last executing test programs:

43m34.376840765s ago: executing program 32 (id=170):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4)
ftruncate(r0, 0x7000000)
r1 = dup(r0)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil)
preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0)

42m0.442722047s ago: executing program 33 (id=1571):
r0 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, 0x0)

41m59.317801676s ago: executing program 34 (id=1577):
r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

41m57.645702688s ago: executing program 35 (id=1584):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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")

41m39.484029612s ago: executing program 36 (id=1784):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x2001)

40m16.675312947s ago: executing program 37 (id=2954):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44)

18m20.487434298s ago: executing program 6 (id=21240):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="05000000109e54fad5b1a677000008000300", @ANYRES32=r1, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000d000200000008000c"], 0x5c}}, 0x0)

18m20.412709662s ago: executing program 6 (id=21241):
r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000240)={0xe9, [[0xffffffff, 0xffffffff, 0x3ff, 0xffffffff, 0x400006, 0xffffffff, 0x5, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x4, 0xb, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x100, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xffc, 0x4000, 0x0, 0x0, 0x1}, {0x7, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0xfffffffe})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x50a2}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000140)=0x8)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f00000004c0)=0x671)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)

18m20.28328046s ago: executing program 6 (id=21245):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000001240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16, @ANYRESHEX=r2], 0x15)

18m4.20817512s ago: executing program 38 (id=21245):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000001240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16, @ANYRESHEX=r2], 0x15)

16m16.795932993s ago: executing program 39 (id=22639):
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}]})
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe)

16m3.029070167s ago: executing program 40 (id=23035):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1004002, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',roo'])
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
sendto(r1, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffc, 0x1, 0x0, 0xfffffffffffffffa}, &(0x7f0000000000)={0x18, 0x8, 0x1ff, 0x0, 0x7ff, 0x400000, 0x0, 0x92}, 0x0, 0x0, 0x0)

15m27.480625541s ago: executing program 41 (id=23562):
ioctl$FITRIM(0xffffffffffffffff, 0x4010586e, &(0x7f0000000000)={0x5, 0x32, 0x3})

15m15.107431308s ago: executing program 42 (id=23685):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f00000003c0))

15m0.222327404s ago: executing program 43 (id=23857):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d40)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x20, 0x80, 0x1c, {0xc9f8, 0x5, 0xfffffffe, 0x5, 0x6, 0x3, 0x483, 0x8, 0xfffd, 0x8c8, 0xfffe, 0x9}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

7m41.762559098s ago: executing program 3 (id=31781):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
getrlimit(0x6, &(0x7f0000000180))
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
timer_settime(r2, 0x1, 0x0, 0x0)
timer_settime(r2, 0x1, &(0x7f0000000300), 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1d, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0xb7}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
mount(0x0, &(0x7f0000000000)='./proc\x00', 0x0, 0x0, 0x0)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r7, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
write$P9_RSTATu(r6, &(0x7f00000002c0)={0x29f, 0x7d, 0x2, {{0x500, 0xc, 0x0, 0x5000000, {0x96346fe8a85d25a7, 0x0, 0xa}, 0x61400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x9b, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x8f}_\xb9\xb6\x18\xcf\xf1\xe7.\x9f\xde\xec\xd8\xfd\xdeU\xc9\x1e\xe45\xd2\b\xf4\xa6\xe1\xa9\xb0\xd3\x85\b\x012\t2c\xa2\xe4\x1eb\xec-t\x98\b\x16\xbcv\xf3\xdaQ\x968\xdc\xb7\x88d\x86\xc8x\x9f\xaa\x06\xfe\x8c\x168X\x83\x92b\x01y\xcc\xb5\x8fu \xcc\xc5\xd3\xb0\nJ\xfa\xf9RZ\xe1?U\x9d\x88\xe88#<\xc6\xec\x97\xb2\xc6\x00P', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x29f)

7m40.917667195s ago: executing program 3 (id=31786):
recvfrom$unix(0xffffffffffffffff, &(0x7f0000001480)=""/4091, 0x1c9, 0x100, &(0x7f0000002480)=@abs={0x0, 0x0, 0x4e21}, 0x6e)

7m40.812960413s ago: executing program 3 (id=31787):
socket(0x10, 0x803, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
close(0x3)
r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x4)
fchdir(r1)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000003ec0)={0x2020}, 0x2020)
sendfile(r2, r2, &(0x7f00000000c0)=0x7, 0x6fecb1)

7m40.180230788s ago: executing program 3 (id=31796):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRES32], 0x11, 0x5e7, &(0x7f0000000680)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x100, 0x30)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
fstat(r0, &(0x7f0000002e00))

7m40.126780338s ago: executing program 3 (id=31799):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

7m39.635996482s ago: executing program 3 (id=31810):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)={0x2c, 0x2d, 0x1, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x147, 0x0, 0x0, @pid}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

7m39.24509242s ago: executing program 44 (id=31810):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)={0x2c, 0x2d, 0x1, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x147, 0x0, 0x0, @pid}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

6m47.760591395s ago: executing program 7 (id=32536):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x19}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc, 0x20}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000)

6m47.696864059s ago: executing program 7 (id=32539):
execveat(0xffffffffffffffff, 0x0, &(0x7f0000000280)={[&(0x7f00000000c0)='.(-])-$%\x00']}, 0x0, 0x100)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000c40)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRESHEX=0x0], 0x3, 0x232, &(0x7f00000002c0)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0)

6m47.626462117s ago: executing program 7 (id=32542):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6m47.536856815s ago: executing program 7 (id=32545):
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c889}, 0x20000000)

6m47.536744204s ago: executing program 7 (id=32546):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x19}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc, 0x20}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000)

6m47.450228816s ago: executing program 7 (id=32548):
mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000240), 0x10012, &(0x7f0000000100)={[{@name={'name', 0x3d, '-\x00\x14\x00'}}]})

6m31.351161156s ago: executing program 45 (id=32548):
mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000240), 0x10012, &(0x7f0000000100)={[{@name={'name', 0x3d, '-\x00\x14\x00'}}]})

6m27.856896379s ago: executing program 6 (id=32788):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x10000, 0x800}, 0x20)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000108)=0x4, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f000000010c)=0x4, 0x4)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30)

6m27.779073541s ago: executing program 6 (id=32841):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00', <r0=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x1, 0x1], [0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xac}}, 0x0)

6m27.692730807s ago: executing program 6 (id=32843):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011)
r3 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
unshare(0x26020480)
r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r5, 0xc008551c, &(0x7f0000000200)=ANY=[@ANYBLOB="0400000058"])
mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x3, 0x80010, r0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8890)

6m11.554008069s ago: executing program 46 (id=32843):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011)
r3 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
unshare(0x26020480)
r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r5, 0xc008551c, &(0x7f0000000200)=ANY=[@ANYBLOB="0400000058"])
mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x3, 0x80010, r0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8890)

5m46.008373188s ago: executing program 8 (id=33409):
socket(0xa, 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x800)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000000000000500000072019b0000003b3f95"], 0x0, 0x2000006, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3cb}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/68}, 0x20)

5m46.007767258s ago: executing program 8 (id=33411):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0xfc3d)
sendto$inet6(r0, &(0x7f0000000500)="03bf3ac5", 0x4, 0x3b00, 0x0, 0x0)

5m45.922694286s ago: executing program 8 (id=33412):
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000640)='./sys\x00', &(0x7f0000000680)='sysfs\x00', 0x0, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello')
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/net/usb0/queues/tx-0/byte_queue_limits/limit_min\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/100, 0x64)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/net/eth0/queues/tx-0/byte_queue_limits/limit_min\x00', 0x0, 0x0)
read(r2, &(0x7f0000000b00)=""/100, 0x64)

5m45.216845261s ago: executing program 8 (id=33426):
r0 = socket(0x11, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b29, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})
creat(&(0x7f0000000200)='./file0\x00', 0x109)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/swaps\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/swaps\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
setns(0xc9, 0x0)
pipe(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r4 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c2200001500010000000000fbdbdf250a00000004"], 0x225c}, 0x1, 0x0, 0x0, 0x20004855}, 0x0)
splice(r2, 0x0, r4, 0x0, 0x10d00, 0xf)

5m45.142514953s ago: executing program 8 (id=33428):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfffffffd}]}]}]}, 0x38}}, 0x0)

5m45.142211383s ago: executing program 8 (id=33429):
mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000800)={[{@subsystem='perf_event'}]})

5m29.050596479s ago: executing program 47 (id=33429):
mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000800)={[{@subsystem='perf_event'}]})

4m27.247701655s ago: executing program 5 (id=34487):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000380)='./file0\x00', 0x2, &(0x7f0000000000)={[{@nodiscard}, {@order_relaxed}, {@order_strict}, {@order_relaxed}], [], 0x2c}, 0xfb, 0xf3b, &(0x7f0000002440)="$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")

4m27.140929676s ago: executing program 5 (id=34489):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x4)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x2e, 0x1}}, 0x40)

4m27.130327763s ago: executing program 5 (id=34491):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r2, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9}, 0x10)
sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

4m26.970655088s ago: executing program 5 (id=34493):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file0\x00', 0x810000, &(0x7f0000000040)={[{@lastblock={'lastblock', 0x3d, 0xe2}}, {@gid}, {@gid_forget}, {@session={'session', 0x3d, 0xffffffffffffff00}}, {@unhide}, {@uid}, {@uid_forget}, {@uid_ignore}, {@shortad}, {@gid_ignore}, {@dmode={'dmode', 0x3d, 0x7fffffff}}, {@uid_ignore}, {@fileset}, {@shortad}]}, 0x4, 0xc24, &(0x7f0000000d00)="$eJzs3V9oXOl5B+D3myOtJW/TzG42zh/nYmAD2Xqzi2R51yregBwrIgvGa1ZWLhYKGluyO6w0kiW5eEMJLiSUkLa45CKXNWwCvauvWggNuFfbEgKiV6UXxW03Zns3CaQtvViVM/ONNNLalrK2JXn9PMb+nTnznpnvzOrVnDN7zpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Gih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7WvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//cnez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fWOgfXs1Ir4YER+ulX8i/ndtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+sOVu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9vfBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN///n2+fApDt713Piy7s8ixej/Hct11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfx4pjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/u+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zV59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/IVI8+weba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/dNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/b5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT4i+tfynWd3jua73+m/e9G/38/UvzepzbXvpJrn92oHd7pasFeKvv/nyLF6u1/Wf+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfIb/lawJNm+Z1vv12fm5tdMmHChIn1ib3+zQQ8auX2/39Hiq9dLlJ3PzZv//9O59bG/v//fGdj+//Elly3R9v/z/bMO5H3Wvr7IgZW5hf7PxcxsPzOt19qzNcvzV6abY6MjB7//WPDR48P9z/V3bnfmNrxawePu7L/344UP/mbf17/HHvz/v/dP/87uCXX7VH/f6Z3nTbt1+z4pYAnTtn/fx0p/vXGB+v/v+l+n/91P+d74fnNOdgt2qP+f65nXi3/M9oz74Ui4uROnwsAAAAAAAAAAB4TB1MRP4sUf9v6x/Vr3m8+/ie+3K3tPf7vXvbD9f8BgPsr3/8nI8XPD341db9DZifH/89syXV7dPzvoZ55M7t0XvOOX2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiYUhRxIFK8+4NWul2UtzsGTjeaV65OjU/cfbHBFCkqUbTry78Dw0dHjr3y6vHRbt5/+YftC/HG5LmTtVML84tLs8vLszO1qWbjwsLM7I4f4UGX3+pI+wWozb99ZebixeXa0ZdHNt19tXrnwNOHqidGD4+81a2dGp+YmOyp6ev/2M/+EenhPRSfIE9FET+PFO+99EH69yKiEg/eC9v87njUBqOv7L/2SkyNT7RXZK5Rb66Ud6ZKruqLqPYsNNbtkV3oxQcyFnEtIirlgI+Uqze5WF+qn5+brZ2tL600VhoLzVTpjLZcn2pUYjRFLEZEq9jrwbPf9EcRfxcp7vy6lf6jiCi6ffDimck3h0a2f4C+XRjkPZ62WkSsxmPQs7BPHYginosUP5weiv8sOn3Vbpv3I75S5msRl8u8leJ6vp3KXxCjEb/yfgKPtb4o4mykWEit9H6Re7+9XXn6W7XXmxcXemq725WP/f7BbrJtwj42EEX8sr3F30q/9H4OAAAAAAAAAAAAAPtcEV+LFDfnX0jt80PXzyltNC/VztXPz3UO6+8e+1/LS62tra1VUydrOYdyjuU8m3M652LOazmv57yR82bOWzlXc97O2coZlfz8OWs5h3KO5TybczrnYs5rOa/nvJHzZs5bOVdz3s7ZyhmOkwYAAAAAAAAAAAAAAAAA4BGpRBHfixQ/+k0rrRWd68tORydvO88VPtH+PwAA//9mFkcG")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)

4m26.895726982s ago: executing program 5 (id=34494):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r1=>0xffffffffffffffff})
ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, 0x0)

4m26.552728443s ago: executing program 5 (id=34500):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x228, &(0x7f0000000300)="$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")

4m26.365117643s ago: executing program 48 (id=34500):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x228, &(0x7f0000000300)="$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")

3m22.962403897s ago: executing program 9 (id=35157):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x2000, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x241)

3m22.897622591s ago: executing program 9 (id=35158):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
readv(r0, &(0x7f0000000740)=[{&(0x7f0000000380)=""/92, 0x5c}], 0x1)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10)

3m22.791113766s ago: executing program 9 (id=35160):
setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x6)
connect(r0, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10)

3m22.790877903s ago: executing program 9 (id=35161):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@discard}, {@barrier}]}, 0x3, 0x481, &(0x7f00000004c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
setreuid(0x0, 0xee00)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

3m22.730701978s ago: executing program 9 (id=35162):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
fchown(r0, 0xee01, 0x0)
listen(r0, 0x54)

3m21.663909593s ago: executing program 9 (id=35174):
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)

3m21.461479498s ago: executing program 49 (id=35174):
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)

2m34.601940353s ago: executing program 1 (id=35682):
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0)
close(0x3)

2m33.479916058s ago: executing program 1 (id=35692):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', &(0x7f0000000240)={0x40, 0x8, 0x10}, 0x18)

2m33.479631202s ago: executing program 1 (id=35693):
rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x46, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
prctl$PR_SET_SECCOMP(0x4f, 0x2, 0x0)

2m33.400426838s ago: executing program 1 (id=35694):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_mount_image$squashfs(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000001b80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRES64, @ANYRES8=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRESOCT=0x0, @ANYBLOB="96baa9bd293f32a4be21fdffc77440a9d9c7e16c6c51d63e8ba964b01e06c4ad80d5ba81bf754b2f63dd49ffac2f96d2be9ab12be13dc3bd59217be281d895795a047ce3258eb171bd1200000000000000a112eb61edbb22074fb2464c2c040aa73dc1cccff5291d669049a8e13b373c0960d91ad00e2765cf73b478067d073524b1515e0cf674b54ab1945a77534ca0c321c00bc82e1eec0d6ea55eab950800b5c12b71f10f76", @ANYRESOCT, @ANYRES8], 0x1, 0x1be, &(0x7f0000000640)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x4b9, &(0x7f0000000700)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x11e)
write(r0, &(0x7f0000000000)='7', 0x1)
setfsuid(0xee00)

2m33.274559339s ago: executing program 1 (id=35695):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0x28ea00c3b4872574, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0xd}, {0x7, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8}]}}]}, 0x38}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="080005", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

2m33.015504625s ago: executing program 1 (id=35696):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000040000000001000000080001000000000004000480080002000100000024000880140007800800050000000c"], 0x4c}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0)

2m32.787093655s ago: executing program 50 (id=35696):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000040000000001000000080001000000000004000480080002000100000024000880140007800800050000000c"], 0x4c}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0)

2.309195003s ago: executing program 2 (id=37920):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000004e80)={0x2020, 0x0, <r1=>0x0}, 0x2020)
chroot(&(0x7f0000000100)='./file0\x00')
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x64, 0x18, 0x6, 0x0, 0x0, 0x40, 0x1}}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
chdir(&(0x7f0000000300)='./bus\x00')
syz_fuse_handle_req(r0, &(0x7f0000002dc0)="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", 0x2000, &(0x7f0000004dc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x6438207, 0x0, 0xffff, 0x0, 0xf84}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.159557639s ago: executing program 2 (id=37924):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0x3}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x0, 0xff, 0x1, 0xc, 0x4f0}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)

2.084211503s ago: executing program 2 (id=37926):
r0 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b503b)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

1.997561249s ago: executing program 2 (id=37927):
recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x10020, 0x0, 0x0)

1.913647665s ago: executing program 2 (id=37928):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbf9, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00)

1.817743215s ago: executing program 2 (id=37930):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x908a, 0x840)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000640)={0x1c, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)

1.272903191s ago: executing program 0 (id=37935):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r0=>0x0)
r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581)
ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x0, 0xb, 0x80006, 0x200006, 0x8, 0x1, "260000000000000754439400", 0xa, 0x0, 0x5, 0x2, 0x1, 0xfd, 0x9d})
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)
io_submit(0x0, 0x0, 0x0)

342.781684ms ago: executing program 0 (id=37945):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000c80)=ANY=[@ANYRES32=0x0, @ANYBLOB="f1d6cc6bbdfd919d87552d77292d0a04813522513669fabed0c433f5fb894bbf30779a615df7d1f91d57030ffe12b8237547cc0e72669c81d2fd141dfe1d09403dae9f30829f539c36b88d03a40ed52ba2a3d5de08ff5d", @ANYRESOCT, @ANYRES8, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES32], 0x1, 0x5e7, &(0x7f0000000680)="$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")
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0a85320, &(0x7f0000000900)={{0x80}})

235.771079ms ago: executing program 0 (id=37947):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f00000191004000140002001000030005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040)

235.588925ms ago: executing program 4 (id=37948):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x20018], [0xfffffffd, 0x100, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x3], [0x0, 0x20000232, 0x200006, 0x0, 0x0, 0x0, 0x80000001, 0xe5e]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x4}, {}, {0x0, 0x200}, {0x5}, {0x4}, {0x0, 0x1000000}, {0x0, 0x4}, {0x0, 0x9}, {}, {0xa}]})

171.786793ms ago: executing program 4 (id=37949):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)

171.650104ms ago: executing program 0 (id=37950):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @local, 0xfffd, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d86600000000fc3c7b", 0xb2, 0xffffeff7, 0x5, 0x40000006}, 0x3c)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @remote, 0xb}, 0x1c)
syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0)

171.312637ms ago: executing program 4 (id=37951):
creat(&(0x7f0000000080)='./file1\x00', 0x1)
truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8)

86.306642ms ago: executing program 4 (id=37952):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)

85.930745ms ago: executing program 0 (id=37953):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080)=0x12000000, &(0x7f00000000c0)='%-010d \x00'}, 0x20)

85.742133ms ago: executing program 4 (id=37954):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

373.151µs ago: executing program 0 (id=37955):
syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0)

0s ago: executing program 4 (id=37956):
socket$rxrpc(0x21, 0x2, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000)
fanotify_init(0x200, 0x0)
r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1)
r1 = dup(r0)
r2 = creat(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x80045007, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
syz_clone3(0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x9a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6a0000000064110000000000000000000000ffff00000000fe8000000000000000000000000000aa4e1d4e20006490"], 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
flistxattr(r2, 0x0, 0x0)
socket(0xa, 0x3, 0x7)
sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0)
r5 = dup(r1)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

kernel console output (not intermixed with test programs):

82][T14712] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[ 2526.866492][T14763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35751'.
[ 2527.775527][T14812] loop0: detected capacity change from 0 to 128
[ 2527.822450][T14812] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[ 2527.903195][ T5820] Bluetooth: hci6: command 0x040f tx timeout
[ 2528.678848][T14841] fuse: fd is not a fuse device
[ 2528.947115][ T7087] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 2529.114547][ T7087] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[ 2529.116693][ T7087] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2529.116731][ T7087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 2529.116749][ T7087] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2529.116777][ T7087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2529.122733][ T7087] usb 3-1: config 0 descriptor??
[ 2529.243235][T14847] loop0: detected capacity change from 0 to 8
[ 2529.255678][T14847] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 2529.255703][T14847] SQUASHFS error: Failed to read block 0x9b: -5
[ 2529.255714][T14847] SQUASHFS error: Unable to read metadata cache entry [99]
[ 2529.255722][T14847] SQUASHFS error: Unable to read inode 0x127
[ 2529.277430][T14847] FAULT_INJECTION: forcing a failure.
[ 2529.277430][T14847] name failslab, interval 1, probability 0, space 0, times 0
[ 2529.277457][T14847] CPU: 0 UID: 0 PID: 14847 Comm: syz.0.35783 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2529.277474][T14847] Tainted: [L]=SOFTLOCKUP
[ 2529.277479][T14847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2529.277488][T14847] Call Trace:
[ 2529.277494][T14847]  <TASK>
[ 2529.277500][T14847]  dump_stack_lvl+0xe8/0x150
[ 2529.277524][T14847]  should_fail_ex+0x410/0x560
[ 2529.277545][T14847]  should_failslab+0xa8/0x100
[ 2529.277566][T14847]  __kmalloc_noprof+0xfe/0x720
[ 2529.277578][T14847]  ? prepare_creds+0x30/0x820
[ 2529.277591][T14847]  ? security_prepare_creds+0x52/0x360
[ 2529.277609][T14847]  ? security_prepare_creds+0x52/0x360
[ 2529.277626][T14847]  ? kmem_cache_alloc_noprof+0x156/0x600
[ 2529.277641][T14847]  security_prepare_creds+0x52/0x360
[ 2529.277661][T14847]  prepare_creds+0x57d/0x820
[ 2529.277679][T14847]  __sys_setfsuid+0xcd/0x370
[ 2529.277698][T14847]  do_syscall_64+0x166/0x520
[ 2529.277715][T14847]  ? trace_irq_disable+0x3b/0x140
[ 2529.277729][T14847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2529.277745][T14847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2529.277756][T14847] RIP: 0033:0x7f4c1d79e159
[ 2529.277769][T14847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2529.277780][T14847] RSP: 002b:00007f4c1e666028 EFLAGS: 00000246 ORIG_RAX: 000000000000007a
[ 2529.277796][T14847] RAX: ffffffffffffffda RBX: 00007f4c1da25fa0 RCX: 00007f4c1d79e159
[ 2529.277805][T14847] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00
[ 2529.277814][T14847] RBP: 00007f4c1d83506b R08: 0000000000000000 R09: 0000000000000000
[ 2529.277823][T14847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2529.277831][T14847] R13: 00007f4c1da26038 R14: 00007f4c1da25fa0 R15: 00007ffdf077bf78
[ 2529.277853][T14847]  </TASK>
[ 2529.772085][T14859] loop0: detected capacity change from 0 to 32768
[ 2529.798354][T14859] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 2529.828722][T14859] XFS (loop0): Ending clean mount
[ 2529.859275][T14514] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 2530.124892][ T5820] Bluetooth: hci6: command 0x040f tx timeout
[ 2530.380400][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2531.282062][ T7421] usb 3-1: USB disconnect, device number 30
[ 2531.681385][T14906] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2531.681521][T14906] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2531.681618][T14906] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2531.681713][T14906] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2531.681807][T14906] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2531.882682][T14950] loop2: detected capacity change from 0 to 1024
[ 2531.895369][T14950] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 2531.897309][T14950] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 2531.906296][T14950] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.35823: lblock 2 mapped to illegal pblock 2 (length 1)
[ 2531.906322][T14950] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[ 2531.922460][    C0] EXT4-fs (loop2): error count since last fsck: 1
[ 2531.922474][    C0] EXT4-fs (loop2): initial error at time 2000525298: ext4_map_blocks:790: inode 3: block 2
[ 2531.922555][    C0] EXT4-fs (loop2): last error at time 2000525298: ext4_map_blocks:790: inode 3: block 2
[ 2531.943022][T14950] Quota error (device loop2): qtree_write_dquot: dquota write failed
[ 2531.943069][T14950] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.35823: Invalid inode table block 1 in block_group 0
[ 2531.943081][T14950] loop2: lost filesystem error report for type 5 error -117
[ 2531.981696][T14950] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem
[ 2531.981714][T14950] loop2: lost filesystem error report for type 5 error -117
[ 2531.981962][T14950] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.35823: mark_inode_dirty error
[ 2531.981978][T14950] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[ 2531.982161][T14950] Quota error (device loop2): v2_write_file_info: Can't write info structure
[ 2531.982170][T14950] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.35823: Failed to acquire dquot type 0
[ 2531.982180][T14950] loop2: lost filesystem error report for type 5 error -117
[ 2531.985399][T14950] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem
[ 2531.985411][T14950] loop2: lost filesystem error report for type 5 error -117
[ 2531.992925][T14950] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.35823: mark_inode_dirty error
[ 2531.992942][T14950] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 2531.998001][T14950] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[ 2531.998050][T14950] EXT4-fs (loop2): 1 orphan inode deleted
[ 2532.001435][T23330] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u9:2: lblock 1 mapped to illegal pblock 1 (length 1)
[ 2532.001452][T23330] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[ 2532.049581][T23330] Quota error (device loop2): remove_tree: Can't read quota data block 1
[ 2532.056925][T23330] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u9:2: Failed to release dquot type 0
[ 2532.056949][T23330] loop2: lost filesystem error report for type 5 error -117
[ 2532.091771][T14950] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.35823: Invalid inode table block 1 in block_group 0
[ 2532.091799][T14950] loop2: lost filesystem error report for type 5 error -117
[ 2532.094782][T14950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 2532.126498][ T9173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2533.129145][T14957] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2533.131976][T14957] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2533.132101][T14957] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2533.132223][T14957] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2533.132336][T14957] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2533.189680][T14968] loop2: detected capacity change from 0 to 512
[ 2533.198982][T14968] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 2533.223074][T14968] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.35829: invalid indirect mapped block 32768 (level 2)
[ 2533.223104][T14968] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[ 2533.223428][    C0] EXT4-fs (loop2): error count since last fsck: 1
[ 2533.223442][    C0] EXT4-fs (loop2): initial error at time 2000525300: ext4_free_branches:1023: inode 16
[ 2533.223464][    C0] EXT4-fs (loop2): last error at time 2000525300: ext4_free_branches:1023: inode 16
[ 2533.233532][T14968] EXT4-fs (loop2): Remounting filesystem read-only
[ 2533.233800][T14968] EXT4-fs (loop2): 1 orphan inode deleted
[ 2533.233811][T14968] EXT4-fs (loop2): 1 truncate cleaned up
[ 2533.235663][T14968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2533.270486][ T9173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2533.402760][T14972] loop2: detected capacity change from 0 to 2048
[ 2533.408987][T14972] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2533.791805][ T4990] Bluetooth: hci3: ACL packet for unknown connection handle 201
[ 2533.821678][T14998] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[ 2533.821692][T14998] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 2533.851015][T14998] vhci_hcd vhci_hcd.0: Device attached
[ 2533.858334][T15001] vhci_hcd: connection closed
[ 2533.879289][ T4400] vhci_hcd vhci_hcd.0: stop threads
[ 2533.893951][ T4400] vhci_hcd vhci_hcd.0: release socket
[ 2533.893993][ T4400] vhci_hcd vhci_hcd.0: disconnect device
[ 2534.207029][ T4919] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 2534.367993][ T4919] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98
[ 2534.369176][ T4919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2534.372807][ T4919] usb 3-1: config 0 descriptor??
[ 2534.394632][ T4919] pwc: Creative Labs Webcam 5 detected.
[ 2534.485379][ T4990] Bluetooth: hci3: command 0x0406 tx timeout
[ 2534.684153][ T4919] pwc: Failed to set LED on/off time (-71)
[ 2534.709263][ T4919] pwc: send_video_command error -71
[ 2534.709276][ T4919] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 2534.709338][ T4919] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[ 2534.767673][ T4919] usb 3-1: USB disconnect, device number 31
[ 2534.896336][T15018] loop0: detected capacity change from 0 to 256
[ 2534.920950][T15018] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 2535.345943][ T4990] Bluetooth: hci6: command 0x040f tx timeout
[ 2535.345982][ T4990] Bluetooth: hci7: command 0x0406 tx timeout
[ 2535.346003][ T4990] Bluetooth: hci5: command 0x0406 tx timeout
[ 2535.346024][ T4990] Bluetooth: hci4: command 0x2016 tx timeout
[ 2538.235383][T15075] openvswitch: netlink: Actions may not be safe on all matching packets
[ 2539.753958][T15111] loop2: detected capacity change from 0 to 40427
[ 2539.760149][T15111] F2FS-fs (loop2): build fault injection rate: 27
[ 2539.760161][T15111] F2FS-fs (loop2): build fault injection type: 0x76
[ 2539.764923][T15111] F2FS-fs (loop2): invalid crc value
[ 2539.771040][T15111] F2FS-fs (loop2): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4e68/0x7a60
[ 2539.771062][T15111] F2FS-fs (loop2): Failed to initialize F2FS node manager (-12)
[ 2540.973526][ T5271] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[ 2541.144596][ T5271] usb 1-1: Using ep0 maxpacket: 16
[ 2541.145089][ T5271] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 2541.146474][ T5271] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[ 2541.146485][ T5271] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2541.146492][ T5271] usb 1-1: config 0 has no interface number 0
[ 2541.151156][ T5271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2541.151168][ T5271] usb 1-1: Product: syz
[ 2541.151174][ T5271] usb 1-1: Manufacturer: syz
[ 2541.151180][ T5271] usb 1-1: SerialNumber: syz
[ 2541.152622][ T5271] usb 1-1: config 0 descriptor??
[ 2541.191626][ T5271] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22
[ 2541.406154][ T5271] usb 1-1: USB disconnect, device number 21
[ 2541.983546][T15202] loop2: detected capacity change from 0 to 32768
[ 2542.011679][T15202] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[ 2542.018238][T15202] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 2542.039109][T15202] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[ 2542.041875][T15202] XFS (loop2): Tail block (0x10) overwrite detected. Updated to 0x30
[ 2542.053386][T15202] XFS (loop2): Ending clean mount
[ 2542.188965][ T9173] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 2542.331353][ T7421] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 2542.493333][ T7421] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[ 2542.494265][ T7421] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2542.494278][ T7421] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[ 2542.494294][ T7421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2542.529854][ T7421] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[ 2543.476411][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[ 2543.476439][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[ 2543.476802][ T1378] aoe: packet could not be sent on lowpan0.  consider increasing tx_queue_len
[ 2543.994168][T15262] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 2544.803261][ T6187] usb 1-1: USB disconnect, device number 22
[ 2544.822271][ T6187] idmouse 1-1:1.0: disconnected
[ 2544.857056][T15274] FAULT_INJECTION: forcing a failure.
[ 2544.857056][T15274] name failslab, interval 1, probability 0, space 0, times 0
[ 2544.857081][T15274] CPU: 0 UID: 0 PID: 15274 Comm: syz.2.35944 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2544.857097][T15274] Tainted: [L]=SOFTLOCKUP
[ 2544.857102][T15274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2544.857109][T15274] Call Trace:
[ 2544.857113][T15274]  <TASK>
[ 2544.857119][T15274]  dump_stack_lvl+0xe8/0x150
[ 2544.857140][T15274]  should_fail_ex+0x410/0x560
[ 2544.857160][T15274]  should_failslab+0xa8/0x100
[ 2544.857176][T15274]  ? ptlock_alloc+0x20/0x70
[ 2544.857194][T15274]  kmem_cache_alloc_noprof+0xa1/0x600
[ 2544.857207][T15274]  ? ptlock_alloc+0x20/0x70
[ 2544.857227][T15274]  ptlock_alloc+0x20/0x70
[ 2544.857245][T15274]  pte_alloc_one+0x7a/0x370
[ 2544.857268][T15274]  __pte_alloc+0x25/0x1a0
[ 2544.857286][T15274]  do_pte_missing+0x2db7/0x34b0
[ 2544.857304][T15274]  ? do_raw_spin_unlock+0x4d/0x200
[ 2544.857325][T15274]  ? __pmd_alloc+0x40a/0x5c0
[ 2544.857346][T15274]  handle_mm_fault+0x1a53/0x3750
[ 2544.857371][T15274]  ? handle_mm_fault+0xf1/0x3750
[ 2544.857394][T15274]  ? __pfx_handle_mm_fault+0x10/0x10
[ 2544.857421][T15274]  ? __lock_acquire+0x747/0x2de0
[ 2544.857437][T15274]  ? lock_mm_and_find_vma+0xa7/0x340
[ 2544.857450][T15274]  do_user_addr_fault+0x746/0x1340
[ 2544.857473][T15274]  exc_page_fault+0x6a/0xc0
[ 2544.857494][T15274]  asm_exc_page_fault+0x26/0x30
[ 2544.857508][T15274] RIP: 0010:rep_movs_alternative+0xf/0xa0
[ 2544.857524][T15274] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 67 04 00 66 2e
[ 2544.857536][T15274] RSP: 0018:ffffc90004327cb8 EFLAGS: 00010202
[ 2544.857551][T15274] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004
[ 2544.857560][T15274] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90004327d70
[ 2544.857569][T15274] RBP: ffffc90004327e68 R08: 0000000000000003 R09: 0000000000000004
[ 2544.857578][T15274] R10: dffffc0000000000 R11: fffff52000864fae R12: 1ffff92000864fa4
[ 2544.857588][T15274] R13: 0000000000000000 R14: ffffc90004327d70 R15: 0000000000000000
[ 2544.857610][T15274]  _copy_from_user+0x7a/0xb0
[ 2544.857663][T15274]  do_sock_getsockopt+0x200/0x7e0
[ 2544.857717][T15274]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 2544.857748][T15274]  ? __fget_files+0x3a2/0x420
[ 2544.857768][T15274]  ? __fget_files+0x2a/0x420
[ 2544.857790][T15274]  __x64_sys_getsockopt+0x1a4/0x240
[ 2544.857814][T15274]  do_syscall_64+0x166/0x520
[ 2544.857833][T15274]  ? trace_irq_disable+0x3b/0x140
[ 2544.857845][T15274]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2544.857862][T15274]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2544.857876][T15274] RIP: 0033:0x7f3ed539e159
[ 2544.857890][T15274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2544.857901][T15274] RSP: 002b:00007f3ed619e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 2544.857915][T15274] RAX: ffffffffffffffda RBX: 00007f3ed5625fa0 RCX: 00007f3ed539e159
[ 2544.857924][T15274] RDX: 000000000000004c RSI: 0000000000000029 RDI: 0000000000000003
[ 2544.857932][T15274] RBP: 00007f3ed543506b R08: 0000000000000000 R09: 0000000000000000
[ 2544.857940][T15274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2544.857949][T15274] R13: 00007f3ed5626038 R14: 00007f3ed5625fa0 R15: 00007fff405d6a78
[ 2544.857972][T15274]  </TASK>
[ 2544.997050][T15280] loop2: detected capacity change from 0 to 8192
[ 2545.313902][T15288] loop2: detected capacity change from 0 to 32768
[ 2545.343320][T15288] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[ 2545.343966][T15288] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 2545.369821][T15288] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[ 2545.373046][T15288] XFS (loop2): Tail block (0x10) overwrite detected. Updated to 0x30
[ 2545.376346][T15288] XFS (loop2): Ending clean mount
[ 2545.425189][T15298] netlink: 36 bytes leftover after parsing attributes in process `syz.0.35953'.
[ 2545.440642][ T9173] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 2545.736502][T15306] loop2: detected capacity change from 0 to 128
[ 2545.760760][T15306] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 2545.764238][T15306] ext4 filesystem being mounted at /640/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2545.799484][ T9173] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 2546.349957][T32203] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 2546.552980][ T5271] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 2546.660460][T32203] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[ 2546.661474][T32203] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2546.661582][T32203] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[ 2546.661601][T32203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2546.691586][T32203] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[ 2546.714263][ T5271] usb 3-1: Using ep0 maxpacket: 16
[ 2546.715274][ T5271] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[ 2546.716163][ T5271] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2546.716172][ T5271] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2546.717096][ T5271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2546.717105][ T5271] usb 3-1: SerialNumber: syz
[ 2546.727807][ T5271] usb 3-1: 0:2 : does not exist
[ 2547.179274][ T5271] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 2547.179300][ T5271] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[ 2547.179312][ T5271] usb 3-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/1/1
[ 2547.278029][ T5271] usb 3-1: USB disconnect, device number 32
[ 2548.100757][T15351] loop2: detected capacity change from 0 to 4096
[ 2548.120497][T15351] NILFS (loop2): invalid segment: Checksum error in segment payload
[ 2548.120519][T15351] NILFS (loop2): trying rollback from an earlier position
[ 2548.149321][T15351] NILFS (loop2): recovery complete
[ 2548.150892][T15352] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2548.390853][T15354] loop2: detected capacity change from 0 to 32768
[ 2548.413214][T15354] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[ 2548.418544][T15354] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 2548.447963][T15354] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[ 2548.453510][T15354] XFS (loop2): Tail block (0x10) overwrite detected. Updated to 0x30
[ 2548.465214][T15354] XFS (loop2): Ending clean mount
[ 2548.521811][T15354] overlayfs: failed to resolve './file4': -2
[ 2548.555801][ T9173] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 2548.981716][T32203] usb 1-1: USB disconnect, device number 23
[ 2549.063827][T15374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35977'.
[ 2549.063843][T15374] netlink: 20 bytes leftover after parsing attributes in process `syz.4.35977'.
[ 2549.273514][T32203] idmouse 1-1:1.0: disconnected
[ 2549.823245][T15376] loop0: detected capacity change from 0 to 32768
[ 2549.830793][T15376] XFS (loop0): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent.
[ 2549.895341][T14514] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 2549.984447][ T7421] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 2550.145219][ T7421] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2550.146189][ T7421] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2550.146201][ T7421] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2550.146209][ T7421] usb 3-1: config 1 has no interface number 0
[ 2550.146224][ T7421] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2550.148097][ T7421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2550.148107][ T7421] usb 3-1: Product: syz
[ 2550.148114][ T7421] usb 3-1: Manufacturer: syz
[ 2550.148120][ T7421] usb 3-1: SerialNumber: syz
[ 2550.151055][ T7421] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[ 2550.151085][ T7421] cdc_ncm 3-1:1.1: bind() failure
[ 2550.479310][T15378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2550.479500][T15378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2550.493177][T15394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.35982'.
[ 2550.498112][ T5645] usb 3-1: USB disconnect, device number 33
[ 2550.563347][T15398] team_slave_1: Caught tx_queue_len zero misconfig
[ 2551.278689][T15428] loop2: detected capacity change from 0 to 1024
[ 2551.285156][T15428] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 2551.301825][T15428] JBD2: no valid journal superblock found
[ 2551.302120][T15428] EXT4-fs (loop2): Could not load journal inode
[ 2552.335199][T15451] team_slave_1: left promiscuous mode
[ 2552.335213][T15451] team_slave_1: entered allmulticast mode
[ 2552.335307][T15451] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[ 2552.439340][T15453] jffs2: notice: (15453) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[ 2552.978727][ T6187] usb 3-1: new low-speed USB device number 34 using dummy_hcd
[ 2553.150443][ T6187] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2553.150545][ T6187] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88
[ 2553.157107][ T6187] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 2553.157122][ T6187] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 4
[ 2553.160340][ T6187] usb 3-1: string descriptor 0 read error: -22
[ 2553.160401][ T6187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2553.166993][ T6187] ttusbir 3-1:8.0: cannot find expected altsetting
[ 2553.392280][ T5271] usb 3-1: USB disconnect, device number 34
[ 2555.256498][T15544] input: syz0 as /devices/virtual/input/input44
[ 2555.540881][ T5820] Bluetooth: hci6: unexpected event for opcode 0x1405
[ 2557.139080][T15600] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2557.444380][T15608] input: syz0 as /devices/virtual/input/input45
[ 2557.791206][T15623] fuse: Bad value for 'fd'
[ 2558.023135][T32203] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 2558.134805][T15639] jffs2: notice: (15639) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[ 2558.183168][T32203] usb 1-1: Using ep0 maxpacket: 16
[ 2558.218799][T32203] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[ 2558.233949][T32203] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[ 2558.234071][T32203] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2558.248943][T32203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2558.249037][T32203] usb 1-1: SerialNumber: syz
[ 2558.377034][T32203] usb 1-1: 0:2 : does not exist
[ 2558.540205][T32203] usb 1-1: 5:0: failed to get current value for ch 1 (-22)
[ 2558.575161][T32203] usb 1-1: 5:0: failed to get current value for ch 2 (-22)
[ 2558.582723][T32203] usb 1-1: 5:0: failed to get current value for ch 3 (-22)
[ 2558.592094][T32203] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[ 2558.601917][T32203] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 2558.601932][T32203] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[ 2558.601939][T32203] usb 1-1: [5] FU [Feature 5 Playback Volume] ch = 3, val = 0/1/1
[ 2558.609950][T32203] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 2558.609964][T32203] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[ 2558.609971][T32203] usb 1-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/1/1
[ 2558.615644][T32203] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 2558.622165][T32203] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 2558.630375][T32203] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5)
[ 2558.635989][T32203] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5)
[ 2558.642023][T32203] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 2558.651206][T32203] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 2558.658602][T32203] usb 1-1: 5:0: failed to get current value for ch 1 (-22)
[ 2558.673196][T32203] usb 1-1: 5:0: failed to get current value for ch 2 (-22)
[ 2558.683296][T32203] usb 1-1: 5:0: failed to get current value for ch 3 (-22)
[ 2558.699476][T32203] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[ 2558.709693][T32203] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5)
[ 2558.725211][T32203] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5)
[ 2558.833217][T32203] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 2558.840264][T32203] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 2558.875713][T32203] usb 1-1: USB disconnect, device number 24
[ 2558.962877][T15123] udevd[15123]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2559.141005][T15665] loop0: detected capacity change from 0 to 8
[ 2559.192435][T15671] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2559.456681][T15686] loop0: detected capacity change from 0 to 128
[ 2559.480548][T15688] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 2559.769837][T15699] input: syz0 as /devices/virtual/input/input46
[ 2560.098703][T15707] loop2: detected capacity change from 0 to 32768
[ 2560.131843][T15707] JBD2: Ignoring recovery information on journal
[ 2560.186824][T15707] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 2560.282117][ T9173] ocfs2: Unmounting device (7,2) on (node local)
[ 2560.445746][T15727] ip_tables: iptables: counters copy to user failed while replacing table
[ 2560.954613][T15736] loop0: detected capacity change from 0 to 256
[ 2561.796389][T15759] netlink: 48 bytes leftover after parsing attributes in process `syz.4.36137'.
[ 2561.827100][T15763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.36139'.
[ 2562.170281][ T4919] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[ 2562.325990][T15779] ip_tables: iptables: counters copy to user failed while replacing table
[ 2562.357386][ T4919] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2562.358035][ T4919] usb 1-1: not running at top speed; connect to a high speed hub
[ 2562.358058][ T4919] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[ 2562.359263][ T4919] usb 1-1: config 0 has an invalid interface number: 88 but max is 0
[ 2562.359274][ T4919] usb 1-1: config 0 has no interface number 0
[ 2562.359289][ T4919] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10
[ 2562.359519][ T4919] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[ 2562.359529][ T4919] usb 1-1: config 0 interface 88 has no altsetting 0
[ 2562.366113][ T4919] usb 1-1: string descriptor 0 read error: -22
[ 2562.366171][ T4919] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[ 2562.377354][ T4919] usb 1-1: config 0 descriptor??
[ 2562.414817][ T4919] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input47
[ 2562.498640][T15784] loop2: detected capacity change from 0 to 4096
[ 2562.551347][T15784] ntfs3(loop2): ino=5, "/" indx_read_ra
[ 2562.551377][T15784] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[ 2562.563413][T15784] ntfs3(loop2): ino=5, "/" indx_read_ra
[ 2562.568559][T15166] udevd[15166]: Error opening device "/dev/input/event3": Input/output error
[ 2562.568620][T15166] udevd[15166]: Unable to EVIOCGABS device "/dev/input/event3"
[ 2562.568658][T15166] udevd[15166]: Unable to EVIOCGABS device "/dev/input/event3"
[ 2562.652662][ T4919] usb 1-1: USB disconnect, device number 25
[ 2562.804784][T15790] loop2: detected capacity change from 0 to 1024
[ 2562.805742][T15790] EXT4-fs: Ignoring removed bh option
[ 2562.820446][T15790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2562.821764][T15790] EXT4-fs (loop2): shut down requested (2)
[ 2562.838199][T15790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2563.280908][T15806] loop0: detected capacity change from 0 to 512
[ 2563.304204][T15806] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.36157: iget: bad i_size value: 38620345925642
[ 2563.304223][T15806] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 2563.312741][T15806] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.36157: couldn't read orphan inode 15 (err -117)
[ 2563.312759][T15806] loop0: lost filesystem error report for type 5 error -117
[ 2563.323929][T15806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2563.442929][T14514] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2563.705485][T15822] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x100000
[ 2563.705511][T15822] flags: 0x17ff00000000004(referenced|node=0|zone=2|lastcpupid=0x7ff)
[ 2563.705524][T15822] page_type: f2(table)
[ 2563.705537][T15822] raw: 017ff00000000004 0000000000000000 dead000000000122 0000000000000000
[ 2563.705549][T15822] raw: 0000000000000000 0000000000000000 00000001f2000000 0000000000000000
[ 2563.705557][T15822] page dumped because: unmovable page
[ 2563.705566][T15822] page_owner tracks the page as allocated
[ 2563.705572][T15822] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1376059427
[ 2563.705589][T15822]  register_early_stack+0x98/0x100
[ 2563.705611][T15822]  init_page_owner+0x38/0x600
[ 2563.705630][T15822]  page_ext_init+0x511/0x550
[ 2563.705642][T15822]  mm_core_init+0x97/0xb0
[ 2563.705659][T15822] page_owner free stack trace missing
[ 2564.055201][   T34] audit: type=1326 audit(2000525328.875:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.2.36168" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ed539e159 code=0x0
[ 2565.034927][T15869] macsec1: entered promiscuous mode
[ 2565.034941][T15869] macsec1: entered allmulticast mode
[ 2565.101342][T15872] : renamed from bond_slave_0
[ 2565.534170][T15893] loop0: detected capacity change from 0 to 4096
[ 2565.634234][T15893] ntfs3(loop0): ino=5, "/" indx_read_ra
[ 2565.634259][T15893] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[ 2565.652668][T15893] ntfs3(loop0): ino=5, "/" indx_read_ra
[ 2565.741547][T15895] netlink: 165 bytes leftover after parsing attributes in process `syz.0.36198'.
[ 2565.825716][T15900] fuse: fd is not a fuse device
[ 2565.995324][T15909] 9p: Bad value for 'wfdno'
[ 2566.048961][ T5820] Bluetooth: hci3: unexpected event for opcode 0x080c
[ 2566.833744][ T5645] kernel read not supported for file [fscontext] (pid: 5645 comm: kworker/1:3)
[ 2567.143138][T15948] netlink: 'syz.4.36224': attribute type 4 has an invalid length.
[ 2567.343078][ T4919] kernel read not supported for file [fscontext] (pid: 4919 comm: kworker/0:0)
[ 2567.752060][T15988] loop2: detected capacity change from 0 to 1024
[ 2567.759338][T15988] EXT4-fs: Ignoring removed bh option
[ 2567.784335][T15988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2567.792476][T15988] EXT4-fs (loop2): shut down requested (2)
[ 2567.862761][T15988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2568.222250][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36256'.
[ 2568.254958][ T4919] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 2568.293057][T16022] netlink: 'syz.2.36259': attribute type 4 has an invalid length.
[ 2568.356866][T16024] input: syz0 as /devices/virtual/input/input48
[ 2568.425991][ T4919] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2568.427682][ T4919] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2568.427700][ T4919] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2568.427713][ T4919] usb 1-1: config 1 has no interface number 0
[ 2568.427806][ T4919] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2568.431060][ T4919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2568.431077][ T4919] usb 1-1: Product: syz
[ 2568.431087][ T4919] usb 1-1: Manufacturer: syz
[ 2568.431097][ T4919] usb 1-1: SerialNumber: syz
[ 2568.477484][ T4919] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[ 2568.477521][ T4919] cdc_ncm 1-1:1.1: bind() failure
[ 2568.661146][T16039] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2568.697301][T16007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2568.697531][T16007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2568.701068][ T4919] usb 1-1: USB disconnect, device number 26
[ 2568.989646][T16055] loop2: detected capacity change from 0 to 8
[ 2569.039285][T16055] SQUASHFS error: Failed to read block 0x2d7: -5
[ 2569.039302][T16055] SQUASHFS error: Unable to read metadata cache entry [2d5]
[ 2569.039662][T16055] SQUASHFS error: Failed to read block 0x8f: -5
[ 2569.041354][   T34] audit: type=1800 audit(2000525333.534:3094): pid=16055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.36275" name="file1" dev="loop2" ino=5 res=0 errno=0
[ 2572.314759][T16130] FAT-fs (loop2): unable to read boot sector
[ 2572.409581][T16133] netlink: 156 bytes leftover after parsing attributes in process `syz.2.36311'.
[ 2572.409603][T16133] netlink: 156 bytes leftover after parsing attributes in process `syz.2.36311'.
[ 2572.802406][T16162] loop2: detected capacity change from 0 to 512
[ 2572.839038][T16162] EXT4-fs (loop2): 1 truncate cleaned up
[ 2572.845871][T16162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2573.059215][T16162] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.36325: bg 0: block 465: padding at end of block bitmap is not set
[ 2573.082834][T16162] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 2573.082853][T16162] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 2573.082853][T16162] 
[ 2573.082859][T16162] EXT4-fs (loop2): Total free blocks count 0
[ 2573.082865][T16162] EXT4-fs (loop2): Free/Dirty block details
[ 2573.082879][T16162] EXT4-fs (loop2): free_blocks=0
[ 2573.082889][T16162] EXT4-fs (loop2): dirty_blocks=66
[ 2573.082894][T16162] EXT4-fs (loop2): Block reservation details
[ 2573.082899][T16162] EXT4-fs (loop2): i_reserved_data_blocks=66
[ 2573.139988][ T7545] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[ 2573.273624][T16170] loop0: detected capacity change from 0 to 32768
[ 2573.274182][T16170] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[ 2573.303690][T16170] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.36328 (16170)
[ 2573.324998][T16170] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 2573.325026][T16170] BTRFS info (device loop0): using crc32c checksum algorithm
[ 2573.429229][T16170] BTRFS info (device loop0): rebuilding free space tree
[ 2573.785733][T16211] netlink: 'syz.4.36339': attribute type 1 has an invalid length.
[ 2573.785751][T16211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36339'.
[ 2573.785761][T16211] netlink: 13 bytes leftover after parsing attributes in process `syz.4.36339'.
[ 2573.964144][T16217] netlink: 'syz.4.36342': attribute type 4 has an invalid length.
[ 2574.101092][T16225] netlink: 'syz.4.36346': attribute type 1 has an invalid length.
[ 2574.101111][T16225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36346'.
[ 2574.101121][T16225] netlink: 13 bytes leftover after parsing attributes in process `syz.4.36346'.
[ 2574.156873][ T5820] Bluetooth: hci3: unexpected event for opcode 0x080c
[ 2574.235109][T16170] BTRFS info (device loop0): disabling free space tree
[ 2574.235143][T16170] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 2574.235153][T16170] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 2574.272816][T16170] BTRFS info (device loop0): enabling ssd optimizations
[ 2574.272837][T16170] BTRFS info (device loop0): turning on async discard
[ 2574.272848][T16170] BTRFS info (device loop0): force clearing of disk cache
[ 2574.272860][T16170] BTRFS info (device loop0): use zstd compression, level 3
[ 2574.726463][T14514] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 2574.822556][ T5452] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[ 2575.546382][T16233] hub 1-0:1.0: USB hub found
[ 2575.546598][T16233] hub 1-0:1.0: 1 port detected
[ 2576.011487][T16275] netlink: 20 bytes leftover after parsing attributes in process `syz.4.36369'.
[ 2576.053086][T16275] ip6tnl4: entered allmulticast mode
[ 2576.278928][T16288] netlink: 'syz.0.36375': attribute type 4 has an invalid length.
[ 2576.567524][ T5820] Bluetooth: hci6: unexpected event for opcode 0x080c
[ 2577.327952][T16348] fuse: Bad value for 'fd'
[ 2577.932515][T16371] bond0: option slaves: interface -Vet does not exist!
[ 2577.979809][T32203] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 2578.140112][T32203] usb 3-1: Using ep0 maxpacket: 16
[ 2578.140942][T32203] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[ 2578.142284][T32203] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 2578.142301][T32203] usb 3-1: config 0 has no interface number 0
[ 2578.142329][T32203] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2578.142347][T32203] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2578.142361][T32203] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2578.142378][T32203] usb 3-1: config 0 interface 1 has no altsetting 0
[ 2578.142401][T32203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2578.146237][T32203] usb 3-1: config 0 descriptor??
[ 2578.152133][T32203] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count
[ 2578.408700][T16387] loop0: detected capacity change from 0 to 2048
[ 2578.469526][T16387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2578.469581][T16387] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2578.553967][T14514] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2578.621346][T32203] elan 0003:04F3:074D.0013: failed to start in urb: -90
[ 2578.650149][T16396] tunl0: Caught tx_queue_len zero misconfig
[ 2578.920559][ T5271] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[ 2579.033654][T32203] elan 0003:04F3:074D.0013: Get report error for parm 6: 0
[ 2579.105392][ T5271] usb 1-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=ac.d9
[ 2579.108280][ T5271] usb 1-1: config 1 has an invalid interface number: 69 but max is 0
[ 2579.108301][ T5271] usb 1-1: config 1 has no interface number 0
[ 2579.108322][ T5271] usb 1-1: config 1 interface 69 has no altsetting 0
[ 2579.111447][ T5271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2579.111468][ T5271] usb 1-1: Product: syz
[ 2579.111477][ T5271] usb 1-1: Manufacturer: syz
[ 2579.111487][ T5271] usb 1-1: SerialNumber: syz
[ 2579.397034][ T5271] comedi comedi4: This driver needs USB 2.0 to operate. Aborting...
[ 2579.397047][ T5271] usbduxfast 1-1:1.69: driver 'usbduxfast' failed to auto-configure device.
[ 2579.411365][ T5271] usb 1-1: USB disconnect, device number 27
[ 2579.468811][T32203] elan 0003:04F3:074D.0013: Get report error for parm 7: -71
[ 2579.474371][T32203] elan 0003:04F3:074D.0013: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.2-1/input1
[ 2579.474396][T32203] elan 0003:04F3:074D.0013: Input device is not registered
[ 2579.505144][T32203] elan 0003:04F3:074D.0013: probe with driver elan failed with error -119
[ 2579.512323][T32203] usb 3-1: USB disconnect, device number 35
[ 2580.028789][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36433'.
[ 2580.213349][T16414] loop2: detected capacity change from 0 to 32768
[ 2580.229414][T16414] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[ 2580.239399][T16414] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.36435 (16414)
[ 2580.257623][T16414] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 2580.257735][T16414] BTRFS info (device loop2): using crc32c checksum algorithm
[ 2580.395023][T16414] BTRFS info (device loop2): rebuilding free space tree
[ 2580.535543][T16455] loop0: detected capacity change from 0 to 512
[ 2580.555741][T16414] BTRFS info (device loop2): disabling free space tree
[ 2580.559916][T16455] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.36449: iget: bad extended attribute block 134217728
[ 2580.559936][T16455] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 2580.561729][T16414] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 2580.561744][T16414] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 2580.561759][T16455] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.36449: couldn't read orphan inode 15 (err -117)
[ 2580.561774][T16455] loop0: lost filesystem error report for type 5 error -117
[ 2580.562929][T16455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2580.619362][T16414] BTRFS info (device loop2): enabling ssd optimizations
[ 2580.619379][T16414] BTRFS info (device loop2): turning on async discard
[ 2580.619386][T16414] BTRFS info (device loop2): force clearing of disk cache
[ 2580.619395][T16414] BTRFS info (device loop2): use zstd compression, level 3
[ 2581.038694][ T9173] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 2581.230885][T14514] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2581.374629][T16473] ALSA: mixer_oss: invalid OSS volume '?'
[ 2581.725900][T16499] netlink: 'syz.0.36466': attribute type 4 has an invalid length.
[ 2582.221728][T16517] loop2: detected capacity change from 0 to 32768
[ 2582.225976][T16517] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[ 2582.229470][T16517] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.36474 (16517)
[ 2582.331778][T16534] netlink: 172 bytes leftover after parsing attributes in process `syz.0.36483'.
[ 2582.370104][T16517] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 2582.370133][T16517] BTRFS info (device loop2): using crc32c checksum algorithm
[ 2582.504163][T16517] BTRFS info (device loop2): rebuilding free space tree
[ 2582.754487][T16517] BTRFS info (device loop2): disabling free space tree
[ 2582.754537][T16517] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 2582.754551][T16517] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 2582.897861][T16517] BTRFS info (device loop2): enabling ssd optimizations
[ 2582.897884][T16517] BTRFS info (device loop2): turning on async discard
[ 2582.897916][T16517] BTRFS info (device loop2): force clearing of disk cache
[ 2582.897995][T16517] BTRFS info (device loop2): use zstd compression, level 3
[ 2583.023957][ T9173] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 2583.235969][T16556] loop0: detected capacity change from 0 to 32768
[ 2583.237041][T16556] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[ 2583.241680][T16556] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.36487 (16556)
[ 2583.372712][T16556] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 2583.372743][T16556] BTRFS info (device loop0): using crc32c checksum algorithm
[ 2583.557405][T16556] BTRFS info (device loop0): rebuilding free space tree
[ 2583.608882][T16556] BTRFS info (device loop0): disabling free space tree
[ 2583.608935][T16556] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 2583.608950][T16556] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 2583.641434][T16556] BTRFS info (device loop0): enabling ssd optimizations
[ 2583.641457][T16556] BTRFS info (device loop0): turning on async discard
[ 2583.641468][T16556] BTRFS info (device loop0): force clearing of disk cache
[ 2583.641481][T16556] BTRFS info (device loop0): use zstd compression, level 3
[ 2583.790136][T16593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36497'.
[ 2584.204083][T16607] netlink: 6060 bytes leftover after parsing attributes in process `syz.4.36504'.
[ 2584.383818][   T34] audit: type=1800 audit(2000525347.894:3095): pid=16611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.36506" name="file1" dev="tmpfs" ino=23438 res=0 errno=0
[ 2584.394697][ T4400] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[ 2584.398333][T14514] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 2584.770774][T16623] loop2: detected capacity change from 0 to 2048
[ 2584.793203][T16623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2584.793261][T16623] ext4 filesystem being mounted at /764/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2584.795875][T16623] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 16: comm syz.2.36512: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0
[ 2584.911085][ T9173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2585.415687][T16647] netlink: 'syz.0.36521': attribute type 12 has an invalid length.
[ 2585.415700][T16647] netlink: 'syz.0.36521': attribute type 29 has an invalid length.
[ 2585.415706][T16647] netlink: 148 bytes leftover after parsing attributes in process `syz.0.36521'.
[ 2585.415714][T16647] netlink: 'syz.0.36521': attribute type 1 has an invalid length.
[ 2585.415719][T16647] netlink: 47 bytes leftover after parsing attributes in process `syz.0.36521'.
[ 2586.096966][   T34] audit: type=1800 audit(2000525349.494:3096): pid=16687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.36539" name="file1" dev="tmpfs" ino=1144 res=0 errno=0
[ 2586.365085][T16688] loop2: detected capacity change from 0 to 32768
[ 2586.373344][T16688] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[ 2586.373698][T16688] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.36540 (16688)
[ 2586.380393][T16688] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 2586.380410][T16688] BTRFS info (device loop2): using crc32c checksum algorithm
[ 2586.457107][T16688] BTRFS info (device loop2): rebuilding free space tree
[ 2586.527594][T16688] BTRFS info (device loop2): disabling free space tree
[ 2586.527628][T16688] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 2586.527637][T16688] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 2586.533924][T16688] BTRFS info (device loop2): enabling ssd optimizations
[ 2586.533939][T16688] BTRFS info (device loop2): turning on async discard
[ 2586.533949][T16688] BTRFS info (device loop2): force clearing of disk cache
[ 2586.533962][T16688] BTRFS info (device loop2): use zstd compression, level 3
[ 2586.732177][ T9173] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 2586.767769][  T443] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[ 2587.074673][ T7087] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[ 2587.087323][   T34] audit: type=1800 audit(2000525350.411:3097): pid=16740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.36557" name="file1" dev="tmpfs" ino=4175 res=0 errno=0
[ 2587.128932][T16744] loop2: detected capacity change from 0 to 512
[ 2587.143276][T16744] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.36559: corrupted in-inode xattr: invalid ea_ino
[ 2587.143305][T16744] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 2587.143522][T16744] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.36559: couldn't read orphan inode 15 (err -117)
[ 2587.143536][T16744] loop2: lost filesystem error report for type 5 error -117
[ 2587.157921][T16744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2587.165354][T16744] fscrypt (loop2, inode 18): Unsupported encryption flags (0x10)
[ 2587.187447][ T9173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2587.271875][ T7087] usb 1-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=80.16
[ 2587.273639][ T7087] usb 1-1: config 2 has an invalid interface number: 49 but max is 1
[ 2587.273651][ T7087] usb 1-1: config 2 has an invalid interface number: 116 but max is 1
[ 2587.273659][ T7087] usb 1-1: config 2 has no interface number 0
[ 2587.273665][ T7087] usb 1-1: config 2 has no interface number 1
[ 2587.273685][ T7087] usb 1-1: config 2 interface 116 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[ 2587.273697][ T7087] usb 1-1: config 2 interface 116 altsetting 10 endpoint 0x84 has invalid maxpacket 62055, setting to 64
[ 2587.273707][ T7087] usb 1-1: config 2 interface 116 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2587.273718][ T7087] usb 1-1: config 2 interface 49 has no altsetting 0
[ 2587.273724][ T7087] usb 1-1: config 2 interface 116 has no altsetting 0
[ 2587.275645][ T7087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2587.275658][ T7087] usb 1-1: Product: syz
[ 2587.275664][ T7087] usb 1-1: Manufacturer: syz
[ 2587.275669][ T7087] usb 1-1: SerialNumber: syz
[ 2587.729792][ T7087] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.49/input/input50
[ 2587.814056][ T5645] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 2587.975274][ T5645] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[ 2587.976499][ T5645] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2587.976520][ T5645] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2587.978440][ T5645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 2587.978453][ T5645] usb 3-1: Product: syz
[ 2587.978459][ T5645] usb 3-1: Manufacturer: syz
[ 2588.010079][ T5645] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[ 2588.373601][ T5025] bcm5974 1-1:2.49: could not read from device
[ 2588.374863][ T5025] bcm5974 1-1:2.49: could not read from device
[ 2588.384700][ T5025] bcm5974 1-1:2.49: could not read from device
[ 2588.389578][ T7087] usb 1-1: USB disconnect, device number 28
[ 2588.864621][ T5645] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71
[ 2588.883201][ T5645] usb 3-1: USB disconnect, device number 36
[ 2588.889858][ T5645] mos7840 3-1:1.0: device disconnected
[ 2589.009518][T16780] loop0: detected capacity change from 0 to 256
[ 2589.332525][T21448] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 2589.492940][T21448] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00
[ 2589.493892][T21448] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2589.493903][T21448] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2589.493920][T21448] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2589.493938][T21448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2589.501811][T21448] ims_pcu 1-1:1.0: probe with driver ims_pcu failed with error -22
[ 2589.739509][ T7087] usb 1-1: USB disconnect, device number 29
[ 2589.801915][T16805] loop2: detected capacity change from 0 to 256
[ 2590.415635][T16825] loop2: detected capacity change from 0 to 256
[ 2590.757942][ T5820] Bluetooth: hci3: command 0x0406 tx timeout
[ 2591.324309][   T34] audit: type=1800 audit(2000525354.387:3098): pid=16861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.36609" name="file1" dev="tmpfs" ino=4277 res=0 errno=0
[ 2591.506823][T16865] loop2: detected capacity change from 0 to 512
[ 2591.521178][T16865] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.36611: iget: bad extended attribute block 134217728
[ 2591.521197][T16865] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 2591.523361][    C1] EXT4-fs (loop2): error count since last fsck: 1
[ 2591.523373][    C1] EXT4-fs (loop2): initial error at time 2000525354: ext4_orphan_get:1403: inode 15
[ 2591.523385][    C1] EXT4-fs (loop2): last error at time 2000525354: ext4_orphan_get:1403: inode 15
[ 2591.542443][T16865] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.36611: couldn't read orphan inode 15 (err -117)
[ 2591.542461][T16865] loop2: lost filesystem error report for type 5 error -117
[ 2591.543482][T16865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2591.963962][T16879] fuse: fd is not a fuse device
[ 2592.129150][ T9173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2592.201860][T16894] loop2: detected capacity change from 0 to 128
[ 2592.466956][   T34] audit: type=1800 audit(2000525355.453:3099): pid=16910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.36632" name="file1" dev="tmpfs" ino=1279 res=0 errno=0
[ 2593.129456][T16959] loop2: detected capacity change from 0 to 128
[ 2593.140055][T16959] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[ 2593.140144][T16959] System zones: 1-3, 19-19, 35-36
[ 2593.142383][T16959] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[ 2593.142723][T16959] ext4 filesystem being mounted at /812/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 2593.181917][T16959] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 1986330625 (only 1 groups)
[ 2593.238950][ T9173] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 2593.277189][ T7421] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 2593.305679][T16968] netlink: 120 bytes leftover after parsing attributes in process `syz.4.36660'.
[ 2593.437005][ T7421] usb 1-1: Using ep0 maxpacket: 8
[ 2593.437736][ T7421] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 2593.438920][ T7421] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[ 2593.438931][ T7421] usb 1-1: config 179 has no interface number 0
[ 2593.438947][ T7421] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 2593.438958][ T7421] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 2593.438968][ T7421] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2593.438978][ T7421] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[ 2593.438986][ T7421] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 2593.438996][ T7421] usb 1-1: config 179 interface 65 has no altsetting 0
[ 2593.439009][ T7421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2593.545933][ T7421] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input51
[ 2593.686021][ T7421] usb 1-1: USB disconnect, device number 30
[ 2593.722874][T16990] overlayfs: failed to clone upperpath
[ 2593.854336][T16992] fuse: fd is not a fuse device
[ 2594.627490][T17010] loop0: detected capacity change from 0 to 128
[ 2595.015478][T16986] loop2: detected capacity change from 0 to 131072
[ 2595.027870][T16986] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24)
[ 2595.027885][T16986] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[ 2595.027896][T16986] F2FS-fs (loop2): Test dummy encryption mode enabled
[ 2595.037961][T16986] F2FS-fs (loop2): invalid crc value
[ 2595.147423][T17036] loop0: detected capacity change from 0 to 512
[ 2595.160289][T16986] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[ 2595.184526][T17036] EXT4-fs (loop0): revision level too high, forcing read-only mode
[ 2595.184538][T17036] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[ 2595.184640][T17036] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 2595.185008][T17036] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #13: comm syz.0.36691: iget: bad i_size value: 12154761577498
[ 2595.185022][T17036] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[ 2595.185435][T17036] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.36691: couldn't read orphan inode 13 (err -117)
[ 2595.185449][T17036] loop0: lost filesystem error report for type 5 error -117
[ 2595.186353][T17036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 2595.192604][T17036] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.36691: dx entry: limit 65535 != root limit 120
[ 2595.192621][T17036] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.36691: Corrupt directory, running e2fsck is recommended
[ 2595.196734][T16986] loop2: lost filesystem error report for type 5 error -117
[ 2595.212324][T16986] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 2595.216813][T17036] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.36691: dx entry: limit 65535 != root limit 120
[ 2595.216828][T17036] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.36691: Corrupt directory, running e2fsck is recommended
[ 2595.217088][T17036] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.36691: dx entry: limit 65535 != root limit 120
[ 2595.217101][T17036] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.36691: Corrupt directory, running e2fsck is recommended
[ 2595.217323][T17036] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.36691: dx entry: limit 65535 != root limit 120
[ 2595.217334][T17036] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.36691: Corrupt directory, running e2fsck is recommended
[ 2595.243877][T16986] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0
[ 2595.243892][T16986] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[ 2595.243904][T16986] F2FS-fs (loop2): Start checkpoint disabled!
[ 2595.263103][T16986] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0
[ 2595.263640][T16986] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[ 2595.263651][T16986] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[ 2595.304001][T14514] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2595.389768][T17040] overlayfs: failed to resolve './bus': -2
[ 2595.463093][T17044] loop0: detected capacity change from 0 to 128
[ 2595.905924][T21448] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 2596.066583][T21448] usb 1-1: Using ep0 maxpacket: 32
[ 2596.067164][T21448] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 2596.068089][T21448] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[ 2596.068101][T21448] usb 1-1: config 0 has no interface number 0
[ 2596.069960][T21448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2596.069971][T21448] usb 1-1: Product: syz
[ 2596.069976][T21448] usb 1-1: Manufacturer: syz
[ 2596.069982][T21448] usb 1-1: SerialNumber: syz
[ 2596.073770][T21448] usb 1-1: config 0 descriptor??
[ 2596.184087][ T7087] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 2596.359671][ T7087] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[ 2596.361092][ T7087] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2596.361115][ T7087] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2596.363084][ T7087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 2596.363102][ T7087] usb 3-1: Product: syz
[ 2596.363112][ T7087] usb 3-1: Manufacturer: syz
[ 2596.394720][ T7087] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[ 2596.433269][T17060] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2596.823373][ T7087] mos7840 ttyUSB0: probe with driver mos7840 failed with error -32
[ 2596.836274][ T7087] usb 3-1: USB disconnect, device number 37
[ 2596.847141][ T7087] mos7840 3-1:1.0: device disconnected
[ 2596.958106][T21448] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[ 2597.093151][T17076] overlayfs: failed to clone upperpath
[ 2597.179112][T21448] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 2597.179230][T21448] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[ 2597.183325][T21448] usb 1-1: USB disconnect, device number 31
[ 2597.393474][T17090] netlink: 'syz.4.36716': attribute type 4 has an invalid length.
[ 2597.621097][T17104] loop2: detected capacity change from 0 to 512
[ 2597.672201][T17104] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.36723: iget: bad extended attribute block 134217728
[ 2597.672231][T17104] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 2597.672587][T17104] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.36723: couldn't read orphan inode 15 (err -117)
[ 2597.672607][T17104] loop2: lost filesystem error report for type 5 error -117
[ 2597.675825][T17104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2597.988861][T17116] openvswitch: netlink: Tunnel attr 68 out of range max 16
[ 2598.230564][ T9173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2598.300898][ T7087] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[ 2598.431308][T17127] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2598.465351][ T7087] usb 1-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=80.16
[ 2598.466943][ T7087] usb 1-1: config 2 has an invalid interface number: 49 but max is 1
[ 2598.466961][ T7087] usb 1-1: config 2 has an invalid interface number: 116 but max is 1
[ 2598.466975][ T7087] usb 1-1: config 2 has no interface number 0
[ 2598.466986][ T7087] usb 1-1: config 2 has no interface number 1
[ 2598.467126][ T7087] usb 1-1: config 2 interface 116 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[ 2598.467146][ T7087] usb 1-1: config 2 interface 116 altsetting 10 endpoint 0x84 has invalid maxpacket 62055, setting to 64
[ 2598.467163][ T7087] usb 1-1: config 2 interface 116 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2598.467183][ T7087] usb 1-1: config 2 interface 49 has no altsetting 0
[ 2598.467195][ T7087] usb 1-1: config 2 interface 116 has no altsetting 0
[ 2598.511409][ T7087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2598.511425][ T7087] usb 1-1: Product: syz
[ 2598.511431][ T7087] usb 1-1: Manufacturer: syz
[ 2598.511437][ T7087] usb 1-1: SerialNumber: syz
[ 2598.745601][ T7087] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.49/input/input52
[ 2598.755745][ T5025] bcm5974 1-1:2.49: could not read from device
[ 2598.757185][ T5025] bcm5974 1-1:2.49: could not read from device
[ 2598.765493][ T5025] bcm5974 1-1:2.49: could not read from device
[ 2598.767137][ T7087] usb 1-1: USB disconnect, device number 32
[ 2598.778332][ T5025] bcm5974 1-1:2.49: could not read from device
[ 2601.338623][ T5820] Bluetooth: hci3: unexpected cc 0x042d length: 63 > 7
[ 2601.354859][ T5820] Bluetooth: hci3: unexpected event for opcode 0x042d
[ 2601.459501][T17227] loop2: detected capacity change from 0 to 512
[ 2601.468541][T17227] EXT4-fs (loop2): revision level too high, forcing read-only mode
[ 2601.468559][T17227] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[ 2601.468816][T17227] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 2601.469058][T17227] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #13: comm syz.2.36776: iget: bad i_size value: 12154761577498
[ 2601.469077][T17227] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[ 2601.469667][T17227] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.36776: couldn't read orphan inode 13 (err -117)
[ 2601.469799][T17227] loop2: lost filesystem error report for type 5 error -117
[ 2601.511290][T17227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 2601.514420][T17227] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.36776: dx entry: limit 65535 != root limit 120
[ 2601.514456][T17227] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.36776: Corrupt directory, running e2fsck is recommended
[ 2601.514917][T17227] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.36776: dx entry: limit 65535 != root limit 120
[ 2601.514939][T17227] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.36776: Corrupt directory, running e2fsck is recommended
[ 2601.570032][ T9173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2601.778735][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36778'.
[ 2602.145926][T17247] loop2: detected capacity change from 0 to 1764
[ 2602.457499][T17261] veth1_to_bond: Caught tx_queue_len zero misconfig
[ 2602.565460][T21448] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 2602.595524][T17267] bond0: option mode: unable to set because the bond device has slaves
[ 2602.725757][T21448] usb 3-1: Using ep0 maxpacket: 32
[ 2602.726597][T21448] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 2602.727973][T21448] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[ 2602.727992][T21448] usb 3-1: config 0 has no interface number 0
[ 2602.730533][T21448] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2602.730551][T21448] usb 3-1: Product: syz
[ 2602.730561][T21448] usb 3-1: Manufacturer: syz
[ 2602.730571][T21448] usb 3-1: SerialNumber: syz
[ 2602.732786][T21448] usb 3-1: config 0 descriptor??
[ 2602.983182][T17220] Bluetooth: hci0: Opcode 0x080f failed: -110
[ 2603.604148][T21448] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[ 2603.604171][T21448] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2603.604606][T21448] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 2603.604806][T21448] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[ 2603.611286][T21448] usb 3-1: USB disconnect, device number 38
[ 2603.632212][T17304] netlink: 124 bytes leftover after parsing attributes in process `syz.0.36814'.
[ 2603.806088][T17310] loop0: detected capacity change from 0 to 2048
[ 2603.847194][T17310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2603.902475][T17310] EXT4-fs (loop0): stripe (227) is not aligned with cluster size (16), stripe is disabled
[ 2603.903275][T17310] EXT4-fs error (device loop0): __ext4_remount:6872: comm syz.0.36817: Abort forced by user
[ 2603.911382][T17310] EXT4-fs (loop0): Remounting filesystem read-only
[ 2603.911400][T17310] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[ 2603.973802][T14514] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2604.823907][T17382] 9pnet_fd: p9_fd_create_unix (17382): problem connecting socket: ./file1: -1
[ 2604.870550][T17384] loop2: detected capacity change from 0 to 128
[ 2605.303283][T21448] usb 1-1: new low-speed USB device number 33 using dummy_hcd
[ 2605.320091][T17416] RDS: rds_bind could not find a transport for fe80::1c, load rds_tcp or rds_rdma?
[ 2605.463635][T21448] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 2605.464627][T21448] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2605.464641][T21448] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[ 2605.464651][T21448] usb 1-1: config 0 interface 0 has no altsetting 0
[ 2605.464664][T21448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2605.466137][T21448] usb 1-1: config 0 descriptor??
[ 2605.466656][T17395] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 2605.553837][T17426] netlink: 124 bytes leftover after parsing attributes in process `syz.4.36871'.
[ 2605.637048][ T5820] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 2605.638154][ T5820] Bluetooth: hci3: Injecting HCI hardware error event
[ 2605.657067][ T5820] Bluetooth: hci3: hardware error 0x00
[ 2605.914123][T21448] hid_parser_main: 5 callbacks suppressed
[ 2605.914137][T21448] hid-multitouch 0003:1FD2:6007.0014: unknown main item tag 0x0
[ 2605.914150][T21448] hid-multitouch 0003:1FD2:6007.0014: unknown main item tag 0x0
[ 2605.914160][T21448] hid-multitouch 0003:1FD2:6007.0014: unknown main item tag 0x0
[ 2605.914169][T21448] hid-multitouch 0003:1FD2:6007.0014: unknown main item tag 0x0
[ 2605.914179][T21448] hid-multitouch 0003:1FD2:6007.0014: unknown main item tag 0x0
[ 2605.914188][T21448] hid-multitouch 0003:1FD2:6007.0014: unknown main item tag 0x0
[ 2605.914198][T21448] hid-multitouch 0003:1FD2:6007.0014: unknown main item tag 0x0
[ 2605.914207][T21448] hid-multitouch 0003:1FD2:6007.0014: unknown main item tag 0x0
[ 2605.914217][T21448] hid-multitouch 0003:1FD2:6007.0014: unknown main item tag 0x0
[ 2605.914226][T21448] hid-multitouch 0003:1FD2:6007.0014: unknown main item tag 0x0
[ 2605.920298][T21448] hid-multitouch 0003:1FD2:6007.0014: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0
[ 2605.936765][T17445] loop2: detected capacity change from 0 to 4096
[ 2606.050554][T17450] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2606.081413][   T34] audit: type=1800 audit(2000525368.186:3100): pid=17452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.36883" name="nullb0" dev="tmpfs" ino=16814 res=0 errno=0
[ 2606.137662][T21448] usb 1-1: USB disconnect, device number 33
[ 2606.538611][ T4990] Bluetooth: hci7: unexpected event for opcode 0x0c24
[ 2606.768181][T17491] 9pnet_fd: p9_fd_create_unix (17491): problem connecting socket: ./file1: -111
[ 2606.793929][   T34] audit: type=1326 audit(2000525368.859:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17492 comm="syz.0.36902" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c1d79e159 code=0x0
[ 2607.492149][T17521] fuse: fd is not a fuse device
[ 2607.582464][T17529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36919'.
[ 2607.582477][T17529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36919'.
[ 2607.864780][ T5820] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 2607.872440][T17540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36924'.
[ 2607.872455][T17540] block nbd0: Unsupported socket: should be TCP or UNIX.
[ 2608.319694][   T34] audit: type=1326 audit(2000525370.281:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17556 comm="syz.2.36933" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ed539e159 code=0x0
[ 2608.923663][T17590] 9pnet_virtio: no channels available for device syz
[ 2608.925742][T17590] overlayfs: failed to clone upperpath
[ 2609.064660][   T34] audit: type=1326 audit(2000525370.983:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17592 comm="syz.4.36948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370e19e159 code=0x7ffc0000
[ 2609.065888][   T34] audit: type=1326 audit(2000525370.983:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17592 comm="syz.4.36948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370e19e159 code=0x7ffc0000
[ 2609.067633][   T34] audit: type=1326 audit(2000525370.983:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17592 comm="syz.4.36948" exe="/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f370e19e159 code=0x7ffc0000
[ 2609.067892][   T34] audit: type=1326 audit(2000525370.983:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17592 comm="syz.4.36948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370e19e159 code=0x7ffc0000
[ 2609.068009][   T34] audit: type=1326 audit(2000525370.983:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17592 comm="syz.4.36948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370e19e159 code=0x7ffc0000
[ 2609.068461][   T34] audit: type=1326 audit(2000525370.983:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17592 comm="syz.4.36948" exe="/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f370e19e159 code=0x7ffc0000
[ 2609.068541][   T34] audit: type=1326 audit(2000525370.983:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17592 comm="syz.4.36948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370e19e159 code=0x7ffc0000
[ 2609.147006][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[ 2609.147034][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[ 2609.147227][ T1378] aoe: packet could not be sent on lowpan0.  consider increasing tx_queue_len
[ 2609.289784][T17604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.36953'.
[ 2609.875545][T17659] loop2: detected capacity change from 0 to 1024
[ 2609.884895][T17659] hfsplus: Bad value for 'part'
[ 2610.459151][T17690] xt_hashlimit: size too large, truncated to 1048576
[ 2611.571315][T17744] loop0: detected capacity change from 0 to 1024
[ 2611.613223][T17744] hfsplus: failed to load attributes file
[ 2611.619543][ T4990] Bluetooth: hci6: command 0x040f tx timeout
[ 2611.877469][T17756] xt_hashlimit: size too large, truncated to 1048576
[ 2612.248660][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37033'.
[ 2612.663703][T17805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37041'.
[ 2612.811679][T17814] loop2: detected capacity change from 0 to 16
[ 2612.820074][T17814] erofs (device loop2): mounted with root inode @ nid 36.
[ 2613.465488][T17842] loop2: detected capacity change from 0 to 128
[ 2613.572934][T17842] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 2613.572962][T17842] hpfs: filesystem error: improperly stopped
[ 2613.572968][T17842] hpfs: You really don't want any checks? You are crazy...
[ 2613.573089][T17842] hpfs: hpfs_map_sector(): read error
[ 2613.573094][T17842] hpfs: code page support is disabled
[ 2613.573363][T17842] hpfs: hpfs_map_4sectors(): unaligned read
[ 2613.573401][T17842] hpfs: hpfs_map_4sectors(): unaligned read
[ 2613.573405][T17842] hpfs: filesystem error: unable to find root dir
[ 2613.599681][T17842] hpfs: hpfs_map_4sectors(): unaligned read
[ 2613.616604][T17842] hpfs: hpfs_map_sector(): read error
[ 2613.988389][T17864] loop2: detected capacity change from 0 to 16
[ 2613.991133][T17864] erofs (device loop2): mounted with root inode @ nid 36.
[ 2614.092678][T17868] loop2: detected capacity change from 0 to 164
[ 2614.604179][T17874] loop0: detected capacity change from 0 to 32768
[ 2614.609227][T17874] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.37074 (17874)
[ 2614.645774][T17874] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 2614.645834][T17874] BTRFS info (device loop0): using sha256 checksum algorithm
[ 2614.748433][T17874] BTRFS info (device loop0): enabling ssd optimizations
[ 2614.748449][T17874] BTRFS info (device loop0): turning on async discard
[ 2614.748455][T17874] BTRFS info (device loop0): enabling free space tree
[ 2614.810862][T14514] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 2615.516232][T17901] xt_hashlimit: size too large, truncated to 1048576
[ 2615.647611][T17905] openvswitch: netlink: IPv4 tun info is not correct
[ 2616.459565][ T7087] libceph: connect (1)0.0.0.0:6789 error -22
[ 2616.459642][ T7087] libceph: mon0 (1)0.0.0.0:6789 connect error
[ 2616.550377][T17961] fuse: fd is not a fuse device
[ 2616.729711][ T7087] libceph: connect (1)0.0.0.0:6789 error -22
[ 2616.729937][ T7087] libceph: mon0 (1)0.0.0.0:6789 connect error
[ 2617.010559][T17980] jffs2: notice: (17980) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[ 2617.092401][ T7087] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[ 2617.265468][ T7087] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2617.265935][ T7087] usb 1-1: not running at top speed; connect to a high speed hub
[ 2617.265950][ T7087] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=9a.12
[ 2617.267054][ T7087] usb 1-1: config 7 has an invalid interface number: 9 but max is 0
[ 2617.267064][ T7087] usb 1-1: config 7 has no interface number 0
[ 2617.267076][ T7087] usb 1-1: config 7 interface 9 has no altsetting 0
[ 2617.269082][ T7087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2617.269092][ T7087] usb 1-1: Product: syz
[ 2617.269098][ T7087] usb 1-1: Manufacturer: syz
[ 2617.269104][ T7087] usb 1-1: SerialNumber: syz
[ 2617.277567][ T4919] libceph: connect (1)0.0.0.0:6789 error -22
[ 2617.277906][ T4919] libceph: mon0 (1)0.0.0.0:6789 connect error
[ 2617.516091][ T7087] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state.
[ 2617.534316][ T7087] dvb-usb: bulk message failed: -22 (2/0)
[ 2617.534341][ T7087] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 2617.534363][ T7087] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver error while loading driver (-19)
[ 2617.539650][ T7087] usb 1-1: USB disconnect, device number 34
[ 2618.110403][T18013] fuse: Bad value for 'fd'
[ 2618.204384][ T5271] libceph: connect (1)0.0.0.0:6789 error -22
[ 2618.204460][ T5271] libceph: mon0 (1)0.0.0.0:6789 connect error
[ 2619.206258][T18039] fuse: Bad value for 'fd'
[ 2619.662031][T17952] ceph: No mds server is up or the cluster is laggy
[ 2621.234670][T18095] fuse: fd is not a fuse device
[ 2621.993133][T18123] loop2: detected capacity change from 0 to 2048
[ 2621.997690][T18123] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 2621.997913][T18123] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[ 2622.007450][T18123] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2622.071472][T18125] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 2622.398351][T18139] FAULT_INJECTION: forcing a failure.
[ 2622.398351][T18139] name failslab, interval 1, probability 0, space 0, times 0
[ 2622.398521][T18139] CPU: 0 UID: 0 PID: 18139 Comm: syz.2.37190 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2622.398535][T18139] Tainted: [L]=SOFTLOCKUP
[ 2622.398540][T18139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2622.398545][T18139] Call Trace:
[ 2622.398550][T18139]  <TASK>
[ 2622.398555][T18139]  dump_stack_lvl+0xe8/0x150
[ 2622.398577][T18139]  should_fail_ex+0x410/0x560
[ 2622.398592][T18139]  should_failslab+0xa8/0x100
[ 2622.398604][T18139]  __kmalloc_noprof+0xfe/0x720
[ 2622.398613][T18139]  ? __kmalloc_noprof+0x1ab/0x720
[ 2622.398621][T18139]  ? mpi_powm+0x1173/0x2480
[ 2622.398635][T18139]  ? mpi_powm+0x1173/0x2480
[ 2622.398655][T18139]  mpi_powm+0x1173/0x2480
[ 2622.398683][T18139]  ? __pfx_mpi_powm+0x10/0x10
[ 2622.398727][T18139]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2622.398747][T18139]  ? kfree+0x1c5/0x650
[ 2622.398758][T18139]  ? rsa_enc+0x2e0/0x480
[ 2622.398778][T18139]  rsa_enc+0x338/0x480
[ 2622.398800][T18139]  ? __pfx_rsa_enc+0x10/0x10
[ 2622.398815][T18139]  ? __virt_addr_valid+0x137/0x390
[ 2622.398830][T18139]  ? __virt_addr_valid+0x2e8/0x390
[ 2622.398846][T18139]  ? sg_init_one+0xf5/0x1c0
[ 2622.398863][T18139]  rsassa_pkcs1_verify+0x52b/0xbb0
[ 2622.398885][T18139]  ? __pfx_rsassa_pkcs1_verify+0x10/0x10
[ 2622.398912][T18139]  ? rsassa_pkcs1_set_pub_key+0x13d/0x1a0
[ 2622.398928][T18139]  public_key_verify_signature+0x79b/0x9e0
[ 2622.398953][T18139]  ? __pfx_public_key_verify_signature+0x10/0x10
[ 2622.398979][T18139]  ? asymmetric_key_generate_id+0x60/0x170
[ 2622.398992][T18139]  ? asymmetric_key_id_same+0x67/0xe0
[ 2622.399011][T18139]  x509_check_for_self_signed+0x326/0x430
[ 2622.399032][T18139]  x509_cert_parse+0x622/0x7a0
[ 2622.399052][T18139]  x509_key_preparse+0x64/0x6d0
[ 2622.399068][T18139]  ? down_read+0x2be/0x330
[ 2622.399083][T18139]  asymmetric_key_preparse+0xb9/0x1b0
[ 2622.399099][T18139]  __key_create_or_update+0x3a9/0xa80
[ 2622.399126][T18139]  ? __pfx___key_create_or_update+0x10/0x10
[ 2622.399149][T18139]  ? lookup_user_key+0xb68/0x1150
[ 2622.399175][T18139]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[ 2622.399193][T18139]  ? __pfx_keyring_search_iterator+0x10/0x10
[ 2622.399216][T18139]  key_create_or_update+0x42/0x60
[ 2622.399238][T18139]  __se_sys_add_key+0x349/0x420
[ 2622.399255][T18139]  ? __pfx___se_sys_add_key+0x10/0x10
[ 2622.399277][T18139]  ? __x64_sys_add_key+0x20/0xc0
[ 2622.399292][T18139]  do_syscall_64+0x166/0x520
[ 2622.399311][T18139]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2622.399328][T18139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2622.399341][T18139] RIP: 0033:0x7f3ed539e159
[ 2622.399355][T18139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2622.399366][T18139] RSP: 002b:00007f3ed619e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 2622.399382][T18139] RAX: ffffffffffffffda RBX: 00007f3ed5625fa0 RCX: 00007f3ed539e159
[ 2622.399391][T18139] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[ 2622.399400][T18139] RBP: 00007f3ed543506b R08: 00000000265bed99 R09: 0000000000000000
[ 2622.399409][T18139] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[ 2622.399417][T18139] R13: 00007f3ed5626038 R14: 00007f3ed5625fa0 R15: 00007fff405d6a78
[ 2622.399463][T18139]  </TASK>
[ 2622.443082][T18141] loop2: detected capacity change from 0 to 2048
[ 2622.447877][T18141] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 2622.448183][T18141] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[ 2622.451558][T18141] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2622.598871][T18147] loop2: detected capacity change from 0 to 256
[ 2622.959774][T18155] loop0: detected capacity change from 0 to 32768
[ 2623.275357][T18179] netlink: 'syz.2.37210': attribute type 1 has an invalid length.
[ 2623.275378][T18179] netlink: 248 bytes leftover after parsing attributes in process `syz.2.37210'.
[ 2623.322948][ T4919] libceph: connect (1)0.0.0.0:6789 error -22
[ 2623.323175][ T4919] libceph: mon0 (1)0.0.0.0:6789 connect error
[ 2623.591599][ T4919] libceph: connect (1)0.0.0.0:6789 error -22
[ 2623.591764][ T4919] libceph: mon0 (1)0.0.0.0:6789 connect error
[ 2623.858638][ T7421] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 2624.019166][ T7421] usb 1-1: Using ep0 maxpacket: 32
[ 2624.019709][ T7421] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 2624.020643][ T7421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2624.022036][ T7421] usb 1-1: config 0 descriptor??
[ 2624.147754][ T7087] libceph: connect (1)0.0.0.0:6789 error -22
[ 2624.147837][ T7087] libceph: mon0 (1)0.0.0.0:6789 connect error
[ 2624.243196][ T7421] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 2624.273981][ T7421] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2624.274528][ T7421] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 2624.274567][ T7421] usb 1-1: media controller created
[ 2624.290253][ T7421] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2624.589806][T18216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37226'.
[ 2625.329194][T18252] tmpfs: Bad value for 'mpol'
[ 2625.645643][ T4919] libceph: connect (1)0.0.0.0:6789 error -22
[ 2625.645800][ T4919] libceph: mon0 (1)0.0.0.0:6789 connect error
[ 2625.911507][ T7421] az6027: usb out operation failed. (-71)
[ 2625.911525][ T7421] stb0899_attach: Driver disabled by Kconfig
[ 2625.911532][ T7421] az6027: no front-end attached
[ 2625.911532][ T7421] 
[ 2625.911894][ T7421] az6027: usb out operation failed. (-71)
[ 2625.911903][ T7421] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 2625.914153][ T7421] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input53
[ 2625.919024][ T7421] dvb-usb: schedule remote query interval to 400 msecs.
[ 2625.919036][ T7421] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 2625.920497][ T7421] usb 1-1: USB disconnect, device number 35
[ 2626.016517][ T7421] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 2626.512024][T18181] ceph: No mds server is up or the cluster is laggy
[ 2626.711706][T18276] fuse: Bad value for 'fd'
[ 2627.311373][T28672] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 2627.472796][T28672] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[ 2627.476733][T28672] usb 3-1: config 1 has an invalid interface number: 3 but max is 0
[ 2627.476756][T28672] usb 3-1: config 1 has no interface number 0
[ 2627.481221][T28672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2627.481241][T28672] usb 3-1: Product: syz
[ 2627.481249][T28672] usb 3-1: Manufacturer: syz
[ 2627.481258][T28672] usb 3-1: SerialNumber: syz
[ 2627.504488][T28672] usb 3-1: 3:0 : does not exist
[ 2627.504507][T28672] usb 3-1: 3:0 : does not exist
[ 2627.735298][ T5271] usb 3-1: USB disconnect, device number 39
[ 2628.770484][T18369] xt_IDLETIMER: timeout value is zero
[ 2628.867906][T18376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.37298'.
[ 2628.972054][T18384] overlayfs: failed to clone upperpath
[ 2629.047818][T18390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.37304'.
[ 2629.096832][T18388] gadgetfs: bound to dummy_udc driver
[ 2629.287257][T18399] netlink: 'syz.2.37307': attribute type 30 has an invalid length.
[ 2629.287269][T18399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.37307'.
[ 2629.366492][ T5271] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[ 2629.366737][    C0] gadgetfs: connected
[ 2629.370171][ T5271] gadgetfs: disconnected
[ 2629.543562][T18416] gadgetfs: bound to dummy_udc driver
[ 2629.718260][T18419] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2629.732344][T18419] 8021q: adding VLAN 0 to HW filter on device team0
[ 2629.813994][T18419] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 2629.948926][T18424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.37316'.
[ 2630.059466][    C0] gadgetfs: connected
[ 2630.060397][ T5271] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[ 2630.060725][ T5271] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 2630.060745][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2630.061931][T18415] gadgetfs: suspended from state 3
[ 2630.062034][T18415] gadgetfs: disconnected
[ 2630.067031][ T5271] usb 1-1: can't set config #1, error -71
[ 2630.067872][ T5271] usb 1-1: USB disconnect, device number 36
[ 2630.164657][T18434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.37321'.
[ 2630.410100][T18448] gadgetfs: bound to dummy_udc driver
[ 2630.657061][T21448] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[ 2630.657312][    C1] gadgetfs: connected
[ 2630.657405][T21448] gadgetfs: disconnected
[ 2631.012244][T18498] loop2: detected capacity change from 0 to 512
[ 2631.019543][T18498] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 2631.035750][T18498] EXT4-fs (loop2): 1 truncate cleaned up
[ 2631.036574][T18498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2631.053349][T18498] EXT4-fs (loop2): shut down requested (2)
[ 2631.081868][ T9173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2632.617076][T18562] No such timeout policy "syz1"
[ 2632.855658][T18576] Cannot find set identified by id 0 to match
[ 2632.903637][T18578] gadgetfs: bound to dummy_udc driver
[ 2633.084631][T21448] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 2633.158509][ T5271] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[ 2633.158787][    C0] gadgetfs: connected
[ 2633.165176][ T5271] gadgetfs: disconnected
[ 2633.216859][T18585] loop0: detected capacity change from 0 to 512
[ 2633.231405][T18585] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.37383: corrupted in-inode xattr: invalid ea_ino
[ 2633.231422][T18585] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 2633.233157][    C1] EXT4-fs (loop0): error count since last fsck: 1
[ 2633.233168][    C1] EXT4-fs (loop0): initial error at time 2000525393: ext4_iget_extra_inode:5210: inode 15
[ 2633.233179][    C1] EXT4-fs (loop0): last error at time 2000525393: ext4_iget_extra_inode:5210: inode 15
[ 2633.233340][T18585] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.37383: couldn't read orphan inode 15 (err -117)
[ 2633.233353][T18585] loop0: lost filesystem error report for type 5 error -117
[ 2633.234868][T18585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2633.243968][T21448] usb 3-1: Using ep0 maxpacket: 32
[ 2633.247731][T21448] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 2633.274096][T21448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2633.275473][T21448] usb 3-1: config 0 descriptor??
[ 2633.323119][T14514] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2633.531408][T21448] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 2633.543597][T21448] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2633.545187][T21448] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 2633.545221][T21448] usb 3-1: media controller created
[ 2633.550646][T21448] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2633.610448][T18593] loop0: detected capacity change from 0 to 4096
[ 2633.688873][T18594] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2633.730762][T18593] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean
[ 2633.759428][T21448] az6027: usb out operation failed. (-71)
[ 2633.759711][T21448] az6027: usb out operation failed. (-71)
[ 2633.759717][T21448] stb0899_attach: Driver disabled by Kconfig
[ 2633.759721][T21448] az6027: no front-end attached
[ 2633.759721][T21448] 
[ 2633.759989][T21448] az6027: usb out operation failed. (-71)
[ 2633.759995][T21448] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 2633.785373][T21448] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input54
[ 2633.809918][T21448] dvb-usb: schedule remote query interval to 400 msecs.
[ 2633.809931][T21448] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 2633.816865][T21448] usb 3-1: USB disconnect, device number 40
[ 2633.877263][T21448] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 2634.181054][T18616] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2634.207357][T18618] netlink: 'syz.4.37398': attribute type 10 has an invalid length.
[ 2634.207904][T18618] netlink: 'syz.4.37398': attribute type 10 has an invalid length.
[ 2634.284721][T18620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37399'.
[ 2634.630572][T18648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37407'.
[ 2634.630594][T18648] netlink: 48 bytes leftover after parsing attributes in process `syz.0.37407'.
[ 2634.642931][T18648] geneve2: entered promiscuous mode
[ 2634.642949][T18648] geneve2: entered allmulticast mode
[ 2634.688927][T18650] loop2: detected capacity change from 0 to 2048
[ 2634.719571][T18650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2634.753490][T18650] EXT4-fs (loop2): shut down requested (2)
[ 2634.780613][ T9173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2635.016005][T18667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37415'.
[ 2635.016026][T18667] netlink: 48 bytes leftover after parsing attributes in process `syz.2.37415'.
[ 2635.032893][T18667] geneve2: entered promiscuous mode
[ 2635.032906][T18667] geneve2: entered allmulticast mode
[ 2635.050728][  T443] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2635.050760][  T443] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2635.050807][  T443] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2635.050821][  T443] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2635.421722][T18689] gadgetfs: bound to dummy_udc driver
[ 2635.671598][ T5271] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[ 2635.671850][    C0] gadgetfs: connected
[ 2635.672006][ T5271] gadgetfs: disconnected
[ 2635.911661][T18712] loop0: detected capacity change from 0 to 4096
[ 2635.936041][T18717] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2635.946548][T18716] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached
[ 2636.367769][T18737] loop0: detected capacity change from 0 to 512
[ 2636.411741][T18739] loop2: detected capacity change from 0 to 4096
[ 2636.451051][T18737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2636.451137][T18737] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2636.462004][T18742] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2636.703250][T14514] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2637.929944][T18784] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.37465'.
[ 2637.938236][T18785] xt_l2tp: v2 doesn't support IP mode
[ 2638.459304][T18804] binder_alloc: 18803: binder_alloc_buf, no vma
[ 2638.683066][T18814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37479'.
[ 2638.686290][T18814] netlink: 'syz.2.37479': attribute type 10 has an invalid length.
[ 2638.686302][T18814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37479'.
[ 2638.826646][T18822] bridge1: entered promiscuous mode
[ 2638.826660][T18822] bridge1: entered allmulticast mode
[ 2638.907725][T18828] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.37485'.
[ 2639.333391][T18851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37496'.
[ 2639.372783][T18851] ovs-dp0: entered promiscuous mode
[ 2639.674161][T18874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37505'.
[ 2640.221747][T18898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37517'.
[ 2640.716004][ T7087] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[ 2640.843184][T18926] loop0: detected capacity change from 0 to 256
[ 2640.892878][ T7087] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[ 2640.894647][ T7087] usb 3-1: config 0 has an invalid interface number: 143 but max is 0
[ 2640.894665][ T7087] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2640.894677][ T7087] usb 3-1: config 0 has no interface number 0
[ 2640.897129][ T7087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2640.897142][ T7087] usb 3-1: Product: syz
[ 2640.897148][ T7087] usb 3-1: Manufacturer: syz
[ 2640.897154][ T7087] usb 3-1: SerialNumber: syz
[ 2640.903495][ T7087] usb 3-1: config 0 descriptor??
[ 2641.143065][T18934] loop0: detected capacity change from 0 to 2048
[ 2641.167161][ T7421] usb 3-1: USB disconnect, device number 41
[ 2641.191927][T18934] NILFS (loop0): invalid segment: Magic number mismatch
[ 2641.191949][T18934] NILFS (loop0): trying rollback from an earlier position
[ 2641.224267][T18934] NILFS (loop0): recovery complete
[ 2641.226512][T18936] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2641.693126][T18949] loop0: detected capacity change from 0 to 256
[ 2641.697913][T18949] exfat: Deprecated parameter 'namecase'
[ 2641.697945][T18949] exfat: Deprecated parameter 'namecase'
[ 2641.736185][T18949] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[ 2642.721524][T18988] loop0: detected capacity change from 0 to 2048
[ 2642.742300][T18988] NILFS (loop0): invalid segment: Magic number mismatch
[ 2642.742315][T18988] NILFS (loop0): trying rollback from an earlier position
[ 2642.761602][T18988] NILFS (loop0): recovery complete
[ 2642.763859][T18991] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2643.302743][ T7087] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 2643.474032][ T7087] usb 1-1: Using ep0 maxpacket: 8
[ 2643.474627][ T7087] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 2643.480398][T19016] FAULT_INJECTION: forcing a failure.
[ 2643.480398][T19016] name failslab, interval 1, probability 0, space 0, times 0
[ 2643.480417][T19016] CPU: 0 UID: 0 PID: 19016 Comm: syz.2.37570 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2643.480463][T19016] Tainted: [L]=SOFTLOCKUP
[ 2643.480468][T19016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2643.480497][T19016] Call Trace:
[ 2643.480504][T19016]  <TASK>
[ 2643.480510][T19016]  dump_stack_lvl+0xe8/0x150
[ 2643.480536][T19016]  should_fail_ex+0x410/0x560
[ 2643.480559][T19016]  should_failslab+0xa8/0x100
[ 2643.480579][T19016]  __kvmalloc_node_noprof+0x176/0x820
[ 2643.480597][T19016]  ? sbitmap_init_node+0x2bc/0x630
[ 2643.480616][T19016]  ? sbitmap_init_node+0x2bc/0x630
[ 2643.480638][T19016]  sbitmap_init_node+0x2bc/0x630
[ 2643.480653][T19016]  sbitmap_queue_init_node+0x3e/0x4d0
[ 2643.480663][T19016]  blk_mq_init_tags+0x15c/0x2d0
[ 2643.480673][T19016]  blk_mq_alloc_map_and_rqs+0xbc/0x980
[ 2643.480685][T19016]  ? __kmalloc_noprof+0x38c/0x720
[ 2643.480693][T19016]  ? __kmalloc_noprof+0x1ab/0x720
[ 2643.480700][T19016]  ? blk_mq_alloc_sched_tags+0x6e/0x380
[ 2643.480709][T19016]  ? blk_mq_alloc_sched_tags+0x6e/0x380
[ 2643.480721][T19016]  blk_mq_alloc_sched_tags+0x14d/0x380
[ 2643.480734][T19016]  blk_mq_alloc_sched_res+0x92/0x360
[ 2643.480753][T19016]  elevator_change+0x122/0x480
[ 2643.480762][T19016]  ? do_raw_spin_unlock+0x4d/0x200
[ 2643.480777][T19016]  elv_iosched_store+0x504/0x630
[ 2643.480790][T19016]  ? __pfx_elv_iosched_store+0x10/0x10
[ 2643.480808][T19016]  queue_attr_store+0x207/0x2b0
[ 2643.480823][T19016]  ? __pfx_queue_attr_store+0x10/0x10
[ 2643.480835][T19016]  ? lock_acquire+0x115/0x350
[ 2643.480843][T19016]  ? sysfs_file_kobj+0x1a/0x230
[ 2643.480858][T19016]  ? sysfs_file_kobj+0x1a/0x230
[ 2643.480869][T19016]  ? sysfs_file_kobj+0x1a/0x230
[ 2643.480879][T19016]  ? sysfs_file_kobj+0x1a/0x230
[ 2643.480890][T19016]  ? sysfs_file_kobj+0x1e4/0x230
[ 2643.480900][T19016]  ? sysfs_kf_write+0x166/0x260
[ 2643.480913][T19016]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 2643.480923][T19016]  kernfs_fop_write_iter+0x3a4/0x540
[ 2643.480935][T19016]  vfs_write+0x612/0xba0
[ 2643.480947][T19016]  ? __pfx_vfs_write+0x10/0x10
[ 2643.480959][T19016]  ? __fget_files+0x2a/0x420
[ 2643.480973][T19016]  ksys_write+0x150/0x270
[ 2643.480982][T19016]  ? __pfx_ksys_write+0x10/0x10
[ 2643.480994][T19016]  do_syscall_64+0x166/0x520
[ 2643.481005][T19016]  ? trace_irq_disable+0x3b/0x140
[ 2643.481013][T19016]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2643.481023][T19016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2643.481030][T19016] RIP: 0033:0x7f3ed539e159
[ 2643.481039][T19016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2643.481046][T19016] RSP: 002b:00007f3ed619e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2643.481055][T19016] RAX: ffffffffffffffda RBX: 00007f3ed5625fa0 RCX: 00007f3ed539e159
[ 2643.481062][T19016] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000005
[ 2643.481067][T19016] RBP: 00007f3ed543506b R08: 0000000000000000 R09: 0000000000000000
[ 2643.481072][T19016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2643.481077][T19016] R13: 00007f3ed5626038 R14: 00007f3ed5625fa0 R15: 00007fff405d6a78
[ 2643.481091][T19016]  </TASK>
[ 2643.483567][ T7087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2643.483580][ T7087] usb 1-1: Product: syz
[ 2643.483586][ T7087] usb 1-1: Manufacturer: syz
[ 2643.483591][ T7087] usb 1-1: SerialNumber: syz
[ 2643.485229][ T7087] usb 1-1: config 0 descriptor??
[ 2643.507560][T19016] netlink: 40 bytes leftover after parsing attributes in process `syz.2.37570'.
[ 2643.690965][T19020] loop2: detected capacity change from 0 to 512
[ 2643.721946][ T7087] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2643.745739][T19020] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[ 2643.745756][T19020] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2643.745763][T19020] EXT4-fs (loop2): The Hurd can't support 64-bit file systems
[ 2644.022369][T19028] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 2644.346829][T19026] loop2: detected capacity change from 0 to 32768
[ 2644.375162][T19026] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 2644.376865][ T7087] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 2644.378165][ T7087] usb 1-1: USB disconnect, device number 40
[ 2644.439253][T19026] XFS (loop2): Ending clean mount
[ 2644.449212][T19026] XFS (loop2): User initiated shutdown received.
[ 2644.449525][T19026] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468).  Shutting down filesystem.
[ 2644.449549][T19026] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[ 2644.511844][ T9173] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 2645.138441][T19052] loop0: detected capacity change from 0 to 1024
[ 2645.149586][T19052] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 2645.168119][T19052] EXT4-fs (loop0): 1 truncate cleaned up
[ 2645.516748][T19052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 2645.764559][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37587'.
[ 2645.793373][ T6187] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 2645.903120][T19064] 9pnet: p9_errstr2errno: server reported unknown error 
[ 2645.953865][ T6187] usb 1-1: Using ep0 maxpacket: 16
[ 2645.955968][ T6187] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2645.957348][ T6187] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2645.957358][ T6187] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2645.959247][ T6187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2645.959257][ T6187] usb 1-1: Product: syz
[ 2645.959263][ T6187] usb 1-1: Manufacturer: syz
[ 2645.959269][ T6187] usb 1-1: SerialNumber: syz
[ 2645.968056][ T6187] usb 1-1: 0:2 : does not exist
[ 2646.119066][T19076] team0: Device ipip1 is up. Set it down before adding it as a team port
[ 2646.191219][ T6187] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[ 2646.241499][ T6187] usb 1-1: USB disconnect, device number 41
[ 2646.268169][T16397] udevd[16397]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2646.287383][T19078] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[ 2646.383010][T19084] overlayfs: failed to clone upperpath
[ 2646.742898][T14514] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2648.278824][T19131] loop0: detected capacity change from 0 to 32768
[ 2648.299342][T19131] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 2648.333263][T19131] XFS (loop0): Ending clean mount
[ 2648.393887][T14514] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 2649.307839][T19191] loop0: detected capacity change from 0 to 32768
[ 2649.321225][T19191] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 2649.351851][T19191] XFS (loop0): Ending clean mount
[ 2649.412701][T14514] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 2649.520219][T19203] overlayfs: failed to resolve './file1/file0': -2
[ 2649.634823][T19209] overlayfs: failed to resolve './bus': -2
[ 2649.738969][T19211] netlink: 40 bytes leftover after parsing attributes in process `syz.4.37652'.
[ 2649.784992][T19217] netlink: 'syz.2.37654': attribute type 2 has an invalid length.
[ 2650.337666][T19238] netlink: 40 bytes leftover after parsing attributes in process `syz.4.37663'.
[ 2650.476240][ T5645] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 2650.637691][ T5645] usb 1-1: Using ep0 maxpacket: 8
[ 2650.641824][ T5645] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 2650.644609][ T5645] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2650.644622][ T5645] usb 1-1: Product: syz
[ 2650.644628][ T5645] usb 1-1: Manufacturer: syz
[ 2650.644634][ T5645] usb 1-1: SerialNumber: syz
[ 2650.652265][ T5645] usb 1-1: config 0 descriptor??
[ 2650.872984][ T5645] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2651.303938][ T5645] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 2651.305919][ T5645] usb 1-1: USB disconnect, device number 42
[ 2652.209910][T19273] 9p: Bad value for 'wfdno'
[ 2653.808378][T19298] jffs2: notice: (19298) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[ 2654.246038][T19305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37691'.
[ 2654.895832][T19316] loop2: detected capacity change from 0 to 4096
[ 2654.896858][T19316] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[ 2654.917405][T19316] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[ 2654.928845][T19316] ntfs3(loop2): mft corrupted
[ 2654.928887][T19316] ntfs3(loop2): Failed to load $Extend (-22).
[ 2654.928895][T19316] ntfs3(loop2): Failed to initialize $Extend.
[ 2655.221307][ T7421] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 2655.322676][T19327] loop2: detected capacity change from 0 to 32768
[ 2655.332611][T19327] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.37700 (19327)
[ 2655.336373][T19327] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 2655.336391][T19327] BTRFS info (device loop2): using blake2b checksum algorithm
[ 2655.390758][ T7421] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00
[ 2655.395021][ T7421] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2655.398963][ T7421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2655.398976][ T7421] usb 1-1: Product: syz
[ 2655.398982][ T7421] usb 1-1: Manufacturer: syz
[ 2655.398988][ T7421] usb 1-1: SerialNumber: syz
[ 2655.401878][ T7421] keyspan 1-1:1.0: Keyspan 1 port adapter converter detected
[ 2655.401965][ T7421] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84
[ 2655.402574][ T7421] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81
[ 2655.402650][ T7421] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 82
[ 2655.402682][ T7421] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1
[ 2655.424698][ T7421] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2
[ 2655.424735][ T7421] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 83
[ 2655.424768][ T7421] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 3
[ 2655.429743][T19327] BTRFS info (device loop2): enabling ssd optimizations
[ 2655.429756][T19327] BTRFS info (device loop2): enabling free space tree
[ 2655.430511][ T7421] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 2655.517914][   T34] kauditd_printk_skb: 6 callbacks suppressed
[ 2655.517929][   T34] audit: type=1800 audit(2000525414.437:3116): pid=19327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.37700" name="bus" dev="loop2" ino=263 res=0 errno=0
[ 2655.630855][T21448] usb 1-1: USB disconnect, device number 43
[ 2655.651532][T21448] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 2655.652027][T21448] keyspan 1-1:1.0: device disconnected
[ 2655.898235][ T9173] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 2656.141795][T19389] 9p: Bad value for 'rfdno'
[ 2656.624384][T19397] loop2: detected capacity change from 0 to 32768
[ 2656.638031][T19397] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.37726 (19397)
[ 2656.666789][T19397] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 2656.666807][T19397] BTRFS info (device loop2): using blake2b checksum algorithm
[ 2656.821396][T19397] BTRFS info (device loop2): enabling ssd optimizations
[ 2656.821412][T19397] BTRFS info (device loop2): enabling free space tree
[ 2656.838971][T19428] sctp: [Deprecated]: syz.4.37734 (pid 19428) Use of int in maxseg socket option.
[ 2656.838971][T19428] Use struct sctp_assoc_value instead
[ 2657.173443][   T34] audit: type=1800 audit(2000525415.981:3117): pid=19397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.37726" name="bus" dev="loop2" ino=263 res=0 errno=0
[ 2657.302486][T19440] dns_resolver: Unsupported content type (231)
[ 2657.535818][T19444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37740'.
[ 2657.725602][ T9173] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 2658.154102][T19461] loop2: detected capacity change from 0 to 4096
[ 2658.167403][T19461] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[ 2658.187757][T19461] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[ 2658.188080][T19461] ntfs3(loop2): mft corrupted
[ 2658.188114][T19461] ntfs3(loop2): Failed to load $Extend (-22).
[ 2658.188123][T19461] ntfs3(loop2): Failed to initialize $Extend.
[ 2658.664598][T19480] 9p: Bad value for 'wfdno'
[ 2659.581115][T19510] sctp: [Deprecated]: syz.0.37770 (pid 19510) Use of int in maxseg socket option.
[ 2659.581115][T19510] Use struct sctp_assoc_value instead
[ 2659.772705][T19517] 9pnet: p9_errstr2errno: server reported unknown error 
[ 2659.772705][T19517] 
[ 2659.899626][T19527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37777'.
[ 2660.009617][T19535] tipc: Started in network mode
[ 2660.009633][T19535] tipc: Node identity 0000000000002d000000000040000001, cluster identity 4711
[ 2660.009653][T19535] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 2660.082705][T19519] loop0: detected capacity change from 0 to 32768
[ 2660.095758][T19519] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.37774 (19519)
[ 2660.120744][T19519] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 2660.120770][T19519] BTRFS info (device loop0): using blake2b checksum algorithm
[ 2660.251174][T19519] BTRFS info (device loop0): enabling ssd optimizations
[ 2660.251191][T19519] BTRFS info (device loop0): enabling free space tree
[ 2660.256363][ T6187] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 2660.446654][ T6187] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2660.455403][ T6187] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2660.455429][ T6187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2660.456871][ T6187] usb 3-1: config 0 descriptor??
[ 2660.491773][ T6187] pwc: Askey VC010 type 2 USB webcam detected.
[ 2660.588570][T14514] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 2660.729064][ T6187] pwc: send_video_command error -71
[ 2660.729074][ T6187] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 2660.729125][ T6187] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[ 2660.730293][ T6187] usb 3-1: USB disconnect, device number 42
[ 2662.138783][T19632] loop0: detected capacity change from 0 to 32768
[ 2662.141418][T19632] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.37821 (19632)
[ 2662.144668][T19632] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 2662.144684][T19632] BTRFS info (device loop0): using sha256 checksum algorithm
[ 2662.209437][T19632] BTRFS info (device loop0): enabling ssd optimizations
[ 2662.209462][T19632] BTRFS info (device loop0): turning on async discard
[ 2662.209474][T19632] BTRFS info (device loop0): enabling free space tree
[ 2662.262133][T14514] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 2662.757561][T21448] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 2662.918499][T21448] usb 3-1: Using ep0 maxpacket: 32
[ 2662.919199][T21448] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 2662.920446][T21448] usb 3-1: config 0 has an invalid interface number: 119 but max is 0
[ 2662.920464][T21448] usb 3-1: config 0 has no interface number 0
[ 2662.920496][T21448] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2662.920510][T21448] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 2662.920527][T21448] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2662.920544][T21448] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 2662.923078][T21448] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2662.923095][T21448] usb 3-1: Product: syz
[ 2662.923105][T21448] usb 3-1: Manufacturer: syz
[ 2662.923114][T21448] usb 3-1: SerialNumber: syz
[ 2662.925455][T21448] usb 3-1: config 0 descriptor??
[ 2662.957223][T21448] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input55
[ 2663.002576][    C1] bcm5974 3-1:0.119: trackpad urb failed: -1
[ 2663.223338][ T6187] usb 3-1: USB disconnect, device number 43
[ 2663.867772][T19685] loop0: detected capacity change from 0 to 32768
[ 2663.876666][T19685] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.37837 (19685)
[ 2663.903318][T19685] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 2663.903344][T19685] BTRFS info (device loop0): using blake2b checksum algorithm
[ 2664.021347][T19685] BTRFS info (device loop0): enabling ssd optimizations
[ 2664.021369][T19685] BTRFS info (device loop0): enabling free space tree
[ 2664.050582][   T34] audit: type=1800 audit(2000525422.417:3118): pid=19685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.37837" name="bus" dev="loop0" ino=263 res=0 errno=0
[ 2664.110767][ T5645] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 2664.281761][ T5645] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[ 2664.282855][ T5645] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2664.282873][ T5645] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2664.285497][ T5645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2664.285509][ T5645] usb 3-1: Product: syz
[ 2664.285515][ T5645] usb 3-1: Manufacturer: syz
[ 2664.285521][ T5645] usb 3-1: SerialNumber: syz
[ 2664.288988][ T5645] usb 3-1: config 0 descriptor??
[ 2664.290923][ T5645] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[ 2664.309305][ T5645] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2664.311394][ T5645] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[ 2664.311420][ T5645] usb 3-1: media controller created
[ 2664.316853][ T5645] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2664.365183][ T5645] DVB: Unable to find symbol tda10046_attach()
[ 2664.365193][ T5645] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[ 2664.365200][ T5645] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[ 2664.511853][ T5645] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[ 2664.518269][ T5645] usb 3-1: USB disconnect, device number 44
[ 2664.550377][T19726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37848'.
[ 2664.995218][T14514] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 2665.714117][ T5820] Bluetooth: hci6: unexpected event for opcode 0x0c1b
[ 2666.671287][T19796] loop0: detected capacity change from 0 to 1024
[ 2666.843789][T19800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37883'.
[ 2667.043823][T19819] loop2: detected capacity change from 0 to 1024
[ 2667.340669][T19828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37894'.
[ 2667.640282][T19850] loop2: detected capacity change from 0 to 1024
[ 2667.681243][T19852] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[ 2667.805693][T19860] overlayfs: conflicting options: nfs_export=on,index=off
[ 2667.960689][T19875] loop2: detected capacity change from 0 to 1024
[ 2667.984362][    C0] tipc: RX(1000001): key[1] is activated
[ 2668.142954][T19881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2668.849687][T19908] loop0: detected capacity change from 0 to 512
[ 2668.857570][T19908] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 2668.895524][T19908] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.37929: invalid indirect mapped block 32768 (level 2)
[ 2668.895544][T19908] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[ 2668.903752][    C1] EXT4-fs (loop0): error count since last fsck: 1
[ 2668.903773][    C1] EXT4-fs (loop0): initial error at time 2000525426: ext4_free_branches:1023: inode 16
[ 2668.903794][    C1] EXT4-fs (loop0): last error at time 2000525426: ext4_free_branches:1023: inode 16
[ 2668.946998][T19908] EXT4-fs (loop0): 1 orphan inode deleted
[ 2668.947014][T19908] EXT4-fs (loop0): 1 truncate cleaned up
[ 2668.948456][T19908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2669.004621][T19908] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2669.162606][T19916] loop0: detected capacity change from 0 to 512
[ 2669.192462][T19916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2669.192535][T19916] ext4 filesystem being mounted at /569/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2669.218302][T19916] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 25 (only 1 groups)
[ 2669.251410][T14514] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2669.310119][T21448] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 2669.470273][T21448] usb 3-1: Using ep0 maxpacket: 8
[ 2669.470789][T21448] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 2669.473674][T21448] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2669.473686][T21448] usb 3-1: Product: syz
[ 2669.473691][T21448] usb 3-1: Manufacturer: syz
[ 2669.473697][T21448] usb 3-1: SerialNumber: syz
[ 2669.475068][T21448] usb 3-1: config 0 descriptor??
[ 2669.691156][T21448] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2669.907135][T21448] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 2670.316340][T19947] loop0: detected capacity change from 0 to 1024
[ 2670.710552][   T36] INFO: task syz.7.32548:6690 blocked for more than 143 seconds.
[ 2670.710574][   T36]       Tainted: G             L      syzkaller #0
[ 2670.710579][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2670.710583][   T36] task:syz.7.32548     state:D stack:28712 pid:6690  tgid:6688  ppid:4717   task_flags:0x400140 flags:0x00080002
[ 2670.710606][   T36] Call Trace:
[ 2670.710610][   T36]  <TASK>
[ 2670.710616][   T36]  __schedule+0x17db/0x58f0
[ 2670.710631][   T36]  ? __lock_acquire+0x747/0x2de0
[ 2670.710650][   T36]  ? __pfx___schedule+0x10/0x10
[ 2670.710659][   T36]  ? lock_acquire+0x115/0x350
[ 2670.710670][   T36]  ? schedule+0x90/0x2b0
[ 2670.710680][   T36]  schedule+0x164/0x2b0
[ 2670.710690][   T36]  cgroup_lock_and_drain_offline+0x51a/0x650
[ 2670.710704][   T36]  ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10
[ 2670.710712][   T36]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 2670.710723][   T36]  ? bpf_lsm_capable+0x9/0x20
[ 2670.710731][   T36]  ? security_capable+0x7e/0x2c0
[ 2670.710744][   T36]  cgroup1_get_tree+0x9d/0x890
[ 2670.710754][   T36]  ? apparmor_capable+0x126/0x170
[ 2670.710763][   T36]  ? bpf_lsm_capable+0x9/0x20
[ 2670.710772][   T36]  vfs_get_tree+0x92/0x2a0
[ 2670.710782][   T36]  do_new_mount+0x319/0xdc0
[ 2670.710795][   T36]  ? __pfx_do_new_mount+0x10/0x10
[ 2670.710806][   T36]  ? ns_capable+0x89/0xe0
[ 2670.710816][   T36]  ? path_mount+0x647/0x1050
[ 2670.710827][   T36]  ? user_path_at+0xd4/0x160
[ 2670.710836][   T36]  __se_sys_mount+0x31d/0x420
[ 2670.710849][   T36]  ? __pfx___se_sys_mount+0x10/0x10
[ 2670.710861][   T36]  ? __x64_sys_mount+0x20/0xc0
[ 2670.710873][   T36]  do_syscall_64+0x166/0x520
[ 2670.710883][   T36]  ? trace_irq_disable+0x3b/0x140
[ 2670.710891][   T36]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2670.710901][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2670.710908][   T36] RIP: 0033:0x7fdeda59e159
[ 2670.710916][   T36] RSP: 002b:00007fdedb53a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2670.710924][   T36] RAX: ffffffffffffffda RBX: 00007fdeda825fa0 RCX: 00007fdeda59e159
[ 2670.710929][   T36] RDX: 0000200000000240 RSI: 0000200000000000 RDI: 0000000000000000
[ 2670.710934][   T36] RBP: 00007fdeda63506b R08: 0000200000000100 R09: 0000000000000000
[ 2670.710939][   T36] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000000
[ 2670.710944][   T36] R13: 00007fdeda826038 R14: 00007fdeda825fa0 R15: 00007ffdc8922ab8
[ 2670.710957][   T36]  </TASK>
[ 2670.710963][   T36] INFO: task syz.6.32843:7401 blocked for more than 143 seconds.
[ 2670.710970][   T36]       Tainted: G             L      syzkaller #0
[ 2670.710974][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2670.710977][   T36] task:syz.6.32843     state:D stack:28240 pid:7401  tgid:7395  ppid:7234   task_flags:0x400140 flags:0x00080002
[ 2670.710997][   T36] Call Trace:
[ 2670.710999][   T36]  <TASK>
[ 2670.711004][   T36]  __schedule+0x17db/0x58f0
[ 2670.711014][   T36]  ? __lock_acquire+0x747/0x2de0
[ 2670.711031][   T36]  ? __pfx___schedule+0x10/0x10
[ 2670.711039][   T36]  ? lock_acquire+0x115/0x350
[ 2670.711051][   T36]  ? schedule+0x90/0x2b0
[ 2670.711061][   T36]  schedule+0x164/0x2b0
[ 2670.711107][   T36]  cgroup_lock_and_drain_offline+0x51a/0x650
[ 2670.711128][   T36]  ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10
[ 2670.711140][   T36]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 2670.711153][   T36]  ? bpf_lsm_capable+0x9/0x20
[ 2670.711159][   T36]  ? security_capable+0x7e/0x2c0
[ 2670.711172][   T36]  cgroup1_get_tree+0x9d/0x890
[ 2670.711182][   T36]  ? apparmor_capable+0x126/0x170
[ 2670.711190][   T36]  ? bpf_lsm_capable+0x9/0x20
[ 2670.711199][   T36]  vfs_get_tree+0x92/0x2a0
[ 2670.711208][   T36]  do_new_mount+0x319/0xdc0
[ 2670.711220][   T36]  ? __pfx_do_new_mount+0x10/0x10
[ 2670.711231][   T36]  ? ns_capable+0x89/0xe0
[ 2670.711241][   T36]  ? path_mount+0x647/0x1050
[ 2670.711253][   T36]  ? user_path_at+0xd4/0x160
[ 2670.711261][   T36]  __se_sys_mount+0x31d/0x420
[ 2670.711273][   T36]  ? __pfx___se_sys_mount+0x10/0x10
[ 2670.711286][   T36]  ? __x64_sys_mount+0x20/0xc0
[ 2670.711296][   T36]  do_syscall_64+0x166/0x520
[ 2670.711306][   T36]  ? trace_irq_disable+0x3b/0x140
[ 2670.711314][   T36]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2670.711323][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2670.711330][   T36] RIP: 0033:0x7fb5e779e159
[ 2670.711337][   T36] RSP: 002b:00007fb5e8608028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2670.711345][   T36] RAX: ffffffffffffffda RBX: 00007fb5e7a26180 RCX: 00007fb5e779e159
[ 2670.711350][   T36] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000000
[ 2670.711355][   T36] RBP: 00007fb5e783506b R08: 0000200000000000 R09: 0000000000000000
[ 2670.711360][   T36] R10: 0000000002010042 R11: 0000000000000246 R12: 0000000000000000
[ 2670.711365][   T36] R13: 00007fb5e7a26218 R14: 00007fb5e7a26180 R15: 00007ffdfe675e28
[ 2670.711377][   T36]  </TASK>
[ 2670.711383][   T36] INFO: task syz.8.33429:8795 blocked for more than 143 seconds.
[ 2670.711389][   T36]       Tainted: G             L      syzkaller #0
[ 2670.711394][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2670.711397][   T36] task:syz.8.33429     state:D stack:28808 pid:8795  tgid:8794  ppid:13085  task_flags:0x400140 flags:0x00080002
[ 2670.711416][   T36] Call Trace:
[ 2670.711419][   T36]  <TASK>
[ 2670.711424][   T36]  __schedule+0x17db/0x58f0
[ 2670.711433][   T36]  ? __lock_acquire+0x747/0x2de0
[ 2670.711450][   T36]  ? __pfx___schedule+0x10/0x10
[ 2670.711458][   T36]  ? lock_acquire+0x115/0x350
[ 2670.711470][   T36]  ? schedule+0x90/0x2b0
[ 2670.711480][   T36]  schedule+0x164/0x2b0
[ 2670.711490][   T36]  cgroup_lock_and_drain_offline+0x51a/0x650
[ 2670.711502][   T36]  ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10
[ 2670.711510][   T36]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 2670.711521][   T36]  ? bpf_lsm_capable+0x9/0x20
[ 2670.711528][   T36]  ? security_capable+0x7e/0x2c0
[ 2670.711541][   T36]  cgroup1_get_tree+0x9d/0x890
[ 2670.711550][   T36]  ? apparmor_capable+0x126/0x170
[ 2670.711558][   T36]  ? bpf_lsm_capable+0x9/0x20
[ 2670.711573][   T36]  vfs_get_tree+0x92/0x2a0
[ 2670.711581][   T36]  do_new_mount+0x319/0xdc0
[ 2670.711638][   T36]  ? __pfx_do_new_mount+0x10/0x10
[ 2670.711652][   T36]  ? ns_capable+0x89/0xe0
[ 2670.711662][   T36]  ? path_mount+0x647/0x1050
[ 2670.711673][   T36]  ? user_path_at+0xd4/0x160
[ 2670.711681][   T36]  __se_sys_mount+0x31d/0x420
[ 2670.711694][   T36]  ? __pfx___se_sys_mount+0x10/0x10
[ 2670.711707][   T36]  ? __x64_sys_mount+0x20/0xc0
[ 2670.711718][   T36]  do_syscall_64+0x166/0x520
[ 2670.711728][   T36]  ? trace_irq_disable+0x3b/0x140
[ 2670.711735][   T36]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2670.711744][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2670.711751][   T36] RIP: 0033:0x7f8613b9e159
[ 2670.711758][   T36] RSP: 002b:00007f8614b2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2670.711765][   T36] RAX: ffffffffffffffda RBX: 00007f8613e25fa0 RCX: 00007f8613b9e159
[ 2670.711771][   T36] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 0000000000000000
[ 2670.711776][   T36] RBP: 00007f8613c3506b R08: 0000200000000800 R09: 0000000000000000
[ 2670.711780][   T36] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000000
[ 2670.711785][   T36] R13: 00007f8613e26038 R14: 00007f8613e25fa0 R15: 00007ffeda46fee8
[ 2670.711797][   T36]  </TASK>
[ 2670.711820][   T36] 
[ 2670.711820][   T36] Showing all locks held in the system:
[ 2670.711825][   T36] locks held by khungtaskd/36: 1, last CPU#1:
[ 2670.711831][   T36]  #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 2670.711871][   T36] locks held by getty/5419: 2, on CPU#1:
[ 2670.711877][   T36]  #0: ffff888115e570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2670.711896][   T36]  #1: ffffc900034832e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[ 2670.711917][   T36] locks held by kworker/0:6/6187: 3, on CPU#0:
[ 2670.711923][   T36]  #0: ffff88810006a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 2670.711943][   T36]  #1: ffffc90003cdfc40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 2670.711962][   T36]  #2: ffff88810b5ab1d8 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120
[ 2670.712051][   T36] locks held by kworker/u9:30/32230: 4, last CPU#0:
[ 2670.712058][   T36]  #0: ffff888118e25940 ((wq_completion)wg-kex-wg2#17){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 2670.712112][   T36]  #1: ffffc900042ffc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 2670.712140][   T36]  #2: ffff888118999440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[ 2670.712160][   T36]  #3: ffff8881138b4888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[ 2670.712181][   T36] locks held by kworker/1:7/7421: 1, last CPU#1:
[ 2670.712186][   T36]  #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x97a/0x1630
[ 2670.712221][   T36] 
[ 2670.712223][   T36] =============================================
[ 2670.712223][   T36] 
[ 2670.712227][   T36] NMI backtrace for cpu 1
[ 2670.712234][   T36] CPU: 1 UID: 0 PID: 36 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2670.712245][   T36] Tainted: [L]=SOFTLOCKUP
[ 2670.712247][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2670.712252][   T36] Call Trace:
[ 2670.712255][   T36]  <TASK>
[ 2670.712259][   T36]  dump_stack_lvl+0xe8/0x150
[ 2670.712270][   T36]  nmi_cpu_backtrace+0x274/0x2d0
[ 2670.712279][   T36]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2670.712291][   T36]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[ 2670.712301][   T36]  sys_info+0x135/0x170
[ 2670.712308][   T36]  watchdog+0xfd7/0x1030
[ 2670.712319][   T36]  ? watchdog+0x1c7/0x1030
[ 2670.712328][   T36]  kthread+0x38b/0x480
[ 2670.712337][   T36]  ? __pfx_watchdog+0x10/0x10
[ 2670.712343][   T36]  ? __pfx_kthread+0x10/0x10
[ 2670.712351][   T36]  ret_from_fork+0x514/0xb70
[ 2670.712359][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[ 2670.712366][   T36]  ? __switch_to+0xc89/0x1420
[ 2670.712377][   T36]  ? __pfx_kthread+0x10/0x10
[ 2670.712385][   T36]  ret_from_fork_asm+0x1a/0x30
[ 2670.712400][   T36]  </TASK>
[ 2670.712403][   T36] Sending NMI from CPU 1 to CPUs 0:
[ 2670.712438][    C0] NMI backtrace for cpu 0
[ 2670.712450][    C0] CPU: 0 UID: 0 PID: 32230 Comm: kworker/u9:30 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2670.712461][    C0] Tainted: [L]=SOFTLOCKUP
[ 2670.712464][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2670.712469][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[ 2670.712486][    C0] RIP: 0010:crng_fast_key_erasure+0x78/0x260
[ 2670.712499][    C0] Code: ff df 48 c7 44 24 20 b3 8a b5 41 48 c7 44 24 28 46 a8 6a 8e 48 c7 44 24 30 60 4f 77 85 48 8d 5c 24 20 48 c1 eb 03 4a 89 04 3b <48> b8 f8 f8 f8 f8 f3 f3 f3 f3 4a 89 44 3b 08 e8 64 bf 50 fc 4a c7
[ 2670.712506][    C0] RSP: 0018:ffffc900042ff780 EFLAGS: 00000802
[ 2670.712512][    C0] RAX: f8f8f8f8f1f1f1f1 RBX: 1ffff9200085fef4 RCX: 0000000000000002
[ 2670.712518][    C0] RDX: ffff8881bc506022 RSI: ffffc900042ff900 RDI: ffff888121037410
[ 2670.712523][    C0] RBP: ffffc900042ff870 R08: ffffffff857743f6 R09: 0000000000000001
[ 2670.712528][    C0] R10: dffffc0000000000 R11: fffffbfff20f4c50 R12: ffffc900042ff900
[ 2670.712533][    C0] R13: ffff888121037410 R14: ffff888121037410 R15: dffffc0000000000
[ 2670.712550][    C0] FS:  0000000000000000(0000) GS:ffff88818d6c7000(0000) knlGS:0000000000000000
[ 2670.712556][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2670.712561][    C0] CR2: 00002000000016c0 CR3: 0000000027cd4000 CR4: 00000000000006f0
[ 2670.712590][    C0] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2670.712597][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 2670.712601][    C0] Call Trace:
[ 2670.712604][    C0]  <TASK>
[ 2670.712609][    C0]  ? __pfx_crng_fast_key_erasure+0x10/0x10
[ 2670.712622][    C0]  ? rcu_is_watching+0x16/0xb0
[ 2670.712632][    C0]  crng_make_state+0x1ce/0x600
[ 2670.712642][    C0]  ? crng_make_state+0xb6/0x600
[ 2670.712679][    C0]  _get_random_bytes+0xff/0x260
[ 2670.712689][    C0]  ? __pfx__get_random_bytes+0x10/0x10
[ 2670.712699][    C0]  ? __kmalloc_node_track_caller_noprof+0x4d2/0x720
[ 2670.712708][    C0]  ? __kmalloc_node_track_caller_noprof+0x2eb/0x720
[ 2670.712719][    C0]  nsim_dev_trap_report_work+0x680/0xb40
[ 2670.712729][    C0]  ? process_scheduled_works+0x97a/0x1630
[ 2670.712738][    C0]  process_scheduled_works+0xc3d/0x1630
[ 2670.712753][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2670.712764][    C0]  ? assign_work+0x3cf/0x5d0
[ 2670.712773][    C0]  worker_thread+0xa47/0xfb0
[ 2670.712788][    C0]  kthread+0x38b/0x480
[ 2670.712797][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 2670.712810][    C0]  ? __pfx_kthread+0x10/0x10
[ 2670.712821][    C0]  ret_from_fork+0x514/0xb70
[ 2670.712833][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 2670.712846][    C0]  ? __switch_to+0xc89/0x1420
[ 2670.712864][    C0]  ? __pfx_kthread+0x10/0x10
[ 2670.712876][    C0]  ret_from_fork_asm+0x1a/0x30
[ 2670.712901][    C0]  </TASK>
[ 2670.713438][   T36] Kernel panic - not syncing: hung_task: blocked tasks
[ 2671.120447][   T36] CPU: 1 UID: 0 PID: 36 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2671.123815][   T36] Tainted: [L]=SOFTLOCKUP
[ 2671.125166][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2671.128287][   T36] Call Trace:
[ 2671.129353][   T36]  <TASK>
[ 2671.130309][   T36]  vpanic+0x56d/0xa60
[ 2671.131672][   T36]  ? __pfx_vpanic+0x10/0x10
[ 2671.133096][   T36]  ? console_srcu_read_unlock+0x3a/0x60
[ 2671.134826][   T36]  panic+0xc5/0xd0
[ 2671.136032][   T36]  ? __pfx_panic+0x10/0x10
[ 2671.137492][   T36]  ? wq_watchdog_touch+0xf9/0x160
[ 2671.139087][   T36]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[ 2671.140945][   T36]  watchdog+0x1030/0x1030
[ 2671.142404][   T36]  ? watchdog+0x1c7/0x1030
[ 2671.144008][   T36]  kthread+0x38b/0x480
[ 2671.145280][   T36]  ? __pfx_watchdog+0x10/0x10
[ 2671.146761][   T36]  ? __pfx_kthread+0x10/0x10
[ 2671.148243][   T36]  ret_from_fork+0x514/0xb70
[ 2671.149713][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[ 2671.151293][   T36]  ? __switch_to+0xc89/0x1420
[ 2671.152737][   T36]  ? __pfx_kthread+0x10/0x10
[ 2671.154292][   T36]  ret_from_fork_asm+0x1a/0x30
[ 2671.155757][   T36]  </TASK>
[ 2671.157680][   T36] Kernel Offset: disabled
[ 2671.159063][   T36] Rebooting in 86400 seconds..
