last executing test programs:

1m27.768665145s ago: executing program 0 (id=62):
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000004c0), 0x14000, 0x0)
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x2010880, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES8=r0, @ANYRES8, @ANYRES16=0x0], 0x0, 0x6240, &(0x7f0000023d00)="$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")
llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x8c)
ioctl$CDROMREADMODE2(r0, 0x530c, &(0x7f0000000c80)={0x4, 0x1, 0x0, 0xd, 0xf, 0x9b})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000100)={{0x0, 0xfe}, {0x8, 0x14}, 0x10001, 0x2, 0x2})
r1 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x402, @dev={0xfe, 0x80, '\x00', 0x25}, 0x200101}, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1b8)
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6e6f6e756d7461696c003130dbbb3121258e322c262b537f5d0000006e695f7804590000000000003d312c696f63686172538c6c90392bc69373686f72746e616d65653ff959f53d6d697865642c636f6465706167653d3821332c696f6368617273650000000031323831e54f1bb0a3d72c007e3db5a829498e2a721ae5804ff8ccb41eff157cfdfcef90a6010100003ceeeac934b3165b4a0ea182cdd0666ab32f2d041a99ac9fc865ba946f1bb7759d02742dfcc68937ff86d7a54d6de8823119c767d45d6047209f4436383ee21373a9c3f450cb6d7c37b59a34407d4a0e6a382108ddd52580281f1d8ad71c4ceafb49960f1429b090d1429f519f9c2b0cb88ffa6fc04fa61c275bf560b9eeeb2d0c8b3ddeb56783f9908c21cf9b2ba0b76b9b60c991bb17c7d0accad1cdaf3259b7dc405d72e2bc3abe0cf37bda3dbfc05e2e55f8aa272b5ea736019c3c0a9b34115a445e0c5da1bd7352ec9529f5caa71f1ae71b36b500c79fffb487ed081232b5d93d3162c7f71f4d5756c9e5442fa3692127266a0c15dac9171edda86b148d17a48d4d90470e79620eeab5acf6f78f807298315e2b80fe1874098d75ab47837a96699e2a7db456f2a4368bece813135ed970951c7471ac16703820a799421cb24f32a5f49ab45bec637c38bcbdae4da3a05f96b2162c47d0b1277e1b1bcc981cce8f6f7f3dd8d06352eb387997b498a732d8442115755ff14d508891abd401b3cafcba75a6901fbe08002674d8663b8c40e9cf13fa4c4a092cb8004a1d2a6fe18cd5d702493d52a7110b17e64b9fa22fb3ace98b9ca35cb98c65f0902dd430373f6ae43c4a60c423b6f65b5ecc2093698072abc857ab2d36a261a7fc5776d39c3d5d5fad291c88ff9726d5ee32c6bcac1799ade9459eb39b56d985d29b988c72c9ad7e82b589f454a58d7cd5ace9436cf69acc217737c863d8938cc95767a0c9b14cb79f5b45ea2408d1da65a2ed8cf55a"], 0x4, 0x24e, &(0x7f0000000a00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000880)={0x746e, 0xbdb, 0xfff})

1m27.31952027s ago: executing program 0 (id=68):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c00000800018004"], 0x1c}}, 0xc000)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x2, 0x3000001, @local, 0x6}, 0x1c)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYRES64], 0x88, 0x68f, &(0x7f0000000b80)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff})
listxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000380)=""/114, 0x72)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x542, &(0x7f0000000cc0)="$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")
readlink(&(0x7f0000000080)='./file2\x00', &(0x7f0000000280)=""/71, 0x47)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)

1m27.257176627s ago: executing program 0 (id=69):
syz_mount_image$xfs(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x11, &(0x7f0000000380)={[{@grpquota}, {@nolargeio}, {@logbufs={'logbufs', 0x3d, 0x3}}]}, 0x1, 0xb8aa, &(0x7f000000b880)="$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")

1m26.860474768s ago: executing program 0 (id=70):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)="1073eeda8705da74bc83496ee251e51e6d155c558a4f6dbf7076341df55b7aecaad952f364f05d5e0f", 0x29}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bd", 0x41}], 0x2}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000b00)="74a4e85cc89d33547afbda9d629f9f9f20b9b051442633488e9e33357c312479a404b3704c8d07860bf96d27dfa418938111b5863b28d31d6185a51a0ad41082802e5ca3be41e7ceac5799eac6bb0ff074730031c7dca06f1e3f85a9c396610ab3bce2e140e31e878fe2bb2c4c9bbdf6cf9fc309342407cb59bd5086e9dd41ade97c48664286653e4c390266c307182581eb72c91b5a03000000000000001b4b977e05116405bcf3c2da0b1194f01177fdd42215aa0a0a16dc8da2444854aae3729ffa795dd6e19d7fd7bdc62087", 0xce}, {&(0x7f0000000a40)="d82d33a6d81edc4b66cc88bf8c1a89a600010000000000006cab778d9631e23dc7b23087ca46c503e8b9bbf55511a47353213e9469564dc8aea385d25838f30a8b23ee20331856a97befcd9aaf4dba1e25357aa609052646e4f9b3f06de214eaa4734947274e4afa8de4aa82a84c49eb1e3b8fd516eee5361965121396212193511b75", 0x83}, {&(0x7f0000000580)="4cc291a1339f36fedfa937c3d768baa73ddc72c419695988fc8177e38f1379e15e6745bbb565b5a19e98a179b04a46aeeb2ae125123d2bb33ca7f7a32c4b04399893a25cdc4147", 0x47}, {&(0x7f0000000640)="4f5d11a3bedb1e613a22193c7efc0895ad8a3a732fc9ac7b82813fb06350e990d28156283d5b74e91294a85de9d112834691b29f7b8de2d221534387bb87a9000000006d90826596c1f8831c143bb8e2e7acd2128a4925e5c6e0a2131998d6d58ff9c3db3eb27243ac492f85077253fe06879f2a950f0ab0a7b4ffd3b60a365836b69adfc1ca21956b58515c62ef1093700b02bdcbab80daeb72f080b97c93670977b6a834487fac91000000000000", 0xaf}, {&(0x7f0000000700)="127e9e1fed85c92de6f35b0f5c5773cd2459424b46b24ee9f4a0a91f84a17ebf143111d986c7efde91a12cf09a83e70646f840c7c1dcf14a20e9e866989bc789469b60cef2dfd741ac914aab6751cf163f6acba335a266c0838f3be62539be506c2338c495277d70a1bb9021daa95c64d1c5e0134505179d0fef2933e0b19861951bb1bb630b9b4127f46b946ec1f7141b3ec2c9d11074b6ec41a314414c3f966cd19ab1ad99ddf83a1dd134358a68c0", 0xb0}, {&(0x7f00000007c0)="38efe9d712d905bf9f3d662a241229ad7ff87611e1aa1b7627a1f2079978a3", 0x1f}], 0x6}}], 0x2, 0x8810)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000b40)='./file2\x00', 0x201480a, &(0x7f00000003c0)=ANY=[], 0xdd, 0x1eb, &(0x7f0000000b80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffc4c})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r4)
tkill(r4, 0x12)
tkill(r4, 0x12)
ptrace(0x4208, r4)
sendto$inet6(r3, &(0x7f0000000000)="836bb66f", 0x18, 0x0, 0x0, 0x0)

1m26.485173552s ago: executing program 0 (id=72):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x12000000}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0)
syslog(0xa, &(0x7f0000000180)=""/240, 0xf0)
r1 = socket$kcm(0xa, 0x3, 0x3a)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1b34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x3, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x2f}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x8}}}}}]}}]}}, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c)
setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, '\x00', "afc000", "1f991d9c", "d570f648c0ec6f65"}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r5, 0x7af, &(0x7f0000000140)={@hyper, 0x6})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, &(0x7f0000000080)={0x0, 0x1})
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000006c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="20012f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000170100000300000000000000000000003000000000000000170100000200000017000000d29cc2776e13e2b8d2699b793d58d5f4faf70f20eb1cbf0000000000a0000000000000001701000002000000c6"], 0x128}], 0x1, 0x40800)
r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f048, 0xff80})
sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="cc740595", 0x4}], 0x1, &(0x7f0000000d80)=[{0x18, 0x29, 0x4, "bf"}], 0x18}, 0x4000004)
socket$inet6(0xa, 0x4, 0x4)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000002480)=ANY=[@ANYBLOB='volume=00000000000000000062,gid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=")
pipe(&(0x7f00000001c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
fcntl$dupfd(r8, 0x406, r8)

1m26.080613761s ago: executing program 0 (id=73):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x7c, 0x10, 0x403, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x7}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x7c}, 0x1, 0xba01, 0x0, 0x3000000}, 0x0)

1m25.912805746s ago: executing program 32 (id=73):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x7c, 0x10, 0x403, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x7}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x7c}, 0x1, 0xba01, 0x0, 0x3000000}, 0x0)

1m17.500758143s ago: executing program 3 (id=117):
syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="cf", 0x1}], 0x1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x70bd32, 0x25dfdbfd, {0x2, 0x1f, 0x48, 0xff, r7}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_CSA_IES={0x10, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x8001, 0x5, 0x9d, 0x0]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xeaa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x4008041)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000000004", @ANYRES8=r0], 0x28}, 0x4000885)

1m17.434178731s ago: executing program 3 (id=118):
r0 = getpgid(0x0)
ptrace$ARCH_SET_CPUID(0x1e, r0, 0x0, 0x1012)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00'], 0x50)
r1 = socket$inet(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f0000000e00)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e394456c1c8c4a4fc84fea7cabb001968d0d3591bee2f2c93453aa0e750a0b57ffb2d9eeba407a2e8b16c7b6bbeb5ff7fd5fc6c95c4169ffd42357bc6dfbcb88ca559d001460faf3504f22c5853ffa0860ad22946569f51608372adbc094dafdd94e8cc7eeb17d679ca2466e36ae023e13fb304a68f95dc1c56fd365fcf5af0a961b9a7e79e615d6c7daa97af0dca88191b4547239725d1dec265fcced6f805f894c1abdf83b56759ee877f9f220c1ef112adae061e7b6ba836f436d4d3af", @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=")
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000001780)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001740), 0xa, r3})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$key(0xffffffffffffffff, 0x0, 0x880)
r6 = semget$private(0x0, 0x6, 0x0)
semtimedop(r6, 0x0, 0x0, 0x0)
semctl$GETPID(r6, 0x4, 0xb, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x13}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)

1m16.345424964s ago: executing program 3 (id=122):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000001900)=0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x1, @remote, 0x23}, 0x1c)
setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000000c0)="b9", 0x1)
sendmmsg$inet6(r1, &(0x7f00000019c0)=[{{&(0x7f0000000100)={0xa, 0x4e1f, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x9, @mcast2, 0x2}, 0x1c, &(0x7f0000001a80), 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="d000000000000000290000003600000000160000000000000740000000000ef90600b904000000000000ff01000000000000190000000000000008000000000000000700000000000000890000000000000003000000000000000f70248cca48b8b86181c7b2a9185dbfb9a923fd07ad663c50028c693c62ae431863561665ae0649db24d9617cfdf976098a7295b482f54dbc937a27d704180af6c628fab6a62abbe9a4f1f348614b67e2054b4bbd4a47f52773cd8504ebc587547d766756ed54642eaf068611681257554f00000000"], 0xd0}}, {{0x0, 0x0, &(0x7f0000001540)}}], 0x3, 0x20002040)

1m16.259784836s ago: executing program 3 (id=123):
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file4\x00', 0x10, 0xdd)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$eJzs3c1rXWkZAPDnPc1NbzrtzJ22ttaOckHBMmJJ006qpjjWyQSE4oRp04UrY5N2wtwkJclIOgzahejG/8HVbBRkQN0ILnTrQnciA67ErVEGBhRHOSfnfiUZk5mbm4/m94PknnvOcz7eAwk872cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABFff/nm8JW0308BAAAA9NM3b786PCL/BwAAgCfaHe3/AAAAAAAAAHDYpcjih5Fi9dRaOll8X1e9NbfwxurU+MTWpw2l4sxjRXz+U70ycvXaC6PXv9T8/P/n77YL8crtOzfrLy3OP1yaXV6enalPLczdW5yZ3fEVej1/o+eLF1Cff/2Nmfv3l+sjl692HV6t/e34U+dqY19++eytZuzU+MTE7Y6YgcrHvvsmengAAAAcbYORxbVIcefiz9OpiMii91x4m7qDfhuKWp5/F4WYGp8oCtKYm15YyQ9ONhPhWndOPNjMkfcgF+9JLeJ0/qyDMnoAAAB2rhJZfCZSXPhgLT0dEceaefAXiokBt79AbQ8ecgsDEXEmIi7FIcjZAQAAYJ8djyxejRS/adTimTKvLvL/r0WM7ffDAQAAALtiILK4HineG1tLtaI/QEQ8PzU+Ub91t/6NhfuLHbGTqWxRP+zjA/aSvgkAAAAcANXI4lTR4r+Wnv2QmIE9fiYAAABgdw1FFv+KFJ9/8bvFvHJRzEv/zNhXTt6Y6Jxh7vw218ljL0fExR2Oya+Ucw1OpsmUsk1Xe7wrhQMAAAAK1ZTFXyPF+3+uFt8vlbl50ugPAAAAT46UxQ8ixVcn11LasC79sY71/VsO+9j//j7/UPWlxYePluYevLay5fET1ZvfWV5Zmr639eH1tQu7ukNst44hAAAA7EAlZfHPSPH7xjutvLNcA6DsAdBONN++0c5Nq2nD0aLe4Omi3qA1huCpkZHO7S1T1o8wP16tvO+x3osNAAAAR0pKWQxGis/97pPl2v8nYlMbdBn3h0hxY/G5Mi4bzOOawwRqxe/q/bnG7HAeOx4pftloxkYRe7yMPdOOvZLH/ja/7nR3bLWMPduOHcljP4gUry1tHfuJduzVPHYpUvzsJ/Vm7Ik89mQZe64de/neYmOmby8YAAAADoBKyuJXkeLH/663hvx3t/+3W9vffqvd3r9pgr4PafPvtf2/1rHvcVkPcbysrxjYpr7ilUhx4dnnmuUp6gqa3QrW1zpo11f8I1Isfas7drCMPd2OvbLjFwsAAAAHSLP//x/v/rrV5b7MgcuvW+f/n9o4P2Cf8v/ONQnzey4/evP16UZjdmk/Nyof8azvR0TXnnQQSmHjv6WD8jx7ulH+UT0+KM/T60Zv/wcBAOAoyPP/u5Fi9b13W+3dZf5fdpVv5//vf6+d/49tvFCf8v/THfvGyvkGKgMR1ZX5h5XzEdXlR29+cW5++sHsg9mFq6MvjA6Pjl6/NlIZbDbut7d6flcAAABwWOX5/3Ck+PuPftoan7+T9v8TGy/Up/z/TMe+/J7tRr98z196LT4AAAAcCXn+/4tI8aeL77Tm0evO/zvm/3+rPc7+0mfXewu0agf6lP+f7dhXK+4bMbRLZQcAAAAAAAAAAAAAAAAAAICDopKy+E+keLc6kMoJ/3c0/9/Mxgv1afz/uY59M7E36//1/FIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkMoii7lI8enza+nFfMe3I052fgIAAACH3v8CAAD//16XHzs=")
write$binfmt_script(r1, &(0x7f00000008c0), 0xfecc)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.kill\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)

1m16.11854818s ago: executing program 3 (id=124):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0xfffffe1a, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xe, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xc5, 0x0, 0x1}}, 0x40)
r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0xf00, 0x0, 0x80}, 0x4000810)
openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)}, 0x10)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xd0, &(0x7f00000002c0)=ANY=[])
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x824, 0x0, 0x2}, {0x0, 0x3, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x2, 0x2b}, 0x0, @in6=@local, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r5 = socket$inet(0x2, 0x2, 0x1)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x20000810)
r7 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400)
ioctl$NBD_SET_SIZE(r7, 0xab02, 0x200)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r8, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x6}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0xf04a70bee95f8f64}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x70}, 0x0)

1m15.808367608s ago: executing program 3 (id=126):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)

1m15.521724994s ago: executing program 33 (id=126):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)

4.493078475s ago: executing program 2 (id=600):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001400)={&(0x7f0000000e00)=@deltclass={0x434, 0x29, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xc}, {0xfff2, 0x10}, {0x21802eff9f5574cd, 0x1}}, [@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x2, 0xfffffff8, 0x7fffffff, 0x7, 0x77, 0x3ff, 0x87a2e84b, 0x6, 0x6, 0x6f872751, 0x6, 0x3, 0x6, 0x2b, 0xa7, 0x1, 0x88000000, 0x40, 0x36, 0x2, 0x6, 0x5, 0x1000, 0x1, 0x800000, 0x40, 0x81, 0x2, 0x5, 0x0, 0xd4, 0x8, 0x8d95, 0x7fff, 0x8, 0x6, 0x7, 0x9, 0x7, 0x9, 0x6, 0xfffffffd, 0x80, 0x3, 0x7, 0x8e, 0x91, 0x7fff, 0x3, 0x6, 0xe5e, 0xd, 0xffffffff, 0xffffffff, 0x5, 0x3, 0x16d9f23e, 0xa, 0x3, 0x20b, 0xbad5, 0x1, 0x7ff, 0x7, 0x6, 0x2, 0x0, 0x2, 0x9, 0x5, 0x9, 0x10000, 0x5, 0x7, 0x800, 0x2, 0x1, 0x3ff, 0x8001, 0x0, 0x4, 0x0, 0x7, 0xb, 0x5, 0xc, 0x3, 0xa, 0x220c965f, 0x10001, 0x4, 0x2, 0x3, 0x5, 0x2, 0x1, 0x2, 0xf9f, 0x9, 0x10, 0x1, 0x7ff, 0x1ff, 0xdc, 0xfffffffe, 0x80000000, 0x1200, 0x2, 0x0, 0x8, 0xf, 0x0, 0x5, 0x1, 0x4, 0x7, 0x3, 0x4, 0xf6c5, 0xb22d, 0x5, 0x8000, 0xc, 0x7465cbf1, 0x30fb, 0x5, 0x80000001, 0x7, 0x2, 0x0, 0x3ff, 0x6, 0x0, 0x3, 0x3ff, 0x3, 0xb, 0x80000000, 0xffffffff, 0x9, 0x4, 0x0, 0x9a, 0x7, 0x4, 0x3, 0x40000, 0x3, 0x8a, 0xa4, 0x8000, 0x80000000, 0x98f, 0x9, 0x6, 0x9, 0x5, 0x1, 0x3, 0x10001, 0x8, 0x3, 0xd5, 0x6, 0x0, 0x80000, 0x8, 0x4, 0xffff, 0x0, 0x2, 0x9e57, 0x7f, 0x2, 0xbfca, 0x7, 0x7f, 0x384, 0x8, 0x0, 0x2, 0x84, 0xb4b, 0x200, 0x9, 0x8, 0x3, 0x7ff, 0x4, 0x1, 0x5, 0x9, 0xffffffff, 0x7, 0x1, 0x10001, 0x4, 0x7, 0xb3, 0xd, 0x2, 0xffffffdf, 0x40, 0xff, 0x9, 0x4, 0xd, 0x3, 0x2, 0x4, 0x2, 0x0, 0x2, 0x6, 0xd50, 0x0, 0x1, 0xfffffff8, 0x7, 0x7, 0x5, 0x10, 0xc5, 0x6, 0xfffffffe, 0x3, 0xffffffff, 0x9a9, 0xffffff7f, 0xfffffffc, 0x9, 0x8, 0x0, 0x2, 0x80000001, 0xc, 0xffffff00, 0xfffffe00, 0x26, 0x60a, 0xf, 0x9, 0xf, 0xd095, 0x8, 0x3, 0x6, 0x3, 0x0, 0x4, 0x1, 0x8, 0x33, 0x0, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000800)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r3, &(0x7f0000001940)={0xa, 0xfffd, 0x0, @rand_addr=' \x01\x00', 0xf7fffff8}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0)
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x41, 0x495, &(0x7f0000000540)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x2002, 0x0)
getdents64(r4, 0xfffffffffffffffe, 0x29)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000002c0)='./bus\x00', 0x3c9c9b, 0x0, 0x4, 0x0, &(0x7f00000000c0))
setsockopt$inet6_opts(r3, 0x29, 0x39, 0x0, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x4)
sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="c0f02f9a6ef620046f25ac6094b8d5bf3e5b2a209859ddb7e29c931de3b3d5dffab6b460f9238eb8792478da6b4b8c8be14be7090c28e7f842a9bc7dfb3bcd5f92aa113826468cc3cbb3199ace45b9c04fc5ec5d0491bd14b44749a0df923fb42bdc35dacb8f39e8fbdab6933eae923ae6c403654f699195fcb115ebbcd37d807b5c4c2ac4f85c5ebd914e750f42c9344bf7969a1a1c459c234dbf6cec8be17884ea0bc1ef4591e36d9ad9860a7370e77f79ad5c12f6391a2e8270c66751f7f558114a949f8209cfb908e206e24fd096da1415015546c66c1bd3d2475954d91f4adf", 0xe2}, {&(0x7f0000000240)="23895abdd79d28ee3e2d230c3320d7e89e4f3d73dc6972ee14af85527876095fa821568914fefd079a868542", 0x2c}], 0x2}, 0x80)

4.321820544s ago: executing program 2 (id=603):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) (async)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) (async)
r1 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x5, 0x7e1, &(0x7f0000000340)="$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")
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x318, 0x11, 0x148, 0x0, 0x0, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x32}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x0, 0x2, 0x3, 0x0, 0x5], 0x0, 0x1}, {0x0, [0x6, 0x4, 0x2, 0x2, 0x982848c96d6a0d38], 0x15}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async)
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000c40)=ANY=[@ANYBLOB="20000000020000001d", @ANYRESOCT=r1], 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0) (async)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
ioctl$int_in(r4, 0x5452, 0x0)
creat(&(0x7f0000000280)='./file1\x00', 0x107) (async)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async)
ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000c80))
add_key$user(&(0x7f00000002c0), &(0x7f0000000b40)={'syz', 0x0}, &(0x7f0000000b80)="3b3d087de436b44bfe018f3510491f2872f58c925f4cf869843e2a2e8a9996b2c76c58e9247a1acba11d95a036c88b1b66fa3fa95546a5f46f8a192605e83573ddaad1c181f9c8bb4b170db92bb2f155c766f4d8f9f8a9ee9eded34fb342c54d37fadb65c925ce7fc191e9fd", 0x6c, 0xffffffffffffffff) (async)
r5 = add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001020200", 0x6, 0xfffffffffffffffb)
keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000000)='\x00', 0x0) (async)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f00000002c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa02020, 0x0, 0x0, 0x0, 0x0) (async)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x276, &(0x7f0000000840)="$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") (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f000001ffffffffffff000020000200"], 0x60}}, 0x0) (async)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000500), 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x390}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) (async)
r8 = syz_usb_connect$uac2(0x3, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000010b4041c9340000102030109027e000301048009080b00010100200009040000000101200009240108000a1e000809240d0601000203000c2403030002020600050904010000"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
keyctl$instantiate(0xc, r5, &(0x7f0000000c00)=ANY=[@ANYRESOCT=r8], 0x31, r5) (async)
sendto$inet6(r0, &(0x7f0000000000)="8f6bb66f", 0x5ac, 0x0, 0x0, 0xfffffffffffffec8)

3.936411108s ago: executing program 2 (id=610):
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r0=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000180)={0x20, r0, 0x100000000000006a, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]})

3.798628227s ago: executing program 2 (id=611):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030428bd58000000000000000060", @ANYRES32=0x0, @ANYBLOB="46060900200000001c00128009000100766c616e000000e28f000000000000000100000008000500", @ANYRES32, @ANYRESDEC], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)

3.664455446s ago: executing program 2 (id=612):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d260f0100000000000000000006241a000000090581030002ff00000904ec0000020d00000904010102020d"], 0x0) (async)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58}, 0x0)

2.835675161s ago: executing program 4 (id=617):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB="8400000100000000"], 0x8) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x1d1b02, 0xf)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) (async)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") (async)
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async)
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000)
truncate(&(0x7f0000000380)='./file0\x00', 0xf7f) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48)
socket$kcm(0x2d, 0x2, 0x0) (async)
close(0x3) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000090d5a365012", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x20008040) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0xf10e, 0x4d3, 0xf2}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2006c8c6f59bab50100d0c96ffc6010", 0x19}], 0x1}, 0x4000000)
r4 = socket$inet(0x2, 0x1, 0x0) (async)
socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) (async)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket(0x2, 0x80000, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)

1.778686668s ago: executing program 4 (id=618):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000240)={'macvlan1\x00', 0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000000000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\\\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000008c0), 0xfecc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000400)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.u'}, 0x15)

1.703477689s ago: executing program 4 (id=619):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030428bd58000000000000005865", @ANYRES32=0x0, @ANYBLOB="46060900200000001c00128009000100766c616e000000e28f000000000000000100000008000500", @ANYRES32, @ANYRESDEC], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)

1.703280979s ago: executing program 4 (id=620):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0xa, 0x4, 0x0, 0x100000003, 0x802, 0x1000000000000002})

1.638274282s ago: executing program 4 (id=621):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x2000412, &(0x7f0000000500)=ANY=[@ANYBLOB="6465636f6d706f73652c6465636f6d706f73652c6e6c733d6b6f69382d72752c004c1617877e60c71f1056d113307ece5ae55bc340c31166fbbfc582"], 0x1, 0x5d6, &(0x7f0000001080)="$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")
r0 = socket$igmp6(0xa, 0x3, 0x3a)
getsockopt$MRT6(r0, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x6000, 0x0)
getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r2 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="020600000000"], 0x40)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

1.55254743s ago: executing program 4 (id=622):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @rand_addr=' \x01\x00', 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10)
write(r1, &(0x7f0000000140)="8465000000000000", 0x5ac)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f00000000c0), 0x9)
r3 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x5c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x12, 0x0, @local}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @loopback}}}}]}]}, 0x5c}}, 0x80)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000020303000000000000000000010000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000001030101000000090000000000000027295482eaa7835fa965fc36f50a9b8ef6c08de92993a54c14f5700ceb525300dffadc29ad04f838253ce0ab56f7878f2b07072560f1f18185dc3312b3e0d2e5291433ec8700002c0a9a5248acb704f190bff3e1b8dae5f5fe37922313ba352f34d72fe15903d21be920eb98674bd335123e32b895562737c6a220b8cc846a96e539133e5cb3fdad70b170adbd517c18a2861c8cc4dc79f36b75ebe840b0fdad86f641813a003ca9f69a3bd27142dc47f89f081496f14304f8c3000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x400d0}, 0x1)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r6, 0x8008662c, &(0x7f0000000100))

1.2968847s ago: executing program 1 (id=623):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001)
r2 = fcntl$dupfd(r1, 0x0, r1)
write$sndseq(r2, &(0x7f00000002c0)=[{0xff, 0x0, 0x0, 0x6, @time={0x9, 0x7}, {}, {}, @time=@time={0x5, 0x3}}, {0x0, 0x0, 0x80, 0x3, @time={0x7, 0x2}, {0x0, 0x32}, {}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38)
read$FUSE(r2, &(0x7f0000000c40)={0x2020}, 0x2020)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000000)={0xc, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3})
syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80100)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r2)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r5, 0x100000000000006a, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]})
ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x9, 0x0, 0x0, 0x1ff})

418.194595ms ago: executing program 2 (id=624):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000f80)={&(0x7f00000003c0)={0x50, 0xffffffffffffffda, 0x5, {0x7, 0x2d, 0xf3, 0x4804182, 0x8, 0x7ff, 0x3, 0x6, 0x0, 0x0, 0x10, 0xa4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r1 = open(&(0x7f0000000380)='./file0/file0\x00', 0x2c280, 0x1)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000500)={0x9, 0xfffffffffffffff9, 0x0, 0xfdfdffff, 0x7, 0x0, [{0xbf, 0x6, 0x1, '\x00', 0x1000}, {0x80000000, 0x7, 0x100000000, '\x00', 0x800}, {0x4, 0x2, 0x9, '\x00', 0x2000}, {0x4d, 0x9, 0x7, '\x00', 0x1}, {0xe, 0x8000000000000000, 0xffffffffffff8001}, {0x9, 0x7, 0xb22, '\x00', 0xa01}, {0x3, 0x4, 0x7, '\x00', 0x88}]})

417.705193ms ago: executing program 1 (id=625):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000240)={'macvlan1\x00', 0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000000000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\\\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000008c0), 0xfecc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000400)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.u'}, 0x15)

291.365251ms ago: executing program 1 (id=626):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000180)=0x8)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) (async)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10)
write(r1, &(0x7f0000000140)="8465000000000000", 0x5ac)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) (async)
r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f00000000c0), 0x9) (async)
r4 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x5c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x12, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @loopback}}}}]}]}, 0x5c}}, 0x80) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000020303000000000000000000010000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) (async, rerun: 64)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)={0x14, 0x1, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x400d0}, 0x1) (rerun: 64)
syz_usb_control_io$printer(r4, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$printer(r4, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)

175.919876ms ago: executing program 1 (id=627):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x3, @mcast2, 0x1f}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)={0x73}, 0x8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x40008c1}, 0x24000090)
close(r2)
setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, 0x42, 0x1, 0x70bd25, 0x25dfdbfd, {0x2}, [@nested={0x8, 0x38, 0x0, 0x1, [@nested={0x4, 0x6}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x8c8, 0x0, 0x0, @u64=0x2}]}, @nested={0x9, 0x4, 0x0, 0x1, [@generic="56b5bfa75b"]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
sendmmsg$inet6(r0, &(0x7f000000ab80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="4ddbdbb694", 0xfffffea5}], 0x1, &(0x7f00000005c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44)

77.029993ms ago: executing program 1 (id=628):
r0 = fanotify_init(0x79, 0x0) (async)
r1 = timerfd_create(0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x541b, 0x0) (async)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r3 = getpid()
sched_setscheduler(r3, 0xffffffffffffffff, &(0x7f0000000200)=0x4) (async)
process_vm_readv(r3, &(0x7f0000000300)=[{&(0x7f0000001000)=""/182, 0xb6}, {&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f0000000740)=""/134, 0x86}, {&(0x7f0000000d40)=""/174, 0xae}, {&(0x7f00000008c0)=""/171, 0xab}], 0x5, &(0x7f0000000e40)=[{&(0x7f0000000980)=""/69, 0x45}, {&(0x7f0000000a40)=""/219, 0xdb}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f00000010c0)=""/243, 0xf3}, {&(0x7f0000000f00)=""/228, 0xe4}, {&(0x7f0000000cc0)=""/106, 0x6a}], 0x6, 0x0)
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="0877e9807235ab620c1f880a1065b494af4dab3afd5a070d90f1e9e9e71349431c290b93a77f2c67ea4c72d77a206eb9281416e22433b22ebc4b2435ab68d4db18d47d209939e754bb0b9ec122ff8e11cd3e14745bdd2e379e40e68a4bdb7543196e34265bf03b201900e8f8ebcf90dc4c2e71b0231481e7ac7d95652092254a09640cf5582e02ee4fa4"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async, rerun: 32)
write$P9_RSYMLINK(r0, &(0x7f0000000480)={0x14}, 0x14) (rerun: 32)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async)
openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x98c42, 0x0) (async)
syz_mount_image$iso9660(&(0x7f0000000ec0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4, 0xa18, &(0x7f0000002000)="$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")
syz_open_dev$MSR(&(0x7f00000001c0), 0x5, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85)
write$P9_RVERSION(r5, &(0x7f0000000100)=ANY=[], 0x13) (async, rerun: 64)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x10010, r5, 0x0) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$DVB_DEMUX_DMX_EXPBUF(r5, 0xc00c6f3e, &(0x7f0000000140)={0xaac, 0x0, <r8=>r6})
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000180)={0x100, 0xfffffffc, 0x9, 0x80000000, 0x80000000}) (async, rerun: 32)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="feaf33c1", @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) (async, rerun: 32)
sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fbdbdf2505000000140001800d0001007564703a73797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)

0s ago: executing program 1 (id=629):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket(0x2b, 0x1, 0x1)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x5)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0006}]})
close_range(r4, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0xc000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'})
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}})
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000300)=[{0x1d, 0xff, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r10=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="150200000000100000766c616e000000000c000280060001000000000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x4c}, 0x1, 0xba01}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x101}, 0x8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r6, 0xcfa3e000)

kernel console output (not intermixed with test programs):

] Bluetooth: hci2: command tx timeout
[   84.370818][ T6351] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   84.474570][ T5357] 8021q: adding VLAN 0 to HW filter on device eth7
[   84.477721][ T5673] usb 3-1: reset high-speed USB device number 5 using dummy_hcd
[   84.556401][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'.
[   84.635479][ T6535] loop4: detected capacity change from 0 to 164
[   84.639111][ T6535] iso9660: Unknown parameter './file1'
[   84.854164][ T5357] 8021q: adding VLAN 0 to HW filter on device eth8
[   84.887527][   T33] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   85.059855][   T33] usb 5-1: Using ep0 maxpacket: 16
[   85.068227][   T33] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[   85.078792][   T33] usb 5-1: config 0 has no interface number 0
[   85.083203][   T33] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.089357][   T33] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.095783][   T33] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   85.098611][   T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.108151][   T33] usb 5-1: config 0 descriptor??
[   85.253051][ T6564] loop2: detected capacity change from 0 to 32768
[   85.269376][ T6564] jfs_mount: Mount Failure: superblock is corrupt!
[   85.293447][ T6564] Mount JFS Failure: -22
[   85.298245][ T6564] jfs_mount failed w/return code = -22
[   85.307182][ T6573] loop1: detected capacity change from 0 to 1024
[   85.310596][ T6573] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   85.315185][ T6573] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   85.326548][ T6573] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   85.340894][ T6573] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: inode #5: comm syz.1.165: unexpected bad inode w/o EXT4_IGET_BAD
[   85.357442][ T6573] loop1: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117
[   85.357654][ T6573] EXT4-fs (loop1): no journal found
[   85.368529][ T6573] EXT4-fs (loop1): can't get journal size
[   85.376570][ T6573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   85.393953][ T6574] netlink: 32 bytes leftover after parsing attributes in process `syz.1.165'.
[   85.463362][ T6580] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   85.470659][ T5357] 8021q: adding VLAN 0 to HW filter on device eth6
[   85.482734][ T6573] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1332: inode #12: block 16: comm syz.1.165: path /49/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0
[   85.576544][   T33] uclogic 0003:28BD:0071.0003: failed retrieving string descriptor #100: -71
[   85.591110][   T33] uclogic 0003:28BD:0071.0003: failed retrieving pen parameters: -71
[   85.599983][   T33] uclogic 0003:28BD:0071.0003: pen probing failed: -71
[   85.606639][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.610222][   T33] uclogic 0003:28BD:0071.0003: failed probing parameters: -71
[   85.623856][   T33] uclogic 0003:28BD:0071.0003: probe with driver uclogic failed with error -71
[   85.654016][   T33] usb 5-1: USB disconnect, device number 2
[   85.692380][ T5680] usb 3-1: USB disconnect, device number 5
[   85.769877][ T6588] loop2: detected capacity change from 0 to 4096
[   85.975127][ T6598] loop1: detected capacity change from 0 to 32768
[   86.005357][ T6598] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   86.015259][ T6598] XFS (loop1): Ending clean mount
[   86.034615][ T5608] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   86.169423][   T33] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   86.244505][ T6610] loop1: detected capacity change from 0 to 32768
[   86.248052][ T6610] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.172 (6610)
[   86.259870][ T6610] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   86.263163][ T6610] BTRFS info (device loop1): using sha256 checksum algorithm
[   86.284161][ T6610] BTRFS info (device loop1): rebuilding free space tree
[   86.292955][ T6610] BTRFS info (device loop1): setting nodatasum
[   86.294993][ T6610] BTRFS info (device loop1): setting nodatacow
[   86.296933][ T6610] BTRFS info (device loop1): turning off barriers
[   86.299278][ T6610] BTRFS info (device loop1): enabling free space tree
[   86.301760][ T6610] BTRFS info (device loop1): force clearing of disk cache
[   86.312758][ T6610] BTRFS critical (device loop1 state E): emergency shutdown
[   86.331957][   T33] usb 5-1: Using ep0 maxpacket: 8
[   86.338246][ T5608] BTRFS info (device loop1 state E): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   86.343453][   T33] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   86.347217][   T33] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   86.350944][   T33] usb 5-1: config 1 has no interface number 1
[   86.354988][   T33] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   86.359439][   T33] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[   86.371975][   T33] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   86.377164][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.381331][   T33] usb 5-1: Product: syz
[   86.385845][   T33] usb 5-1: Manufacturer: syz
[   86.387890][   T33] usb 5-1: SerialNumber: syz
[   86.575769][   T54] Bluetooth: hci2: command tx timeout
[   86.867628][ T6644] loop2: detected capacity change from 0 to 512
[   86.871510][ T6644] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   86.877022][ T6644] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   86.893389][ T6644] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   86.898782][ T6644] EXT4-fs (loop2): 1 truncate cleaned up
[   86.903326][ T6644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.390794][ T6666] CIFS: VFS: UNC: path must begin with // or \\
[   87.393223][ T6666] Malformed UNC in devname
[   87.393223][ T6666] 
[   87.395399][ T6666] CIFS: VFS: Malformed UNC in devname
[   87.624807][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.723427][ T6669] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.184 (6669)
[   87.738702][ T6669] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   87.743235][ T6669] BTRFS info (device loop1): using sha256 checksum algorithm
[   87.765795][ T6669] BTRFS info (device loop1): enabling ssd optimizations
[   87.768092][ T6669] BTRFS info (device loop1): turning on async discard
[   87.770616][ T6669] BTRFS info (device loop1): enabling free space tree
[   87.779787][   T34] audit: type=1800 audit(1778561655.056:6): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.184" name="file0" dev="loop1" ino=258 res=0 errno=0
[   88.286462][   T10] cfg80211: failed to load regulatory.db
[   88.412307][ T5608] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   88.787627][   T54] Bluetooth: hci2: command tx timeout
[   88.840283][ T6693] set_capacity_and_notify: 1 callbacks suppressed
[   88.840293][ T6693] loop2: detected capacity change from 0 to 32768
[   88.870617][ T6693] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   88.896437][ T6693] XFS (loop2): Ending clean mount
[   88.913968][ T5612] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   88.991227][   T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   89.065112][   T33] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[   89.070557][   T33] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[   89.110081][ T6690] loop1: detected capacity change from 0 to 32768
[   89.121249][ T6690] 
[   89.121249][ T6690]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   89.121249][ T6690] 
[   89.164852][   T24] usb 2-1: device descriptor read/64, error -71
[   89.203898][   T33] usb 5-1: USB disconnect, device number 3
[   89.210496][ T6711] loop2: detected capacity change from 0 to 1024
[   89.214396][ T6711] ext4: Unknown parameter 'obj_user'
[   89.215699][ T5608] 
[   89.215699][ T5608]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   89.215699][ T5608] 
[   89.258602][ T5608] 
[   89.258602][ T5608]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   89.258602][ T5608] 
[   89.778891][ T6722] loop2: detected capacity change from 0 to 32768
[   89.786793][ T6722] btrfs: Deprecated parameter 'usebackuproot'
[   89.793573][ T6722] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   89.805114][ T6722] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.196 (6722)
[   89.828353][ T6722] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   89.832657][ T6722] BTRFS info (device loop2): using crc32c checksum algorithm
[   89.835869][ T6722] BTRFS error (device loop2): superblock checksum mismatch
[   89.839013][ T6722] BTRFS error (device loop2): open_ctree failed: -22
[   89.894510][ T6715] loop4: detected capacity change from 0 to 32768
[   89.896885][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'.
[   90.200893][ T6743] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   90.424594][ T6758] loop4: detected capacity change from 0 to 64
[   90.476772][ T6761] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   90.516089][ T6763] Bluetooth: MGMT ver 1.23
[   90.657595][   T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   90.817943][   T10] usb 2-1: Using ep0 maxpacket: 32
[   90.822280][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.826261][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.832126][   T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   90.835321][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.842685][   T10] usb 2-1: config 0 descriptor??
[   91.220520][ T6772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.223721][ T6772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.292905][   T10] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[   91.469779][   T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   91.541709][ T6766] loop2: detected capacity change from 0 to 131072
[   91.552331][ T6766] F2FS-fs (loop2): invalid crc value
[   91.560252][   T10] usb 2-1: USB disconnect, device number 9
[   91.616358][ T6766] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   91.622261][ T6766] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   91.628340][ T6766] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36
[   91.634701][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   91.638112][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[   91.643793][   T24] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[   91.648053][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.657976][   T24] usb 5-1: Product: syz
[   91.659258][   T24] usb 5-1: Manufacturer: syz
[   91.664446][   T24] usb 5-1: SerialNumber: syz
[   91.673446][   T24] usb 5-1: config 0 descriptor??
[   91.691325][   T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[   91.733447][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   91.748245][   T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[   91.753081][   T24] usb 5-1: media controller created
[   91.770718][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   91.806297][   T24] DVB: Unable to find symbol tda10046_attach()
[   91.808968][   T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[   91.812539][   T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[   92.219249][ T6781] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.289702][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.219'.
[   92.362902][ T6781] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.434498][ T6781] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.522732][ T6781] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.527665][ T5725] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[   92.586747][   T24] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[   92.594369][ T5487] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.598361][   T24] usb 5-1: USB disconnect, device number 4
[   92.642583][ T5487] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.654065][ T5487] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.665645][ T5487] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.702237][ T5725] usb 2-1: unable to get BOS descriptor or descriptor too short
[   92.705740][ T5725] usb 2-1: not running at top speed; connect to a high speed hub
[   92.710177][ T5725] usb 2-1: config 0 has an invalid interface number: 175 but max is 0
[   92.713432][ T5725] usb 2-1: config 0 has no interface number 0
[   92.715540][ T5725] usb 2-1: config 0 interface 175 has no altsetting 0
[   92.719522][ T5725] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice=a3.02
[   92.722852][ T5725] usb 2-1: New USB device strings: Mfr=120, Product=243, SerialNumber=26
[   92.725467][ T5725] usb 2-1: Product: syz
[   92.727370][ T5725] usb 2-1: Manufacturer: syz
[   92.729176][ T5725] usb 2-1: SerialNumber: syz
[   92.734819][ T5725] usb 2-1: config 0 descriptor??
[   92.769367][ T6792] loop2: detected capacity change from 0 to 65536
[   92.786484][ T6792] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   92.809449][ T6792] XFS (loop2): Metadata corruption detected at __xfs_buf_ioend+0x332/0x6f0, xfs_inode block 0x40 xfs_inode_buf_verify
[   92.814154][ T6792] XFS (loop2): Unmount and run xfs_repair
[   92.816702][ T6792] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   92.819850][ T6792] 00000000: 49 4e 00 00 40 00 00 00 00 00 00 00 00 00 00 00  IN..@...........
[   92.823312][ T6792] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   92.827994][ T6792] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   92.831428][ T6792] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   92.834813][ T6792] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   92.839579][ T6792] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   92.843075][ T6792] 00000060: ff ff ff ff e4 04 29 3a 00 00 00 00 00 00 00 00  ......):........
[   92.846417][ T6792] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   92.851004][ T6792] XFS (loop2): metadata I/O error in "xfs_imap_to_bp+0x12a/0x2d0" at daddr 0x40 len 32 error 117
[   92.855282][ T6792] loop2: lost filesystem error report for type 5 error -117
[   92.855321][ T6792] XFS (loop2): Failed to read root inode 0x40, error 117
[   92.861762][ T6792] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[   92.977185][ T5725] usb 2-1: USB disconnect, device number 10
[   93.113141][ T6802] loop2: detected capacity change from 0 to 256
[   93.120889][ T6802] msdos: Bad value for 'nfs'
[   93.778462][ T6805] loop4: detected capacity change from 0 to 131072
[   93.781701][ T6805] F2FS-fs (loop4): Test dummy encryption mode enabled
[   93.784615][ T6805] F2FS-fs (loop4): invalid crc value
[   93.879099][ T6805] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   93.899856][ T6805] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   93.956659][ T6818] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   93.969196][ T6818] XFS (loop1): Ending clean mount
[   94.013490][ T5608] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   94.170054][ T6832] overlay: Bad value for 'workdir'
[   94.356051][ T6841] set_capacity_and_notify: 1 callbacks suppressed
[   94.356068][ T6841] loop2: detected capacity change from 0 to 256
[   94.364409][ T6841] FAT-fs (loop2): Directory bread(block 1285) failed
[   94.528295][   T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[   94.608689][ T6855] input: syz0 as /devices/virtual/input/input6
[   94.667657][ T6856] Dead loop on virtual device ip6_vti0 (net 52), fix it urgently!
[   94.689212][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[   94.701207][   T10] usb 2-1: not running at top speed; connect to a high speed hub
[   94.710419][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.721363][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   94.732575][   T10] usb 2-1: string descriptor 0 read error: -22
[   94.737232][   T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   94.742284][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.756514][   T10] usb 2-1: 0:1 : does not exist
[   94.762175][   T10] usb 2-1: 0:2 : does not exist
[   94.822027][ T6860] hma(sha224): entered promiscuous mode
[   95.525378][ T6883] loop2: detected capacity change from 0 to 32768
[   95.561269][ T6883] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   95.613261][ T6883] XFS (loop2): Ending clean mount
[   95.872417][   T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   96.034189][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.038169][   T31] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   96.041272][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.049855][   T31] usb 5-1: config 0 descriptor??
[   96.493432][   T31] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[   96.512297][   T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input7
[   96.634518][   T31] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[   96.846134][    C1] keytouch 0003:0926:3333.0005: Event data for report 0 was too short (8 vs 1)
[   97.516850][   T10] usb 2-1: 6:0: failed to get current value for ch 1 (-22)
[   97.545097][   T10] usb 2-1: 6:0: failed to get current value for ch 0 (-22)
[   97.597971][   T10] usb 2-1: USB disconnect, device number 11
[   97.799885][ T6922] loop1: detected capacity change from 0 to 32768
[   97.803358][ T6922] btrfs: Deprecated parameter 'usebackuproot'
[   97.809887][ T6922] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   97.813614][ T6922] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.248 (6922)
[   97.823546][ T6922] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   97.827652][ T6922] BTRFS info (device loop1): using crc32c checksum algorithm
[   97.830279][ T6922] BTRFS error (device loop1): superblock checksum mismatch
[   97.832775][ T6922] BTRFS error (device loop1): open_ctree failed: -22
[   98.044024][ T6925] loop1: detected capacity change from 0 to 32768
[   98.063024][ T6925] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   98.080394][ T6925] XFS (loop1): Metadata CRC error detected at xfs_agi_read_verify+0x142/0x210, xfs_agi block 0x2 
[   98.083853][ T6925] XFS (loop1): Unmount and run xfs_repair
[   98.086604][ T6925] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[   98.089788][ T6925] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 20 00  XAGI.......... .
[   98.093350][ T6925] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37  ...@...........7
[   98.096796][ T6925] 00000020: 00 00 24 40 ff ff ff ff ff ff ff ff ff ff ff ff  ..$@............
[   98.100275][ T6925] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   98.103468][ T6925] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   98.107175][ T6925] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   98.110274][ T6925] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   98.114123][ T6925] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   98.118141][ T6925] XFS (loop1): metadata I/O error in "xfs_read_agi+0x270/0x5c0" at daddr 0x2 len 1 error 74
[   98.122420][ T6925] loop1: lost filesystem error report for type 5 error -117
[   98.122435][ T6925] XFS (loop1): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0
[   98.131391][ T6925] XFS (loop1): Failed to read root inode 0x2440, error 117
[   98.133943][ T6925] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[   98.231407][ T6871] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   98.286549][ T5612] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   98.745817][ T6949] loop2: detected capacity change from 0 to 32768
[   98.755411][ T6949] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.254 (6949)
[   98.784762][ T6949] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   98.791170][ T6949] BTRFS info (device loop2): using sha256 checksum algorithm
[   98.885286][ T6949] BTRFS info (device loop2): rebuilding free space tree
[   98.944611][ T6949] BTRFS info (device loop2): disabling free space tree
[   98.956737][ T6949] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   98.984527][ T6949] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   99.019468][ T6949] BTRFS info (device loop2): turning off barriers
[   99.028807][ T6949] BTRFS info (device loop2): force clearing of disk cache
[   99.038464][ T6949] BTRFS info (device loop2): use zlib compression, level 3
[   99.163576][ T6942] loop1: detected capacity change from 0 to 65536
[   99.196658][ T6942] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   99.201076][ T5612] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   99.265718][ T6942] XFS (loop1): Ending clean mount
[   99.304725][ T6942] XFS (loop1): Quotacheck needed: Please wait.
[   99.355721][ T1228] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 
[   99.375704][ T1228] XFS (loop1): Unmount and run xfs_repair
[   99.380245][ T1228] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[   99.385608][   T10] usb 5-1: USB disconnect, device number 5
[   99.407580][ T1228] 00000000: 58 41 47 46 00 00 00 02 00 00 00 00 00 00 40 00  XAGF..........@.
[   99.445897][ T1228] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[   99.466193][ T1228] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[   99.486667][ T1228] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c0 00 00 00 00  ......?...?.....
[   99.510505][ T1228] 00000040: d6 f6 9d bd 8c 5d 46 be b8 8e 92 c0 ae 88 ce b2  .....]F.........
[   99.523336][ T1228] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   99.529926][ T6985] mmap: syz.4.258 (6985) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   99.536276][ T1228] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   99.546827][ T1228] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   99.558885][ T1228] XFS (loop1): metadata I/O error in "xfs_read_agf+0x289/0x5c0" at daddr 0x1 len 1 error 74
[   99.581257][ T1228] loop1: lost filesystem error report for type 5 error -117
[   99.593693][ T6942] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[   99.603238][ T6942] loop1: lost filesystem error report for type 5 error -117
[   99.670446][ T5608] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   99.691735][ T5608] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[   99.982572][ T6995] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  100.392204][ T7004] loop4: detected capacity change from 0 to 32768
[  100.402207][ T7004] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.264 (7004)
[  100.429206][ T7004] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  100.443324][ T7004] BTRFS info (device loop4): using sha256 checksum algorithm
[  100.514825][ T7004] BTRFS info (device loop4): enabling ssd optimizations
[  100.520157][ T7004] BTRFS info (device loop4): turning on async discard
[  100.528154][ T7004] BTRFS info (device loop4): enabling free space tree
[  100.545353][   T34] audit: type=1800 audit(1778561666.997:7): pid=7004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.264" name="file0" dev="loop4" ino=258 res=0 errno=0
[  100.744574][ T7017] loop2: detected capacity change from 0 to 32768
[  100.750932][ T7017] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.265 (7017)
[  100.765780][ T7017] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  100.771347][ T7017] BTRFS info (device loop2): using sha256 checksum algorithm
[  100.797193][ T7017] BTRFS info (device loop2): rebuilding free space tree
[  100.813433][ T7017] BTRFS info (device loop2): setting nodatasum
[  100.816675][ T7017] BTRFS info (device loop2): setting nodatacow
[  100.819218][ T7017] BTRFS info (device loop2): turning off barriers
[  100.822044][ T7017] BTRFS info (device loop2): enabling free space tree
[  100.825701][ T7017] BTRFS info (device loop2): force clearing of disk cache
[  100.839471][ T7017] BTRFS critical (device loop2 state E): emergency shutdown
[  100.855414][ T6993] loop1: detected capacity change from 0 to 131072
[  100.866550][ T6993] F2FS-fs (loop1): invalid crc value
[  100.894676][ T5612] BTRFS info (device loop2 state E): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  100.995518][ T6993] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  101.025461][ T6993] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  101.077543][ T7041] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  101.123463][ T6351] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.522820][ T7056] loop2: detected capacity change from 0 to 512
[  101.550429][ T7056] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  101.601310][ T7056] EXT4-fs (loop2): 1 truncate cleaned up
[  101.606252][ T7056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.662127][ T7063] netlink: 68 bytes leftover after parsing attributes in process `syz.4.275'.
[  101.667126][ T7063] netlink: 68 bytes leftover after parsing attributes in process `syz.4.275'.
[  101.689942][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.755369][ T7068] netlink: 60 bytes leftover after parsing attributes in process `syz.2.276'.
[  101.762295][ T7068] unsupported nlmsg_type 40
[  101.848410][ T7061] loop1: detected capacity change from 0 to 32768
[  101.856164][ T7061] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.269 (7061)
[  101.880033][ T7061] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  101.886220][ T7061] BTRFS info (device loop1): using sha256 checksum algorithm
[  101.890933][ T7072] netlink: 84 bytes leftover after parsing attributes in process `syz.4.278'.
[  101.962045][ T7068] loop2: detected capacity change from 0 to 32768
[  101.975060][ T7068] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.276 (7068)
[  101.992234][ T7068] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  102.000859][ T7068] BTRFS info (device loop2): using sha256 checksum algorithm
[  102.014535][ T7061] BTRFS info (device loop1): rebuilding free space tree
[  102.025868][ T7068] BTRFS info (device loop2): enabling ssd optimizations
[  102.033483][ T7068] BTRFS info (device loop2): turning on async discard
[  102.037983][ T7068] BTRFS info (device loop2): enabling free space tree
[  102.072133][ T5612] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  102.075117][ T7061] BTRFS info (device loop1): disabling free space tree
[  102.083475][ T7061] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  102.101334][ T7061] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  102.139769][ T7061] BTRFS info (device loop1): turning off barriers
[  102.141887][ T7061] BTRFS info (device loop1): force clearing of disk cache
[  102.144018][ T7061] BTRFS info (device loop1): use zlib compression, level 3
[  102.338893][ T5608] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  102.468687][ T7105] loop4: detected capacity change from 0 to 32768
[  102.483104][ T7105] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.279 (7105)
[  102.513220][ T7105] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  102.529937][ T7105] BTRFS info (device loop4): using sha256 checksum algorithm
[  102.566801][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  102.642604][ T7105] BTRFS info (device loop4): enabling ssd optimizations
[  102.650364][ T7105] BTRFS info (device loop4): turning on async discard
[  102.654829][ T7105] BTRFS info (device loop4): enabling free space tree
[  102.666803][   T34] audit: type=1800 audit(1778561668.991:8): pid=7105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.279" name="file0" dev="loop4" ino=258 res=0 errno=0
[  102.747283][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  102.757771][   T10] usb 3-1: Dual-Role OTG device on HNP port
[  102.760307][   T10] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1
[  102.769473][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.774153][   T10] usb 3-1: Product: syz
[  102.777969][   T10] usb 3-1: Manufacturer: syz
[  102.786351][   T10] usb 3-1: SerialNumber: syz
[  102.789648][   T10] usb 3-1: config 0 descriptor??
[  102.802761][   T10] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32
[  102.913517][ T6351] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  103.314338][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'.
[  103.321387][ T7122] loop1: detected capacity change from 0 to 131072
[  103.326882][ T7122] F2FS-fs (loop1): Test dummy encryption mode enabled
[  103.332453][ T7122] F2FS-fs (loop1): invalid crc value
[  103.401814][ T7122] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  103.408699][ T7122] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  103.636594][ T7148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.288'.
[  103.896914][ T7150] loop4: detected capacity change from 0 to 32768
[  103.915001][ T7150] btrfs: Deprecated parameter 'usebackuproot'
[  103.921803][ T7150] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  103.929500][ T7150] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.289 (7150)
[  103.944326][ T7150] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  103.952989][ T7150] BTRFS info (device loop4): using crc32c checksum algorithm
[  103.957155][ T7150] BTRFS error (device loop4): superblock checksum mismatch
[  103.964853][ T7150] BTRFS error (device loop4): open_ctree failed: -22
[  103.979650][ T7152] loop1: detected capacity change from 0 to 4096
[  103.987858][ T7152] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  104.005090][ T7152] ntfs3(loop1): ino=0, mi_enum_attr
[  104.012970][ T7152] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  104.038372][ T7152] ntfs3(loop1): try to read out of volume at offset 0x1ff000
[  104.043367][ T7152] ntfs3(loop1): Failed to load $MFT.
[  104.064509][ T7152] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.286'.
[  104.442768][ T5681] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  104.667049][ T5681] usb 5-1: Using ep0 maxpacket: 32
[  104.672693][ T5681] usb 5-1: config 2 has an invalid interface number: 194 but max is 0
[  104.676148][ T5681] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  104.682323][ T5681] usb 5-1: config 2 has no interface number 0
[  104.687791][ T5681] usb 5-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833
[  104.692364][ T5681] usb 5-1: config 2 interface 194 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  104.696864][ T5681] usb 5-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  104.700790][ T5681] usb 5-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  104.706094][ T5681] usb 5-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6
[  104.709763][ T5681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.717781][ T7156] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  104.790843][ T7177] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.294 (7177)
[  104.800346][ T7177] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  104.803860][ T7177] BTRFS info (device loop1): using sha256 checksum algorithm
[  104.844303][ T7177] BTRFS info (device loop1): enabling ssd optimizations
[  104.846682][ T7177] BTRFS info (device loop1): turning on async discard
[  104.849699][ T7177] BTRFS info (device loop1): enabling free space tree
[  104.857174][   T34] audit: type=1800 audit(1778561671.040:9): pid=7177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.294" name="file0" dev="loop1" ino=258 res=0 errno=0
[  105.035452][ T5681] usb 5-1: string descriptor 0 read error: -71
[  105.048269][ T5681] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  105.112218][ T5681] usb 5-1: USB disconnect, device number 6
[  105.434545][ T5673] usb 3-1: USB disconnect, device number 6
[  105.515706][ T5608] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  105.583873][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'.
[  105.742837][ T7205] set_capacity_and_notify: 1 callbacks suppressed
[  105.742848][ T7205] loop4: detected capacity change from 0 to 64
[  105.799313][ T7208] loop1: detected capacity change from 0 to 256
[  105.842300][ T7208] FAT-fs (loop1): Directory bread(block 64) failed
[  105.848846][ T7208] FAT-fs (loop1): Directory bread(block 65) failed
[  105.851051][ T7208] FAT-fs (loop1): Directory bread(block 66) failed
[  105.854012][ T7208] FAT-fs (loop1): Directory bread(block 67) failed
[  105.857589][ T7208] FAT-fs (loop1): Directory bread(block 68) failed
[  105.860080][ T7208] FAT-fs (loop1): Directory bread(block 69) failed
[  105.862451][ T7208] FAT-fs (loop1): Directory bread(block 70) failed
[  105.869259][ T7208] FAT-fs (loop1): Directory bread(block 71) failed
[  105.876830][ T7208] FAT-fs (loop1): Directory bread(block 72) failed
[  105.881538][ T7208] FAT-fs (loop1): Directory bread(block 73) failed
[  105.979337][ T7204] loop2: detected capacity change from 0 to 32768
[  105.995127][ T7204] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  106.010382][ T7204] XFS (loop2): Metadata CRC error detected at xfs_agi_read_verify+0x142/0x210, xfs_agi block 0x2 
[  106.014910][ T7204] XFS (loop2): Unmount and run xfs_repair
[  106.016837][ T7204] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  106.019147][ T7204] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 20 00  XAGI.......... .
[  106.022099][ T7204] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37  ...@...........7
[  106.025437][ T7204] 00000020: 00 00 24 40 ff ff ff ff ff ff ff ff ff ff ff ff  ..$@............
[  106.029319][ T7204] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  106.032601][ T7204] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  106.035884][ T7204] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  106.039181][ T7204] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  106.042065][ T7204] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  106.044845][ T7204] XFS (loop2): metadata I/O error in "xfs_read_agi+0x270/0x5c0" at daddr 0x2 len 1 error 74
[  106.049231][ T7204] loop2: lost filesystem error report for type 5 error -117
[  106.049245][ T7204] XFS (loop2): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0
[  106.054982][ T7204] XFS (loop2): Failed to read root inode 0x2440, error 117
[  106.058720][ T7204] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  106.294955][ T7212] loop4: detected capacity change from 0 to 32768
[  106.391944][ T7214] loop1: detected capacity change from 0 to 32768
[  106.399845][ T7214] btrfs: Deprecated parameter 'usebackuproot'
[  106.404594][ T7214] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  106.413280][ T7214] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.303 (7214)
[  106.429651][ T7214] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  106.441225][ T7214] BTRFS info (device loop1): using crc32c checksum algorithm
[  106.471533][ T7224] loop2: detected capacity change from 0 to 40427
[  106.478290][ T7224] F2FS-fs (loop2): invalid crc value
[  106.489692][   T83] BTRFS warning (device loop1): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x08abbe42 level 0
[  106.510627][ T7214] BTRFS error (device loop1): failed to read chunk root
[  106.532956][ T7214] BTRFS error (device loop1): open_ctree failed: -5
[  106.545985][ T7224] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  106.555524][ T7224] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  106.574728][   T34] audit: type=1800 audit(1778561672.649:10): pid=7224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.304" name="file1" dev="loop2" ino=10 res=0 errno=0
[  106.846794][ T7251] loop4: detected capacity change from 0 to 128
[  106.869980][ T7251] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  106.879760][ T7251] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  106.892790][ T7250] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 9 (only 1 groups)
[  106.939490][ T6351] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  107.036311][ T7259] loop1: detected capacity change from 0 to 4096
[  107.045964][ T7259] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  107.086198][ T7259] ntfs3(loop1): ino=19, mi_enum_attr
[  107.178742][ T5612] syz-executor: attempt to access beyond end of device
[  107.178742][ T5612] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  107.201598][ T5612] CPU: 1 UID: 0 PID: 5612 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  107.201618][ T5612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  107.201625][ T5612] Call Trace:
[  107.201631][ T5612]  <TASK>
[  107.201636][ T5612]  dump_stack_lvl+0xe8/0x150
[  107.201657][ T5612]  f2fs_stop_checkpoint+0x3c7/0x590
[  107.201674][ T5612]  f2fs_write_end_io+0x1274/0x1740
[  107.201701][ T5612]  __submit_merged_bio+0x256/0x6a0
[  107.201719][ T5612]  __submit_merged_write_cond+0x3c9/0x4e0
[  107.201738][ T5612]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  107.201767][ T5612]  f2fs_write_data_pages+0x287e/0x34f0
[  107.201781][ T5612]  ? unwind_next_frame+0xa6/0x2550
[  107.201819][ T5612]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  107.201832][ T5612]  ? is_bpf_text_address+0x26/0x2b0
[  107.201853][ T5612]  ? arch_stack_walk+0xfb/0x150
[  107.201887][ T5612]  ? add_lock_to_list+0xc7/0x100
[  107.201904][ T5612]  ? lockdep_unlock+0x5d/0xd0
[  107.201947][ T5612]  ? __lock_acquire+0x146e/0x2cf0
[  107.201997][ T5612]  ? do_raw_spin_lock+0x12b/0x2f0
[  107.202023][ T5612]  ? do_raw_spin_unlock+0x4d/0x210
[  107.202040][ T5612]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  107.202055][ T5612]  do_writepages+0x32e/0x550
[  107.202075][ T5612]  ? do_raw_spin_unlock+0x4d/0x210
[  107.202100][ T5612]  filemap_fdatawrite+0x1e9/0x2f0
[  107.202115][ T5612]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  107.202157][ T5612]  ? do_raw_spin_unlock+0x4d/0x210
[  107.202177][ T5612]  f2fs_sync_dirty_inodes+0x30e/0x830
[  107.202202][ T5612]  f2fs_write_checkpoint+0x9df/0x26a0
[  107.202216][ T5612]  ? __lock_acquire+0x6b5/0x2cf0
[  107.202246][ T5612]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  107.202292][ T5612]  kill_f2fs_super+0x314/0x730
[  107.202311][ T5612]  ? __pfx_kill_f2fs_super+0x10/0x10
[  107.202333][ T5612]  ? lockdep_hardirqs_on+0x7a/0x110
[  107.202357][ T5612]  deactivate_locked_super+0xbc/0x130
[  107.202373][ T5612]  cleanup_mnt+0x437/0x4d0
[  107.202390][ T5612]  ? _raw_spin_unlock_irq+0x23/0x50
[  107.202407][ T5612]  task_work_run+0x1d9/0x270
[  107.202426][ T5612]  ? __pfx_task_work_run+0x10/0x10
[  107.202455][ T5612]  exit_to_user_mode_loop+0xf3/0x4d0
[  107.202466][ T5612]  ? rcu_is_watching+0x15/0xb0
[  107.202480][ T5612]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.202493][ T5612]  do_syscall_64+0x33e/0xf80
[  107.202508][ T5612]  ? trace_irq_disable+0x3b/0x140
[  107.202528][ T5612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.202540][ T5612] RIP: 0033:0x7f5f6f59e017
[  107.202552][ T5612] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  107.202560][ T5612] RSP: 002b:00007ffe72bb6b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  107.202572][ T5612] RAX: 0000000000000000 RBX: 00007f5f6f632120 RCX: 00007f5f6f59e017
[  107.202579][ T5612] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe72bb6bf0
[  107.202586][ T5612] RBP: 00007ffe72bb6bf0 R08: 00007ffe72bb7bf0 R09: 00000000ffffffff
[  107.202593][ T5612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe72bb7c80
[  107.202599][ T5612] R13: 00007f5f6f632120 R14: 0000000000019771 R15: 00007ffe72bb7cc0
[  107.202618][ T5612]  </TASK>
[  107.209732][ T5612] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  107.479449][ T7265] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  107.614374][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'.
[  107.621559][ T7269] netlink: 48 bytes leftover after parsing attributes in process `syz.2.312'.
[  107.628929][ T7269] netlink: 48 bytes leftover after parsing attributes in process `syz.2.312'.
[  107.752209][ T7272] loop2: detected capacity change from 0 to 4096
[  107.759887][ T7272] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  107.779341][ T7272] ntfs3(loop2): ino=1a, mi_enum_attr
[  107.782115][ T7272] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  108.035379][ T7261] loop4: detected capacity change from 0 to 131072
[  108.038895][ T7261] F2FS-fs (loop4): invalid crc value
[  108.043119][  T840] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  108.089443][ T7261] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  108.095654][ T7261] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  108.105627][ T7261] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36
[  108.111431][ T7261] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size.
[  108.214820][  T840] usb 2-1: Using ep0 maxpacket: 32
[  108.219172][  T840] usb 2-1: config 2 has an invalid interface number: 194 but max is 0
[  108.222581][  T840] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  108.226963][  T840] usb 2-1: config 2 has no interface number 0
[  108.229481][  T840] usb 2-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833
[  108.233418][  T840] usb 2-1: config 2 interface 194 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  108.238363][  T840] usb 2-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  108.242193][  T840] usb 2-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  108.248428][  T840] usb 2-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6
[  108.253284][  T840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.266189][ T7270] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  108.456939][ T7278] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  108.489394][  T840] usb 2-1: string descriptor 0 read error: -71
[  108.511295][  T840] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  108.517699][ T7278] XFS (loop2): Metadata CRC error detected at xfs_agi_read_verify+0x142/0x210, xfs_agi block 0x2 
[  108.524818][ T7278] XFS (loop2): Unmount and run xfs_repair
[  108.526820][ T7278] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  108.529627][ T7278] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 20 00  XAGI.......... .
[  108.533085][ T7278] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37  ...@...........7
[  108.540164][ T7278] 00000020: 00 00 24 40 ff ff ff ff ff ff ff ff ff ff ff ff  ..$@............
[  108.543684][ T7278] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  108.547328][ T7278] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  108.550843][ T7278] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  108.553852][ T7278] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  108.560924][ T7278] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  108.565932][ T7278] XFS (loop2): metadata I/O error in "xfs_read_agi+0x270/0x5c0" at daddr 0x2 len 1 error 74
[  108.570201][ T7278] loop2: lost filesystem error report for type 5 error -117
[  108.570219][ T7278] XFS (loop2): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0
[  108.576873][ T7278] XFS (loop2): Failed to read root inode 0x2440, error 117
[  108.586414][ T7278] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  108.768733][  T840] usb 2-1: USB disconnect, device number 12
[  109.009787][ T7292] sg_read: process 156 (syz.4.318) changed security contexts after opening file descriptor, this is not allowed.
[  109.067690][ T7290] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  109.120619][ T7290] XFS (loop2): Ending clean mount
[  109.156469][ T5612] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  109.861780][ T5681] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  109.942291][ T7318] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  109.951009][ T7318] ntfs3(loop4): volume is dirty and "force" flag is not set!
[  110.021424][ T5681] usb 3-1: Using ep0 maxpacket: 16
[  110.029729][ T5681] usb 3-1: unable to get BOS descriptor or descriptor too short
[  110.037331][ T5681] usb 3-1: config 8 has an invalid interface number: 111 but max is 0
[  110.043547][ T5681] usb 3-1: config 8 has no interface number 0
[  110.048674][ T5681] usb 3-1: config 8 interface 111 has no altsetting 0
[  110.057263][ T5681] usb 3-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice=c5.04
[  110.060964][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.064315][ T5681] usb 3-1: Product: syz
[  110.065951][ T5681] usb 3-1: Manufacturer: syz
[  110.067736][ T5681] usb 3-1: SerialNumber: syz
[  110.296978][ T5681] kaweth 3-1:8.111: couldn't find required endpoints
[  110.304525][ T5681] usb 3-1: USB disconnect, device number 7
[  110.440627][ T7332] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.331 (7332)
[  110.460541][ T7332] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  110.464650][ T7332] BTRFS info (device loop4): using sha256 checksum algorithm
[  110.510309][ T7332] BTRFS info (device loop4): enabling ssd optimizations
[  110.513591][ T5725] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  110.516778][ T7332] BTRFS info (device loop4): turning on async discard
[  110.519731][ T7332] BTRFS info (device loop4): enabling free space tree
[  110.528536][   T34] audit: type=1800 audit(1778561676.346:11): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.331" name="file0" dev="loop4" ino=258 res=0 errno=0
[  110.698711][ T5725] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  110.715309][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.718632][ T5725] usb 2-1: Product: syz
[  110.720286][ T5725] usb 2-1: Manufacturer: syz
[  110.722100][ T5725] usb 2-1: SerialNumber: syz
[  110.735807][ T5725] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  110.782358][ T5681] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  110.905167][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.335'.
[  111.014406][   T24] usb 2-1: USB disconnect, device number 13
[  111.066289][ T6351] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  111.223567][ T7358] pim6reg: entered allmulticast mode
[  111.384867][ T7356] set_capacity_and_notify: 4 callbacks suppressed
[  111.384904][ T7356] loop2: detected capacity change from 0 to 131072
[  111.393374][ T7356] F2FS-fs (loop2): Test dummy encryption mode enabled
[  111.400769][ T7356] F2FS-fs (loop2): invalid crc value
[  111.435109][ T7356] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  111.444031][ T7356] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  111.882649][ T5681] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  111.887392][ T5681] ath9k_htc: Failed to initialize the device
[  111.897116][   T24] usb 2-1: ath9k_htc: USB layer deinitialized
[  112.074615][ T7375] loop2: detected capacity change from 0 to 32768
[  112.079432][ T7375] btrfs: Deprecated parameter 'usebackuproot'
[  112.085457][ T7375] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  112.095096][ T7375] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.342 (7375)
[  112.108324][ T7357] pim6reg: left allmulticast mode
[  112.111546][ T7375] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  112.115820][ T7375] BTRFS info (device loop2): using crc32c checksum algorithm
[  112.119005][ T7375] BTRFS error (device loop2): superblock checksum mismatch
[  112.122121][ T7375] BTRFS error (device loop2): open_ctree failed: -22
[  112.277195][   T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  112.450684][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.461828][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[  112.469454][   T24] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  112.473645][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.477496][   T24] usb 2-1: Product: syz
[  112.479946][   T24] usb 2-1: Manufacturer: syz
[  112.482080][   T24] usb 2-1: SerialNumber: syz
[  112.490925][   T24] usb 2-1: config 0 descriptor??
[  112.501068][   T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  112.507722][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  112.518198][   T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  112.520965][   T24] usb 2-1: media controller created
[  112.528239][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  112.562529][   T24] DVB: Unable to find symbol tda10046_attach()
[  112.564916][   T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  112.568157][   T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  112.599366][ T7380] loop2: detected capacity change from 0 to 32768
[  112.624234][ T7380] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  112.645596][ T7380] XFS (loop2): Ending clean mount
[  112.809781][ T5725] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  112.959480][  T840] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  112.983636][ T5725] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.987816][ T5725] usb 5-1: config 0 interface 0 has no altsetting 0
[  112.993501][ T5725] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  112.997157][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.000302][ T5725] usb 5-1: Product: syz
[  113.002218][ T5725] usb 5-1: Manufacturer: syz
[  113.004181][ T5725] usb 5-1: SerialNumber: syz
[  113.009614][ T5725] usb 5-1: config 0 descriptor??
[  113.016189][ T5725] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  113.023168][ T5725] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  113.028125][ T5725] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  113.031668][ T5725] usb 5-1: media controller created
[  113.048370][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  113.086036][ T5725] DVB: Unable to find symbol tda10046_attach()
[  113.088203][ T5725] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  113.091270][ T5725] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  113.121397][  T840] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  113.125038][  T840] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.129158][  T840] usb 3-1: config 0 has no interface number 0
[  113.136760][  T840] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  113.140471][  T840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.144052][  T840] usb 3-1: Product: syz
[  113.146347][  T840] usb 3-1: Manufacturer: syz
[  113.148346][  T840] usb 3-1: SerialNumber: syz
[  113.152649][  T840] usb 3-1: config 0 descriptor??
[  113.157219][  T840] ims_pcu 3-1:0.41: Missing CDC union descriptor
[  113.159583][  T840] ims_pcu 3-1:0.41: probe with driver ims_pcu failed with error -22
[  113.365412][   T24] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  113.381097][   T24] usb 2-1: USB disconnect, device number 14
[  113.479955][ T5681] usb 3-1: USB disconnect, device number 8
[  113.873983][ T5725] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  113.880944][ T5725] usb 5-1: USB disconnect, device number 7
[  113.988197][ T7405] loop1: detected capacity change from 0 to 4096
[  114.006018][ T7405] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  114.016851][ T7405] ntfs3(loop1): Failed to load $Extend (-22).
[  114.019798][ T7405] ntfs3(loop1): Failed to initialize $Extend.
[  114.094741][ T5612] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  114.275330][ T7415] Dead loop on virtual device ip6_vti0 (net 27), fix it urgently!
[  114.479429][ T7423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.357'.
[  114.722691][ T7431] loop1: detected capacity change from 0 to 4096
[  114.761647][ T7431] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  114.780909][ T7431] ntfs3(loop1): Failed to load $Extend (-22).
[  114.783336][ T7431] ntfs3(loop1): Failed to initialize $Extend.
[  114.803704][   T34] audit: type=1800 audit(1778561680.351:12): pid=7431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.360" name="file1" dev="loop1" ino=30 res=0 errno=0
[  114.822246][   T34] audit: type=1800 audit(1778561680.351:13): pid=7431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.360" name="file1" dev="loop1" ino=30 res=0 errno=0
[  115.064743][ T5673] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  115.235651][ T5673] usb 2-1: Using ep0 maxpacket: 32
[  115.243570][ T5673] usb 2-1: config index 0 descriptor too short (expected 54793, got 74)
[  115.248281][ T5673] usb 2-1: config 8 has an invalid interface number: 77 but max is 0
[  115.253866][ T5673] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  115.267956][ T5673] usb 2-1: config 8 has no interface number 0
[  115.272319][ T5673] usb 2-1: config 8 interface 77 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  115.289038][ T5673] usb 2-1: config 8 interface 77 has no altsetting 0
[  115.300487][ T5673] usb 2-1: New USB device found, idVendor=470c, idProduct=8062, bcdDevice=95.49
[  115.303587][ T5673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.306189][ T5673] usb 2-1: Product: syz
[  115.307619][ T5673] usb 2-1: Manufacturer: syz
[  115.309205][ T5673] usb 2-1: SerialNumber: syz
[  115.759803][ T5680] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  115.919995][ T5680] usb 3-1: Using ep0 maxpacket: 8
[  115.936425][ T5680] usb 3-1: config 0 has an invalid interface number: 237 but max is 0
[  115.940081][ T5680] usb 3-1: config 0 has no interface number 0
[  115.949380][ T5680] usb 3-1: too many endpoints for config 0 interface 237 altsetting 173: 144, using maximum allowed: 30
[  115.956078][ T5680] usb 3-1: config 0 interface 237 altsetting 173 has 0 endpoint descriptors, different from the interface descriptor's value: 144
[  115.961996][ T5680] usb 3-1: config 0 interface 237 has no altsetting 0
[  115.977732][ T5680] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  115.981907][ T5680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.984965][ T5680] usb 3-1: Product: syz
[  115.986988][ T5680] usb 3-1: Manufacturer: syz
[  115.989110][ T5680] usb 3-1: SerialNumber: syz
[  115.998656][ T5680] usb 3-1: config 0 descriptor??
[  116.012106][ T5680] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  116.144602][ T5673] usb 2-1: USB disconnect, device number 15
[  116.651739][ T7451] loop1: detected capacity change from 0 to 32768
[  116.710763][ T7451] JBD2: Ignoring recovery information on journal
[  116.775023][ T7451] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  116.823609][ T7451] ocfs2: Unmounting device (7,1) on (node local)
[  117.099199][ T7442] loop2: detected capacity change from 0 to 32768
[  117.118240][ T7442] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  117.130933][ T7442] XFS (loop2): Ending clean mount
[  117.315973][ T7470] loop1: detected capacity change from 0 to 17
[  117.320647][ T7470] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1
[  117.801792][ T7477] XFS (loop2): User initiated shutdown received.
[  117.806010][ T7477] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:466).  Shutting down filesystem.
[  117.812954][ T7477] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  117.900892][ T7475] loop1: detected capacity change from 0 to 131072
[  117.909493][ T7475] F2FS-fs (loop1): invalid crc value
[  117.958868][ T7475] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  117.964438][ T5680] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  117.969549][ T7475] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  117.980864][   T34] audit: type=1800 audit(1778561683.318:14): pid=7475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.371" name="file1" dev="loop1" ino=7 res=0 errno=0
[  118.126490][ T5680] usb 5-1: device descriptor read/64, error -71
[  118.377241][ T5680] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  118.516284][ T5680] usb 5-1: device descriptor read/64, error -71
[  118.634953][ T5680] usb usb5-port1: attempt power cycle
[  118.919055][ T5725] usb 3-1: USB disconnect, device number 9
[  118.940772][ T5612] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  118.997928][ T5680] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  119.027358][ T5680] usb 5-1: device descriptor read/8, error -71
[  119.261116][   T34] audit: type=1326 audit(1778561684.515:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.376" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c34d9cdd9 code=0x7ffc0000
[  119.269159][   T34] audit: type=1326 audit(1778561684.515:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.376" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c34d9cdd9 code=0x7ffc0000
[  119.280443][   T34] audit: type=1326 audit(1778561684.515:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.376" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c34d9cdd9 code=0x7ffc0000
[  119.286441][ T5680] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  119.292045][   T34] audit: type=1326 audit(1778561684.515:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.376" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1c34d9cdd9 code=0x7ffc0000
[  119.300014][   T34] audit: type=1326 audit(1778561684.515:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.376" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c34d9cdd9 code=0x7ffc0000
[  119.307717][   T34] audit: type=1326 audit(1778561684.515:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.376" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c34d9cdd9 code=0x7ffc0000
[  119.317430][   T34] audit: type=1326 audit(1778561684.515:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.376" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c34d9cdd9 code=0x7ffc0000
[  119.318092][ T5680] usb 5-1: device descriptor read/8, error -71
[  119.456797][ T5680] usb usb5-port1: unable to enumerate USB device
[  119.481017][ T7494] loop2: detected capacity change from 0 to 32768
[  119.490746][ T7494] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  119.511196][ T7494] XFS (loop2): Ending clean mount
[  119.552051][ T5612] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  119.930291][ T7506] loop2: detected capacity change from 0 to 32768
[  119.933252][ T7506] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.378 (7506)
[  119.940991][ T7506] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.944662][ T7506] BTRFS info (device loop2): using sha256 checksum algorithm
[  119.964587][ T7506] BTRFS info (device loop2): enabling ssd optimizations
[  119.967101][ T7506] BTRFS info (device loop2): turning on async discard
[  119.969769][ T7506] BTRFS info (device loop2): enabling free space tree
[  120.678430][ T7533] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  120.699487][ T7529] loop1: detected capacity change from 0 to 32768
[  120.729724][ T7529] ialloc: diAlloc returned -5!
[  120.770301][ T5612] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  120.862419][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.382'.
[  121.396201][ T7537] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  121.400205][ T7537] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  121.402924][ T7537] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  121.405491][ T7537] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  121.408481][ T7537] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  121.411243][ T7537] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  121.413777][ T7537] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  121.416201][ T7537] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  121.418582][ T7537] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  121.420956][ T7537] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  121.507331][ T7544] nftables ruleset with unbound set
[  121.586680][ T7539] loop2: detected capacity change from 0 to 32768
[  121.589521][ T7539] btrfs: Deprecated parameter 'usebackuproot'
[  121.591941][ T7539] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  121.597255][ T7539] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.383 (7539)
[  121.608011][ T7539] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.611915][ T7539] BTRFS info (device loop2): using crc32c checksum algorithm
[  121.636168][ T1228] BTRFS warning (device loop2): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0
[  121.642100][ T7539] BTRFS error (device loop2): failed to read chunk root
[  121.658266][ T7539] BTRFS error (device loop2): open_ctree failed: -5
[  121.786316][ T5680] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  121.948526][ T5680] usb 2-1: unable to get BOS descriptor or descriptor too short
[  121.954598][ T5680] usb 2-1: config 0 has an invalid interface number: 86 but max is 0
[  121.958006][ T5680] usb 2-1: config 0 has no interface number 0
[  121.960326][ T5680] usb 2-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8
[  121.963850][ T5680] usb 2-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32
[  121.969992][ T5680] usb 2-1: config 0 interface 86 has no altsetting 0
[  121.973886][ T5680] usb 2-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e
[  121.977169][ T5680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.980139][ T5680] usb 2-1: Product: syz
[  121.981873][ T5680] usb 2-1: Manufacturer: syz
[  121.983684][ T5680] usb 2-1: SerialNumber: syz
[  121.986773][ T5680] usb 2-1: config 0 descriptor??
[  121.989477][ T7544] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  121.993108][ T7544] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  122.195202][ T7548] loop4: detected capacity change from 0 to 131072
[  122.199825][ T7548] F2FS-fs (loop4): Test dummy encryption mode enabled
[  122.210444][ T7548] F2FS-fs (loop4): invalid crc value
[  122.211667][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.216919][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.276255][ T7548] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  122.285821][ T7548] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  122.300599][ T5680] omninet 2-1:0.86: ZyXEL - omni.net usb converter detected
[  122.331640][ T5680] usb 2-1: ZyXEL - omni.net usb converter now attached to ttyUSB0
[  122.331866][ T7572] loop1: detected capacity change from 0 to 512
[  122.339442][ T5680] usb 2-1: USB disconnect, device number 16
[  122.349778][ T5680] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0
[  122.365317][ T5680] omninet 2-1:0.86: device disconnected
[  122.442170][ T7572] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.390: iget: bad i_size value: 38620345925642
[  122.446611][ T7572] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  122.446901][ T7572] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.390: couldn't read orphan inode 15 (err -117)
[  122.449991][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  122.450001][    C0] EXT4-fs (loop1): initial error at time 1778561687: ext4_orphan_get:1397: inode 15
[  122.450015][    C0] EXT4-fs (loop1): last error at time 1778561687: ext4_orphan_get:1397: inode 15
[  122.462771][ T7572] loop1: lost filesystem error report for type 5 error -117
[  122.463866][ T7572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.536587][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.559957][   T34] kauditd_printk_skb: 602 callbacks suppressed
[  122.560015][   T34] audit: type=1800 audit(1778561687.613:624): pid=7548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.388" name="file1" dev="loop4" ino=10 res=0 errno=0
[  122.631287][ T7579] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0
[  122.919759][ T7583] loop2: detected capacity change from 0 to 32768
[  122.955854][ T7583] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  122.968776][ T7583] XFS (loop2): Ending clean mount
[  122.996437][ T5612] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  123.251327][ T7602] loop2: detected capacity change from 0 to 8192
[  123.259427][ T7602] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  123.270880][ T7602] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  123.275373][ T7602] ntfs3(loop2): Failed to load $LogFile (-22).
[  123.517581][ T7605] loop2: detected capacity change from 0 to 40427
[  123.525086][ T7605] F2FS-fs (loop2): invalid crc value
[  123.584930][ T7605] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  123.591079][ T7605] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  123.983579][ T7611] loop1: detected capacity change from 0 to 32768
[  123.989525][ T7613] netlink: 'syz.2.398': attribute type 1 has an invalid length.
[  123.991068][ T7611] btrfs: Deprecated parameter 'usebackuproot'
[  123.992093][ T7613] netlink: 96 bytes leftover after parsing attributes in process `syz.2.398'.
[  123.997062][ T7613] netlink: 658 bytes leftover after parsing attributes in process `syz.2.398'.
[  123.999254][ T7611] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  124.000206][ T7613] netlink: 1 bytes leftover after parsing attributes in process `syz.2.398'.
[  124.008180][ T7611] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.399 (7611)
[  124.016907][ T7611] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  124.020371][ T7611] BTRFS info (device loop1): using crc32c checksum algorithm
[  124.023587][ T7611] BTRFS error (device loop1): superblock checksum mismatch
[  124.026029][ T7611] BTRFS error (device loop1): open_ctree failed: -22
[  124.227050][ T7613] loop2: detected capacity change from 0 to 40427
[  124.230881][ T7613] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  124.234069][ T7613] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  124.238204][ T7613] F2FS-fs (loop2): invalid crc value
[  124.288986][ T7613] F2FS-fs (loop2): Inconsistent error blkaddr:5663, sit bitmap:0
[  124.293611][ T7613] CPU: 1 UID: 0 PID: 7613 Comm: syz.2.398 Not tainted syzkaller #0 PREEMPT(full) 
[  124.293630][ T7613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.293638][ T7613] Call Trace:
[  124.293644][ T7613]  <TASK>
[  124.293650][ T7613]  dump_stack_lvl+0xe8/0x150
[  124.293671][ T7613]  __f2fs_is_valid_blkaddr+0xd84/0x14f0
[  124.293695][ T7613]  f2fs_truncate_data_blocks_range+0x790/0x1390
[  124.293728][ T7613]  f2fs_do_truncate_blocks+0x9f1/0x1140
[  124.293746][ T7613]  ? f2fs_convert_inline_inode+0x59a/0xcc0
[  124.293760][ T7613]  ? __pfx_f2fs_do_truncate_blocks+0x10/0x10
[  124.293800][ T7613]  ? __asan_memset+0x22/0x50
[  124.293821][ T7613]  ? __pfx_f2fs_convert_inline_inode+0x10/0x10
[  124.293847][ T7613]  f2fs_truncate_blocks+0x10a/0x300
[  124.293863][ T7613]  ? f2fs_evict_inode+0xa3f/0x1ac0
[  124.293884][ T7613]  f2fs_truncate+0x471/0x7c0
[  124.293903][ T7613]  f2fs_evict_inode+0xa3f/0x1ac0
[  124.293921][ T7613]  ? trace_lock_elapsed_time_end+0xf3/0xbc0
[  124.293935][ T7613]  ? f2fs_up_read_trace+0x1b/0x40
[  124.293963][ T7613]  ? __pfx_f2fs_evict_inode+0x10/0x10
[  124.293981][ T7613]  ? do_raw_spin_lock+0x12b/0x2f0
[  124.294007][ T7613]  ? do_raw_spin_unlock+0x4d/0x210
[  124.294026][ T7613]  ? __pfx_f2fs_evict_inode+0x10/0x10
[  124.294046][ T7613]  evict+0x61e/0xb10
[  124.294064][ T7613]  ? rcu_is_watching+0x15/0xb0
[  124.294086][ T7613]  ? __pfx_evict+0x10/0x10
[  124.294103][ T7613]  ? do_raw_spin_unlock+0x4d/0x210
[  124.294123][ T7613]  ? _raw_spin_unlock+0x28/0x50
[  124.294139][ T7613]  ? iput+0xb25/0xe80
[  124.294160][ T7613]  f2fs_fill_super+0x5f43/0x78f0
[  124.294211][ T7613]  get_tree_bdev_flags+0x431/0x4f0
[  124.294231][ T7613]  ? __pfx_f2fs_fill_super+0x10/0x10
[  124.294246][ T7613]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  124.294273][ T7613]  vfs_get_tree+0x92/0x2a0
[  124.294293][ T7613]  do_new_mount+0x341/0xd30
[  124.294316][ T7613]  ? apparmor_capable+0x126/0x170
[  124.294340][ T7613]  ? __pfx_do_new_mount+0x10/0x10
[  124.294356][ T7613]  ? ns_capable+0x89/0xe0
[  124.294378][ T7613]  ? user_path_at+0xd4/0x160
[  124.294397][ T7613]  __se_sys_mount+0x31d/0x420
[  124.294417][ T7613]  ? __pfx___se_sys_mount+0x10/0x10
[  124.294438][ T7613]  ? __x64_sys_mount+0x20/0xc0
[  124.294453][ T7613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.294467][ T7613]  do_syscall_64+0x15f/0xf80
[  124.294484][ T7613]  ? trace_irq_disable+0x3b/0x140
[  124.294507][ T7613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.294519][ T7613] RIP: 0033:0x7f5f6f59e04a
[  124.294533][ T7613] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.294544][ T7613] RSP: 002b:00007f5f7044fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  124.294559][ T7613] RAX: ffffffffffffffda RBX: 00007f5f7044fee0 RCX: 00007f5f6f59e04a
[  124.294568][ T7613] RDX: 0000200000000000 RSI: 0000200000000300 RDI: 00007f5f7044fea0
[  124.294576][ T7613] RBP: 0000200000000000 R08: 00007f5f7044fee0 R09: 0000000001808014
[  124.294585][ T7613] R10: 0000000001808014 R11: 0000000000000246 R12: 0000200000000300
[  124.294594][ T7613] R13: 00007f5f7044fea0 R14: 00000000000055ac R15: 00002000000009c0
[  124.294617][ T7613]  </TASK>
[  124.665302][ T7624] loop2: detected capacity change from 0 to 64
[  124.665932][ T7622] QAT: failed to copy from user cfg_data.
[  124.724559][ T7622] syz.1.402 uses obsolete (PF_INET,SOCK_PACKET)
[  125.118355][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.408'.
[  125.149361][ T7627] loop2: detected capacity change from 0 to 32768
[  125.157179][ T7627] btrfs: Deprecated parameter 'usebackuproot'
[  125.164109][ T7627] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  125.176053][ T7627] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.404 (7627)
[  125.192631][ T7627] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  125.198464][ T7627] BTRFS info (device loop2): using crc32c checksum algorithm
[  125.254643][   T27] BTRFS warning (device loop2): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xe94cadbf level 0
[  125.263313][ T7627] BTRFS error (device loop2): failed to read chunk root
[  125.303443][ T7627] BTRFS error (device loop2): open_ctree failed: -5
[  125.490636][ T7653] loop4: detected capacity change from 0 to 32768
[  125.526542][ T7653] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  125.539346][ T7653] XFS (loop4): Ending clean mount
[  125.562275][ T6351] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  125.577619][ T7664] loop2: detected capacity change from 0 to 32768
[  125.584700][ T7664] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.412 (7664)
[  125.609758][ T7664] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  125.618888][ T7664] BTRFS info (device loop2): using sha256 checksum algorithm
[  125.622364][   T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  125.720676][ T7664] BTRFS info (device loop2): enabling ssd optimizations
[  125.723038][ T7664] BTRFS info (device loop2): turning on async discard
[  125.725040][ T7664] BTRFS info (device loop2): enabling free space tree
[  125.739319][   T34] audit: type=1800 audit(1778561690.579:625): pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.412" name="file0" dev="loop2" ino=258 res=0 errno=0
[  125.788128][   T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  125.796230][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.799493][   T24] usb 2-1: Product: syz
[  125.801882][   T24] usb 2-1: Manufacturer: syz
[  125.810653][   T24] usb 2-1: SerialNumber: syz
[  125.830002][ T7693] loop4: detected capacity change from 0 to 2048
[  125.844600][ T7693] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  125.849490][ T5621] udevd[5621]: incorrect nilfs2 checksum on /dev/loop4
[  125.856844][ T5621] udevd[5621]: incorrect nilfs2 checksum on /dev/loop4
[  125.882660][ T7694] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  126.104877][   T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  126.112894][   T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  126.147539][   T24] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  126.155681][   T24] usb 2-1: USB disconnect, device number 17
[  126.432682][ T5612] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  126.611969][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'.
[  126.799070][ T7707] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  126.821571][ T7707] XFS (loop1): Ending clean mount
[  126.848239][ T5608] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  126.990198][   T10] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  127.100791][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'.
[  127.116676][ T7728] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  127.155216][   T10] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  127.159020][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.163536][   T10] usb 3-1: Product: syz
[  127.166997][   T10] usb 3-1: Manufacturer: syz
[  127.170546][   T10] usb 3-1: SerialNumber: syz
[  127.187355][   T10] usb 3-1: config 0 descriptor??
[  127.218426][ T7730] SQUASHFS error: zlib decompression failed, data probably corrupt
[  127.219268][   T10] usb 3-1: selecting invalid altsetting 3
[  127.221910][ T7730] SQUASHFS error: Failed to read block 0x9b: -5
[  127.223853][   T10] comedi comedi5: could not set alternate setting 3 in high speed
[  127.227522][ T7730] SQUASHFS error: Unable to read metadata cache entry [99]
[  127.229933][   T10] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device.
[  127.232520][ T7730] SQUASHFS error: Unable to read inode 0x127
[  127.241406][   T10] usbdux 3-1:0.0: probe with driver usbdux failed with error -22
[  127.412384][ T7712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.418461][ T7712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.431812][ T7712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.437021][ T7712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.446261][ T5681] usb 3-1: USB disconnect, device number 10
[  127.463122][ T7734] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.426 (7734)
[  127.477943][ T7734] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  127.481221][ T7734] BTRFS info (device loop1): using sha256 checksum algorithm
[  127.546122][ T7734] BTRFS info (device loop1): rebuilding free space tree
[  127.565072][ T7734] BTRFS info (device loop1): disabling free space tree
[  127.568105][ T7734] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  127.572055][ T7734] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  127.579320][ T7734] BTRFS info (device loop1): turning off barriers
[  127.582084][ T7734] BTRFS info (device loop1): force clearing of disk cache
[  127.584853][ T7734] BTRFS info (device loop1): use zlib compression, level 3
[  127.676002][ T5608] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  128.066052][ T7763] netlink: 'syz.2.431': attribute type 8 has an invalid length.
[  128.090943][ T7761] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  128.151722][ T7761] ntfs3(loop4): ino=1a, mi_enum_attr
[  128.153368][ T7761] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  128.356963][ T7767] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  128.543875][ T7765] set_capacity_and_notify: 4 callbacks suppressed
[  128.543892][ T7765] loop2: detected capacity change from 0 to 40427
[  128.602174][ T7765] F2FS-fs (loop2): invalid crc value
[  128.675122][ T7769] loop4: detected capacity change from 0 to 40427
[  128.681187][ T7769] F2FS-fs: heap/no_heap options were deprecated
[  128.690822][ T7769] F2FS-fs (loop4): build fault injection rate: 19
[  128.693462][ T7769] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  128.696938][ T7769] F2FS-fs (loop4): invalid crc value
[  128.704955][ T7769] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810
[  128.745784][ T7769] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410
[  128.756155][ T7769] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  128.762521][ T7765] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  128.768895][ T7769] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  128.772874][ T7765] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  129.185605][ T7777] batman_adv: batadv0: Adding interface: macvtap1
[  129.202182][ T7777] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  129.210224][ T7777] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  129.463183][ T7789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.439'.
[  129.665425][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.443'.
[  129.677534][ T5487] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  129.681841][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.443'.
[  129.686203][ T5487] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  129.696675][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.443'.
[  129.701013][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.443'.
[  129.704496][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  129.709640][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.443'.
[  129.714040][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.443'.
[  129.719158][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.443'.
[  129.759967][ T7806] loop4: detected capacity change from 0 to 1024
[  129.763006][ T7806] EXT4-fs: Ignoring removed bh option
[  129.785625][ T7806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.793969][   T34] audit: type=1800 audit(1778561694.379:626): pid=7806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.444" name="file1" dev="loop4" ino=15 res=0 errno=0
[  129.802843][ T7806] EXT4-fs (loop4): shut down requested (2)
[  129.843599][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  129.929205][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  130.121546][ T6351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.803800][ T7844] loop1: detected capacity change from 0 to 32768
[  130.809848][ T7844] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.456 (7844)
[  130.826575][ T7844] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  130.829950][ T7844] BTRFS info (device loop1): using sha256 checksum algorithm
[  130.883339][ T7844] BTRFS info (device loop1): enabling ssd optimizations
[  130.885683][ T7844] BTRFS info (device loop1): turning on async discard
[  130.888243][ T7844] BTRFS info (device loop1): enabling free space tree
[  130.896876][   T34] audit: type=1800 audit(1778561695.408:627): pid=7844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.456" name="file0" dev="loop1" ino=258 res=0 errno=0
[  130.954866][ T5725] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  131.136779][ T5725] usb 3-1: Using ep0 maxpacket: 32
[  131.145611][ T5725] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  131.150468][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  131.159683][ T5725] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  131.163330][ T5725] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  131.166799][ T5725] usb 3-1: Product: syz
[  131.169509][ T5725] usb 3-1: Manufacturer: syz
[  131.172422][ T5725] usb 3-1: SerialNumber: syz
[  131.180420][ T5725] usb 3-1: config 0 descriptor??
[  131.219096][ T5725] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  131.359824][ T7868] loop4: detected capacity change from 0 to 32768
[  131.365113][ T7868] btrfs: Deprecated parameter 'usebackuproot'
[  131.369854][ T7868] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  131.378943][ T7868] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.458 (7868)
[  131.387022][ T7868] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.390250][ T7868] BTRFS info (device loop4): using crc32c checksum algorithm
[  131.392684][ T7868] BTRFS error (device loop4): superblock checksum mismatch
[  131.396460][ T7868] BTRFS error (device loop4): open_ctree failed: -22
[  131.596389][ T5608] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  131.841642][   T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  131.962450][ T7881] loop1: detected capacity change from 0 to 32768
[  131.975483][ T7881] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.464 (7881)
[  131.992961][ T7881] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  131.998178][ T7881] BTRFS info (device loop1): using sha256 checksum algorithm
[  132.002448][   T10] usb 5-1: Using ep0 maxpacket: 32
[  132.007819][   T10] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  132.011818][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.015474][   T10] usb 5-1: Product: syz
[  132.016896][   T10] usb 5-1: Manufacturer: syz
[  132.018470][   T10] usb 5-1: SerialNumber: syz
[  132.021619][   T10] usb 5-1: config 0 descriptor??
[  132.030653][   T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  132.077044][ T7881] BTRFS info (device loop1): enabling ssd optimizations
[  132.079668][ T7881] BTRFS info (device loop1): turning on async discard
[  132.082699][ T7881] BTRFS info (device loop1): enabling free space tree
[  132.160519][ T5608] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  132.313300][ T5487] usb 3-1: Failed to submit usb control message: -110
[  132.316704][ T5487] usb 3-1: unable to send the bmi data to the device: -110
[  132.321675][ T5487] usb 3-1: unable to get target info from device
[  132.326408][ T5487] usb 3-1: could not get target info (-110)
[  132.330927][ T5487] usb 3-1: could not probe fw (-110)
[  132.400423][ T7901] __nla_validate_parse: 19 callbacks suppressed
[  132.400441][ T7901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.466'.
[  133.006165][ T7901] loop1: detected capacity change from 0 to 131072
[  133.011382][ T7901] F2FS-fs (loop1): Test dummy encryption mode enabled
[  133.017186][ T7901] F2FS-fs (loop1): invalid crc value
[  133.070903][ T7901] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  133.077407][ T7901] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  133.754819][   T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  133.803442][ T5673] usb 3-1: USB disconnect, device number 11
[  133.927158][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  133.946785][   T24] usb 2-1: Using ep0 maxpacket: 16
[  133.950215][   T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  133.953820][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.957437][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  133.962782][   T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  133.966466][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.968830][   T10] gspca_ov534_9: reg_r err -71
[  133.969280][   T24] usb 2-1: Product: syz
[  133.974576][   T24] usb 2-1: Manufacturer: syz
[  133.976157][   T24] usb 2-1: SerialNumber: syz
[  133.985168][   T24] usb 2-1: 0:2 : does not exist
[  134.181972][ T5673] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  134.221080][   T24] usb 2-1: 1:0: failed to get current value for ch 0 (-22)
[  134.246039][   T10] gspca_ov534_9: Unknown sensor 0000
[  134.246114][   T10] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  134.258861][   T24] usb 2-1: USB disconnect, device number 18
[  134.279642][   T10] usb 5-1: USB disconnect, device number 12
[  134.327366][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  134.355632][ T5673] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.360874][ T5673] usb 3-1: config 0 interface 0 has no altsetting 0
[  134.367835][ T5673] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  134.370615][ T5673] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.373074][ T5673] usb 3-1: Product: syz
[  134.375809][ T5673] usb 3-1: Manufacturer: syz
[  134.377811][ T5673] usb 3-1: SerialNumber: syz
[  134.385461][ T5673] usb 3-1: config 0 descriptor??
[  134.394930][ T5673] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  134.404147][ T5673] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  134.408637][ T5673] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  134.412055][ T5673] usb 3-1: media controller created
[  134.424680][ T5673] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  134.494626][ T5673] DVB: Unable to find symbol tda10046_attach()
[  134.497224][ T5673] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  134.500558][ T5673] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  134.523409][ T7919] loop1: detected capacity change from 0 to 65536
[  134.556987][ T7919] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  134.594722][ T7919] XFS (loop1): Ending clean mount
[  134.621939][ T7919] XFS (loop1): Quotacheck needed: Please wait.
[  134.643556][   T83] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 
[  134.647751][   T83] XFS (loop1): Unmount and run xfs_repair
[  134.650211][   T83] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  134.657180][   T83] 00000000: 58 41 47 46 00 00 00 02 00 00 00 00 00 00 40 00  XAGF..........@.
[  134.661540][   T83] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  134.666472][   T83] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  134.670153][   T83] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c0 00 00 00 00  ......?...?.....
[  134.674577][   T83] 00000040: d6 f6 9d bd 8c 5d 46 be b8 8e 92 c0 ae 88 ce b2  .....]F.........
[  134.678281][   T83] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  134.681932][   T83] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  134.686191][   T83] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  134.689401][   T83] XFS (loop1): metadata I/O error in "xfs_read_agf+0x289/0x5c0" at daddr 0x1 len 1 error 74
[  134.692753][   T83] loop1: lost filesystem error report for type 5 error -117
[  134.727623][ T7919] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  134.736514][ T7919] loop1: lost filesystem error report for type 5 error -117
[  134.762807][ T5608] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  134.777496][ T5608] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  135.045835][ T7932] loop4: detected capacity change from 0 to 164
[  135.058573][ T7932] rock: directory entry would overflow storage
[  135.060725][ T7932] rock: sig=0x4d4e, size=5, remaining=4
[  135.063027][ T7932] isofs: isofs_export_get_parent(): child directory not normalized!
[  135.066459][ T7932] isofs: isofs_export_get_parent(): child directory not normalized!
[  135.252366][ T7935] loop1: detected capacity change from 0 to 32768
[  135.256956][ T7935] btrfs: Deprecated parameter 'usebackuproot'
[  135.261245][ T7935] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  135.267215][ T5673] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  135.274043][ T7935] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.474 (7935)
[  135.284839][ T5673] usb 3-1: USB disconnect, device number 12
[  135.300502][ T7935] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  135.311317][ T7935] BTRFS info (device loop1): using crc32c checksum algorithm
[  135.318682][ T7935] BTRFS error (device loop1): superblock checksum mismatch
[  135.327466][ T7935] BTRFS error (device loop1): open_ctree failed: -22
[  135.365765][ T7946] netlink: 68 bytes leftover after parsing attributes in process `syz.1.478'.
[  135.645880][   T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  135.817791][   T10] usb 2-1: Using ep0 maxpacket: 16
[  135.823339][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.838254][   T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  135.842213][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.863639][   T10] usb 2-1: config 0 descriptor??
[  135.869163][   T10] usbhid 2-1:0.0: can't add hid device: -22
[  135.874644][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  135.892932][ T7943] loop4: detected capacity change from 0 to 131072
[  136.010161][ T7952] fuse: Bad value for 'fd'
[  136.014159][ T7952] fuse: Bad value for 'fd'
[  136.017919][ T7952] fuse: Bad value for 'fd'
[  136.109054][ T5681] usb 2-1: USB disconnect, device number 19
[  136.266186][ T7943] loop4: detected capacity change from 0 to 256
[  136.280934][ T7943] FAT-fs (loop4): Directory bread(block 64) failed
[  136.283722][ T7943] FAT-fs (loop4): Directory bread(block 65) failed
[  136.286527][ T7943] FAT-fs (loop4): Directory bread(block 66) failed
[  136.290132][ T7943] FAT-fs (loop4): Directory bread(block 67) failed
[  136.292953][ T7943] FAT-fs (loop4): Directory bread(block 68) failed
[  136.295539][ T7943] FAT-fs (loop4): Directory bread(block 69) failed
[  136.299089][ T7943] FAT-fs (loop4): Directory bread(block 70) failed
[  136.301318][ T7943] FAT-fs (loop4): Directory bread(block 71) failed
[  136.303370][ T7943] FAT-fs (loop4): Directory bread(block 72) failed
[  136.305353][ T7943] FAT-fs (loop4): Directory bread(block 73) failed
[  137.079288][ T8008] loop1: detected capacity change from 0 to 32768
[  137.094640][ T8008] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.492 (8008)
[  137.102291][ T8008] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  137.110325][ T8008] BTRFS info (device loop1): using sha256 checksum algorithm
[  137.165841][   T31] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  137.230934][ T8008] BTRFS info (device loop1): rebuilding free space tree
[  137.274905][ T8008] BTRFS info (device loop1): setting nodatasum
[  137.280478][ T8008] BTRFS info (device loop1): setting nodatacow
[  137.284802][ T8008] BTRFS info (device loop1): turning off barriers
[  137.290438][ T8008] BTRFS info (device loop1): enabling free space tree
[  137.298457][ T8008] BTRFS info (device loop1): force clearing of disk cache
[  137.321947][ T8008] BTRFS critical (device loop1 state E): emergency shutdown
[  137.354245][ T5608] BTRFS info (device loop1 state E): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  137.471132][ T8049] loop1: detected capacity change from 0 to 64
[  137.761959][   T31] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  137.775091][ T8051] comedi comedi0: comedi_config --init_data is deprecated
[  137.811007][ T8054] xt_HMARK: spi-set and port-set can't be combined
[  137.814764][ T8055] xt_HMARK: spi-set and port-set can't be combined
[  138.208230][ T8057] loop1: detected capacity change from 0 to 32768
[  138.219287][ T8057] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.505 (8057)
[  138.251973][ T8057] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  138.259977][ T8057] BTRFS info (device loop1): using sha256 checksum algorithm
[  138.290415][ T8057] BTRFS info (device loop1): rebuilding free space tree
[  138.321317][ T8057] BTRFS info (device loop1): setting nodatasum
[  138.327293][ T8057] BTRFS info (device loop1): setting nodatacow
[  138.336614][ T8057] BTRFS info (device loop1): turning off barriers
[  138.339776][ T8057] BTRFS info (device loop1): enabling free space tree
[  138.347454][ T8057] BTRFS info (device loop1): force clearing of disk cache
[  138.391662][ T8057] BTRFS critical (device loop1 state E): emergency shutdown
[  138.510731][ T8088] vivid-003: disconnect
[  138.578111][ T8088] vivid-003: reconnect
[  138.842884][ T8070] loop4: detected capacity change from 0 to 32768
[  138.911915][ T8070] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  139.026893][ T8070] XFS (loop4): Ending clean mount
[  139.118384][ T8087] loop2: detected capacity change from 0 to 32768
[  139.156391][ T8087] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  139.227800][ T8087] XFS (loop2): Ending clean mount
[  139.295328][ T6351] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  139.426408][ T5612] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  139.885175][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.510'.
[  140.049991][ T5608] BTRFS info (device loop1 state E): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  140.050070][ T8114] loop4: detected capacity change from 0 to 256
[  140.061043][ T8114] FAT-fs (loop4): Directory bread(block 1285) failed
[  140.339562][ T8121] loop1: detected capacity change from 0 to 4096
[  140.364097][ T8121] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  140.384162][ T8121] ntfs3(loop1): Failed to load $Extend (-22).
[  140.400425][ T8121] ntfs3(loop1): Failed to initialize $Extend.
[  140.475160][ T8129] __vm_enough_memory: pid: 8129, comm: syz.2.521, bytes: 21199742701568 not enough memory for the allocation
[  140.522310][ T8131] loop2: detected capacity change from 0 to 512
[  140.565750][ T8131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.570929][ T8131] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.577435][ T8131] EXT4-fs (loop2): shut down requested (2)
[  140.600103][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.730197][ T8125] loop4: detected capacity change from 0 to 32768
[  140.735341][ T8125] btrfs: Deprecated parameter 'usebackuproot'
[  140.741625][ T8125] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  140.748141][ T8125] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.518 (8125)
[  140.763999][ T8125] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  140.775250][ T8125] BTRFS info (device loop4): using crc32c checksum algorithm
[  140.826919][   T27] BTRFS warning (device loop4): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xc6790284 level 0
[  140.842896][ T8125] BTRFS error (device loop4): failed to read chunk root
[  140.867018][ T8125] BTRFS error (device loop4): open_ctree failed: -5
[  140.867779][ T8133] loop1: detected capacity change from 0 to 32768
[  140.884868][ T8133] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.520 (8133)
[  140.921628][ T8133] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  140.939395][ T8133] BTRFS info (device loop1): using sha256 checksum algorithm
[  141.114709][ T8168] xt_hashlimit: size too large, truncated to 1048576
[  141.121149][ T8138] loop2: detected capacity change from 0 to 32768
[  141.126401][ T8133] BTRFS info (device loop1): rebuilding free space tree
[  141.142466][ T8133] BTRFS info (device loop1): setting nodatasum
[  141.145152][ T8133] BTRFS info (device loop1): setting nodatacow
[  141.149183][ T8133] BTRFS info (device loop1): turning off barriers
[  141.152250][ T8133] BTRFS info (device loop1): enabling free space tree
[  141.155106][ T8133] BTRFS info (device loop1): force clearing of disk cache
[  141.175319][ T8133] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  141.175319][ T8133] Please contact the netfilter-devel mailing list or update your nftables rules.
[  141.185509][ T8133] BTRFS critical (device loop1 state E): emergency shutdown
[  141.193611][ T8138] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  141.205162][ T8171] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  141.208447][ T5608] BTRFS info (device loop1 state E): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  141.248623][ T8138] XFS (loop2): Ending clean mount
[  141.351359][ T5612] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  141.584194][ T8189] loop1: detected capacity change from 0 to 2048
[  141.597269][ T8189] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051
[  141.615914][ T8189] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  141.860030][ T8197] loop2: detected capacity change from 0 to 4096
[  141.869626][ T8197] ntfs3: Unknown parameter ''
[  142.300742][ T8209] input: syz1 as /devices/virtual/input/input9
[  142.347803][ T8209] netlink: 48 bytes leftover after parsing attributes in process `syz.1.533'.
[  142.675433][ T8211] loop4: detected capacity change from 0 to 32768
[  142.689001][ T8211] (syz.4.535,8211,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  142.714783][ T8211] (syz.4.535,8211,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  142.746928][ T8211] (syz.4.535,8211,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  142.756404][ T8211] JBD2: Ignoring recovery information on journal
[  142.767251][ T8216] macvtap1: entered promiscuous mode
[  142.769347][ T8216] macvtap1: entered allmulticast mode
[  142.807140][ T8211] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  142.914676][ T6351] ocfs2: Unmounting device (7,4) on (node local)
[  142.988757][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  142.989025][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  142.997753][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  143.129358][ T8220] loop2: detected capacity change from 0 to 32768
[  143.157499][ T8220] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  143.182295][ T8220] XFS (loop2): Ending clean mount
[  143.233058][ T5612] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  143.301912][ T8238] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  143.343693][ T8238] ntfs3(loop4): ino=1a, mi_enum_attr
[  143.358019][ T8238] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  143.624950][ T8239] F2FS-fs (loop1): invalid crc value
[  143.728342][ T8239] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  143.731207][ T8241] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.541 (8241)
[  143.752306][ T8241] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  143.755108][ T8239] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  143.759039][ T8241] BTRFS info (device loop2): using sha256 checksum algorithm
[  143.837494][ T8241] BTRFS info (device loop2): rebuilding free space tree
[  143.868862][ T8241] BTRFS info (device loop2): setting nodatasum
[  143.884525][ T8241] BTRFS info (device loop2): setting nodatacow
[  143.893946][ T8241] BTRFS info (device loop2): turning off barriers
[  143.901252][ T8241] BTRFS info (device loop2): enabling free space tree
[  143.910258][ T8241] BTRFS info (device loop2): force clearing of disk cache
[  143.994504][ T5612] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  144.405047][ T8259] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  144.406188][ T8283] binder: 8282:8283 ioctl 1 200000000200 returned -22
[  144.435594][ T8259] XFS (loop4): Ending clean mount
[  144.485854][ T6351] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  144.844824][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'.
[  144.849295][ T8296] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.869611][ T8296] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.206728][ T8299] F2FS-fs (loop4): invalid crc value
[  145.257344][ T8299] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  145.269892][ T8299] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  145.662227][ T8313] set_capacity_and_notify: 5 callbacks suppressed
[  145.662242][ T8313] loop1: detected capacity change from 0 to 32768
[  145.669952][ T8313] xfs: Deprecated parameter 'attr2'
[  145.678828][ T8313] XFS: attr2 mount option is deprecated.
[  145.684208][ T8318] loop2: detected capacity change from 0 to 32768
[  145.739421][ T8313] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  145.745236][ T8318] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  145.760695][ T8313] XFS (loop1): Ending clean mount
[  145.767868][ T8313] XFS (loop1): Quotacheck needed: Please wait.
[  145.769236][ T8318] XFS (loop2): Ending clean mount
[  145.812272][ T8313] XFS (loop1): Quotacheck: Done.
[  145.846218][ T5608] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  146.330140][ T8342] loop1: detected capacity change from 0 to 256
[  146.339819][ T8342] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  146.437692][ T5612] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  146.618837][ T8355] netlink: 'syz.1.567': attribute type 23 has an invalid length.
[  146.796799][ T8368] loop2: detected capacity change from 0 to 512
[  146.832863][ T8368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.859636][ T8368] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.982371][ T8368] EXT4-fs warning (device loop2): ext4_empty_dir:3104: inode #12: comm syz.2.571: directory missing '..'
[  147.053691][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.067054][ T8372] loop1: detected capacity change from 0 to 32768
[  147.071748][ T8372] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.569 (8372)
[  147.108966][ T8372] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.123209][ T8372] BTRFS info (device loop1): using sha256 checksum algorithm
[  147.138015][ T8374] loop4: detected capacity change from 0 to 32768
[  147.146825][ T8374] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.572 (8374)
[  147.175143][ T8374] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  147.193886][ T8374] BTRFS info (device loop4): using sha256 checksum algorithm
[  147.214310][ T8372] BTRFS info (device loop1): enabling ssd optimizations
[  147.224089][ T8372] BTRFS info (device loop1): turning on async discard
[  147.232475][ T8372] BTRFS info (device loop1): enabling free space tree
[  147.254153][   T34] audit: type=1800 audit(1778561710.718:628): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.569" name="file0" dev="loop1" ino=258 res=0 errno=0
[  147.301842][ T8374] BTRFS info (device loop4): rebuilding free space tree
[  147.321577][ T8374] BTRFS info (device loop4): setting nodatasum
[  147.324130][ T8374] BTRFS info (device loop4): setting nodatacow
[  147.326941][ T8374] BTRFS info (device loop4): turning off barriers
[  147.330365][ T8374] BTRFS info (device loop4): enabling free space tree
[  147.332990][ T8374] BTRFS info (device loop4): force clearing of disk cache
[  147.384692][ T6351] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  147.718871][ T5608] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.728792][ T8408] loop2: detected capacity change from 0 to 32768
[  147.754553][ T8408] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  147.781051][ T8408] XFS (loop2): Ending clean mount
[  147.921682][ T5680] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  147.943770][ T5612] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  148.087349][ T5680] usb 5-1: Using ep0 maxpacket: 32
[  148.108010][ T5680] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  148.116202][ T5680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.125828][ T5680] usb 5-1: Product: syz
[  148.135409][ T5680] usb 5-1: Manufacturer: syz
[  148.137383][ T5680] usb 5-1: SerialNumber: syz
[  148.151787][ T5680] usb 5-1: config 0 descriptor??
[  148.152036][ T5681] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  148.167878][ T5680] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  148.194486][ T5681] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  148.401370][ T8434] loop2: detected capacity change from 0 to 64
[  148.605424][ T8438] loop2: detected capacity change from 0 to 16
[  148.609398][ T8438] erofs: Bad value for 'cache_strategy'
[  149.083609][ T8440] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  149.085932][ T8440] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  149.088761][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.584'.
[  149.115335][ T8440] vhci_hcd vhci_hcd.0: Device attached
[  149.292132][  T840] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  149.370338][  T840] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  149.498417][ T8444] vhci_hcd: connection reset by peer
[  149.507537][   T12] vhci_hcd vhci_hcd.2: stop threads
[  149.511508][   T12] vhci_hcd vhci_hcd.2: release socket
[  149.518209][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  149.545955][ T8449] loop1: detected capacity change from 0 to 32768
[  149.553334][ T8449] (syz.1.586,8449,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  149.560942][ T8449] (syz.1.586,8449,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  149.574193][ T8449] JBD2: Ignoring recovery information on journal
[  149.597291][ T8449] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  149.642893][ T5608] ocfs2: Unmounting device (7,1) on (node local)
[  149.757432][ T8453] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  149.770057][ T8453] ntfs3(loop1): ino=1a, mi_enum_attr
[  149.772346][ T8453] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  149.974869][ T8453] ntfs3(loop1): ino=1e, "file1" ntfs3_write_inode failed, -22.
[  150.106668][ T5680] gspca_ov534_9: reg_r err -71
[  150.412814][ T8469] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  150.414098][ T5680] gspca_ov534_9: Unknown sensor 0000
[  150.418558][ T5680] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  150.430183][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.595'.
[  150.432298][ T5680] usb 5-1: USB disconnect, device number 13
[  150.446896][ T8469] XFS (loop1): Ending clean mount
[  150.482365][ T5608] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  150.756678][ T8493] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  150.774334][ T8493] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.860897][ T8491] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.599 (8491)
[  150.871768][ T8491] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  150.875236][ T8491] BTRFS info (device loop4): using sha256 checksum algorithm
[  150.941326][ T8491] BTRFS info (device loop4): rebuilding free space tree
[  150.983100][ T8491] BTRFS info (device loop4): disabling free space tree
[  150.992139][ T8491] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  151.001449][ T8491] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  151.021138][ T8491] BTRFS info (device loop4): turning off barriers
[  151.032135][ T8491] BTRFS info (device loop4): force clearing of disk cache
[  151.041672][ T8491] BTRFS info (device loop4): use zlib compression, level 3
[  151.058502][ T8516] rock: directory entry would overflow storage
[  151.078967][ T8516] rock: sig=0x4654, size=5, remaining=4
[  151.159687][ T8526] tmpfs: Unknown parameter 'usrquota/seq'
[  151.273368][ T6351] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  151.373148][ T8531] set_capacity_and_notify: 5 callbacks suppressed
[  151.373159][ T8531] loop1: detected capacity change from 0 to 32768
[  151.385842][ T8531] btrfs: Deprecated parameter 'usebackuproot'
[  151.393072][ T8531] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  151.408204][ T8531] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.608 (8531)
[  151.444060][ T8535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'.
[  151.479723][ T8531] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  151.490687][ T8531] BTRFS info (device loop1): using crc32c checksum algorithm
[  151.593522][   T37] BTRFS warning (device loop1): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xc9f11ae3 level 0
[  151.612774][ T8555] loop4: detected capacity change from 0 to 256
[  151.642865][ T8531] BTRFS error (device loop1): failed to read chunk root
[  151.648860][ T8555] loop4: detected capacity change from 0 to 4096
[  151.671186][ T8531] BTRFS error (device loop1): open_ctree failed: -5
[  151.733845][ T8557] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  151.783462][ T5680] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  151.953494][ T5680] usb 3-1: device descriptor read/64, error -71
[  151.981354][ T8561] netlink: 44 bytes leftover after parsing attributes in process `syz.4.615'.
[  151.988423][ T8561] netlink: 43 bytes leftover after parsing attributes in process `syz.4.615'.
[  151.994247][ T8561] netlink: 'syz.4.615': attribute type 6 has an invalid length.
[  151.998081][ T8561] netlink: 'syz.4.615': attribute type 5 has an invalid length.
[  152.002061][ T8561] netlink: 43 bytes leftover after parsing attributes in process `syz.4.615'.
[  152.017087][ T5681] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  152.181724][ T5681] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  152.182435][ T8564] loop4: detected capacity change from 0 to 32768
[  152.185223][ T5681] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  152.196719][ T5681] usb 2-1: Product: syz
[  152.202523][ T5681] usb 2-1: Manufacturer: syz
[  152.207125][ T8564] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  152.210330][ T5680] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  152.211182][ T5681] usb 2-1: SerialNumber: syz
[  152.231637][ T5681] usb 2-1: config 0 descriptor??
[  152.245092][ T5681] ch341 2-1:0.0: ch341-uart converter detected
[  152.254829][ T8564] XFS (loop4): Ending clean mount
[  152.313116][ T6351] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  152.350194][ T5680] usb 3-1: device descriptor read/64, error -71
[  152.468479][ T5680] usb usb3-port1: attempt power cycle
[  152.647760][   T24] net_ratelimit: 45 callbacks suppressed
[  152.647772][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.743670][    T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  152.850432][ T5680] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  152.872381][ T5680] usb 3-1: device descriptor read/8, error -71
[  152.906209][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.911440][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.915455][    T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  152.919037][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.928104][    T9] usb 5-1: config 0 descriptor??
[  153.139052][ T5680] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  153.162434][ T5680] usb 3-1: device descriptor read/8, error -71
[  153.278303][ T5680] usb usb3-port1: unable to enumerate USB device
[  153.318968][ T5681] ch341-uart ttyUSB0: break control not supported, using simulated break
[  153.323917][ T5681] usb 2-1: ch341-uart converter now attached to ttyUSB0
[  153.335895][ T5681] usb 2-1: USB disconnect, device number 20
[  153.341613][ T5681] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  153.349527][ T5681] ch341 2-1:0.0: device disconnected
[  153.384422][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  153.391605][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  153.397235][    T9] usb 5-1: USB disconnect, device number 14
[  153.431943][ T8579] loop4: detected capacity change from 0 to 64
[  153.489903][ T8581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.619'.
[  153.553100][ T8585] loop4: detected capacity change from 0 to 1024
[  153.587059][ T8585] hfsplus: walked past end of dir
[  153.771721][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.908403][    T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  154.081057][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.084590][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  154.089243][    T9] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  154.093442][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.095947][    T9] usb 5-1: Product: syz
[  154.097278][    T9] usb 5-1: Manufacturer: syz
[  154.098869][    T9] usb 5-1: SerialNumber: syz
[  154.106913][    T9] usb 5-1: config 0 descriptor??
[  154.114175][    T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  154.120252][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  154.124843][    T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  154.127784][    T9] usb 5-1: media controller created
[  154.137045][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  154.167287][    T9] DVB: Unable to find symbol tda10046_attach()
[  154.169418][    T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  154.172381][    T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  154.615518][ T5680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.817313][ T8595] loop1: detected capacity change from 0 to 64
[  154.860205][  T840] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  154.870616][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.957979][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.972061][    T9] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  154.983709][    T9] usb 5-1: USB disconnect, device number 15
[  155.055527][ T8603] netlink: 'syz.1.627': attribute type 1 has an invalid length.
[  155.114700][ T8596] loop2: detected capacity change from 0 to 32768
[  155.119104][ T8596] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.624 (8596)
[  155.129096][ T8596] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.135670][ T8596] BTRFS info (device loop2): using sha256 checksum algorithm
[  155.186049][ T8596] BTRFS info (device loop2): enabling ssd optimizations
[  155.192310][ T8596] BTRFS info (device loop2): turning on async discard
[  155.201671][ T8596] BTRFS info (device loop2): enabling free space tree
[  155.235955][   T34] audit: type=1800 audit(1778561718.176:629): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.624" name="file0" dev="loop2" ino=258 res=0 errno=0
[  155.258491][ T8623] 
[  155.259480][ T8623] ======================================================
[  155.262345][ T8623] WARNING: possible circular locking dependency detected
[  155.265150][ T8623] syzkaller #0 Not tainted
[  155.266958][ T8623] ------------------------------------------------------
[  155.269714][ T8623] syz.1.629/8623 is trying to acquire lock:
[  155.272082][ T8623] ffff88810a7b7ae8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x100/0xc50
[  155.276758][ T8623] 
[  155.276758][ T8623] but task is already holding lock:
[  155.279801][ T8623] ffff888110610260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560
[  155.283519][ T8623] 
[  155.283519][ T8623] which lock already depends on the new lock.
[  155.283519][ T8623] 
[  155.287802][ T8623] 
[  155.287802][ T8623] the existing dependency chain (in reverse order) is:
[  155.291434][ T8623] 
[  155.291434][ T8623] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}:
[  155.294616][ T8623]        lock_sock_nested+0x41/0x100
[  155.296810][ T8623]        smc_listen_out+0x109/0x3e0
[  155.298992][ T8623]        smc_listen_work+0x813/0x13f0
[  155.301253][ T8623]        process_scheduled_works+0xb5d/0x1860
[  155.303787][ T8623]        worker_thread+0xa53/0xfc0
[  155.305933][ T8623]        kthread+0x388/0x470
[  155.307856][ T8623]        ret_from_fork+0x514/0xb70
[  155.310090][ T8623]        ret_from_fork_asm+0x1a/0x30
[  155.312187][ T8623] 
[  155.312187][ T8623] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}:
[  155.316147][ T8623]        __lock_acquire+0x15a5/0x2cf0
[  155.318395][ T8623]        lock_acquire+0x106/0x350
[  155.320493][ T8623]        __flush_work+0x700/0xc50
[  155.322902][ T8623]        __cancel_work_sync+0xbe/0x110
[  155.325071][ T8623]        smc_clcsock_release+0x60/0xf0
[  155.327331][ T8623]        __smc_release+0x66b/0x7e0
[  155.329478][ T8623]        smc_close_non_accepted+0xd5/0x1f0
[  155.331919][ T8623]        smc_close_active+0xb67/0xf10
[  155.334144][ T8623]        __smc_release+0x8d/0x7e0
[  155.336211][ T8623]        smc_release+0x2ce/0x560
[  155.338267][ T8623]        sock_close+0xc3/0x240
[  155.340194][ T8623]        __fput+0x44f/0xa60
[  155.342480][ T8623]        task_work_run+0x1d9/0x270
[  155.344981][ T8623]        exit_to_user_mode_loop+0xf3/0x4d0
[  155.347292][ T8623]        do_syscall_64+0x33e/0xf80
[  155.349282][ T8623]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.351797][ T8623] 
[  155.351797][ T8623] other info that might help us debug this:
[  155.351797][ T8623] 
[  155.355906][ T8623]  Possible unsafe locking scenario:
[  155.355906][ T8623] 
[  155.358776][ T8623]        CPU0                    CPU1
[  155.361024][ T8623]        ----                    ----
[  155.363820][ T8623]   lock(sk_lock-AF_SMC/1);
[  155.366193][ T8623]                                lock((work_completion)(&new_smc->smc_listen_work));
[  155.370616][ T8623]                                lock(sk_lock-AF_SMC/1);
[  155.373293][ T8623]   lock((work_completion)(&new_smc->smc_listen_work));
[  155.376028][ T8623] 
[  155.376028][ T8623]  *** DEADLOCK ***
[  155.376028][ T8623] 
[  155.379191][ T8623] 3 locks held by syz.1.629/8623:
[  155.381105][ T8623]  #0: ffff88811515b240 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  155.385508][ T8623]  #1: ffff888110610260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560
[  155.389960][ T8623]  #2: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x100/0xc50
[  155.393607][ T8623] 
[  155.393607][ T8623] stack backtrace:
[  155.395924][ T8623] CPU: 0 UID: 0 PID: 8623 Comm: syz.1.629 Not tainted syzkaller #0 PREEMPT(full) 
[  155.395942][ T8623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  155.395950][ T8623] Call Trace:
[  155.395957][ T8623]  <TASK>
[  155.395964][ T8623]  dump_stack_lvl+0xe8/0x150
[  155.395982][ T8623]  print_circular_bug+0x2e1/0x300
[  155.396001][ T8623]  check_noncircular+0x12e/0x150
[  155.396019][ T8623]  __lock_acquire+0x15a5/0x2cf0
[  155.396034][ T8623]  ? do_raw_spin_lock+0x12b/0x2f0
[  155.396056][ T8623]  ? __flush_work+0x100/0xc50
[  155.396071][ T8623]  lock_acquire+0x106/0x350
[  155.396083][ T8623]  ? __flush_work+0x100/0xc50
[  155.396100][ T8623]  ? __flush_work+0x100/0xc50
[  155.396120][ T8623]  __flush_work+0x700/0xc50
[  155.396134][ T8623]  ? __flush_work+0x100/0xc50
[  155.396147][ T8623]  ? __flush_work+0x100/0xc50
[  155.396161][ T8623]  ? __pfx___flush_work+0x10/0x10
[  155.396175][ T8623]  ? __pfx_wq_barrier_func+0x10/0x10
[  155.396193][ T8623]  ? __cancel_work_sync+0x5c/0x110
[  155.396209][ T8623]  __cancel_work_sync+0xbe/0x110
[  155.396225][ T8623]  smc_clcsock_release+0x60/0xf0
[  155.396246][ T8623]  __smc_release+0x66b/0x7e0
[  155.396261][ T8623]  ? __local_bh_enable_ip+0xd0/0x130
[  155.396275][ T8623]  smc_close_non_accepted+0xd5/0x1f0
[  155.396291][ T8623]  smc_close_active+0xb67/0xf10
[  155.396309][ T8623]  ? __pfx_sock_def_readable+0x10/0x10
[  155.396324][ T8623]  __smc_release+0x8d/0x7e0
[  155.396337][ T8623]  ? __local_bh_enable_ip+0xd0/0x130
[  155.396350][ T8623]  smc_release+0x2ce/0x560
[  155.396363][ T8623]  sock_close+0xc3/0x240
[  155.396375][ T8623]  ? __pfx_sock_close+0x10/0x10
[  155.396386][ T8623]  __fput+0x44f/0xa60
[  155.396402][ T8623]  task_work_run+0x1d9/0x270
[  155.396420][ T8623]  ? __pfx_task_work_run+0x10/0x10
[  155.396438][ T8623]  exit_to_user_mode_loop+0xf3/0x4d0
[  155.396450][ T8623]  ? rcu_is_watching+0x15/0xb0
[  155.396465][ T8623]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.396478][ T8623]  do_syscall_64+0x33e/0xf80
[  155.396495][ T8623]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.396508][ T8623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.396521][ T8623] RIP: 0033:0x7f1c34d9cdd9
[  155.396632][ T8623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.396645][ T8623] RSP: 002b:00007f1c35b86028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  155.396660][ T8623] RAX: 0000000000000000 RBX: 00007f1c35015fa0 RCX: 00007f1c34d9cdd9
[  155.396669][ T8623] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[  155.396679][ T8623] RBP: 00007f1c34e32d69 R08: 0000000000000000 R09: 0000000000000000
[  155.396687][ T8623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.396695][ T8623] R13: 00007f1c35016038 R14: 00007f1c35015fa0 R15: 00007ffe7dd9c8c8
[  155.396709][ T8623]  </TASK>
[  155.679764][ T5612] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.981818][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.093144][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.204890][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.215630][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.315635][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.401932][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.084923][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  160.427158][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.539643][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.650762][  T840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.660518][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.761091][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.872731][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.884882][  T840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
