last executing test programs:

3m5.928951135s ago: executing program 0 (id=272):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x7, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x40408c0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, 0x0, 0x0)
pivot_root(0x0, &(0x7f0000001480)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x815, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x619, &(0x7f0000000800)="$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")

3m4.898765852s ago: executing program 0 (id=287):
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x234)
write(r1, &(0x7f0000000000)='3', 0x4e)
close(r0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

3m4.460805411s ago: executing program 0 (id=288):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x134)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0)
write(r0, &(0x7f0000000000)='7', 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)

3m4.460510292s ago: executing program 0 (id=289):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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")
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180))

3m4.269617935s ago: executing program 0 (id=290):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x70bd2a, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008cd7}, 0x0)

3m4.010307303s ago: executing program 0 (id=291):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@multicast1, @ipv6=@mcast2, @ipv4=@remote, 0x12}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2={0xfc, 0x2, '\x00', 0x1}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0)

3m3.854080935s ago: executing program 32 (id=291):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="8500000008000000350000008400000085000000070000009500000000000000fed023d1d405000000c7d4012507000000c71adb05d72768b8242dd90d17e4c52505750482b009546a5f3f00573f31b53fd3e52bd87184446d165ae2939bbca322a415a98c885faad395f3e4e0635559362ed862ce7c69ad133037af3a000000000000000000000058c122dff93c54caec3751652d11fd4f66711918d3604b92666d60c88b658fe57bb5d365c5b89625385f230ba21f570635837c7bc74be573bfd68aaaf06d842085f84b96c4709e2c9449f0818f6fc5657572fb3e5bb8ff6f643e52f4964c62a70a011ede8b504c8a30381b8eff01d7615e1789bb4b3b7ef3668a98a785a80aa2d1ab149b9316091fb3025f0716799d8280acb3880a882f28dd3111e02c3b0b2818bf5bb902cc9c1666f5fdd2e43901ca4796f04db25c3df35cdfc17c54936202b45b7a09816aa76e8b9bbe24022007aae367025040e8b2255ced48a4b2db3f280dc6fd2f5374548c499ae74631f3be04e28d601369f9488fb074eb35540df5e053376ea29125d6bb916496b04b8e359c1edef91677414729967cffa736d7789c14e918b77518ee8e5d5aff9148be69267fff35"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@multicast1, @ipv6=@mcast2, @ipv4=@remote, 0x12}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2={0xfc, 0x2, '\x00', 0x1}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0)

2m28.059410679s ago: executing program 1 (id=790):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x8, 0x59555956, 0x6, 0xfffffc01, 0x9, 0x6, 0x6, 0x0, 0x4, 0x0, 0x1}})

2m27.88075594s ago: executing program 1 (id=792):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xc0e02, 0x0)
fcntl$setstatus(r1, 0x4, 0x8e000)
close(0x3)

2m27.798636746s ago: executing program 1 (id=793):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0x9f, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x8, 0x6381}]}, 0x10)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

2m27.71902547s ago: executing program 1 (id=794):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9)
r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]})
unlink(&(0x7f0000000240)='./file1\x00')
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10005)
r2 = open(0x0, 0x163100, 0x0)
getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0)

2m26.147792783s ago: executing program 1 (id=803):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f00000005c0)={&(0x7f0000000080)=0xe00, 0x5, &(0x7f00000004c0), &(0x7f0000000580)})
getsockopt$inet_int(r0, 0x0, 0x22, 0x0, &(0x7f0000000040)=0x56)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x2c, 0x1)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$getflags(r1, 0xb)
socket$inet_tcp(0x2, 0x1, 0x0)

2m25.509226283s ago: executing program 1 (id=808):
r0 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r<Y\xa1\xdeP\b\xf1kM\x02\x00\x00\x03\x00eh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\x06]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x05\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc)
fcntl$addseals(r0, 0x409, 0x20)

2m25.305549278s ago: executing program 33 (id=808):
r0 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r<Y\xa1\xdeP\b\xf1kM\x02\x00\x00\x03\x00eh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\x06]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x05\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc)
fcntl$addseals(r0, 0x409, 0x20)

2m18.99464267s ago: executing program 3 (id=866):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000780)={[{@auto_da_alloc}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x3}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@init_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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")

2m18.831321424s ago: executing program 3 (id=867):
r0 = syz_open_dev$rtc(&(0x7f00000001c0), 0x0, 0x440)
ioctl$RTC_UIE_OFF(r0, 0x7004)

2m18.82886157s ago: executing program 3 (id=868):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000012000/0x3000)=nil, 0x0, 0x0, 0x0, 0xcbfb, 0x11, 0x1, 0x1, 0x5a})

2m18.747813503s ago: executing program 3 (id=869):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e80)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x3, 0x7, 0x802, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

2m18.747429067s ago: executing program 3 (id=870):
mkdir(&(0x7f0000000040)='my_sys\x00', 0xd6)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)

2m17.804142641s ago: executing program 3 (id=877):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000}, 0x50)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x521c, 0x1, 0x61, 0x0, 0x18)

2m2.777631456s ago: executing program 34 (id=877):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000}, 0x50)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x521c, 0x1, 0x61, 0x0, 0x18)

1m59.829678517s ago: executing program 2 (id=1017):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x28140, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000200)=0x1000)
read$dsp(r0, &(0x7f0000000240)=""/68, 0x44)

1m59.220977362s ago: executing program 2 (id=1020):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x22480, 0x28)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0)
lseek(r0, 0xffffffffffffffff, 0x3)

1m59.138086829s ago: executing program 2 (id=1021):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)

1m59.028540146s ago: executing program 2 (id=1022):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x153e, &(0x7f00000034c0)="$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")
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)

1m58.881156181s ago: executing program 2 (id=1023):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

1m57.779088476s ago: executing program 2 (id=1024):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000080)={[{@journal_ioprio}, {@debug}, {@nombcache}]}, 0x1, 0x533, &(0x7f0000000b00)="$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")
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000002c0)=""/52, 0x34)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

1m57.77897996s ago: executing program 35 (id=1024):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000080)={[{@journal_ioprio}, {@debug}, {@nombcache}]}, 0x1, 0x533, &(0x7f0000000b00)="$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")
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000002c0)=""/52, 0x34)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

1m53.670852845s ago: executing program 4 (id=1069):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)

1m53.62016016s ago: executing program 4 (id=1070):
write$tun(0xffffffffffffffff, &(0x7f0000000400)={@val={0x0, 0x891f}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x6000, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0x8}}}}}}, 0x2e)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x10040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888}]}}}}}}}, 0x0)
timer_create(0x0, 0x0, 0x0)
r1 = open(0x0, 0x12d502, 0x47)
r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x200200, 0x6a)
linkat(r1, 0x0, r2, 0x0, 0x400)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc415811a2970bbb79c9fe1c95293dbe00000036b03632dab46a43226a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37939f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x56d, &(0x7f00000000c0)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)

1m53.548390827s ago: executing program 4 (id=1071):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000900)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f3f428bd7000fbdbdf251a000000070021006161000005009200010000002000228004000080040019800400"], 0x44}, 0x1, 0x0, 0x0, 0x20000841}, 0x4004000)

1m53.54808789s ago: executing program 4 (id=1072):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x7, &(0x7f0000000e00)=<r1=>0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x1, 0x0, 0x0, 0x0, r2}])

1m52.331264846s ago: executing program 4 (id=1077):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendfile(r1, r0, 0x0, 0x7)

1m51.987194837s ago: executing program 4 (id=1085):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/usb/usbmon/0s\x00', 0xc380, 0xc2)

1m51.70163844s ago: executing program 36 (id=1085):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/usb/usbmon/0s\x00', 0xc380, 0xc2)

1m25.181335838s ago: executing program 6 (id=1410):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @rand_addr=0x64010102, @empty}, 0xc)

1m25.101387996s ago: executing program 6 (id=1411):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001080)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0})

1m23.61662351s ago: executing program 6 (id=1421):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x16}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

1m23.511466567s ago: executing program 6 (id=1422):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

1m23.450082002s ago: executing program 6 (id=1423):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x739})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xffbffffc, 0x80, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

1m23.160870597s ago: executing program 6 (id=1424):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200081, &(0x7f0000000040), 0x3, 0x57b, &(0x7f00000014c0)="$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")
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000649, &(0x7f0000000600)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x19}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@user_xattr}, {@grpjquota}, {@data_writeback}, {@noblock_validity}, {@minixdf}, {@journal_checksum}]}, 0x0, 0x60d, &(0x7f0000000800)="$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")
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x84406d, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

1m23.00601909s ago: executing program 37 (id=1424):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200081, &(0x7f0000000040), 0x3, 0x57b, &(0x7f00000014c0)="$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")
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000649, &(0x7f0000000600)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x19}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@user_xattr}, {@grpjquota}, {@data_writeback}, {@noblock_validity}, {@minixdf}, {@journal_checksum}]}, 0x0, 0x60d, &(0x7f0000000800)="$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")
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x84406d, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

57.856589199s ago: executing program 5 (id=1725):
clock_nanosleep(0x31e54989f5018bd, 0x1, &(0x7f0000000080), 0x0)

57.790715741s ago: executing program 5 (id=1726):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000140)='f', 0x1}], 0x1, &(0x7f0000000100)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18, 0x40}}], 0x1, 0x4)

57.740669595s ago: executing program 5 (id=1727):
r0 = syz_io_uring_setup(0xf, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8000000}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000108)=<r2=>0x0, &(0x7f0000000110)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG_ZC={0x30, 0x4, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x41, 0x1, {0x3}})
io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0)

57.678530859s ago: executing program 5 (id=1729):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000003, &(0x7f0000000140)={[{@adinicb}, {@unhide}, {@anchor={'anchor', 0x3d, 0xec1}}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@undelete}, {@volume={'volume', 0x3d, 0xb1}}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x2}}]}, 0xde, 0xc2e, &(0x7f0000000f40)="$eJzs3U9sHNd9B/DfGy7FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cvHU6fSwWwEAPEiXR7966oz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7yWxqv3HfVL7f5bt8eGR7avdjhVNfuq8uVP/fSZs+e+9MLQ+W5eas98QP377bPx2ujVi42XZ2/OzU8tLExNNsZm2hOzk1O73sNe6291ojoBjZuv35q8fn2hceb5s5s+vj34/sATxwYvDD178plu2bHhkZHRjSL13vK1e25Ix04zPA5FEScjxXPf+2lqRUQRez8X9Qc79lsdrjpxourE2PBI1ZHpdmtmsfzwSvdEFBGNnkrN7jnafiyi1v9A+7CzZsRS2fyywSfK7o3OteZb16anGlda84vtxfbszJXUaW3Zn0YUcT5FLEfE6sDdu+uPImqR4jtH19K1iOjrnocvVhODd25HsY993IWynY3+iOXiERizA2wging1UvzsneMxka8z1bXmCxGvlvmDiLfKfCkilV+McxHvbfM94tFUiyL+shz/C2tpsroedK8rl77W+MrM9dmest3ryke8P9x1pXhI94fDW/LBOODXpnoU0aqu+Gvp3n+zAwAAAAAAAAAAAAAAAMD9djiK+EykeOU//qSaVxzVvPSjF4b+cPBX+3rKPf0h+0kR8XxELBW7m5N7KE8MvJKupPSQ5xI/zupRxJ/m+X/fetiNAQAAAAAAAAAAAAAAAAAAeKwV8ZNI8eK7x9Ny9K4p3p650bjaujbdWRW2u/Zvd8309fX19UbqZDPneM6lnMs5V3Ku5owi18/ZzDmecynncs6VnKs5oy/Xz9nMOZ5zKedyzpWcqzmjluvnbOYcz7mUcznnSs7VnHFA1u4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg4KaKIX0SKb39jLUWKiGbEeHRyZeBhtw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2kIr4fKRp/1LyzrRYRqfq343j5y7loHirzk9EcKvOlaF7M2aqy1vzWQ2g/e9OfivhxpBiov31nwPP493fe3fkaxFvf3Hj32Von+7ofDr4/8MSxoxeGRn7j6Z1ep+0acOJSe+bW7cbY8MjIaM/mWj76J3u2DebjFven60TEwhtvvt6anp6av/cX5VdgD9UfoRep9rj01IvqRdQORDMeTt95DJT3//cixe+++5/dG37n/l+PX+m8u3OHj5//2cb9/8WtO9rl/b+2tV6+/5f39O3u/0/2bHsx/26kvxZRX7w5138sor7wxpsn2zdbN6ZuTM2cO3Xqy0NDXz57qv9QRP16e3qq59V9OV0AAAAAAAAAAAAAAAAAD04q4vcjRevHa6kREber+VqDF4aePflMX/RV8602zdt+bfTqxcbLszfn5qcWFqYmG2Mz7YnZyandHq5eTfcaGx7Zl858qMP73P7D9Zdn596Yb9/448VtPz9Sv3htYXG+NbH9x3E4iohm75YTVYPHhkeqRk+3WzNV1SvbTqb/6PpTEf8VKSbONdLn87Y8/3/rDP9N8/+Xtu5on+b/f6JnW3nMlIr4eaT4nb96Oj5ftfNI3HXOcrm/ixQnzn8ul4tDZbluGzrPFejMDCzL/l+k+KdfbC7bnQ/55EbZ07s+sY+IcvyPRorv/8V34zfzts3Pf9h+/I9s3dE+jf9TPduObHpewZ67Th7/k5HipSffjt/K2z7o+R/dZ28cz4XvPJ9jn8b/Uz3bBvNxf/v+dB0AAAAAAAAAAOCR1p+K+PtI8cORWnohb9vN3/+b3Lqjffr7X5/u2TZ5f9Yr+tAXez6pAAAAAHBA9KcifhIpbiy+fWcO9eb53z3zP39vY/7ncNryafXnfL9WPTfgfv75X6/BfNzxvXcbAAAAAAAAAAAAAAAAAAAADpSUinghr6c+Xs3nn9xxPfWVSPHK/zyXy6VjZbnuOvCD1a/1y7MzJy9OT89OtBZb16anGqNzrYmpsu5TkWLtbz+X6xbV+urd9eY7a7xvrMU+HylG/qFbtrMWe3dt8qc2yp4uy34iUvz3P24u213H+lMbZc+UZf8mUnz9X7Yve2yj7Nmy7HcjxY++3uiWPVKW7T4f9dMbZZ+fmC32YVQAAAAAAAAAAAAAAAAAAAB43PSnIv48UvzvzeU7c/nz+v/9PW8rb32zZ73/LW5X6/wPVuv/7/T6Xtb/r54rsLTTUQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OMpRRFvRoq5y2tpZaB831G/1J65dXtseGT7aodTVbOvKl/+1E+fOXvuSy8Mne/mB9e/3z4Tr41evdh4efbm3PzUwsLUZGNspj0xOzm16z3stf5WJ6oT0Lj5+q3J69cXGmeeP7vp49uD7w88cWzwwtCzJ5/plh0bHhkZ7SlT67/no98l7bD9UBTx15Hiue/9NP1wIKKIvZ+LD/nu7LfDVSdOVJ0YGx6pOjLdbs0slh9e6Z6IIqLRU6nZPUcPYCz2pBmxVDa/bPCJsnujc6351rXpqcaV1vxie7E9O3MldVpb9qcRRZxPEcsRsTpw9+76o4jXI8V3jq6lfx2I6Ouehy9eHv3qqTM7t6PYxz7uQtnORn/EcvEIjNkBNhBF/HOk+Nk7x+PfBiJq0fmJL0S8WuYPIt6Kznin8otxLuK9bb5HPJpqUcT/l+N/YS29M1BeD7rXlUtfa3xl5vpsT9nudeWRvz88SAf82lSPIn5UXfHX0r/77xoAAAAAAAAAAAAAAADgACni1yPFi+8eT9X84DtzitszNxpXW9emO9P6unP/unOm19fX1xupk82c4zmXci7nXMm5mjOKXD9ns8z6+vp4fr+UcznnSs7VnNGX6+ds5hzPuZRzOedKztWcUcv1czZzjudcyrmccyXnas44IHP3AAAAAAAAAAAAAAAAAACAj5ei+ifFt7+xltYHOutLj0cnV6wH+rH3ywAAAP//Iun4rQ==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

57.568365323s ago: executing program 5 (id=1730):
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a)
r0 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r0, &(0x7f00000091c0)=""/16384, 0x4000)

57.100139555s ago: executing program 5 (id=1735):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1300000002"], 0x8)

56.788536735s ago: executing program 38 (id=1735):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1300000002"], 0x8)

1.269998059s ago: executing program 9 (id=2602):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.208996473s ago: executing program 9 (id=2604):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
readv(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/197, 0xc5}], 0x1)

1.1175303s ago: executing program 8 (id=2606):
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r5, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0)

1.11743048s ago: executing program 9 (id=2607):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
setpriority(0x2, 0x0, 0x7)

1.047605695s ago: executing program 9 (id=2608):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00', <r2=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

1.001013955s ago: executing program 9 (id=2609):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304, 0x38}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", "8df6bd29", 'H\x00'}, 0x28)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1)

500.470426ms ago: executing program 7 (id=2615):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xe86c0, 0x161)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00')
read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020)

451.178216ms ago: executing program 7 (id=2616):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil)

400.215236ms ago: executing program 7 (id=2617):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x2}]}, @union]}}, 0x0, 0x3a, 0x0, 0x1}, 0x28)

399.995964ms ago: executing program 7 (id=2618):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000240)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100000000000000000b0a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r1], 0x38}}, 0x20044804)

319.578745ms ago: executing program 7 (id=2619):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000)
sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x64010101, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)

269.914796ms ago: executing program 7 (id=2620):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x20040090)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010603010902120001000000000904"], 0x0)

269.341637ms ago: executing program 9 (id=2621):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x2004c850}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80)
r2 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="210020b0e78da4fd7d892b988e5795a29846082672e76eb36e87d3752de3ba1d5e22eaabdbbf62c4b083263a103cb79f084289d8fa0fe11786168801e8686ba89be9c13358971b1e48b3db9e25c0e89cf49a4991fa70d0588530ee1e7c4a7197d838490f1984a5632197ed250fb06bc5cfbdbdf1b301dd13fa42a3bc07572ff59e935dcec1879637e42a209b58dd3e96a86698045ab67b7621fdb81ffd964211f02a", 0xa2}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x5, @mcast1, 0x9}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000000280)="0c3778228b089051a95550c45de565aa70c5447442663e89293c45643443b76c91808f2cf821c2b312c1f9194722c64c9ab60df01391740221bedac85ce75d540edcf32057e84a1f540d0ca16dce2bcf6ee93cd558f2c8cc481d535cb8471c2e2813bb85d9a303c919eca55ba3c000fc2f58ea60273e553d9131766dec46d561199285ec094bbbc42c5d04df31852ec8ed4fd824e98e95c1a54b609dcde5223b4acfc335905c47e6a86e5010bc340b019fccd98e43846cf7bb5f05ac1216404551c525e7ddc9780647e5aad335bb11c2a264edaa842d8b9ba5b2a1143ff64be80ceb4f64526208", 0xe7}, {&(0x7f0000000380)="76cdfa133919655a67c9df2b07a21300b55a6c9639655b90a88f19f7dd2cdd0d05976c1731ea2d39fb8f1105936ba3fd14656eb389d121a7842d7ca39d9b70b50d9fd5dbc78ce3dd80", 0x49}, {&(0x7f0000000480)="7cadadbba807892f0cf235966c48dbc32554b33aaf7fa6d9982f99f52576676c1ea08a59fef4ac853ded0b3b060ab8f5fcbb852c696a6bb1b01a08c1010f502f9266d76a4ba1453b452cf9937667bc42bcbe51fd8057c28b6183c06aa960f7a543385fbafc3f9d97e035891d3ef9d5d01c3abe23d48b355b3db7dee3168ea24744", 0x81}, {&(0x7f0000000540)="286e6fdf1eb6dd5e2f9d3ec6aba607f716a5b454a0184060a63c6ef35279efb051526f1f7d451b3a800cf3380929c0659a3e08d93fdce37dbba8e9825026682bba0da6335d4932ea00cbeb76192db2c36b7b2a29542b185d6dbb895b9a9934343dfa36ff74ffabb5d033733c262fc3803cab0ed44b8d2bd722fa4e7a5cbd9807f71e8f002d5d111c17792006", 0x8c}, {&(0x7f0000000600)="5597ff279658c57151d341536d3708df10794dad48c1a5661218b07ef7bdc7f5db1d5bd91130adb350b04870f67e26f7ca909eae231d429a98eef93113e2a528d08492c40c88dfe206838af83144dd7d2bc5dc3e1fdf705fb48b014941c597456c5b690ec8664f1ec5f297eb9d9d6557127f8cd3528965cb9969f031a6115ea8b9e7cc2f70dc4e0fc7be57dc94033cd87e6402eb8ab6b9abc64cb0882ab87ed7f48f83d89de76a95f45e699b88f9ae75200367242b158aaca6b24b043068f995b93c7742b135fc160c784350576dd48db86f7d926a6ea5f03e45", 0xda}, {&(0x7f00000008c0)="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", 0xc21}], 0x6}}], 0x2, 0x4c0c0)

269.023257ms ago: executing program 8 (id=2622):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x20000094)
recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000000040)=""/124, 0x7c}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f00000005c0)=""/91, 0x5b}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0xb919}], 0x4, 0x0, 0x0)

140.697917ms ago: executing program 8 (id=2623):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r0, 0xee01, 0x0)
keyctl$setperm(0x5, r0, 0x100)
keyctl$revoke(0x3, r0)

140.524908ms ago: executing program 8 (id=2624):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

69.603139ms ago: executing program 8 (id=2625):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="dc", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000008400000001000000000000af7a00020000000000000000000400"/44, @ANYRES32=0x0, @ANYBLOB="18000000000000008400000005"], 0x48}], 0x1, 0x40)

0s ago: executing program 8 (id=2626):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x88c0, &(0x7f0000000100)={[{@dir_resv_level={'dir_resv_level', 0x3d, 0x402}}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x7}}, {@noacl}, {@journal_async_commit}, {@coherency_full}, {@heartbeat_none}, {@atime_quantum={'atime_quantum', 0x3d, 0x3}}, {@acl}]}, 0xfd, 0x4421, &(0x7f0000004480)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000021300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d811, 0x0, 0x1, 0x0, &(0x7f0000000140))
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

kernel console output (not intermixed with test programs):

prof+0xa8/0x660
[  203.672195][T10380]  ? alloc_mnt_ns+0xb3/0x2c0
[  203.672207][T10380]  ? alloc_mnt_ns+0xb3/0x2c0
[  203.672225][T10380]  alloc_mnt_ns+0xb3/0x2c0
[  203.672240][T10380]  __se_sys_fsmount+0x84a/0xf40
[  203.672292][T10380]  ? __pfx___se_sys_fsmount+0x10/0x10
[  203.672311][T10380]  ? ksys_write+0x242/0x270
[  203.672325][T10380]  ? __pfx___se_sys_futex+0x10/0x10
[  203.672338][T10380]  ? __pfx_ksys_write+0x10/0x10
[  203.672356][T10380]  do_syscall_64+0x166/0x520
[  203.672366][T10380]  ? trace_irq_disable+0x3b/0x140
[  203.672376][T10380]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.672417][T10380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.672427][T10380] RIP: 0033:0x7f610fd9e159
[  203.672436][T10380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  203.672444][T10380] RSP: 002b:00007f6110b98028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0
[  203.672454][T10380] RAX: ffffffffffffffda RBX: 00007f6110025fa0 RCX: 00007f610fd9e159
[  203.672460][T10380] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  203.672465][T10380] RBP: 00007f610fe3506b R08: 0000000000000000 R09: 0000000000000000
[  203.672470][T10380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  203.672475][T10380] R13: 00007f6110026038 R14: 00007f6110025fa0 R15: 00007fffc3153408
[  203.672488][T10380]  </TASK>
[  203.849019][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.857032][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.175433][T10404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.186053][   T13] bridge_slave_1: left allmulticast mode
[  204.189211][   T13] bridge_slave_1: left promiscuous mode
[  204.193985][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.199323][   T13] bridge_slave_0: left allmulticast mode
[  204.206243][T10404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.211374][   T13] bridge_slave_0: left promiscuous mode
[  204.217579][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.247717][T10408] loop8: detected capacity change from 0 to 1024
[  204.445592][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.447097][T10412] loop8: detected capacity change from 0 to 256
[  204.464582][T10412] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x9c8165b0, utbl_chksum : 0xe619d30d)
[  204.470060][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.476731][T10412] exFAT-fs (loop8): error, data size is invalid(16781312)
[  204.477456][   T13] bond0 (unregistering): Released all slaves
[  204.479150][T10412] exFAT-fs (loop8): Filesystem has been set read-only
[  204.505747][   T13] bond1 (unregistering): Released all slaves
[  204.536028][   T13] bond2 (unregistering): Released all slaves
[  205.009851][ T5339] 8021q: adding VLAN 0 to HW filter on device eth21
[  205.131625][T10375] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.133987][T10375] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.136618][T10375] bridge_slave_0: entered allmulticast mode
[  205.139452][T10375] bridge_slave_0: entered promiscuous mode
[  205.143605][T10375] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.145821][T10375] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.148595][T10375] bridge_slave_1: entered allmulticast mode
[  205.153163][T10375] bridge_slave_1: entered promiscuous mode
[  205.195336][T10375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.201775][T10375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.209643][   T13] hsr_slave_0: left promiscuous mode
[  205.212541][   T13] hsr_slave_1: left promiscuous mode
[  205.214878][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.217476][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.220728][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.223749][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.235491][   T13] veth1_macvtap: left promiscuous mode
[  205.237902][   T13] veth0_macvtap: left promiscuous mode
[  205.240362][   T13] veth1_vlan: left promiscuous mode
[  205.243292][   T13] veth0_vlan: left promiscuous mode
[  205.280651][    T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  205.430509][    T9] usb 8-1: Using ep0 maxpacket: 16
[  205.433182][   T13] team0 (unregistering): Port device team_slave_1 removed
[  205.445093][   T13] team0 (unregistering): Port device team_slave_0 removed
[  205.647903][T10443] loop8: detected capacity change from 0 to 128
[  205.656716][T10443] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  205.662637][T10375] team0: Port device team_slave_0 added
[  205.686009][ T4994] Bluetooth: hci2: command tx timeout
[  205.691072][T10375] team0: Port device team_slave_1 added
[  205.704220][T10443] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  205.786880][T10375] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.798371][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  205.835519][T10375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.840102][T10375] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.844518][ T8766] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  205.856692][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  205.885053][T10375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.964947][T10375] hsr_slave_0: entered promiscuous mode
[  205.967654][T10375] hsr_slave_1: entered promiscuous mode
[  205.970118][T10375] debugfs: 'hsr0' already exists in 'hsr'
[  205.981154][T10375] Cannot create hsr debugfs directory
[  206.150340][ T5339] 8021q: adding VLAN 0 to HW filter on device eth22
[  206.200540][    T9] usb 8-1: unable to get BOS descriptor or descriptor too short
[  206.212497][    T9] usb 8-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  206.216971][    T9] usb 8-1: no configurations
[  206.218401][    T9] usb 8-1: can't read configurations, error -22
[  206.262423][T10375] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  206.273715][T10375] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  206.281959][T10375] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  206.289430][T10375] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  206.296505][T10375] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  206.307711][T10375] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  206.311229][T10375] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  206.317725][T10375] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  206.378966][T10375] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.398014][T10375] 8021q: adding VLAN 0 to HW filter on device team0
[  206.407244][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.409817][ T8769] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.417961][ T5339] 8021q: adding VLAN 0 to HW filter on device eth23
[  206.425087][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.427515][ T8769] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.604457][ T5339] 8021q: adding VLAN 0 to HW filter on device eth24
[  206.688464][T10375] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.778489][T10492] loop7: detected capacity change from 0 to 512
[  206.781582][T10492] EXT4-fs: Ignoring removed oldalloc option
[  206.790171][T10492] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.1763: Parent and EA inode have the same ino 15
[  206.797147][T10494] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1764'.
[  206.802616][T10492] loop7: lost filesystem error report for type 5 error -117
[  206.802819][T10492] EXT4-fs (loop7): Remounting filesystem read-only
[  206.808220][T10492] EXT4-fs warning (device loop7): ext4_evict_inode:289: xattr delete (err -30)
[  206.811154][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  206.811165][    C1] EXT4-fs (loop7): initial error at time 2000000041: ext4_xattr_inode_iget:437
[  206.811175][    C1] EXT4-fs (loop7): last error at time 2000000041: ext4_xattr_inode_iget:437
[  206.823049][T10492] EXT4-fs (loop7): 1 orphan inode deleted
[  206.831489][T10492] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.876522][ T8522] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.923097][T10375] veth0_vlan: entered promiscuous mode
[  206.928516][T10375] veth1_vlan: entered promiscuous mode
[  206.956424][T10375] veth0_macvtap: entered promiscuous mode
[  206.965932][T10375] veth1_macvtap: entered promiscuous mode
[  206.985323][T10375] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.997692][T10375] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.030153][T10509] loop8: detected capacity change from 0 to 128
[  207.040690][ T5744] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.050163][ T5744] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.056207][T10509] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  207.072533][T10509] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  207.084276][ T5709] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.089332][ T5709] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.167040][ T8768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.173843][ T8768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.213061][ T9531] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  207.252049][ T8766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.258270][ T8766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.329356][T10521] nbd: must specify at least one socket
[  207.390289][T10525] bond0: (slave bond_slave_1): Releasing backup interface
[  207.449587][T10532] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1779'.
[  207.455767][T10532] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1779'.
[  207.473216][T10532] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1779'.
[  207.720727][T10557] loop8: detected capacity change from 0 to 1024
[  207.728101][T10557] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  207.737808][T10557] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  207.741576][T10557] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  207.745426][T10557] EXT4-fs error (device loop8): ext4_get_journal_inode:5908: inode #5: comm syz.8.1791: unexpected bad inode w/o EXT4_IGET_BAD
[  207.749483][T10557] loop8: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117
[  207.749630][T10557] EXT4-fs (loop8): no journal found
[  207.752400][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  207.752409][    C0] EXT4-fs (loop8): initial error at time 2000000042: ext4_get_journal_inode:5908: inode 5
[  207.752422][    C0] EXT4-fs (loop8): last error at time 2000000042: ext4_get_journal_inode:5908: inode 5
[  207.762720][ T4994] Bluetooth: hci2: command tx timeout
[  207.766738][T10557] EXT4-fs (loop8): can't get journal size
[  207.792008][T10557] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  207.810374][ T9531] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.888583][T10565] netlink: 'syz.8.1794': attribute type 1 has an invalid length.
[  208.076489][T10565] netlink: 'syz.8.1794': attribute type 1 has an invalid length.
[  208.336635][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1802'.
[  208.346228][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1802'.
[  208.593231][T10587] loop8: detected capacity change from 0 to 65536
[  208.646617][T10587] XFS (loop8): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  208.678123][T10587] XFS (loop8): Ending clean mount
[  208.723429][T10599] xt_l2tp: v2 doesn't support IP mode
[  208.763469][ T9531] XFS (loop8): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  209.068779][T10611] netlink: 6060 bytes leftover after parsing attributes in process `syz.7.1811'.
[  209.095614][T10605] loop9: detected capacity change from 0 to 40427
[  209.107866][T10605] F2FS-fs: heap/no_heap options were deprecated
[  209.449040][T10605] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  209.480211][T10605] F2FS-fs (loop9): f2fs_disable_checkpoint starts, unusable: 0
[  209.480804][T10622] bond1: Removing last ns target with arp_interval on
[  209.483117][T10605] F2FS-fs (loop9): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  209.488664][T10605] F2FS-fs (loop9): Start checkpoint disabled!
[  209.508383][T10605] F2FS-fs (loop9): f2fs_disable_checkpoint finishes, err:0
[  209.512279][T10605] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  209.589560][T10605] syz.9.1809: attempt to access beyond end of device
[  209.589560][T10605] loop9: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  209.648892][T10605] syz.9.1809: attempt to access beyond end of device
[  209.648892][T10605] loop9: rw=0, sector=53248, nr_sectors = 8 limit=40427
[  209.739454][ T6293] kworker/u9:10: attempt to access beyond end of device
[  209.739454][ T6293] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  209.748485][ T6293] CPU: 0 UID: 0 PID: 6293 Comm: kworker/u9:10 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  209.748500][ T6293] Tainted: [L]=SOFTLOCKUP
[  209.748503][ T6293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  209.748508][ T6293] Workqueue: writeback wb_workfn (flush-7:9)
[  209.748526][ T6293] Call Trace:
[  209.748530][ T6293]  <TASK>
[  209.748533][ T6293]  dump_stack_lvl+0xe8/0x150
[  209.748547][ T6293]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  209.748561][ T6293]  f2fs_write_end_io+0x1215/0x16f0
[  209.748574][ T6293]  ? blkg_put+0x22/0x240
[  209.748591][ T6293]  __submit_merged_bio+0x258/0x6a0
[  209.748600][ T6293]  ? rcu_is_watching+0x16/0xb0
[  209.748610][ T6293]  __submit_merged_write_cond+0x3c9/0x4e0
[  209.748624][ T6293]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  209.748659][ T6293]  f2fs_write_data_pages+0x2a27/0x36f0
[  209.748683][ T6293]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  209.748699][ T6293]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  209.748718][ T6293]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  209.748727][ T6293]  ? irqentry_exit+0x218/0x910
[  209.748738][ T6293]  ? lockdep_hardirqs_on+0x7b/0x110
[  209.748752][ T6293]  ? __lock_acquire+0x683/0x2cf0
[  209.748769][ T6293]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  209.748779][ T6293]  ? f2fs_update_inode+0x1394/0x25c0
[  209.748787][ T6293]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  209.748799][ T6293]  do_writepages+0x338/0x560
[  209.748814][ T6293]  ? reacquire_held_locks+0x104/0x190
[  209.748821][ T6293]  ? writeback_sb_inodes+0x450/0x1b00
[  209.748834][ T6293]  __writeback_single_inode+0x136/0x1220
[  209.748846][ T6293]  ? do_raw_spin_unlock+0x4d/0x200
[  209.748862][ T6293]  writeback_sb_inodes+0x9de/0x1b00
[  209.748873][ T6293]  ? __lock_acquire+0x683/0x2cf0
[  209.748892][ T6293]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  209.748918][ T6293]  ? rcu_is_watching+0x16/0xb0
[  209.748925][ T6293]  ? queue_io+0x2d3/0x470
[  209.748937][ T6293]  wb_writeback+0x41c/0xad0
[  209.748948][ T6293]  ? queue_io+0x281/0x470
[  209.748961][ T6293]  ? __pfx_wb_writeback+0x10/0x10
[  209.748971][ T6293]  ? do_raw_spin_lock+0x12b/0x2f0
[  209.748985][ T6293]  wb_workfn+0x431/0x10f0
[  209.749001][ T6293]  ? __pfx_wb_workfn+0x10/0x10
[  209.749010][ T6293]  ? rcu_is_watching+0x16/0xb0
[  209.749017][ T6293]  ? trace_hrtimer_start+0x82/0x200
[  209.749030][ T6293]  ? do_raw_spin_lock+0x12b/0x2f0
[  209.749039][ T6293]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  209.749048][ T6293]  ? process_scheduled_works+0xa1a/0x14c0
[  209.749058][ T6293]  ? process_scheduled_works+0xa1a/0x14c0
[  209.749068][ T6293]  ? rcu_is_watching+0x16/0xb0
[  209.749076][ T6293]  ? process_scheduled_works+0xa1a/0x14c0
[  209.749084][ T6293]  process_scheduled_works+0xa88/0x14c0
[  209.749102][ T6293]  ? __pfx_process_scheduled_works+0x10/0x10
[  209.749113][ T6293]  ? assign_work+0x3cf/0x5d0
[  209.749123][ T6293]  worker_thread+0xa47/0xfb0
[  209.749142][ T6293]  kthread+0x38b/0x480
[  209.749153][ T6293]  ? __pfx_worker_thread+0x10/0x10
[  209.749160][ T6293]  ? __pfx_kthread+0x10/0x10
[  209.749171][ T6293]  ret_from_fork+0x514/0xb70
[  209.749184][ T6293]  ? __pfx_ret_from_fork+0x10/0x10
[  209.749194][ T6293]  ? __switch_to+0xc89/0x1420
[  209.749204][ T6293]  ? __pfx_kthread+0x10/0x10
[  209.749215][ T6293]  ret_from_fork_asm+0x1a/0x30
[  209.749232][ T6293]  </TASK>
[  209.749414][ T6293] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  209.851225][ T4994] Bluetooth: hci2: command tx timeout
[  209.895501][T10630] ieee802154 phy0 wpan0: encryption failed: -22
[  210.807530][T10651] loop8: detected capacity change from 0 to 512
[  210.824889][T10651] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1827: iget: bad i_size value: 38620345925642
[  210.829700][T10651] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  210.831110][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  210.837045][    C1] EXT4-fs (loop8): initial error at time 2000000045: ext4_orphan_get:1399: inode 15
[  210.840897][    C1] EXT4-fs (loop8): last error at time 2000000045: ext4_orphan_get:1399: inode 15
[  210.865358][T10651] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1827: couldn't read orphan inode 15 (err -117)
[  210.881647][T10651] loop8: lost filesystem error report for type 5 error -117
[  210.882655][T10651] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.913575][T10651] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1827: bg 0: block 5: invalid block bitmap
[  210.919603][T10658] loop9: detected capacity change from 0 to 2048
[  210.925783][T10651] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28
[  210.930358][T10651] EXT4-fs (loop8): This should not happen!! Data will be lost
[  210.930358][T10651] 
[  210.934967][T10651] EXT4-fs (loop8): Total free blocks count 0
[  210.936848][T10651] EXT4-fs (loop8): Free/Dirty block details
[  210.938724][T10651] EXT4-fs (loop8): free_blocks=0
[  210.940287][T10651] EXT4-fs (loop8): dirty_blocks=1
[  210.942722][T10651] EXT4-fs (loop8): Block reservation details
[  210.947424][T10651] EXT4-fs (loop8): i_reserved_data_blocks=1
[  210.954098][T10658] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.982697][ T9531] EXT4-fs warning (device loop8): ext4_evict_inode:197: inode #18: comm syz-executor: data will be lost
[  210.989630][ T9531] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.031752][T10375] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.079005][T10667] netlink: 'syz.9.1832': attribute type 2 has an invalid length.
[  211.137612][T10673] loop9: detected capacity change from 0 to 1024
[  211.175393][T10673] hfsplus: request for non-existent node 768 in B*Tree
[  211.178525][T10673] hfsplus: request for non-existent node 768 in B*Tree
[  211.180981][T10673] hfsplus: xattr search failed
[  211.241831][ T5823] IPVS: starting estimator thread 0...
[  211.326748][T10687] xt_hashlimit: size too large, truncated to 1048576
[  211.352491][T10680] IPVS: using max 84 ests per chain, 201600 per kthread
[  211.384372][T10689] wlan0 speed is unknown, defaulting to 1000
[  211.387204][T10689] wlan0 speed is unknown, defaulting to 1000
[  211.390613][T10689] wlan0 speed is unknown, defaulting to 1000
[  211.393832][T10689] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  211.398314][T10689] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  211.404338][T10689] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  211.409323][T10689] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  211.416500][T10689] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  211.437741][T10689] wlan0 speed is unknown, defaulting to 1000
[  211.444168][T10689] wlan0 speed is unknown, defaulting to 1000
[  211.456677][T10689] wlan0 speed is unknown, defaulting to 1000
[  211.460115][T10689] wlan0 speed is unknown, defaulting to 1000
[  211.797489][T10723] loop7: detected capacity change from 0 to 1024
[  211.825483][T10723] hfsplus: invalid length 1280 has been corrected to 255
[  211.870184][T10726] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[  211.913051][T10728] netlink: 'syz.7.1858': attribute type 12 has an invalid length.
[  211.917632][T10728] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1858'.
[  211.921434][ T4994] Bluetooth: hci2: command tx timeout
[  211.987016][T10732] loop7: detected capacity change from 0 to 512
[  211.993902][T10732] EXT4-fs error (device loop7): ext4_get_journal_inode:5908: comm syz.7.1860: inode #2147418112: comm syz.7.1860: iget: illegal inode #
[  212.002807][T10732] loop7: lost filesystem error report for type 5 error -117
[  212.002991][T10732] EXT4-fs (loop7): no journal found
[  212.007538][T10732] EXT4-fs (loop7): can't get journal size
[  212.010490][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  212.012604][    C1] EXT4-fs (loop7): initial error at time 2000000046: ext4_get_journal_inode:5908
[  212.015450][    C1] EXT4-fs (loop7): last error at time 2000000046: ext4_get_journal_inode:5908
[  212.018973][T10732] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[  212.023417][T10732] EXT4-fs (loop7): Errors on filesystem, clearing orphan list.
[  212.026808][T10732] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.034655][T10732] EXT4-fs error (device loop7): ext4_read_inode_bitmap:141: comm syz.7.1860: Invalid inode bitmap blk 4 in block_group 0
[  212.043765][T10732] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  212.055458][T10732] EXT4-fs error (device loop7): ext4_read_inode_bitmap:141: comm syz.7.1860: Invalid inode bitmap blk 4 in block_group 0
[  212.066413][T10732] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem
[  212.085117][ T8522] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.586904][T10771] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  212.605817][T10769] loop7: detected capacity change from 0 to 2048
[  212.626858][T10769] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  212.633150][T10775] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  212.725849][T10781] loop7: detected capacity change from 0 to 16
[  212.779399][T10781] erofs (device loop7): mounted with root inode @ nid 36.
[  212.937822][T10796] loop7: detected capacity change from 0 to 4096
[  212.941369][T10796] EXT4-fs: Ignoring removed nobh option
[  212.943546][T10796] EXT4-fs: Ignoring removed bh option
[  212.946276][T10796] EXT4-fs (loop7): Test dummy encryption mode enabled
[  212.969510][T10796] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.077570][ T8522] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.114313][T10811] loop9: detected capacity change from 0 to 1024
[  213.117029][T10811] hfsplus: Unknown parameter '01777777777777777777777'
[  213.667118][T10854] loop9: detected capacity change from 0 to 512
[  213.669947][T10854] udf: Unknown parameter '18446744073709551615'
[  213.700851][   T31] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  213.841179][ T5744] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  213.848767][ T5744] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  213.852263][ T5744] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  213.855290][ T5744] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  213.928164][   T31] usb 8-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  213.938719][T10865] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  213.944984][   T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.982939][   T31] usb 8-1: Product: syz
[  214.055881][   T31] usb 8-1: Manufacturer: syz
[  214.057697][   T31] usb 8-1: SerialNumber: syz
[  214.061641][   T31] usb 8-1: config 0 descriptor??
[  214.278077][T10870] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  214.280367][T10870] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  214.284944][T10870] hsr_slave_0: left promiscuous mode
[  214.287843][T10870] hsr_slave_1: left promiscuous mode
[  214.295087][   T31] usb 8-1: ignoring: probably an ADSL modem
[  214.330557][ T5786] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  214.481006][ T5786] usb 9-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40
[  214.485055][ T5786] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  214.489307][ T5786] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  214.497957][ T5786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.500776][ T5786] usb 9-1: Product: syz
[  214.502186][ T5786] usb 9-1: Manufacturer: syz
[  214.503800][ T5786] usb 9-1: SerialNumber: syz
[  214.713422][   T31] cxacru 8-1:0.0: usbatm_usb_probe: bind failed: -19!
[  214.717492][   T31] usb 8-1: USB disconnect, device number 12
[  214.734067][ T5786] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  214.746682][ T5786] usb 9-1: unit 5 not found!
[  214.771025][T10375] ocfs2: Unmounting device (7,9) on (node local)
[  214.820357][ T5786] usb 9-1: USB disconnect, device number 8
[  214.848821][ T5592] udevd[5592]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  214.852116][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1919'.
[  215.190558][   T10] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  215.367042][   T10] usb 10-1: unable to get BOS descriptor or descriptor too short
[  215.378859][   T10] usb 10-1: not running at top speed; connect to a high speed hub
[  215.384353][   T10] usb 10-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40
[  215.389784][   T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  215.393183][   T10] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  215.404306][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.413260][   T10] usb 10-1: Product: syz
[  215.418018][   T10] usb 10-1: Manufacturer: syz
[  215.421475][   T10] usb 10-1: SerialNumber: syz
[  215.482908][T10892] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.497957][T10892] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  215.539183][ T8522] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.643106][T10905] ip_tables: iptables: counters copy to user failed while replacing table
[  215.649148][   T10] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  215.706690][   T31] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  215.738606][   T10] usb 10-1: USB disconnect, device number 2
[  215.764742][ T5913] udevd[5913]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  215.861053][   T31] usb 9-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00
[  215.864922][   T31] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  215.868306][   T31] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  215.873844][   T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.881744][T10883] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  215.886080][T10883] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  215.938266][ T4994] Bluetooth: hci3: Can't claim NULL iso interface
[  216.006261][T10926] set_capacity_and_notify: 2 callbacks suppressed
[  216.006272][T10926] loop7: detected capacity change from 0 to 256
[  216.018057][T10926] exfat: Deprecated parameter 'namecase'
[  216.022847][T10926] exfat: Deprecated parameter 'namecase'
[  216.025187][T10926] exfat: Deprecated parameter 'utf8'
[  216.029810][T10926] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[  216.111632][ T4994] Bluetooth: hci3: Failed to get device id (-71)
[  216.113579][ T4994] Bluetooth: hci3: HCI Enhanced Setup Synchronous Connection command is advertised, but not supported.
[  216.121443][   T31] usb 9-1: USB disconnect, device number 9
[  216.215608][T10939] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1934'.
[  216.229834][T10939] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1934'.
[  216.730893][   T31] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  216.880571][   T31] usb 10-1: Using ep0 maxpacket: 8
[  216.883717][   T31] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  216.889708][   T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.893095][   T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.901819][   T31] usb 10-1: config 0 descriptor??
[  216.907279][   T31] gspca_main: vc032x-2.14.0 probing 046d:0892
[  216.970727][ T5786] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  217.132100][ T5786] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00
[  217.139259][ T5786] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  217.147562][ T5786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.154413][ T5786] usb 9-1: Product: syz
[  217.156057][ T5786] usb 9-1: Manufacturer: syz
[  217.159401][ T5786] usb 9-1: SerialNumber: syz
[  217.183042][ T5786] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected
[  217.188544][ T5786] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 87
[  217.198528][ T5786] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 7
[  217.201885][ T5786] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81
[  217.206093][ T5786] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 82
[  217.210601][ T5786] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1
[  217.213546][ T5786] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2
[  217.215857][ T5786] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 85
[  217.218259][ T5786] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 5
[  217.221902][ T5786] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  217.225401][ T5786] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 83
[  217.230952][ T5786] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84
[  217.233342][ T5786] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 3
[  217.235638][ T5786] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 4
[  217.238911][ T5786] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 86
[  217.241599][ T5786] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6
[  217.244898][ T5786] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  217.522919][ T2227] usb 9-1: USB disconnect, device number 10
[  217.534839][ T2227] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  217.545149][ T2227] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  217.548299][ T2227] keyspan 9-1:1.0: device disconnected
[  217.780368][T10981] loop7: detected capacity change from 0 to 32768
[  217.784199][T10981] xfs: Deprecated parameter 'noattr2'
[  217.790683][T10981] XFS: noattr2 mount option is deprecated.
[  217.817684][T10981] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  217.831501][T10981] XFS (loop7): Ending clean mount
[  217.842538][   T34] audit: type=1800 audit(2000000052.760:74): pid=10981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1951" name="file1" dev="loop7" ino=4422 res=0 errno=0
[  217.919637][   T31] gspca_vc032x: reg_r err -71
[  217.923788][   T31] vc032x 10-1:0.0: probe with driver vc032x failed with error -71
[  217.937835][   T31] usb 10-1: USB disconnect, device number 3
[  218.206320][T11010] kAFS: unable to lookup cell ''
[  218.581233][ T8522] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  218.720822][ T5772] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  218.792509][   T24] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[  218.892081][ T5772] usb 10-1: Using ep0 maxpacket: 32
[  218.894997][ T5772] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  218.899622][ T5772] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 212, changing to 11
[  218.904627][ T5772] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17501, setting to 1024
[  218.909967][ T5772] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  218.912993][ T5772] usb 10-1: Product: syz
[  218.914334][ T5772] usb 10-1: Manufacturer: syz
[  218.918387][T11025] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  218.923556][ T5772] hub 10-1:4.0: USB hub found
[  218.954040][   T24] usb 9-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[  218.964584][   T24] usb 9-1: config 8 has an invalid interface number: 188 but max is 0
[  218.971633][   T24] usb 9-1: config 8 has no interface number 0
[  218.980097][   T24] usb 9-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  218.985699][   T24] usb 9-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid maxpacket 65535, setting to 64
[  218.993955][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.001276][   T24] usb 9-1: Product: syz
[  219.004734][   T24] usb 9-1: Manufacturer: syz
[  219.012235][   T24] usb 9-1: SerialNumber: syz
[  219.019970][T11027] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  219.126154][ T5772] hub 10-1:4.0: config failed, hub has too many ports! (err -19)
[  219.245693][   T24] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'.
[  219.255580][   T24] usb 9-1: USB disconnect, device number 11
[  219.450736][ T5772] usb 10-1: USB disconnect, device number 4
[  219.784197][T11047] ip_tables: iptables: counters copy to user failed while replacing table
[  220.020813][ T5773] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  220.193955][ T5773] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  220.201597][ T5773] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  220.205661][ T5773] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  220.206252][   T34] audit: type=1326 audit(2000000055.120:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11066 comm="syz.9.1976" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b51b9e159 code=0x7ffc0000
[  220.209913][ T5773] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  220.224123][ T5773] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  220.227495][   T34] audit: type=1326 audit(2000000055.130:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11066 comm="syz.9.1976" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b51b9e159 code=0x7ffc0000
[  220.230296][ T5773] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.243463][   T34] audit: type=1326 audit(2000000055.130:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11066 comm="syz.9.1976" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b51b9e159 code=0x7ffc0000
[  220.261321][   T34] audit: type=1326 audit(2000000055.130:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11066 comm="syz.9.1976" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b51b9e159 code=0x7ffc0000
[  220.277872][   T34] audit: type=1326 audit(2000000055.130:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11066 comm="syz.9.1976" exe="/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f8b51b9e159 code=0x7ffc0000
[  220.286491][   T34] audit: type=1326 audit(2000000055.170:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11066 comm="syz.9.1976" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b51b9e159 code=0x7ffc0000
[  220.294597][   T34] audit: type=1326 audit(2000000055.170:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11066 comm="syz.9.1976" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b51b9e159 code=0x7ffc0000
[  220.301802][   T34] audit: type=1326 audit(2000000055.180:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11066 comm="syz.9.1976" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8b51b9e159 code=0x7ffc0000
[  220.310068][   T34] audit: type=1326 audit(2000000055.180:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11066 comm="syz.9.1976" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8b51b9e159 code=0x7ffc0000
[  221.050634][ T5772] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  221.057747][ T5773] gud 8-1:1.0: Failed to get connectors (error=-5)
[  221.059937][ T5773] gud 8-1:1.0: probe with driver gud failed with error -5
[  221.202691][ T5772] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  221.207622][ T5772] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  221.213488][ T5772] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  221.217440][ T5772] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  221.222474][ T5772] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64
[  221.226370][ T5772] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64
[  221.230257][ T5772] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.235133][ T5772] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.239086][ T5772] usb 9-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  221.247416][ T5772] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.252745][ T5772] usb 9-1: Product: syz
[  221.254548][ T5772] usb 9-1: Manufacturer: syz
[  221.256546][ T5772] usb 9-1: SerialNumber: syz
[  221.264349][T11078] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  221.267486][T11078] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  221.271263][T11078] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  221.278887][   T31] usb 8-1: USB disconnect, device number 13
[  221.280351][T11078] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  221.307405][ T5772] keyspan 9-1:1.0: Keyspan 4 port adapter converter detected
[  221.316412][ T5772] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88
[  221.328326][ T5772] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  221.335935][ T5772] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  221.343358][ T5772] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  221.348114][ T5772] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  221.511153][ T2227] usb 9-1: USB disconnect, device number 12
[  221.518990][ T2227] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  221.525039][ T2227] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  221.532473][ T2227] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  221.537984][ T2227] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  221.546349][ T2227] keyspan 9-1:1.0: device disconnected
[  221.610897][ T5772] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  221.780536][ T5772] usb 10-1: Using ep0 maxpacket: 16
[  221.783004][ T5772] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  221.789914][ T5772] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.792871][ T5772] usb 10-1: Product: syz
[  221.794296][ T5772] usb 10-1: Manufacturer: syz
[  221.795831][ T5772] usb 10-1: SerialNumber: syz
[  221.823757][T11084] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1984'.
[  221.826707][T11084] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1984'.
[  222.097783][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1990'.
[  222.107121][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1990'.
[  222.114401][T11098] netlink: 'syz.8.1991': attribute type 1 has an invalid length.
[  222.117471][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1991'.
[  222.292378][T11110] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1997'.
[  222.374825][T11114] loop7: detected capacity change from 0 to 1024
[  222.384505][T11114] EXT4-fs: Ignoring removed bh option
[  222.393641][T11114] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  222.415941][T11114] EXT4-fs error (device loop7): ext4_map_blocks:835: inode #3: block 1: comm syz.7.1999: lblock 1 mapped to illegal pblock 1 (length 1)
[  222.423537][T11114] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  222.428782][T11114] EXT4-fs (loop7): Remounting filesystem read-only
[  222.432570][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  222.432584][    C1] EXT4-fs (loop7): initial error at time 2000000057: ext4_map_blocks:835: inode 3: block 1
[  222.432613][    C1] EXT4-fs (loop7): last error at time 2000000057: ext4_map_blocks:835: inode 3: block 1
[  222.449350][T11114] EXT4-fs (loop7): 1 orphan inode deleted
[  222.453117][T11114] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.471153][ T2227] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  222.480032][ T8522] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.559176][T11120] FAULT_INJECTION: forcing a failure.
[  222.559176][T11120] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  222.568530][T11120] CPU: 1 UID: 0 PID: 11120 Comm: syz.7.2001 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  222.568545][T11120] Tainted: [L]=SOFTLOCKUP
[  222.568548][T11120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  222.568553][T11120] Call Trace:
[  222.568556][T11120]  <TASK>
[  222.568561][T11120]  dump_stack_lvl+0xe8/0x150
[  222.568580][T11120]  should_fail_ex+0x410/0x560
[  222.568592][T11120]  _copy_from_user+0x2d/0xb0
[  222.568601][T11120]  kstrtouint_from_user+0xd6/0x180
[  222.568614][T11120]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  222.568631][T11120]  proc_fail_nth_write+0x8e/0x210
[  222.568641][T11120]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  222.568653][T11120]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  222.568662][T11120]  vfs_write+0x296/0xba0
[  222.568673][T11120]  ? __pfx_vfs_write+0x10/0x10
[  222.568681][T11120]  ? __fget_files+0x2a/0x420
[  222.568688][T11120]  ? __fget_files+0x2a/0x420
[  222.568694][T11120]  ? __fget_files+0x3a2/0x420
[  222.568701][T11120]  ? __fget_files+0x2a/0x420
[  222.568710][T11120]  __x64_sys_pwrite64+0x196/0x220
[  222.568720][T11120]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[  222.568732][T11120]  do_syscall_64+0x166/0x520
[  222.568742][T11120]  ? trace_irq_disable+0x3b/0x140
[  222.568752][T11120]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.568762][T11120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.568770][T11120] RIP: 0033:0x7fa262d9e159
[  222.568778][T11120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.568785][T11120] RSP: 002b:00007fa263c30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  222.568795][T11120] RAX: ffffffffffffffda RBX: 00007fa263025fa0 RCX: 00007fa262d9e159
[  222.568801][T11120] RDX: 0000000000000003 RSI: 0000200000000180 RDI: 0000000000000003
[  222.568807][T11120] RBP: 00007fa262e3506b R08: 0000000000000000 R09: 0000000000000000
[  222.568812][T11120] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  222.568816][T11120] R13: 00007fa263026038 R14: 00007fa263025fa0 R15: 00007fff77df6af8
[  222.568829][T11120]  </TASK>
[  222.650816][ T2227] usb 9-1: Using ep0 maxpacket: 8
[  222.654801][ T2227] usb 9-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  222.661600][ T2227] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  222.668415][ T2227] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  222.676351][ T2227] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  222.691138][ T2227] usb 9-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3
[  222.694498][ T2227] usb 9-1: Product: syz
[  222.696285][ T2227] usb 9-1: SerialNumber: syz
[  222.727881][    T9] IPVS: starting estimator thread 0...
[  222.820544][T11125] IPVS: using max 83 ests per chain, 199200 per kthread
[  222.850165][ T5772] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71
[  222.864612][ T5772] usb 10-1: USB disconnect, device number 5
[  222.915975][ T2227] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[  222.919049][ T2227] gspca_main: spca501-2.14.0 probing 0000:0000
[  222.922811][ T2227] gspca_spca501: reg write: error -71
[  222.924451][ T2227] spca501 9-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  222.926657][ T2227] spca501 9-1:1.0: probe with driver spca501 failed with error -22
[  222.939238][ T2227] usb 9-1: USB disconnect, device number 13
[  223.169018][T11137] loop7: detected capacity change from 0 to 40427
[  223.173721][T11137] F2FS-fs (loop7): invalid crc value
[  223.178073][T11137] F2FS-fs (loop7): SIT is corrupted node# 0 vs 7
[  223.185477][T11137] loop7: lost filesystem error report for type 5 error -117
[  223.185490][T11137] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-117)
[  223.470385][T11151] loop9: detected capacity change from 0 to 64
[  223.566143][T11156] netlink: 'syz.9.2017': attribute type 1 has an invalid length.
[  223.575637][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2017'.
[  223.611666][ T2227] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  223.644798][T11162] befs: (nullb0): invalid magic header
[  223.770510][ T2227] usb 8-1: Using ep0 maxpacket: 32
[  223.772791][ T2227] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  223.776601][ T2227] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  223.779769][ T2227] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  223.783648][ T2227] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  223.787086][ T2227] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  223.794129][ T2227] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.796591][ T2227] usb 8-1: Product: syz
[  223.797973][ T2227] usb 8-1: Manufacturer: syz
[  223.799462][ T2227] usb 8-1: SerialNumber: syz
[  223.826930][    C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  223.830044][ T2227] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input21
[  224.031451][ T5765] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  224.080533][ T2227] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  224.083807][ T2227]  (id 0x00)
[  224.130538][ T2227] rc_core: IR keymap rc-imon-pad not found
[  224.133099][ T2227] Registered IR keymap rc-empty
[  224.136804][ T2227] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  224.141016][ T2227] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  224.181714][ T5765] usb 9-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  224.185920][ T5765] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  224.189296][ T5765] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  224.194757][ T5765] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.197449][ T5765] usb 9-1: Product: syz
[  224.198764][ T5765] usb 9-1: Manufacturer: syz
[  224.200238][ T5765] usb 9-1: SerialNumber: syz
[  224.204835][ T5765] ums-sddr09 9-1:1.0: USB Mass Storage device detected
[  224.211564][ T5765] ums-sddr09 9-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  224.211564][ T5765]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  224.271382][ T2227] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0
[  224.276436][ T2227] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input22
[  224.282636][ T2227] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:14> initialized
[  224.521300][T11144] imon:send_packet: task interrupted
[  224.523658][T11144] imon:send_packet: packet tx failed (-512)
[  224.526860][T11144] imon:vfd_write: send packet #0 failed
[  224.529586][T11144] imon:send_packet: task interrupted
[  224.532887][T11144] imon:send_packet: packet tx failed (-512)
[  224.535408][T11144] imon:vfd_write: send packet #0 failed
[  224.538157][T11144] imon:send_packet: task interrupted
[  224.540693][T11144] imon:send_packet: packet tx failed (-512)
[  224.544062][T11144] imon:vfd_write: send packet #0 failed
[  224.548902][T11144] imon:send_packet: task interrupted
[  224.630904][T11144] imon:send_packet: packet tx failed (-512)
[  224.633732][T11144] imon:vfd_write: send packet #0 failed
[  224.636817][T11144] imon:send_packet: task interrupted
[  224.639375][T11144] imon:send_packet: packet tx failed (-512)
[  224.644287][T11144] imon:vfd_write: send packet #0 failed
[  224.646956][T11144] imon:send_packet: task interrupted
[  224.648789][T11144] imon:send_packet: packet tx failed (-512)
[  224.654502][T11144] imon:vfd_write: send packet #0 failed
[  224.676504][T11144] imon:send_packet: task interrupted
[  224.683269][T11144] imon:send_packet: packet tx failed (-512)
[  224.686306][T11144] imon:vfd_write: send packet #0 failed
[  224.688950][T11144] imon:send_packet: task interrupted
[  224.693336][T11144] imon:send_packet: packet tx failed (-512)
[  224.695722][T11144] imon:vfd_write: send packet #0 failed
[  224.698172][T11144] imon:send_packet: task interrupted
[  224.700011][T11144] imon:send_packet: packet tx failed (-512)
[  224.703083][T11144] imon:vfd_write: send packet #0 failed
[  224.709756][T11144] imon:send_packet: task interrupted
[  224.720323][T11144] imon:send_packet: packet tx failed (-512)
[  224.725032][T11144] imon:vfd_write: send packet #0 failed
[  224.789559][   T24] usb 8-1: USB disconnect, device number 14
[  224.867776][ T5765] ums-sddr09 9-1:1.0: probe with driver ums-sddr09 failed with error -32
[  224.905785][ T5765] usb 9-1: USB disconnect, device number 14
[  225.014354][T11196] netlink: 'syz.9.2034': attribute type 1 has an invalid length.
[  225.030131][T11197] loop7: detected capacity change from 0 to 4096
[  225.033276][T11197] journal_path: Lookup failure for './file2'
[  225.035286][T11197] EXT4-fs: error: could not find journal device path
[  225.043559][T11196] 8021q: adding VLAN 0 to HW filter on device bond1
[  225.099486][T11196] bond1: (slave ip6erspan0): making interface the new active one
[  225.103085][T11196] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  225.323981][T11208] loop7: detected capacity change from 0 to 4096
[  225.326856][T11208] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512).
[  225.339971][T11208] ntfs3(loop7): Failed to load $BadClus (-22).
[  225.409913][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2044'.
[  225.589224][T11232] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2049'.
[  225.658656][T11243] loop9: detected capacity change from 0 to 64
[  226.071250][T11278] loop9: detected capacity change from 0 to 512
[  226.077043][T11278] EXT4-fs: Ignoring removed nobh option
[  226.122461][T11278] EXT4-fs error (device loop9): ext4_do_update_inode:5714: inode #3: comm syz.9.2063: corrupted inode contents
[  226.144520][T11278] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  226.151845][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  226.157056][    C1] EXT4-fs (loop9): initial error at time 2000000061: ext4_do_update_inode:5714: inode 3
[  226.160615][    C1] EXT4-fs (loop9): last error at time 2000000061: ext4_do_update_inode:5714: inode 3
[  226.165351][T11278] EXT4-fs (loop9): Remounting filesystem read-only
[  226.174360][T11278] __quota_error: 10 callbacks suppressed
[  226.174369][T11278] Quota error (device loop9): write_blk: dquota write failed
[  226.179042][T11278] Quota error (device loop9): qtree_write_dquot: Error -30 occurred while creating quota
[  226.193734][T11278] EXT4-fs (loop9): 1 truncate cleaned up
[  226.196275][T11278] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.200266][T11278] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.258768][T10375] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.324387][T11277] loop7: detected capacity change from 0 to 32768
[  226.334497][T11277] XFS (loop7): invalid logbufsize: 2097152 [not 16k,32k,64k,128k or 256k]
[  226.480237][T11308] loop9: detected capacity change from 0 to 128
[  226.498649][T11308] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  226.510209][T11308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  226.688562][T11321] loop9: detected capacity change from 0 to 8
[  226.709527][T11321] SQUASHFS error: xz decompression failed, data probably corrupt
[  226.713079][T11321] SQUASHFS error: Failed to read block 0x108: -5
[  226.716076][T11321] SQUASHFS error: Unable to read metadata cache entry [106]
[  226.718503][T11321] SQUASHFS error: Unable to read inode 0x11f
[  226.753058][ T5772] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  226.906537][T11331] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801
[  226.941705][ T5772] usb 8-1: Using ep0 maxpacket: 32
[  226.946426][ T5772] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  226.950572][ T5772] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.955029][ T5772] usb 8-1: config 0 descriptor??
[  226.963391][ T5772] gspca_main: sunplus-2.14.0 probing 041e:400b
[  227.042049][T11337] ipvlan2: entered allmulticast mode
[  227.043923][T11337] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[  227.056892][T11337] batman_adv: batadv0: Adding interface: ipvlan2
[  227.059036][T11337] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  227.068229][T11337] batman_adv: batadv0: Interface activated: ipvlan2
[  227.153206][T11341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  227.921262][   T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  228.101384][   T10] usb 10-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  228.106032][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.109929][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.113700][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.120061][   T10] usb 10-1: config 0 descriptor??
[  228.169483][ T5772] gspca_sunplus: reg_w_riv err -71
[  228.172798][ T5772] sunplus 8-1:0.0: probe with driver sunplus failed with error -71
[  228.179636][ T5772] usb 8-1: USB disconnect, device number 15
[  228.451384][ T5765] kernel read not supported for file /rfkill (pid: 5765 comm: kworker/1:3)
[  228.529033][   T10] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0
[  228.531442][   T10] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0
[  228.533967][   T10] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0
[  228.536456][   T10] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0
[  228.538844][   T10] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0
[  228.541349][   T10] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0
[  228.543631][   T10] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0
[  228.547337][   T10] playstation 0003:054C:0BA0.0009: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.9-1/input0
[  228.728305][   T10] playstation 0003:054C:0BA0.0009: Invalid reportID received, expected 18 got 90
[  228.733854][   T10] playstation 0003:054C:0BA0.0009: Failed to retrieve DualShock4 pairing info: -22
[  228.736918][   T10] playstation 0003:054C:0BA0.0009: Failed to get MAC address from DualShock4
[  228.740121][   T10] playstation 0003:054C:0BA0.0009: Failed to create dualshock4.
[  228.750069][   T10] playstation 0003:054C:0BA0.0009: probe with driver playstation failed with error -22
[  228.937774][ T5765] usb 10-1: USB disconnect, device number 6
[  229.198557][T11386] batman_adv: batadv0: Adding interface: gretap1
[  229.203345][T11386] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  229.214841][T11386] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  229.494326][T11402] mmap: syz.9.2115 (11402): VmData 37490688 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  229.517604][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2116'.
[  229.547373][T11406] loop9: detected capacity change from 0 to 2048
[  229.673394][T11406]  loop9: unable to read partition table
[  229.678482][T11406] loop9: partition table beyond EOD, truncated
[  229.680710][T11406] loop_reread_partitions: partition scan of loop9 () failed (rc=-5)
[  229.726773][T11406] wlan0 speed is unknown, defaulting to 1000
[  229.794873][ T5043]  loop9: unable to read partition table
[  229.799964][ T5043] loop9: partition table beyond EOD, truncated
[  230.483087][T11418] loop8: detected capacity change from 0 to 512
[  230.508868][T11418] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  230.549621][T11418] EXT4-fs (loop8): 1 truncate cleaned up
[  230.578628][T11418] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.624210][T11418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.102644][T11436] mac80211_hwsim hwsim22 ..c: renamed from wlan1 (while UP)
[  231.794438][T11471] loop8: detected capacity change from 0 to 4096
[  231.800893][T11471] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  231.819911][T11471] ntfs3(loop8): ino=19, mi_enum_attr
[  231.825708][T11471] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  231.833307][T11471] ntfs3(loop8): Failed to initialize $Extend/$ObjId.
[  232.298127][T11496] loop9: detected capacity change from 0 to 4096
[  232.302496][T11496] EXT4-fs: Ignoring removed orlov option
[  232.306488][T11496] EXT4-fs (loop9): Test dummy encryption mode enabled
[  232.323960][T11499] loop8: detected capacity change from 0 to 512
[  232.333149][T11499] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  232.347188][T11496] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.353939][T11499] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended
[  232.361890][T11499] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.2158: iget: bogus i_mode (2)
[  232.373769][T11499] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  232.375525][T11499] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2158: couldn't read orphan inode 15 (err -117)
[  232.383384][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  232.383397][    C1] EXT4-fs (loop8): initial error at time 2000000067: ext4_orphan_get:1399: inode 15
[  232.383418][    C1] EXT4-fs (loop8): last error at time 2000000067: ext4_orphan_get:1399: inode 15
[  232.401750][T11496] Quota error (device loop9): do_check_range: Getting block 33488899 out of range 1-5
[  232.407337][T11496] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  232.410272][T11496] EXT4-fs error (device loop9): ext4_acquire_dquot:7049: comm syz.9.2157: Failed to acquire dquot type 1
[  232.414315][T11499] loop8: lost filesystem error report for type 5 error -117
[  232.418097][T11499] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.432467][T10375] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.461616][ T9531] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.573438][T11509] option changes via remount are deprecated (pid=11508 comm=syz.8.2162)
[  233.052341][T11520] loop8: detected capacity change from 0 to 2048
[  233.064465][T11520] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  233.073151][ T5592] udevd[5592]: incorrect nilfs2 checksum on /dev/loop8
[  233.079054][T11520] NILFS (loop8): too large filesystem blocksize: 2 ^ 347668480 KiB
[  233.106750][ T5592] udevd[5592]: incorrect nilfs2 checksum on /dev/loop8
[  233.180534][   T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  233.221974][T11523] loop8: detected capacity change from 0 to 2048
[  233.233829][T11523] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.255991][ T9531] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.332482][   T10] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  233.339108][   T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  233.343481][   T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  233.348093][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  233.350750][   T10] usb 8-1: SerialNumber: syz
[  233.411421][   T34] audit: type=1400 audit(2000000068.310:91): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=11532 comm="syz.9.2172" name="p" offset=79
[  233.477636][   T34] audit: type=1326 audit(2000000068.390:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.8.2176" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f610fd9e159 code=0x0
[  233.946347][T11561] tipc: Started in network mode
[  233.948259][T11561] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  233.956809][T11561] tipc: Enabled bearer <udp:syz0>, priority 10
[  234.328837][   T10] usb 8-1: 0:2 : does not exist
[  234.335409][T11569] loop7: detected capacity change from 0 to 4096
[  234.345854][   T10] usb 8-1: USB disconnect, device number 16
[  234.419558][ T5592] udevd[5592]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  234.434456][T11570] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  234.580682][ T5773] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  234.741205][ T5773] usb 9-1: Using ep0 maxpacket: 32
[  234.746064][ T5773] usb 9-1: unable to get BOS descriptor or descriptor too short
[  234.750269][ T5773] usb 9-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40
[  234.762854][ T5773] usb 9-1: language id specifier not provided by device, defaulting to English
[  234.773715][ T5773] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.782448][ T5773] usb 9-1: Product: syz
[  234.783898][ T5773] usb 9-1: SerialNumber: syz
[  234.857360][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2202'.
[  235.020189][T11594] loop7: detected capacity change from 0 to 32768
[  235.022714][ T5773] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  235.024150][T11594] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2201 (11594)
[  235.056011][ T5773] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  235.064466][T11594] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  235.073068][   T24] tipc: Node number set to 4269801488
[  235.076255][T11594] BTRFS info (device loop7): using crc32c checksum algorithm
[  235.094392][ T5773] usb 9-1: USB disconnect, device number 15
[  235.174635][T11594] BTRFS info (device loop7): enabling ssd optimizations
[  235.177535][T11594] BTRFS info (device loop7): turning on flush-on-commit
[  235.180370][T11594] BTRFS info (device loop7): enabling free space tree
[  235.183680][T11594] BTRFS info (device loop7): enabling auto defrag
[  235.186375][T11594] BTRFS info (device loop7): use lzo compression, level 1
[  235.189190][T11594] BTRFS info (device loop7): max_inline set to 4096
[  235.207819][   T34] audit: type=1800 audit(2000000070.120:93): pid=11594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2201" name="file1" dev="loop7" ino=260 res=0 errno=0
[  235.224989][ T8522] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  235.291092][ T5765] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  235.451657][ T5765] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  235.457098][ T5765] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  235.462577][ T5765] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  235.474598][ T5765] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  235.481525][ T5765] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.489037][ T5765] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  235.492722][ T5765] usb 10-1: Product: syz
[  235.494727][ T5765] usb 10-1: Manufacturer: syz
[  235.506712][ T5765] cdc_wdm 10-1:1.0: skipping garbage
[  235.512902][ T5765] cdc_wdm 10-1:1.0: skipping garbage
[  235.540116][ T5765] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  235.545502][ T5765] cdc_wdm 10-1:1.0: Unknown control protocol
[  235.718615][ T5765] usb 10-1: USB disconnect, device number 7
[  235.994484][T11645] CIFS mount error: No usable UNC path provided in device string!
[  235.994484][T11645] 
[  236.022435][T11645] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  236.172427][ T5765] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  236.279374][T11668] ERROR: Out of memory at tomoyo_memory_ok.
[  236.283879][T11668] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /usr/sbin/sshd /usr/sbin/sshd /bin/sh /syz-executor /syz-executor /newroot/267/file0' not defined.
[  236.331034][ T5765] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  236.338504][ T5765] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  236.344185][ T5765] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  236.351245][ T5765] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  236.358200][ T5765] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.368518][ T5765] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  236.372475][ T5765] usb 10-1: Product: syz
[  236.375808][ T5765] usb 10-1: Manufacturer: syz
[  236.419636][ T5765] cdc_wdm 10-1:1.0: skipping garbage
[  236.424215][ T5765] cdc_wdm 10-1:1.0: skipping garbage
[  236.435113][ T5765] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  236.439584][ T5765] cdc_wdm 10-1:1.0: Unknown control protocol
[  237.067018][T11689] Cannot find del_set index 2 as target
[  237.118716][T11694] FAULT_INJECTION: forcing a failure.
[  237.118716][T11694] name failslab, interval 1, probability 0, space 0, times 0
[  237.124669][T11694] CPU: 1 UID: 0 PID: 11694 Comm: syz.7.2231 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  237.124682][T11694] Tainted: [L]=SOFTLOCKUP
[  237.124685][T11694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  237.124690][T11694] Call Trace:
[  237.124694][T11694]  <TASK>
[  237.124698][T11694]  dump_stack_lvl+0xe8/0x150
[  237.124712][T11694]  should_fail_ex+0x410/0x560
[  237.124723][T11694]  should_failslab+0xa8/0x100
[  237.124737][T11694]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  237.124747][T11694]  ? radix_tree_node_alloc+0x82/0x3a0
[  237.124758][T11694]  ? radix_tree_node_alloc+0x82/0x3a0
[  237.124769][T11694]  radix_tree_node_alloc+0x82/0x3a0
[  237.124780][T11694]  idr_get_free+0x28f/0xa10
[  237.124793][T11694]  idr_alloc_u32+0x18a/0x330
[  237.124802][T11694]  ? __radix_tree_preload+0x82/0x870
[  237.124811][T11694]  ? __pfx_idr_alloc_u32+0x10/0x10
[  237.124822][T11694]  ? do_raw_spin_lock+0x12b/0x2f0
[  237.124834][T11694]  idr_alloc_cyclic+0x9c/0x1b0
[  237.124846][T11694]  map_create+0x47c/0x1b90
[  237.124860][T11694]  ? __pfx_map_create+0x10/0x10
[  237.124874][T11694]  ? bpf_lsm_bpf+0x9/0x20
[  237.124883][T11694]  ? security_bpf+0x7e/0x2d0
[  237.124891][T11694]  __sys_bpf+0xaea/0xd90
[  237.124904][T11694]  ? __pfx___sys_bpf+0x10/0x10
[  237.124915][T11694]  ? do_futex+0x3e7/0x4e0
[  237.124930][T11694]  ? ksys_write+0x242/0x270
[  237.124937][T11694]  ? __pfx___se_sys_futex+0x10/0x10
[  237.124945][T11694]  ? __pfx_ksys_write+0x10/0x10
[  237.124954][T11694]  __x64_sys_bpf+0xba/0xd0
[  237.124964][T11694]  do_syscall_64+0x166/0x520
[  237.124973][T11694]  ? trace_irq_disable+0x3b/0x140
[  237.124982][T11694]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.124992][T11694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.124999][T11694] RIP: 0033:0x7fa262d9e159
[  237.125007][T11694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  237.125013][T11694] RSP: 002b:00007fa263c30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  237.125023][T11694] RAX: ffffffffffffffda RBX: 00007fa263025fa0 RCX: 00007fa262d9e159
[  237.125028][T11694] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000
[  237.125032][T11694] RBP: 00007fa262e3506b R08: 0000000000000000 R09: 0000000000000000
[  237.125037][T11694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.125041][T11694] R13: 00007fa263026038 R14: 00007fa263025fa0 R15: 00007fff77df6af8
[  237.125052][T11694]  </TASK>
[  237.446882][ T5765] usb 10-1: USB disconnect, device number 8
[  237.752112][T11703] loop7: detected capacity change from 0 to 131072
[  237.755300][T11703] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0)
[  237.757836][T11703] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  237.761349][T11703] F2FS-fs (loop7): invalid crc value
[  237.790516][T11703] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  237.797780][T11703] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  237.800302][T11703] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  237.835992][T11703] netfs: Cache "CacheFiles" added (type cachefiles)
[  237.838768][T11703] CacheFiles: File cache on CacheFiles registered
[  237.842528][T11702] CacheFiles: File cache on CacheFiles unregistering
[  237.845048][T11702] netfs: Withdrawing cache "CacheFiles" (0 objs)
[  238.301349][T11735] jffs2: notice: (11735) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  238.374289][T11740] loop8: detected capacity change from 0 to 16
[  238.377714][T11740] erofs (device loop8): invalid ishare xattr prefix id 0
[  238.380520][   T33] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  238.640893][   T33] usb 10-1: Using ep0 maxpacket: 32
[  238.663855][T11753] loop8: detected capacity change from 0 to 512
[  238.876249][T11753] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  238.958929][T11753] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  238.969363][T11753] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2252: bg 0: block 248: padding at end of block bitmap is not set
[  238.975041][T11753] loop8: lost filesystem error report for type 5 error -117
[  238.977359][T11753] Quota error (device loop8): write_blk: dquota write failed
[  238.983806][T11753] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[  238.987925][T11753] EXT4-fs error (device loop8): ext4_acquire_dquot:7049: comm syz.8.2252: Failed to acquire dquot type 1
[  238.989036][   T33] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  238.992454][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  238.992468][    C0] EXT4-fs (loop8): last error at time 2000000073: ext4_validate_block_bitmap:441
[  238.992596][T11753] loop8: lost filesystem error report for type 5 error -28
[  238.997965][   T33] usb 10-1: config index 0 descriptor too short (expected 156, got 27)
[  239.004436][T11753] EXT4-fs (loop8): 1 truncate cleaned up
[  239.010322][   T33] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  239.016332][   T33] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  239.023538][   T33] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  239.028921][   T33] usb 10-1: config 0 interface 0 has no altsetting 0
[  239.038669][   T33] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  239.043827][   T33] usb 10-1: Product: syz
[  239.045810][   T33] usb 10-1: Manufacturer: syz
[  239.048194][   T33] usb 10-1: SerialNumber: syz
[  239.053448][T11753] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  239.062040][   T33] usb 10-1: config 0 descriptor??
[  239.074951][   T33] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  239.086077][   T33] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  239.300114][   T33] usb 10-1: USB disconnect, device number 9
[  239.302757][    C1] ldusb 10-1:0.0: usb_submit_urb failed (-19)
[  239.325401][ T9531] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  239.331608][   T33] ldusb 10-1:0.0: LD USB Device #0 now disconnected
[  239.493172][T11762] loop8: detected capacity change from 0 to 1024
[  239.605959][T11766] loop8: detected capacity change from 0 to 4096
[  239.633453][T11766] ntfs3(loop8): Failed to load $Extend (-22).
[  239.639077][T11766] ntfs3(loop8): Failed to initialize $Extend.
[  239.730700][T11770] loop8: detected capacity change from 0 to 4096
[  239.758601][T11770] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  239.763252][T11770] ntfs3(loop8): Failed to load root (-22).
[  239.834585][T11774] tipc: Started in network mode
[  239.836285][T11774] tipc: Node identity ac1414aa, cluster identity 4711
[  239.838731][T11774] tipc: New replicast peer: 172.20.20.187
[  239.849567][T11774] tipc: Enabled bearer <udp:syz0>, priority 10
[  239.927461][T11776] loop7: detected capacity change from 0 to 4096
[  239.932983][T11776] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512).
[  239.957354][T11776] ntfs3(loop7): Failed to initialize $Extend/$ObjId.
[  240.110826][T11786] netlink: 'syz.7.2270': attribute type 3 has an invalid length.
[  240.117532][T11786] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2270'.
[  240.201421][T11789] ieee802154 phy0 wpan0: encryption failed: -22
[  240.231666][ T5818] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  240.288368][T11795] loop7: detected capacity change from 0 to 1024
[  240.314544][T11795] hfsplus: invalid btree flag
[  240.322273][T11795] hfsplus: failed to load catalog file
[  240.392275][ T5818] usb 9-1: Using ep0 maxpacket: 16
[  240.401246][ T5818] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  240.412080][ T5818] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.423527][ T5818] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.442100][ T5818] usb 9-1: config 0 descriptor??
[  240.871905][ T5818] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0
[  240.893334][T11815] loop7: detected capacity change from 0 to 32768
[  240.915911][T11815] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  240.946003][T11815] XFS (loop7): Ending clean mount
[  240.948878][T11815] XFS (loop7): Quotacheck needed: Please wait.
[  240.961636][   T33] tipc: Node number set to 2886997162
[  241.093249][T11815] XFS (loop7): Quotacheck: Done.
[  241.124672][ T8522] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  241.199786][T11837] overlayfs: conflicting lowerdir path
[  241.296999][   T33] usb 9-1: USB disconnect, device number 16
[  241.381907][T11841] block nbd0: server does not support multiple connections per device.
[  241.402719][T11841] block nbd0: shutting down sockets
[  242.092464][ T5772] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  242.140004][T11875] Bluetooth: MGMT ver 1.23
[  242.460592][ T5772] usb 8-1: Using ep0 maxpacket: 16
[  242.465722][ T5772] usb 8-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92
[  242.479840][ T5772] usb 8-1: config 6 has an invalid interface number: 221 but max is 0
[  242.499805][ T5772] usb 8-1: config 6 has no interface number 0
[  242.504798][ T5772] usb 8-1: config 6 interface 221 has no altsetting 0
[  242.508703][ T5772] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.511756][ T5772] usb 8-1: Product: syz
[  242.513126][ T5772] usb 8-1: Manufacturer: syz
[  242.515004][ T5772] usb 8-1: SerialNumber: syz
[  242.567961][T11888] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.573493][T11888] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  242.724498][ T5772] f81534a_ctrl 8-1:6.221: probe with driver f81534a_ctrl failed with error -71
[  242.729119][ T5772] usb 8-1: USB disconnect, device number 17
[  242.854174][T11902] loop8: detected capacity change from 0 to 128
[  242.965973][T11908] FAULT_INJECTION: forcing a failure.
[  242.965973][T11908] name failslab, interval 1, probability 0, space 0, times 0
[  242.973581][T11908] CPU: 1 UID: 0 PID: 11908 Comm: syz.9.2323 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  242.973598][T11908] Tainted: [L]=SOFTLOCKUP
[  242.973601][T11908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  242.973606][T11908] Call Trace:
[  242.973610][T11908]  <TASK>
[  242.973614][T11908]  dump_stack_lvl+0xe8/0x150
[  242.973629][T11908]  should_fail_ex+0x410/0x560
[  242.973658][T11908]  should_failslab+0xa8/0x100
[  242.973674][T11908]  __kmalloc_noprof+0xfe/0x720
[  242.973687][T11908]  ? down_write_nested+0x172/0x210
[  242.973697][T11908]  ? security_sb_alloc+0x48/0x310
[  242.973706][T11908]  ? security_sb_alloc+0x48/0x310
[  242.973719][T11908]  security_sb_alloc+0x48/0x310
[  242.973730][T11908]  sget_fc+0x984/0x1a40
[  242.973743][T11908]  ? __pfx_kernfs_test_super+0x10/0x10
[  242.973753][T11908]  ? __pfx_kernfs_set_super+0x10/0x10
[  242.973762][T11908]  ? __pfx_sget_fc+0x10/0x10
[  242.973778][T11908]  ? __kasan_kmalloc+0x93/0xb0
[  242.973790][T11908]  ? __kmalloc_cache_noprof+0x331/0x660
[  242.973800][T11908]  ? __kmalloc_cache_noprof+0x152/0x660
[  242.973809][T11908]  ? kernfs_get_tree+0xc4/0x980
[  242.973816][T11908]  ? kernfs_get_tree+0xc4/0x980
[  242.973825][T11908]  kernfs_get_tree+0x1e9/0x980
[  242.973832][T11908]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[  242.973844][T11908]  ? __pfx_kernfs_get_tree+0x10/0x10
[  242.973853][T11908]  ? apparmor_capable+0x126/0x170
[  242.973865][T11908]  ? bpf_lsm_capable+0x9/0x20
[  242.973879][T11908]  vfs_get_tree+0x92/0x2a0
[  242.973889][T11908]  do_new_mount+0x319/0xdc0
[  242.973903][T11908]  ? __pfx_do_new_mount+0x10/0x10
[  242.973915][T11908]  ? ns_capable+0x89/0xe0
[  242.973924][T11908]  ? path_mount+0x647/0x1050
[  242.973935][T11908]  ? user_path_at+0xd4/0x160
[  242.973944][T11908]  __se_sys_mount+0x31d/0x420
[  242.973958][T11908]  ? __pfx___se_sys_mount+0x10/0x10
[  242.973971][T11908]  ? __x64_sys_mount+0x20/0xc0
[  242.973982][T11908]  do_syscall_64+0x166/0x520
[  242.973993][T11908]  ? trace_irq_disable+0x3b/0x140
[  242.974002][T11908]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.974012][T11908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.974020][T11908] RIP: 0033:0x7f8b51b9e159
[  242.974028][T11908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  242.974036][T11908] RSP: 002b:00007f8b529c1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  242.974046][T11908] RAX: ffffffffffffffda RBX: 00007f8b51e25fa0 RCX: 00007f8b51b9e159
[  242.974051][T11908] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000000000000000
[  242.974056][T11908] RBP: 00007f8b51c3506b R08: 0000000000000000 R09: 0000000000000000
[  242.974061][T11908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  242.974065][T11908] R13: 00007f8b51e26038 R14: 00007f8b51e25fa0 R15: 00007fffd7ad89d8
[  242.974077][T11908]  </TASK>
[  243.170960][T11916] /dev/nbd8: Can't open blockdev
[  243.220291][T11920] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  243.405510][T11935] usb usb7: check_ctrlrecip: process 11935 (syz.9.2335) requesting ep 01 but needs 81
[  243.411400][T11935] usb usb7: usbfs: process 11935 (syz.9.2335) did not claim interface 0 before use
[  243.524319][T11940] loop9: detected capacity change from 0 to 128
[  243.543417][T11940] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  243.551185][T11940] hpfs: filesystem error: improperly stopped
[  243.555557][T11940] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  243.562387][T11940] hpfs: You really don't want any checks? You are crazy...
[  243.568154][T11940] hpfs: Code page index out of array
[  243.570959][T11940] hpfs: code page support is disabled
[  243.580975][T11940] hpfs: hpfs_map_4sectors(): unaligned read
[  243.599456][T11940] hpfs: hpfs_map_4sectors(): unaligned read
[  243.604999][T11940] hpfs: filesystem error: unable to find root dir
[  243.623643][T11942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2339'.
[  243.633949][T11940] hpfs: hpfs_map_4sectors(): unaligned read
[  243.832956][T11948] wlan0 speed is unknown, defaulting to 1000
[  243.978983][T11957] loop7: detected capacity change from 0 to 2048
[  244.065899][T11957] Alternate GPT is invalid, using primary GPT.
[  244.069632][T11957]  loop7: p2 p3 p7
[  244.137246][T11959] FAULT_INJECTION: forcing a failure.
[  244.137246][T11959] name failslab, interval 1, probability 0, space 0, times 0
[  244.171276][T11959] CPU: 1 UID: 0 PID: 11959 Comm: syz.9.2347 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  244.171299][T11959] Tainted: [L]=SOFTLOCKUP
[  244.171306][T11959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  244.171314][T11959] Call Trace:
[  244.171320][T11959]  <TASK>
[  244.171347][T11959]  dump_stack_lvl+0xe8/0x150
[  244.171374][T11959]  should_fail_ex+0x410/0x560
[  244.171393][T11959]  should_failslab+0xa8/0x100
[  244.171436][T11959]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  244.171455][T11959]  ? sk_prot_alloc+0x57/0x210
[  244.171470][T11959]  ? sk_prot_alloc+0x57/0x210
[  244.171495][T11959]  sk_prot_alloc+0x57/0x210
[  244.171509][T11959]  ? sk_alloc+0x27/0x390
[  244.171526][T11959]  sk_alloc+0x3a/0x390
[  244.171544][T11959]  inet_create+0x7a9/0xff0
[  244.171565][T11959]  ? inet_create+0x9d/0xff0
[  244.171584][T11959]  __sock_create+0x4b3/0x9d0
[  244.171604][T11959]  __sys_socket+0xd6/0x1b0
[  244.171619][T11959]  __x64_sys_socket+0x7a/0x90
[  244.171633][T11959]  do_syscall_64+0x166/0x520
[  244.171649][T11959]  ? trace_irq_disable+0x3b/0x140
[  244.171665][T11959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.171682][T11959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.171695][T11959] RIP: 0033:0x7f8b51b9e159
[  244.171709][T11959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  244.171719][T11959] RSP: 002b:00007f8b529c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  244.171735][T11959] RAX: ffffffffffffffda RBX: 00007f8b51e25fa0 RCX: 00007f8b51b9e159
[  244.171745][T11959] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  244.171755][T11959] RBP: 00007f8b51c3506b R08: 0000000000000000 R09: 0000000000000000
[  244.171763][T11959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  244.171771][T11959] R13: 00007f8b51e26038 R14: 00007f8b51e25fa0 R15: 00007fffd7ad89d8
[  244.171790][T11959]  </TASK>
[  244.311701][ T9502] udevd[9502]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory
[  244.357476][ T5645] udevd[5645]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  244.365659][ T5592] udevd[5592]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  244.659100][T11038] wlan0 speed is unknown, defaulting to 1000
[  244.661829][T11671] wlan0 speed is unknown, defaulting to 1000
[  244.971289][T11985] netlink: 'syz.8.2357': attribute type 6 has an invalid length.
[  245.002391][T11038] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  245.168080][T11038] usb 8-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98
[  245.177950][T11038] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.194678][T11038] usb 8-1: config 0 descriptor??
[  245.202097][T11038] pwc: Creative Labs Webcam 5 detected.
[  245.367757][T12001] loop9: detected capacity change from 0 to 8192
[  245.422845][T11038] pwc: Failed to set LED on/off time (-71)
[  245.431960][T11038] pwc: send_video_command error -71
[  245.435629][T11038] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  245.438756][T11038] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71
[  245.446549][T11038] usb 8-1: USB disconnect, device number 18
[  245.616206][T12007] loop9: detected capacity change from 0 to 32768
[  245.626222][T12007] XFS (loop9): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  245.653605][T12007] XFS (loop9): Ending clean mount
[  245.678831][T10375] XFS (loop9): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  245.834996][T12017] loop9: detected capacity change from 0 to 256
[  245.848409][T12017] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d)
[  245.854512][T12017] exFAT-fs (loop9): failed to test first cluster bit of root dir(5)
[  246.008994][T12025] netlink: 'syz.7.2371': attribute type 1 has an invalid length.
[  246.042963][T12025] 8021q: adding VLAN 0 to HW filter on device bond2
[  246.063455][T12025] vlan2: entered allmulticast mode
[  246.065513][T12025] bond2: entered allmulticast mode
[  246.079297][T12030] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[  246.083484][T12025] bond2: (slave geneve2): making interface the new active one
[  246.089294][T12025] geneve2: entered allmulticast mode
[  246.100109][T12025] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  246.109298][T12034] bridge0: port 3(veth0) entered blocking state
[  246.119536][T12034] bridge0: port 3(veth0) entered disabled state
[  246.127100][T12034] veth0: entered allmulticast mode
[  246.128548][T12034] veth0: entered promiscuous mode
[  246.137941][T12034] bridge0: port 3(veth0) entered blocking state
[  246.138090][T12034] bridge0: port 3(veth0) entered forwarding state
[  246.335354][T12038] fuse: root generation should be zero
[  246.438364][T12042] loop8: detected capacity change from 0 to 32768
[  246.445582][T12042] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2379 (12042)
[  246.470948][T12042] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  246.475354][T12042] BTRFS info (device loop8): using crc32c checksum algorithm
[  246.492009][T12046] loop9: detected capacity change from 0 to 32768
[  246.525031][T12046] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  246.555413][T12046] XFS (loop9): Ending clean mount
[  246.565565][T12046] XFS (loop9): Quotacheck needed: Please wait.
[  246.573918][T12042] BTRFS info (device loop8): enabling ssd optimizations
[  246.582624][T12042] BTRFS info (device loop8): turning on flush-on-commit
[  246.587585][T12042] BTRFS info (device loop8): enabling free space tree
[  246.607457][T12042] BTRFS info (device loop8): enabling auto defrag
[  246.617004][T12046] XFS (loop9): Quotacheck: Done.
[  246.620232][T12042] BTRFS info (device loop8): use lzo compression, level 1
[  246.624860][T12042] BTRFS info (device loop8): max_inline set to 4096
[  246.683471][T10375] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  246.704598][T12042] BTRFS critical (device loop8 state E): emergency shutdown
[  246.791827][ T9531] BTRFS info (device loop8 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  247.199056][T12097] netlink: 'syz.8.2393': attribute type 1 has an invalid length.
[  247.356690][T12101] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  247.797091][T12119] FAULT_INJECTION: forcing a failure.
[  247.797091][T12119] name failslab, interval 1, probability 0, space 0, times 0
[  247.802637][T12119] CPU: 1 UID: 0 PID: 12119 Comm: syz.7.2403 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  247.802660][T12119] Tainted: [L]=SOFTLOCKUP
[  247.802665][T12119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  247.802673][T12119] Call Trace:
[  247.802679][T12119]  <TASK>
[  247.802684][T12119]  dump_stack_lvl+0xe8/0x150
[  247.802706][T12119]  should_fail_ex+0x410/0x560
[  247.802726][T12119]  should_failslab+0xa8/0x100
[  247.802746][T12119]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  247.802762][T12119]  ? alloc_pages_mpol+0x24a/0x390
[  247.802776][T12119]  ? ptlock_alloc+0x20/0x70
[  247.802790][T12119]  ? ptlock_alloc+0x20/0x70
[  247.802808][T12119]  ptlock_alloc+0x20/0x70
[  247.802825][T12119]  pte_alloc_one+0x7a/0x370
[  247.802840][T12119]  __pte_alloc+0x25/0x1a0
[  247.802862][T12119]  do_pte_missing+0x2db7/0x34b0
[  247.802889][T12119]  handle_mm_fault+0x1b36/0x3080
[  247.802903][T12119]  ? mt_find+0x186/0x630
[  247.802927][T12119]  ? handle_mm_fault+0xec/0x3080
[  247.802946][T12119]  ? __pfx_handle_mm_fault+0x10/0x10
[  247.802959][T12119]  ? find_vma+0xed/0x160
[  247.802983][T12119]  ? __pfx_find_vma+0x10/0x10
[  247.803012][T12119]  __get_user_pages+0x1678/0x2720
[  247.803045][T12119]  populate_vma_page_range+0x2be/0x3c0
[  247.803059][T12119]  ? __pfx_populate_vma_page_range+0x10/0x10
[  247.803075][T12119]  ? down_read+0x2be/0x330
[  247.803096][T12119]  __mm_populate+0x25f/0x390
[  247.803111][T12119]  ? __pfx___mm_populate+0x10/0x10
[  247.803173][T12119]  do_mlock+0x615/0x720
[  247.803187][T12119]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  247.803208][T12119]  ? __pfx_do_mlock+0x10/0x10
[  247.803222][T12119]  ? ksys_write+0x242/0x270
[  247.803236][T12119]  ? rcu_is_watching+0x16/0xb0
[  247.803256][T12119]  __x64_sys_mlock+0x60/0x70
[  247.803275][T12119]  do_syscall_64+0x166/0x520
[  247.803290][T12119]  ? trace_irq_disable+0x3b/0x140
[  247.803305][T12119]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.803321][T12119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.803334][T12119] RIP: 0033:0x7fa262d9e159
[  247.803346][T12119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  247.803358][T12119] RSP: 002b:00007fa263c30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[  247.803374][T12119] RAX: ffffffffffffffda RBX: 00007fa263025fa0 RCX: 00007fa262d9e159
[  247.803384][T12119] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000
[  247.803392][T12119] RBP: 00007fa262e3506b R08: 0000000000000000 R09: 0000000000000000
[  247.803400][T12119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  247.803407][T12119] R13: 00007fa263026038 R14: 00007fa263025fa0 R15: 00007fff77df6af8
[  247.803428][T12119]  </TASK>
[  248.125439][T12131] loop7: detected capacity change from 0 to 128
[  248.693465][T12142] loop7: detected capacity change from 0 to 4096
[  248.724855][T12142] ntfs3(loop7): Failed to load $Extend (-22).
[  248.733297][T12142] ntfs3(loop7): Failed to initialize $Extend.
[  249.057944][T12167] loop7: detected capacity change from 0 to 1024
[  249.060256][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2425'.
[  249.070967][T12169] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2425'.
[  249.083398][T12169] geneve2: entered promiscuous mode
[  249.085532][T12169] geneve2: entered allmulticast mode
[  249.090184][T12167] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.137072][ T8522] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.625834][T12195] loop9: detected capacity change from 0 to 1024
[  249.636558][T12196] netlink: 'syz.7.2436': attribute type 2 has an invalid length.
[  249.647907][T12195] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  249.662648][T12196] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2436'.
[  249.666426][T12195] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  249.739010][T10375] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  250.057503][T12212] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2444'.
[  250.062464][T12212] netlink: 85 bytes leftover after parsing attributes in process `syz.7.2444'.
[  250.127597][T12216] loop7: detected capacity change from 0 to 256
[  250.130665][   T10] usb 10-1: new full-speed USB device number 10 using dummy_hcd
[  250.138356][T12216] exfat: Deprecated parameter 'utf8'
[  250.169641][T12216] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  250.292936][   T10] usb 10-1: not running at top speed; connect to a high speed hub
[  250.300672][   T10] usb 10-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  250.314674][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.320592][   T10] usb 10-1: Product: syz
[  250.324412][   T10] usb 10-1: Manufacturer: syz
[  250.327805][T12224] JFS: discard option not supported on device
[  250.332453][   T10] usb 10-1: SerialNumber: syz
[  250.335297][T12224] Mount JFS Failure: -22
[  250.345586][   T10] keyspan 10-1:1.0: Keyspan 4 port adapter converter detected
[  250.348531][T12224] jfs_mount failed w/return code = -22
[  250.372952][   T10] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  250.392831][   T10] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  250.403238][   T10] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  250.437702][T12228] loop8: detected capacity change from 0 to 512
[  250.455280][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2452'.
[  250.458498][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2452'.
[  250.464718][T12228] netlink: 'syz.8.2452': attribute type 12 has an invalid length.
[  250.467044][   T10] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  250.475532][T12228] netlink: 'syz.8.2452': attribute type 11 has an invalid length.
[  250.603267][T12232] FAULT_INJECTION: forcing a failure.
[  250.603267][T12232] name failslab, interval 1, probability 0, space 0, times 0
[  250.618054][T12232] CPU: 0 UID: 0 PID: 12232 Comm: syz.7.2454 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  250.618076][T12232] Tainted: [L]=SOFTLOCKUP
[  250.618080][T12232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  250.618089][T12232] Call Trace:
[  250.618094][T12232]  <TASK>
[  250.618100][T12232]  dump_stack_lvl+0xe8/0x150
[  250.618151][T12232]  should_fail_ex+0x410/0x560
[  250.618168][T12232]  should_failslab+0xa8/0x100
[  250.618190][T12232]  __kmalloc_cache_noprof+0xa8/0x660
[  250.618209][T12232]  ? __kmalloc_cache_noprof+0x152/0x660
[  250.618224][T12232]  ? vlan_vid_add+0x303/0x750
[  250.618238][T12232]  ? vlan_vid_add+0x303/0x750
[  250.618258][T12232]  vlan_vid_add+0x303/0x750
[  250.618278][T12232]  register_vlan_dev+0x9f/0x850
[  250.618293][T12232]  ? alloc_netdev_mqs+0xe64/0x12b0
[  250.618313][T12232]  register_vlan_device+0x393/0x4b0
[  250.618332][T12232]  ? __pfx_register_vlan_device+0x10/0x10
[  250.618347][T12232]  ? security_capable+0x7e/0x2c0
[  250.618364][T12232]  vlan_ioctl_handler+0x248/0x630
[  250.618378][T12232]  ? __pfx___mutex_lock+0x10/0x10
[  250.618394][T12232]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  250.618408][T12232]  ? hook_file_ioctl+0x1f0/0x5f0
[  250.618429][T12232]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  250.618445][T12232]  sock_ioctl+0x612/0x7e0
[  250.618464][T12232]  ? __pfx_sock_ioctl+0x10/0x10
[  250.618480][T12232]  ? __fget_files+0x2a/0x420
[  250.618491][T12232]  ? __fget_files+0x3a2/0x420
[  250.618502][T12232]  ? __fget_files+0x2a/0x420
[  250.618514][T12232]  ? bpf_lsm_file_ioctl+0x9/0x20
[  250.618530][T12232]  ? __pfx_sock_ioctl+0x10/0x10
[  250.618545][T12232]  __se_sys_ioctl+0xfc/0x170
[  250.618563][T12232]  do_syscall_64+0x166/0x520
[  250.618578][T12232]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.618594][T12232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.618606][T12232] RIP: 0033:0x7fa262d9e159
[  250.618618][T12232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  250.618629][T12232] RSP: 002b:00007fa263c30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  250.618643][T12232] RAX: ffffffffffffffda RBX: 00007fa263025fa0 RCX: 00007fa262d9e159
[  250.618652][T12232] RDX: 0000200000000040 RSI: 0000000000008983 RDI: 0000000000000005
[  250.618661][T12232] RBP: 00007fa262e3506b R08: 0000000000000000 R09: 0000000000000000
[  250.618669][T12232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  250.618676][T12232] R13: 00007fa263026038 R14: 00007fa263025fa0 R15: 00007fff77df6af8
[  250.618696][T12232]  </TASK>
[  250.765429][T11038] usb 10-1: USB disconnect, device number 10
[  250.775641][T11038] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  250.781586][T11038] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  250.786179][T11038] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  250.790056][T12235] loop7: detected capacity change from 0 to 1024
[  250.798871][T11038] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  250.803437][T11038] keyspan 10-1:1.0: device disconnected
[  250.807423][T12235] EXT4-fs (loop7): The Hurd can't support 64-bit file systems
[  250.908631][T12241] netlink: 'syz.7.2458': attribute type 10 has an invalid length.
[  251.162634][T12252] 8021q: adding VLAN 0 to HW filter on device bond3
[  251.174200][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2463'.
[  251.177802][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2463'.
[  251.203727][T12252] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.223701][T12252] bond3: (slave bond0): making interface the new active one
[  251.228679][T12252] bond3: (slave bond0): Enslaving as an active interface with an up link
[  251.247373][T12257] bond3 (unregistering): (slave bond0): Releasing active interface
[  251.267187][T12257] bond3 (unregistering): Released all slaves
[  251.516778][   T34] audit: type=1326 audit(2000000086.430:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12273 comm="syz.9.2473" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b51b9e159 code=0x7ffc0000
[  251.533032][   T34] audit: type=1326 audit(2000000086.430:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12273 comm="syz.9.2473" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b51b9e159 code=0x7ffc0000
[  251.546340][   T34] audit: type=1326 audit(2000000086.460:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12273 comm="syz.9.2473" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8b51b9e159 code=0x7ffc0000
[  251.565928][   T34] audit: type=1326 audit(2000000086.460:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12273 comm="syz.9.2473" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b51b9e159 code=0x7ffc0000
[  251.591568][   T34] audit: type=1326 audit(2000000086.460:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12273 comm="syz.9.2473" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b51b9e159 code=0x7ffc0000
[  251.614307][   T34] audit: type=1326 audit(2000000086.460:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12273 comm="syz.9.2473" exe="/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f8b51b9e159 code=0x7ffc0000
[  251.633236][   T34] audit: type=1326 audit(2000000086.460:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12273 comm="syz.9.2473" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b51b9e159 code=0x7ffc0000
[  251.655379][   T34] audit: type=1326 audit(2000000086.460:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12273 comm="syz.9.2473" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b51b9e159 code=0x7ffc0000
[  251.907839][T12293] xt_CT: No such helper "pptp"
[  252.030704][T12289] loop9: detected capacity change from 0 to 32768
[  252.180778][   T33] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  252.220240][T12298] loop9: detected capacity change from 0 to 256
[  252.316496][T12302] loop9: detected capacity change from 0 to 512
[  252.323622][T12302] EXT4-fs: Ignoring removed mblk_io_submit option
[  252.330651][   T33] usb 8-1: Using ep0 maxpacket: 16
[  252.336461][   T33] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  252.345414][T12302] EXT4-fs (loop9): orphan cleanup on readonly fs
[  252.346420][   T33] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.348084][T12302] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13
[  252.353563][   T33] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  252.357040][T12302] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.2485: attempt to clear invalid blocks 2 len 1
[  252.362376][   T33] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.365211][T12302] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  252.367356][   T33] usb 8-1: Product: syz
[  252.369292][T12302] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, 
[  252.371666][   T33] usb 8-1: Manufacturer: syz
[  252.372802][T12302] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  252.376227][   T33] usb 8-1: SerialNumber: syz
[  252.383320][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  252.383335][    C0] EXT4-fs (loop9): initial error at time 2000000087: ext4_clear_blocks:876: inode 13
[  252.383357][    C0] EXT4-fs (loop9): last error at time 2000000087: ext4_clear_blocks:876: inode 13
[  252.386524][   T33] usb 8-1: 0:2 : does not exist
[  252.391041][T12302] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2485: invalid indirect mapped block 1819239214 (level 0)
[  252.406572][T12302] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  252.441040][T12302] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2485: invalid indirect mapped block 1819239214 (level 1)
[  252.454662][T12302] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  252.455769][T12302] EXT4-fs (loop9): 1 truncate cleaned up
[  252.467016][T12302] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  252.509246][T12302] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  252.523089][T12302] EXT4-fs (loop9): changing journal_checksum during remount not supported; ignoring
[  252.527125][T12302] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000.
[  252.553857][T10375] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.591333][   T33] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  252.656920][   T33] usb 8-1: USB disconnect, device number 19
[  252.680531][ T5765] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  252.696351][ T5592] udevd[5592]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  252.832583][ T5765] usb 9-1: unable to get BOS descriptor or descriptor too short
[  252.835065][ T5765] usb 9-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice= 0.40
[  252.839080][ T5765] usb 9-1: config 1 descriptor has 1 excess byte, ignoring
[  252.846337][ T5765] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.848999][ T5765] usb 9-1: Product: syz
[  252.850376][ T5765] usb 9-1: Manufacturer: syz
[  252.852737][ T5765] usb 9-1: SerialNumber: syz
[  253.075138][ T5765] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  253.116332][T12330] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  253.126348][T12330] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  253.136519][T12330] overlayfs: conflicting lowerdir path
[  253.158337][ T5765] usb 9-1: USB disconnect, device number 17
[  253.229747][ T5913] udevd[5913]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  253.403497][T12343] loop7: detected capacity change from 0 to 512
[  253.407411][T12343] EXT4-fs: Ignoring removed bh option
[  253.409680][T12343] EXT4-fs: Ignoring removed mblk_io_submit option
[  253.417824][T12343] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  253.429032][T12343] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  253.434348][T12343] EXT4-fs (loop7): orphan cleanup on readonly fs
[  253.442039][T12343] Quota error (device loop7): v2_read_file_info: Free block number 117440512 out of range (1, 6).
[  253.454437][T12343] EXT4-fs warning (device loop7): ext4_enable_quotas:7284: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  253.464057][T12343] EXT4-fs (loop7): Cannot turn on quotas: error -117
[  253.467148][T12343] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2504: Invalid block bitmap block 0 in block_group 0
[  253.474371][T12343] loop7: lost filesystem error report for type 5 error -117
[  253.478896][T12343] EXT4-fs (loop7): Remounting filesystem read-only
[  253.481729][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  253.481743][    C1] EXT4-fs (loop7): last error at time 2000000088: ext4_read_block_bitmap_nowait:483
[  253.492841][T12343] EXT4-fs (loop7): 1 orphan inode deleted
[  253.496298][T12343] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  253.532899][ T8522] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.592207][T12355] loop9: detected capacity change from 0 to 256
[  253.596438][T12357] loop7: detected capacity change from 0 to 256
[  253.824567][T12370] loop8: detected capacity change from 0 to 4096
[  253.839793][T12370] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.907433][ T9531] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.079807][T12391] FAULT_INJECTION: forcing a failure.
[  254.079807][T12391] name failslab, interval 1, probability 0, space 0, times 0
[  254.087301][T12391] CPU: 1 UID: 0 PID: 12391 Comm: syz.7.2525 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  254.087324][T12391] Tainted: [L]=SOFTLOCKUP
[  254.087329][T12391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.087337][T12391] Call Trace:
[  254.087343][T12391]  <TASK>
[  254.087349][T12391]  dump_stack_lvl+0xe8/0x150
[  254.087372][T12391]  should_fail_ex+0x410/0x560
[  254.087391][T12391]  should_failslab+0xa8/0x100
[  254.087413][T12391]  __kmalloc_cache_noprof+0xa8/0x660
[  254.087434][T12391]  ? call_usermodehelper_setup+0x8e/0x270
[  254.087448][T12391]  ? call_usermodehelper_setup+0x8e/0x270
[  254.087465][T12391]  call_usermodehelper_setup+0x8e/0x270
[  254.087478][T12391]  ? __pfx_umh_keys_cleanup+0x10/0x10
[  254.087489][T12391]  ? __pfx_umh_keys_init+0x10/0x10
[  254.087505][T12391]  call_sbin_request_key+0x7e2/0xbf0
[  254.087519][T12391]  ? request_key_auth_free_preparse+0x9/0x10
[  254.087539][T12391]  ? __pfx_call_sbin_request_key+0x10/0x10
[  254.087552][T12391]  ? do_raw_spin_unlock+0x4d/0x200
[  254.087587][T12391]  ? __pfx_request_key_auth_new+0x10/0x10
[  254.087610][T12391]  request_key_and_link+0xf13/0x15a0
[  254.087630][T12391]  ? __pfx_request_key_and_link+0x10/0x10
[  254.087644][T12391]  ? key_type_lookup+0x29/0xc0
[  254.087661][T12391]  ? __pfx_key_default_cmp+0x10/0x10
[  254.087677][T12391]  ? __pfx_keyring_search_iterator+0x10/0x10
[  254.087697][T12391]  ? down_read+0x2be/0x330
[  254.087713][T12391]  ? _copy_from_user+0x94/0xb0
[  254.087732][T12391]  __se_sys_request_key+0x29a/0x350
[  254.087752][T12391]  ? __pfx___se_sys_request_key+0x10/0x10
[  254.087779][T12391]  do_syscall_64+0x166/0x520
[  254.087796][T12391]  ? trace_irq_disable+0x3b/0x140
[  254.087811][T12391]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.087826][T12391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.087839][T12391] RIP: 0033:0x7fa262d9e159
[  254.087851][T12391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.087862][T12391] RSP: 002b:00007fa263c30028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  254.087876][T12391] RAX: ffffffffffffffda RBX: 00007fa263025fa0 RCX: 00007fa262d9e159
[  254.087884][T12391] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000200000000040
[  254.087893][T12391] RBP: 00007fa262e3506b R08: 0000000000000000 R09: 0000000000000000
[  254.087902][T12391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.087910][T12391] R13: 00007fa263026038 R14: 00007fa263025fa0 R15: 00007fff77df6af8
[  254.087929][T12391]  </TASK>
[  254.303388][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2528'.
[  254.475519][T12407] loop7: detected capacity change from 0 to 128
[  254.486765][T12407] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  254.492671][T12407] hpfs: filesystem error: improperly stopped
[  254.494989][T12407] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  254.498487][T12407] hpfs: You really don't want any checks? You are crazy...
[  254.503260][T12407] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[  254.507003][T12407] hpfs: code page support is disabled
[  254.511254][T12407] hpfs: hpfs_map_4sectors(): unaligned read
[  254.522373][T12407] hpfs: hpfs_map_4sectors(): unaligned read
[  254.526216][T12407] hpfs: filesystem error: unable to find root dir
[  254.700223][T12418] EXT4-fs (loop7): Test dummy encryption mode enabled
[  254.707004][T12418] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  254.711645][T12418] ext4 filesystem being mounted at /497/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  254.772451][ T8522] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  254.926616][T12426] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  255.066821][T12434] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2545'.
[  255.129834][T12439] EXT4-fs (loop7): Test dummy encryption mode enabled
[  255.154598][T12439] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.163480][T12437] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.196915][   T34] audit: type=1800 audit(2000000090.110:102): pid=12439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2547" name="file1" dev="loop7" ino=19 res=0 errno=0
[  255.202498][T12437] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  255.214976][T12432] PID 12432 killed due to inadequate hugepage pool
[  255.272444][ T8522] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.503429][T12459] set_capacity_and_notify: 4 callbacks suppressed
[  255.503482][T12459] loop8: detected capacity change from 0 to 128
[  255.514703][T12459] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  255.518337][T10375] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.525772][T12459] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  255.785498][T12471] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  255.844190][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  255.846751][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  255.925782][T12480] netlink: 1 bytes leftover after parsing attributes in process `syz.8.2564'.
[  256.094271][T12489] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2569'.
[  256.100397][T12490] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2568'.
[  256.917189][   T34] kauditd_printk_skb: 1 callbacks suppressed
[  256.917203][   T34] audit: type=1326 audit(2000000091.830:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.7.2577" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa262d9e159 code=0x7ffc0000
[  256.929126][   T34] audit: type=1326 audit(2000000091.830:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.7.2577" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa262d9e159 code=0x7ffc0000
[  256.936383][   T34] audit: type=1326 audit(2000000091.840:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.7.2577" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa262d9e159 code=0x7ffc0000
[  256.946994][   T34] audit: type=1326 audit(2000000091.840:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.7.2577" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa262d9e159 code=0x7ffc0000
[  256.965454][   T34] audit: type=1326 audit(2000000091.840:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.7.2577" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa262d9e159 code=0x7ffc0000
[  256.978496][   T34] audit: type=1326 audit(2000000091.840:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.7.2577" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa262d9e159 code=0x7ffc0000
[  256.986592][   T34] audit: type=1326 audit(2000000091.840:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.7.2577" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa262d9e159 code=0x7ffc0000
[  256.995002][   T34] audit: type=1326 audit(2000000091.840:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.7.2577" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa262d9e159 code=0x7ffc0000
[  257.007182][   T34] audit: type=1326 audit(2000000091.840:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.7.2577" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa262d9e159 code=0x7ffc0000
[  257.089341][T12521] loop7: detected capacity change from 0 to 128
[  257.104498][T12521] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  257.108378][T12521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  257.252382][T12529] loop7: detected capacity change from 0 to 2048
[  257.275052][T12532] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  257.279870][T12531] loop9: detected capacity change from 0 to 128
[  257.283557][T12531] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  257.289739][T12531] hpfs: filesystem error: improperly stopped
[  257.295778][T12531] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  257.302185][T12531] hpfs: You really don't want any checks? You are crazy...
[  257.310877][T12531] hpfs: Code page index out of array
[  257.314313][T12531] hpfs: code page support is disabled
[  257.321039][T12531] hpfs: hpfs_map_4sectors(): unaligned read
[  257.326008][T12531] hpfs: hpfs_map_4sectors(): unaligned read
[  257.331975][T12531] hpfs: filesystem error: unable to find root dir
[  257.340816][   T10] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  257.406783][T12532] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  257.424118][T12532] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4)
[  257.438276][T12532] Remounting filesystem read-only
[  257.442350][ T8522] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer
[  257.500523][   T10] usb 9-1: Using ep0 maxpacket: 8
[  257.504641][   T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  257.511246][   T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  257.518958][   T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  257.524245][   T10] usb 9-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86
[  257.532842][   T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024
[  257.541914][   T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024
[  257.551026][   T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  257.560543][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.661876][T12537] loop9: detected capacity change from 0 to 32768
[  257.779244][   T10] usb 9-1: GET_CAPABILITIES returned 0
[  257.783497][   T10] usbtmc 9-1:16.0: can't read capabilities
[  258.107344][ T5818] usb 9-1: USB disconnect, device number 18
[  258.748601][T12561] scsi_strcpy_devinfo: model string 'mo劌rrdel' is too long
[  258.869068][T12573] loop8: detected capacity change from 0 to 164
[  258.876697][T12573] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  259.103906][T12567] loop7: detected capacity change from 0 to 32768
[  259.113929][T12567] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2599 (12567)
[  259.140318][T12567] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  259.148036][T12567] BTRFS info (device loop7): using sha256 checksum algorithm
[  259.166983][ T8771] BTRFS warning (device loop7): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0x3c843944728decf3cd3fa7371a3ec67a8337b2e38cfad5e02888af45fe48cce7 level 0
[  259.181046][T12567] BTRFS warning (device loop7): couldn't read tree root
[  259.189969][T12567] BTRFS warning (device loop7): unable to release extent buffer 5332992 owner 1 gen 8 refs 3 flags 0xc
[  259.214277][T12567] BTRFS error (device loop7): open_ctree failed: -5
[  259.395395][T12614] loop7: detected capacity change from 0 to 2048
[  259.446755][T12614]  loop7: p1 p4
[  259.446755][T12614]  p1: <minix: p5 p6 >
[  259.450195][T12614] loop7: partition table partially beyond EOD, truncated
[  259.457839][T12614] loop7: p4 start 184549376 is beyond EOD, truncated
[  259.462559][T12614] loop7: p6 start 184549376 is beyond EOD, truncated
[  259.526199][ T5645] udevd[5645]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory
[  259.531880][ T5592] udevd[5592]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  260.040702][ T5818] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  260.200773][ T5818] usb 8-1: Using ep0 maxpacket: 16
[  260.211043][ T5818] usb 8-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  260.224179][ T5818] usb 8-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3
[  260.230522][ T5818] usb 8-1: Product: syz
[  260.233400][T12645] loop8: detected capacity change from 0 to 32768
[  260.233882][ T5818] usb 8-1: Manufacturer: syz
[  260.242159][ T5818] usb 8-1: SerialNumber: syz
[  260.251169][ T5818] usb 8-1: config 0 descriptor??
[  260.269072][T12645] JBD2: Ignoring recovery information on journal
[  260.274901][ T5818] ums-onetouch 8-1:0.0: USB Mass Storage device detected
[  260.298705][T12645] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  260.361588][T12645] 
[  260.362616][T12645] ======================================================
[  260.365389][T12645] WARNING: possible circular locking dependency detected
[  260.367969][T12645] syzkaller #0 Tainted: G             L     
[  260.370360][T12645] ------------------------------------------------------
[  260.373004][T12645] syz.8.2626/12645 is trying to acquire lock:
[  260.375190][T12645] ffff88811b9794e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2fd/0x7e0
[  260.378852][T12645] 
[  260.378852][T12645] but task is already holding lock:
[  260.381717][T12645] ffff88810d663ce0 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ae/0x700
[  260.385676][T12645] 
[  260.385676][T12645] which lock already depends on the new lock.
[  260.385676][T12645] 
[  260.389701][T12645] 
[  260.389701][T12645] the existing dependency chain (in reverse order) is:
[  260.393199][T12645] 
[  260.393199][T12645] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  260.396541][T12645]        down_read+0x4a/0x330
[  260.398446][T12645]        ocfs2_start_trans+0x3ae/0x700
[  260.400668][T12645]        ocfs2_mknod+0x116a/0x2240
[  260.402681][T12645]        ocfs2_create+0x195/0x460
[  260.404672][T12645]        lookup_open+0xc0d/0x1a40
[  260.406641][T12645]        path_openat+0x677/0x1d60
[  260.408660][T12645]        do_file_open+0x23e/0x4a0
[  260.410613][T12645]        do_sys_openat2+0x115/0x200
[  260.412581][T12645]        __x64_sys_open+0x11e/0x150
[  260.415165][T12645]        do_syscall_64+0x166/0x520
[  260.417153][T12645]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.419719][T12645] 
[  260.419719][T12645] -> #2 (sb_internal#4){.+.+}-{0:0}:
[  260.422644][T12645]        ocfs2_start_trans+0x2ac/0x700
[  260.424905][T12645]        ocfs2_write_begin_nolock+0x277f/0x41f0
[  260.427488][T12645]        ocfs2_page_mkwrite+0x640/0xb60
[  260.429777][T12645]        do_page_mkwrite+0x147/0x310
[  260.431933][T12645]        do_wp_page+0x1973/0x4c70
[  260.433913][T12645]        handle_mm_fault+0x1490/0x3080
[  260.436062][T12645]        do_user_addr_fault+0x746/0x1340
[  260.438233][T12645]        exc_page_fault+0x6a/0xc0
[  260.440271][T12645]        asm_exc_page_fault+0x26/0x30
[  260.442427][T12645] 
[  260.442427][T12645] -> #1 (&oi->ip_alloc_sem){++++}-{4:4}:
[  260.445628][T12645]        down_write+0x96/0x200
[  260.447593][T12645]        ocfs2_try_remove_refcount_tree+0xb6/0x360
[  260.450268][T12645]        ocfs2_truncate_file+0xe90/0x14b0
[  260.452598][T12645]        ocfs2_setattr+0x1641/0x1d10
[  260.454726][T12645]        notify_change+0xbba/0xea0
[  260.456896][T12645]        do_truncate+0x1c2/0x250
[  260.458893][T12645]        path_openat+0x15b5/0x1d60
[  260.460830][T12645]        do_file_open+0x23e/0x4a0
[  260.463773][T12645]        do_sys_openat2+0x115/0x200
[  260.465787][T12645]        __x64_sys_openat+0x138/0x170
[  260.468060][T12645]        do_syscall_64+0x166/0x520
[  260.470210][T12645]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.472855][T12645] 
[  260.472855][T12645] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  260.476069][T12645]        __lock_acquire+0x1520/0x2cf0
[  260.478338][T12645]        lock_acquire+0x106/0x350
[  260.480460][T12645]        down_read+0x4a/0x330
[  260.482435][T12645]        ocfs2_init_acl+0x2fd/0x7e0
[  260.484557][T12645]        ocfs2_mknod+0x166a/0x2240
[  260.486616][T12645]        ocfs2_mkdir+0x180/0x430
[  260.488568][T12645]        vfs_mkdir+0x40c/0x620
[  260.490539][T12645]        filename_mkdirat+0x285/0x510
[  260.492758][T12645]        __se_sys_mkdirat+0x35/0x150
[  260.494853][T12645]        do_syscall_64+0x166/0x520
[  260.496937][T12645]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.499512][T12645] 
[  260.499512][T12645] other info that might help us debug this:
[  260.499512][T12645] 
[  260.503505][T12645] Chain exists of:
[  260.503505][T12645]   &oi->ip_xattr_sem --> sb_internal#4 --> &journal->j_trans_barrier
[  260.503505][T12645] 
[  260.508972][T12645]  Possible unsafe locking scenario:
[  260.508972][T12645] 
[  260.511970][T12645]        CPU0                    CPU1
[  260.514094][T12645]        ----                    ----
[  260.516060][T12645]   rlock(&journal->j_trans_barrier);
[  260.518107][T12645]                                lock(sb_internal#4);
[  260.520755][T12645]                                lock(&journal->j_trans_barrier);
[  260.523797][T12645]   rlock(&oi->ip_xattr_sem);
[  260.525657][T12645] 
[  260.525657][T12645]  *** DEADLOCK ***
[  260.525657][T12645] 
[  260.528781][T12645] locks held by syz.8.2626/12645: 8, last CPU#0:
[  260.531235][T12645]  #0: ffff888113cb6460 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  260.534804][T12645]  #1: ffff88811b9797a0 (&type->i_mutex_dir_key#18/1){+.+.}-{4:4}, at: filename_create+0x200/0x370
[  260.538881][T12645]  #2: ffff88811b9e97a0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x170/0x4850
[  260.544157][T12645]  #3: ffff88811b9eb3a0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x170/0x4850
[  260.549422][T12645]  #4: ffff88811b9e79a0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x11f/0x2680
[  260.554828][T12645]  #5: ffff888113cb6650 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_mknod+0x116a/0x2240
[  260.558538][T12645]  #6: ffff88810d663ce0 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ae/0x700
[  260.562731][T12645]  #7: ffff888115da0938 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1fc3/0x2210
[  260.565937][T12645] 
[  260.565937][T12645] stack backtrace:
[  260.568115][T12645] CPU: 0 UID: 0 PID: 12645 Comm: syz.8.2626 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  260.568134][T12645] Tainted: [L]=SOFTLOCKUP
[  260.568138][T12645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  260.568147][T12645] Call Trace:
[  260.568154][T12645]  <TASK>
[  260.568162][T12645]  dump_stack_lvl+0xe8/0x150
[  260.568182][T12645]  print_circular_bug+0x2e1/0x300
[  260.568196][T12645]  check_noncircular+0x12e/0x150
[  260.568221][T12645]  __lock_acquire+0x1520/0x2cf0
[  260.568239][T12645]  ? rcu_is_watching+0x16/0xb0
[  260.568254][T12645]  ? ocfs2_init_acl+0x2fd/0x7e0
[  260.568270][T12645]  lock_acquire+0x106/0x350
[  260.568287][T12645]  ? ocfs2_init_acl+0x2fd/0x7e0
[  260.568305][T12645]  down_read+0x4a/0x330
[  260.568321][T12645]  ? ocfs2_init_acl+0x2fd/0x7e0
[  260.568336][T12645]  ? jbd2_journal_dirty_metadata+0x4d8/0xea0
[  260.568350][T12645]  ocfs2_init_acl+0x2fd/0x7e0
[  260.568366][T12645]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  260.568381][T12645]  ? dquot_alloc_inode+0x216/0xa50
[  260.568395][T12645]  ? __pfx_ocfs2_journal_dirty+0x10/0x10
[  260.568413][T12645]  ? ocfs2_block_signals+0x9a/0xe0
[  260.568425][T12645]  ? __pfx_ocfs2_block_signals+0x10/0x10
[  260.568439][T12645]  ? ocfs2_metadata_cache_get_super+0x43/0x80
[  260.568452][T12645]  ? ocfs2_inode_cache_get_super+0xd/0x40
[  260.568466][T12645]  ocfs2_mknod+0x166a/0x2240
[  260.568482][T12645]  ? __pfx_ocfs2_mknod+0x10/0x10
[  260.568495][T12645]  ? _raw_spin_unlock+0x28/0x50
[  260.568506][T12645]  ? ocfs2_inode_lock_full_nested+0xaad/0x1b30
[  260.568522][T12645]  ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10
[  260.568538][T12645]  ? __lock_acquire+0x683/0x2cf0
[  260.568554][T12645]  ? do_raw_spin_lock+0x12b/0x2f0
[  260.568570][T12645]  ? do_raw_spin_unlock+0x4d/0x200
[  260.568583][T12645]  ? do_raw_spin_lock+0x12b/0x2f0
[  260.568597][T12645]  ? do_raw_spin_unlock+0x4d/0x200
[  260.568610][T12645]  ? put_pid+0xef/0x130
[  260.568625][T12645]  ? ocfs2_permission+0x116/0x1e0
[  260.568639][T12645]  ? __pfx_ocfs2_permission+0x10/0x10
[  260.568650][T12645]  ? _raw_spin_unlock+0x28/0x50
[  260.568663][T12645]  ocfs2_mkdir+0x180/0x430
[  260.568675][T12645]  ? __pfx_ocfs2_mkdir+0x10/0x10
[  260.568684][T12645]  ? bpf_lsm_inode_mkdir+0x9/0x20
[  260.568692][T12645]  vfs_mkdir+0x40c/0x620
[  260.568704][T12645]  filename_mkdirat+0x285/0x510
[  260.568714][T12645]  ? __pfx_filename_mkdirat+0x10/0x10
[  260.568723][T12645]  ? do_getname+0x151/0x250
[  260.568733][T12645]  __se_sys_mkdirat+0x35/0x150
[  260.568742][T12645]  do_syscall_64+0x166/0x520
[  260.568752][T12645]  ? trace_irq_disable+0x3b/0x140
[  260.568761][T12645]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.568769][T12645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.568777][T12645] RIP: 0033:0x7f610fd9cfc7
[  260.568787][T12645] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  260.568793][T12645] RSP: 002b:00007f6110b97e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  260.568802][T12645] RAX: ffffffffffffffda RBX: 00007f6110b97ee0 RCX: 00007f610fd9cfc7
[  260.568808][T12645] RDX: 00000000000001ff RSI: 0000200000021300 RDI: 00000000ffffff9c
[  260.568813][T12645] RBP: 0000200000000b00 R08: 0000200000000140 R09: 0000000000000000
[  260.568817][T12645] R10: 0000200000000b00 R11: 0000000000000246 R12: 0000200000021300
[  260.568825][T12645] R13: 00007f6110b97ea0 R14: 0000000000000000 R15: 0000000000000000
[  260.568837][T12645]  </TASK>
[  260.739585][ T5818] usb 8-1: USB disconnect, device number 20
[  260.793256][ T9531] ocfs2: Unmounting device (7,8) on (node local)
