last executing test programs:

7m0.897159863s ago: executing program 2 (id=101):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d412000000000000002900000039000000", 0xfe60)

7m0.846379533s ago: executing program 2 (id=102):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000180)=[@acquire, @register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)

7m0.845993569s ago: executing program 2 (id=104):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2000812, &(0x7f0000000040)={[{@hide}, {@map_acorn}, {@unhide}, {@uid}, {@session={'session', 0x3d, 0x54}}, {@hide}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@unhide}, {}, {@hide}, {@showassoc}]}, 0x4, 0xa09, &(0x7f0000003280)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020)

7m0.79483009s ago: executing program 2 (id=106):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2008802, &(0x7f00000003c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000006605,errors=remount-ro,uid=', @ANYRESDEC=0x0, @ANYBLOB=',iocharset=cp936,namecase=1,keep_last_dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c646d61736b3d30303030303030303030303030303030303030303030312c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00ae5a637b4cdf7db6ca2f1ee004696a9f8eba64f9abbe6ed336b9977b9f7da99c5f427d615381f8cc01febda6eacc"], 0x2, 0x1530, &(0x7f00000014c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)

7m0.738701047s ago: executing program 2 (id=108):
syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xe0, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0)

7m0.347608018s ago: executing program 2 (id=110):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000380)=ANY=[@ANYBLOB='uni_xlate=0,uni_xlate=1,iocharset=cp869,shortname=win95,codepage=949,flush,allow_utime=00000000000000000177777,shortname=lower,utf8=1,umask=0000000000010,nonumtail=0,utf8=0,\x00'/184], 0xfe, 0x34c, &(0x7f0000001740)="$eJzs3T9oJGUUAPC3mU12EziTQji0Wu0EOS4RC21MOE44TKEni/8aFy7nn+wqZHEhFtlLo1gqNoJWdldoebVYiNhZ2HqCnIqN1x3c4cjuTHY3mcn9EbOn3u9XhJf3fW++byZDdhKSt6+uxua52Th/9eqVqNcrUV09tRrXKrEUM5FE5kIAAP8n19I0/kgzw8RTN5v90ULMZtHcVHYHAByF4ev/a8fGidrd3A0AMA2Fn//LPVuaffvItgUAHKHC6//D+4YP/Jq/OvqbAADgv+v5l15+Zm094myjUY/ovN9r9prx5Hh87Xy8Ee3YiJOxGDcisgeF7Glh8PHpM+unTzYGflmK5qCi14zo9HvN7ElhLRnW12I5FmMpr09H9cmgfnlY34iIC/3h+tGp9JqzsZCv/+NCbMRKLMb9hfqIM+unVxr5AZqdvfp+xG7U905isP8TsRjfzww/OReD2uxYg8zOcqNxKl3fV9+7WBvOAwAAAAAAAAAAAAAAAAAAAACAo3BiPvLuOY2lUf+btNPvvXc2n9Aojg/7+2TDeX+g3aw/UFrb687zQXKwP9D+/jy9ZjVm7uqZAwAAAAAAAAAAAAAAAAAAwL9Hd3suWu32xlZ3+93NcTDX7k9k3vr2i6/n4+CcN5NxJqrZ4fbNyXMxUZXEqDwdlafJvjl5kETkkyvRunhptOPJObXRWRTKB0GtMFTJ99Rqt4899POnZVV/jjNJjIbqpUtU8vUnhjr3Zamy/dw8qHS3V24x53KapoeV73xSrIp6RLXwhfsngm+uvP7AY93jj3cr1c3WV3nTh0ceXXzh8sef/7bZakd+adrtua3ujfRvr5VM3D+V/DpXSu6E8mB3nNnd6m63kh9+f/HBD787MDkpv3/Sycw7h6/15cHMXBYMtnk7ZzpbcvOXB69cH929d34xj3+22rq089OvexfzVlUT3yQ06gAAAAAAAAAAAAAAAAAAgKmY+F/xO/DEc0e3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYvvH7/08Eu4XM7QTX+1Ecqm1sdQ9dfH6qpwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD3srwAAAP//JT9zjQ==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)

7m0.315147098s ago: executing program 32 (id=110):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000380)=ANY=[@ANYBLOB='uni_xlate=0,uni_xlate=1,iocharset=cp869,shortname=win95,codepage=949,flush,allow_utime=00000000000000000177777,shortname=lower,utf8=1,umask=0000000000010,nonumtail=0,utf8=0,\x00'/184], 0xfe, 0x34c, &(0x7f0000001740)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)

5m48.96810344s ago: executing program 3 (id=832):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0})
ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0)

5m48.914011278s ago: executing program 3 (id=833):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x28, r2, 0x8c8d8c3c1556a4a5, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080d0}, 0x0)

5m48.913692223s ago: executing program 3 (id=834):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448e1, &(0x7f0000000000)={0x0, 0x0, "957008"})

5m47.998784853s ago: executing program 3 (id=840):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x10040, &(0x7f0000000140)={[{@utf8}, {@utf8no}, {@fat=@quiet}, {@fat=@sys_immutable}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@gid}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_lower}, {@fat=@check_normal}, {@uni_xlateno}, {@shortname_win95}, {@utf8no}, {@fat=@tz_utc}]}, 0x26, 0x347, &(0x7f00000006c0)="$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")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838)
preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b)

5m47.690645986s ago: executing program 3 (id=843):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x1, 0x231, &(0x7f0000000300)="$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")

5m47.360210431s ago: executing program 3 (id=848):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r1, 0x1, 0x27, 0x0, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5m47.278648669s ago: executing program 33 (id=848):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r1, 0x1, 0x27, 0x0, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5m17.931540222s ago: executing program 4 (id=1184):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xf000, 0x863, 0x2000000)

5m17.931463225s ago: executing program 4 (id=1185):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000002b40), 0x2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, 0x0)

5m17.931338565s ago: executing program 4 (id=1186):
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00')
lseek(r0, 0x1, 0x1)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
getdents64(r0, &(0x7f0000000000)=""/38, 0x26)

5m17.931184872s ago: executing program 4 (id=1187):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
chown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x10000, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0)
setsockopt(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)='\x00\x00', 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r2=>0x0})
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r2, 0x6}, 0x80, 0x0}, 0x40011)
r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r3, 0x0, 0x0, 0x1001f0)
copy_file_range(r3, 0x0, r3, 0x0, 0xc000, 0x0)

5m17.759505452s ago: executing program 4 (id=1191):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfee2, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10)

5m17.489939879s ago: executing program 4 (id=1192):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)}, {&(0x7f0000000480)}], 0x2}}], 0x1, 0x20000044)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc)

5m17.338063725s ago: executing program 34 (id=1192):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)}, {&(0x7f0000000480)}], 0x2}}], 0x1, 0x20000044)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc)

3m1.284122102s ago: executing program 0 (id=3046):
mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prlimit64(0x0, 0x0, 0x0, &(0x7f00000002c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x80, 0x9}]})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3d, 0x0, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x101141, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r4, 0x107, 0xc, 0x0, &(0x7f0000000340))
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

3m0.021165072s ago: executing program 0 (id=3058):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1c4e}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8084}, 0x40004)

3m0.020900605s ago: executing program 0 (id=3059):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000018006e80110001"], 0x40}}, 0x0)

2m59.987213174s ago: executing program 0 (id=3060):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@delalloc}, {@discard}, {@test_dummy_encryption}, {@nodiscard}, {@quota}, {@nodiscard}, {@abort}]}, 0x0, 0xbbe, &(0x7f0000000bc0)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)

2m59.853418051s ago: executing program 0 (id=3063):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)

2m59.522236856s ago: executing program 0 (id=3067):
r0 = userfaultfd(0x1)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})

2m59.489769582s ago: executing program 35 (id=3067):
r0 = userfaultfd(0x1)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})

2m38.093794829s ago: executing program 5 (id=3390):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}, 0x1, 0x2}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000000c0)='f', 0x1}, {&(0x7f00000005c0)="a41500", 0x3}], 0x2, 0x0, 0x0, 0x900}, 0x60)

2m38.032174872s ago: executing program 5 (id=3391):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0)

2m37.694320164s ago: executing program 1 (id=3398):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[], 0x0, 0x35}, 0x28)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
fanotify_mark(0xffffffffffffffff, 0x219, 0x183b, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a0"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)

2m37.57956381s ago: executing program 1 (id=3399):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c0, 0x1e8, 0x1e8, 0x1e8, 0x288, 0x138, 0x328, 0x328, 0x328, 0x328, 0x328, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xffffffff, 'bridge_slave_0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x32}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xf7, 0x4, @ipv4=@loopback, 0x4e23}}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'veth1_to_bond\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420)

2m36.885057751s ago: executing program 1 (id=3401):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
open(0x0, 0x1, 0x104)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000240)=@n={0x1, 0x8, @generic=0xa, 0x9})
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r1, r0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000009c0)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x1, 0x2000000, &(0x7f0000000900)="a4"})

2m36.684423647s ago: executing program 5 (id=3402):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

2m35.676181248s ago: executing program 6 (id=3412):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x3}}, 0x20)

2m35.650000131s ago: executing program 6 (id=3413):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = dup2(r0, r0)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0xf)

2m35.523828197s ago: executing program 6 (id=3414):
syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000000), &(0x7f0000000380), &(0x7f0000000000))

2m35.46137501s ago: executing program 6 (id=3415):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xe82)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000000c0)={0x1c})

2m35.405169111s ago: executing program 6 (id=3416):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3)
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/69, 0x45}], 0x1)

2m35.108140666s ago: executing program 5 (id=3417):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r2, {0xe, 0x1}}}, 0x24}}, 0x4)

2m34.28287649s ago: executing program 5 (id=3418):
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xe, 0x5, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000, 0x1, 0x8, 0x790}})
syz_usb_connect(0x2, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000be02e708cf100355678f0102030109022d00010806007c0904bc0003e404ac000905040310000607030905050308000e0e9a0905fdff"], 0x0)

2m33.578648779s ago: executing program 1 (id=3419):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @loopback={0xe0}, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1}, 0x4004000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x2a6})
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb}, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0xa5dfdbfd, 0x5}, 0xc)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
io_uring_enter(r1, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0)

2m33.34882477s ago: executing program 1 (id=3420):
prctl$PR_SET_PDEATHSIG(0x1, 0x41)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0xb4230610aeb3ae, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x1, 0x23a, &(0x7f0000000600)="$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")
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0x3c}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
r3 = open(0x0, 0x14927e, 0x20)
fallocate(r3, 0x0, 0x400000000, 0x1001f0)

2m33.130587363s ago: executing program 6 (id=3421):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x55b4})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r4, 0x8}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
socket$netlink(0x10, 0x3, 0x10)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
r8 = getpid()
sched_setattr(r8, 0x0, 0x0)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
unshare(0x22020400)
setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

2m28.531970202s ago: executing program 1 (id=3422):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @local})
memfd_create(&(0x7f00000005c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9L\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd87\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4\x00v&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x8a)\xfa\x93J\xb9\x8d\xf3\xa8\xbe\x83\x12\xb6b\xef^\x1a\x81\xe9\xfa\x11g\nZ \xb7u\xf2\xf2\x06\x04\xb0\xb0Z\xd8\xf5\x13\xb6I', 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xe8}}, 0x0)

2m15.697495828s ago: executing program 5 (id=3423):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x680, 0x0)
ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f00000000c0))

56.537937445s ago: executing program 36 (id=3421):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x55b4})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r4, 0x8}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
socket$netlink(0x10, 0x3, 0x10)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
r8 = getpid()
sched_setattr(r8, 0x0, 0x0)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
unshare(0x22020400)
setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

0s ago: executing program 37 (id=3422):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @local})
memfd_create(&(0x7f00000005c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9L\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd87\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4\x00v&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x8a)\xfa\x93J\xb9\x8d\xf3\xa8\xbe\x83\x12\xb6b\xef^\x1a\x81\xe9\xfa\x11g\nZ \xb7u\xf2\xf2\x06\x04\xb0\xb0Z\xd8\xf5\x13\xb6I', 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xe8}}, 0x0)

kernel console output (not intermixed with test programs):

10
[  235.014409][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[  235.014452][   T32]  ? rcu_is_watching+0x15/0xb0
[  235.014467][   T32]  wb_writeback+0x445/0xb00
[  235.014482][   T32]  ? queue_io+0x2b1/0x470
[  235.014500][   T32]  ? __pfx_wb_writeback+0x10/0x10
[  235.014511][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[  235.014544][   T32]  wb_workfn+0x3f8/0xf10
[  235.014555][   T32]  ? __lock_acquire+0x6b5/0x2cf0
[  235.014565][   T32]  ? look_up_lock_class+0x57/0x110
[  235.014593][   T32]  ? __pfx_wb_workfn+0x10/0x10
[  235.014612][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[  235.014625][   T32]  ? lock_acquire+0x106/0x350
[  235.014637][   T32]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  235.014651][   T32]  ? process_scheduled_works+0xa70/0x1860
[  235.014665][   T32]  ? process_scheduled_works+0xa70/0x1860
[  235.014682][   T32]  ? process_scheduled_works+0xa70/0x1860
[  235.014693][   T32]  ? process_scheduled_works+0xa70/0x1860
[  235.014705][   T32]  process_scheduled_works+0xb5d/0x1860
[  235.014731][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  235.014741][   T32]  ? assign_work+0x3d5/0x5e0
[  235.014751][   T32]  worker_thread+0xa53/0xfc0
[  235.014770][   T32]  kthread+0x388/0x470
[  235.014780][   T32]  ? __pfx_worker_thread+0x10/0x10
[  235.014787][   T32]  ? __pfx_kthread+0x10/0x10
[  235.014797][   T32]  ret_from_fork+0x514/0xb70
[  235.014806][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  235.014814][   T32]  ? __switch_to+0xc79/0x1410
[  235.014826][   T32]  ? __pfx_kthread+0x10/0x10
[  235.014836][   T32]  ret_from_fork_asm+0x1a/0x30
[  235.014851][   T32]  </TASK>
[  235.014855][   T32] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  235.384058][    T9] gspca_ov534_9: reg_w failed -71
[  235.700878][    T9] gspca_ov534_9: Unknown sensor 0000
[  235.700984][    T9] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  235.710570][    T9] usb 1-1: USB disconnect, device number 33
[  236.393443][T10921] : renamed from wg2 (while UP)
[  236.708811][   T33] audit: type=1326 audit(1778559548.569:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10940 comm="syz.1.1971" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  236.720040][   T33] audit: type=1326 audit(1778559548.569:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10940 comm="syz.1.1971" exe="/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  236.728165][   T33] audit: type=1326 audit(1778559548.579:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10940 comm="syz.1.1971" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  236.738758][   T33] audit: type=1326 audit(1778559548.579:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10940 comm="syz.1.1971" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  236.748105][   T33] audit: type=1326 audit(1778559548.579:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10940 comm="syz.1.1971" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  236.756908][   T33] audit: type=1326 audit(1778559548.579:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10940 comm="syz.1.1971" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  236.765863][   T33] audit: type=1326 audit(1778559548.579:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10940 comm="syz.1.1971" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  236.780702][   T33] audit: type=1326 audit(1778559548.579:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10940 comm="syz.1.1971" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  236.798821][   T33] audit: type=1326 audit(1778559548.579:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10940 comm="syz.1.1971" exe="/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  236.826522][   T33] audit: type=1326 audit(1778559548.579:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10940 comm="syz.1.1971" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  237.250105][T10965] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1983'.
[  237.268615][T10965] bond0: invalid ARP target 0.0.0.0 specified for addition
[  237.271569][T10965] bond0: option arp_ip_target: invalid value (0)
[  237.338630][T10970] loop5: detected capacity change from 0 to 64
[  237.365187][T10970] MINIX-fs: mounting file system with errors, running fsck is recommended
[  237.370822][ T5721] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  237.388642][T10970] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[  237.521095][ T5721] usb 1-1: Using ep0 maxpacket: 8
[  237.534450][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  237.543257][ T5721] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  237.548825][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.563481][ T5721] usb 1-1: config 0 descriptor??
[  237.729885][T10987] loop5: detected capacity change from 0 to 24
[  237.789302][ T5721] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  237.796182][T10988] overlayfs: failed to clone lowerpath
[  238.005612][ T5721] usb 1-1: USB disconnect, device number 34
[  238.005674][    C0] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  238.556301][ T5721] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  238.722608][ T5721] usb 6-1: Using ep0 maxpacket: 8
[  238.726784][ T5721] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  238.730291][ T5721] usb 6-1: config 179 has no interface number 0
[  238.733231][ T5721] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  238.737997][ T5721] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  238.742869][ T5721] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  238.747357][ T5721] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  238.753398][ T5721] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  238.758782][ T5721] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  238.762611][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.768853][T11019] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  238.850627][ T5669] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  239.000959][ T5669] usb 1-1: Using ep0 maxpacket: 8
[  239.006486][ T5669] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  239.009595][ T5669] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  239.013773][ T5669] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  239.018181][ T5669] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  239.022384][ T5669] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  239.029167][ T5669] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  239.033610][ T5669] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.034025][T11028] C: renamed from veth1_to_team (while UP)
[  239.045296][T11028] netlink: 'syz.1.2011': attribute type 3 has an invalid length.
[  239.053518][T11028] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2011'.
[  239.058816][T11028] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  239.246576][ T5669] usb 1-1: usb_control_msg returned -32
[  239.249042][ T5669] usbtmc 1-1:16.0: can't read capabilities
[  240.016208][T11057] usbtmc 1-1:16.0: usb_control_msg returned -32
[  240.219630][ T5720] usb 1-1: USB disconnect, device number 35
[  240.767538][T11081] loop0: detected capacity change from 0 to 164
[  240.781995][T11081] iso9660: Corrupted directory entry in block 2 of inode 1920
[  240.977142][T11094] o2cb: This node has not been configured.
[  240.981067][T11094] o2cb: Cluster check failed. Fix errors before retrying.
[  240.983812][T11094] (syz.0.2040,11094,1):user_dlm_register:674 ERROR: status = -22
[  240.986981][T11094] (syz.0.2040,11094,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1"
[  241.045057][ T5720] usb 6-1: USB disconnect, device number 11
[  241.045203][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  241.050201][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  241.678129][T11136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2058'.
[  241.780942][T11143] loop0: detected capacity change from 0 to 512
[  241.827730][T11143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.848279][T11143] ext4 filesystem being mounted at /578/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.944202][T11160] loop5: detected capacity change from 0 to 16
[  241.955536][T11160] erofs (device loop5): invalid ishare xattr prefix id 0
[  242.105456][T11160] input: syz1 as /devices/virtual/input/input23
[  242.279150][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.557479][T11177] loop0: detected capacity change from 0 to 512
[  242.586609][T11177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.591923][T11177] ext4 filesystem being mounted at /582/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.602206][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  242.602215][   T33] audit: type=1800 audit(1778559554.469:78): pid=11177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2075" name="file1" dev="loop0" ino=15 res=0 errno=0
[  242.635110][T11168] loop5: detected capacity change from 0 to 32768
[  242.664946][T11168] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  242.677902][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.860647][T11185] xt_hashlimit: size too large, truncated to 1048576
[  242.901837][ T8938] ocfs2: Unmounting device (7,5) on (node local)
[  244.019584][T11203] loop0: detected capacity change from 0 to 128
[  244.026498][T11203] FAT-fs (loop0): bogus number of reserved sectors
[  244.033904][T11203] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  244.041508][T11203] FAT-fs (loop0): Can't find a valid FAT filesystem
[  244.106844][T11207] loop0: detected capacity change from 0 to 128
[  244.123992][T11209] loop5: detected capacity change from 0 to 2048
[  244.125462][T11207] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  244.143723][T11207] ext4 filesystem being mounted at /587/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  244.154446][T11209] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.197701][ T5619] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  244.210954][ T8938] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.269664][T11217] loop0: detected capacity change from 0 to 736
[  244.909638][T11234] loop0: detected capacity change from 0 to 4096
[  244.966973][ T5669] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  244.975953][T11239] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  245.048158][T11234] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean
[  245.690778][ T5720] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[  245.774378][ T5669] usb 6-1: unable to read config index 0 descriptor/start: -71
[  245.778559][ T5669] usb 6-1: can't read configurations, error -71
[  245.862031][ T5720] usb 1-1: not running at top speed; connect to a high speed hub
[  245.866485][ T5720] usb 1-1: config 65 has an invalid descriptor of length 0, skipping remainder of the config
[  245.871822][ T5720] usb 1-1: config 65 has 2 interfaces, different from the descriptor's value: 3
[  245.877952][ T5720] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[  245.882107][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.885552][ T5720] usb 1-1: Product: syz
[  245.887559][ T5720] usb 1-1: Manufacturer: syz
[  245.889547][ T5720] usb 1-1: SerialNumber: syz
[  245.901091][ T5720] usb 1-1: 0:2 : does not exist
[  245.903273][ T5720] usb 1-1: unit 130 not found!
[  246.145197][ T5720] usb 1-1: USB disconnect, device number 36
[  246.184284][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:65.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  246.354472][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2114'.
[  246.469559][T11284] fuse: fd is not a fuse device
[  247.465700][T11314] program syz.0.2130 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  247.466487][T11313] loop5: detected capacity change from 0 to 512
[  247.489838][T11313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  247.559736][ T8938] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.666678][T11319] tipc: Started in network mode
[  247.668538][T11319] tipc: Node identity 4, cluster identity 4711
[  247.671692][T11319] tipc: Node number set to 4
[  248.066125][T11317] loop0: detected capacity change from 0 to 131072
[  248.077129][T11317] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  248.079765][T11317] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  248.084439][T11317] F2FS-fs (loop0): invalid crc value
[  248.133136][T11317] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  248.140733][T11317] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  248.143640][T11317] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  248.181220][T11329] binder: 11327:11329 unknown command 0
[  248.183829][T11329] binder: 11327:11329 ioctl c0306201 2000000001c0 returned -22
[  248.610139][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2136'.
[  248.614308][T11334] netlink: 'syz.1.2137': attribute type 2 has an invalid length.
[  248.676716][T11338] loop0: detected capacity change from 0 to 1024
[  248.701626][T11338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  248.706577][T11338] ext4 filesystem being mounted at /604/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.749261][ T7906] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm kworker/u10:14: lblock 0 mapped to illegal pblock 0 (length 1)
[  248.768211][ T7906] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  248.773018][ T7906] EXT4-fs (loop0): This should not happen!! Data will be lost
[  248.773018][ T7906] 
[  248.779498][ T5619] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  248.785223][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  248.815305][   T26] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting
[  248.836389][   T26] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  249.155430][T11370] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.161346][T11366] bond1: entered promiscuous mode
[  249.164033][T11366] 8021q: adding VLAN 0 to HW filter on device bond1
[  249.255901][   T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  249.262209][   T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  249.268003][   T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  249.271798][   T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  249.812274][T11403] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82
[  250.448429][T11426] loop0: detected capacity change from 0 to 32768
[  250.476719][T11426] ERROR: (device loop0): diWrite: ixpxd invalid
[  250.476719][T11426] 
[  250.513278][T11426] ERROR: (device loop0): remounting filesystem as read-only
[  250.517260][T11426] ERROR: (device loop0): txCommit: 
[  250.517260][T11426] 
[  250.767949][T11446] overlayfs: failed to clone upperpath
[  250.910253][   T31] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  250.996255][T11450] xt_hashlimit: size too large, truncated to 1048576
[  251.064565][   T31] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  251.071065][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.074169][   T31] usb 1-1: Product: syz
[  251.075998][   T31] usb 1-1: Manufacturer: syz
[  251.077968][   T31] usb 1-1: SerialNumber: syz
[  251.089152][   T31] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  251.111747][ T5676] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  251.529118][ T5720] usb 1-1: USB disconnect, device number 37
[  252.068512][T11472] loop0: detected capacity change from 0 to 64
[  252.267271][ T5676] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  252.270788][ T5676] ath9k_htc: Failed to initialize the device
[  252.275246][ T5720] usb 1-1: ath9k_htc: USB layer deinitialized
[  252.357601][T11481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2199'.
[  252.794662][T11487] loop0: detected capacity change from 0 to 40427
[  252.800021][T11487] F2FS-fs (loop0): build fault injection rate: 14
[  252.805378][T11487] F2FS-fs (loop0): build fault injection type: 0xe4
[  252.811181][T11487] F2FS-fs (loop0): invalid crc value
[  252.829201][T11487] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810
[  252.858589][T11487] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  252.866789][T11487] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  254.087665][T11524] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2218'.
[  254.482953][T11553] fuse: fd is not a fuse device
[  254.551354][    T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  254.628023][T11567] loop5: detected capacity change from 0 to 164
[  254.703119][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  254.716407][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  254.720950][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  254.728069][    T9] usb 1-1: string descriptor 0 read error: -22
[  254.732839][    T9] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  254.736659][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.755253][    T9] usb 1-1: selecting invalid altsetting 1
[  254.757428][    T9] usb 1-1: unit 3 not found!
[  254.962846][    T9] usb 1-1: unit 0 not found!
[  255.320315][ T5669] usb 1-1: USB disconnect, device number 38
[  255.983041][T11597] loop0: detected capacity change from 0 to 8192
[  255.998757][T11597] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  256.301620][T11607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2258'.
[  256.309552][T11607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2258'.
[  256.647751][ T5357] veth0_macvtap: left promiscuous mode
[  256.810742][T11605] loop5: detected capacity change from 0 to 32768
[  256.934967][T11605] (syz.5.2257,11605,1):ocfs2_slot_map_physical_size:227 ERROR: Slot map file is too small!  (size 2, needed 8)
[  257.302939][T11639] binder: 11636:11639 ioctl c0306201 200000000080 returned -14
[  257.324015][T11639] binder: 11636:11639 ioctl c0306201 2000000003c0 returned -14
[  258.314749][T11674] loop0: detected capacity change from 0 to 4096
[  258.319746][T11674] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  258.403069][T11674] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  258.407840][T11674] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  258.428384][   T32] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  258.439302][ T5619] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  258.442618][ T5619] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  258.445271][ T5619] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  258.452541][   T32] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  258.818228][T11710] overlay: filesystem on ./file1 not supported
[  259.054122][T11724] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.2307'.
[  259.564187][T11756] loop0: detected capacity change from 0 to 256
[  259.572294][T11756] exfat: Deprecated parameter 'utf8'
[  259.586194][T11756] exfat: Deprecated parameter 'utf8'
[  259.596211][T11756] exfat: Deprecated parameter 'utf8'
[  259.602892][T11756] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x0afbdf60, utbl_chksum : 0xe619d30d)
[  259.664659][T11758] block device autoloading is deprecated and will be removed.
[  259.738808][T11764] loop5: detected capacity change from 0 to 1024
[  260.875796][T11786] loop5: detected capacity change from 0 to 40427
[  260.945360][T11786] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  260.956130][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  260.960176][T11786] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  260.977862][T11786] F2FS-fs (loop5): Inconsistent error blkaddr:5633, sit bitmap:0
[  260.985733][T11786] CPU: 0 UID: 0 PID: 11786 Comm: syz.5.2335 Not tainted syzkaller #0 PREEMPT(full) 
[  260.985769][T11786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  260.985774][T11786] Call Trace:
[  260.985778][T11786]  <TASK>
[  260.985782][T11786]  dump_stack_lvl+0xe8/0x150
[  260.985795][T11786]  __f2fs_is_valid_blkaddr+0xd84/0x14f0
[  260.985809][T11786]  f2fs_get_read_data_folio+0x699/0xb70
[  260.985822][T11786]  ? __pfx_f2fs_get_read_data_folio+0x10/0x10
[  260.985832][T11786]  ? __filemap_get_folio_mpol+0x9b0/0xb00
[  260.985845][T11786]  ? f2fs_readdir+0x4ec/0xac0
[  260.985854][T11786]  f2fs_find_data_folio+0x3a6/0x6a0
[  260.985866][T11786]  f2fs_readdir+0x4ec/0xac0
[  260.985882][T11786]  ? __pfx_f2fs_readdir+0x10/0x10
[  260.985890][T11786]  ? iterate_dir+0x292/0x570
[  260.985905][T11786]  ? iterate_dir+0x292/0x570
[  260.985914][T11786]  ? down_read_killable+0x1bb/0x340
[  260.985924][T11786]  iterate_dir+0x399/0x570
[  260.985937][T11786]  __se_sys_getdents64+0xf1/0x280
[  260.985945][T11786]  ? __pfx___se_sys_getdents64+0x10/0x10
[  260.985951][T11786]  ? __pfx_filldir64+0x10/0x10
[  260.985958][T11786]  ? rcu_is_watching+0x15/0xb0
[  260.985990][T11786]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.985999][T11786]  do_syscall_64+0x15f/0xf80
[  260.986009][T11786]  ? trace_irq_disable+0x3b/0x140
[  260.986022][T11786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.986029][T11786] RIP: 0033:0x7ff90299cdd9
[  260.986037][T11786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  260.986044][T11786] RSP: 002b:00007ff903791028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  260.986053][T11786] RAX: ffffffffffffffda RBX: 00007ff902c15fa0 RCX: 00007ff90299cdd9
[  260.986058][T11786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  260.986063][T11786] RBP: 00007ff902a32d69 R08: 0000000000000000 R09: 0000000000000000
[  260.986067][T11786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  260.986071][T11786] R13: 00007ff902c16038 R14: 00007ff902c15fa0 R15: 00007fff0845a878
[  260.986083][T11786]  </TASK>
[  261.061233][    T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  261.210118][    T9] usb 1-1: Using ep0 maxpacket: 32
[  261.215121][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  261.218509][    T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 47, changing to 7
[  261.225119][    T9] usb 1-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40
[  261.227922][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.230695][    T9] usb 1-1: Product: syz
[  261.232078][    T9] usb 1-1: Manufacturer: syz
[  261.233665][    T9] usb 1-1: SerialNumber: syz
[  261.242848][T11816] fuse: fd is not a fuse device
[  261.344278][T11827] loop5: detected capacity change from 0 to 24
[  261.396956][T11832] netlink: 'syz.1.2356': attribute type 10 has an invalid length.
[  261.421273][T11832] team0: Device veth0_macvtap failed to register rx_handler
[  261.464502][    T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  261.475643][    T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  261.521785][    T9] usb 1-1: USB disconnect, device number 39
[  261.583393][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  261.780018][ T5721] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  261.850947][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2365'.
[  261.930036][ T5721] usb 6-1: Using ep0 maxpacket: 32
[  261.934042][ T5721] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  261.937418][ T5721] usb 6-1: config 0 has no interface number 0
[  261.940483][ T5721] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  261.943979][ T5721] usb 6-1: config 0 interface 1 has no altsetting 0
[  261.948453][ T5721] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  261.951862][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.954903][ T5721] usb 6-1: Product: syz
[  261.956434][ T5721] usb 6-1: Manufacturer: syz
[  261.958248][ T5721] usb 6-1: SerialNumber: syz
[  261.964977][ T5721] usb 6-1: config 0 descriptor??
[  262.178173][ T5721] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  262.188930][ T5721] cx231xx 6-1:0.1: Not found matching IAD interface
[  262.198568][ T5721] usb 6-1: USB disconnect, device number 14
[  262.283206][T11872] loop0: detected capacity change from 0 to 32768
[  262.366683][T11882] sock: sock_set_timeout: `syz.1.2380' (pid 11882) tries to set negative timeout
[  262.982164][T11891] loop5: detected capacity change from 0 to 32768
[  262.996230][T11891] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  263.068387][T11891] XFS (loop5): Ending clean mount
[  263.096992][T11891] XFS (loop5): User initiated shutdown received.
[  263.105484][T11891] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:462).  Shutting down filesystem.
[  263.110254][T11891] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  263.188017][ T8938] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  263.198006][T11913] loop0: detected capacity change from 0 to 1024
[  263.243742][T11913] EXT4-fs: Ignoring removed mblk_io_submit option
[  263.326376][T11913] EXT4-fs: Mount option(s) incompatible with ext3
[  264.001020][   T33] audit: type=1326 audit(1778559575.859:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.5.2389" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  264.020564][   T33] audit: type=1326 audit(1778559575.859:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.5.2389" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  264.035078][   T33] audit: type=1326 audit(1778559575.859:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.5.2389" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  264.048764][   T33] audit: type=1326 audit(1778559575.859:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.5.2389" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  264.066546][   T33] audit: type=1326 audit(1778559575.859:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.5.2389" exe="/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  264.107119][   T33] audit: type=1326 audit(1778559575.859:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.5.2389" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  264.128470][   T33] audit: type=1326 audit(1778559575.859:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.5.2389" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  264.145887][   T33] audit: type=1326 audit(1778559575.859:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.5.2389" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  264.166316][   T33] audit: type=1326 audit(1778559575.859:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.5.2389" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  264.183687][   T33] audit: type=1326 audit(1778559575.859:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.5.2389" exe="/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  265.059440][T11942] netlink: 'syz.5.2399': attribute type 1 has an invalid length.
[  265.062541][T11942] netlink: 'syz.5.2399': attribute type 4 has an invalid length.
[  265.066884][T11942] netlink: 15334 bytes leftover after parsing attributes in process `syz.5.2399'.
[  265.095833][T11937] loop0: detected capacity change from 0 to 32768
[  265.108577][T11937] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  265.122866][T11937] XFS (loop0): Ending clean mount
[  265.151216][ T5619] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  265.965605][T11962] binder: 11961:11962 unknown command 3
[  265.967773][T11962] binder: 11961:11962 ioctl c0306201 200000000180 returned -22
[  266.752779][T11974] xt_HMARK: spi-set and port-set can't be combined
[  266.986260][T11986] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2416'.
[  267.010979][T11988] loop0: detected capacity change from 0 to 256
[  267.196750][T12004] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2418'.
[  267.275918][T12011] loop5: detected capacity change from 0 to 512
[  267.306351][T12011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.313080][T12011] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  267.386960][T12011] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  267.411266][ T8938] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.487448][T12030] loop5: detected capacity change from 0 to 1024
[  267.541273][T12037] macvlan2: entered allmulticast mode
[  267.543056][T12037] batadv0: entered allmulticast mode
[  267.554292][T12037] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  267.557744][T12037] batadv0: left allmulticast mode
[  267.656846][T12045] input: syz0 as /devices/virtual/input/input25
[  268.007469][T12066] loop5: detected capacity change from 0 to 512
[  268.022176][T12066] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  268.025061][T12066] EXT4-fs (loop5): orphan cleanup on readonly fs
[  268.028443][T12066] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  268.035987][T12066] EXT4-fs (loop5): Cannot turn on quotas: error -5
[  268.043201][T12066] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2442: bg 0: block 64: padding at end of block bitmap is not set
[  268.047885][T12066] loop5: lost filesystem error report for type 5 error -117
[  268.048091][T12066] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  268.050519][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  268.050530][    C0] EXT4-fs (loop5): initial error at time 1778559579: ext4_validate_block_bitmap:441
[  268.050544][    C0] EXT4-fs (loop5): last error at time 1778559579: ext4_validate_block_bitmap:441
[  268.062017][T12066] loop5: lost filesystem error report for type 5 error -117
[  268.062785][T12066] EXT4-fs (loop5): 1 truncate cleaned up
[  268.067863][T12066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  268.085284][ T8938] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.347664][T12083] netlink: 'syz.5.2449': attribute type 1 has an invalid length.
[  268.402479][T12089] loop5: detected capacity change from 0 to 128
[  268.421141][T12087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2451'.
[  268.668724][T12092] loop5: detected capacity change from 0 to 32768
[  268.685008][T12092] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  268.701825][T12092] XFS (loop5): Ending clean mount
[  268.726744][ T8938] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  268.893139][T12122] loop5: detected capacity change from 0 to 64
[  269.013361][T12124] loop5: detected capacity change from 0 to 64
[  269.115339][   T33] kauditd_printk_skb: 153 callbacks suppressed
[  269.115349][   T33] audit: type=1326 audit(1778559580.980:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.0.2469" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5559cdd9 code=0x7ffc0000
[  269.144723][   T33] audit: type=1326 audit(1778559580.980:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.0.2469" exe="/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7efc5559cdd9 code=0x7ffc0000
[  269.154254][   T33] audit: type=1326 audit(1778559580.990:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.0.2469" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5559cdd9 code=0x7ffc0000
[  269.162670][   T33] audit: type=1326 audit(1778559580.990:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.0.2469" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5559cdd9 code=0x7ffc0000
[  269.170084][   T33] audit: type=1326 audit(1778559580.990:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12133 comm="syz.0.2469" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5555d60e code=0x7ffc0000
[  269.276468][   T33] audit: type=1326 audit(1778559581.140:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12133 comm="syz.0.2469" exe="/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7efc5559cdd9 code=0x7ffc0000
[  269.291987][ T5720] usb 6-1: new low-speed USB device number 15 using dummy_hcd
[  270.080108][T12162] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT'
[  270.398834][ T5720] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[  270.402623][ T5720] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  270.405967][ T5720] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  270.409620][ T5720] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  270.413915][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  270.417780][ T5720] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  270.427297][ T5720] usb 6-1: string descriptor 0 read error: -22
[  270.430202][ T5720] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  270.433987][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.486102][ T5720] usb 6-1: config 0 descriptor??
[  270.492201][ T5720] hub 6-1:0.0: bad descriptor, ignoring hub
[  270.986019][ T5720] hub 6-1:0.0: probe with driver hub failed with error -5
[  271.116055][ T5720] usb 6-1: USB disconnect, device number 15
[  271.990368][T12200] loop0: detected capacity change from 0 to 1024
[  272.061696][   T33] audit: type=1800 audit(1778559583.930:247): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2495" name="file1" dev="loop0" ino=20 res=0 errno=0
[  272.186864][T12210] loop0: detected capacity change from 0 to 256
[  272.292377][T12214] xt_hashlimit: size too large, truncated to 1048576
[  273.236374][T12245] loop5: detected capacity change from 0 to 16
[  273.249663][T12245] erofs (device loop5): mounted with root inode @ nid 36.
[  273.258776][T12245] erofs (device loop5): invalid de[0].nameoff 14 @ nid 36
[  273.474558][T12260] loop0: detected capacity change from 0 to 4096
[  273.510789][T12263] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  273.518225][T12260] NILFS (loop0): corrupt root inode
[  273.592620][T12265] ieee802154 phy0 wpan0: encryption failed: -22
[  273.745594][T12275] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2528'.
[  273.809262][T12258] loop5: detected capacity change from 0 to 32768
[  273.817370][T12258] xfs: Deprecated parameter 'ikeep'
[  273.819781][T12258] XFS: ikeep mount option is deprecated.
[  273.822223][T12258] xfs: Deprecated parameter 'noattr2'
[  273.824564][T12258] XFS: noattr2 mount option is deprecated.
[  273.864059][T12258] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  273.927177][T12258] XFS (loop5): Ending clean mount
[  273.952738][T12258] XFS (loop5): Quotacheck needed: Please wait.
[  274.027618][T12258] XFS (loop5): Quotacheck: Done.
[  274.080406][ T8938] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  274.103221][T12295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2534'.
[  274.445577][T12310] loop5: detected capacity change from 0 to 16
[  274.453793][T12310] erofs (device loop5): mounted with root inode @ nid 36.
[  275.595890][    T9] kernel write not supported for file /uinput (pid: 9 comm: kworker/0:0)
[  275.712314][T12341] tmpfs: Too small a size for current use
[  275.773738][T12347] syz_tun: entered allmulticast mode
[  275.996897][T12369] overlayfs: failed to resolve './file0': -2
[  276.149584][ T5078] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  276.174817][    T9] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[  276.277967][T12373] trusted_key: syz.1.2568 sent an empty control message without MSG_MORE.
[  276.301213][ T5078] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  276.304170][ T5078] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  276.307589][ T5078] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  276.311861][ T5078] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  276.316433][ T5078] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  276.323113][ T5078] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  276.330682][    T9] usb 6-1: not running at top speed; connect to a high speed hub
[  276.331250][ T5078] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  276.334714][    T9] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 27721, setting to 64
[  276.337076][ T5078] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  276.341371][    T9] usb 6-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  276.348733][    T9] usb 6-1: config 1 interface 0 has no altsetting 0
[  276.348782][ T5078] usb 1-1: Product: syz
[  276.353304][ T5078] usb 1-1: Manufacturer: syz
[  276.354274][    T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40
[  276.358398][ T5078] cdc_wdm 1-1:1.0: skipping garbage
[  276.360292][ T5078] cdc_wdm 1-1:1.0: skipping garbage
[  276.361154][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.362803][ T5078] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  276.367074][    T9] usb 6-1: Product: syz
[  276.367684][ T5078] cdc_wdm 1-1:1.0: Unknown control protocol
[  276.369247][    T9] usb 6-1: Manufacturer: syz
[  276.369259][    T9] usb 6-1: SerialNumber: syz
[  276.380283][T12355] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  276.562467][T12359] cdc_wdm 1-1:1.0: Error submitting int urb - -90
[  276.567310][ T5078] usb 1-1: USB disconnect, device number 40
[  276.598929][    T9] usbhid 6-1:1.0: can't add hid device: -71
[  276.601245][    T9] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  276.607646][    T9] usb 6-1: USB disconnect, device number 16
[  277.117045][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2573'.
[  277.183928][T12393] loop0: detected capacity change from 0 to 128
[  277.216970][T12393] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  277.220922][T12395] ip6gre1: entered promiscuous mode
[  277.223915][T12393] hpfs: filesystem error: improperly stopped
[  277.223948][T12393] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  277.223960][T12393] hpfs: You really don't want any checks? You are crazy...
[  277.224273][T12393] hpfs: hpfs_map_sector(): read error
[  277.233328][T12395] ip6gre1: entered allmulticast mode
[  277.235210][T12393] hpfs: code page support is disabled
[  277.239767][T12393] hpfs: hpfs_map_4sectors(): unaligned read
[  277.243317][T12393] hpfs: hpfs_map_4sectors(): unaligned read
[  277.245809][T12393] hpfs: filesystem error: unable to find root dir
[  277.265399][T12393] hpfs: hpfs_map_4sectors(): unaligned read
[  277.286351][T12393] hpfs: hpfs_map_sector(): read error
[  277.561967][T12417] Cannot find set identified by id 0 to match
[  277.593484][T12419] netlink: 'syz.1.2588': attribute type 10 has an invalid length.
[  277.606053][T12419] team0: Device vxcan1 is of different type
[  277.628697][T12409] loop0: detected capacity change from 0 to 32768
[  277.651648][T12409] 
[  277.651648][T12409]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  277.651648][T12409] 
[  277.685313][ T5619] 
[  277.685313][ T5619]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  277.685313][ T5619] 
[  277.712303][T12431] loop5: detected capacity change from 0 to 128
[  277.713045][ T5619] 
[  277.713045][ T5619]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  277.713045][ T5619] 
[  277.781127][T12431] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  277.785268][T12431] hpfs: filesystem error: improperly stopped
[  277.787443][T12431] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  277.791759][T12431] hpfs: You really don't want any checks? You are crazy...
[  277.794533][T12431] hpfs: Code page index out of array
[  277.796892][T12431] hpfs: code page support is disabled
[  277.800050][T12431] hpfs: hpfs_map_4sectors(): unaligned read
[  277.808270][T12431] hpfs: hpfs_map_4sectors(): unaligned read
[  277.818448][T12431] hpfs: filesystem error: unable to find root dir
[  277.882847][T12442] loop5: detected capacity change from 0 to 256
[  277.887838][T12442] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00010001)
[  277.891428][T12442] exFAT-fs (loop5): failed to count the number of clusters in root
[  277.894022][T12442] exFAT-fs (loop5): failed to recognize exfat type
[  278.010707][T12450] loop5: detected capacity change from 0 to 512
[  278.016314][T12450] EXT4-fs: inline encryption not supported
[  278.023698][T12450] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2602: bad orphan inode 15
[  278.027819][T12450] loop5: lost filesystem error report for type 5 error -117
[  278.028140][T12450] ext4_test_bit(bit=14, block=5) = 0
[  278.031134][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  278.031149][    C1] EXT4-fs (loop5): initial error at time 1778559589: ext4_orphan_get:1423
[  278.031164][    C1] EXT4-fs (loop5): last error at time 1778559589: ext4_orphan_get:1423
[  278.046421][T12450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.090892][T12450] EXT4-fs: Ignoring removed nobh option
[  278.099963][T12450] EXT4-fs: Cannot specify journal on remount
[  278.155492][T12456] loop0: detected capacity change from 0 to 4096
[  278.158139][ T8938] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.163635][T12456] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  278.284065][T12463] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2607'.
[  278.365422][T12470] loop5: detected capacity change from 0 to 512
[  278.371846][T12470] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.2611: corrupted in-inode xattr: invalid ea_ino
[  278.376039][T12470] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  278.376274][T12470] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2611: couldn't read orphan inode 15 (err -117)
[  278.379541][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  278.379556][    C1] EXT4-fs (loop5): initial error at time 1778559590: ext4_iget_extra_inode:5128: inode 15
[  278.379576][    C1] EXT4-fs (loop5): last error at time 1778559590: ext4_iget_extra_inode:5128: inode 15
[  278.393164][T12470] loop5: lost filesystem error report for type 5 error -117
[  278.394135][T12470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.469747][T12464] loop0: detected capacity change from 0 to 32768
[  278.747748][T12493] comedi comedi1: 8255: I/O base address not correctly aligned
[  279.228593][ T8938] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.311147][T12508] 9p: Bad value for 'rfdno'
[  279.316201][T12508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  279.321755][T12508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  279.809334][    T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  279.892172][T12524] vlan2: entered promiscuous mode
[  279.893923][T12524] bond0: entered promiscuous mode
[  279.895638][T12524] bond_slave_0: entered promiscuous mode
[  279.897823][T12524] bond_slave_1: entered promiscuous mode
[  279.975797][T12528] batadv1: entered promiscuous mode
[  279.979440][T12528] 8021q: adding VLAN 0 to HW filter on device batadv1
[  279.989906][    T9] usb 6-1: Using ep0 maxpacket: 8
[  280.001678][    T9] usb 6-1: config index 0 descriptor too short (expected 13875, got 18)
[  280.011036][    T9] usb 6-1: config 32 has too many interfaces: 41, using maximum allowed: 32
[  280.015622][    T9] usb 6-1: config 32 has an invalid descriptor of length 119, skipping remainder of the config
[  280.026293][    T9] usb 6-1: config 32 has 0 interfaces, different from the descriptor's value: 41
[  280.036835][    T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  280.041918][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.046269][    T9] usb 6-1: Product: syz
[  280.048537][    T9] usb 6-1: Manufacturer: syz
[  280.050880][    T9] usb 6-1: SerialNumber: syz
[  280.155720][T12535] loop0: detected capacity change from 0 to 512
[  280.191199][T12535] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  280.234078][T12535] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  280.238262][T12535] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.2641: bad orphan inode 4
[  280.246083][T12535] loop0: lost filesystem error report for type 5 error -117
[  280.246443][T12535] EXT4-fs (loop0): 1 orphan inode deleted
[  280.251400][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  280.251411][    C0] EXT4-fs (loop0): initial error at time 1778559592: ext4_orphan_get:1423
[  280.251421][    C0] EXT4-fs (loop0): last error at time 1778559592: ext4_orphan_get:1423
[  280.292356][    T9] usb 6-1: USB disconnect, device number 17
[  280.295394][T12535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.327661][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.609292][ T5078] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  280.762783][ T5078] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  280.766029][ T5078] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  280.772281][ T5078] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  280.776155][ T5078] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  280.780235][ T5078] usb 1-1: Manufacturer: syz
[  280.786024][ T5078] usb 1-1: config 0 descriptor??
[  280.791370][ T5078] igorplugusb 1-1:0.0: endpoint incorrect
[  280.837358][T12550] loop5: detected capacity change from 0 to 4096
[  281.001178][ T5669] usb 1-1: USB disconnect, device number 41
[  281.094746][T12560] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2653'.
[  281.098721][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2653'.
[  281.103820][T12560] tc_dump_action: action bad kind
[  281.430340][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  281.489291][ T5720] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  281.582241][T12577] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  281.645759][ T5720] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  281.665327][ T5720] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  281.674124][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.679923][ T5720] usb 6-1: Product: syz
[  281.681299][ T5720] usb 6-1: Manufacturer: syz
[  281.682879][ T5720] usb 6-1: SerialNumber: syz
[  282.057705][ T5720] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing
[  282.060302][ T5720] cdc_ncm 6-1:1.0: bind() failure
[  282.066682][ T5720] usb 6-1: USB disconnect, device number 18
[  282.189217][  T796] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  282.349274][  T796] usb 1-1: Using ep0 maxpacket: 16
[  282.352590][  T796] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  282.357698][  T796] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00
[  282.360938][  T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.363593][  T796] usb 1-1: Product: syz
[  282.364983][  T796] usb 1-1: Manufacturer: syz
[  282.366476][  T796] usb 1-1: SerialNumber: syz
[  282.369542][  T796] usb 1-1: config 0 descriptor??
[  282.372647][  T796] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  282.375878][  T796] usb 1-1: Detected FT232B
[  282.533424][T12598] set_capacity_and_notify: 2 callbacks suppressed
[  282.533438][T12598] loop5: detected capacity change from 0 to 128
[  282.542163][T12598] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  282.610552][  T796] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  282.615400][  T796] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  282.627670][T12600] 9p: Bad value for 'wfdno'
[  282.638383][  T796] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  282.646160][  T796] usb 1-1: USB disconnect, device number 42
[  282.668748][  T796] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  282.676813][  T796] ftdi_sio 1-1:0.0: device disconnected
[  282.718467][T12608] loop5: detected capacity change from 0 to 1024
[  282.721050][T12608] EXT4-fs: Ignoring removed i_version option
[  282.723644][T12608] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  282.727009][T12608] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)!
[  282.731635][T12608] EXT4-fs (loop5): group descriptors corrupted!
[  283.145902][T12617] netlink: 'syz.5.2678': attribute type 4 has an invalid length.
[  283.356966][T12623] loop0: detected capacity change from 0 to 512
[  283.362146][T12623] EXT4-fs: Ignoring removed i_version option
[  283.367184][T12623] EXT4-fs: Ignoring removed bh option
[  283.387474][T12623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.392856][T12623] ext4 filesystem being mounted at /760/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.401034][T12623] EXT4-fs (loop0): shut down requested (1)
[  283.433455][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.485421][T12630] loop0: detected capacity change from 0 to 128
[  283.819265][    T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  283.922147][T12653] loop5: detected capacity change from 0 to 4096
[  283.927799][T12653] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  283.970050][    T9] usb 1-1: Using ep0 maxpacket: 8
[  283.976897][    T9] usb 1-1: config 2 has an invalid interface number: 72 but max is 0
[  283.985936][    T9] usb 1-1: config 2 has no interface number 0
[  283.989260][    T9] usb 1-1: config 2 interface 72 altsetting 255 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  283.996862][    T9] usb 1-1: config 2 interface 72 has no altsetting 0
[  284.005981][    T9] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f
[  284.010238][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.015765][    T9] usb 1-1: Product: syz
[  284.017632][    T9] usb 1-1: Manufacturer: syz
[  284.019182][    T9] usb 1-1: SerialNumber: syz
[  284.230693][    T9] lg-vl600 1-1:2.72: invalid descriptor buffer length
[  284.234217][    T9] usb 1-1: No union descriptors
[  284.240169][    T9] usb 1-1: USB disconnect, device number 43
[  284.259219][   T31] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  284.419282][   T31] usb 6-1: Using ep0 maxpacket: 32
[  284.426733][   T31] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92
[  284.438797][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.458939][   T31] gspca_main: nw80x-2.14.0 probing 055f:d001
[  284.823227][T12695] fuse: fd is not a fuse device
[  284.826353][T12695] fuse: fd is not a fuse device
[  285.131819][T12697] overlayfs: failed to resolve './file0': -2
[  285.136715][   T31] usb 6-1: USB disconnect, device number 19
[  285.239185][T12693] loop0: detected capacity change from 0 to 131072
[  285.242441][T12693] F2FS-fs (loop0): Test dummy encryption mode enabled
[  285.245256][T12693] F2FS-fs (loop0): invalid crc value
[  285.273165][T12693] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  285.279274][T12693] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  285.778985][T12713] loop5: detected capacity change from 0 to 4096
[  285.827802][T12715] fuse: fd is not a fuse device
[  285.992036][   T33] audit: type=1326 audit(1778559597.850:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.1.2726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  286.011242][   T33] audit: type=1326 audit(1778559597.860:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.1.2726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  286.036765][   T33] audit: type=1326 audit(1778559597.870:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.1.2726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  286.056875][   T33] audit: type=1326 audit(1778559597.870:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.1.2726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  286.070081][   T33] audit: type=1326 audit(1778559597.870:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.1.2726" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  286.080821][   T33] audit: type=1326 audit(1778559597.870:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.1.2726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  286.088223][   T33] audit: type=1326 audit(1778559597.870:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.1.2726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  286.097579][   T33] audit: type=1326 audit(1778559597.880:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.1.2726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  286.107435][   T33] audit: type=1326 audit(1778559597.880:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.1.2726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  286.117632][   T33] audit: type=1326 audit(1778559597.880:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.1.2726" exe="/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f7e56b9cdd9 code=0x7ffc0000
[  286.657890][T12747] loop0: detected capacity change from 0 to 128
[  286.774849][T12752] 9p: Bad value for 'rfdno'
[  287.059332][T12758] fuse: Unknown parameter '0x000000000000000700000000000000000000'
[  288.049049][  T796] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  288.199051][  T796] usb 1-1: Using ep0 maxpacket: 16
[  288.203562][  T796] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  288.207655][  T796] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  288.214695][  T796] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  288.221121][  T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.224649][  T796] usb 1-1: Product: syz
[  288.226560][  T796] usb 1-1: Manufacturer: syz
[  288.228616][  T796] usb 1-1: SerialNumber: syz
[  288.230854][ T5614] Bluetooth: hci2: command 0x0405 tx timeout
[  288.244388][T12788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2755'.
[  288.251478][  T796] usb 1-1: 0:2 : does not exist
[  288.452852][  T796] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  288.489127][  T796] usb 1-1: USB disconnect, device number 44
[  288.516437][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  289.323086][T12803] netlink: 200 bytes leftover after parsing attributes in process `syz.5.2762'.
[  289.467161][T12801] loop0: detected capacity change from 0 to 32768
[  289.791102][T12811] loop5: detected capacity change from 0 to 512
[  289.800249][T12811] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  289.857848][T12811] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  289.878283][T12811] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2766: Failed to acquire dquot type 1
[  289.881817][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  289.881831][    C0] EXT4-fs (loop5): initial error at time 1778559601: ext4_mb_generate_buddy:1317
[  289.881842][    C0] EXT4-fs (loop5): last error at time 1778559601: ext4_mb_generate_buddy:1317
[  289.892462][T12811] loop5: lost filesystem error report for type 5 error -28
[  289.893013][T12811] EXT4-fs (loop5): 1 truncate cleaned up
[  289.900076][T12811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.912481][T12811] EXT4-fs error (device loop5): __ext4_remount:6837: comm syz.5.2766: Abort forced by user
[  289.917937][T12811] EXT4-fs (loop5): Remounting filesystem read-only
[  289.924361][T12811] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  289.958796][ T8938] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.041975][T12828] loop5: detected capacity change from 0 to 40427
[  291.051724][T12828] F2FS-fs (loop5): invalid crc value
[  291.052069][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2778'.
[  291.083712][T12828] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  291.091709][T12828] F2FS-fs (loop5): Start checkpoint disabled!
[  291.102829][T12828] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  291.107442][T12828] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  291.113445][   T33] kauditd_printk_skb: 7 callbacks suppressed
[  291.113454][   T33] audit: type=1800 audit(1778559602.980:261): pid=12828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2773" name="file1" dev="loop5" ino=10 res=0 errno=0
[  291.294215][T12844] loop0: detected capacity change from 0 to 32768
[  291.372642][T12844] Dev loop0 SGI disklabel: csum bad, label corrupted
[  291.636709][ T7897] kworker/u10:11: attempt to access beyond end of device
[  291.636709][ T7897] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  291.660858][ T7897] CPU: 1 UID: 0 PID: 7897 Comm: kworker/u10:11 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  291.660875][ T7897] Tainted: [L]=SOFTLOCKUP
[  291.660878][ T7897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  291.660883][ T7897] Workqueue: writeback wb_workfn (flush-7:5)
[  291.660901][ T7897] Call Trace:
[  291.660905][ T7897]  <TASK>
[  291.660908][ T7897]  dump_stack_lvl+0xe8/0x150
[  291.660919][ T7897]  f2fs_stop_checkpoint+0x3c7/0x590
[  291.660930][ T7897]  f2fs_write_end_io+0x1274/0x1740
[  291.660947][ T7897]  __submit_merged_bio+0x256/0x6a0
[  291.660957][ T7897]  __submit_merged_write_cond+0x3c9/0x4e0
[  291.660967][ T7897]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  291.660983][ T7897]  f2fs_write_data_pages+0x287e/0x34f0
[  291.660991][ T7897]  ? f2fs_build_free_nids+0xdc/0x1810
[  291.661011][ T7897]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  291.661025][ T7897]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  291.661046][ T7897]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  291.661061][ T7897]  ? __lock_acquire+0x6b5/0x2cf0
[  291.661075][ T7897]  ? lock_list_lru_of_memcg+0x2e/0x4c0
[  291.661087][ T7897]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  291.661096][ T7897]  do_writepages+0x32e/0x550
[  291.661106][ T7897]  ? reacquire_held_locks+0x104/0x190
[  291.661115][ T7897]  ? writeback_sb_inodes+0x463/0x19d0
[  291.661125][ T7897]  __writeback_single_inode+0x133/0x10e0
[  291.661139][ T7897]  ? do_raw_spin_unlock+0x4d/0x210
[  291.661151][ T7897]  writeback_sb_inodes+0x979/0x19d0
[  291.661158][ T7897]  ? __lock_acquire+0x6b5/0x2cf0
[  291.661168][ T7897]  ? do_raw_spin_lock+0x12b/0x2f0
[  291.661184][ T7897]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  291.661191][ T7897]  ? do_raw_spin_lock+0x12b/0x2f0
[  291.661214][ T7897]  ? rcu_is_watching+0x15/0xb0
[  291.661226][ T7897]  wb_writeback+0x445/0xb00
[  291.661236][ T7897]  ? queue_io+0x2b1/0x470
[  291.661246][ T7897]  ? __pfx_wb_writeback+0x10/0x10
[  291.661253][ T7897]  ? do_raw_spin_lock+0x12b/0x2f0
[  291.661268][ T7897]  wb_workfn+0x3f8/0xf10
[  291.661277][ T7897]  ? __lock_acquire+0x6b5/0x2cf0
[  291.661284][ T7897]  ? look_up_lock_class+0x57/0x110
[  291.661301][ T7897]  ? __pfx_wb_workfn+0x10/0x10
[  291.661312][ T7897]  ? do_raw_spin_lock+0x12b/0x2f0
[  291.661321][ T7897]  ? lock_acquire+0x106/0x350
[  291.661329][ T7897]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  291.661340][ T7897]  ? process_scheduled_works+0xa70/0x1860
[  291.661348][ T7897]  ? process_scheduled_works+0xa70/0x1860
[  291.661358][ T7897]  ? process_scheduled_works+0xa70/0x1860
[  291.661365][ T7897]  ? process_scheduled_works+0xa70/0x1860
[  291.661373][ T7897]  process_scheduled_works+0xb5d/0x1860
[  291.661391][ T7897]  ? __pfx_process_scheduled_works+0x10/0x10
[  291.661401][ T7897]  ? assign_work+0x3d5/0x5e0
[  291.661410][ T7897]  worker_thread+0xa53/0xfc0
[  291.661428][ T7897]  kthread+0x388/0x470
[  291.661437][ T7897]  ? __pfx_worker_thread+0x10/0x10
[  291.661444][ T7897]  ? __pfx_kthread+0x10/0x10
[  291.661453][ T7897]  ret_from_fork+0x514/0xb70
[  291.661463][ T7897]  ? __pfx_ret_from_fork+0x10/0x10
[  291.661471][ T7897]  ? __switch_to+0xc79/0x1410
[  291.661481][ T7897]  ? __pfx_kthread+0x10/0x10
[  291.661490][ T7897]  ret_from_fork_asm+0x1a/0x30
[  291.661524][ T7897]  </TASK>
[  291.661528][ T7897] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  291.772185][ T7897] CPU: 1 UID: 0 PID: 7897 Comm: kworker/u10:11 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  291.772200][ T7897] Tainted: [L]=SOFTLOCKUP
[  291.772203][ T7897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  291.772208][ T7897] Workqueue: writeback wb_workfn (flush-7:5)
[  291.772224][ T7897] Call Trace:
[  291.772228][ T7897]  <TASK>
[  291.772232][ T7897]  dump_stack_lvl+0xe8/0x150
[  291.772242][ T7897]  f2fs_stop_checkpoint+0x3c7/0x590
[  291.772253][ T7897]  f2fs_write_end_io+0x1274/0x1740
[  291.772271][ T7897]  __submit_merged_bio+0x256/0x6a0
[  291.772281][ T7897]  __submit_merged_write_cond+0x3c9/0x4e0
[  291.772292][ T7897]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  291.772310][ T7897]  f2fs_write_data_pages+0x287e/0x34f0
[  291.772318][ T7897]  ? f2fs_build_free_nids+0xdc/0x1810
[  291.772339][ T7897]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  291.772353][ T7897]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  291.772376][ T7897]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  291.772392][ T7897]  ? __lock_acquire+0x6b5/0x2cf0
[  291.772408][ T7897]  ? lock_list_lru_of_memcg+0x2e/0x4c0
[  291.772420][ T7897]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  291.772429][ T7897]  do_writepages+0x32e/0x550
[  291.772440][ T7897]  ? reacquire_held_locks+0x104/0x190
[  291.772448][ T7897]  ? writeback_sb_inodes+0x463/0x19d0
[  291.772459][ T7897]  __writeback_single_inode+0x133/0x10e0
[  291.772468][ T7897]  ? do_raw_spin_unlock+0x4d/0x210
[  291.772479][ T7897]  writeback_sb_inodes+0x979/0x19d0
[  291.772487][ T7897]  ? __lock_acquire+0x6b5/0x2cf0
[  291.772497][ T7897]  ? do_raw_spin_lock+0x12b/0x2f0
[  291.772565][ T7897]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  291.772573][ T7897]  ? do_raw_spin_lock+0x12b/0x2f0
[  291.772598][ T7897]  ? rcu_is_watching+0x15/0xb0
[  291.772611][ T7897]  wb_writeback+0x445/0xb00
[  291.772621][ T7897]  ? queue_io+0x2b1/0x470
[  291.772632][ T7897]  ? __pfx_wb_writeback+0x10/0x10
[  291.772639][ T7897]  ? do_raw_spin_lock+0x12b/0x2f0
[  291.772655][ T7897]  wb_workfn+0x3f8/0xf10
[  291.772664][ T7897]  ? __lock_acquire+0x6b5/0x2cf0
[  291.772671][ T7897]  ? look_up_lock_class+0x57/0x110
[  291.772688][ T7897]  ? __pfx_wb_workfn+0x10/0x10
[  291.772700][ T7897]  ? do_raw_spin_lock+0x12b/0x2f0
[  291.772709][ T7897]  ? lock_acquire+0x106/0x350
[  291.772717][ T7897]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  291.772728][ T7897]  ? process_scheduled_works+0xa70/0x1860
[  291.772737][ T7897]  ? process_scheduled_works+0xa70/0x1860
[  291.772748][ T7897]  ? process_scheduled_works+0xa70/0x1860
[  291.772754][ T7897]  ? process_scheduled_works+0xa70/0x1860
[  291.772763][ T7897]  process_scheduled_works+0xb5d/0x1860
[  291.772782][ T7897]  ? __pfx_process_scheduled_works+0x10/0x10
[  291.772792][ T7897]  ? assign_work+0x3d5/0x5e0
[  291.772802][ T7897]  worker_thread+0xa53/0xfc0
[  291.772821][ T7897]  kthread+0x388/0x470
[  291.772830][ T7897]  ? __pfx_worker_thread+0x10/0x10
[  291.772837][ T7897]  ? __pfx_kthread+0x10/0x10
[  291.772847][ T7897]  ret_from_fork+0x514/0xb70
[  291.772857][ T7897]  ? __pfx_ret_from_fork+0x10/0x10
[  291.772865][ T7897]  ? __switch_to+0xc79/0x1410
[  291.772877][ T7897]  ? __pfx_kthread+0x10/0x10
[  291.772887][ T7897]  ret_from_fork_asm+0x1a/0x30
[  291.772902][ T7897]  </TASK>
[  291.772906][ T7897] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  291.968918][ T5721] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  292.131605][ T5721] usb 1-1: Using ep0 maxpacket: 16
[  292.135911][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  292.144247][ T5721] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  292.148133][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.152912][ T5721] usb 1-1: Product: syz
[  292.154718][ T5721] usb 1-1: Manufacturer: syz
[  292.156636][ T5721] usb 1-1: SerialNumber: syz
[  292.176709][ T5721] usb 1-1: config 0 descriptor??
[  292.425410][  T796] usb 1-1: USB disconnect, device number 45
[  293.135102][T12884] loop0: detected capacity change from 0 to 128
[  293.144916][T12884] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  293.152327][T12884] ext4 filesystem being mounted at /783/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  293.212056][ T5619] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  293.254583][T12894] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2800'.
[  293.396235][T12914] loop5: detected capacity change from 0 to 512
[  293.728842][  T796] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  293.878897][  T796] usb 6-1: Using ep0 maxpacket: 32
[  293.883481][  T796] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  293.887436][  T796] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  293.892683][  T796] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  293.896337][  T796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  293.902269][  T796] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  293.906356][  T796] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  293.912558][  T796] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  293.916320][  T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.923568][  T796] usb 6-1: config 0 descriptor??
[  294.140084][  T796] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  294.372562][ T5721] usb 6-1: USB disconnect, device number 20
[  294.381418][ T5721] usblp0: removed
[  294.604090][T12950] loop0: detected capacity change from 0 to 32768
[  294.641856][T12950] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  294.651211][T12950] XFS (loop0): Ending clean mount
[  294.659641][T12950] XFS (loop0): Quotacheck needed: Please wait.
[  294.701744][T12950] XFS (loop0): Quotacheck: Done.
[  294.891267][ T5619] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  295.663355][T13000] loop0: detected capacity change from 0 to 8
[  295.669547][T13000] SQUASHFS error: zlib decompression failed, data probably corrupt
[  295.675345][T13000] SQUASHFS error: Failed to read block 0x9b: -5
[  295.679872][T13000] SQUASHFS error: Unable to read metadata cache entry [99]
[  295.691658][T13000] SQUASHFS error: Unable to read inode 0x127
[  295.857975][T13012] loop0: detected capacity change from 0 to 4096
[  295.873311][T13012] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  295.904231][T13012] ntfs3(loop0): failed to convert "c46c" to maccenteuro
[  295.911833][T13012] ntfs3(loop0): ino=20, mi_enum_attr
[  295.913578][T13012] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  297.778518][   T33] audit: type=1326 audit(1778559609.411:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13041 comm="syz.0.2867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5559cdd9 code=0x7ffc0000
[  297.835699][   T33] audit: type=1326 audit(1778559609.411:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13041 comm="syz.0.2867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5559cdd9 code=0x7ffc0000
[  297.859985][   T33] audit: type=1326 audit(1778559609.411:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13041 comm="syz.0.2867" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc5559cdd9 code=0x7ffc0000
[  298.208076][   T33] audit: type=1326 audit(1778559609.411:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13041 comm="syz.0.2867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5559cdd9 code=0x7ffc0000
[  298.379170][   T33] audit: type=1326 audit(1778559609.411:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13041 comm="syz.0.2867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5559cdd9 code=0x7ffc0000
[  298.399681][   T33] audit: type=1326 audit(1778559609.411:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13041 comm="syz.0.2867" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efc5559cdd9 code=0x7ffc0000
[  298.426411][   T33] audit: type=1326 audit(1778559609.411:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13041 comm="syz.0.2867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5559cdd9 code=0x7ffc0000
[  298.451949][   T33] audit: type=1326 audit(1778559609.411:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13041 comm="syz.0.2867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5559cdd9 code=0x7ffc0000
[  298.472903][   T33] audit: type=1326 audit(1778559609.411:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13041 comm="syz.0.2867" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efc5559cdd9 code=0x7ffc0000
[  298.497761][   T33] audit: type=1326 audit(1778559609.661:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13041 comm="syz.0.2867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5559cdd9 code=0x7ffc0000
[  298.506740][  T796] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  298.659069][  T796] usb 1-1: Using ep0 maxpacket: 16
[  298.669314][  T796] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  298.673578][T13062] overlayfs: failed to clone upperpath
[  298.681554][  T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  298.690971][  T796] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  298.695241][  T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.698573][  T796] usb 1-1: Product: syz
[  298.700546][  T796] usb 1-1: Manufacturer: syz
[  298.703494][  T796] usb 1-1: SerialNumber: syz
[  298.713903][  T796] usb 1-1: config 0 descriptor??
[  298.719180][  T796] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  298.727786][  T796] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  298.916713][T13077] netlink: 'syz.5.2882': attribute type 11 has an invalid length.
[  298.919583][T13077] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2882'.
[  299.018404][T13082] loop5: detected capacity change from 0 to 2048
[  299.023706][T13082] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  299.297145][T13089] loop5: detected capacity change from 0 to 1024
[  299.392353][  T796] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  299.396559][  T796] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  300.091277][  T796] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[  300.094147][  T796] em28xx 1-1:0.0: couldn't setup AC97 register 2
[  300.096918][  T796] em28xx 1-1:0.0: couldn't setup AC97 register 4
[  300.501885][  T796] em28xx 1-1:0.0: couldn't setup AC97 register 6
[  300.506304][  T796] em28xx 1-1:0.0: couldn't setup AC97 register 54
[  300.509569][  T796] em28xx 1-1:0.0: couldn't setup AC97 register 56
[  300.515888][  T796] usb 1-1: USB disconnect, device number 46
[  300.728700][   T31] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  300.881039][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.885465][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.889490][   T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  300.894731][   T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  300.898418][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.906414][   T31] usb 6-1: config 0 descriptor??
[  300.976233][T13127] 9p: Bad value for 'rfdno'
[  301.347473][   T31] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  301.682626][T13157] overlayfs: failed to clone upperpath
[  302.766892][T13181] fuse: fd is not a fuse device
[  302.818662][ T5078] usb 1-1: new full-speed USB device number 47 using dummy_hcd
[  302.844260][T13185] fuse: fd is not a fuse device
[  302.876910][T13187] overlayfs: failed to clone lowerpath
[  302.972277][ T5078] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  302.985465][ T5078] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  302.989400][ T5078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.992607][ T5078] usb 1-1: Product: syz
[  302.994268][ T5078] usb 1-1: Manufacturer: syz
[  302.996285][ T5078] usb 1-1: SerialNumber: syz
[  303.008984][ T5078] usb 1-1: config 0 descriptor??
[  303.021721][ T5078] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  303.027038][ T5078] usb 1-1: setting power ON
[  303.030470][ T5078] dvb-usb: bulk message failed: -22 (2/0)
[  303.040785][ T5078] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  303.047572][ T5078] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19)
[  303.051894][ T5078] dvb_usb_cxusb 1-1:0.0: probe with driver dvb_usb_cxusb failed with error -22
[  303.234932][ T5078] usb 1-1: USB disconnect, device number 47
[  304.018561][ T5614] Bluetooth: hci2: command 0x0405 tx timeout
[  304.027991][T13205] overlayfs: failed to clone upperpath
[  304.860499][    T9] usb 6-1: USB disconnect, device number 21
[  305.189217][  T796] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  305.349967][  T796] usb 1-1: Using ep0 maxpacket: 8
[  305.354470][  T796] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 86, changing to 7
[  305.362001][  T796] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40
[  305.365760][  T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.369495][  T796] usb 1-1: Product: syz
[  305.371474][  T796] usb 1-1: Manufacturer: syz
[  305.373477][  T796] usb 1-1: SerialNumber: syz
[  305.387436][  T796] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  305.586479][  T796] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  305.640090][  T796] usb 1-1: USB disconnect, device number 48
[  305.681485][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  305.958739][    T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  306.118579][    T9] usb 6-1: Using ep0 maxpacket: 8
[  306.140427][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  306.144706][    T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  306.148132][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.157803][    T9] usb 6-1: config 0 descriptor??
[  306.264085][T13247] loop0: detected capacity change from 0 to 2048
[  306.278260][T13247] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  306.283300][T13247] FAT-fs (loop0): Filesystem has been set read-only
[  306.371516][    T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  306.655928][T13257] loop0: detected capacity change from 0 to 32768
[  306.661413][T13257] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2960 (13257)
[  306.673142][T13257] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  306.677371][T13257] BTRFS info (device loop0): using sha256 checksum algorithm
[  306.698553][T13257] BTRFS info (device loop0): enabling ssd optimizations
[  306.701380][T13257] BTRFS info (device loop0): turning on async discard
[  306.704123][T13257] BTRFS info (device loop0): enabling free space tree
[  306.747865][ T5619] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  306.812331][    T9] usb 6-1: USB disconnect, device number 22
[  307.567324][    T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  307.742726][    T9] usb 1-1: too many configurations: 164, using maximum allowed: 8
[  307.755481][    T9] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  307.766828][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.773951][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2972'.
[  307.776425][    T9] usb 1-1: config 0 descriptor??
[  307.784318][    T9] rndis_host 1-1:0.0: rndis: master #0/ffff88801d620000 slave #1/0000000000000000
[  307.983352][    T9] usb 1-1: USB disconnect, device number 49
[  308.098552][  T796] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  308.270658][  T796] usb 6-1: config 0 interface 0 has no altsetting 0
[  308.273583][  T796] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  308.277053][  T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.282642][  T796] usb 6-1: config 0 descriptor??
[  308.490220][  T796]  (null): keene_cmd_main failed (-71)
[  308.500702][  T796] video4linux radio48: keene_cmd_main failed (-71)
[  308.511923][  T796] radio-keene 6-1:0.0: V4L2 device registered as radio48
[  308.520354][  T796] usb 6-1: USB disconnect, device number 23
[  309.272877][   T33] kauditd_printk_skb: 15 callbacks suppressed
[  309.272899][   T33] audit: type=1326 audit(1778559621.141:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.5.2986" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  309.296252][   T33] audit: type=1326 audit(1778559621.141:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.5.2986" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  309.315250][   T33] audit: type=1326 audit(1778559621.141:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.5.2986" exe="/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  309.327324][   T33] audit: type=1326 audit(1778559621.141:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.5.2986" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  309.346646][   T33] audit: type=1326 audit(1778559621.141:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.5.2986" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  309.928506][  T796] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  310.098350][  T796] usb 1-1: Using ep0 maxpacket: 16
[  310.102194][  T796] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  310.105912][  T796] usb 1-1: config 0 interface 0 has no altsetting 0
[  310.110500][  T796] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  310.113547][  T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.116189][  T796] usb 1-1: Product: syz
[  310.117692][  T796] usb 1-1: Manufacturer: syz
[  310.120205][  T796] usb 1-1: SerialNumber: syz
[  310.123469][  T796] usb 1-1: config 0 descriptor??
[  310.236997][T13354] loop5: detected capacity change from 0 to 24
[  310.343931][T13355] random: crng reseeded on system resumption
[  310.384813][  T796] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input28
[  310.685093][  T796] rc_core: IR keymap rc-imon-pad not found
[  310.692003][  T796] Registered IR keymap rc-empty
[  310.697450][  T796] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  310.714938][  T796] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  310.783856][  T796] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  310.795351][  T796] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input29
[  310.823945][  T796] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:50> initialized
[  311.210827][    C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  311.214768][  T796] usb 1-1: USB disconnect, device number 50
[  311.355839][T13377] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  311.361497][T13377] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  311.557603][T13397] program syz.5.3011 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  311.863679][T13415] batadv1: entered allmulticast mode
[  311.866037][T13415] 8021q: adding VLAN 0 to HW filter on device batadv1
[  311.868688][T13415] bridge0: port 3(batadv1) entered blocking state
[  311.870894][T13415] bridge0: port 3(batadv1) entered disabled state
[  311.873727][T13415] batadv1: entered promiscuous mode
[  311.878607][  T796] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  312.044193][  T796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.049049][  T796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.053083][  T796] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  312.059627][  T796] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  312.063841][  T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.070761][  T796] usb 6-1: config 0 descriptor??
[  312.368302][   T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  312.371468][   T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  312.491812][  T796] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  313.347417][T13462] sit1: entered allmulticast mode
[  313.348700][   T53] Bluetooth: hci2: command 0x0405 tx timeout
[  314.520620][T13487] xt_hashlimit: size too large, truncated to 1048576
[  314.579695][T13486] loop5: detected capacity change from 0 to 4096
[  314.600990][ T5669] usb 6-1: USB disconnect, device number 24
[  314.619745][T13486] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  314.636357][T13486] NILFS (loop5): mounting unchecked fs
[  314.663164][T13486] NILFS (loop5): recovery required for readonly filesystem
[  314.683471][T13486] NILFS (loop5): write access will be enabled during recovery
[  314.689122][ T5616] udevd[5616]: incorrect nilfs2 checksum on /dev/loop5
[  314.730731][ T5616] udevd[5616]: incorrect nilfs2 checksum on /dev/loop5
[  314.768936][T13486] NILFS (loop5): norecovery option specified, skipping roll-forward recovery
[  314.873845][T13493] netlink: 'syz.1.3054': attribute type 15 has an invalid length.
[  314.878274][T13493] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3054'.
[  315.088678][T13500] loop5: detected capacity change from 0 to 4096
[  315.117411][T13500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.175816][ T8938] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.202513][T13508] loop0: detected capacity change from 0 to 4096
[  315.209581][T13508] EXT4-fs (loop0): Test dummy encryption mode enabled
[  315.217994][T13508] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec018, mo2=0103]
[  315.222712][T13508] System zones: 0-5
[  315.237133][T13508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.313616][T13513] loop5: detected capacity change from 0 to 4096
[  315.319640][T13513] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  315.328858][T13513] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  315.336828][T13513] ntfs3(loop5): volume is dirty and "force" flag is not set!
[  315.340194][ T6963] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.441159][   T53] Bluetooth: hci2: command 0x0405 tx timeout
[  315.767555][T13523] netlink: 'syz.5.3068': attribute type 2 has an invalid length.
[  315.771200][T13523] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3068'.
[  315.794932][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  315.806894][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  315.812247][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  315.828411][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  315.838444][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  316.073775][T13539] batman_adv: batadv0: Adding interface: dummy0
[  316.076425][T13539] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  316.091885][T13539] batman_adv: batadv0: Interface activated: dummy0
[  316.459926][T13562] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3080'.
[  316.563045][ T5823] batadv1: left promiscuous mode
[  316.565488][ T5823] bridge0: port 3(batadv1) entered disabled state
[  316.574455][ T5823] bridge_slave_1: left allmulticast mode
[  316.576374][ T5823] bridge_slave_1: left promiscuous mode
[  316.584476][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.591374][ T5823] bridge_slave_0: left allmulticast mode
[  316.596156][ T5823] bridge_slave_0: left promiscuous mode
[  316.600529][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.066970][T13581] loop5: detected capacity change from 0 to 32768
[  317.069981][T13581] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3082 (13581)
[  317.076442][T13581] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  317.079687][T13581] BTRFS info (device loop5): using sha256 checksum algorithm
[  317.186362][T13581] BTRFS info (device loop5): rebuilding free space tree
[  317.207250][T13581] BTRFS info (device loop5): disabling free space tree
[  317.209747][ T5823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  317.210460][T13581] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  317.219227][T13581] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  317.224153][ T5823] bond_slave_0: left promiscuous mode
[  317.227170][T13581] BTRFS info (device loop5): checking UUID tree
[  317.231216][ T5823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  317.234285][T13581] BTRFS info (device loop5): setting nodatasum
[  317.237033][T13581] BTRFS info (device loop5): setting nodatacow
[  317.239986][T13581] BTRFS info (device loop5): turning off barriers
[  317.240388][ T5823] bond_slave_1: left promiscuous mode
[  317.242604][T13581] BTRFS info (device loop5): force clearing of disk cache
[  317.281721][ T5823] bond0 (unregistering): Released all slaves
[  317.286897][ T5823] bond1 (unregistering): Released all slaves
[  317.308619][ T5357] 8021q: adding VLAN 0 to HW filter on device eth5
[  317.447100][ T8938] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  317.575973][T13522] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.581631][T13522] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.590285][T13522] bridge_slave_0: entered allmulticast mode
[  317.601297][T13522] bridge_slave_0: entered promiscuous mode
[  317.616470][T13522] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.622093][T13522] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.627436][T13522] bridge_slave_1: entered allmulticast mode
[  317.641075][T13522] bridge_slave_1: entered promiscuous mode
[  317.818957][T13522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.837904][T13522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.924203][   T53] Bluetooth: hci1: command tx timeout
[  317.956474][T13522] team0: Port device team_slave_0 added
[  317.959797][ T5357] 8021q: adding VLAN 0 to HW filter on device eth6
[  317.966014][ T5823] hsr_slave_0: left promiscuous mode
[  317.970722][ T5823] hsr_slave_1: left promiscuous mode
[  317.975877][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_0
[  317.980145][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_1
[  318.154955][ T5823] team0 (unregistering): Port device team_slave_1 removed
[  318.172503][ T5823] team0 (unregistering): Port device team_slave_0 removed
[  318.313550][T13522] team0: Port device team_slave_1 added
[  318.333190][T13619] pim6reg: entered allmulticast mode
[  318.351253][T13522] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.354280][T13522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  318.367578][T13522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  318.379045][T13522] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.382819][T13522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  318.394820][T13522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.465944][T13522] hsr_slave_0: entered promiscuous mode
[  318.474329][T13522] hsr_slave_1: entered promiscuous mode
[  318.493081][T13522] debugfs: 'hsr0' already exists in 'hsr'
[  318.499022][T13522] Cannot create hsr debugfs directory
[  318.699840][ T5357] 8021q: adding VLAN 0 to HW filter on device eth7
[  318.753202][T13637] loop5: detected capacity change from 0 to 4096
[  318.831035][   T33] audit: type=1800 audit(1778559630.701:292): pid=13637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3094" name="file1" dev="loop5" ino=33 res=0 errno=0
[  318.875889][ T5823] IPVS: stop unused estimator thread 0...
[  319.086479][ T5357] 8021q: adding VLAN 0 to HW filter on device eth8
[  319.092286][T13522] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  319.096445][T13522] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  319.101197][T13522] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  319.109506][T13522] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  319.112376][T13522] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  319.129479][T13522] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  319.133679][T13522] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  319.147759][T13522] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  319.295576][T13666] loop5: detected capacity change from 0 to 4096
[  319.306926][T13666] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  319.349197][T13522] 8021q: adding VLAN 0 to HW filter on device bond0
[  319.369869][T13666] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  319.376960][T13666] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  319.378694][T13522] 8021q: adding VLAN 0 to HW filter on device team0
[  319.396256][ T7889] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.397329][T13666] ntfs3(loop5): ino=1e, mi_enum_attr
[  319.398724][ T7889] bridge0: port 1(bridge_slave_0) entered forwarding state
[  319.409506][ T7889] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.411906][ T7889] bridge0: port 2(bridge_slave_1) entered forwarding state
[  319.420874][T13666] ntfs3(loop5): ino=1e, mi_enum_attr
[  319.452111][T13666] ntfs3(loop5): ino=1e, mi_enum_attr
[  319.486057][ T1029] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  319.495436][ T8938] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  319.500638][ T8938] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  319.523762][ T8938] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  320.116147][T13522] 8021q: adding VLAN 0 to HW filter on device batadv0
[  320.128004][   T53] Bluetooth: hci1: command tx timeout
[  320.356191][T13522] veth0_vlan: entered promiscuous mode
[  320.363960][T13522] veth1_vlan: entered promiscuous mode
[  320.379403][T13522] veth0_macvtap: entered promiscuous mode
[  320.384419][T13522] veth1_macvtap: entered promiscuous mode
[  320.394767][T13522] batman_adv: batadv0: Interface activated: batadv_slave_0
[  320.405892][T13522] batman_adv: batadv0: Interface activated: batadv_slave_1
[  320.411616][ T5823] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.415006][ T5823] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.420308][ T5823] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.424089][ T5823] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  320.515821][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.522351][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.562722][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.565229][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.715229][T13749] loop6: detected capacity change from 0 to 512
[  320.727393][T13749] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  320.768620][T13749] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3072: bad orphan inode 131083
[  320.776014][T13749] loop6: lost filesystem error report for type 5 error -117
[  320.780487][T13749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.847239][T13522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.974234][T13760] loop6: detected capacity change from 0 to 4096
[  320.979264][T13760] ntfs3(loop6): Failed to load $MFT (-22).
[  321.096726][T13766] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3128'.
[  321.134394][T13755] loop5: detected capacity change from 0 to 40427
[  321.141229][T13755] F2FS-fs (loop5): Invalid segment count (0)
[  321.149322][T13755] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  321.153722][T13755] F2FS-fs (loop5): build fault injection rate: 690
[  321.160994][T13755] F2FS-fs (loop5): invalid crc value
[  321.170769][T13755] F2FS-fs (loop5): Mismatch valid blocks 5 vs. 7
[  321.193470][T13755] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117)
[  321.239951][T13770] loop6: detected capacity change from 0 to 1024
[  321.250051][T13770] EXT4-fs: Ignoring removed bh option
[  321.263781][T13770] EXT4-fs: Ignoring removed bh option
[  321.294948][T13770] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.359872][T13522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.398585][T13782] fuse: fd is not a fuse device
[  321.458546][T13786] loop6: detected capacity change from 0 to 4096
[  321.464360][T13786] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[  321.467981][T13786] UDF-fs: Scanning with blocksize 512 failed
[  321.474175][T13786] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[  321.478118][T13786] UDF-fs: Scanning with blocksize 1024 failed
[  321.498596][T13786] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[  321.504107][T13786] UDF-fs: Scanning with blocksize 2048 failed
[  321.532010][T13786] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[  321.536171][T13786] UDF-fs: Scanning with blocksize 4096 failed
[  321.742758][T13794] loop6: detected capacity change from 0 to 32768
[  321.783743][T13794] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  321.917404][T13522] ocfs2: Unmounting device (7,6) on (node local)
[  322.148076][   T53] Bluetooth: hci1: command tx timeout
[  322.391057][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  322.401503][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  322.588787][ T5669] usb 7-1: new low-speed USB device number 2 using dummy_hcd
[  322.600416][T13842] loop5: detected capacity change from 0 to 1024
[  322.750451][ T5669] usb 7-1: unable to get BOS descriptor or descriptor too short
[  322.755232][ T5669] usb 7-1: config 8 has an invalid interface number: 109 but max is 0
[  322.759227][ T5669] usb 7-1: config 8 has no interface number 0
[  322.763456][ T5669] usb 7-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8
[  322.768779][ T5669] usb 7-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8
[  322.773455][ T5669] usb 7-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  322.782366][ T5669] usb 7-1: string descriptor 0 read error: -22
[  322.786127][ T5669] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29
[  322.790553][ T5669] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.798220][T13838] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  322.804360][ T5669] metro_usb 7-1:8.109: Metrologic USB to Serial converter detected
[  322.815142][ T5669] usb 7-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  322.948235][ T5078] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  323.011062][ T5676] usb 7-1: USB disconnect, device number 2
[  323.023999][ T5676] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  323.029196][ T5676] metro_usb 7-1:8.109: device disconnected
[  323.153437][ T5078] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  323.157755][ T5078] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  323.161784][ T5078] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.167932][ T5078] usb 6-1: config 0 descriptor??
[  323.181082][ T5078] rndis_host 6-1:0.0: probe with driver rndis_host failed with error -22
[  323.381876][ T5669] usb 6-1: USB disconnect, device number 25
[  324.224349][T13866] loop5: detected capacity change from 0 to 128
[  324.238227][   T53] Bluetooth: hci1: command tx timeout
[  324.245799][T13866] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  324.251385][T13866] ext4 filesystem being mounted at /496/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  324.334564][T13866] fscrypt: loop5: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  324.365667][ T8938] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  324.691112][T13875] batman_adv: batadv0: Adding interface: virt_wifi0
[  324.693461][T13875] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  324.702016][T13875] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active
[  324.833232][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3179'.
[  324.954313][T13891] loop6: detected capacity change from 0 to 4096
[  324.957712][T13891] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  325.314543][T13916] loop6: detected capacity change from 0 to 256
[  325.336930][T13916] FAT-fs (loop6): Directory bread(block 64) failed
[  325.344557][T13916] FAT-fs (loop6): Directory bread(block 65) failed
[  325.349863][T13916] FAT-fs (loop6): Directory bread(block 66) failed
[  325.357707][T13916] FAT-fs (loop6): Directory bread(block 67) failed
[  325.362171][T13916] FAT-fs (loop6): Directory bread(block 68) failed
[  325.364406][T13916] FAT-fs (loop6): Directory bread(block 69) failed
[  325.366768][T13916] FAT-fs (loop6): Directory bread(block 70) failed
[  325.369941][T13916] FAT-fs (loop6): Directory bread(block 71) failed
[  325.372299][T13916] FAT-fs (loop6): Directory bread(block 72) failed
[  325.374732][T13916] FAT-fs (loop6): Directory bread(block 73) failed
[  325.522360][T13930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  325.527880][T13930] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.576340][ T8938] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.847840][ T5676] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  326.006151][T13943] set_capacity_and_notify: 2 callbacks suppressed
[  326.006161][T13943] loop6: detected capacity change from 0 to 32768
[  326.013812][ T5676] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  326.021216][ T5676] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.032297][ T5676] usb 6-1: Product: syz
[  326.033751][ T5676] usb 6-1: Manufacturer: syz
[  326.037023][ T5676] usb 6-1: SerialNumber: syz
[  326.046928][ T5676] usb 6-1: config 0 descriptor??
[  326.057412][ T5676] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  326.076845][ T5676] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  326.092672][ T5676] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  326.103819][ T5676] usb 6-1: media controller created
[  326.115934][ T5676] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  326.163486][ T5676] DVB: Unable to find symbol mt352_attach()
[  326.187385][ T5676] DVB: Unable to find symbol nxt6000_attach()
[  326.194966][ T5676] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  326.206346][ T5676] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input30
[  326.215169][ T5676] dvb-usb: schedule remote query interval to 1000 msecs.
[  326.217946][ T5676] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  326.221739][ T5676] dvb-usb: bulk message failed: -22 (7/0)
[  326.223958][ T5676] dvb-usb: bulk message failed: -22 (7/0)
[  326.338981][ T5669] usb 6-1: USB disconnect, device number 26
[  326.600472][ T5669] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  327.212864][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3220'.
[  327.216420][T13986] loop6: detected capacity change from 0 to 1024
[  327.220772][T13986] EXT4-fs: Ignoring removed orlov option
[  327.254933][T13986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.266049][T13986] EXT4-fs error (device loop6): __ext4_new_inode:1285: comm syz.6.3221: failed to insert inode 12: doubly allocated?
[  327.302589][T13522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.394313][T14002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3227'.
[  327.410703][T14000] loop5: detected capacity change from 0 to 4096
[  327.417934][T14000] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  327.434343][T14000] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  327.439499][T14000] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  327.456405][ T1228] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  327.479714][T14006] sctp: [Deprecated]: syz.1.3229 (pid 14006) Use of int in max_burst socket option.
[  327.479714][T14006] Use struct sctp_assoc_value instead
[  327.483503][ T8938] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  327.483536][ T8938] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  327.483543][ T8938] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  327.499261][ T1228] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  327.586097][T14013] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3232'.
[  327.651022][   T33] audit: type=1326 audit(1778559639.522:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.5.3235" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  327.674744][   T33] audit: type=1326 audit(1778559639.522:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.5.3235" exe="/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  327.687791][   T33] audit: type=1326 audit(1778559639.522:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.5.3235" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  327.709892][   T33] audit: type=1326 audit(1778559639.522:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.5.3235" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  327.734056][   T33] audit: type=1326 audit(1778559639.522:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.5.3235" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  327.755557][T14022] IPVS: Scheduler module ip_vs_sip not found
[  327.756435][   T33] audit: type=1326 audit(1778559639.522:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.5.3235" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  327.781878][   T33] audit: type=1326 audit(1778559639.522:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.5.3235" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  327.796363][T14029] binder_alloc: 14028: pid 14028 spamming oneway? 1 buffers allocated for a total size of 4096
[  327.800130][   T33] audit: type=1326 audit(1778559639.522:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.5.3235" exe="/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  327.827386][   T33] audit: type=1326 audit(1778559639.522:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.5.3235" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  327.841766][   T33] audit: type=1326 audit(1778559639.522:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.5.3235" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff90299cdd9 code=0x7ffc0000
[  327.986964][T14047] loop6: detected capacity change from 0 to 128
[  329.207709][T14061] loop5: detected capacity change from 0 to 32768
[  329.220201][T14061] (syz.5.3255,14061,0):ocfs2_find_slot:490 ERROR: no free slots available!
[  329.224109][T14061] (syz.5.3255,14061,0):ocfs2_mount_volume:1751 ERROR: status = -22
[  329.243763][T14061] (syz.5.3255,14061,0):ocfs2_fill_super:1177 ERROR: status = -22
[  329.424816][T14078] loop5: detected capacity change from 0 to 1024
[  329.783768][ T5507] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  329.803801][ T5507] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.911092][T14098] netlink: 'syz.6.3271': attribute type 10 has an invalid length.
[  329.915152][T14098] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3271'.
[  330.140772][T14116] loop6: detected capacity change from 0 to 2048
[  330.152546][T14116] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  330.664028][T14151] hub 8-0:1.0: USB hub found
[  330.666978][T14151] hub 8-0:1.0: 1 port detected
[  331.599614][T14183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3303'.
[  331.620693][T14176] loop6: detected capacity change from 0 to 32768
[  331.636425][T14176] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  331.656390][T14176] XFS (loop6): Ending clean mount
[  331.715023][T13522] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  331.735265][T14198] netlink: 'syz.1.3306': attribute type 30 has an invalid length.
[  332.527379][T14254] loop6: detected capacity change from 0 to 4096
[  332.548475][T14254] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  332.602378][T14254] ntfs3(loop6): Failed to initialize $Extend/$Reparse.
[  332.609068][T14262] loop5: detected capacity change from 0 to 16
[  332.613471][T14262] erofs (device loop5): mounted with root inode @ nid 36.
[  332.641105][T14254] ntfs3(loop6): ino=1e, mi_enum_attr
[  332.643078][T14254] ntfs3(loop6): ino=1e, mi_enum_attr
[  332.645256][T14254] ntfs3(loop6): ino=1e, "file1" mi_enum_attr
[  332.647375][T14254] ntfs3(loop6): ino=1e, "file1" mi_enum_attr
[  332.680718][T14254] ntfs3(loop6): ino=1e, "file1" mi_enum_attr
[  332.686292][T14254] ntfs3(loop6): ino=1e, "file1" mi_enum_attr
[  332.689283][T14254] ntfs3(loop6): ino=1e, "file1" ni_find_attr
[  332.691399][T14254] ntfs3(loop6): ino=1e, "file1" attr_set_size_ex
[  332.795490][T14268] netlink: 'syz.5.3330': attribute type 5 has an invalid length.
[  332.805870][T14268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3330'.
[  332.958291][T14272] loop5: detected capacity change from 0 to 32768
[  332.960874][T14272] btrfs: Deprecated parameter 'usebackuproot'
[  332.962827][T14272] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  332.969158][T14272] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3332 (14272)
[  332.977110][T14272] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  332.980376][T14272] BTRFS info (device loop5): using crc32c checksum algorithm
[  333.052555][   T36] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  333.060222][T14272] BTRFS error (device loop5): failed to load root extent
[  333.063229][T14272] BTRFS warning (device loop5): try to load backup roots slot 1
[  333.068710][   T36] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  333.108520][T14272] BTRFS warning (device loop5): couldn't read tree root
[  333.111547][T14272] BTRFS warning (device loop5): try to load backup roots slot 2
[  333.115129][   T36] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  333.126265][T14272] BTRFS warning (device loop5): couldn't read tree root
[  333.129417][T14272] BTRFS warning (device loop5): try to load backup roots slot 3
[  333.137452][T14289] overlayfs: failed to clone upperpath
[  333.143060][T14272] BTRFS info (device loop5): rebuilding free space tree
[  333.160647][T14272] BTRFS info (device loop5): checking UUID tree
[  333.165714][T14272] BTRFS info (device loop5): enabling ssd optimizations
[  333.168662][T14272] BTRFS info (device loop5): turning on sync discard
[  333.171342][T14272] BTRFS info (device loop5): enabling free space tree
[  333.174109][T14272] BTRFS info (device loop5): force clearing of disk cache
[  333.177055][T14272] BTRFS info (device loop5): enabling auto defrag
[  333.179848][T14272] BTRFS info (device loop5): trying to use backup root at mount time
[  333.183150][T14272] BTRFS info (device loop5): use zstd compression, level 3
[  333.318275][ T8938] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  333.367333][T14295] netlink: 'syz.1.3336': attribute type 1 has an invalid length.
[  333.385373][T14295] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3336'.
[  333.529329][T14301] fuse: fd is not a fuse device
[  334.094079][T14337] loop6: detected capacity change from 0 to 256
[  334.100929][T14337] exfat: Deprecated parameter 'namecase'
[  334.117907][T14337] exfat: Deprecated parameter 'utf8'
[  334.124426][T14337] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  334.151268][T14337] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d)
[  334.417617][ T5078] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  334.570400][ T5078] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[  334.579224][ T5078] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  334.583197][ T5078] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.586216][ T5078] usb 7-1: Product: syz
[  334.587914][ T5078] usb 7-1: Manufacturer: syz
[  334.590132][ T5078] usb 7-1: SerialNumber: syz
[  334.805513][ T5078] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  334.810680][ T5078] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  334.813368][ T5078] usb 7-1: 2:1 : invalid channels 0
[  334.833786][ T5078] usb 7-1: USB disconnect, device number 3
[  335.589050][T14361] loop6: detected capacity change from 0 to 128
[  335.595309][T14361] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  335.606473][T14361] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  336.001762][ T5078] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  336.023523][T14367] netlink: 'syz.1.3367': attribute type 49 has an invalid length.
[  336.147563][ T5078] usb 7-1: Using ep0 maxpacket: 8
[  336.155405][ T5078] usb 7-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=ff.7b
[  336.162701][ T5078] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.167129][ T5078] usb 7-1: Product: syz
[  336.170727][ T5078] usb 7-1: Manufacturer: syz
[  336.172666][ T5078] usb 7-1: SerialNumber: syz
[  336.180486][ T5078] usb 7-1: config 0 descriptor??
[  336.186451][ T5078] upd78f0730 7-1:0.0: upd78f0730 converter detected
[  336.198510][ T5078] usb 7-1: upd78f0730 converter now attached to ttyUSB0
[  336.401409][ T5669] usb 7-1: USB disconnect, device number 4
[  336.416539][ T5669] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  336.423412][ T5669] upd78f0730 7-1:0.0: device disconnected
[  336.632532][T14381] fuse: fd is not a fuse device
[  337.153964][T14420] loop6: detected capacity change from 0 to 2048
[  337.185655][T14420] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.236682][T13522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.364728][T14429] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  337.367769][T14431] loop6: detected capacity change from 0 to 64
[  337.393481][T14431] Trying to free block not in datazone
[  337.696017][T14440] xt_TPROXY: Can be used only with -p tcp or -p udp
[  338.770964][T14458] loop6: detected capacity change from 0 to 4096
[  338.776344][T14458] ntfs3(loop6): Failed to load $Volume (-22).
[  338.837434][ T5669] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  338.987491][ T5669] usb 6-1: Using ep0 maxpacket: 16
[  338.998312][ T5669] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[  339.008131][ T5669] usb 6-1: config 0 has no interface number 0
[  339.014501][ T5669] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  339.018990][ T5669] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  339.024353][ T5669] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  339.027844][ T5669] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.031074][ T5669] usb 6-1: Product: syz
[  339.032655][ T5669] usb 6-1: Manufacturer: syz
[  339.034592][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3407'.
[  339.038180][ T5669] usb 6-1: SerialNumber: syz
[  339.047088][ T5669] usb 6-1: config 0 descriptor??
[  339.052993][T14452] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  339.057131][T14452] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  339.276488][T14452] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  339.281054][T14452] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  339.490581][ T5669] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  339.511784][ T5669] asix 6-1:0.34: probe with driver asix failed with error -71
[  339.530836][ T5669] usb 6-1: USB disconnect, device number 27
[  339.675993][T14483] i2c i2c-1: dtv_property_process_set: SET cmd 0x0023646e undefined
[  339.960202][ T5669] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  340.085291][T14488] batadv_slave_0: entered promiscuous mode
[  340.088602][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3417'.
[  340.092373][T14488] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  340.110171][ T5669] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  340.114964][ T5669] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  340.120757][ T5669] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  340.124944][ T5669] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  340.132452][T14488] batadv_slave_0 (unregistering): left promiscuous mode
[  340.135512][ T5669] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  340.139658][T14488] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.143041][ T5669] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.150796][ T5669] usb 7-1: config 0 descriptor??
[  340.636809][ T5669] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  341.107676][ T5669] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[  341.264168][ T5669] usb 6-1: config 8 has an invalid interface number: 188 but max is 0
[  341.268314][ T5669] usb 6-1: config 8 has no interface number 0
[  341.270962][ T5669] usb 6-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  341.275019][ T5669] usb 6-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid maxpacket 65535, setting to 64
[  341.283589][ T5669] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[  341.286884][ T5669] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.289893][ T5669] usb 6-1: Product: syz
[  341.291349][ T5669] usb 6-1: Manufacturer: syz
[  341.292860][ T5669] usb 6-1: SerialNumber: syz
[  341.300759][T14490] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  341.418035][ T6321] usb 7-1: USB disconnect, device number 5
[  341.615496][ T5669] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'.
[  341.641463][ T5669] usb 6-1: USB disconnect, device number 28
[  347.567125][    C1] sched: DL replenish lagged too much
[  384.842226][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  445.406379][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  453.954614][ T9173] Bluetooth: hci1: command 0x0406 tx timeout
[  507.604908][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  563.030852][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  568.616784][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  598.223164][   T34] INFO: task kworker/u8:7:14504 blocked for more than 149 seconds.
[  598.225631][   T34]       Tainted: G             L      syzkaller #0
[  598.227624][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  598.434710][   T34] task:kworker/u8:7    state:D stack:26104 pid:14504 tgid:14504 ppid:2      task_flags:0x4208060 flags:0x00080000
[  598.501676][   T34] Workqueue: ipv6_addrconf addrconf_verify_work
[  598.540118][   T34] Call Trace:
[  598.541233][   T34]  <TASK>
[  598.592495][   T34]  __schedule+0x1821/0x5740
[  598.622073][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  598.658929][   T34]  ? __pfx___schedule+0x10/0x10
[  598.704149][   T34]  ? schedule+0x90/0x360
[  598.731271][   T34]  schedule+0x164/0x360
[  598.732630][   T34]  schedule_preempt_disabled+0x13/0x30
[  598.803165][   T34]  __mutex_lock+0x7f7/0x1550
[  598.843088][   T34]  ? __mutex_lock+0x608/0x1550
[  598.885467][   T34]  ? addrconf_verify_work+0x19/0x30
[  598.929918][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  598.964805][   T34]  ? process_scheduled_works+0xa70/0x1860
[  599.003217][   T34]  addrconf_verify_work+0x19/0x30
[  599.041805][   T34]  ? process_scheduled_works+0xa70/0x1860
[  599.078303][   T34]  process_scheduled_works+0xb5d/0x1860
[  599.112040][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  599.153920][   T34]  ? assign_work+0x3d5/0x5e0
[  599.187418][   T34]  worker_thread+0xa53/0xfc0
[  599.219403][   T34]  kthread+0x388/0x470
[  599.244880][   T34]  ? __pfx_worker_thread+0x10/0x10
[  599.274986][   T34]  ? __pfx_kthread+0x10/0x10
[  599.303714][   T34]  ret_from_fork+0x514/0xb70
[  599.326363][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  599.351893][   T34]  ? __switch_to+0xc79/0x1410
[  599.373237][   T34]  ? __pfx_kthread+0x10/0x10
[  599.393818][   T34]  ret_from_fork_asm+0x1a/0x30
[  599.417734][   T34]  </TASK>
[  599.435735][   T34] 
[  599.435735][   T34] Showing all locks held in the system:
[  599.548289][   T34] 4 locks held by kworker/0:0/9:
[  599.586210][   T34]  #0: ffff888100069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  599.672516][   T34]  #1: ffffc900000e7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  599.692603][   T34]  #2: ffffffff8fdcff00 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xab/0x1090
[  599.716898][   T34]  #3: ffff8880216c0780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x197/0x1090
[  599.752115][   T34] 3 locks held by kworker/1:1/31:
[  599.766485][   T34]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  599.798043][   T34]  #1: ffffc90000a67c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  599.839833][   T34]  #2: ffffffff8fdcff00 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  599.866845][   T34] 1 lock held by khungtaskd/34:
[  599.886366][   T34]  #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  599.912817][   T34] 1 lock held by kcompactd0/38:
[  599.934645][   T34] 2 locks held by kworker/0:2/917:
[  599.954197][   T34] 3 locks held by syslogd/5042:
[  599.968498][   T34] 1 lock held by klogd/5049:
[  599.979769][   T34] 2 locks held by udevd/5060:
[  599.992959][   T34] 3 locks held by dhcpcd/5356:
[  600.002558][   T34] 5 locks held by dhcpcd/5357:
[  600.015171][   T34] 2 locks held by getty/5445:
[  600.034704][   T34]  #0: ffff8881136480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  600.054457][   T34]  #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  600.075805][   T34] 6 locks held by kworker/u8:2/5507:
[  600.085029][   T34]  #0: ffff8881012b5940 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  600.105187][   T34]  #1: ffffc900069a7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  600.124535][   T34]  #2: ffffffff8fdc1228 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[  600.144642][   T34]  #3: ffff888104318128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[  600.163544][   T34]  #4: ffff88810431f258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420
[  600.186894][   T34]  #5: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  600.210306][   T34] 1 lock held by syz-executor/5596:
[  600.223217][   T34] 4 locks held by kworker/0:3/5669:
[  600.236904][   T34] 1 lock held by syz.1.766/7773:
[  600.247552][   T34]  #0: ffffffff8fdcff00 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  600.272045][   T34] 3 locks held by syz-executor/8938:
[  600.285591][   T34] 1 lock held by syz-executor/13522:
[  600.299265][   T34]  #0: ffffffff8fdcff00 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  600.317670][   T34] 2 locks held by syz-executor/14507:
[  600.326867][   T34] 2 locks held by syz-executor/14514:
[  600.349816][   T34] 
[  600.350622][   T34] =============================================
[  600.350622][   T34] 
[  600.373237][   T34] NMI backtrace for cpu 1
[  600.373251][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  600.373262][   T34] Tainted: [L]=SOFTLOCKUP
[  600.373265][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  600.373269][   T34] Call Trace:
[  600.373273][   T34]  <TASK>
[  600.373277][   T34]  dump_stack_lvl+0xe8/0x150
[  600.373289][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  600.373299][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  600.373307][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  600.373316][   T34]  sys_info+0x135/0x170
[  600.373324][   T34]  watchdog+0xfd3/0x1030
[  600.373337][   T34]  ? watchdog+0x1c9/0x1030
[  600.373349][   T34]  kthread+0x388/0x470
[  600.373358][   T34]  ? __pfx_watchdog+0x10/0x10
[  600.373367][   T34]  ? __pfx_kthread+0x10/0x10
[  600.373377][   T34]  ret_from_fork+0x514/0xb70
[  600.373385][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  600.373393][   T34]  ? __switch_to+0xc79/0x1410
[  600.373404][   T34]  ? __pfx_kthread+0x10/0x10
[  600.373413][   T34]  ret_from_fork_asm+0x1a/0x30
[  600.373426][   T34]  </TASK>
[  600.373429][   T34] Sending NMI from CPU 1 to CPUs 0:
[  600.411955][    C0] NMI backtrace for cpu 0
[  600.411972][    C0] CPU: 0 UID: 0 PID: 5823 Comm: kworker/u8:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  600.411990][    C0] Tainted: [L]=SOFTLOCKUP
[  600.411994][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  600.412002][    C0] Workqueue: krds_cp_wq#5/0 rds_connect_worker
[  600.412020][    C0] RIP: 0010:rcu_lockdep_current_cpu_online+0x6a/0x120
[  600.412038][    C0] Code: 00 00 49 be 00 00 00 00 00 fc ff df 48 8d 1c dd 90 57 26 8e 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 c6 df 85 00 <48> 8b 03 48 8d 98 80 ee 3a 93 48 8d b8 a8 ee 3a 93 48 89 f8 48 c1
[  600.412047][    C0] RSP: 0018:ffffc90006ec7510 EFLAGS: 00000246
[  600.412057][    C0] RAX: 1ffffffff1c4caf2 RBX: ffffffff8e265790 RCX: 0000000080000001
[  600.412065][    C0] RDX: 0000000000000000 RSI: ffffffff8c28aec0 RDI: ffffffff8c28ae80
[  600.412073][    C0] RBP: dffffc0000000000 R08: ffffffff823c8b6a R09: ffffffff8e95cd60
[  600.412081][    C0] R10: dffffc0000000000 R11: ffffed100464f040 R12: 000000000002d819
[  600.412089][    C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000001000
[  600.412097][    C0] FS:  0000000000000000(0000) GS:ffff88818dc8d000(0000) knlGS:0000000000000000
[  600.412106][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  600.412113][    C0] CR2: 00007f05e094d008 CR3: 00000001149de000 CR4: 00000000000006f0
[  600.412229][    C0] Call Trace:
[  600.412236][    C0]  <TASK>
[  600.412243][    C0]  rcu_read_lock_held+0x1e/0x50
[  600.412259][    C0]  page_ext_lookup+0xe7/0x180
[  600.412274][    C0]  ? __page_table_check_zero+0x6a/0x3e0
[  600.412288][    C0]  __page_table_check_zero+0x135/0x3e0
[  600.412302][    C0]  ? __reset_page_owner+0x148/0x1f0
[  600.412316][    C0]  __free_frozen_pages+0xbd7/0xd30
[  600.412333][    C0]  __slab_free+0x274/0x2c0
[  600.412351][    C0]  qlist_free_all+0x99/0x100
[  600.412364][    C0]  ? security_inode_alloc+0x39/0x310
[  600.412379][    C0]  kasan_quarantine_reduce+0x148/0x160
[  600.412393][    C0]  __kasan_slab_alloc+0x22/0x80
[  600.412408][    C0]  kmem_cache_alloc_noprof+0x2bc/0x650
[  600.412421][    C0]  ? security_inode_alloc+0x39/0x310
[  600.412434][    C0]  ? kmem_cache_alloc_noprof+0x15a/0x650
[  600.412448][    C0]  security_inode_alloc+0x39/0x310
[  600.412463][    C0]  inode_init_always_gfp+0x9c8/0xda0
[  600.412478][    C0]  ? __pfx_sock_alloc_inode+0x10/0x10
[  600.412489][    C0]  alloc_inode+0x82/0x1b0
[  600.412501][    C0]  __sock_create+0x12d/0x9d0
[  600.412513][    C0]  ? register_lock_class+0x31/0x2e0
[  600.412528][    C0]  rds_tcp_conn_path_connect+0x2d7/0x930
[  600.412546][    C0]  ? __pfx_rds_tcp_conn_path_connect+0x10/0x10
[  600.412557][    C0]  ? do_raw_spin_unlock+0x4d/0x210
[  600.412574][    C0]  ? process_scheduled_works+0xa70/0x1860
[  600.412586][    C0]  ? process_scheduled_works+0xa70/0x1860
[  600.412600][    C0]  rds_connect_worker+0x1d8/0x290
[  600.412611][    C0]  ? process_scheduled_works+0xa70/0x1860
[  600.412623][    C0]  process_scheduled_works+0xb5d/0x1860
[  600.412643][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  600.412657][    C0]  ? assign_work+0x3d5/0x5e0
[  600.412669][    C0]  worker_thread+0xa53/0xfc0
[  600.412689][    C0]  kthread+0x388/0x470
[  600.412703][    C0]  ? __pfx_worker_thread+0x10/0x10
[  600.412714][    C0]  ? __pfx_kthread+0x10/0x10
[  600.412727][    C0]  ret_from_fork+0x514/0xb70
[  600.412740][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  600.412751][    C0]  ? __switch_to+0xc79/0x1410
[  600.412767][    C0]  ? __pfx_kthread+0x10/0x10
[  600.412781][    C0]  ret_from_fork_asm+0x1a/0x30
[  600.412800][    C0]  </TASK>
[  601.503711][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  601.506304][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  601.510320][   T34] Tainted: [L]=SOFTLOCKUP
[  601.512084][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  601.515891][   T34] Call Trace:
[  601.517207][   T34]  <TASK>
[  601.518412][   T34]  vpanic+0x56c/0xa60
[  601.520026][   T34]  ? __pfx___schedule+0x10/0x10
[  601.521987][   T34]  ? __pfx_vpanic+0x10/0x10
[  601.523827][   T34]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  601.526308][   T34]  panic+0xc5/0xd0
[  601.527828][   T34]  ? __pfx_panic+0x10/0x10
[  601.529660][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  601.531834][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  601.534280][   T34]  watchdog+0x102c/0x1030
[  601.535936][   T34]  ? watchdog+0x1c9/0x1030
[  601.537720][   T34]  kthread+0x388/0x470
[  601.539251][   T34]  ? __pfx_watchdog+0x10/0x10
[  601.541156][   T34]  ? __pfx_kthread+0x10/0x10
[  601.543011][   T34]  ret_from_fork+0x514/0xb70
[  601.544886][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  601.546960][   T34]  ? __switch_to+0xc79/0x1410
[  601.548892][   T34]  ? __pfx_kthread+0x10/0x10
[  601.550785][   T34]  ret_from_fork_asm+0x1a/0x30
[  601.552708][   T34]  </TASK>
[  601.554615][   T34] Kernel Offset: disabled
[  601.555971][   T34] Rebooting in 86400 seconds..
