0x27a/0x6a0
[  313.959549][   T52]  __submit_merged_write_cond+0x255/0x530
[  313.959575][   T52]  f2fs_write_data_pages+0x261d/0x3000
[  313.959628][   T52]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  313.959662][   T52]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  313.959710][   T52]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  313.959740][   T52]  ? trace_f2fs_writepages+0x7f/0x200
[  313.959904][   T52]  ? f2fs_write_node_pages+0x478/0x6e0
[  313.959928][   T52]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  313.959961][   T52]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  313.959981][   T52]  do_writepages+0x32e/0x550
[  313.960006][   T52]  ? reacquire_held_locks+0x127/0x1d0
[  313.960020][   T52]  ? writeback_sb_inodes+0x384/0x1010
[  313.960046][   T52]  __writeback_single_inode+0x145/0xff0
[  313.960064][   T52]  ? do_raw_spin_unlock+0x4d/0x240
[  313.960085][   T52]  writeback_sb_inodes+0x6c7/0x1010
[  313.960129][   T52]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  313.960193][   T52]  ? rcu_is_watching+0x15/0xb0
[  313.960217][   T52]  wb_writeback+0x43b/0xaf0
[  313.960242][   T52]  ? queue_io+0x3d1/0x590
[  313.960263][   T52]  ? __pfx_wb_writeback+0x10/0x10
[  313.960289][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  313.960312][   T52]  wb_workfn+0x409/0xef0
[  313.960342][   T52]  ? __pfx_wb_workfn+0x10/0x10
[  313.960363][   T52]  ? __lock_acquire+0xab9/0xd20
[  313.960393][   T52]  ? process_scheduled_works+0x9ef/0x17b0
[  313.960413][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  313.960429][   T52]  ? process_scheduled_works+0x9ef/0x17b0
[  313.960441][   T52]  ? process_scheduled_works+0x9ef/0x17b0
[  313.960457][   T52]  process_scheduled_works+0xae1/0x17b0
[  313.960500][   T52]  ? __pfx_process_scheduled_works+0x10/0x10
[  313.960532][   T52]  worker_thread+0x8a0/0xda0
[  313.960548][   T52]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  313.960572][   T52]  ? __kthread_parkme+0x7b/0x200
[  313.960598][   T52]  kthread+0x711/0x8a0
[  313.960618][   T52]  ? __pfx_worker_thread+0x10/0x10
[  313.960632][   T52]  ? __pfx_kthread+0x10/0x10
[  313.960651][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  313.960667][   T52]  ? lockdep_hardirqs_on+0x9c/0x150
[  313.960683][   T52]  ? __pfx_kthread+0x10/0x10
[  313.960701][   T52]  ret_from_fork+0x3fc/0x770
[  313.960720][   T52]  ? __pfx_ret_from_fork+0x10/0x10
[  313.960741][   T52]  ? __switch_to_asm+0x39/0x70
[  313.960784][   T52]  ? __switch_to_asm+0x33/0x70
[  313.960799][   T52]  ? __pfx_kthread+0x10/0x10
[  313.960818][   T52]  ret_from_fork_asm+0x1a/0x30
[  313.960851][   T52]  </TASK>
[  313.960858][   T52] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  314.358347][ T5899] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  314.364568][ T5899] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71
[  314.374482][ T5899] usb 8-1: USB disconnect, device number 4
[  314.555225][ T5900] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  314.719316][ T5900] usb 4-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55
[  314.723065][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.726420][ T5900] usb 4-1: Product: syz
[  314.728192][ T5900] usb 4-1: Manufacturer: syz
[  314.730728][ T5900] usb 4-1: SerialNumber: syz
[  314.735903][ T5900] usb 4-1: config 0 descriptor??
[  314.741007][ T5900] gspca_main: sonixb-2.14.0 probing 0c45:60a8
[  315.061924][T12871] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[  315.067602][T12871] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  315.149139][ T5900] sonixb 4-1:0.0: Error writing register 01: -71
[  315.151888][ T5900] sonixb 4-1:0.0: probe with driver sonixb failed with error -71
[  315.169527][ T5900] usb 4-1: USB disconnect, device number 40
[  315.179510][T12875] loop7: detected capacity change from 0 to 512
[  315.189613][T12875] EXT4-fs: Ignoring removed nomblk_io_submit option
[  315.193444][T12875] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  315.203841][T12875] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  315.237241][T12875] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2404: Allocating blocks 41-42 which overlap fs metadata
[  315.250338][T12875] EXT4-fs (loop7): Remounting filesystem read-only
[  315.253894][T12875] Quota error (device loop7): write_blk: dquota write failed
[  315.260243][T12875] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5
[  315.263975][T12875] Quota error (device loop7): write_blk: dquota write failed
[  315.267357][T12875] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  315.270939][T12875] EXT4-fs (loop7): 1 truncate cleaned up
[  315.274361][T12875] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.307021][T12237] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.886291][T12894] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  316.558450][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.560837][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  316.831420][T12900] netlink: 'syz.6.2414': attribute type 4 has an invalid length.
[  316.982258][T12904] dlm: no local IP address has been set
[  316.986970][T12904] dlm: cannot start dlm midcomms -107
[  317.087809][T12898] loop3: detected capacity change from 0 to 32768
[  317.100908][T12908] binder: 12907:12908 ioctl c0306201 200000000640 returned -22
[  317.288989][T12915] loop6: detected capacity change from 0 to 512
[  317.327373][T12915] EXT4-fs: Ignoring removed nomblk_io_submit option
[  317.348274][T12915] EXT4-fs (loop6): Test dummy encryption mode enabled
[  317.377092][T12915] EXT4-fs (loop6): 1 truncate cleaned up
[  317.380728][T12915] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.509469][T12920] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap
[  317.583809][T12924] loop7: detected capacity change from 0 to 128
[  317.630035][T12924] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  317.652815][T12924] System zones: 1-3, 19-19, 35-36
[  317.690323][T12924] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  317.721848][T12924] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  317.763898][T12924] EXT4-fs warning (device loop7): ext4_group_extend:1891: can't read last block, resize aborted
[  317.905896][T12237] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  318.040033][T10196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.108188][T12938] loop7: detected capacity change from 0 to 1024
[  318.297097][   T32] hfsplus: b-tree write err: -5, ino 4
[  318.348970][T12954] loop6: detected capacity change from 0 to 128
[  319.139139][ T5878] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.245428][ T5878] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.323948][ T5878] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.382479][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  319.392044][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  319.399590][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  319.404237][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  319.410966][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  319.437328][ T5878] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.772944][ T5878] bridge_slave_1: left allmulticast mode
[  319.774915][ T5878] bridge_slave_1: left promiscuous mode
[  319.777458][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.782984][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.321803][T13006] loop7: detected capacity change from 0 to 256
[  320.798842][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  320.808309][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  320.844017][ T5878] bond0 (unregistering): Released all slaves
[  321.242086][T12977] chnl_net:caif_netlink_parms(): no params data found
[  321.512602][T12977] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.516591][ T5852] Bluetooth: hci2: command tx timeout
[  321.544362][T12977] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.556310][T12977] bridge_slave_0: entered allmulticast mode
[  321.567044][T12977] bridge_slave_0: entered promiscuous mode
[  321.635420][T13035] netem: change failed
[  321.637664][T12977] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.644787][T12977] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.654027][T12977] bridge_slave_1: entered allmulticast mode
[  321.659238][T12977] bridge_slave_1: entered promiscuous mode
[  321.729486][T12977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  321.782004][T13043] geneve2: entered promiscuous mode
[  321.783749][T13043] geneve2: entered allmulticast mode
[  321.809799][T12977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  321.886119][T12977] team0: Port device team_slave_0 added
[  321.900803][T12977] team0: Port device team_slave_1 added
[  321.981096][ T5878] hsr_slave_0: left promiscuous mode
[  321.990439][ T5878] 0: left promiscuous mode
[  321.992720][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  321.999571][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0
[  322.003070][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  322.007356][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1
[  322.023873][ T5878] veth1_macvtap: left promiscuous mode
[  322.026844][ T5878] veth0_macvtap: left allmulticast mode
[  322.029226][ T5878] veth0_macvtap: left promiscuous mode
[  322.035187][ T5878] veth1_vlan: left promiscuous mode
[  322.037264][ T5878] veth0_vlan: left promiscuous mode
[  322.111788][ T5878] team0 (unregistering): Port device batadv1 removed
[  322.206216][ T5913] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  322.370434][ T5913] usb 8-1: too many configurations: 65, using maximum allowed: 8
[  322.382855][ T5913] usb 8-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  322.400277][ T5913] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.425802][ T5913] usb 8-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  322.428729][ T5913] usb 8-1: No valid video chain found.
[  322.621771][ T5913] usb 8-1: USB disconnect, device number 5
[  322.744368][ T5878] team0 (unregistering): Port device team_slave_1 removed
[  322.803918][ T5878] team0 (unregistering): Port device team_slave_0 removed
[  323.438511][T12977] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.441045][T12977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.449792][T12977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.454104][T13052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2474'.
[  323.461859][T12977] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.472285][T12977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.485653][T12977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  323.585469][ T5852] Bluetooth: hci2: command tx timeout
[  323.614738][T12977] hsr_slave_0: entered promiscuous mode
[  323.631586][T12977] hsr_slave_1: entered promiscuous mode
[  323.634577][T12977] debugfs: 'hsr0' already exists in 'hsr'
[  323.655205][T12977] Cannot create hsr debugfs directory
[  324.119957][T12977] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  324.133435][T12977] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  324.140213][T12977] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  324.146779][T12977] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  324.221585][T12977] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.251105][T12977] 8021q: adding VLAN 0 to HW filter on device team0
[  324.260547][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.263388][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  324.277447][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.280308][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  324.445168][ T5900] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  324.546170][T12977] 8021q: adding VLAN 0 to HW filter on device batadv0
[  324.610002][ T5900] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  324.613624][ T5900] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.630298][ T5900] usb 8-1: config 0 descriptor??
[  324.640259][ T5900] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  324.899150][T12977] veth0_vlan: entered promiscuous mode
[  324.908236][T12977] veth1_vlan: entered promiscuous mode
[  324.937035][T12977] veth0_macvtap: entered promiscuous mode
[  324.943034][T12977] veth1_macvtap: entered promiscuous mode
[  324.960146][T12977] batman_adv: batadv0: Interface activated: batadv_slave_0
[  324.972975][T12977] batman_adv: batadv0: Interface activated: batadv_slave_1
[  325.032634][ T5878] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.040326][ T5878] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.044483][ T5900] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  325.052495][ T5900] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  325.069708][ T5878] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.073094][ T5878] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.203519][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.210786][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.253763][ T5886] usb 8-1: USB disconnect, device number 6
[  325.288505][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.291795][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.665803][ T5852] Bluetooth: hci2: command tx timeout
[  326.055184][   T33] audit: type=1326 audit(1755246997.509:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13139 comm="syz.8.2496" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62ca78ebe9 code=0x0
[  326.622871][T13154] loop3: detected capacity change from 0 to 40427
[  326.647353][T13154] F2FS-fs (loop3): build fault injection rate: 771
[  326.673692][T13154] F2FS-fs (loop3): invalid crc value
[  326.802402][T13154] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  326.813901][T13154] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  326.866398][ T5886] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  326.904355][ T6140] syz-executor: attempt to access beyond end of device
[  326.904355][ T6140] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  326.915383][ T6140] CPU: 0 UID: 0 PID: 6140 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  326.915406][ T6140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  326.915415][ T6140] Call Trace:
[  326.915420][ T6140]  <TASK>
[  326.915427][ T6140]  dump_stack_lvl+0x189/0x250
[  326.915450][ T6140]  ? __pfx_dump_stack_lvl+0x10/0x10
[  326.915512][ T6140]  ? __pfx_queue_work_on+0x10/0x10
[  326.915525][ T6140]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  326.915544][ T6140]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  326.915570][ T6140]  f2fs_handle_critical_error+0x37c/0x540
[  326.915596][ T6140]  f2fs_write_end_io+0x886/0xb60
[  326.915623][ T6140]  __submit_merged_bio+0x27a/0x6a0
[  326.915647][ T6140]  __submit_merged_write_cond+0x255/0x530
[  326.915671][ T6140]  f2fs_write_data_pages+0x261d/0x3000
[  326.915717][ T6140]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  326.915770][ T6140]  ? __mod_zone_page_state+0xd7/0x140
[  326.915796][ T6140]  ? folios_put_refs+0x560/0x640
[  326.915821][ T6140]  ? __lock_acquire+0xab9/0xd20
[  326.915847][ T6140]  ? do_raw_spin_lock+0x121/0x290
[  326.915878][ T6140]  ? do_raw_spin_unlock+0x4d/0x240
[  326.915894][ T6140]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  326.915911][ T6140]  do_writepages+0x32e/0x550
[  326.915937][ T6140]  ? do_raw_spin_unlock+0x4d/0x240
[  326.915954][ T6140]  filemap_fdatawrite+0x199/0x240
[  326.915970][ T6140]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  326.916017][ T6140]  ? do_raw_spin_unlock+0x4d/0x240
[  326.916036][ T6140]  f2fs_sync_dirty_inodes+0x31f/0x830
[  326.916062][ T6140]  f2fs_write_checkpoint+0x95a/0x1df0
[  326.916096][ T6140]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  326.916142][ T6140]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  326.916156][ T6140]  ? kfree+0x18e/0x440
[  326.916173][ T6140]  ? kill_f2fs_super+0x298/0x6c0
[  326.916191][ T6140]  kill_f2fs_super+0x2c3/0x6c0
[  326.916210][ T6140]  ? __pfx_kill_f2fs_super+0x10/0x10
[  326.916222][ T6140]  ? radix_tree_delete_item+0x2b6/0x400
[  326.916247][ T6140]  ? shrinker_free+0x2ce/0x3e0
[  326.916264][ T6140]  deactivate_locked_super+0xbc/0x130
[  326.916283][ T6140]  cleanup_mnt+0x425/0x4c0
[  326.916299][ T6140]  ? lockdep_hardirqs_on+0x9c/0x150
[  326.916319][ T6140]  task_work_run+0x1d4/0x260
[  326.916339][ T6140]  ? __pfx_task_work_run+0x10/0x10
[  326.916353][ T6140]  ? __x64_sys_umount+0x122/0x160
[  326.916375][ T6140]  ? exit_to_user_mode_loop+0x40/0x110
[  326.916416][ T6140]  exit_to_user_mode_loop+0xec/0x110
[  326.916434][ T6140]  do_syscall_64+0x2bd/0x3b0
[  326.916452][ T6140]  ? lockdep_hardirqs_on+0x9c/0x150
[  326.916499][ T6140]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.916512][ T6140]  ? exc_page_fault+0x9f/0xf0
[  326.916530][ T6140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.916542][ T6140] RIP: 0033:0x7ff69498ff17
[  326.916555][ T6140] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  326.916567][ T6140] RSP: 002b:00007fff4975db48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  326.916582][ T6140] RAX: 0000000000000000 RBX: 00007ff694a11c05 RCX: 00007ff69498ff17
[  326.916592][ T6140] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4975dc00
[  326.916599][ T6140] RBP: 00007fff4975dc00 R08: 0000000000000000 R09: 0000000000000000
[  326.916607][ T6140] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff4975ec90
[  326.916615][ T6140] R13: 00007ff694a11c05 R14: 000000000004fe35 R15: 00007fff4975ecd0
[  326.916637][ T6140]  </TASK>
[  326.917271][ T6140] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  327.043820][T13199] loop7: detected capacity change from 0 to 764
[  327.062576][ T5886] usb 9-1: Using ep0 maxpacket: 32
[  327.066538][ T5886] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  327.069388][ T5886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.130557][T13200] Symlink component flag not implemented
[  327.143068][T13200] Symlink component flag not implemented
[  327.155478][T13200] Symlink component flag not implemented (128)
[  327.158094][ T5886] usb 9-1: config 0 descriptor??
[  327.169208][T13200] Symlink component flag not implemented (122)
[  327.197319][ T5886] gspca_main: sunplus-2.14.0 probing 041e:400b
[  327.745481][ T5852] Bluetooth: hci2: command tx timeout
[  328.202917][ T5886] gspca_sunplus: reg_w_riv err -71
[  328.210772][ T5886] sunplus 9-1:0.0: probe with driver sunplus failed with error -71
[  328.234430][ T5886] usb 9-1: USB disconnect, device number 2
[  328.742609][T13237] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2523'.
[  328.757480][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2523'.
[  328.981283][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2529'.
[  329.414837][T13254] loop8: detected capacity change from 0 to 4096
[  329.857359][ T5913] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  329.876992][T13268] loop7: detected capacity change from 0 to 256
[  329.879525][T13268] exfat: Deprecated parameter 'namecase'
[  329.885384][T13268] exfat: Deprecated parameter 'namecase'
[  329.900541][T13268] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  330.019645][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short
[  330.023512][ T5913] usb 4-1: not running at top speed; connect to a high speed hub
[  330.031890][ T5913] usb 4-1: config 1 has an invalid interface descriptor of length 5, skipping
[  330.037258][ T5913] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  330.041183][ T5913] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 19
[  330.048027][ T5913] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4
[  330.052355][ T5913] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  330.066348][ T5913] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  330.070016][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.073232][ T5913] usb 4-1: Product: syz
[  330.075001][ T5913] usb 4-1: Manufacturer: syz
[  330.077381][ T5913] usb 4-1: SerialNumber: syz
[  330.215299][ T5899] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  330.299301][ T5913] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  330.318567][ T5913] usb 4-1: USB disconnect, device number 41
[  330.379978][ T5899] usb 8-1: config 0 has an invalid interface number: 156 but max is 0
[  330.384064][ T5899] usb 8-1: config 0 has no interface number 0
[  330.387712][ T5899] usb 8-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  330.398181][ T5899] usb 8-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  330.402073][ T5899] usb 8-1: config 0 interface 156 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  330.409154][ T5899] usb 8-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  330.412763][ T5899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.424039][ T5899] usb 8-1: config 0 descriptor??
[  330.431677][ T5899] gspca_main: spca561-2.14.0 probing abcd:cdee
[  330.633283][ T5899] spca561 8-1:0.156: probe with driver spca561 failed with error -22
[  330.637600][ T5899] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  330.640431][ T5899] usb 8-1: MIDIStreaming interface descriptor not found
[  330.699433][ T5899] usb 8-1: USB disconnect, device number 7
[  331.231375][T13295] loop7: detected capacity change from 0 to 1024
[  331.257258][T13295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.352423][T12237] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.589096][T13313] loop3: detected capacity change from 0 to 1024
[  331.611018][T13313] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  331.616891][T13315] veth2: entered promiscuous mode
[  331.652971][T13315] veth2: entered allmulticast mode
[  331.693048][   T33] audit: type=1804 audit(1755247003.149:153): pid=13320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2551" name="/newroot/835/file0/bus" dev="loop3" ino=840 res=1 errno=0
[  331.905688][ T5913] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  331.963057][T13330] loop3: detected capacity change from 0 to 2048
[  331.980534][T13330] hpfs: hpfs_map_sector(): read error
[  332.044754][T13336] netlink: del zone limit has 4 unknown bytes
[  332.069910][ T5913] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  332.083685][ T5913] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  332.091374][ T5913] usb 8-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00
[  332.094214][ T5913] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.098738][ T5913] usb 8-1: config 0 descriptor??
[  332.295578][   T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  332.448529][   T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  332.456682][   T24] usb 9-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  332.460402][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.463881][   T24] usb 9-1: Product: syz
[  332.465989][   T24] usb 9-1: Manufacturer: syz
[  332.467940][   T24] usb 9-1: SerialNumber: syz
[  332.472104][   T24] usb 9-1: config 0 descriptor??
[  332.685356][   T24] usb 9-1: USB disconnect, device number 3
[  332.710948][ T5913] hid-led 0003:1D34:0004.0019: hidraw0: USB HID v0.06 Device [HID 1d34:0004] on usb-dummy_hcd.7-1/input0
[  332.724338][ T5913] hid-led 0003:1D34:0004.0019: Dream Cheeky Webmail Notifier initialized
[  332.912347][   T24] usb 8-1: USB disconnect, device number 8
[  333.157864][T13342] loop3: detected capacity change from 0 to 32768
[  333.209345][T13342] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only
[  333.209359][T13342]   allowing incompatible features above 0.0: (unknown version)
[  333.209365][T13342]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  333.221906][T13342] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  333.229205][T13342] bcachefs (loop3): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, shutting down
[  333.229256][T13342]   error not marked as autofix and not in fsck
[  333.229264][T13342]   run fsck, and forward to devs so error can be marked for self-healing
[  333.229273][T13342]   emergency read only at seq 0
[  333.243580][T13342] bcachefs (loop3): error in recovery: fsck_errors_not_fixed
[  333.246738][T13342] bcachefs (loop3): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed
[  333.250560][T13342] bcachefs (loop3): shutting down
[  333.270275][T13342] bcachefs (loop3): shutdown complete
[  333.634519][T13350] loop8: detected capacity change from 0 to 32768
[  333.649201][T13350] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  333.701310][T13350] XFS (loop8): Ending clean mount
[  333.706642][T13350] XFS (loop8): Quotacheck needed: Please wait.
[  333.740091][T13350] XFS (loop8): Quotacheck: Done.
[  333.771618][T12977] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  333.978992][T13364] netlink: 'syz.8.2571': attribute type 1 has an invalid length.
[  333.981627][T13364] netlink: 236 bytes leftover after parsing attributes in process `syz.8.2571'.
[  334.005968][T13342] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed
[  334.022387][T13366] syzkaller1: entered promiscuous mode
[  334.026807][T13366] syzkaller1: entered allmulticast mode
[  334.133559][T13369] sctp: [Deprecated]: syz.3.2573 (pid 13369) Use of int in maxseg socket option.
[  334.133559][T13369] Use struct sctp_assoc_value instead
[  334.443522][T13389] cgroup: Bad value for 'name'
[  334.445888][ T5913] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  334.548985][   T33] audit: type=1400 audit(1755247006.009:154): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6DAB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36FD3578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F04132163
[  334.596231][ T5913] usb 9-1: Using ep0 maxpacket: 16
[  334.648092][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2582'.
[  334.673884][ T5913] usb 9-1: unable to get BOS descriptor or descriptor too short
[  334.677575][ T5913] usb 9-1: config 9 has an invalid interface number: 111 but max is 0
[  334.680319][ T5913] usb 9-1: config 9 has no interface number 0
[  334.682323][ T5913] usb 9-1: config 9 interface 111 has no altsetting 0
[  334.700450][ T5913] usb 9-1: New USB device found, idVendor=05ac, idProduct=2536, bcdDevice=e0.5e
[  334.703468][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.706276][ T5913] usb 9-1: Product: syz
[  334.707710][ T5913] usb 9-1: Manufacturer: syz
[  334.709192][ T5913] usb 9-1: SerialNumber: syz
[  334.935275][T10843] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[  334.950143][ T5913] usb 9-1: USB disconnect, device number 4
[  335.109353][T10843] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  335.114143][T10843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4
[  335.125818][T10843] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  335.129568][T10843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.132770][T10843] usb 8-1: Product: syz
[  335.135544][T10843] usb 8-1: Manufacturer: syz
[  335.137454][T10843] usb 8-1: SerialNumber: syz
[  335.148733][T10843] usb 8-1: config 0 descriptor??
[  335.159922][T10843] em28xx 8-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0)
[  335.165713][T10843] em28xx 8-1:0.0: Device initialization failed.
[  335.168992][T10843] em28xx 8-1:0.0: Device must be connected to a high-speed USB 2.0 port.
[  335.364927][   T24] usb 8-1: USB disconnect, device number 9
[  336.305802][T13429] loop3: detected capacity change from 0 to 512
[  336.390648][T13429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  336.437079][T13429] ext4 filesystem being mounted at /852/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  336.451346][T13429] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 25 (only 1 groups)
[  336.514690][ T6140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.725298][ T5913] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  336.837700][T13441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2597'.
[  336.885174][ T5913] usb 8-1: Using ep0 maxpacket: 32
[  336.889627][ T5913] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  336.901817][ T5913] usb 8-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=cc.40
[  336.905812][ T5913] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.911415][ T5913] usb 8-1: Product: syz
[  336.913175][ T5913] usb 8-1: Manufacturer: syz
[  336.914978][ T5913] usb 8-1: SerialNumber: syz
[  336.922051][ T5913] usb 8-1: config 0 descriptor??
[  336.928136][ T5913] gspca_main: pac7311-2.14.0 probing 093a:2603
[  337.169266][T13443] loop8: detected capacity change from 0 to 65536
[  337.205902][T13443] XFS (loop8): DAX unsupported by block device. Turning off DAX.
[  337.209909][T13443] XFS (loop8): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  337.247887][T13443] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x40.
[  337.257241][T13443] XFS (loop8): Starting recovery (logdev: internal)
[  337.272127][T13443] XFS (loop8): Ending recovery (logdev: internal)
[  337.276419][T13443] XFS (loop8): Quotacheck needed: Please wait.
[  337.320332][T13443] XFS (loop8): Quotacheck: Done.
[  337.324960][T13443] XFS (loop8): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  337.346743][ T5913] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71
[  337.349575][ T5913] pac7311 8-1:0.0: probe with driver pac7311 failed with error -71
[  337.367275][ T5913] usb 8-1: USB disconnect, device number 10
[  337.418052][T13445] loop3: detected capacity change from 0 to 32768
[  337.528262][T13445] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  337.586626][T13445] XFS (loop3): Ending clean mount
[  337.652032][ T6140] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  339.106873][T13488] netlink: 'syz.8.2605': attribute type 2 has an invalid length.
[  339.848801][T13506] loop8: detected capacity change from 0 to 256
[  339.858490][T13506] exfat: Bad value for 'gid'
[  339.860191][T13506] exfat: Bad value for 'gid'
[  340.216030][T13509] can: request_module (can-proto-0) failed.
[  340.288590][T13516] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  340.304916][T13518] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2615'.
[  340.382423][T13518] loop7: detected capacity change from 0 to 4096
[  340.416998][T13518] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  340.424170][T13518] ntfs3(loop7): Failed to load $Extend (-22).
[  340.428897][T13518] ntfs3(loop7): Failed to initialize $Extend.
[  340.712669][   T33] audit: type=1800 audit(1755247012.169:155): pid=13536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2621" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  341.458394][T13580] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2637'.
[  341.485220][T13565] loop3: detected capacity change from 0 to 40427
[  341.488818][T13565] F2FS-fs (loop3): build fault injection rate: 771
[  341.503640][T13565] F2FS-fs (loop3): invalid crc value
[  341.506191][T10301] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  341.513468][T13580] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2637'.
[  341.517991][T10301] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  341.520889][T10301] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  341.528471][T10301] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  341.559421][T13565] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  341.563128][T13565] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  341.634702][T13588] loop7: detected capacity change from 0 to 2048
[  341.682614][   T33] audit: type=1800 audit(1755247013.139:156): pid=13588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2639" name="file0" dev="loop7" ino=834 res=0 errno=0
[  342.156291][T12459] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  342.326765][T12459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.335798][T12459] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  342.341081][T12459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.358398][T12459] usb 4-1: config 0 descriptor??
[  342.481637][T13632] loop8: detected capacity change from 0 to 64
[  342.500038][T13634] loop7: detected capacity change from 0 to 8
[  342.790687][T12459] nzxt-kraken2 0003:1E71:170E.001A: unexpected long global item
[  342.794252][T12459] nzxt-kraken2 0003:1E71:170E.001A: hid parse failed with -22
[  342.816001][T12459] nzxt-kraken2 0003:1E71:170E.001A: probe with driver nzxt-kraken2 failed with error -22
[  342.851854][T13648] netlink: 'syz.8.2657': attribute type 1 has an invalid length.
[  342.894343][T13648] 8021q: adding VLAN 0 to HW filter on device bond1
[  342.914499][T13648] vlan2: entered allmulticast mode
[  342.917193][T13648] bond1: entered allmulticast mode
[  343.004352][T12459] usb 4-1: USB disconnect, device number 42
[  343.152923][T13656] loop7: detected capacity change from 0 to 32768
[  343.161225][T13656] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2660 (13656)
[  343.188002][T13656] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  343.191198][T13656] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  343.194098][T13656] BTRFS info (device loop7): disk space caching is enabled
[  343.197069][T13656] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  343.244402][T13656] BTRFS info (device loop7): rebuilding free space tree
[  343.260940][T13656] BTRFS info (device loop7): disabling free space tree
[  343.263156][T13656] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  343.272260][T13656] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  343.382455][   T12] BTRFS info (device loop7): qgroup scan completed (inconsistency flag cleared)
[  343.456785][   T12] BTRFS info (device loop7): qgroup scan completed (inconsistency flag cleared)
[  343.485958][T12237] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  343.576542][T13449] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  343.587790][T13689] input: syz0 as /devices/virtual/input/input20
[  343.737054][T13449] usb 9-1: config index 0 descriptor too short (expected 240, got 45)
[  343.739812][T13449] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  343.742819][T13449] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.771565][T13449] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  343.781630][T13449] usb 9-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.28
[  343.784936][T13449] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.807861][T13449] usb 9-1: config 0 descriptor??
[  343.971667][T13706] loop7: detected capacity change from 0 to 1024
[  344.007169][  T743] hfsplus: b-tree write err: -5, ino 4
[  344.095232][T12459] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  344.245724][T13449] kye 0003:0458:0087.001B: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.8-1/input0
[  344.247316][T12459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.257834][T12459] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  344.263147][T12459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.275296][T12459] usb 4-1: config 0 descriptor??
[  344.441081][T13238] usb 9-1: USB disconnect, device number 5
[  344.731058][T12459] dragonrise 0003:0079:0006.001C: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.3-1/input0
[  344.735206][T12459] dragonrise 0003:0079:0006.001C: no inputs found
[  344.737493][T12459] dragonrise 0003:0079:0006.001C: force feedback init failed
[  344.918972][T12459] usb 4-1: USB disconnect, device number 43
[  345.795403][ T5886] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  345.874353][T13738] loop3: detected capacity change from 0 to 512
[  345.914464][T13738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  345.921544][T13738] ext4 filesystem being mounted at /881/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  345.969425][ T5886] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  345.973756][ T5886] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3
[  345.979112][ T5886] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  345.982752][ T5886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.996415][ T5886] usb 9-1: config 0 descriptor??
[  346.026102][ T6140] VFS: Lookup of '' in ext4 loop3 would have caused loop
[  346.029516][ T6140] VFS: Lookup of '' in ext4 loop3 would have caused loop
[  346.077655][ T9418] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.412679][ T5886] Bluetooth: Can't get version to change to load ram patch err
[  346.417643][ T5886] Bluetooth: Loading patch file failed
[  346.419908][ T5886] ath3k 9-1:0.0: probe with driver ath3k failed with error -71
[  346.426181][ T5886] usb 9-1: USB disconnect, device number 6
[  346.691134][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  346.697449][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  346.700483][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  346.703337][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  346.706247][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  347.039684][   T33] audit: type=1326 audit(1755247018.499:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.7.2696" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb07238ebe9 code=0x0
[  347.061203][T13743] chnl_net:caif_netlink_parms(): no params data found
[  347.141971][T13743] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.144192][T13743] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.147417][T13743] bridge_slave_0: entered allmulticast mode
[  347.150293][T13743] bridge_slave_0: entered promiscuous mode
[  347.155629][T13743] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.157793][T13743] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.160267][T13743] bridge_slave_1: entered allmulticast mode
[  347.164368][T13743] bridge_slave_1: entered promiscuous mode
[  347.198681][T13743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.204742][T13743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.234574][T13743] team0: Port device team_slave_0 added
[  347.240142][T13743] team0: Port device team_slave_1 added
[  347.259036][T13743] batman_adv: batadv0: Adding interface: batadv_slave_0
[  347.261604][T13743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.272298][T13743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  347.279167][T13743] batman_adv: batadv0: Adding interface: batadv_slave_1
[  347.281624][T13743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.292176][T13743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.321529][T13743] hsr_slave_0: entered promiscuous mode
[  347.324450][T13743] hsr_slave_1: entered promiscuous mode
[  347.327550][T13743] debugfs: 'hsr0' already exists in 'hsr'
[  347.329866][T13743] Cannot create hsr debugfs directory
[  347.472106][T13743] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  347.476591][T13743] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  347.480832][T13743] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  347.487355][T13743] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  347.548723][T13743] 8021q: adding VLAN 0 to HW filter on device bond0
[  347.567833][T13743] 8021q: adding VLAN 0 to HW filter on device team0
[  347.577897][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.580687][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.598612][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.601201][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.754508][T13743] 8021q: adding VLAN 0 to HW filter on device batadv0
[  347.977156][T13743] veth0_vlan: entered promiscuous mode
[  348.001931][T13743] veth1_vlan: entered promiscuous mode
[  348.058612][T13743] veth0_macvtap: entered promiscuous mode
[  348.069627][T13743] veth1_macvtap: entered promiscuous mode
[  348.090401][T13743] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.101723][T13743] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.117678][ T5878] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.127202][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.130444][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.133628][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.210145][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.212642][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.239770][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.242939][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.315117][T13449] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  348.431355][T13784] loop7: detected capacity change from 0 to 40427
[  348.446871][T13784] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504)
[  348.449495][T13784] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  348.462859][T13784] F2FS-fs (loop7): invalid crc value
[  348.467698][T13449] usb 9-1: Using ep0 maxpacket: 32
[  348.471042][T13449] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[  348.474463][T13449] usb 9-1: config 0 interface 0 has no altsetting 0
[  348.486644][T13449] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  348.491406][T13784] F2FS-fs (loop7): Wrong journal entry on segno 4294939138
[  348.505249][T13449] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.509714][T13449] usb 9-1: config 0 descriptor??
[  348.528359][T13784] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-117)
[  348.731020][T13800] loop9: detected capacity change from 0 to 32768
[  348.785640][ T5854] Bluetooth: hci1: command tx timeout
[  348.803981][T13800] (syz.9.2705,13800,1):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  348.810517][T13800] (syz.9.2705,13800,1):ocfs2_read_locked_inode:597 ERROR: status = -12
[  348.813401][T13800] (syz.9.2705,13800,1):_ocfs2_get_system_file_inode:144 ERROR: status = -12
[  348.819948][T13800] (syz.9.2705,13800,1):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=8, slot=0
[  348.828337][T13800] (syz.9.2705,13800,1):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  348.831343][T13800] (syz.9.2705,13800,1):ocfs2_mount_volume:1758 ERROR: status = -22
[  348.844813][T13800] (syz.9.2705,13800,1):ocfs2_fill_super:1177 ERROR: status = -22
[  349.049665][T13817] loop9: detected capacity change from 0 to 512
[  349.066987][T13817] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  349.090418][T13817] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 546, start 22000003)
[  349.098466][T13817] FAT-fs (loop9): Filesystem has been set read-only
[  349.102558][T13449] corsair-cpro 0003:1B1C:0C10.001D: unknown main item tag 0x0
[  349.104882][T13449] corsair-cpro 0003:1B1C:0C10.001D: unknown main item tag 0x0
[  349.107359][T13449] corsair-cpro 0003:1B1C:0C10.001D: unknown main item tag 0x0
[  349.109647][T13449] corsair-cpro 0003:1B1C:0C10.001D: unknown main item tag 0x0
[  349.112011][T13449] corsair-cpro 0003:1B1C:0C10.001D: unknown main item tag 0x0
[  349.113905][T13817] FAT-fs (loop9): error, invalid access to FAT (entry 0x22000003)
[  349.116065][T13449] corsair-cpro 0003:1B1C:0C10.001D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.8-1/input0
[  349.177507][T13449] corsair-cpro 0003:1B1C:0C10.001D: probe with driver corsair-cpro failed with error -38
[  349.202046][T13449] usb 9-1: USB disconnect, device number 7
[  349.738597][T13828] netlink: 284 bytes leftover after parsing attributes in process `syz.8.2717'.
[  350.197476][T13832] loop8: detected capacity change from 0 to 32768
[  350.256339][T13832] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  350.309530][T13832] XFS (loop8): Ending clean mount
[  350.624762][T12977] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  350.664975][T13855] binder: 13854:13855 ioctl c0046209 0 returned -22
[  350.742818][T13857] loop9: detected capacity change from 0 to 256
[  350.761211][T13857] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  350.766842][T13857] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[  350.772975][T13857] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  350.837884][   T33] audit: type=1800 audit(1755247022.299:158): pid=13857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2727" name="file1" dev="loop9" ino=1048655 res=0 errno=0
[  350.865351][ T5854] Bluetooth: hci1: command tx timeout
[  350.980023][T13859] netlink: 'syz.7.2728': attribute type 21 has an invalid length.
[  350.982919][T13859] netlink: 'syz.7.2728': attribute type 1 has an invalid length.
[  351.263083][T13862] loop9: detected capacity change from 0 to 32768
[  351.299578][T13862] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  351.619186][T13862] XFS (loop9): Ending clean mount
[  351.634024][T13862] XFS (loop9): Quotacheck needed: Please wait.
[  351.700955][T13862] XFS (loop9): Quotacheck: Done.
[  351.722371][T13743] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  352.011880][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2735'.
[  352.091392][T13894] loop8: detected capacity change from 0 to 256
[  352.101736][T13896] gfs2: gfs2 mount does not exist
[  352.123303][T13894] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  352.153060][   T33] audit: type=1800 audit(1755247023.609:159): pid=13894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2738" name="file2" dev="loop8" ino=1048656 res=0 errno=0
[  352.205212][   T33] audit: type=1800 audit(1755247023.629:160): pid=13894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2738" name="file2" dev="loop8" ino=1048656 res=0 errno=0
[  352.530115][T13912] loop9: detected capacity change from 0 to 1024
[  352.615619][T13912] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  352.620972][T13912] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  352.674092][T13743] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.945594][ T5854] Bluetooth: hci1: command tx timeout
[  353.001015][T13916] loop8: detected capacity change from 0 to 32768
[  353.295326][T13927] loop7: detected capacity change from 0 to 32768
[  353.360090][T13927] XFS (loop7): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  458.515051][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  458.517127][    C1] rcu: 	0-...!: (1 GPs behind) idle=86ec/1/0x4000000000000000 softirq=76747/76766 fqs=0
[  458.522556][    C1] rcu: 	(detected by 1, t=10506 jiffies, g=62865, q=416 ncpus=2)
[  458.525124][    C1] Sending NMI from CPU 1 to CPUs 0:
[  458.525174][    C0] NMI backtrace for cpu 0
[  458.525189][    C0] CPU: 0 UID: 0 PID: 13942 Comm: syz.8.2755 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  458.525200][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  458.525205][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x25/0x110
[  458.525222][    C0] Code: 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 54 53 48 83 e4 e0 48 83 ec 60 48 89 f3 49 89 fe 65 48 8b 05 eb 61 24 07 <48> 89 44 24 48 48 c7 04 24 b3 8a b5 41 48 c7 44 24 08 a0 1a a3 8d
[  458.525228][    C0] RSP: 0018:ffffc90000007be0 EFLAGS: 00000082
[  458.525236][    C0] RAX: fa8267975c486000 RBX: 0000000000000802 RCX: 0000000000000001
[  458.525241][    C0] RDX: 0000000000000001 RSI: 0000000000000802 RDI: ffffffff99d21cf8
[  458.525246][    C0] RBP: ffffc90000007c78 R08: 0000000000000003 R09: 0000000000000004
[  458.525250][    C0] R10: dffffc0000000000 R11: fffff52000000f6c R12: ffff88802732dc58
[  458.525256][    C0] R13: ffff88802732dc40 R14: ffffffff99d21cf8 R15: 1ffff11004e65b8a
[  458.525261][    C0] FS:  00007f62cb67e6c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  458.525267][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  458.525272][    C0] CR2: 00007f551bed27b5 CR3: 0000000122e32000 CR4: 00000000000006f0
[  458.525294][    C0] Call Trace:
[  458.525300][    C0]  <IRQ>
[  458.525304][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  458.525314][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  458.525325][    C0]  debug_object_activate+0x2e2/0x420
[  458.525337][    C0]  enqueue_hrtimer+0x30/0x3a0
[  458.525346][    C0]  __hrtimer_run_queues+0x656/0xc60
[  458.525357][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  458.525400][    C0]  hrtimer_interrupt+0x45b/0xaa0
[  458.525417][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  458.525427][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  458.525437][    C0]  </IRQ>
[  458.525440][    C0]  <TASK>
[  458.525443][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  458.525451][    C0] RIP: 0010:__unix_dgram_recvmsg+0x640/0xd60
[  458.525461][    C0] Code: 08 84 c0 0f 85 3f 06 00 00 41 80 0e 20 eb 0a e8 26 80 98 f7 48 8b 54 24 20 48 83 c2 10 4c 89 e7 89 de 44 89 e9 e8 00 1f 37 ff <89> c3 89 84 24 30 01 00 00 31 ff 89 c6 e8 3e 84 98 f7 85 db 74 14
[  458.525467][    C0] RSP: 0018:ffffc900032ff6e0 EFLAGS: 00000282
[  458.525473][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000
[  458.525478][    C0] RDX: ffffc900083a9000 RSI: 000000000007ffff RDI: 0000000000080000
[  458.525482][    C0] RBP: ffffc900032ff870 R08: 0000000000000000 R09: ffffffff895e4cc0
[  458.525487][    C0] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888107707980
[  458.525492][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffff9200065feec
[  458.525498][    C0]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  458.525512][    C0]  ? __pfx___unix_dgram_recvmsg+0x10/0x10
[  458.525524][    C0]  ? unix_dgram_recvmsg+0xb1/0xd0
[  458.525532][    C0]  ? __pfx_unix_dgram_recvmsg+0x10/0x10
[  458.525541][    C0]  sock_recvmsg_nosec+0x186/0x1c0
[  458.525551][    C0]  ____sys_recvmsg+0x3aa/0x460
[  458.525561][    C0]  ? __pfx_____sys_recvmsg+0x10/0x10
[  458.525572][    C0]  ? import_iovec+0x74/0xa0
[  458.525581][    C0]  ___sys_recvmsg+0x1b5/0x510
[  458.525590][    C0]  ? __pfx____sys_recvmsg+0x10/0x10
[  458.525603][    C0]  ? __might_fault+0xb0/0x130
[  458.525613][    C0]  do_recvmmsg+0x307/0x770
[  458.525622][    C0]  ? __pfx_do_recvmmsg+0x10/0x10
[  458.525629][    C0]  ? __lock_acquire+0xab9/0xd20
[  458.525641][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  458.525650][    C0]  ? sched_clock+0x3f/0x60
[  458.525661][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  458.525670][    C0]  __x64_sys_recvmmsg+0x190/0x240
[  458.525679][    C0]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  458.525687][    C0]  ? do_syscall_64+0xbe/0x3b0
[  458.525698][    C0]  do_syscall_64+0xfa/0x3b0
[  458.525707][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.525714][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  458.525722][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.525729][    C0] RIP: 0033:0x7f62ca78ebe9
[  458.525737][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  458.525743][    C0] RSP: 002b:00007f62cb67e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  458.525750][    C0] RAX: ffffffffffffffda RBX: 00007f62ca9b6090 RCX: 00007f62ca78ebe9
[  458.525755][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  458.525760][    C0] RBP: 00007f62ca811e19 R08: 0000000000000000 R09: 0000000000000000
[  458.525764][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  458.525768][    C0] R13: 00007f62ca9b6128 R14: 00007f62ca9b6090 R15: 00007ffd3e2c49c8
[  458.525776][    C0]  </TASK>
[  458.526153][    C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g62865 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  458.683926][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  458.687333][    C1] rcu: RCU grace-period kthread stack dump:
[  458.689169][    C1] task:rcu_preempt     state:R  running task     stack:27160 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  458.693308][    C1] Call Trace:
[  458.694395][    C1]  <TASK>
[  458.695365][    C1]  __schedule+0x1798/0x4cc0
[  458.696789][    C1]  ? __lock_acquire+0xab9/0xd20
[  458.698295][    C1]  ? __pfx___schedule+0x10/0x10
[  458.699814][    C1]  ? schedule+0x91/0x360
[  458.701124][    C1]  schedule+0x165/0x360
[  458.702420][    C1]  schedule_timeout+0x12b/0x270
[  458.703921][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  458.705700][    C1]  ? __pfx_process_timeout+0x10/0x10
[  458.707842][    C1]  ? prepare_to_swait_event+0x341/0x380
[  458.710076][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[  458.712080][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  458.714112][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.716233][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  458.718393][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  458.720566][    C1]  ? finish_swait+0xcd/0x1f0
[  458.722058][    C1]  rcu_gp_kthread+0x99/0x390
[  458.723507][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  458.725110][    C1]  ? __kthread_parkme+0x7b/0x200
[  458.726673][    C1]  ? __kthread_parkme+0x1a1/0x200
[  458.728176][    C1]  kthread+0x711/0x8a0
[  458.729418][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  458.730972][    C1]  ? __pfx_kthread+0x10/0x10
[  458.732425][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  458.734050][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.735687][    C1]  ? __pfx_kthread+0x10/0x10
[  458.737202][    C1]  ret_from_fork+0x3fc/0x770
[  458.738724][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  458.740311][    C1]  ? __switch_to_asm+0x39/0x70
[  458.741944][    C1]  ? __switch_to_asm+0x33/0x70
[  458.743604][    C1]  ? __pfx_kthread+0x10/0x10
[  458.745159][    C1]  ret_from_fork_asm+0x1a/0x30
[  458.746695][    C1]  </TASK>
[  458.747659][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  458.749755][    C1] CPU: 1 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  458.754115][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  458.757799][    C1] Workqueue: events_unbound toggle_allocation_gate
[  458.759727][    C1] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0
[  458.761825][    C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b6 62 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 61 5e 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 45 5e
[  458.767942][    C1] RSP: 0018:ffffc900001ef660 EFLAGS: 00000293
[  458.769790][    C1] RAX: ffffffff81b44d4b RBX: 1ffff11009608341 RCX: ffff88801cac0000
[  458.772288][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  458.774775][    C1] RBP: ffffc900001ef7e0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  458.777233][    C1] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff88804b041a08
[  458.779781][    C1] R13: dffffc0000000000 R14: ffff88813663b1c0 R15: 0000000000000000
[  458.782126][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  458.784886][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  458.786920][    C1] CR2: 000055556667f5c8 CR3: 000000000df36000 CR4: 00000000000006f0
[  458.789287][    C1] Call Trace:
[  458.790359][    C1]  <TASK>
[  458.791290][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  458.792905][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  458.795080][    C1]  ? __pfx_text_poke_memcpy+0x10/0x10
[  458.797192][    C1]  ? kmem_cache_alloc_bulk_noprof+0x148/0x790
[  458.799597][    C1]  ? __pfx___text_poke+0x10/0x10
[  458.801422][    C1]  ? rcu_is_watching+0x15/0xb0
[  458.803151][    C1]  ? trace_contention_end+0x39/0x120
[  458.804881][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  458.806889][    C1]  on_each_cpu_cond_mask+0x3f/0x80
[  458.808962][    C1]  smp_text_poke_batch_finish+0x5f9/0x1130
[  458.811316][    C1]  ? arch_jump_label_transform_apply+0x17/0x30
[  458.813716][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  458.815714][    C1]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  458.817810][    C1]  ? arch_jump_label_transform_queue+0x97/0x110
[  458.819888][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[  458.822121][    C1]  static_key_enable_cpuslocked+0x128/0x250
[  458.824373][    C1]  static_key_enable+0x1a/0x20
[  458.826106][    C1]  toggle_allocation_gate+0xad/0x240
[  458.827792][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  458.829624][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  458.831537][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  458.833733][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  458.835668][    C1]  process_scheduled_works+0xae1/0x17b0
[  458.837552][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  458.839562][    C1]  worker_thread+0x8a0/0xda0
[  458.841121][    C1]  kthread+0x711/0x8a0
[  458.842661][    C1]  ? __pfx_worker_thread+0x10/0x10
[  458.844720][    C1]  ? __pfx_kthread+0x10/0x10
[  458.846299][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  458.848086][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.850062][    C1]  ? __pfx_kthread+0x10/0x10
[  458.851945][    C1]  ret_from_fork+0x3fc/0x770
[  458.853860][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  458.855939][    C1]  ? __switch_to_asm+0x39/0x70
[  458.857861][    C1]  ? __switch_to_asm+0x33/0x70
[  458.859787][    C1]  ? __pfx_kthread+0x10/0x10
[  458.861660][    C1]  ret_from_fork_asm+0x1a/0x30
[  458.863547][    C1]  </TASK>

VM DIAGNOSIS:
08:34:27  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff899a66dd RBX=18692f0450000000 RCX=ffff888107ec5640 RDX=0000000080010001
RSI=0000000004000000 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc90000007c68
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000000f7c
R12=dffffc0000000000 R13=ffff88810b90f0c0 R14=ffff88810b90f000 R15=0000000000000000
RIP=ffffffff81bfaba8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f62cb67e6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f551bed27b5 CR3=0000000122e32000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f62ca812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bdc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dee630 RSP=ffffc900001e0250
R8 =ffff88801f900237 R9 =1ffff11003f20046 R10=dffffc0000000000 R11=ffffffff854efee0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff57 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055556667f5c8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f62ca987498 00007f62ca987470 XMM03=00007f62ca9874a8 00007f62ca9874a0
XMM04=00007f62cb4ed100 00007f62ca987460 XMM05=00007f62ca987478 00007f62ca9874c0
XMM06=00007f62ca9874b8 00007f62ca9874b0 XMM07=00007f62ca9874a8 00007f62ca9874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f62ca812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
