last executing test programs:

5m17.571687407s ago: executing program 32 (id=172):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0xa, "09409400"}, @local=@item_012={0x0, 0x2, 0x8}, @local=@item_4={0x3, 0x2, 0xa}]}}, 0x0}, 0x0)

4m9.728271041s ago: executing program 33 (id=1065):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4af, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000005c0), 0x2, r1}, 0x38)

3m53.315277103s ago: executing program 3 (id=1256):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

3m53.31499125s ago: executing program 3 (id=1258):
prctl$PR_SET_MM(0x46, 0x2, &(0x7f000030d000/0x3000)=nil)

3m53.256802031s ago: executing program 3 (id=1260):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_COPY$syz(r0, 0x400448c9, 0x0)

3m53.256564368s ago: executing program 3 (id=1262):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0)

3m53.179431148s ago: executing program 3 (id=1265):
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005980)={0x0, <r1=>0x0}, &(0x7f0000000ec0)=0xc)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x24}], 0x1}, 0x0)

3m52.875525077s ago: executing program 3 (id=1266):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x200000}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "122000"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000200)="669a", 0x2}], 0x1)
recvfrom$inet6(r0, &(0x7f0000000300)=""/3, 0x3, 0x40000041, 0x0, 0x11)

3m52.863077205s ago: executing program 34 (id=1266):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x200000}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "122000"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000200)="669a", 0x2}], 0x1)
recvfrom$inet6(r0, &(0x7f0000000300)=""/3, 0x3, 0x40000041, 0x0, 0x11)

3m44.82192692s ago: executing program 5 (id=1344):
syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1014800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x42180, 0x158)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e8b, &(0x7f0000000080)={@desc={0x101d00, 0x0, @desc1}})

3m44.41535843s ago: executing program 5 (id=1345):
r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
io_setup(0x5ff, &(0x7f0000000400)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x8000000000000002, 0x0, 0x2, r0}])

3m44.174789351s ago: executing program 5 (id=1348):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
lsm_list_modules(0x0, &(0x7f0000000000), 0x0)

3m44.096900193s ago: executing program 5 (id=1350):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fcffffff0000000000e9000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2008410, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x5549, &(0x7f0000003d80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x40010)

3m43.55489174s ago: executing program 5 (id=1360):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0x40, 0x0, 0xfe, 0x60fa})

3m43.065951852s ago: executing program 5 (id=1372):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = dup(r0)
read$dsp(r1, &(0x7f0000000000)=""/59, 0x3b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600})

3m42.99292238s ago: executing program 35 (id=1372):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = dup(r0)
read$dsp(r1, &(0x7f0000000000)=""/59, 0x3b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600})

3m35.061449394s ago: executing program 2 (id=1433):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000140)=0x8)

3m35.061305522s ago: executing program 2 (id=1434):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40002120, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1003, 0x4})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

3m35.051294634s ago: executing program 2 (id=1436):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0xffff, @private=0xa010100}, {0x0, @local}, 0x0, {0x2, 0x4e23, @multicast1}, 'wg1\x00'})

3m34.995827197s ago: executing program 2 (id=1437):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f00000004c0)={[{@nobarrier}, {@gid}, {}, {@force}, {}, {@nodecompose}, {@nls={'nls', 0x3d, 'default'}}]}, 0x44, 0x6fc, &(0x7f0000003180)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000cd5, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x0, 0x307, &(0x7f0000000080)="$eJzs3U1rE1sYwPEnaV6a9vami8vlclE4VBBFOjQBdy4s0oIYUNpGsIIwtVMNmSYlEwoRsV0Ibl276MKlCCK4cyPiths/gW+7brqzYHFkcibpNBnStNJX/79Fczrnec6cM2emnZ62k7VLT+eLc47xw42Jx3VdVzR3yS8sy/kPK59PT77/S3+u1PjoVCarVFREbj98OfSu2n/zzd9vk7I6eGdtPftt9dSUyM+p+xJVBUeVvDbVTLlcjXjJswWnaCh1w7ZMx1KFkmNVqsqs15sztqXm7PLCQk2ZpdmBvoWK5TjKLNVU0aqpallVKzVl3jMLJWUYhhroE4jIYLMUbauLdErMv9hwXVn3Jii57M19SPRyoxD3X5O/11kcJS3z3zG27eTo2c+e4SBsuLHm/Cd2mH+cPPr6//Ksm+sfJ8/krelro7nc2IRSvSLzTxbzi3n9qus/9UtBbLFkZeLC9Ka+P9Qk4n0cv5obG1F1g3J2fsnPX1rM628Oo3N+fkbS3n1KIF8a+Rmdr7bnx6UvmJ+VtPwTnp9t5Es0kJ+Qc2cC+Yak5eNdKYsts/X73K38RxmlrlzPtew/VY8DAAAAAAAAAOA4MlTT1vp9pPmr3pRhJOt/8dGsT3mbvTgd0FxfH5G0bIavz4+Eru/H5P/YIQ4cAAAAAIA/iFN7UDRt26rsviBdxPQ8T3XYRVxEvILI4yGvMx0b/NfvcUuV10ZIVkJE2tvp6abPfiF1Ue/v1YTfMdnrgdrHQlREglv0P2t4g7dfN2JSYcfHie7qBBhOtB9507Z7D3TIwZGK67qhwdK7txM7GTrAbgqRzcaW/0Jj3MjO7bimHddbGhfmTnu/HH45dFnwZl/PYOuBGv6q27U7fNH43lziAwAAAHCMBH5wAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAh2RPT2JrPLd/e5X4bxHf/ki21veJ57n/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6gXwEAAP//kaGzIA==")
getdents64(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0)
ioctl$FIBMAP(r1, 0x1, 0xfffffffffffffffe)
renameat2(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file0\x00', 0x2)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)

3m34.933779835s ago: executing program 2 (id=1439):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0)
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000240)=0xffffffff)

3m34.933582899s ago: executing program 2 (id=1440):
socket$nl_generic(0x10, 0x3, 0x10)
gettid()
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

3m34.767806982s ago: executing program 36 (id=1440):
socket$nl_generic(0x10, 0x3, 0x10)
gettid()
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

3m24.883310273s ago: executing program 4 (id=1578):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r2, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000006c0)={0x2020}, 0x2020)

3m24.682132534s ago: executing program 4 (id=1579):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001)
socket$kcm(0x10, 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udp\x00')
preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000180)=""/131, 0x83}], 0x1, 0x0, 0x7fffffff)
socket$inet6_sctp(0xa, 0x801, 0x84)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)

3m23.002126376s ago: executing program 4 (id=1581):
socket(0x10, 0x3, 0x0)
r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002500)={0x10, &(0x7f0000000040)={0x0, 0xe}, 0x0, 0x0})

3m20.424015782s ago: executing program 4 (id=1596):
mkdir(&(0x7f0000005740)='./file0\x00', 0x3b)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]})
chdir(&(0x7f00000000c0)='./file0\x00')
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000003, &(0x7f00000001c0)=ANY=[@ANYBLOB="0004335a6ca6dcd044f34129a1bb153dc18db764b2193afebb4507cf8432ca2b997dbee442d13dd0fe47330a4fac7bca55c7c7d58dc4d6df1441247f56fbe83190fff534f4f68f41939d6caa488194c8f7e2d60e6b41b2e3bb73f41c35aca75adf7c2dbf40adfeab6f4727505ded66824115d8c930a851e1845aef030d8116bba1cc8c49090b37b4cebfd81ba61b0b3e8bc849256f5bed13fb90b00ee1e3943d33e6357f6e9b06fee104c346ac228318bd2499dd18f2ef4c1d47d55bd9e3c024cc65387fd261bb1ed6776d75b56e5a5f73011182ce8b91db230418107c0276656c05e4cd"], 0x22, 0x622d, &(0x7f000000e540)="$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")

3m20.062069078s ago: executing program 4 (id=1597):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

3m19.985080992s ago: executing program 4 (id=1598):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x162)

3m19.911190985s ago: executing program 37 (id=1598):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x162)

3m11.405257501s ago: executing program 6 (id=1756):
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x999, 0x5932}}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)

3m11.405075234s ago: executing program 6 (id=1757):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m11.335499516s ago: executing program 6 (id=1758):
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r2=>0x0})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r2}, 0xc)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xd, r2, 0xfffffffc}, 0xc)

3m11.28580405s ago: executing program 6 (id=1759):
r0 = landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0x24, 0x0, 0x0)
syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r6, 0x4c00, r5)
ioctl$LOOP_SET_FD(r6, 0x4c00, r6)
dup2(r5, r2)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x8)
r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$dsp(r8, &(0x7f00000001c0)="5cba91", 0x3)
ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000000100)=0xfffffff7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
timer_create(0x1, &(0x7f00000004c0)={0x0, 0x30, 0x1}, &(0x7f0000000500)=<r9=>0x0)
timer_settime(r9, 0x0, &(0x7f0000000580), &(0x7f00000005c0))
landlock_restrict_self(r0, 0x0)
socket$unix(0x1, 0x1, 0x0)

3m10.587548621s ago: executing program 6 (id=1773):
r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, 0x0, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, 0x0, 0x20000000)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0xfffffffffffffe01)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

3m10.024460728s ago: executing program 6 (id=1777):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r1=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}})

3m9.921327355s ago: executing program 38 (id=1777):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r1=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}})

3m4.785136841s ago: executing program 9 (id=1825):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000040))

3m4.770769032s ago: executing program 9 (id=1826):
r0 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r0, &(0x7f000000b4c0)=[{{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000000)="c7bbce4ebe91b4051dc80000000000000000000000000000cf811c05", 0x1c}, {0x0}], 0x2}}], 0x1, 0x488c4)

3m4.724965985s ago: executing program 9 (id=1828):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

3m4.635238159s ago: executing program 9 (id=1829):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@errors_remount}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k1imSTJJUkuSZIkSW4JSZMcSUgMuSUNSch1SC5DSC4Tk8b9fr8kJEmTJCG5Jev/Ef7qVL9zzu/0O86neb6fz/5Yz+z9rP287/Ne1t6YbzoOqtageuV6RAT/FrzwRxIAxAJAPwC4BgACACgdVzru/P7sEpP+vZOwP9fDqVe6AnYlcf+zNu5/1sb9z9q4/1kb9z9r4/5nbdz/rI37z1hWtnFq/mt5y7ob3///66vzh3v4+/8vJLPE6C9Wl7i+E0DMP5vC/c/auP9/WcE/cxD3P2vj/mdVsVe6APZfgN//f0lNfh1m+8MDuf9ZG/efsazsSt9/vtIbRLL2c3ClX3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxrKGU/6i0+AVAFwKr3RdjDHGGGOMMcYY+/P4bFe6AsYYY4wxxhhjjP3fQxAgQUEAMZANYiE75AABAFdDLrgGInAtxMF1kBuuhzyQF/JBfoiHAlAQNBiwQBBCISgMUbgBisCNUBRugmJQHByUgAS4GUrCLVAKboXScBuUgduhLJSD8lAB7oCKcCdUgrugMtwNVaAqVIPqcA/UgHuhJtwHteB+qA0PQB14EOrCQ1APHob68Ag0gEehITwGjaAxNIGm0Ox/lf8idIWXoBt0hyToAT3hZegFvaEP9IV+8Ar0h1dhALwGyTAQBsHrMBjegCHwJgyFYTAc3oIRMBJGwWgYA2MhBcbBeHgbJsA7MBEmwWSYAqkwFabBuzAdZsBMeA9mwfswG+bAXJgHafABzIcFkA4fwkL4CDJgESyGJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXb4GHbAJ7ATdsFu+BT2wGf/Yv7Jv8vvhICAAgUqVBiDMRiLsZgDc2BOzIm5MBdGMIJxGIe5MTfmwTyYD/NhPMZjQSyIBg0SEhbCQhjFKBbBIlgUi2IxLIYOHSZgApbEW7AUlsLSWBrLYBksi+WwHFbAClgRK2IlrISVsTJWwSpYDavhPXgP9sCaWBNrYS2sjbUv3Z7CelgP62N9bIANsCE2xEbYCJtgE2yGzbA5NscW2AJbYStsja2xDbbBREzEttgW22E7bI/tsQN2wI7YETthZ+yc+WI2wJfwJeyOVUQP7Ik9sRcmZ+uDfbEvvoL98VV8FV/DZByIg/B1fB3fwCF4AofiMByOw7GiGImjcDSSGIspmILjcTxOwAk4ESfhJJyCqTgVp+E0nI4zcAa+h7PwfXwf5+AcnIdpmIbzcQGmYzouxJOYgYtwMS7BpbgMl+IKXIkrcDWuwdW4DtfhBtyAm3ATbsEtuA234ceoAPAT3IW7MBn34B7ci3txH+7D/bgfMzETD+ABPIgH8RAewsN4GI/gUTyGR/E4HscTeBJP4Sk8g2fwLD4f/1X9j29alQziPCWUiBExIlbEihwih8gpcopcIpeIiIiIE3Eit8gt8og8Ip/IJ+JFvCgoCgojjCARxgCAiIqoKCKKiKKiqCgmigknnEgQCaKkKClKiVKitLhNlBG3i7KinGjpKogKoqJo5SqJu0RlUVlUEVVFNVFdVBc1RA1RU9QUtUQtUVvUFnXEg6Ku6IF98GFxvjMNxEBsKAZhI9FYyIufYM3FEGwhWopW4kkxDIdiG9HcJYpnRFsxCtuJv4nR+JzoIMZiR/GC6CQ6iy7iRdFVtHDdRHcxEXuInmIK9hK9RR/RV0zHquI9nJW9mnhNJIuBYpB4XczDN8QQ8aYYKoaJ4eItMUKMFKPEaDFGjBUpYpwYL94WE8Q7YqKYJCaLKSJVTBXTxLtiupghZor3xCzxvpgt5oi5Yp5IEx+I+WKBSBcfioXiI5EhFonFYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie3iY7FDfCJ2il1it/hU7BGfib3ic7FPfCH2iy9FpvhKHBBfi4PiG3FIfCsOi+/EEXFUHBPfi+PiB3FCnBSnxGlxRvwozoqfxDnhBUiUQkqpZCBjZDYZK7PLHPIqmVMGF5/da2WcvE7mltfLPDKvzCfzy3hZQBaUWhppJclQFpKFZVTeIIvIG2VReZMsJotLJ0vIBHmzLClvkaXkrbK0vE2WkbfLsrKcLC8ryDtkRXmnhMiFc1SRVWU1WV3eI5PgXllT3idryftlbfmArCMflHXlQ7KefFjWl4/IBvJR2VA+JhvJxrKJbCqbycdlc/mEbCFbylbySdlaPiXbyKdlonxGtpX+4kvkOdlBPi87yhdkJ9lZdpE/yXPSy26yu4QeIHvKl2Uv2Vv2kX1lP/mK7C9flQPkazJZDpSD5OtysHxDDpFvyqFymBwu35Ij5Eg5So6WY+RYmSLHyfHybTlBviMnyklyspwiU+VU2efiTDOl/If5b/9O/oCfz75BbpSb5Ga5RW6V2+R2+bHcIXfInXKn3C13yz1yj9wr98p9cp/cL/fLTJkpD8gD8qA8KA/JQ/KwPCyPyKPytPxeHpc/yBPypDwpT8sz8ow8e/E5AIVKKKmUClSMyqZiVXaVQ12lcqqrVS51jYqoa1Wcuk7lVterPCqvyqfyq3hVQBVUWhllFalQFVKFVVTdgBdfMKqYKq6cKqES1M3/Sr4qom5URdVNv8q/VF/SH9TXTDVTzVVz1UK1UK1UK9VatVZtVBuVqBJVW9VWtVPtVHvVXnVQHVRH1VF1Up1UF9VFdVVdVTfVTSWpJNVTvax6qd6qj+qr+qlXVH/VXw1QA1SySlaD1CA1WA1WQ9QQNVQNVcPVcDVCjVCj1Cg1Ro1RKSpFjVfj1QQ1QU1UE9VkNVmlqlQ1TU1T09V0NVPNVLPULDVbzVZz1VyVptLUfDVfpat0tVAtVBlqkVqklqglaplaplaoFWqVWqXWqDVqnVqnMtRGtVFtVpvVVrVVbVfb1Q61Q+1UO9VutVvtUXvUXrVX7VP71H61X2WqTHVAHVAH1UF1SB1Sh9VhdUQdUcfUMXVcHVcn1Al1Sp1SZ9QZdVadVefUufPLvkAEIlCBCmKCmCA2iA1yBDmCnEHOIFeQK4gEkSAuiAtyB9cHeYK8Qb4gfxAfFAgKBjowgQ3ExaZHgxuCIsGNQdHgpqBYUDxwQYkgIbg5KBncEpQKbg1KB7cFZYLbg7JBuaB8UCG4I6gY3BlUCu4KKgd3B1WCqkG1oHpwT1AjuDeoGdwX1AruD2oHDwR1ggeDusFDQb3g4aB+8EjQIHg0aBg8FjQKGgdNgqZBsz91fu9P5H3CddPddZLuoXvql3Uv3Vv30X11P/2K7q9f1QP0azpZD9SD9Ot6sH5DD9Fv6qF6mB6u39Ij9Eg9So/WY/RYnaLH6fH6bT1Bv6Mn6kl6sp6iU/VUPU2/q6frGXqmfk/P0u/r2XqOnqvn6TT9gZ6vF+h0/aFeqD/SGXqRXqyX6KV6mV6uV+iVepVerdfotXqdXq836I16k96st+itepverj/WO/QneqfepXfrT/Ue/Zneqz/X+/QXer/+Umfqr/QB/bU+qL/Rh/S3+rD+Th/RR/Ux/b0+rn/QJ/RJfUqf1mf0j/qs/kmf0/784v7817tRRpkYE2NiTazJYXKYnCanyWVymYiJmDgTZ3Kb3CaPyWPymXwm3sSbgqagOY8MmUKmkImaqCliipiipqgpZooZZ5xJMAmmpClpSplSprQpbcqYMqasKWvKm/LmDnOHudPcae4yd5m7zd2mqqlqqpvqpoapYWqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkmpgmpplpZpqb5qaFaWFamVamtWlt2pg2JtEkmramrWln2pn2pr3pYDqYjqaj6WQ6mS6mi+lquppupptJMkmmp+lpeplepo/pY/qZfqa/6W8GmAEm2SSbQWaQGWwGmyFmiBlqhpnh5xeqZqQZZUZ/O8aMNSkmxYw3480EM8FMNBPNZDPZpJpUM81MM9PNdDPTzDSzzCwz28w2c81ck2bSzHwz36SbdLPQLDQZJsMsNovNUrPULDfLzUqz0qw2q81aWGvWm/Vmo9loNpvNZqvZarab7WaH2WF2mp1mt9lt9pg9Zq/Za/aZfWa/2W8yTaY5YA6Yg+agOWQOmcPmsDlijphj5pg5bo6bE+aEOWVOmTMm78XvS29ibXabw15lc9qrbS57jf37OJ/Nb+NtAVvQapvH5v1VbKy1Re1Ntpgtbp0tYRPszb+Jy9pytrytYO+wFe2dttJv4hr2XlvT3mdr2fttdXvPr+La9gFbxz5q6yIC2Ma2vm1qG9hHbUP7mG1kG9smtqltbZ+ybezTNtE+Y9vaZ38Tz7cL7Eq7yq62a+xOu8uesqftQfuNPWN/tN1sd9vPvmL721ftAPuaTbYDfxMPt2/ZEXakHWVH2zF27G/iyXaKTbVT7TT7rp1uZ/wmTrMf2Fk23c62c+xcO+/n+HxN6fZDu9B+ZDNsAIvtErvULrPL7Yr/X+sSu86utxvsDvuJ3Wy32K12m91+aSFsd9nd9lO7x35mD9iv7T77hd1vD9lM+9XP8fnHd8h+aw/b7+wRe9Qes9/b4/YH9XPuyF4A9kf7vf3JnrPeAiEBSVIUUAxlo1jKTjnoKspJV1MuuoYidC3F0XWUm66nPJSX8lF+iqcCVJA0GbJEFFIhKkxRuoEulVeMipOjEpRAN1NJuoVK0a1Umm6jMnQ7laVyVJ4q0B1Uke6kSnQXVaa7qQpVpWpUne6hGnQv1aT7qBbdT7XpAapDD1Jdeojq0cNUnx6hBvQoNaTHqBE1pibUlJrR49ScnqAW1JJa0ZPUmp6iNvQ0JdIz1JaepXb0N2pPz1EHep460gvUiTpTF3qRutJL1I26UxL1oJ70MvWi3tSH+lI/eoX606s0gF6jZBpIg+h1Gkxv0BB6k4bSMBpOb9EIGkmjaDSNobGUQuNoPL1NE+gdmkiTaDJNoVSaStPoXZpOM2gmvUez6H2aTXNoLs2jNPqA5tMCSqcPaSF9RBm0iBbTElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDt9TDvoE9pJu2g3fUp76DPaS5/TPvqC9tOXlElf0QH6mg7SN3SIvvXd6Ts6QkfpGH1Px+kHOkEn6RSdpjP0I52ln+gceYIQQxHKUIVBGBNmC2PD7GGO8KowZ3h1mCu8JoyE14Zx4XVh7vD6ME+YN8wX5g/jwwJhwVCHJrQhhWFYKCwcRsMbwiLhjWHREMNiYfHQhSXChPDmsGR4S1gqvDUsHd4WlglvD8uG5cJH768Q3hFWDO8MK4V3hZXDu8MqYdWwWlg9vCesEd4b1gzvC2uF94elwgfCOuGDYd3wobBe+HBYP3wkbBA+GjYMHwsbhY3DJmHTsFn4eNg8fCJsEbYMW4VPhq3Dp8I24dNhYvhM2DZ89uf9Dyz44/1JYY+wZ/hy+HLo/X1ybnReNC36QXR+dEE0PfphdGH0o2hGdFF0cXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10fXRD1Pvq2cChE0465QIX47K5WJfd5XBXuZzuapfLXeMi7loX565zud31Lo/L6/K5/C7eFXAFnXbGWUcudIVcYRd1N7gi7kZX1N3kirnizrkSLsE1dc1cM9fcPeFauJaulXvSPemeck+5p93T7hnX1j3r2rm/ufbuOdfBPe+edy+4Tq6z6+JedF3duFwX3pNJrqfr6Xq5Xq6P6+P6uX6uv+vvBrgBLtklu0FukBvsBrshbogb6oa64W64G+FGuFFulBvjxrgUl+LGu/FugpvgJrqJbrKb7FJdqpvmprnpbrqrOOPCWWa72W6um+vSXJqb786vGdPdQrfQZbgMt9gtdkvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt9Nfc2FSt8ftdXvdPrfP7Xdfukz3lTvgvnYH3TfukPvWHXbfuSPuqDvmvnfH3Q/uhDvpTrnT7oz70Z11P7lzzruUyLjI+MjbkQmRdyITI5MikyNTIqmRqZFpkXcj0yMzIjMj70VmRd6PzI7MicyNzIukRT6IzI8siKRHPowsjHwUyYgsiiyOLIksjSyLeF9gc+gL+cI+6m/wRfyNvqi/yRfzxb3zJXyCv9mX9Lf4Uv5WX9rf5sv4231ZX86X94/5Rr6xb+Kb+mb+cd/cP+Fb+Ja+lX/St/ZP+Tb+aZ/on/Ft/bO+nf+bb++f8x38876jf8F38p19F/+i7+pf8t18d5/ke/ie/mXfy/f2fXxf38+/4vv7V/0A/5pP9gP9IP+6H+zf8EP8m36oH+aHx7zlR1y6RIaxPsWP8+P9236Cf8dP9JP8ZD/Fp/qpfpp/10/3M/xM/56f5d/3s/0cP9fP82n+Az/fL/Dp/kO/0H/kM/yiSzeV/XK/wq/0q/xqv8av9ev8er/Bb/Sb/Ga/xW/12/x2/7Hf4T/xO/0uv9t/6vf4z/xe/7nf57/w+/2XPtN/5Q/4r/1B/40/5L/1h/13/og/6o/57/1x/4M/4U/6U/60P+N/9Gf9T/4c/581xhhjjLF/yrjLQ/HrPRdu5/f4nRzxi4N7AsDVW/Jn/nL/+RXl2jwXxr1FfOsIADzTvePDl7YqVZKSki4emyEhKDwH4NLfBJ0XA5fjRdAKnoJEaAklf7f+3qLzGfoH80dvA8jxi5xYuBxfnv9zAEz6nfkff3L4/DLhqbj/Yf45AEULX87JDpfjRdDq5/srLaHUH9Sft/kv64/97fzZv0gBaPGLnJxwOb5cfwI8Ac9C4q+OZIwxxhhjjDHGLugtyre/dP156V98/t71eby6nJMNLsf/6PqcMcYYY4wxxhhjV95znbs8/XhiYsv2//qg0v8q658eNIT/q5l58LsD7wEu/UQBwL85IcD5gfxPPopN/5FzJV986/z9rqWnfQD/Ha38MwZX+IOJMcYYY4wx9qe7vOj/9c/VlSqIMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLgv4Tv07sSj9GxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Er7fwEAAP//nXwDKg==")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

3m4.634702015s ago: executing program 9 (id=1832):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804)

3m3.445484744s ago: executing program 9 (id=1860):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f1e6ffffffff000000001300000008000300", @ANYRES32=r2, @ANYBLOB="04001300060012000400000006001000fa0000000a000600ffffffffffff00000500e4"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)

3m3.359943617s ago: executing program 39 (id=1860):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f1e6ffffffff000000001300000008000300", @ANYRES32=r2, @ANYBLOB="04001300060012000400000006001000fa0000000a000600ffffffffffff00000500e4"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)

1m46.211270683s ago: executing program 1 (id=2972):
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x36}}, {@check_relaxed}]}, 0x3, 0x54c, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x60)
getdents64(r0, &(0x7f0000000040)=""/225, 0xe1)

1m46.210003058s ago: executing program 1 (id=2974):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000002740)={'mpc624\x00', [0x4f27, 0x8, 0x2, 0x3, 0x5, 0xcc5, 0xf, 0x6, 0xa, 0xe8aa, 0x2, 0x1, 0xffffbffd, 0x1, 0x0, 0x1, 0x0, 0x1a449, 0x3ff, 0x40000003, 0x200099, 0xcaa7, 0x0, 0x20001e57, 0x7, 0xe6b, 0x1003c, 0xd0, 0x2, 0x1, 0xfce]})

1m46.123195732s ago: executing program 1 (id=2975):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x6, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x3f, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840)

1m46.03690227s ago: executing program 1 (id=2981):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x222)

1m45.930149044s ago: executing program 1 (id=2983):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m45.601951857s ago: executing program 1 (id=2989):
r0 = socket$netlink(0x10, 0x3, 0xb)
close(r0)

1m45.548813232s ago: executing program 40 (id=2989):
r0 = socket$netlink(0x10, 0x3, 0xb)
close(r0)

751.090254ms ago: executing program 7 (id=4432):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x1)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

722.804502ms ago: executing program 0 (id=4433):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x28, r1, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="80"}, @NL80211_ATTR_IE={0x4}]}, 0x28}}, 0x4804)

722.315385ms ago: executing program 7 (id=4434):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf}, @CTA_SEQADJ_CORRECTION_POS={0xfffffffffffffe2c, 0x1, 0x1, 0x0, 0x9}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x400c4}, 0x0)

660.367017ms ago: executing program 0 (id=4435):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRESOCT], 0xffc9)

660.223954ms ago: executing program 7 (id=4436):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f0000000300)="11659a431d82681d9b99675b9e580e21", 0x10}], 0x3, 0x0, 0xd8}}], 0x1, 0x8000)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

660.096288ms ago: executing program 0 (id=4437):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x3}, {}, {0x0, 0x0, 0x0, 0xd05}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)

589.257905ms ago: executing program 0 (id=4438):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a00070000000000000000000202"], 0x18}}, 0x0)

589.134683ms ago: executing program 0 (id=4439):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)

589.035155ms ago: executing program 0 (id=4440):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0)
write$nci(r0, 0x0, 0x0)

509.121095ms ago: executing program 7 (id=4441):
unshare(0x22020400)
syz_read_part_table(0x5c3, &(0x7f0000000640)="$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")
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0)

508.883843ms ago: executing program 7 (id=4442):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
ioprio_set$pid(0x3, 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
sendfile(r2, r2, 0x0, 0x7f03)

428.254623ms ago: executing program 7 (id=4443):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x20}}}}}]}}]}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, 'X*^;'}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

354.562086ms ago: executing program 8 (id=4446):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = syz_open_dev$loop(0x0, 0x7b, 0x42042)
preadv2(r1, &(0x7f00000019c0)=[{&(0x7f0000000640)=""/149, 0x95}], 0x1, 0xaad, 0x9, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0xc8)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x3}, 0x1c)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600c, 0x1)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r4}, 0x10)
r5 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0xd, 0x1, 0x8})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

275.973251ms ago: executing program 8 (id=4447):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x1a50400, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100)

275.737483ms ago: executing program 8 (id=4448):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001100)=""/210, 0xd2}, {&(0x7f0000000cc0)=""/246, 0xf6}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000a40)=""/231, 0xe7}, {&(0x7f0000000080)=""/105, 0x69}], 0x5}, 0x4}], 0x4, 0x22, 0x0)

275.448811ms ago: executing program 8 (id=4449):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x7, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8404)

217.130127ms ago: executing program 8 (id=4450):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0xa08813, &(0x7f0000000380)={[{@discard_sync}, {@notreelog}, {@compress_force}, {@compress}, {@flushoncommit}, {@rescue={'rescue', 0x3d, 'imetacsums'}}, {@user_subvol_rm}, {@nodiscard}]}, 0xfb, 0x5142, &(0x7f0000005140)="$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")

0s ago: executing program 8 (id=4451):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000000)='./file3\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0xfd, 0x4442, &(0x7f0000004480)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

680][T13729] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  269.019456][ T9826] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  269.074944][T13735] netlink: 'syz.7.2950': attribute type 10 has an invalid length.
[  269.078128][T13735] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.084802][T13735] batman_adv: batadv0: Removing interface: batadv_slave_0
[  269.090570][T13735] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  270.149867][T13752] loop7: detected capacity change from 0 to 64
[  270.168134][T13752] Trying to free block not in datazone
[  270.269176][T13760] loop8: detected capacity change from 0 to 512
[  270.272494][T13760] EXT4-fs: Ignoring removed nomblk_io_submit option
[  270.275830][T13760] EXT4-fs: Ignoring removed i_version option
[  270.289788][T13760] EXT4-fs (loop8): 1 orphan inode deleted
[  270.292744][T13760] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.327534][T10229] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.385339][T13768] binder: 13767:13768 ioctl c018620b 0 returned -14
[  270.386573][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2965'.
[  270.410315][T13772] netlink: 'syz.7.2966': attribute type 4 has an invalid length.
[  270.536181][T13782] loop7: detected capacity change from 0 to 4096
[  270.539054][T13782] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  270.548625][T13782] ntfs3(loop7): ino=1a, mi_enum_attr
[  270.550407][T13782] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  270.552816][T13782] ntfs3(loop7): ino=1a, mi_enum_attr
[  270.556711][T13782] ntfs3(loop7): Failed to initialize $Extend/$Reparse.
[  270.567947][T13782] ntfs3(loop7): ino=5, "/" ntfs_readdir
[  270.672353][T13790] batadv1: entered promiscuous mode
[  270.792102][T13800] loop7: detected capacity change from 0 to 4096
[  270.796954][T13800] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  270.812232][T13800] ntfs3(loop7): ino=19, mi_enum_attr
[  270.814637][T13800] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  270.822684][T13800] ntfs3(loop7): failed to convert "c46c" to cp855
[  270.831811][T13800] ntfs3(loop7): ino=20, mi_enum_attr
[  271.079074][T13808] loop7: detected capacity change from 0 to 32768
[  271.088688][T13808] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  271.093879][   T12] (kworker/u8:0,12,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  271.119606][ T9826] ocfs2: Unmounting device (7,7) on (node local)
[  271.274784][  T793] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  271.416206][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  271.421179][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  271.424050][   T24] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  271.427839][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  271.430915][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  271.435052][  T793] usb 9-1: Using ep0 maxpacket: 8
[  271.439137][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  271.441625][  T793] usb 9-1: config 162 has an invalid interface number: 142 but max is 1
[  271.446844][  T793] usb 9-1: config 162 has an invalid interface number: 112 but max is 1
[  271.450171][  T793] usb 9-1: config 162 has no interface number 0
[  271.461789][  T793] usb 9-1: config 162 has no interface number 1
[  271.463957][  T793] usb 9-1: config 162 interface 142 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  271.468046][  T793] usb 9-1: config 162 interface 112 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  271.471539][  T793] usb 9-1: config 162 interface 112 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  271.475450][  T793] usb 9-1: config 162 interface 112 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  271.479138][  T793] usb 9-1: config 162 interface 112 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  271.482453][  T793] usb 9-1: config 162 interface 112 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  271.486924][  T793] usb 9-1: config 162 interface 142 has no altsetting 0
[  271.489127][  T793] usb 9-1: config 162 interface 112 has no altsetting 0
[  271.493143][  T793] usb 9-1: New USB device found, idVendor=0557, idProduct=2008, bcdDevice=a7.08
[  271.498068][  T793] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.500742][  T793] usb 9-1: Product: syz
[  271.502068][  T793] usb 9-1: Manufacturer: syz
[  271.503550][  T793] usb 9-1: SerialNumber: syz
[  271.568337][T13818] chnl_net:caif_netlink_parms(): no params data found
[  271.577179][   T24] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  271.583318][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.591372][   T24] usb 8-1: Product: syz
[  271.592923][   T24] usb 8-1: Manufacturer: syz
[  271.596285][   T24] usb 8-1: SerialNumber: syz
[  271.602372][   T24] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  271.642143][   T24] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  271.652695][T13818] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.660262][T13818] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.662748][T13818] bridge_slave_0: entered allmulticast mode
[  271.666104][T13818] bridge_slave_0: entered promiscuous mode
[  271.671292][T13818] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.674143][T13818] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.676521][T13818] bridge_slave_1: entered allmulticast mode
[  271.679650][T13818] bridge_slave_1: entered promiscuous mode
[  271.706297][T13818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.714777][  T793] pl2303 9-1:162.142: required endpoints missing
[  271.715963][T13818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.719221][  T793] pl2303 9-1:162.112: required interrupt-in endpoint missing
[  271.725077][  T793] usb 9-1: USB disconnect, device number 18
[  271.750069][T13818] team0: Port device team_slave_0 added
[  271.754379][T13818] team0: Port device team_slave_1 added
[  271.781468][T13818] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.784483][T13818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.792966][T13818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  271.798173][T13818] batman_adv: batadv0: Adding interface: batadv_slave_1
[  271.800584][T13818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.809094][T13818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.837711][T13818] hsr_slave_0: entered promiscuous mode
[  271.840026][T13818] hsr_slave_1: entered promiscuous mode
[  272.115256][   T47] usb 8-1: USB disconnect, device number 16
[  272.246144][T13818] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  272.250526][T13818] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  272.255761][T13818] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  272.260564][T13818] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  272.320195][T13818] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.332338][T13818] 8021q: adding VLAN 0 to HW filter on device team0
[  272.338096][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.340472][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.349280][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.351638][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  272.440877][T13818] 8021q: adding VLAN 0 to HW filter on device batadv0
[  272.461156][T13818] veth0_vlan: entered promiscuous mode
[  272.468198][T13818] veth1_vlan: entered promiscuous mode
[  272.485500][T13818] veth0_macvtap: entered promiscuous mode
[  272.489259][T13818] veth1_macvtap: entered promiscuous mode
[  272.497919][T13818] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.503750][T13818] batman_adv: batadv0: Interface activated: batadv_slave_1
[  272.511795][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.515498][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.521205][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.525276][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.571678][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.574526][ T5891] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  272.577287][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.590028][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.592606][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.616287][   T33] audit: type=1326 audit(784.515:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.7.2995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2598ebe9 code=0x7ffc0000
[  272.624353][   T33] audit: type=1326 audit(784.515:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.7.2995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2598ebe9 code=0x7ffc0000
[  272.631281][   T33] audit: type=1326 audit(784.515:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.7.2995" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca2598d550 code=0x7ffc0000
[  272.640123][   T33] audit: type=1326 audit(784.526:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.7.2995" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca2598d550 code=0x7ffc0000
[  272.653178][   T33] audit: type=1326 audit(784.526:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.7.2995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2598ebe9 code=0x7ffc0000
[  272.666546][   T33] audit: type=1326 audit(784.526:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.7.2995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2598ebe9 code=0x7ffc0000
[  272.677151][   T33] audit: type=1326 audit(784.526:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.7.2995" exe="/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fca2598ebe9 code=0x7ffc0000
[  272.686114][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2997'.
[  272.698674][   T33] audit: type=1326 audit(784.526:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.7.2995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2598ebe9 code=0x7ffc0000
[  272.715607][   T33] audit: type=1326 audit(784.526:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.7.2995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2598ebe9 code=0x7ffc0000
[  272.722242][   T33] audit: type=1326 audit(784.526:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.7.2995" exe="/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fca2598ebe9 code=0x7ffc0000
[  272.735959][ T5891] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  272.739220][ T5891] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  272.750646][ T5891] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  272.755118][ T5891] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  272.757856][ T5891] usb 9-1: SerialNumber: syz
[  272.943381][   T24] usb 8-1: Service connection timeout for: 256
[  272.948203][   T24] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services
[  272.956427][   T24] ath9k_htc: Failed to initialize the device
[  272.960808][   T47] usb 8-1: ath9k_htc: USB layer deinitialized
[  272.998461][ T5891] usb 9-1: 0:2 : does not exist
[  273.081491][ T5891] usb 9-1: USB disconnect, device number 19
[  273.493138][ T5853] Bluetooth: hci1: command tx timeout
[  274.022312][T13868] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3004'.
[  274.538132][T13892] loop8: detected capacity change from 0 to 32768
[  274.588508][T13892] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  274.588521][T13892]   allowing incompatible features above 0.0: (unknown version)
[  274.588526][T13892]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  274.602962][T13892] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  274.606191][T13892] bcachefs (loop8): recovering from clean shutdown, journal seq 10
[  274.609503][T13892] bcachefs (loop8): Version upgrade required:
[  274.609503][T13892] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  274.609503][T13892] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  274.609503][T13892]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  274.639082][T13892] bcachefs (loop8): dropping and reconstructing all alloc info
[  274.650973][T13892] bcachefs (loop8): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4098:U32_MAX len 0 ver 0: (unpack error)
[  274.651026][T13892]   invalid variable length fields, deleting
[  274.662438][T13892] bcachefs (loop8): accounting_read... done
[  274.668790][T13892] bcachefs (loop8): alloc_read... done
[  274.671721][T13892] bcachefs (loop8): snapshots_read... done
[  274.674636][T13892] bcachefs (loop8): check_allocations... done
[  274.693012][T13892] bcachefs (loop8): going read-write
[  274.722328][ T5876] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  274.724246][T13892] bcachefs (loop8): Fixed errors, running fsck a second time to verify fs is clean
[  274.731005][T13892] bcachefs (loop8): done starting filesystem
[  274.734194][   T29] bcachefs (loop8): bucket incorrectly unset in freespace btree
[  274.734229][   T29]   u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing
[  274.744297][T13892] bcachefs (loop8): dirent to missing inode:
[  274.744313][T13892]   u64s 7 type dirent 4096:189491840996961599:U32_MAX len 0 ver 0: file0 -> 4098 type dir
[  274.744319][T13892]   emergency read only at seq 11
[  274.744464][ T5891] bcachefs (loop8): going read-only
[  274.744476][ T5891] bcachefs (loop8): finished waiting for writes to stop
[  274.749939][ T5891] bcachefs (loop8): flushing journal and stopping allocators, journal seq 11
[  274.775446][T10229] bcachefs (loop8): shutting down
[  274.780804][ T5891] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 11
[  274.787873][ T5891] bcachefs (loop8): unclean shutdown complete, journal seq 11
[  274.809475][ T5891] bcachefs (loop8): done going read-only, filesystem not clean
[  274.846904][T10229] bcachefs (loop8): shutdown complete
[  274.878404][ T5876] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  274.886064][ T5876] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  274.889007][ T5876] usb 8-1: config 1 has no interface number 0
[  274.966643][ T5876] usb 8-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  274.984721][ T5876] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  274.988628][ T5876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.994751][ T5876] usb 8-1: Product: syz
[  274.996540][ T5876] usb 8-1: Manufacturer: syz
[  274.998464][ T5876] usb 8-1: SerialNumber: syz
[  275.005717][ T5876] usb 8-1: selecting invalid altsetting 1
[  275.411134][ T5876] cdc_ncm 8-1:1.1: failed GET_NTB_PARAMETERS
[  275.413313][ T5876] cdc_ncm 8-1:1.1: bind() failure
[  275.417981][ T5876] usb 8-1: USB disconnect, device number 17
[  275.583042][ T5853] Bluetooth: hci1: command tx timeout
[  275.953177][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3032'.
[  276.196551][T13947] netlink: 'syz.8.3031': attribute type 3 has an invalid length.
[  276.199738][T13947] netlink: 'syz.8.3031': attribute type 1 has an invalid length.
[  276.202438][T13947] netlink: 216 bytes leftover after parsing attributes in process `syz.8.3031'.
[  276.205955][T13947] NCSI netlink: No device for ifindex 33022
[  276.292823][   T47] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  276.442976][   T47] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  276.446474][   T47] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  276.452017][   T47] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  276.455099][   T47] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.462306][   T47] usb 8-1: Product: syz
[  276.464184][   T47] usb 8-1: Manufacturer: syz
[  276.465799][   T47] usb 8-1: SerialNumber: syz
[  276.468850][   T47] usb 8-1: config 0 descriptor??
[  276.474314][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3035'.
[  276.688869][   T47] usb 8-1: USB disconnect, device number 18
[  276.808735][T13973] loop8: detected capacity change from 0 to 256
[  276.815029][T13973] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  276.972468][T13983] nbd: socks must be embedded in a SOCK_ITEM attr
[  276.978175][T13983] block nbd0: shutting down sockets
[  277.108977][T13996] raw_sendmsg: syz.0.3056 forgot to set AF_INET. Fix it!
[  277.313985][T14007] loop7: detected capacity change from 0 to 512
[  277.317836][T14007] EXT4-fs (loop7): Test dummy encryption mode enabled
[  277.320126][T14007] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  277.326253][T14007] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.3061: bad orphan inode 131083
[  277.330493][T14007] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.670851][ T5853] Bluetooth: hci1: command tx timeout
[  277.711173][  T793] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  277.893976][  T793] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  277.909202][  T793] usb 8-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  277.928088][  T793] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  277.939838][  T793] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.031918][  T793] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  278.082521][T14011] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  278.088296][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  278.088304][   T33] audit: type=1800 audit(789.988:83): pid=14011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3061" name="file1" dev="loop7" ino=19 res=0 errno=0
[  278.104726][  T793] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -2
[  279.245665][T14029] sp0: Synchronizing with TNC
[  279.376376][T14031] netlink: 'syz.0.3067': attribute type 21 has an invalid length.
[  279.495561][   T33] audit: type=1326 audit(791.389:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.0.3069" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effbd38ebe9 code=0x0
[  279.519106][T14041] loop8: detected capacity change from 0 to 164
[  279.730826][ T5853] Bluetooth: hci1: command tx timeout
[  279.743854][T14056] netlink: 'syz.8.3078': attribute type 13 has an invalid length.
[  279.774047][T14058] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3079'.
[  279.908873][T14068] loop8: detected capacity change from 0 to 512
[  279.913191][T14068] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  279.917880][T14068] EXT4-fs (loop8): orphan cleanup on readonly fs
[  279.922416][T14068] EXT4-fs error (device loop8): __ext4_iget:5464: inode #11: block 8: comm syz.8.3084: invalid block
[  279.926609][T14068] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3084: couldn't read orphan inode 11 (err -117)
[  279.933834][T14068] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  279.943092][T14068] EXT4-fs (loop8): ext4_remount: Checksum for group 0 failed (57259!=33349)
[  279.959101][T10229] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.177954][ T9830] usb 8-1: USB disconnect, device number 19
[  280.319260][T14083] loop8: detected capacity change from 0 to 1024
[  280.361195][   T27] hfsplus: b-tree write err: -5, ino 4
[  280.446221][T14093] trusted_key: encrypted_key: key trusted:syz not found
[  280.709136][ T9826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.736157][T14097] delete_channel: no stack
[  280.738327][T14097] delete_channel: no stack
[  280.916236][T14103] loop7: detected capacity change from 0 to 32768
[  280.920868][T14103] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3100 (14103)
[  280.928122][T14103] BTRFS info (device loop7 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  280.931837][T14103] BTRFS info (device loop7 state S): using crc32c (crc32c-lib) checksum algorithm
[  280.941726][ T4536] BTRFS warning (device loop7 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  280.947498][   T26] BTRFS warning (device loop7 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  280.954031][   T26] BTRFS warning (device loop7 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  280.961902][   T26] BTRFS warning (device loop7 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x0bc7de37 level 0, ignored
[  280.968869][T14103] BTRFS error (device loop7 state S): chunk 5242880 has missing dev extent, have 0 expect 1
[  280.974282][T14103] BTRFS error (device loop7 state S): failed to verify dev extents against chunks: -117
[  281.008771][T14103] BTRFS error (device loop7 state S): open_ctree failed: -117
[  281.104177][T14118] loop7: detected capacity change from 0 to 1764
[  281.142166][T14120] loop7: detected capacity change from 0 to 2048
[  281.146464][T14120] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  281.384464][T14123] team0: Device ip6gretap1 is up. Set it down before adding it as a team port
[  281.809398][ T5853] Bluetooth: hci1: command tx timeout
[  282.891981][T14141] loop7: detected capacity change from 0 to 512
[  283.054316][T14160] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3118'.
[  283.094739][T14153] fuse: Bad value for 'fd'
[  283.607865][   T47] usb 8-1: new low-speed USB device number 20 using dummy_hcd
[  283.772677][   T47] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  283.775509][   T47] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.780604][   T47] usb 8-1: config 0 descriptor??
[  284.037681][ T9830] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  284.187531][ T9830] usb 9-1: Using ep0 maxpacket: 32
[  284.190950][ T9830] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[  284.193809][ T9830] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  284.196794][ T9830] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[  284.201376][ T9830] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  284.204736][ T9830] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  284.208042][ T9830] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  284.211499][ T9830] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  284.214758][ T9830] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  284.222299][ T9830] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  284.226140][ T9830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.231760][ T9830] usb 9-1: config 0 descriptor??
[  284.439232][ T9830] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  284.643450][ T9830] usb 9-1: USB disconnect, device number 20
[  284.649139][ T9830] usblp0: removed
[  286.035708][   T47] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  286.039128][   T47] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  286.042798][   T47] asix 8-1:0.0: probe with driver asix failed with error -71
[  286.046891][   T47] usb 8-1: USB disconnect, device number 20
[  286.312694][T14206] loop8: detected capacity change from 0 to 40427
[  286.316117][T14206] F2FS-fs (loop8): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  286.318884][T14206] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  286.321770][T14206] F2FS-fs (loop8): build fault injection rate: 18446
[  286.325031][T14206] F2FS-fs (loop8): invalid crc value
[  286.355792][T14206] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  286.359183][T14206] F2FS-fs (loop8): Start checkpoint disabled!
[  286.363603][T14206] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  286.365792][T14206] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  286.373819][T14206] syz.8.3137: attempt to access beyond end of device
[  286.373819][T14206] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  286.389552][   T29] kworker/u9:1: attempt to access beyond end of device
[  286.389552][   T29] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  286.394013][   T29] CPU: 0 UID: 0 PID: 29 Comm: kworker/u9:1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  286.394027][   T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  286.394032][   T29] Workqueue: writeback wb_workfn (flush-7:8)
[  286.394046][   T29] Call Trace:
[  286.394049][   T29]  <TASK>
[  286.394053][   T29]  dump_stack_lvl+0x189/0x250
[  286.394066][   T29]  ? __pfx_dump_stack_lvl+0x10/0x10
[  286.394075][   T29]  ? __pfx_queue_work_on+0x10/0x10
[  286.394083][   T29]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  286.394092][   T29]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  286.394105][   T29]  f2fs_handle_critical_error+0x37c/0x540
[  286.394118][   T29]  f2fs_write_end_io+0x886/0xb60
[  286.394136][   T29]  __submit_merged_bio+0x27a/0x6a0
[  286.394148][   T29]  __submit_merged_write_cond+0x255/0x530
[  286.394160][   T29]  f2fs_write_data_pages+0x261d/0x3000
[  286.394185][   T29]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  286.394201][   T29]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  286.394249][   T29]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  286.394266][   T29]  ? trace_f2fs_writepages+0x7f/0x200
[  286.394276][   T29]  ? f2fs_write_node_pages+0x478/0x6e0
[  286.394295][   T29]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  286.394305][   T29]  do_writepages+0x32e/0x550
[  286.394318][   T29]  ? reacquire_held_locks+0x127/0x1d0
[  286.394325][   T29]  ? writeback_sb_inodes+0x384/0x1010
[  286.394339][   T29]  __writeback_single_inode+0x145/0xff0
[  286.394348][   T29]  ? do_raw_spin_unlock+0x4d/0x240
[  286.394359][   T29]  writeback_sb_inodes+0x6c7/0x1010
[  286.394367][   T29]  ? lockdep_hardirqs_on+0x9c/0x150
[  286.394387][   T29]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  286.394415][   T29]  ? rcu_is_watching+0x15/0xb0
[  286.394428][   T29]  wb_writeback+0x43b/0xaf0
[  286.394440][   T29]  ? queue_io+0x371/0x590
[  286.394451][   T29]  ? __pfx_wb_writeback+0x10/0x10
[  286.394464][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  286.394474][   T29]  wb_workfn+0x409/0xef0
[  286.394489][   T29]  ? __pfx_wb_workfn+0x10/0x10
[  286.394499][   T29]  ? __lock_acquire+0xab9/0xd20
[  286.394515][   T29]  ? process_scheduled_works+0x9ef/0x17b0
[  286.394529][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  286.394536][   T29]  ? process_scheduled_works+0x9ef/0x17b0
[  286.394543][   T29]  ? process_scheduled_works+0x9ef/0x17b0
[  286.394550][   T29]  process_scheduled_works+0xae1/0x17b0
[  286.394571][   T29]  ? __pfx_process_scheduled_works+0x10/0x10
[  286.394592][   T29]  worker_thread+0x8a0/0xda0
[  286.394612][   T29]  kthread+0x711/0x8a0
[  286.394622][   T29]  ? __pfx_worker_thread+0x10/0x10
[  286.394629][   T29]  ? __pfx_kthread+0x10/0x10
[  286.394639][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  286.394646][   T29]  ? lockdep_hardirqs_on+0x9c/0x150
[  286.394654][   T29]  ? __pfx_kthread+0x10/0x10
[  286.394663][   T29]  ret_from_fork+0x3fc/0x770
[  286.394672][   T29]  ? __pfx_ret_from_fork+0x10/0x10
[  286.394683][   T29]  ? __switch_to_asm+0x39/0x70
[  286.394691][   T29]  ? __switch_to_asm+0x33/0x70
[  286.394699][   T29]  ? __pfx_kthread+0x10/0x10
[  286.394709][   T29]  ret_from_fork_asm+0x1a/0x30
[  286.394725][   T29]  </TASK>
[  286.394728][   T29] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  286.709190][T14229] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20000
[  286.810265][T14241] netlink: 'syz.8.3153': attribute type 29 has an invalid length.
[  286.812878][T14241] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3153'.
[  287.972772][ T5853] Bluetooth: hci2: command 0x0406 tx timeout
[  288.789230][T14297] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  288.964747][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3186'.
[  288.972945][   T33] audit: type=1326 audit(800.874:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.0.3187" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effbd38ebe9 code=0x0
[  289.041461][T14325] loop7: detected capacity change from 0 to 164
[  289.058100][T14327] netlink: 'syz.8.3191': attribute type 2 has an invalid length.
[  289.164344][T14343] use of bytesused == 0 is deprecated and will be removed in the future,
[  289.168398][T14343] use the actual size instead.
[  289.168736][T14345] program syz.8.3200 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  289.207450][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3202'.
[  289.214877][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3202'.
[  289.643266][ T9830] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  289.718780][T14365] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3208'.
[  289.794723][ T9830] usb 8-1: Using ep0 maxpacket: 16
[  289.815272][ T9830] usb 8-1: too many configurations: 97, using maximum allowed: 8
[  289.935723][ T9830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  289.940222][ T9830] usb 8-1: config 0 has no interfaces?
[  289.946962][ T9830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  289.952987][ T9830] usb 8-1: config 0 has no interfaces?
[  289.976317][ T9830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  289.981153][ T9830] usb 8-1: config 0 has no interfaces?
[  289.985551][ T9830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  289.989504][ T9830] usb 8-1: config 0 has no interfaces?
[  289.993894][ T9830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  289.998454][ T9830] usb 8-1: config 0 has no interfaces?
[  290.006821][ T9830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  290.010752][ T9830] usb 8-1: config 0 has no interfaces?
[  290.035513][ T9830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  290.039762][ T9830] usb 8-1: config 0 has no interfaces?
[  290.071877][ T9830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  290.075964][ T9830] usb 8-1: config 0 has no interfaces?
[  290.270840][ T9830] usb 8-1: string descriptor 0 read error: -71
[  290.273034][ T9830] usb 8-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c
[  290.277464][ T9830] usb 8-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224
[  290.281928][ T9830] usb 8-1: config 0 descriptor??
[  290.284026][ T9830] usb 8-1: can't set config #0, error -71
[  290.288902][ T9830] usb 8-1: USB disconnect, device number 21
[  290.316662][T14367] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3209'.
[  290.837110][T14377] loop7: detected capacity change from 0 to 256
[  290.849881][T14377] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  290.853252][T14377] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  290.869988][T14377] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  292.326761][T14428] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3235'.
[  292.330472][T14428] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3235'.
[  292.405563][T14429] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  292.428589][T14423] loop8: detected capacity change from 0 to 32768
[  292.482057][T14423] (syz.8.3233,14423,1):ocfs2_verify_heartbeat:839 ERROR: Heartbeat has to be started to mount a read-write clustered device.
[  292.511392][T14423] (syz.8.3233,14423,1):ocfs2_fill_super:1177 ERROR: status = -22
[  292.609944][T14423] syz.8.3233: attempt to access beyond end of device
[  292.609944][T14423] loop8: rw=0, sector=0, nr_sectors = 1 limit=0
[  292.614748][T14423] exFAT-fs (loop8): unable to read boot sector
[  292.617246][T14423] exFAT-fs (loop8): failed to read boot sector
[  292.619460][T14423] exFAT-fs (loop8): failed to recognize exfat type
[  292.823259][ T5876] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  293.069995][ T5876] usb 8-1: config 0 has an invalid interface number: 197 but max is 0
[  293.072757][ T5876] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  293.083298][ T5876] usb 8-1: config 0 has no interface number 0
[  293.085289][ T5876] usb 8-1: config 0 interface 197 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  293.088395][ T5876] usb 8-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  293.092398][ T5876] usb 8-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  293.100037][ T5876] usb 8-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42
[  293.103216][ T5876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.105708][ T5876] usb 8-1: Product: syz
[  293.107029][ T5876] usb 8-1: Manufacturer: syz
[  293.108580][ T5876] usb 8-1: SerialNumber: syz
[  293.111279][ T5876] usb 8-1: config 0 descriptor??
[  293.320062][   T47] usb 8-1: USB disconnect, device number 22
[  293.842761][ T6166] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  293.920458][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3245'.
[  293.947454][T14455] loop7: detected capacity change from 0 to 512
[  293.958939][T14455] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.994454][T14455] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  293.997626][ T6166] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  294.000788][ T6166] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  294.012922][ T6166] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  294.016088][ T6166] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  294.016878][ T9826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.018698][ T6166] usb 9-1: SerialNumber: syz
[  294.238728][ T6166] usb 9-1: 0:2 : does not exist
[  294.245004][ T6166] usb 9-1: USB disconnect, device number 21
[  294.866717][T14471] loop8: detected capacity change from 0 to 32768
[  294.876081][T14471] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  294.916566][T10229] ocfs2: Unmounting device (7,8) on (node local)
[  294.983284][   T33] audit: type=1326 audit(806.897:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.7.3251" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2598ebe9 code=0x7fc00000
[  295.272010][ T5891] usb 9-1: new full-speed USB device number 22 using dummy_hcd
[  295.433816][ T5891] usb 9-1: unable to get BOS descriptor or descriptor too short
[  295.437404][ T5891] usb 9-1: not running at top speed; connect to a high speed hub
[  295.440841][ T5891] usb 9-1: config 4 has an invalid interface number: 32 but max is 0
[  295.443600][ T5891] usb 9-1: config 4 has no interface number 0
[  295.447612][ T5891] usb 9-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50
[  295.450632][ T5891] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.453319][ T5891] usb 9-1: Product: syz
[  295.454707][ T5891] usb 9-1: Manufacturer: syz
[  295.456253][ T5891] usb 9-1: SerialNumber: syz
[  295.666873][ T5891] usb 9-1: Found UVC 0.02 device syz (17dc:0202)
[  295.669133][ T5891] usb 9-1: No valid video chain found.
[  295.671858][ T5891] usb 9-1: USB disconnect, device number 22
[  295.932868][T14490] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.691339][ T5876] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  296.704814][T14503] loop8: detected capacity change from 0 to 32768
[  296.710353][T14503] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  296.723023][T14503] XFS (loop8): Ending clean mount
[  297.190196][ T5891] kernel write not supported for file /sg0 (pid: 5891 comm: kworker/1:4)
[  297.275906][ T5891] IPVS: starting estimator thread 0...
[  297.304581][T14531] netlink: 'syz.7.3273': attribute type 11 has an invalid length.
[  297.307225][T14531] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3273'.
[  297.334306][T14533] netlink: 'syz.7.3274': attribute type 1 has an invalid length.
[  297.336867][T14533] netlink: 232 bytes leftover after parsing attributes in process `syz.7.3274'.
[  297.339824][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3274'.
[  297.361369][T14529] IPVS: using max 79 ests per chain, 189600 per kthread
[  297.468471][T14542] vlan2: entered promiscuous mode
[  297.470303][T14542] gretap0: entered promiscuous mode
[  297.566463][T14546] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3280'.
[  297.593120][T14548] loop7: detected capacity change from 0 to 8
[  297.611519][   T33] audit: type=1800 audit(809.528:87): pid=14548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3281" name="file1" dev="loop7" ino=5 res=0 errno=0
[  297.618266][T14548] SQUASHFS error: Failed to read block 0x2fc: -5
[  297.621477][T14548] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  297.623907][T14548] SQUASHFS error: read_indexes: reading block [2fa:0]
[  297.626129][T14548] SQUASHFS error: Failed to read block 0xfc: -5
[  297.628545][T14548] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  297.632990][T14548] SQUASHFS error: read_indexes: reading block [2fa:0]
[  297.636998][T14548] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  297.639641][T14548] SQUASHFS error: read_indexes: reading block [2fa:0]
[  297.643624][T14548] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  297.646030][T14548] SQUASHFS error: read_indexes: reading block [2fa:0]
[  297.648298][T14548] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  297.650692][T14548] SQUASHFS error: read_indexes: reading block [2fa:0]
[  297.728520][T14554] loop7: detected capacity change from 0 to 256
[  297.742436][T14554] FAT-fs (loop7): Directory bread(block 64) failed
[  297.744767][T14554] FAT-fs (loop7): Directory bread(block 65) failed
[  297.747006][T14554] FAT-fs (loop7): Directory bread(block 66) failed
[  297.749246][T14554] FAT-fs (loop7): Directory bread(block 67) failed
[  297.752328][T14554] FAT-fs (loop7): Directory bread(block 68) failed
[  297.754621][T14554] FAT-fs (loop7): Directory bread(block 69) failed
[  297.756872][T14554] FAT-fs (loop7): Directory bread(block 70) failed
[  297.759534][T14554] FAT-fs (loop7): Directory bread(block 71) failed
[  297.762153][T14554] FAT-fs (loop7): Directory bread(block 72) failed
[  297.764283][T14554] FAT-fs (loop7): Directory bread(block 73) failed
[  297.889089][T14557] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  299.018521][T14563] loop7: detected capacity change from 0 to 32768
[  299.021340][T14563] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3288 (14563)
[  299.026811][T14563] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  299.029973][T14563] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  299.032969][T14563] BTRFS info (device loop7): using free-space-tree
[  299.166968][ T9826] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  299.317180][T14584] vivid-001: disconnect
[  299.379703][T14581] vivid-001: reconnect
[  299.410184][T14503] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  299.502255][T14586] loop7: detected capacity change from 0 to 32768
[  299.536009][T14586] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  299.563480][T14586] XFS (loop7): Ending clean mount
[  299.606173][T14601] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3295'.
[  299.632527][ T9826] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  299.634662][T14604] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.827594][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3309'.
[  301.648944][ T5876] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  301.800860][ T5876] usb 9-1: Using ep0 maxpacket: 8
[  301.815614][ T5876] usb 9-1: unable to get BOS descriptor or descriptor too short
[  301.841281][ T5876] usb 9-1: config 17 has an invalid interface number: 8 but max is 1
[  301.843948][ T5876] usb 9-1: config 17 has 1 interface, different from the descriptor's value: 2
[  301.846738][ T5876] usb 9-1: config 17 has no interface number 0
[  301.851959][ T5876] usb 9-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[  301.856752][ T5876] usb 9-1: config 17 interface 8 has no altsetting 0
[  301.864432][ T5876] usb 9-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  301.867499][ T5876] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.871522][ T5876] usb 9-1: Product: syz
[  301.872924][ T5876] usb 9-1: Manufacturer: syz
[  301.874509][ T5876] usb 9-1: SerialNumber: syz
[  302.058694][ T9830] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  302.088972][ T5876] usb 9-1: selecting invalid altsetting 0
[  302.097224][ T5876] usb 9-1: USB disconnect, device number 24
[  302.212445][ T9830] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  302.215910][ T9830] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  302.219439][ T9830] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  302.223680][ T9830] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  302.226498][ T9830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.231779][ T9830] usb 8-1: config 0 descriptor??
[  302.642818][ T9830] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd
[  302.647757][ T9830] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  302.900037][ T5891] usb 8-1: USB disconnect, device number 23
[  302.908195][   T47] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  303.059809][   T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  303.063244][   T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  303.066645][   T47] usb 9-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  303.070642][   T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.074671][   T47] usb 9-1: config 0 descriptor??
[  303.282531][ T9830] usb 9-1: USB disconnect, device number 25
[  303.318871][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout
[  303.422847][T14699] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  303.706053][   T13] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  303.709852][ T5891] syz1: Port: 1 Link DOWN
[  303.712172][   T13] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.715860][   T13] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  303.721761][   T13] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.728948][   T13] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  303.739572][   T13] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.742391][   T13] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  303.745192][   T13] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.134279][T14741] loop7: detected capacity change from 0 to 2048
[  304.137032][T14730] loop8: detected capacity change from 0 to 32768
[  304.138882][T14741] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  304.146150][T14730] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  304.167358][T14730] XFS (loop8): Ending clean mount
[  304.212552][T10229] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  304.232548][T14754] loop7: detected capacity change from 0 to 64
[  304.380519][T14766] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.383150][T14766] syzkaller0: entered promiscuous mode
[  304.385051][T14766] syzkaller0: entered allmulticast mode
[  304.393360][T14766] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  304.410280][T14766] tipc: Resetting bearer <eth:syzkaller0>
[  304.416472][T14764] tipc: Resetting bearer <eth:syzkaller0>
[  304.430262][T14764] tipc: Disabling bearer <eth:syzkaller0>
[  304.471854][T14772] loop7: detected capacity change from 0 to 128
[  304.475565][T14772] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  304.485480][T14772] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  304.512415][   T29] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  305.027233][ T5891] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  305.179060][ T5891] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  305.182120][ T5891] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.186058][ T5891] usb 9-1: config 0 descriptor??
[  305.189527][ T5891] cp210x 9-1:0.0: cp210x converter detected
[  305.442609][T14796] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  305.448093][T14796] overlayfs: missing 'lowerdir'
[  305.499392][T14800] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609)
[  305.503485][T14800] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  305.793555][ T5891] cp210x 9-1:0.0: failed to get vendor val 0x000e size 678: -71
[  305.796318][ T5891] cp210x 9-1:0.0: GPIO initialisation failed: -71
[  305.800327][ T5891] usb 9-1: cp210x converter now attached to ttyUSB0
[  305.803394][ T5891] usb 9-1: USB disconnect, device number 26
[  305.806999][ T5891] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  305.809831][ T5891] cp210x 9-1:0.0: device disconnected
[  306.328666][T14804] loop8: detected capacity change from 0 to 256
[  306.396163][T14806] loop7: detected capacity change from 0 to 512
[  306.399776][T14806] EXT4-fs: Ignoring removed nobh option
[  306.406582][T14806] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  306.410097][T14806] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.3378: invalid indirect mapped block 256 (level 1)
[  306.416075][T14806] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.3378: invalid indirect mapped block 2683928664 (level 1)
[  306.422157][T14806] EXT4-fs (loop7): 1 truncate cleaned up
[  306.424832][T14806] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.226101][   T33] audit: type=1800 audit(819.133:88): pid=14806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3378" name="file0" dev="loop7" ino=13 res=0 errno=0
[  307.298047][ T9826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.399481][T14814] loop8: detected capacity change from 0 to 32768
[  307.406525][T14814] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode.
[  307.428446][T10229] ocfs2: Unmounting device (7,8) on (node local)
[  307.498775][T14820] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  307.576245][ T9830] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  307.653819][T14824] loop8: detected capacity change from 0 to 32768
[  307.657891][T14824] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3384 (14824)
[  307.663709][T14824] BTRFS info (device loop8): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  307.667299][T14824] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm
[  307.670499][T14824] BTRFS info (device loop8): using free-space-tree
[  307.714256][T10229] BTRFS info (device loop8): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  307.736319][ T9830] usb 8-1: Using ep0 maxpacket: 16
[  307.773244][ T9830] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  307.777789][ T9830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.781292][ T9830] usb 8-1: Product: syz
[  307.792164][ T9830] usb 8-1: Manufacturer: syz
[  307.793653][ T9830] usb 8-1: SerialNumber: syz
[  307.798491][ T9830] usb 8-1: config 0 descriptor??
[  307.810169][ T9830] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected
[  307.813074][ T9830] usb 8-1: Detected FT232H
[  308.004079][ T9830] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  308.007039][ T9830] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  308.009594][ T9830] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71
[  308.012281][ T9830] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  308.019645][ T9830] usb 8-1: USB disconnect, device number 24
[  308.022841][ T9830] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  308.026199][ T9830] ftdi_sio 8-1:0.0: device disconnected
[  308.195523][   T10] usb 9-1: new full-speed USB device number 27 using dummy_hcd
[  308.357457][   T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  308.361412][   T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2
[  308.365128][   T10] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  308.370568][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.374269][   T10] usb 9-1: config 0 descriptor??
[  308.377961][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  308.380259][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  308.383154][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  308.387686][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  308.390009][   T10] usb 9-1: media controller created
[  308.392785][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  308.397808][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  308.399869][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  308.404079][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input20
[  308.409888][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  308.412162][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  308.565386][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  308.567355][   T10] dvb-usb: error while querying for an remote control event.
[  308.701246][   T10] usb 9-1: USB disconnect, device number 27
[  308.714136][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  309.285732][T14889] loop8: detected capacity change from 0 to 128
[  309.300361][   T33] audit: type=1800 audit(821.214:89): pid=14889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3408" name="file2" dev="loop8" ino=1048677 res=0 errno=0
[  309.310034][T14889] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  309.312712][T14889] FAT-fs (loop8): Filesystem has been set read-only
[  309.314797][T14889] syz.8.3408: attempt to access beyond end of device
[  309.314797][T14889] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  309.330454][T14889] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  309.333032][T14889] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  309.339438][T14889] syz.8.3408: attempt to access beyond end of device
[  309.339438][T14889] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  309.345236][T14889] syz.8.3408: attempt to access beyond end of device
[  309.345236][T14889] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  309.353096][T14889] syz.8.3408: attempt to access beyond end of device
[  309.353096][T14889] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  309.358146][T14889] syz.8.3408: attempt to access beyond end of device
[  309.358146][T14889] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  309.363430][T14889] syz.8.3408: attempt to access beyond end of device
[  309.363430][T14889] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  309.374260][T14889] syz.8.3408: attempt to access beyond end of device
[  309.374260][T14889] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  309.386837][T14889] syz.8.3408: attempt to access beyond end of device
[  309.386837][T14889] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  309.391344][T14889] syz.8.3408: attempt to access beyond end of device
[  309.391344][T14889] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  309.398626][T14890] syz.8.3408: attempt to access beyond end of device
[  309.398626][T14890] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128
[  309.403333][T14890] Buffer I/O error on dev loop8, logical block 2065, async page read
[  309.406637][T14890] Buffer I/O error on dev loop8, logical block 2066, async page read
[  309.410712][T14890] Buffer I/O error on dev loop8, logical block 2067, async page read
[  309.416669][T14890] Buffer I/O error on dev loop8, logical block 2068, async page read
[  309.419443][T14890] Buffer I/O error on dev loop8, logical block 2069, async page read
[  309.422062][T14890] Buffer I/O error on dev loop8, logical block 2070, async page read
[  309.424673][T14890] Buffer I/O error on dev loop8, logical block 2071, async page read
[  309.429180][T14890] Buffer I/O error on dev loop8, logical block 2072, async page read
[  309.434374][T14889] Buffer I/O error on dev loop8, logical block 2065, async page read
[  309.440012][T14889] Buffer I/O error on dev loop8, logical block 2066, async page read
[  309.846381][   T33] audit: type=1326 audit(821.764:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz.7.3420" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2598ebe9 code=0x7ffc0000
[  309.870273][   T33] audit: type=1326 audit(821.764:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz.7.3420" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2598ebe9 code=0x7ffc0000
[  309.877673][   T33] audit: type=1326 audit(821.784:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz.7.3420" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fca2598ebe9 code=0x7ffc0000
[  309.898314][   T33] audit: type=1326 audit(821.784:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz.7.3420" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2598ebe9 code=0x7ffc0000
[  309.905111][   T33] audit: type=1326 audit(821.784:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz.7.3420" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2598ebe9 code=0x7ffc0000
[  309.924345][T14917] binder: 14916:14917 ioctl 40046205 0 returned -22
[  309.924684][   T33] audit: type=1326 audit(821.794:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz.7.3420" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fca2598ebe9 code=0x7ffc0000
[  309.933437][   T33] audit: type=1326 audit(821.794:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz.7.3420" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2598ebe9 code=0x7ffc0000
[  309.954934][   T33] audit: type=1326 audit(821.794:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz.7.3420" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2598ebe9 code=0x7ffc0000
[  309.988378][T14919] loop7: detected capacity change from 0 to 8192
[  309.991046][T14919] msdos: Unknown parameter 'nodo]'
[  310.111206][T14923] sctp: [Deprecated]: syz.7.3423 (pid 14923) Use of int in max_burst socket option deprecated.
[  310.111206][T14923] Use struct sctp_assoc_value instead
[  310.400632][T14927] loop8: detected capacity change from 0 to 16
[  310.406465][T14927] erofs (device loop8): mounted with root inode @ nid 36.
[  310.537398][T14929] loop8: detected capacity change from 0 to 256
[  310.543933][T14929] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  310.556505][T14929] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  310.582652][T14929] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  310.695830][T14929] exFAT-fs (loop8): error, invalid access to FAT (entry 0xffffffff)
[  310.709347][T14929] exFAT-fs (loop8): Filesystem has been set read-only
[  311.022583][T14939] trusted_key: encrypted_key: keyword 'new' not recognized
[  311.052161][T14941] loop8: detected capacity change from 0 to 256
[  311.066291][T14941] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  311.596676][T14976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3448'.
[  311.653829][ T9830] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  311.803810][ T9830] usb 9-1: Using ep0 maxpacket: 8
[  311.808570][ T9830] usb 9-1: unable to get BOS descriptor or descriptor too short
[  311.812025][ T9830] usb 9-1: config 7 has an invalid interface number: 208 but max is 0
[  311.815045][ T9830] usb 9-1: config 7 has an invalid interface association descriptor of length 6, skipping
[  311.818268][ T9830] usb 9-1: config 7 has no interface number 0
[  311.820398][ T9830] usb 9-1: No eUSB2 isoc ep 7 companion for config 7 interface 208 altsetting 4
[  311.823407][ T9830] usb 9-1: config 7 interface 208 has no altsetting 0
[  311.835319][ T9830] usb 9-1: New USB device found, idVendor=5050, idProduct=0900, bcdDevice=b3.ef
[  311.838545][ T9830] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.841184][ T9830] usb 9-1: Product: syz
[  311.842583][ T9830] usb 9-1: Manufacturer: syz
[  311.847339][ T9830] usb 9-1: SerialNumber: syz
[  312.285653][ T9830] ftdi_sio 9-1:7.208: FTDI USB Serial Device converter detected
[  312.288673][ T9830] ftdi_sio ttyUSB0: unknown device type: 0xb3ef
[  312.291940][ T9830] usb 9-1: USB disconnect, device number 28
[  312.295586][ T9830] ftdi_sio 9-1:7.208: device disconnected
[  312.321955][T14996] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3457'.
[  312.346455][T14998] netlink: 788 bytes leftover after parsing attributes in process `syz.7.3458'.
[  312.554003][T15004] loop7: detected capacity change from 0 to 32768
[  312.559077][T15004] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  312.573826][T15004] XFS (loop7): Ending clean mount
[  312.576672][T15004] XFS (loop7): Quotacheck needed: Please wait.
[  312.602525][T15004] XFS (loop7): Quotacheck: Done.
[  312.617337][ T9826] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  312.788843][T15022] loop8: detected capacity change from 0 to 128
[  312.791744][T15022] EXT4-fs (loop8): Test dummy encryption mode enabled
[  312.796131][T15022] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  312.824726][T15028] netlink: 'syz.0.3468': attribute type 1 has an invalid length.
[  312.987754][T15043] loop7: detected capacity change from 0 to 4096
[  312.991007][T15043] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  313.010042][T15043] ntfs3(loop7): ino=1f, "file2" failed to open parent directory r=5 to update
[  313.025747][   T40] ntfs3(loop7): ino=1f, failed to open parent directory r=5 to update
[  313.784230][T10229] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  313.837946][T15063] loop8: detected capacity change from 0 to 4096
[  313.840825][T15063] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512).
[  313.853960][T15063] ntfs3(loop8): ino=1a, mi_enum_attr
[  313.855817][T15063] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  313.867430][T15063] ntfs3(loop8): ino=1e, "file1" ntfs3_write_inode failed, -22.
[  313.955512][T15075] netlink: 'syz.8.3489': attribute type 10 has an invalid length.
[  313.959171][T15075] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.961948][T15075] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.968656][T15075] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.971089][T15075] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.974156][T15075] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.976637][T15075] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.981580][T15075] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  313.989084][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3489'.
[  313.992106][T15075] bridge_slave_1: left allmulticast mode
[  313.994110][T15075] bridge_slave_1: left promiscuous mode
[  313.996108][T15075] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.999917][T15075] bridge_slave_0: left allmulticast mode
[  314.001837][T15075] bridge_slave_0: left promiscuous mode
[  314.004707][T15075] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.021414][T15075] bond0: (slave bridge0): Releasing backup interface
[  314.158215][T15077] netlink: 'syz.8.3490': attribute type 13 has an invalid length.
[  314.196935][T15077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  314.490596][T15089] loop8: detected capacity change from 0 to 40427
[  314.497392][T15089] F2FS-fs (loop8): invalid crc value
[  314.524876][T15089] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  314.529205][T15089] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  314.532449][   T10] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  314.556966][T10229] bio_check_eod: 11511 callbacks suppressed
[  314.556976][T10229] syz-executor: attempt to access beyond end of device
[  314.556976][T10229] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  314.564835][T10229] CPU: 1 UID: 0 PID: 10229 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  314.564868][T10229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  314.564874][T10229] Call Trace:
[  314.564877][T10229]  <TASK>
[  314.564881][T10229]  dump_stack_lvl+0x189/0x250
[  314.564896][T10229]  ? __pfx_dump_stack_lvl+0x10/0x10
[  314.564905][T10229]  ? __pfx_queue_work_on+0x10/0x10
[  314.564913][T10229]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  314.564922][T10229]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  314.564935][T10229]  f2fs_handle_critical_error+0x37c/0x540
[  314.564948][T10229]  f2fs_write_end_io+0x886/0xb60
[  314.564966][T10229]  __submit_merged_bio+0x27a/0x6a0
[  314.564978][T10229]  __submit_merged_write_cond+0x255/0x530
[  314.564990][T10229]  f2fs_write_data_pages+0x261d/0x3000
[  314.565016][T10229]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  314.565050][T10229]  ? folios_put_refs+0x559/0x640
[  314.565063][T10229]  ? __pfx_folios_put_refs+0x10/0x10
[  314.565070][T10229]  ? rcu_is_watching+0x15/0xb0
[  314.565082][T10229]  ? __lock_acquire+0xab9/0xd20
[  314.565100][T10229]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  314.565111][T10229]  do_writepages+0x32e/0x550
[  314.565126][T10229]  ? do_raw_spin_unlock+0x4d/0x240
[  314.565136][T10229]  filemap_fdatawrite+0x199/0x240
[  314.565147][T10229]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  314.565178][T10229]  ? do_raw_spin_unlock+0x4d/0x240
[  314.565188][T10229]  f2fs_sync_dirty_inodes+0x31f/0x830
[  314.565206][T10229]  f2fs_write_checkpoint+0x95a/0x1df0
[  314.565227][T10229]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  314.565259][T10229]  ? kill_f2fs_super+0x298/0x6c0
[  314.565272][T10229]  kill_f2fs_super+0x2c3/0x6c0
[  314.565285][T10229]  ? __pfx_kill_f2fs_super+0x10/0x10
[  314.565294][T10229]  ? radix_tree_delete_item+0x2b6/0x400
[  314.565306][T10229]  ? shrinker_free+0x2ce/0x3e0
[  314.565315][T10229]  deactivate_locked_super+0xbc/0x130
[  314.565324][T10229]  cleanup_mnt+0x425/0x4c0
[  314.565332][T10229]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.565342][T10229]  task_work_run+0x1d4/0x260
[  314.565358][T10229]  ? __pfx_task_work_run+0x10/0x10
[  314.565366][T10229]  ? __x64_sys_umount+0x122/0x160
[  314.565378][T10229]  ? exit_to_user_mode_loop+0x40/0x110
[  314.565390][T10229]  exit_to_user_mode_loop+0xec/0x110
[  314.565400][T10229]  do_syscall_64+0x2bd/0x3b0
[  314.565409][T10229]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.565417][T10229]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.565424][T10229]  ? exc_page_fault+0x9f/0xf0
[  314.565433][T10229]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.565440][T10229] RIP: 0033:0x7fcf4718ff17
[  314.565448][T10229] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  314.565454][T10229] RSP: 002b:00007ffe0ebdbe88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  314.565463][T10229] RAX: 0000000000000000 RBX: 00007fcf47211c05 RCX: 00007fcf4718ff17
[  314.565468][T10229] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0ebdbf40
[  314.565472][T10229] RBP: 00007ffe0ebdbf40 R08: 000000000000c088 R09: 0000000000000000
[  314.565476][T10229] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0ebdcfd0
[  314.565481][T10229] R13: 00007fcf47211c05 R14: 000000000004cba1 R15: 00007ffe0ebdd010
[  314.565494][T10229]  </TASK>
[  314.565497][T10229] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  314.685126][   T10] usb 8-1: config 0 has an invalid interface number: 93 but max is 0
[  314.687775][   T10] usb 8-1: config 0 has no interface number 0
[  314.691615][   T10] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=3f.ac
[  314.697019][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.699565][   T10] usb 8-1: Product: syz
[  314.700953][   T10] usb 8-1: Manufacturer: syz
[  314.703665][   T10] usb 8-1: SerialNumber: syz
[  314.707889][   T10] usb 8-1: config 0 descriptor??
[  314.919045][T15105] loop8: detected capacity change from 0 to 256
[  314.921023][   T10] usb_ehset_test 8-1:0.93: probe with driver usb_ehset_test failed with error -32
[  314.926489][   T10] usb 8-1: USB disconnect, device number 25
[  315.019331][T15113] loop8: detected capacity change from 0 to 128
[  315.681905][   T47] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  315.833540][   T47] usb 8-1: unable to get BOS descriptor or descriptor too short
[  315.837109][   T47] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  315.840021][   T47] usb 8-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  315.844366][   T47] usb 8-1: config 1 interface 0 has no altsetting 1
[  315.848419][   T47] usb 8-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  315.851339][   T47] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.853952][   T47] usb 8-1: Product: syz
[  315.855434][   T47] usb 8-1: Manufacturer: syz
[  315.857077][   T47] usb 8-1: SerialNumber: syz
[  315.861997][   T47] smsusb:smsusb_probe: board id=8, interface number 0
[  316.071885][T15131] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3514'.
[  316.072040][   T47] smsusb:smsusb_probe: Device initialized with return code -19
[  316.074958][T15131] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3514'.
[  316.302066][ T9830] usb 8-1: USB disconnect, device number 26
[  316.612187][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.614371][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.023655][T15155] loop7: detected capacity change from 0 to 64
[  317.026801][T15155] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop7
[  317.108522][T15160] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3527'.
[  317.564846][T15174] loop7: detected capacity change from 0 to 40427
[  317.572446][T15174] F2FS-fs (loop7): invalid crc value
[  317.629962][T15174] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  317.636477][T15174] F2FS-fs (loop7): Start checkpoint disabled!
[  317.645195][T15174] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  317.654495][T15174] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=30303030, run fsck to fix.
[  317.924044][T15181] block nbd7: NBD_DISCONNECT
[  317.950281][T15183] loop8: detected capacity change from 0 to 1024
[  317.980351][T15183] hfsplus: bad catalog entry type
[  317.994410][ T1094] hfsplus: b-tree write err: -5, ino 4
[  318.154513][T15202] loop7: detected capacity change from 0 to 512
[  318.963309][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3548'.
[  318.966401][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3548'.
[  319.432614][   T10] hid-generic 0004:0006:0003.0015: unknown main item tag 0x1
[  319.438362][   T10] hid-generic 0004:0006:0003.0015: hidraw0: <UNKNOWN> HID v0.09 Device [syz1] on syz1
[  319.635021][ T5848] Bluetooth: hci2: unexpected cc 0x080e length: 1 < 3
[  319.637262][ T5848] Bluetooth: hci2: unexpected event for opcode 0x080e
[  319.663766][T15278] loop7: detected capacity change from 0 to 64
[  319.939950][   T10] usb 9-1: new full-speed USB device number 29 using dummy_hcd
[  320.101221][   T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  320.104577][   T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  320.109646][   T10] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  320.113074][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.115851][   T10] usb 9-1: Product: syz
[  320.117332][   T10] usb 9-1: Manufacturer: syz
[  320.119004][   T10] usb 9-1: SerialNumber: syz
[  320.325972][   T10] usb 9-1: 0:2 : does not exist
[  320.331074][   T10] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  320.341377][   T10] usb 9-1: USB disconnect, device number 29
[  320.698989][ T5848] Bluetooth: hci2: unexpected event for opcode 0x0c1c
[  321.109141][   T10] usb 9-1: new full-speed USB device number 30 using dummy_hcd
[  321.260883][   T10] usb 9-1: config 2 has an invalid interface number: 20 but max is 0
[  321.264257][   T10] usb 9-1: config 2 has no interface number 0
[  321.272474][   T10] usb 9-1: New USB device found, idVendor=0c0b, idProduct=a109, bcdDevice=17.a3
[  321.276368][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.279926][   T10] usb 9-1: Product: syz
[  321.281706][   T10] usb 9-1: Manufacturer: syz
[  321.283740][   T10] usb 9-1: SerialNumber: syz
[  321.493737][   T10] ums-datafab 9-1:2.20: USB Mass Storage device detected
[  321.497700][   T10] ums-datafab 9-1:2.20: Quirks match for vid 0c0b pid a109: 1
[  321.529257][   T10] ums-sddr55 9-1:2.20: USB Mass Storage device detected
[  321.620216][   T10] usb 9-1: USB disconnect, device number 30
[  321.952654][    C0] vkms_vblank_simulate: vblank timer overrun
[  322.376700][T15324] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3598'.
[  322.380515][T15324] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3598'.
[  322.383373][T15324] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3598'.
[  322.794052][T15333] loop8: detected capacity change from 0 to 4096
[  322.980144][T15341] loop8: detected capacity change from 0 to 32768
[  322.986067][T15341] JBD2: Ignoring recovery information on journal
[  323.005463][T15341] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  323.043274][T10229] ocfs2: Unmounting device (7,8) on (node local)
[  323.088218][   T47] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  323.245100][   T47] usb 8-1: unable to get BOS descriptor or descriptor too short
[  323.248963][   T47] usb 8-1: config 6 has an invalid interface number: 2 but max is 0
[  323.251754][   T47] usb 8-1: config 6 has no interface number 0
[  323.254273][   T47] usb 8-1: config 6 interface 2 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 32
[  323.259540][   T47] usb 8-1: config 6 interface 2 has no altsetting 0
[  323.263692][   T47] usb 8-1: New USB device found, idVendor=110a, idProduct=1151, bcdDevice=ce.71
[  323.266805][   T47] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.270226][   T47] usb 8-1: Product: syz
[  323.271769][   T47] usb 8-1: Manufacturer: syz
[  323.273442][   T47] usb 8-1: SerialNumber: syz
[  323.277505][T15339] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  323.288386][T15351] loop8: detected capacity change from 0 to 512
[  323.294214][T15351] EXT4-fs (loop8): Test dummy encryption mode enabled
[  323.297537][T15351] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  323.304452][T15351] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.3610: bad orphan inode 131083
[  323.309886][T15351] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  323.371642][T10229] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.397000][T15359] overlay: filesystem on ./bus not supported
[  323.433036][T15361] dvmrp1: entered allmulticast mode
[  323.437225][T15361] dvmrp1: left allmulticast mode
[  323.489306][   T47] ti_usb_3410_5052 8-1:6.2: TI USB 3410 1 port adapter converter detected
[  323.492323][   T47] ti_usb_3410_5052 8-1:6.2: missing endpoints
[  323.496224][   T47] usb 8-1: USB disconnect, device number 27
[  324.128145][T15368] loop7: detected capacity change from 0 to 32768
[  324.130569][T15368] XFS: noikeep mount option is deprecated.
[  324.135249][T15368] XFS (loop7): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  324.144097][T15368] XFS (loop7): Ending clean mount
[  324.147033][T15368] XFS (loop7): Quotacheck needed: Please wait.
[  324.174930][T15368] XFS (loop7): Quotacheck: Done.
[  324.220558][ T9826] XFS (loop7): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  324.567409][   T47] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  324.730038][   T47] usb 8-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.733496][   T47] usb 8-1: config 0 interface 0 has no altsetting 0
[  324.735661][   T47] usb 8-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00
[  324.738729][   T47] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.745607][   T47] usb 8-1: config 0 descriptor??
[  325.169635][   T47] apple 0003:05AC:027A.0016: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.7-1/input0
[  325.358676][ T5876] usb 8-1: USB disconnect, device number 28
[  326.078303][T15405] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  326.124011][T15407] netlink: 'syz.7.3631': attribute type 66 has an invalid length.
[  326.732865][T15436] ALSA: seq fatal error: cannot create timer (-19)
[  326.748576][T15434] Invalid ELF header magic: != ELF
[  327.965723][ T5876] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  327.983490][T15484] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3666'.
[  327.984358][T15482] loop8: detected capacity change from 0 to 2048
[  327.992796][T15482] EXT4-fs: Ignoring removed mblk_io_submit option
[  328.017074][T15486] netlink: 'syz.0.3667': attribute type 1 has an invalid length.
[  328.022868][T15482] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.119226][ T5876] usb 8-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b
[  328.122166][ T5876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.320207][ T1090] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u9:4: bg 0: block 234: padding at end of block bitmap is not set
[  328.326475][ T1090] EXT4-fs (loop8): Remounting filesystem read-only
[  328.338105][ T5876] pegasus 8-1:254.0: probe with driver pegasus failed with error -71
[  328.347106][ T5876] usb 8-1: USB disconnect, device number 29
[  328.452056][T10229] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.589416][T15506] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3675'.
[  328.737284][T15517] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3679'.
[  330.181559][T15544] loop8: detected capacity change from 0 to 8
[  330.244837][T15546] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  330.607546][T15567] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3702'.
[  330.998378][T15580] loop7: detected capacity change from 0 to 1024
[  331.007232][T15580] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.024181][   T33] kauditd_printk_skb: 15 callbacks suppressed
[  331.024191][   T33] audit: type=1800 audit(848.939:113): pid=15580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3708" name="bus" dev="loop7" ino=19 res=0 errno=0
[  331.029426][T15580] Trying to write to read-only block-device loop7
[  331.065013][ T9826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.123519][T15587] loop7: detected capacity change from 0 to 1024
[  331.126417][T15587] EXT4-fs: Ignoring removed nobh option
[  331.153570][T15589] sctp: [Deprecated]: syz.0.3711 (pid 15589) Use of struct sctp_assoc_value in delayed_ack socket option.
[  331.153570][T15589] Use struct sctp_sack_info instead
[  331.262372][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3718'.
[  331.645900][T15636] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3732'.
[  331.648869][T15636] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3732'.
[  332.053705][ T5876] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  332.203903][ T5876] usb 9-1: Using ep0 maxpacket: 16
[  332.208708][ T5876] usb 9-1: config 0 has an invalid interface number: 45 but max is 0
[  332.211312][ T5876] usb 9-1: config 0 has no interface number 0
[  332.218332][ T5876] usb 9-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=85.00
[  332.221330][ T5876] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.225314][ T5876] usb 9-1: Product: syz
[  332.226767][ T5876] usb 9-1: Manufacturer: syz
[  332.228340][ T5876] usb 9-1: SerialNumber: syz
[  332.231224][ T5876] usb 9-1: config 0 descriptor??
[  332.446005][ T5876] cdc_subset 9-1:0.45: probe with driver cdc_subset failed with error -22
[  332.484194][T15655] misc userio: Invalid payload size
[  332.503554][   T47] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  332.647961][ T6166] usb 9-1: USB disconnect, device number 31
[  332.653577][   T47] usb 8-1: Using ep0 maxpacket: 32
[  332.660889][   T47] usb 8-1: config 2 has an invalid interface number: 157 but max is 0
[  332.665406][   T47] usb 8-1: config 2 has no interface number 0
[  332.669701][   T47] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b
[  332.674071][   T47] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.677343][   T47] usb 8-1: Product: syz
[  332.679077][   T47] usb 8-1: Manufacturer: syz
[  332.680984][   T47] usb 8-1: SerialNumber: syz
[  332.687714][   T47] imon 8-1:2.157: unable to register, err -19
[  332.891938][ T5876] usb 8-1: USB disconnect, device number 30
[  333.282437][T15693] netlink: 'syz.8.3760': attribute type 4 has an invalid length.
[  333.287750][T15693] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.3760'.
[  333.419552][T15701] loop8: detected capacity change from 0 to 16
[  333.422249][T15701] erofs (device loop8): mounted with root inode @ nid 36.
[  334.376265][T15727] netlink: 'syz.7.3775': attribute type 1 has an invalid length.
[  334.399102][T15727] 8021q: adding VLAN 0 to HW filter on device bond1
[  334.415782][T15727] bond1: (slave ip6erspan0): making interface the new active one
[  334.419364][T15727] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  334.779241][T15748] team_slave_1: entered promiscuous mode
[  334.781867][T15748] netlink: 'syz.7.3784': attribute type 10 has an invalid length.
[  334.787197][T15748] team0: Port device team_slave_0 removed
[  334.858979][T15752] loop7: detected capacity change from 0 to 1024
[  335.278647][T15777] loop8: detected capacity change from 0 to 1024
[  335.281421][T15777] EXT4-fs: test_dummy_encryption requires encrypt feature
[  335.452211][T15780] loop8: detected capacity change from 0 to 16
[  335.455126][T15780] erofs (device loop8): mounted with root inode @ nid 36.
[  336.312203][T15790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3803'.
[  336.532961][T15803] tmpfs: Bad value for 'mpol'
[  336.768759][T15829] loop8: detected capacity change from 0 to 128
[  336.839523][T15835] loop8: detected capacity change from 0 to 1024
[  336.842502][T15835] EXT4-fs: Ignoring removed nobh option
[  336.857117][T15835] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.733119][T15845] loop7: detected capacity change from 0 to 32768
[  337.737080][T15845] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  337.896231][T10229] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.425269][T15867] loop7: detected capacity change from 0 to 32768
[  338.427930][T15867] btrfs: Deprecated parameter 'usebackuproot'
[  338.430139][T15867] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  338.436017][T15867] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3836 (15867)
[  338.442283][T15867] BTRFS error: failed to open device for path /dev/loop7 with flags 0x23: -13
[  338.764925][T15875] loop7: detected capacity change from 0 to 32768
[  338.767785][T15875] bcachefs (/dev/loop7): error reading superblock: error opening /dev/loop7: EACCES
[  338.772241][T15875] bcachefs: bch2_fs_get_tree() error: EACCES
[  338.885269][T15881] loop7: detected capacity change from 0 to 8
[  338.929632][T15887] loop7: detected capacity change from 0 to 8
[  338.934964][T15887] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  339.037187][T15885] loop8: detected capacity change from 0 to 32768
[  339.370049][ T5876] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  339.379946][ T6166] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  339.533412][ T6166] usb 9-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55
[  339.533618][ T5876] usb 8-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1
[  339.536297][ T6166] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.536309][ T6166] usb 9-1: Product: syz
[  339.536315][ T6166] usb 9-1: Manufacturer: syz
[  339.536322][ T6166] usb 9-1: SerialNumber: syz
[  339.537527][ T6166] usb 9-1: config 0 descriptor??
[  339.539353][ T5876] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  339.550705][ T5876] usb 8-1: Manufacturer: syz
[  339.552747][ T6166] gspca_main: sonixb-2.14.0 probing 0c45:60a8
[  339.555412][ T5876] usb 8-1: config 0 descriptor??
[  339.761457][ T5876] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  339.765798][ T5876] dvb_usb_af9015 8-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  339.774689][ T5876] usb 8-1: USB disconnect, device number 31
[  339.959948][ T6166] sonixb 9-1:0.0: Error writing register 01: -71
[  339.962274][ T6166] sonixb 9-1:0.0: probe with driver sonixb failed with error -71
[  339.967683][ T6166] usb 9-1: USB disconnect, device number 32
[  340.403645][T15911] _Z`Ԁ@: entered promiscuous mode
[  340.575747][T15915] loop8: detected capacity change from 0 to 764
[  340.585590][T15915] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  340.819345][ T5876] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  340.937562][T15919] loop8: detected capacity change from 0 to 32768
[  340.943306][T15919] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  340.968009][T15919] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  340.976193][ T5876] usb 8-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87
[  340.994256][ T5876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.996765][T15919] XFS (loop8): Starting recovery (logdev: internal)
[  341.002042][ T5876] usb 8-1: config 0 descriptor??
[  341.005554][ T5876] usb-storage 8-1:0.0: USB Mass Storage device detected
[  341.016451][ T5876] usb-storage 8-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.16.0-syzkaller-11895-gcca7a0aae895-dirty)
[  341.016451][ T5876]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  341.019671][T15919] XFS (loop8): Ending recovery (logdev: internal)
[  341.087282][T10229] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  341.211896][ T5876] usb 8-1: USB disconnect, device number 32
[  341.214288][T15954] netlink: 'syz.8.3873': attribute type 1 has an invalid length.
[  341.216995][T15954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.245594][T15956] loop8: detected capacity change from 0 to 2048
[  341.255570][   T33] audit: type=1800 audit(859.184:114): pid=15956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3874" name="file1" dev="loop8" ino=1346 res=0 errno=0
[  341.264194][   T33] audit: type=1800 audit(859.194:115): pid=15956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3874" name="file1" dev="loop8" ino=1346 res=0 errno=0
[  341.539231][ T6166] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  341.688850][ T6166] usb 9-1: Using ep0 maxpacket: 8
[  341.693593][ T6166] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  341.696422][ T6166] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  341.699006][ T6166] usb 9-1: Product: syz
[  341.700318][ T6166] usb 9-1: Manufacturer: syz
[  341.701885][ T6166] usb 9-1: SerialNumber: syz
[  341.704615][ T6166] usb 9-1: config 0 descriptor??
[  341.707928][ T6166] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  341.769390][T15962] loop7: detected capacity change from 0 to 1764
[  341.772534][T15962] isofs_fill_super: get root inode failed
[  342.150898][   T47] libceph: connect (1)[c::]:6789 error -101
[  342.154012][   T47] libceph: mon0 (1)[c::]:6789 connect error
[  342.194906][T15966] ceph: No mds server is up or the cluster is laggy
[  342.195324][T15965] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3878'.
[  342.200089][T15965] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3878'.
[  342.350537][ T6166] gspca_zc3xx: reg_w_i err -71
[  342.352244][ T6166] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  342.356407][ T6166] usb 9-1: USB disconnect, device number 33
[  342.887235][T15976] loop8: detected capacity change from 0 to 128
[  344.131205][T16009] loop8: detected capacity change from 0 to 512
[  344.133722][T16009] EXT4-fs: Ignoring removed bh option
[  344.135893][T16009] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  344.142228][T16009] EXT4-fs (loop8): 1 truncate cleaned up
[  344.144833][T16009] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.606424][T16024] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  344.680899][T16026] loop7: detected capacity change from 0 to 1024
[  344.688757][T16026] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (61418!=35945)
[  344.698474][T16026] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  344.702721][T16026] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  344.705533][T16026] EXT4-fs (loop7): write access unavailable, skipping orphan cleanup
[  344.709185][T16026] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  344.721200][T16026] EXT4-fs (loop7): ext4_remount: Checksum for group 0 failed (61418!=35945)
[  344.741026][ T9826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.011751][T10229] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.337359][T16041] loop8: detected capacity change from 0 to 256
[  345.397889][T16041] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  345.708080][T16051] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3908'.
[  345.711110][T16051] netlink: 'syz.7.3908': attribute type 7 has an invalid length.
[  345.715617][T16051] netlink: 'syz.7.3908': attribute type 8 has an invalid length.
[  345.718471][T16051] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3908'.
[  345.853857][T16058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3910'.
[  346.718245][T16091] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  346.742563][T16093] netlink: 'syz.7.3927': attribute type 12 has an invalid length.
[  346.952560][T16117] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3939'.
[  347.038449][ T6166] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[  347.091960][   T33] audit: type=1800 audit(865.027:116): pid=16129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3945" name="nullb0" dev="devtmpfs" ino=3073 res=0 errno=0
[  347.106073][ T5876] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  347.186071][ T6166] usb 9-1: Using ep0 maxpacket: 16
[  347.189678][ T6166] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  347.192728][ T6166] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.203204][ T6166] usb 9-1: config 0 descriptor??
[  347.207153][ T6166] gspca_main: sonixj-2.14.0 probing 0471:0327
[  347.260580][ T5876] usb 8-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30
[  347.264094][ T5876] usb 8-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2
[  347.269227][ T5876] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  347.273063][ T5876] usb 8-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79
[  347.279929][ T5876] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  347.282919][ T5876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.509704][ T5876] ath6kl: Failed to submit usb control message: -71
[  347.513743][ T5876] ath6kl: unable to send the bmi data to the device: -71
[  347.517623][ T5876] ath6kl: Unable to send get target info: -71
[  347.528601][ T5876] ath6kl: Failed to init ath6kl core: -71
[  347.533271][ T5876] ath6kl_usb 8-1:4.0: probe with driver ath6kl_usb failed with error -71
[  347.544994][ T5876] usb 8-1: USB disconnect, device number 33
[  348.300698][   T47] kernel write not supported for file bpf-prog (pid: 47 comm: kworker/1:1)
[  348.380259][T16163] loop7: detected capacity change from 0 to 32768
[  348.825215][ T6166] gspca_sonixj: i2c_w8 err -71
[  348.865280][ T6166] sonixj 9-1:0.0: probe with driver sonixj failed with error -71
[  348.868868][ T6166] usb 9-1: USB disconnect, device number 34
[  349.037594][T16191] loop7: detected capacity change from 0 to 32768
[  349.040417][T16191] bcachefs (/dev/loop7): error reading superblock: error opening /dev/loop7: EACCES
[  349.043355][T16191] bcachefs: bch2_fs_get_tree() error: EACCES
[  349.172302][T16200] loop7: detected capacity change from 0 to 2048
[  349.323164][T16207] netlink: 'syz.8.3978': attribute type 21 has an invalid length.
[  349.326392][T16207] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3978'.
[  349.352330][T16209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3979'.
[  349.475218][T16209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3979'.
[  349.488822][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3979'.
[  349.807347][T16224] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  349.810962][T16224] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.813623][T16224] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.819653][T16224] bridge0: entered allmulticast mode
[  349.958789][T16234] netlink: 'syz.0.3991': attribute type 5 has an invalid length.
[  349.961531][T16234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3991'.
[  349.987718][T16236] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3992'.
[  350.241315][T16244] loop7: detected capacity change from 0 to 32768
[  350.406026][T16254] loop8: detected capacity change from 0 to 4096
[  350.409194][T16254] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  350.416079][T16254] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  350.508387][T16264] netlink: 2036 bytes leftover after parsing attributes in process `syz.7.4004'.
[  350.511797][T16264] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4004'.
[  351.270649][T10229] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.409066][T16281] netlink: 'syz.7.4012': attribute type 1 has an invalid length.
[  351.411535][T16281] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4012'.
[  351.460521][T16289] loop7: detected capacity change from 0 to 512
[  351.468940][T16289] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  351.473008][T16289] EXT4-fs (loop7): write access unavailable, skipping orphan cleanup
[  351.478800][T16289] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  351.505600][ T9826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.541810][T16296] netlink: 'syz.7.4019': attribute type 11 has an invalid length.
[  351.572141][T16300] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4021'.
[  351.629247][T16308] loop7: detected capacity change from 0 to 512
[  352.159546][T16319] loop7: detected capacity change from 0 to 32768
[  352.162308][T16319] bcachefs (/dev/loop7): error reading superblock: error opening /dev/loop7: EACCES
[  352.165535][T16319] bcachefs: bch2_fs_get_tree() error: EACCES
[  352.659927][T16337] loop8: detected capacity change from 0 to 2048
[  352.663128][T16337] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[  352.676144][T16337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  352.686919][T16337] UDF-fs: error (device loop8): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  352.829455][T16359] loop7: detected capacity change from 0 to 16
[  353.047700][T16366] loop7: detected capacity change from 0 to 4096
[  353.118787][T16369] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  353.647494][T16405] loop8: detected capacity change from 0 to 256
[  353.755543][T16417] loop7: detected capacity change from 0 to 512
[  353.761966][T16417] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  353.766287][T16417] EXT4-fs (loop7): write access unavailable, skipping orphan cleanup
[  353.769539][T16417] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  353.818701][ T9826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.851010][T16430] loop8: detected capacity change from 0 to 16
[  353.863026][T16430] erofs (device loop8): mounted with root inode @ nid 36.
[  354.322210][T16448] netlink: 'syz.8.4084': attribute type 11 has an invalid length.
[  355.082175][   T10] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[  355.129907][T16475] __nla_validate_parse: 3 callbacks suppressed
[  355.129918][T16475] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4097'.
[  355.136081][T16475] netlink: 'syz.7.4097': attribute type 6 has an invalid length.
[  355.232865][   T10] usb 9-1: Using ep0 maxpacket: 32
[  355.237363][   T10] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  355.240448][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.244836][   T10] usb 9-1: config 0 descriptor??
[  355.341481][T16493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  355.375745][T16495] program syz.7.4107 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  355.448092][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  355.451325][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  355.455668][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  355.458051][   T10] usb 9-1: media controller created
[  355.467354][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  355.890728][   T33] audit: type=1326 audit(873.821:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16510 comm="syz.0.4113" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effbd38ebe9 code=0x0
[  356.709683][T16524] loop7: detected capacity change from 0 to 512
[  356.718150][T16524] EXT4-fs: Ignoring removed mblk_io_submit option
[  356.731026][T16524] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  356.741712][T16524] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  356.745866][T16524] EXT4-fs (loop7): write access unavailable, skipping orphan cleanup
[  356.750782][T16524] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  356.779532][ T9826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.844428][   T33] audit: type=1400 audit(874.782:118): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  357.081118][   T47] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  357.260977][   T47] usb 8-1: Using ep0 maxpacket: 32
[  357.264199][   T47] usb 8-1: config 0 has an invalid interface number: 216 but max is 0
[  357.267107][   T47] usb 8-1: config 0 has no interface number 0
[  357.270835][   T47] usb 8-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[  357.275057][   T47] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.277752][   T47] usb 8-1: Product: syz
[  357.279184][   T47] usb 8-1: Manufacturer: syz
[  357.280766][   T47] usb 8-1: SerialNumber: syz
[  357.283675][   T47] usb 8-1: config 0 descriptor??
[  357.492910][   T47] usb 8-1: USB disconnect, device number 34
[  357.541185][   T10] az6027: usb out operation failed. (-110)
[  357.543447][   T10] az6027: usb out operation failed. (-32)
[  357.545347][   T10] stb0899_attach: Driver disabled by Kconfig
[  357.547307][   T10] az6027: no front-end attached
[  357.547307][   T10] 
[  357.549836][   T10] az6027: usb out operation failed. (-32)
[  357.552690][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  357.556386][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input21
[  357.562454][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[  357.564779][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  357.917502][   T47] usb 9-1: USB disconnect, device number 35
[  357.946942][   T47] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  358.432997][T16595] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4152'.
[  358.436388][T16592] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4152'.
[  358.440202][T16595] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4152'.
[  358.565042][T16610] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4160'.
[  358.744541][T16626] loop8: detected capacity change from 0 to 512
[  358.747038][T16626] EXT4-fs: Ignoring removed nomblk_io_submit option
[  358.954382][T16626] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.959937][   T33] audit: type=1800 audit(876.893:119): pid=16626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4167" name="file1" dev="loop8" ino=15 res=0 errno=0
[  358.984466][T10229] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.157859][T16636] loop8: detected capacity change from 0 to 32768
[  359.164718][T16636] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  359.206649][T10229] ocfs2: Unmounting device (7,8) on (node local)
[  359.867441][T16649] netlink: 188 bytes leftover after parsing attributes in process `syz.7.4175'.
[  360.142540][T16657] loop7: detected capacity change from 0 to 512
[  360.264675][T16663] netlink: 'syz.0.4181': attribute type 1 has an invalid length.
[  360.267339][T16663] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4181'.
[  360.270416][T16663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4181'.
[  360.819250][   T47] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  360.920386][T16684] netlink: zone id is out of range
[  360.922147][T16684] netlink: zone id is out of range
[  360.923887][T16684] netlink: zone id is out of range
[  360.925601][T16684] netlink: zone id is out of range
[  360.927341][T16684] netlink: zone id is out of range
[  360.930770][T16684] netlink: zone id is out of range
[  360.932661][T16684] netlink: zone id is out of range
[  360.934346][T16684] netlink: zone id is out of range
[  360.936046][T16684] netlink: zone id is out of range
[  360.937783][T16684] netlink: zone id is out of range
[  360.969359][   T47] usb 9-1: Using ep0 maxpacket: 16
[  360.976741][   T47] usb 9-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52
[  360.980130][   T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.982993][   T47] usb 9-1: Product: syz
[  360.984387][   T47] usb 9-1: Manufacturer: syz
[  360.985825][   T47] usb 9-1: SerialNumber: syz
[  360.988797][   T47] usb 9-1: config 0 descriptor??
[  361.100123][T16688] loop7: detected capacity change from 0 to 32768
[  361.200723][ T6166] usb 9-1: USB disconnect, device number 36
[  361.464994][T16705] loop7: detected capacity change from 0 to 32768
[  361.547681][T16711] netlink: 'syz.7.4202': attribute type 27 has an invalid length.
[  361.550377][T16711] netlink: 'syz.7.4202': attribute type 3 has an invalid length.
[  361.552792][T16711] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4202'.
[  361.581658][T16715] loop7: detected capacity change from 0 to 8
[  361.838806][   T10] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[  361.859741][T16727] tmpfs: Bad value for 'mpol'
[  361.883009][T16729] netlink: 'syz.0.4211': attribute type 10 has an invalid length.
[  361.912705][T16719] loop8: detected capacity change from 0 to 32768
[  361.920147][T16719] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  361.934324][T16719] XFS (loop8): Ending clean mount
[  361.960571][T10229] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  362.023045][   T10] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  362.026729][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.030987][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.042161][   T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  362.049041][   T10] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  362.051907][   T10] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  362.055050][   T10] usb 8-1: Manufacturer: syz
[  362.066483][   T10] usb 8-1: config 0 descriptor??
[  362.485464][   T10] appleir 0003:05AC:8243.0017: unknown main item tag 0x0
[  362.491705][   T10] appleir 0003:05AC:8243.0017: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0
[  362.762383][   T10] usb 8-1: USB disconnect, device number 35
[  362.961949][T16760] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4221'.
[  362.967997][T16759] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4221'.
[  362.972591][T16759] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4221'.
[  362.975753][T16759] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4221'.
[  363.081304][T16768] loop8: detected capacity change from 0 to 128
[  363.185030][T16776] Bluetooth: hci0: load_link_keys: too big key_count value 32768
[  363.207874][T16780] loop8: detected capacity change from 0 to 164
[  363.221874][T16780] iso9660: Corrupted directory entry in block 4 of inode 1792
[  363.251618][T16783] loop8: detected capacity change from 0 to 512
[  363.254437][T16783] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  363.259695][T16783] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.4230: corrupted in-inode xattr: bad e_name length
[  363.264992][T16783] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.4230: couldn't read orphan inode 15 (err -117)
[  363.269995][T16783] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  363.290552][T10229] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.329830][   T33] audit: type=1400 audit(881.275:120): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=16788 comm="syz.8.4232"
[  363.422615][T16800] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.4237'.
[  363.485041][T16808] loop7: detected capacity change from 0 to 1024
[  363.494690][T16808] loop7: detected capacity change from 0 to 256
[  363.698679][T16820] afs: Unknown parameter 'A~|vN'
[  363.909041][T16819] loop8: detected capacity change from 0 to 32768
[  363.990210][T16822] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  364.102398][T16834] netlink: 'syz.8.4254': attribute type 21 has an invalid length.
[  364.104998][T16834] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4254'.
[  364.108640][T16834] netlink: 'syz.8.4254': attribute type 5 has an invalid length.
[  364.111268][T16834] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4254'.
[  364.595040][T16846] netlink: 'syz.0.4258': attribute type 12 has an invalid length.
[  364.665538][T16852] tipc: Enabling of bearer <etl:g> rejected, media not registered
[  364.672398][T16842] loop7: detected capacity change from 0 to 32768
[  364.861943][T16874] netlink: 'syz.7.4272': attribute type 11 has an invalid length.
[  364.901008][T16878] loop7: detected capacity change from 0 to 2364
[  365.646817][   T47] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[  365.796769][   T47] usb 8-1: Using ep0 maxpacket: 8
[  365.799692][   T47] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  365.803058][   T47] usb 8-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  365.805994][   T47] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.810783][   T47] usb 8-1: config 0 descriptor??
[  366.048773][T16944] overlayfs: refusing to follow metacopy origin for (/file1)
[  366.078298][T16946] netlink: 'syz.0.4303': attribute type 4 has an invalid length.
[  366.145963][T16952] netlink: 'syz.8.4307': attribute type 12 has an invalid length.
[  366.149814][T16952] __nla_validate_parse: 10 callbacks suppressed
[  366.149823][T16952] netlink: 120 bytes leftover after parsing attributes in process `syz.8.4307'.
[  366.283469][   T47] aureal 0003:0755:2626.0018: hidraw0: USB HID v0.03 Device [HID 0755:2626] on usb-dummy_hcd.7-1/input0
[  366.523809][   T47] usb 8-1: USB disconnect, device number 36
[  367.585425][T17004] loop8: detected capacity change from 0 to 512
[  367.590178][T17004] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  367.594924][T17004] EXT4-fs (loop8): 1 truncate cleaned up
[  367.597364][T17004] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  367.605616][T17004] EXT4-fs error (device loop8): ext4_find_dest_de:2052: inode #2: block 13: comm syz.8.4331: bad entry in directory: inode out of bounds - offset=0, inode=184549378, rec_len=12, size=1024 fake=1
[  367.624485][T10229] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.060605][T17017] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4335'.
[  368.274415][T17032] /dev/nullb0: Can't lookup blockdev
[  368.589837][T17034] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4343'.
[  368.927244][   T47] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[  369.080232][   T47] usb 9-1: config 0 has an invalid interface number: 12 but max is 0
[  369.082848][   T47] usb 9-1: config 0 has no interface number 0
[  369.084828][   T47] usb 9-1: config 0 interface 12 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[  369.088003][   T47] usb 9-1: config 0 interface 12 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 511
[  369.106443][   T47] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice=5f.c4
[  369.109380][   T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.111853][   T47] usb 9-1: Product: syz
[  369.113215][   T47] usb 9-1: Manufacturer: syz
[  369.114683][   T47] usb 9-1: SerialNumber: syz
[  369.118982][   T47] usb 9-1: config 0 descriptor??
[  369.122482][T17036] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  369.125602][T17036] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  369.130935][   T47] option 9-1:0.12: GSM modem (1-port) converter detected
[  369.137777][   T47] usb 9-1: GSM modem (1-port) converter now attached to ttyUSB0
[  369.374941][   T47] usb 9-1: USB disconnect, device number 37
[  369.435032][   T47] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  369.469262][   T47] option 9-1:0.12: device disconnected
[  369.542602][ T5876] libceph: connect (1)[c::]:6789 error -101
[  369.544671][ T5876] libceph: mon0 (1)[c::]:6789 connect error
[  369.807208][ T5876] libceph: connect (1)[c::]:6789 error -101
[  369.809243][ T5876] libceph: mon0 (1)[c::]:6789 connect error
[  370.044354][T17044] ceph: No mds server is up or the cluster is laggy
[  370.094034][T17051] loop8: detected capacity change from 0 to 32768
[  370.105963][T17051] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  370.134432][T17051] XFS (loop8): Ending clean mount
[  370.189922][T10229] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  370.918633][T17090] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4362'.
[  371.037166][T17101] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4365'.
[  371.210066][   T33] audit: type=1326 audit(1402.116:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17114 comm="syz.0.4372" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effbd38ebe9 code=0x7ffc0000
[  371.226951][   T33] audit: type=1326 audit(1402.126:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17114 comm="syz.0.4372" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effbd38ebe9 code=0x7ffc0000
[  371.242345][   T33] audit: type=1326 audit(1402.126:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17114 comm="syz.0.4372" exe="/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7effbd38ebe9 code=0x7ffc0000
[  371.252026][   T33] audit: type=1326 audit(1402.126:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17114 comm="syz.0.4372" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effbd38ebe9 code=0x7ffc0000
[  371.330806][T17121] loop8: detected capacity change from 0 to 16
[  371.342347][T17121] erofs (device loop8): mounted with root inode @ nid 36.
[  371.367937][T17121] erofs (device loop8): corrupted dir block 8200 @ nid 36
[  371.523194][T17128] loop8: detected capacity change from 0 to 1024
[  371.548040][T17128] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  371.576528][ T5853] Bluetooth: hci1: command 0x0405 tx timeout
[  371.605027][T10229] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.802096][T17142] cgroup: Invalid name
[  371.836846][T17147] loop8: detected capacity change from 0 to 8
[  371.861131][T17147] SQUASHFS error: Unable to read inode 0x11f
[  372.103239][ T5876] usb 8-1: new high-speed USB device number 37 using dummy_hcd
[  372.290403][ T5876] usb 8-1: Using ep0 maxpacket: 16
[  372.293884][ T5876] usb 8-1: config 0 has an invalid interface number: 104 but max is 1
[  372.296839][ T5876] usb 8-1: config 0 has an invalid interface number: 104 but max is 1
[  372.300006][ T5876] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  372.303861][ T5876] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  372.306936][ T5876] usb 8-1: config 0 has no interface number 0
[  372.308988][ T5876] usb 8-1: config 0 interface 104 has no altsetting 1
[  372.313749][ T5876] usb 8-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  372.317138][ T5876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.320147][ T5876] usb 8-1: Product: syz
[  372.322227][ T5876] usb 8-1: Manufacturer: syz
[  372.324018][ T5876] usb 8-1: SerialNumber: syz
[  372.327189][ T5876] usb 8-1: config 0 descriptor??
[  372.390909][  T924] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[  372.534085][ T5876] asix 8-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  372.537544][ T5876] asix 8-1:0.104: probe with driver asix failed with error -71
[  372.541508][ T5876] usb 8-1: USB disconnect, device number 37
[  372.541939][  T924] usb 9-1: Using ep0 maxpacket: 8
[  372.547656][  T924] usb 9-1: unable to get BOS descriptor or descriptor too short
[  372.551080][  T924] usb 9-1: config 4 interface 0 has no altsetting 0
[  372.556893][  T924] usb 9-1: string descriptor 0 read error: -22
[  372.558894][  T924] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  372.561774][  T924] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  372.567442][  T924] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  372.570814][  T924] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  372.575317][  T924] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  372.577612][  T924] usb 9-1: media controller created
[  372.592045][  T924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  372.989046][ T5876] usb 9-1: USB disconnect, device number 38
[  373.367336][   T10] usb 8-1: new high-speed USB device number 38 using dummy_hcd
[  373.528418][   T10] usb 8-1: Using ep0 maxpacket: 8
[  373.536582][   T10] usb 8-1: config 0 has an invalid interface number: 52 but max is 0
[  373.541360][   T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  373.544598][   T10] usb 8-1: config 0 has no interface number 0
[  373.546718][   T10] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  373.550928][   T10] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  373.555364][   T10] usb 8-1: config 0 interface 52 has no altsetting 0
[  373.561064][   T10] usb 8-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  373.564022][   T10] usb 8-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  373.566833][   T10] usb 8-1: Manufacturer: syz
[  373.570082][   T10] usb 8-1: config 0 descriptor??
[  373.573800][   T10] hub 8-1:0.52: bad descriptor, ignoring hub
[  373.575806][   T10] hub 8-1:0.52: probe with driver hub failed with error -5
[  373.751212][T17186] loop8: detected capacity change from 0 to 32768
[  373.760463][T17186] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  373.768509][T17186] (syz.8.4405,17186,1):ocfs2_mknod:505 ERROR: status = -2
[  373.772175][T17186] (syz.8.4405,17186,1):ocfs2_create:678 ERROR: status = -2
[  373.782028][   T10] input: syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.52/input/input22
[  373.796478][T10229] (syz-executor,10229,1):ocfs2_inode_is_valid_to_delete:928 ERROR: Skipping delete of root inode.
[  373.805189][T10229] ocfs2: Unmounting device (7,8) on (node local)
[  374.173464][  T924] usb 8-1: USB disconnect, device number 38
[  374.910922][T17222] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551613)
[  374.914196][T17222] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  375.440668][ T5876] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[  375.593175][ T5876] usb 9-1: Using ep0 maxpacket: 8
[  375.596218][ T5876] usb 9-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[  375.599588][ T5876] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  375.603004][ T5876] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.608240][ T5876] hub 9-1:32.0: bad descriptor, ignoring hub
[  375.610201][ T5876] hub 9-1:32.0: probe with driver hub failed with error -5
[  375.822630][T17239] netlink: 'syz.0.4428': attribute type 23 has an invalid length.
[  375.863807][T17242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.873438][T17242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.994383][   T10] usb 9-1: USB disconnect, device number 39
[  376.057585][T17249] netlink: 47 bytes leftover after parsing attributes in process `syz.7.4432'.
[  376.102780][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4434'.
[  376.578873][   T47] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[  376.674134][T17290] loop8: detected capacity change from 0 to 32768
[  376.677077][T17290] BTRFS info: device /dev/loop8 (7:8) using temp-fsid 20e94b5c-d601-4fc6-93ea-d0b5b9822ca6
[  376.682115][T17290] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4450 (17290)
[  376.687822][T17290] BTRFS info (device loop8 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  376.692356][T17290] BTRFS info (device loop8 state S): using crc32c (crc32c-lib) checksum algorithm
[  376.695320][T17290] BTRFS info (device loop8 state S): using free-space-tree
[  376.705992][   T29] BTRFS warning (device loop8 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x4e035593 level 0, ignored
[  376.713253][ T1090] BTRFS warning (device loop8 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  376.721634][   T29] BTRFS warning (device loop8 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x48746f3c level 0, ignored
[  376.726757][  T152] BTRFS warning (device loop8 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x49206b5e level 0, ignored
[  376.729962][   T47] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.732109][T17290] BTRFS info (device loop8 state S): bdev /dev/loop8 errs: wr 0, rd 0, flush 0, corrupt 7, gen 0
[  376.735143][   T47] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  376.742206][   T47] usb 8-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00
[  376.745264][   T47] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.746291][  T152] BTRFS warning (device loop8 state S): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x9b2456e4 level 0, ignored
[  376.750155][   T47] usb 8-1: config 0 descriptor??
[  376.765863][T10229] BTRFS info (device loop8 state S): last unmount of filesystem 20e94b5c-d601-4fc6-93ea-d0b5b9822ca6
[  377.001142][T17307] loop8: detected capacity change from 0 to 32768
[  377.013643][T17307] JBD2: Ignoring recovery information on journal
[  377.033659][T17307] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  377.039595][T17307] 
[  377.040419][T17307] ======================================================
[  377.042699][T17307] WARNING: possible circular locking dependency detected
[  377.044892][T17307] 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 Not tainted
[  377.048091][T17307] ------------------------------------------------------
[  377.050309][T17307] syz.8.4451/17307 is trying to acquire lock:
[  377.052221][T17307] ffff88802d7b6be0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x320
[  377.055748][T17307] 
[  377.055748][T17307] but task is already holding lock:
[  377.058018][T17307] ffff88802d7b6c78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  377.061445][T17307] 
[  377.061445][T17307] which lock already depends on the new lock.
[  377.061445][T17307] 
[  377.064692][T17307] 
[  377.064692][T17307] the existing dependency chain (in reverse order) is:
[  377.067539][T17307] 
[  377.067539][T17307] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[  377.070113][T17307]        lock_acquire+0x120/0x360
[  377.071771][T17307]        down_read+0x46/0x2e0
[  377.073338][T17307]        ocfs2_init_acl+0x2f9/0x720
[  377.075055][T17307]        ocfs2_mknod+0x1321/0x2050
[  377.076748][T17307]        ocfs2_create+0x1a5/0x440
[  377.078425][T17307]        path_openat+0x14f4/0x3830
[  377.080060][T17307]        do_filp_open+0x1fa/0x410
[  377.081720][T17307]        do_sys_openat2+0x121/0x1c0
[  377.083376][T17307]        __x64_sys_openat+0x138/0x170
[  377.085099][T17307]        do_syscall_64+0xfa/0x3b0
[  377.086711][T17307]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.088731][T17307] 
[  377.088731][T17307] -> #3 (jbd2_handle){++++}-{0:0}:
[  377.091146][T17307]        lock_acquire+0x120/0x360
[  377.092855][T17307]        start_this_handle+0x1fa7/0x21c0
[  377.094630][T17307]        jbd2__journal_start+0x2c1/0x5b0
[  377.096386][T17307]        jbd2_journal_start+0x2a/0x40
[  377.098099][T17307]        ocfs2_start_trans+0x376/0x6d0
[  377.099868][T17307]        ocfs2_mknod+0xe93/0x2050
[  377.101524][T17307]        ocfs2_create+0x1a5/0x440
[  377.103130][T17307]        path_openat+0x14f4/0x3830
[  377.104770][T17307]        do_filp_open+0x1fa/0x410
[  377.106409][T17307]        do_sys_openat2+0x121/0x1c0
[  377.108084][T17307]        __x64_sys_openat+0x138/0x170
[  377.109769][T17307]        do_syscall_64+0xfa/0x3b0
[  377.111336][T17307]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.113359][T17307] 
[  377.113359][T17307] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  377.115972][T17307]        lock_acquire+0x120/0x360
[  377.117571][T17307]        down_read+0x46/0x2e0
[  377.119037][T17307]        ocfs2_start_trans+0x36a/0x6d0
[  377.120733][T17307]        ocfs2_mknod+0xe93/0x2050
[  377.122300][T17307]        ocfs2_create+0x1a5/0x440
[  377.123918][T17307]        path_openat+0x14f4/0x3830
[  377.125578][T17307]        do_filp_open+0x1fa/0x410
[  377.127258][T17307]        do_sys_openat2+0x121/0x1c0
[  377.128933][T17307]        __x64_sys_openat+0x138/0x170
[  377.130619][T17307]        do_syscall_64+0xfa/0x3b0
[  377.132207][T17307]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.134227][T17307] 
[  377.134227][T17307] -> #1 (sb_internal#5){.+.+}-{0:0}:
[  377.136583][T17307]        lock_acquire+0x120/0x360
[  377.138196][T17307]        ocfs2_start_trans+0x26b/0x6d0
[  377.139985][T17307]        ocfs2_setattr+0x969/0x1b40
[  377.141693][T17307]        notify_change+0xb36/0xe40
[  377.143315][T17307]        do_truncate+0x1a4/0x220
[  377.144854][T17307]        vfs_truncate+0x493/0x520
[  377.146530][T17307]        do_sys_truncate+0xdb/0x190
[  377.148170][T17307]        __x64_sys_truncate+0x5b/0x70
[  377.149863][T17307]        do_syscall_64+0xfa/0x3b0
[  377.151465][T17307]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.153562][T17307] 
[  377.153562][T17307] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  377.156317][T17307]        validate_chain+0xb9b/0x2140
[  377.158083][T17307]        __lock_acquire+0xab9/0xd20
[  377.159765][T17307]        lock_acquire+0x120/0x360
[  377.161350][T17307]        down_write+0x96/0x1f0
[  377.162942][T17307]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  377.165059][T17307]        ocfs2_xattr_set+0x595/0x11f0
[  377.166829][T17307]        ocfs2_set_acl+0x701/0x7b0
[  377.168541][T17307]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  377.170401][T17307]        vfs_set_acl+0x887/0xb00
[  377.172054][T17307]        filename_setxattr+0x2e0/0x600
[  377.173873][T17307]        path_setxattrat+0x364/0x3a0
[  377.175626][T17307]        __x64_sys_setxattr+0xbc/0xe0
[  377.177422][T17307]        do_syscall_64+0xfa/0x3b0
[  377.179057][T17307]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.181135][T17307] 
[  377.181135][T17307] other info that might help us debug this:
[  377.181135][T17307] 
[  377.184446][T17307] Chain exists of:
[  377.184446][T17307]   &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem
[  377.184446][T17307] 
[  377.188823][T17307]  Possible unsafe locking scenario:
[  377.188823][T17307] 
[  377.191206][T17307]        CPU0                    CPU1
[  377.192975][T17307]        ----                    ----
[  377.194756][T17307]   lock(&oi->ip_xattr_sem);
[  377.196401][T17307]                                lock(jbd2_handle);
[  377.198622][T17307]                                lock(&oi->ip_xattr_sem);
[  377.201012][T17307]   lock(&ocfs2_file_ip_alloc_sem_key);
[  377.202869][T17307] 
[  377.202869][T17307]  *** DEADLOCK ***
[  377.202869][T17307] 
[  377.205580][T17307] 3 locks held by syz.8.4451/17307:
[  377.207344][T17307]  #0: ffff888028658428 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  377.210430][T17307]  #1: ffff88802d7b6f40 (&type->i_mutex_dir_key#17){++++}-{4:4}, at: vfs_set_acl+0x3cd/0xb00
[  377.213810][T17307]  #2: ffff88802d7b6c78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  377.217456][T17307] 
[  377.217456][T17307] stack backtrace:
[  377.219419][T17307] CPU: 0 UID: 0 PID: 17307 Comm: syz.8.4451 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  377.219430][T17307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  377.219436][T17307] Call Trace:
[  377.219441][T17307]  <TASK>
[  377.219445][T17307]  dump_stack_lvl+0x189/0x250
[  377.219457][T17307]  ? __pfx_dump_stack_lvl+0x10/0x10
[  377.219465][T17307]  ? __pfx__printk+0x10/0x10
[  377.219474][T17307]  ? print_lock_name+0xde/0x100
[  377.219484][T17307]  print_circular_bug+0x2ee/0x310
[  377.219494][T17307]  check_noncircular+0x134/0x160
[  377.219503][T17307]  validate_chain+0xb9b/0x2140
[  377.219511][T17307]  ? check_path+0x21/0x40
[  377.219519][T17307]  ? look_up_lock_class+0x74/0x170
[  377.219528][T17307]  ? register_lock_class+0x51/0x320
[  377.219539][T17307]  __lock_acquire+0xab9/0xd20
[  377.219550][T17307]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  377.219558][T17307]  lock_acquire+0x120/0x360
[  377.219567][T17307]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  377.219574][T17307]  ? __lock_acquire+0xab9/0xd20
[  377.219585][T17307]  down_write+0x96/0x1f0
[  377.219594][T17307]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  377.219602][T17307]  ? __pfx_down_write+0x10/0x10
[  377.219613][T17307]  ocfs2_try_remove_refcount_tree+0xb6/0x320
[  377.219621][T17307]  ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10
[  377.219629][T17307]  ? up_write+0x1c4/0x420
[  377.219636][T17307]  ? ocfs2_xattr_set+0x334/0x11f0
[  377.219644][T17307]  ocfs2_xattr_set+0x595/0x11f0
[  377.219655][T17307]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  377.219662][T17307]  ? do_raw_spin_unlock+0x4d/0x240
[  377.219672][T17307]  ? __lock_acquire+0xab9/0xd20
[  377.219685][T17307]  ? do_raw_spin_unlock+0x4d/0x240
[  377.219693][T17307]  ? _raw_spin_unlock+0x28/0x50
[  377.219700][T17307]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[  377.219711][T17307]  ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10
[  377.219722][T17307]  ocfs2_set_acl+0x701/0x7b0
[  377.219729][T17307]  ? __lock_acquire+0xab9/0xd20
[  377.219739][T17307]  ocfs2_iop_set_acl+0x1aa/0x2a0
[  377.219746][T17307]  ? vfs_set_acl+0x3cd/0xb00
[  377.219754][T17307]  ? __pfx_ocfs2_iop_set_acl+0x10/0x10
[  377.219761][T17307]  ? evm_inode_set_acl+0xba/0x410
[  377.219768][T17307]  ? __pfx_evm_inode_set_acl+0x10/0x10
[  377.219775][T17307]  ? down_write+0x162/0x1f0
[  377.219784][T17307]  ? __pfx_down_write+0x10/0x10
[  377.219792][T17307]  ? evm_revalidate_status+0x4f/0xb0
[  377.219799][T17307]  ? make_vfsuid+0x49/0xa0
[  377.219807][T17307]  ? inode_owner_or_capable+0xf1/0x1c0
[  377.219815][T17307]  vfs_set_acl+0x887/0xb00
[  377.219825][T17307]  filename_setxattr+0x2e0/0x600
[  377.219837][T17307]  ? __pfx_filename_setxattr+0x10/0x10
[  377.219848][T17307]  ? getname_flags+0x1e5/0x540
[  377.219855][T17307]  path_setxattrat+0x364/0x3a0
[  377.219864][T17307]  ? __pfx_path_setxattrat+0x10/0x10
[  377.219871][T17307]  ? do_futex+0x333/0x420
[  377.219886][T17307]  ? rcu_is_watching+0x15/0xb0
[  377.219893][T17307]  __x64_sys_setxattr+0xbc/0xe0
[  377.219904][T17307]  do_syscall_64+0xfa/0x3b0
[  377.219913][T17307]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.219921][T17307]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.219928][T17307]  ? exc_page_fault+0x9f/0xf0
[  377.219936][T17307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.219943][T17307] RIP: 0033:0x7fcf4718ebe9
[  377.219952][T17307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  377.219958][T17307] RSP: 002b:00007fcf480cb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  377.219967][T17307] RAX: ffffffffffffffda RBX: 00007fcf473b5fa0 RCX: 00007fcf4718ebe9
[  377.219972][T17307] RDX: 0000000000000000 RSI: 0000200000002a40 RDI: 0000200000002a00
[  377.219977][T17307] RBP: 00007fcf47211e19 R08: 0000000000000000 R09: 0000000000000000
[  377.219982][T17307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  377.219987][T17307] R13: 00007fcf473b6038 R14: 00007fcf473b5fa0 R15: 00007ffe0ebdcbf8
[  377.220019][T17307]  </TASK>
[  377.381690][T10229] ocfs2: Unmounting device (7,8) on (node local)
[  377.559367][   T47] hid-led 0003:1D34:0004.0019: hidraw0: USB HID v0.06 Device [HID 1d34:0004] on usb-dummy_hcd.7-1/input0
[  377.564480][   T47] hid-led 0003:1D34:0004.0019: Dream Cheeky Webmail Notifier initialized
[  377.763520][   T47] usb 8-1: USB disconnect, device number 39
[  378.088541][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.090694][ T1364] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
02:29:49  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000114a RDI=000000000000114b RBP=00000000000003f8 RSP=ffffc90008086ab0
R8 =ffff88801ff18237 R9 =1ffff11003fe3046 R10=dffffc0000000000 R11=ffffffff854e72e0
R12=dffffc0000000000 R13=ffffffff99af18f7 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e735c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fcf480cb6c0 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002a00 CR3=00000001259e4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffff0000000000 XMM01=0101010101010101 0101010000000000
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=1360034e5d53002c 74696d6d6f635f63 XMM05=5cf3945eb98408b4 4938eecd7e6e9eec
XMM06=0000000000000000 00b0be19cd0096ec XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 000000000006df45 XMM09=0000000000000000 00007fcf47212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=d79b6d794176a800 RBX=ffffffff81968308 RCX=d79b6d794176a800 RDX=0000000000000001
RSI=ffffffff8be325e0 RDI=ffffffff81968308 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34230 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020005000
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055556ad5f7d0 CR3=00000000275ae000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007effbd587498 00007effbd587470 XMM03=00007effbd5874a8 00007effbd5874a0
XMM04=00007effbe0ed100 00007effbd587460 XMM05=00007effbd587478 00007effbd5874c0
XMM06=00007effbd5874b8 00007effbd5874b0 XMM07=00007effbd5874a8 00007effbd5874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007effbd412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
