last executing test programs:

10m27.933971395s ago: executing program 2 (id=334):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x4c008)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050)

10m26.633314061s ago: executing program 2 (id=335):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x4004000)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r2, r0, &(0x7f00000000c0)=0x58, 0x5)

10m26.043802323s ago: executing program 2 (id=336):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000440)={[{@fat=@check_normal}, {@rodir}, {@uni_xlate}, {@utf8}, {@numtail}, {@utf8}, {@utf8}, {@fat=@discard}, {@uni_xlate}, {@shortname_winnt}, {@fat=@nfs}, {@shortname_winnt}, {@fat=@uid={'uid', 0x3d, 0xee01}}]}, 0x0, 0x2be, &(0x7f0000002880)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

10m25.914416177s ago: executing program 2 (id=337):
unshare(0x20000400)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, 0x0, 0x0)

10m25.58260192s ago: executing program 2 (id=338):
r0 = syz_open_dev$vbi(&(0x7f0000001e00), 0x0, 0x2)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000001f40)={0x5, @pix_mp={0x5, 0xfffffffb, 0x32314d54, 0x0, 0x3, [{0x0, 0x4}, {0x2, 0x1}, {0xb, 0x4}, {0x80000001, 0x57e}, {0x5, 0x733}, {0x3, 0x3ff}, {0x1000, 0x5}, {0x2}], 0xc0, 0x4, 0x6, 0x0, 0x1}})

10m25.388597905s ago: executing program 32 (id=338):
r0 = syz_open_dev$vbi(&(0x7f0000001e00), 0x0, 0x2)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000001f40)={0x5, @pix_mp={0x5, 0xfffffffb, 0x32314d54, 0x0, 0x3, [{0x0, 0x4}, {0x2, 0x1}, {0xb, 0x4}, {0x80000001, 0x57e}, {0x5, 0x733}, {0x3, 0x3ff}, {0x1000, 0x5}, {0x2}], 0xc0, 0x4, 0x6, 0x0, 0x1}})

10m18.152745532s ago: executing program 0 (id=397):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)

10m18.030610681s ago: executing program 0 (id=399):
mount$fuse(0x0, 0x0, 0x0, 0x263008, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESDEC, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189882, 0x61)
write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='c *:'], 0x11)

10m17.883109474s ago: executing program 0 (id=401):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x200}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast2, 0xb}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="18"], 0x18}, 0x240040d0)

10m17.761530596s ago: executing program 0 (id=403):
read$FUSE(0xffffffffffffffff, &(0x7f0000005700)={0x2020}, 0x2020)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@allocspi={0xf8, 0x16, 0x1, 0x3, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0xfffffffe, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x4}}}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff010000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001160000003200000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000ff0000000000000000000000000000000a"], 0xf8}}, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000fc0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESOCT], 0x1, 0x1e9, &(0x7f0000000980)="$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")
setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3)
shmctl$SHM_LOCK(0x0, 0xb)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x3)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='pstore\x00', 0x800000, 0x0)
mount$bpf(0x0, &(0x7f00000003c0)='./bus\x00', 0x0, 0x822021, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r2, &(0x7f0000000040)="e2", 0x918)

10m17.299899522s ago: executing program 0 (id=406):
mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000abaff9), 0x10)

10m16.909201442s ago: executing program 0 (id=409):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x2100, 0x0, 0xc, 0xfffffffd}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28}, 0x28)

10m16.806785216s ago: executing program 33 (id=409):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x2100, 0x0, 0xc, 0xfffffffd}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28}, 0x28)

10m1.950293407s ago: executing program 3 (id=495):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0)
readv(r0, &(0x7f0000001e40)=[{&(0x7f0000001cc0)=""/205, 0xcd}], 0x1)

10m1.915444202s ago: executing program 3 (id=497):
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
capset(0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000400)={[{@utf8}, {@utf8}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x2}}, {@utf8}, {@namecase}, {@errors_remount}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x7}}]}, 0x1, 0x1533, &(0x7f0000006800)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v5/N+Zj2z3mftZ88z73733vPyTZehNRrVrNqAiOAPwYtfEgAgFgAGAsA1ABAAQNm4snEZ89klJvyxjbA/10PJV7oCdiVx/7M27n/Wxv3P2rj/WRv3P2vj/mdt3P+sjfvPWFa2eXr+a/mRdR98/z8r4/f//yLpJcd+sbbk9V0BYv7VFO7////wD+Ry//9rBf/Kk7j/WRv3P6uKvdIFsP8F+PWfFWT7hzPc/6yN+89YVvbLe8GxcOXvR//VD4j8J/8G4ntd/Clf+f38h/vPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Bc74yxQAZI6vdF2MMcYYY4wxxhj78/hsV7oCxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyZy/FuLgOsgN10MeyAv5ID/EQwEoCBoMWCAIoRAUhijcAEXgRigKxaA4lAAHJaEU3ASl4WYoA7dAWbgVysFtUB4qQEWoBLdDZbgDqsCdUBXugmpQHWpATbgbasE9UBvuhTpwH9SF+6EePAD14UFoAA9BQ3gYGsEj0BgehSbQFJpBc2jxP8p/AXrAi9ATekEC9IY+8BL0hX7QHwbAQHgZBsErMBhehUQYAkPhNRgGr8NweANGwEgYBW/CaHgLxsBYGAfjIQkmwER4GybBOzAZpsBUmAbJMB1mwLswE2bBbHgP5sD7MBfmwXxYACnwASyERZAKH8Ji+AjSYAkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+Bh2wSewG/bAXvgU9sFn/2b+6b/L74qAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/GMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgXfj3dgba2NtrIN1sC7Wzbw9hQ2wATbEhtgIG2FjbIxNsAk2w2bYAltgS2yJrbAVtsE22BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbtht/QXsgG+iC9iL6wmemMf7IN9MTFbfxyAA/BlHISv4Cv4KibiEByKr+Fr+DoOx1M44sJIHIWjsLJ4C8fgWCQxHpMwCSfiRJyEk3AyTsEpOA2TcTrOwBk4E2fhLHwP5+D7+D7Ow3m4AFMwBRfiIkzFVFyMpzENl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7Aj1EB4Ce4B/dgIu7Dfbgf9+MBPIAH8SCmYzoewkN4GA/jETyCR/EoHsPjeAKP40k8iafwNJ7BM3gOz+F5fC7+q4YfF1uTCCKDEkrEiBgRK2JFDpFD5BQ5RS6RS0RERMSJOJFb5BZ5RB6RT+QT8SJeFBQFhRFGkAgzjhQiKqKiiCgiioqiorgoLpxwopQoJUqL0qKMKCPKiltFOXGbKC8qiNaukqgkKos2roq4U1QVVUU1UV3UEDVFTVFL1BK1RW1RR9QRdUVdUU88IOqL3tgfHxIZnWkkhmBjMRSbiKZCXjpCtRTDsZVoLdqIJ8RIHIHtREvXXjwtOogx2FH8TYzFZ0VnMR67iOdFV9FNdBcviB6ilespeonJ2Fv0EdOwr+gn+osBYiZWF+/hnOw1xKsiUQwRQ8VrYgG+LoaLN8QIMVKMEm+K0eItMUaMFePEeJEkJoiJ4m0xSbwjJospYqqYJpLFdDFDvCtmillitnhPzBHvi7linpgvFogU8YFYKBaJVPGhWCw+EmliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Ck+FrvEJ2K32CP2ik/FPvGZ2C8+FwfEF+Kg+FKki6/EIfG1OCy+EUfEt+Ko+E4cE8fFCfG9OCl+EKfEaXFGnBXnxI/ivPhJXBBegEQppJRKBjJGZpOxMrvMIa+SOWWQefyXcfI6mVteL/PIvDKfzC/jZQFZUGpppJUkQ1lIFpZReYMsIm+URWUxWVyWkE6WlKXkTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiF7dRTVaXNWRNebdMgHtkbXmvrCPvk3Xl/bKefEDWlw/KBvIh2VA+LBvJR2Rj+ahsIpvKZrK5bCEfky3l47KVbC3byCdkW/mkbCefku3l07KD9Jd+RZ6VneVzsot8XnaV3WR3+ZO8IL3sKXtJ6A2yj3xJ9pX9ZH85QA6UL8tB8hU5WL4qE+UQOVS+JofJ1+Vw+YYcIUfKUfJNOVq+JcfIsXKcHC+T5AQ5Ub4tJ8l35GQ5RU6V02SynC77X1pptpT/NP/t38kf/PPWN8nNcovcKrfJ7XKH3Ck/lrvkLrlb7pZ75V65T+6T++V+eUAekAflQZku0+UheUgeloflEXlEHpVH5TF5XJ6V38uT8gd5Sp6Wp+VZeU6ek+cv/QxAoRJKKqUCFaOyqViVXeVQV6mc6mqVS12jIupaFaeuU7nV9SqPyqvyqfwqXhVQBZVWRllFKlSFVGEVVTfgpV8YVVyVUE6VVKXUTf9OviqiblRFVbFf5WfWl/AP6muhWqiWqqVqpVqpNqqNaqvaqnaqnWqv2qsOqoPqqDqqTqqT6qw6qy6qi+qquqruqrvqoXqonqqnSlAJqo96SfVV/VR/NUANVC+LjH0YrAarRJWohqqhapgapoar4WqEGqFGqVFqtBqtxqgxapwap5JUkpqoJqpJapKarCarqWqqSlbJaoaaoWaqmWq2mq3mqDlqrpqr5qv5KkWlqIVqoUpVqWqxWqzS1BK1RC1Ty9QKtUKtUqvUGrVGrVPr1Aa1QaWpzWqz2qq2qu1qu9qpdqpdapfarXarvWqv2qf2qf1qvzqgDqiD6qBKV+nqkDqkDqvD6og6oo6qo+qYOqZOqBPqpDqpTqlT6ow6o86pc+q8Oq8uqAsZp32BCESgAhXEBDFBbBAb5AhyBDmDnEGuIFcQCSJBXBAX5A6uD/IEeYN8Qf4gPigQFAx0YAIbiEtNjwY3BEWCG4OiQbGgeFAicEHJoFRwU1A6uDkoE9wSlA1uDcoFtwXlgwpBxaBScHtQObgjqBLcGVQN7gqqBdWDGkHN4O6gVnBPUDu4N6gT3BfUDe4P6gUPBPWDB4MGwUNBw+DhoFHwSNA4eDRoEjQNmgXNgxZ/6vren8r7uOupe+kE3Vv30S/pvrqf7q8H6IH6ZT1Iv6IH61d1oh6ih+rX9DD9uh6u39Aj9Eg9Sr+pR+u39Bg9Vo/T43WSnqAn6rf1JP2Onqyn6Kl6mk7W0/UM/a6eqWfp2fo9PUe/r+fqeXq+XqBT9Ad6oV6kU/WHerH+SKfpJXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+sdeqf+WO/Sn+jdeo/eqz/V+/Rner/+XB/QX+iD+kudrr/Sh/TX+rD+Rh/R3+qj+jt9TB/XZfT3+qT+QZ/Sp/UZfVaf0z/q8/onfUH7jJP7jLd3o4wyMSbGxJpYk8PkMDlNTpPL5DIREzFxJs7kNrlNHpPH5DP5TLyJNwVNQZOBDJlCppCJmqgpYoqYoqaoKW6KG2ecKWVKmdKmtCljypiypqwpZ8qZ8qa8qWgqmtvN7eYOc4e509xp7jJ3meqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWln2pn2pr3pYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6mgSTYPqYPqav6Wv6m/5moBloBplBZrAZbBJNohlqhpphZpgZboabEWakGZVxomreMmPMWDPOjDdJJslMNBPNJDPJTDaTzVQz1SSbZDPDzDAzzUwz28w2c8wcM9fMNfPNfJNiUsxCs9CkmlSz2Cw2aSbNLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8OmAPmoDlo0k26OWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJu+l90tvYm12m8NeZXPaq20ue439+zifzW/jbQFb0Gqbx+b9VWystUVtMVvclrDOlrSl7E2/icvbCrairWRvt5XtHbbKb+Ja9h5b295r69j7bE1796/iuvZ+W88+YusjAtimtqFtbhvZR2xj+6htYpvaZra5bWuftO3sU7a9fdp2sM/8Jl5oF9nVdo1da9fZ3XaPPWPP2sP2G3vO/mh72l52oH3ZDrKv2MH2VZtoh/wmHmXftKPtW3aMHWvH2fG/iafaaTbZTrcz7Lt2pp31mzjFfmDn2FQ7186z8+2Cn+OMmlLth3ax/cim2QCW2mV2uV1hV9pV/7fWZXaD3Wg32V32E7vVbrPb7Q67M/NE2O6xe+2ndp/9zB6yX9sD9gt70B6x6farn+OM/Ttiv7VH7Xf2mD1uT9jv7Un7g8rMztj37+1P9oL1FggJSJKigGIoG8VSdspBV1FOuppy0TUUoWspjq6j3HQ95aG8lI/yUzwVoIKkyZAlopAKUWGK0g2UWV5xKkGOSlIpuolK081Uhm6hsnQrlaPbqDxVoIpUiW6nynQHVaE7qSrdRdWoOtWgmnQ31aJ7qDbdS3XoPqpL91M9eoDq04PUgB6ihvQwNaJHqDE9Sk2oKTWj5tSCHqOW9Di1otbUhp6gtvQktaOnqD09TR3oGepIf6NO9Cx1pueoCz1PXakbdacXqAe9SD2pFyVQb+pDL1Ff6kf9aQANpJdpEL1Cg+lVSqQhNJReo2H0Og2nN2gEjaRR9CaNprdoDI2lcTSekmgCTaS3aRK9Q5NpCk2laZRM02kGvUszaRbNpvdoDr1Pc2kezacFlEIf0EJaRKn0IS2mjyiNltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kj2kXfUK7aQ/tpU9pH31G++lzOkBf0EH6ktLpKzpEX9Nh+oaO0Le+F31Hx+g4naDv6ST9QKfoNJ2hs3SOfqTz9BNdIE8QYihCGaowCGPCbGFsmD3MEV4V5gyvDnOF14SR8NowLrwuzB1eH+YJ84b5wvxhfFggLBjq0IQ2pDAMC4WFw2h4Q1gkvDEsGhYLi4clQheWDEuFN4Wlw5vDMuEtYdnw1rBceFtYPqwQPnJfpfD2sHJ4R1glvDOsGt4VVgurhzXCmuHdYa3wnrB2eG9YJ7wvLBPeH9YLHwjrhw+GDcKHwobhw2Gj8JGwcfho2CRsGjYLm4ctwsfCluHjYauwddgmvCpsGz4ZtgufCtuHT4cdwmd+nr9/Ueb8E7+ZTwh7h33Cl8KXQu/vlfOjC6Ip0Q+iC6OLoqnRD6OLox9F06JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18wGDp1w0ikXuBiXzcW67C6Hu8rldFe7XO4aF3HXujh3ncvtrnd5XF6Xz+V38a6AK+i0M846cqEr5Aq7qLvBFXE3uqKumCvuSjjnSrpSrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPuw7uGdfR/c11cs+6zu4595x73nV13Vx394Lr4SbkuviaTHB9XB/X1/V1/V1/N9ANdIPcIDfYDXaJLtENdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbkkN9FNdJPcJDfZTXZT3VSX7JLdDDfDzXQzXeVZF7cy18118918l+JS3EKXcc6Y6ha7xS7Npbmlbqlb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+62u51up9vldrnd/pqLi7p9br/b7w64A+6g+9Klu6/cIfe1O+y+cUfct+6o+84dc8fdCfe9O+l+cKfcaXfGnXXn3I/uvPvJXXDeJUUmRCZG3o5MirwTmRyZEpkamRZJjkyPzIi8G5kZmRWZHXkvMifyfmRuZF5kfmRBJCXyQWRhZFEkNfJhZHHko0haZElkaWRZZHlkRcT7AltDX8gX9lF/gy/ib/RFfTFf3Jfwzpf0pfxNvvTFutO8v9WX87f58r6Cr+gf9U18U9/MN/ct/GO+pX/ct/KtfRv/hG/rn/Tt/FO+vX/ad/DP+I7+b76Tf9Z39s/5Lv5539V38939C76Hf9H39L18gu/t+/iXfF/fz/f3A/xA/7If5F/xg/2rPtEP8UP9a36Yf90P92/4EX6kHxXzph+deYkM432Sn+An+rf9JP+On+yn+Kl+mk/20/0M/66f6Wf52f49P8e/7+f6eX6+X+BT/Ad+oV/kU/2HfrH/yKf5JZk3jf1Kv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9zv8Tv+x3+U/8bv9Hr/Xf+r3+c/8fv+5P+C/8Af9lz7df+UP+a/9Yf+NP+K/9Uf9d/6YP+5P+O/9Sf+DP+VP+zP+rD/nf/Tn/U/+Av+bNcYYY4yxf8mEy0Px65mLt/N7/06O+MWT+wDA1dvyp/9yPuOMcn2ei+N+Ij424+vTvbo8lPmoVi0hIeHSc9MkBIXnAWT+JSjDzx89uBQvgTbwJLSH1lD6d+vvJ7qdo3+yfvRWgBy/yMkoKDO+vP7nAJjwO+s/9sSoheXCM3H/j/XnARQtfDknO1yOl0Cbn++vtIYy/6D+vC3/Sf3Zv0gCaPWLnJxwOb5cfyl4HJ6B9r96JmOMMcYYY4wxdlE/UbFT5vVn5ic+f+/6PF5dzskGl+N/dn3OGGOMMcYYY4yxK+/Zbt2feqx9+9ad/v1Blf9R1r88aAz/qZV58LsD7wEyv6MA4A8uCJAxkH/lXmz5S7aVeOml8/dTy8/6AP53tPLPGFzhAxNjjDHGGGPsT3f5pP/X31dXqiDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+iv+O7ErvY+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZ/AgAA//+1tfsI")

9m59.793990591s ago: executing program 3 (id=509):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722", 0x6f}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26", 0x77}, {&(0x7f0000001400)="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", 0x4e2}], 0x3}, 0x0)

9m59.631531135s ago: executing program 3 (id=511):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

9m59.492250313s ago: executing program 3 (id=514):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x4, 0x8, 0x4, 0x0, 0x3, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x5, 0x0, 0x100000000]})

9m59.22271303s ago: executing program 3 (id=520):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRESDEC], 0x3, 0x232, &(0x7f0000000500)="$eJzslb9uE0EQxn97t/HFYKTUVJGwSBqI7UiIMl1egAfAco5g5cwfnyWwZcmGJg00vEQkaioqCiToKRAC0SQFSDRBVEHI6G5nz3dgOzYK3X2SPd/OfjO7e7uzezu8H3rAr+N+gxViKEp8VAoNrCnjOykY+13sSPBFm3ZV/M/FHokNu713Twzt7dWDwG+H3WnEIyZKwVSNJTIs1ta3X6ZEesJgVnlq6rePsx7FRLEDzF7PWRIHZVc67uq4xvV31CDj8eh9GmuKhpjYItMH9WZ/sQvZrv6LOZdTlLR/djljjYOQ1XnOTWalhvwoZT5U8HVilNob/OumLPG/9x1iEm3uzxIztsmQD88mf9WYuBJelPMT7exi81HMJ36a9XQNkctgoa08mniwx4fE4/Q8oa2acPuRraD3x/1GxG4CWzKvHfOTcjKaqPFabrrId1HDEJTLSFmNhq2osQZsdFr3NsJu70qzVd/1d/07tdrmtcqb81KiowE0A7+ylBoiKeohCc6l+iPtZ510pVTEkXZqEqcKmLlpJQKJXb9krGsqHicVm85h8r5KlmcvAJcWN7jMMvBgqFahJtnKRNnccbCL5lYz8Ks6NU84wWE57rjauBvs7KNQoqwcoHFs2CFLSaOGaUTp/c3ryfL3xZbj/+Vk6gdiD8Xat8u+STrO8E1a60Mo8LDe6bTt40W7mvhqBY2wlWRkR0a1r6G9k8se80MtoM2RI0eOHDly5Dhz/A4AAP//Z98fTg==")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

9m58.911971658s ago: executing program 34 (id=520):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRESDEC], 0x3, 0x232, &(0x7f0000000500)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

9m42.846018499s ago: executing program 1 (id=663):
syz_usb_connect$hid(0x1, 0x19, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x461, 0x4e05, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, "", [{{0x9, 0x4, 0x0, 0x3, 0xb, 0x3, 0x0, 0x2, 0x8, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8}}}}}]}}]}}, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff)

9m42.244501514s ago: executing program 1 (id=673):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x5, 0x1, 0x21, @mcast1, @loopback={0x300, 0x460c6}, 0x700, 0x8, 0x25a1, 0x40040}})

9m42.119349142s ago: executing program 1 (id=676):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

9m41.99991342s ago: executing program 1 (id=678):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0xfffffe70)

9m41.893194631s ago: executing program 1 (id=680):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x7, 0x0, 0x2, 0xa}}, 0x20)

9m41.662879155s ago: executing program 1 (id=681):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000020101030000000000000000000000000600124000040000140005800f0001006e657462696f732d6e7300001400198008000100103362ebb95652042700000008000740000000091c0019800800020000000000080001008800000008000180"], 0xa8}}, 0x0)

9m41.399427892s ago: executing program 35 (id=681):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000020101030000000000000000000000000600124000040000140005800f0001006e657462696f732d6e7300001400198008000100103362ebb95652042700000008000740000000091c0019800800020000000000080001008800000008000180"], 0xa8}}, 0x0)

8m43.930059634s ago: executing program 6 (id=1187):
r0 = inotify_init()
r1 = io_uring_setup(0x4dec, &(0x7f0000000000)={0x0, 0x54c4, 0x8, 0x0, 0x2ff})
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

8m43.92963432s ago: executing program 6 (id=1188):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r3=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x21, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2239}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8m43.813291068s ago: executing program 6 (id=1191):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x28, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x5}, [@typed={0x12, 0x15e, 0x0, 0x0, @binary="2e5b00ae219d5c3116dd4226570d"}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c811}, 0x48054)

8m43.719662399s ago: executing program 6 (id=1193):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ptrace(0x10, r1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r1)
ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0))
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x300, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000042000/0x2000)=nil, &(0x7f00001e3000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
umount2(&(0x7f0000000040)='./file0\x00', 0x2)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000200)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f00000003c0)=0x4000000000001000, 0x12)
utime(&(0x7f0000001100)='./file0/file0\x00', 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001240)={'filter\x00', 0x7, 0x4, 0x3f8, 0x220, 0x220, 0x110, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @multicast2, @empty, 0x1}}}, {{@arp={@remote, @broadcast, 0x0, 0xff, 0x3, 0x6, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x8, 0x2, 0x6, 0x9, 0x8, 0x7ff, 'vlan0\x00', 'macvtap0\x00', {}, {0xff}, 0x0, 0x20}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @loopback, @remote, 0x8, 0xffffffff}}}, {{@arp={@local, @private=0xa010101, 0xff000000, 0xff, 0xa, 0x6, {@empty, {[0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x152f, 0x3, 0x7, 0x8000, 0xfffd, 0x9, 'macvlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x108}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6, 0xfffffff7, 0x401}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448)

8m42.726663059s ago: executing program 6 (id=1210):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000380)='./bus\x00', 0x200880, &(0x7f00000001c0)=ANY=[@ANYBLOB="74696d655f6f66667365743d3078303030303030303030303030303030362c616c6c6f775f7574696d653d30303030303030303030303030303030303037373737372c757466382c757466382c6572726f72733d636f6e74696e75652c00b96565c0941c97570bbc7b02c07f780970d7661194c0cf3528e6f7090fdbf3d1ce5c354f013e96c495d8dd8ee8d05f0ed4152a0f085e2263b2a8c3dd78735da134da1353e5b55d8a588c22cc082a840800ae8bc2cf58e90d6995b2dc6cce8a107684bce7c7744ff115c110979f"], 0x3, 0x1509, &(0x7f0000000f80)="$eJzs3AuYTlXbOPD7XmvtMSQ9SQ7DWuvePMlhmSTJIUkOSZIkSU4JoUleSUgMOSUNSUgOQ3IYQnKYmDTO5/MxSZImSXLKKVn/a4rX21v936/v7Xt91zf377r2Zd3P2vfaa8+9H8/am2e+7TK0RqOaVRsQEfxb8Jc/EgEgFgAGAsB1ABAAQNncZXNn9meXmPjvHYT9tR5JudozYFcT1z9r4/pnbVz/rI3rn7Vx/bM2rn/WxvXP2rj+jGVlm6cXuJ63rLvx8/+sjD///w/JKDX2y7Wlbuz6J1K4/lkb1///rOC/shPXP2vj+mdtXP+sjeufFWT7wx6uf9bG9WcsK7vaz595u7rb1b7+GGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlDWf9FQoALrev9rwYY4wxxhhjjDH21/HZrvYMGGOMMcYYY4wx9j8PQYAEBQHEQDaIheyQAwQAXAu54DqIwPWQG26APHAj5IV8kB8KQBwUhEKgwYAFghAKQxGIwk1QFG6GYlAcSkBJcFAK4uEWKA23Qhm4DcrC7VAO7oDyUAEqQiW4EyrDXVAF7oaqcA9Ug+pQA2rCvVAL7oPacD/UgQegLjwI9eAhqA8PQwN4BBrCo9AIHoPG8Dg0gabQDJpDi/9W/ovQA16CntALEqE39IGXoS/0g/4wAAbCKzAIXoXB8BokwRAYCq/DMHgDhsObMAJGwih4C0bD2zAGxsI4GA/JMAEmwjswCd6FyTAFpsI0SIHpMAPeg5kwC2bD+zAHPoC5MA/mwwJIhQ9hISyCNPgIFsPHkA5LYCksg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK2yD7bADdsIu2A2fwB74FPbCZ7APPv+T+Wf+Kb8rAgIKFKhQYQzGYCzGYg7MgTkxJ+bCXLGXL5I8mAfzYl7Mj/kxDuOwEBZCgwYJCQtjYYxiFItiUSyGxbAElkCHDuMxHkvjrVgGy2BZLIvlsByWxwpYASthJayMlbEKVsGqWBWrYTWsgTXwXrwXe2NtrI11sA7WxbqXH09hA2yADbEhNsJG2BgbYxNsgs2wGbbAFtgSW2IrbIVtsA22xbbYHttjAiZgB+yAHbEjdsJO2Bk7Yxfsgl2xG3bDF7MBvoQvYS+sJnpjH+yDfTEpW38cgAPwFRyEr+Kr+Bom4RAciq/j6/gGDsfTOAJH4igchZXF2zgGxyKJ8ZiMyTgRJ+IknISTcQpOwWmYgtNxBs7AmTgLZ+H7OAc/wA9wHs7DBZiKqbgQF2EapuFiPIPpuASX4jJcjitwOa7C1bgK1+I6XIsbcANuwk24BbfgNtyGO3AH7kIFgJ/gp/gpJuE+3If7cT8ewAN4EA9iBmbgITyEh/EwHsEjeBSP4jE8jifwOJ7CU3gaz+BZPIvn8TxewOfjvm64q/iaJBCZlFAiRsSIWBErcogcIqfIKXKJXCIiIiK3yC3yiDwir8gr8ov8Ik7EiUKikDDCCBJhDACIqIiKoqKoKCaKiRKihHDCiXgRL0qL0qKMKCPKittFOXGHKC8qiNaukqgkKos2roq4W1QVVUU1UV3UEDVFTVFL1BK1RW1RR9QRdUVdUU88JOqL3tgfHxGZlWkkhmBjMRSbiKZCXro4W4rh2Eq0Fm3EU2IkjsD2oqVLEM+IDmIMdhR/E2PxOdFZjMcu4gXRVXQT3cWLoodo5XqKXmIy9hZ9xDTsK/qJ/mKAmInVxfs4J3sN8ZpIEkPEUPG6WIBviOHiTTFCjBSjxFtitHhbjBFjxTgxXiSLCWKieEdMEu+KyWKKmCqmiRQxXcwQ74mZYpaYLd4Xc8QHYq6YJ+aLBSJVfCgWikUiTXwkFouPRbpYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdopdYrf4ROwRn4q94jOxT3wu9osvxAHxpTgovhIZ4mtxSHwjDotvxRHxnTgqvhfHxHFxQpwUp8QP4rQ4I86Kc+K8+FFcED+Ji8ILkCiFlFLJQMbIbDJWZpc55DUypwwu/XSvl7nlDTKPvFHmlflkfllAxsmCspDU0kgrSYaysCwio/ImWVTeLIvJ4rKELCmdLCXj5S2ytLxVlpG3ybLydllO3iHLywqyoqwk75SV5V0SIr8co5qsLmvImvJeWUveJ2vL+2Ud+YCsKx+U9eRDsr58WDaQj8iG8lHZSD4mG8vHZRPZVDaTzWUL+YRsKZ+UrWRr2UY+JdvKdrK9fFomyGdkB+kvXSLPyc7yedlFviC7ym6yu/xJXpRe9pS9JEBv2Ue+LPvKfrK/HCAHylfkIPmqHCxfk0lyiBwqX5fD5BtyuHxTjpAj5Sj5lhwt35Zj5Fg5To6XyXKCnCjfkZPku3KynCKnymkyRU6X/S+NNFvKf5n/zu/kD/756JvkZrlFbpXb5Ha5Q+6Uu+RuuVvukXvkXrlX7pP75H65Xx6QB+RBeVBmyAx5SB6Sh+VheUQekUflUXlMHpfn5El5Sv4gT8sz8ow8J8/L8/LCpZ8BKFRCSaVUoGJUNhWrsqsc6hqVU12rcqnrVERdr3KrG1QedaPKq/Kp/KqAilMFVSGllVFWkQpVYVVERdVNeOmCUSVUSeVUKRWvbvkz+aqoulkVU8V/lX95fol/ML8WqoVqqVqqVqqVaqPaqLaqrWqv2qsElaA6qA6qo+qoOqlOqrPqrLqoLqqr6qq6q+6qh+qheqqeKlElqj7qZdVX9VP91QA1UL2iBqlBarAarJJUkhqqhqphapgaroarEWqEGqVGqdFqtBqjxqhxapxKVslqopqoJqlJarKarKaqqSpFpagZaoaaqWaq2Wq2mqPmqLlqrpqv5qtUlaoWqoUqTaWpxWqxSldL1BK1TC1TK9QKtUqtUmvUGrVOrVMb1AaVrjarzWqr2qq2q+1qp9qpdqvdao/ao/aqvWqf2qf2q/3qgDqgDqqDKkNlqEPqkDqsDqsj6og6qo6qY+qYOqFOqFPqlDqtTquz6qw6r86rC+qCuqguZi77AhGIQAUqiAligtggNsgR5AhyBjmDXEGuIBJEgtxB7iBPcGOQN8gX5A8KBHFBwaBQoAMT2EBcKno0uCkoGtwcFAuKByWCkoELSgXxwS1B6eDWoExwW1A2uD0oF9wRlA8qBBWDSsGdQeXgrqBKcHdQNbgnqBZUD2oENYN7g1rBfUHt4P6gTvBAUDd4MKgXPBTUDx4OGgSPBA2DR4NGwWNB4+DxoEnQNGgWNA9a/KXje38635Oup+6lE3Vv3Ue/rPvqfrq/HqAH6lf0IP2qHqxf00l6iB6qX9fD9Bt6uH5Tj9Aj9Sj9lh6t39Zj9Fg9To/XyXqCnqjf0ZP0u3qynqKn6mk6RU/XM/R7eqaepWfr9/Uc/YGeq+fp+XqBTtUf6oV6kU7TH+nF+mOdrpfopXqZXq5X6JV6lV6t1+i1ep1erzfojXqT3qy36K16m96ud+idepferT/Re/Sneq/+TO/Tn+v9+gt9QH+pD+qvdIb+Wh/S3+jD+lt9RH+nj+rv9TF9XJ/QJ/Up/YM+rc/os/qcPq9/1Bf0T/qi9pmL+8yPd6OMMjEmxsSaWJPD5DA5TU6Ty+QyERMxuU3udpfKb/Kb/CbOxJlCppDJRIZMYVPYRE3UFDVFTTFTzJQwJYwzzsSbeFPalDZlTBlT1pQ15Uw5U96UNxVNRXOnudPcZe4yd5u7zT3mHlPdVDc1TU1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDHNTDPTwrQwLU1L08q0Mm1MG9PWtDXtTXuTYBJMB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySaRNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNkksxQM9QMM8PMcDPcjDAjzajMhap524wxY804M94km2Qz0Uw0k8wkM9lMNlPNVJNiUswMM8PMNDPNbDPbzDFzzFwz18w3802qSTULzUKTZtLMYrPYpJt0s9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTAZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm3yXPi+9ibXZbQ57jc1pr7W57HX2n+P8toCNswVtIattXpvvV7Gx1hazxW0JW9I6W8rG21t+E5e3FWxFW8neaSvbu2yV38S17H22tr3f1rEP2Jr23l/Fde2Dtp59zNZHBLBNbUPb3Dayj9nG9nHbxDa1zWxz29a2s+3t0zbBPmM72Gd/Ey+0i+xqu8autevsHvupPWvP2cP2W3ve/mh72l52oH3FDrKv2sH2NZtkh/wmHmXfsqPt23aMHWvH2fG/iafaaTbFTrcz7Ht2pp31mzjVfmjn2DQ7186z8+2Cn+PMOaXZj+xi+7FNt0vsUrvMLrcr7Eq76u9zXWY32I12k91tP7Fb7Ta73e6wO+2un+PM89hrP7P77Of2kP3GHrBf2oP2iM2wX/8cZ57fEfudPWq/t8fscXvCnrSn7A/2tD3z8/lnnvtJ+5O9aL0FQgKSpCigGMpGsZSdctA1lJOupVx0HUXoespNN1AeupHyUj7KTwUojgpSIdJkyBJRSIWpCEXpJrq8Ti9BJclRKYqnW6g03Upl6DYqS7dTObqDylMFqkiV6E6qTHdRFbqbqtI9VI2qUw2qSfdSLbqPatP9VIceoLr0INWjh6g+PUwN6BFqSI9SI3qMGtPj1ISaUjNqTi3oCWpJT1Irak1t6ClqS+2oPT1NCfQMdaBnqSP9jTrRc9SZnqcu9AJ1pW7UnV6kHvQS9aRelEi9qQ+9TH2pH/WnATSQXqFB9CoNptcoiYbQUHqdhtEbNJzepBE0kkbRWzSa3qYxNJbG0XhKpgk0kd6hSfQuTaYpNJWmUQpNpxn0Hs2kWTSb3qc59AHNpXk0nxZQKn1IC2kRpdFHtJg+pnRaQktpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbacdtJN20W76hPbQp7SXPqN99Dntpy/oAH1JB+kryqCv6RB9Q4fpWzpC3/le9D0do+N0gk7SKfqBTtMZOkvn6Dz9SBfoJ7pIniDEUIQyVGEQxoTZwtgwe5gjvCbMGV4b5gqvCyPh9WHu8IYwT3hjmDfMF+YPC4RxYcGwUKhDE9qQwjAsHBYJo+FNYdHw5rBYWDwsEZYMXVgqjA9vCUuHt4ZlwtvCsuHtYbnwjrB8WCF87IFK4Z1h5fCusEp4d1g1vCesFlYPa4Q1w3vDWuF9Ye3w/rBO+EBYJnwwrBc+FNYPHw4bhI+EDcNHw0bhY2Hj8PGwSdg0bBY2D1uET4QtwyfDVmHrsE34VNg2bBe2D58OE8Jnwg7hsz/3P7joj/sTw95hn/Dl8OXQ+/vl/OiCaGr0w+jC6KJoWvSj6OLox9H06JLo0uiy6PLoiujK6Kro6uia6Nrouuj66IboxuimqPc1s4FDJ5x0ygUuxmVzsS67y+GucTndtS6Xu85F3PUut7vB5XE3urwun8vvCrg4V9AVctoZZx250BV2RVzU3eSKuptdMVfclXAlnXOlXLxr7lq4Fq6le9K1cq1dG/eUe8q1c+3c0+5p94zr4J51Hd3fXCf3nOvsnnfPuxdcV9fNdXcvuh5uQq5f3pOJro/r4/q6vq6/6+8GuoFukBvkBrvBLskluaFuqBvmhrnhbrgb4Ua4UW6UG+1GuzFujBvnxrlkl+wmuolukpvkJrvJbqqb6lJcipvhZriZbqarPOuXo8x1c918N9+lulS30GWuGdPcYrfYpbt0t9QtdcvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Xa30+10u91ut8df98ugbp/b7/a7A+6AO+i+chnua3fIfeMOu2/dEfedO+q+d8fccXfCnXSn3A/utDvjzrpz7rz70V1wP7mLzrvkyITIxMg7kUmRdyOTI1MiUyPTIimR6ZEZkfciMyOzIrMj70fmRD6IzI3Mi8yPLIikRj6MLIwsiqRFPoosjnwcSY8siSyNLIssj6yIeF9wa+gL+yI+6m/yRf3Nvpgv7kv4kt75Uj7e3+JL+1t9GX+bL+tv9+X8Hb68r+Ar+sd9E9/UN/PNfQv/hG/pn/StfGvfxj/l2/p2vr1/2if4Z3wH/6zv6P/mO/nnfGf/vO/iX/BdfTff3b/oe/iXfE/fyyf63r6Pf9n39f18fz/AD/Sv+EH+VT/Yv+aT/BA/1L/uh/k3/HD/ph/hR/pRMW/50ZdvkWG8T/YT/ET/jp/k3/WT/RQ/1U/zKX66n+Hf8zP9LD/bv+/n+A/8XD/Pz/cLfKr/0C/0i3ya/8gv9h/7dL/k8kNlv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dr/T7/K7/Sd+j//U7/Wf+X3+c7/ff+EP+C/9Qf+Vz/Bf+0P+G3/Yf+uP+O/8Uf+9P+aP+xP+pD/lf/Cn/Rl/1p/z5/2P/oL/yV/k76wxxhhjjP2XTLjSFL/X3/t3XhP/sHMfALh2W4GMf+zPXFGuz/tLu5+IaxsBgGd6dXnk8latWmJi4qV90yUEReYBXP6XoEwxcCVeAm2gHSRAayj9u/PvJ7qdp38xfvR2gBz/kBMLV+Ir43/xB+M/8dSoheXCs7n/P+PPAyhW5EpOdvh7/PdvV7SGMn8wfr6W/2L+2b9MBmj1Dzk54Up8Zf7x8CQ8Cwm/2pMxxhhjjDHGGPtFP1Gx0+X7z8v/4/P37s/j1JWczJvay/G/uj9njDHGGGOMMcbY1fdct+5PP5GQ0LrTn29U+W9lceN/a8N7gMuvKAD4NwcE+I+fxZb/yLGSLr11/rlr+TkfwP+OUv4Vjav8FxNjjDHGGGPsL3dl0f/r19XVmhBjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZYF/Sd+ndjVPkfGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsavt/AQAA//+neQxq")
rename(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

8m41.5161255s ago: executing program 6 (id=1212):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x58, r3, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @void}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8011}, 0x10)

8m41.382683886s ago: executing program 36 (id=1212):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x58, r3, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @void}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8011}, 0x10)

4m24.29917838s ago: executing program 7 (id=4235):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12"], 0x48)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}}, 0x0)
r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}})

4m24.208665315s ago: executing program 7 (id=4236):
r0 = socket$unix(0x1, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESOCT], 0xfd, 0x2a8, &(0x7f0000000240)="$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")
connect$unix(r0, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(0xffffffffffffffff, 0x0, 0x0)

4m24.100669599s ago: executing program 7 (id=4237):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x403, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x12f20, 0x9000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x4}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2a}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c801}, 0x24008000)

4m23.707223767s ago: executing program 7 (id=4240):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x27}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x931, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)

4m23.436953148s ago: executing program 7 (id=4241):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f0000000240), 0xdf, 0x486, &(0x7f0000000c00)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)

4m23.145300262s ago: executing program 7 (id=4244):
unshare(0x8060400)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0)
r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"})
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
fallocate(r4, 0x71, 0x80000001, 0xcfc9)
prlimit64(r1, 0x8, 0x0, &(0x7f00000000c0))
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'wg2\x00', {0x2, 0x0, @empty}})

4m8.036365173s ago: executing program 37 (id=4244):
unshare(0x8060400)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0)
r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"})
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
fallocate(r4, 0x71, 0x80000001, 0xcfc9)
prlimit64(r1, 0x8, 0x0, &(0x7f00000000c0))
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'wg2\x00', {0x2, 0x0, @empty}})

3m6.798446405s ago: executing program 4 (id=4995):
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
ioprio_set$uid(0x3, 0x0, 0x0)

3m5.817508019s ago: executing program 4 (id=5003):
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
r1 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8)

3m4.814153429s ago: executing program 4 (id=5008):
r0 = io_uring_setup(0x47bb, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x40000000})
io_uring_enter(r0, 0x4, 0xcbffffff, 0x7, &(0x7f0000000180), 0x8)

3m4.727684534s ago: executing program 4 (id=5010):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0\x00')

3m4.556237584s ago: executing program 4 (id=5013):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@check_relaxed}, {@dmode}, {@session={'session', 0x3d, 0xd}}, {@cruft}, {@map_acorn}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@showassoc}, {@map_normal}, {@nocompress}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@hide}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}]}, 0x81, 0xa4f, &(0x7f0000001500)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00')
read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d)

3m4.309613599s ago: executing program 4 (id=5015):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="c0000000000000002900000037"], 0xc0}}], 0x1, 0x4041c14)

3m4.092271275s ago: executing program 38 (id=5015):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="c0000000000000002900000037"], 0xc0}}], 0x1, 0x4041c14)

1m29.442499815s ago: executing program 8 (id=5743):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000008000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0)

1m29.347850052s ago: executing program 8 (id=5744):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xe0042, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m29.110405993s ago: executing program 8 (id=5745):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x38}}, 0x4008000)

1m29.006672186s ago: executing program 8 (id=5746):
socket$inet6(0xa, 0x2, 0x0)
timer_create(0x2, 0x0, 0x0)
timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@jqfmt_vfsv0}, {@nouid32}, {@noblock_validity}, {@nodelalloc}, {@inlinecrypt}, {@nouid32}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@data_err_ignore}, {@sysvgroups}, {@init_itable_val={'init_itable', 0x3d, 0x3ff}}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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")
getdents64(0xffffffffffffffff, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000044)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x109053, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x85b400, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020)

1m28.88009055s ago: executing program 8 (id=5747):
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100))

1m28.381190271s ago: executing program 8 (id=5752):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodiscard}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa5e438, &(0x7f0000019580)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRES64=0x0, @ANYBLOB="6b6cd97866347c647ed3bb74b654e363b101510c281b2c6b4b597975004fea63b116ff84", @ANYRES64, @ANYBLOB="535a0bc61a716766f0e9c097b79207b93d2fcce95e71e51025ecbf82527575d8d9da7e555cfbf9f5e23017966e810423e31dd366d5b793f06fad7aa243932753c3c37e9eff9aae11c5b936b5b23f5b78e9618378262bab12f9e065f34d365da110bca46bd2308a724f52e2706339d674083ae82e519a0277b2b9bd2254d4edea58fd258acf0c81bc2eb36271d30637ee0824e0576b4e154fcb715ff39a9e1b5ca772465bb3c99d2723e819b3f339c9a74f722b4288b639825b2923ba1124bcd8cea23ce90c517e648b6c78e21480ad3fc6d4d441cb8382f7fc69ae80c194b72ab3ffc0631cee6113b2a725f1f2ea", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYRES16, @ANYRESHEX], 0x0, 0x0, &(0x7f0000000000))
syz_mount_image$exfat(0x0, &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80d808, 0x0, 0x1, 0x0, &(0x7f0000000240))
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
utime(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

1m28.097391488s ago: executing program 39 (id=5752):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodiscard}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa5e438, &(0x7f0000019580)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRES64=0x0, @ANYBLOB="6b6cd97866347c647ed3bb74b654e363b101510c281b2c6b4b597975004fea63b116ff84", @ANYRES64, @ANYBLOB="535a0bc61a716766f0e9c097b79207b93d2fcce95e71e51025ecbf82527575d8d9da7e555cfbf9f5e23017966e810423e31dd366d5b793f06fad7aa243932753c3c37e9eff9aae11c5b936b5b23f5b78e9618378262bab12f9e065f34d365da110bca46bd2308a724f52e2706339d674083ae82e519a0277b2b9bd2254d4edea58fd258acf0c81bc2eb36271d30637ee0824e0576b4e154fcb715ff39a9e1b5ca772465bb3c99d2723e819b3f339c9a74f722b4288b639825b2923ba1124bcd8cea23ce90c517e648b6c78e21480ad3fc6d4d441cb8382f7fc69ae80c194b72ab3ffc0631cee6113b2a725f1f2ea", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYRES16, @ANYRESHEX], 0x0, 0x0, &(0x7f0000000000))
syz_mount_image$exfat(0x0, &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80d808, 0x0, 0x1, 0x0, &(0x7f0000000240))
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
utime(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

1m24.585334413s ago: executing program 9 (id=5781):
memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write$P9_RLERRORu(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='G'], 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0)

1m24.358788205s ago: executing program 9 (id=5782):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x400, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

1m23.459663268s ago: executing program 9 (id=5786):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1"], 0x0)

1m23.31728923s ago: executing program 5 (id=5787):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)

1m23.0790364s ago: executing program 5 (id=5788):
r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x50, 0x800)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, 0x0)

1m22.983445078s ago: executing program 5 (id=5789):
r0 = socket$inet(0x2, 0x1, 0x100)
setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4)
listen(r0, 0xfffffffc)

1m22.940263404s ago: executing program 9 (id=5790):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0)

1m22.465209801s ago: executing program 5 (id=5791):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
close(r1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a540500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000028050380180000800c000180060001"], 0x57c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)

1m21.931981527s ago: executing program 9 (id=5792):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f00000000c0)="e02702", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000140000000800200007001e0018000180140002006e657464657673696d3000000000000008001500000000020800130000000200080014"], 0x4c}}, 0x0)

1m16.648551243s ago: executing program 5 (id=5793):
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x37, 0x2d, 0x36, 0xa]}}}}]})

1m15.331131906s ago: executing program 9 (id=5794):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x138, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104}]}}]}, 0x138}}, 0x0)

1m9.586675239s ago: executing program 5 (id=5795):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x400002}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x58}}, 0x1020)

56.760512921s ago: executing program 40 (id=5794):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x138, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104}]}}]}, 0x138}}, 0x0)

52.821488909s ago: executing program 41 (id=5795):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x400002}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x58}}, 0x1020)

0s ago: executing program 2 (id=5754):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000fc050000000006001500010000001800168014000100800000100000030000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0)

kernel console output (not intermixed with test programs):

7] usb 5-1: unable to get BOS descriptor or descriptor too short
[  427.437249][ T5847] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  427.447086][ T5847] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  427.468334][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.486993][ T5847] usb 5-1: Product: syz
[  427.488531][ T5847] usb 5-1: Manufacturer: syz
[  427.507865][ T5847] usb 5-1: SerialNumber: syz
[  427.591614][T15350] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3877'.
[  427.606414][T15350] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3877'.
[  427.736294][ T5847] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  427.931695][ T5847] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  427.940933][ T5847] usb 5-1: found format II with max.bitrate = 4, frame size=7372
[  428.337681][ T5847] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[  428.379701][ T5847] usb 5-1: USB disconnect, device number 40
[  428.412801][T15372] udevd[15372]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  429.352422][ T6578] kernel write not supported for file /1778/clear_refs (pid: 6578 comm: kworker/0:6)
[  429.638620][T15399] loop4: detected capacity change from 0 to 40427
[  429.694209][T15399] F2FS-fs (loop4): build fault injection rate: 174
[  429.703731][T15399] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  429.715218][T15399] F2FS-fs (loop4): invalid crc value
[  429.871633][T15434] netlink: 'syz.5.3915': attribute type 1 has an invalid length.
[  429.887947][T15399] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  429.926243][T15434] 8021q: adding VLAN 0 to HW filter on device bond2
[  429.954288][T15399] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  430.112862][ T6646] syz-executor: attempt to access beyond end of device
[  430.112862][ T6646] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  430.157339][ T6646] CPU: 0 UID: 0 PID: 6646 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  430.157371][ T6646] Tainted: [L]=SOFTLOCKUP
[  430.157375][ T6646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  430.157383][ T6646] Call Trace:
[  430.157389][ T6646]  <TASK>
[  430.157395][ T6646]  dump_stack_lvl+0xe8/0x150
[  430.157415][ T6646]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  430.157435][ T6646]  f2fs_write_end_io+0x124b/0x1710
[  430.157464][ T6646]  __submit_merged_bio+0x258/0x6a0
[  430.157477][ T6646]  ? rcu_is_watching+0x15/0xb0
[  430.157500][ T6646]  __submit_merged_write_cond+0x3c9/0x4e0
[  430.157519][ T6646]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  430.157540][ T6646]  f2fs_write_data_pages+0x2a27/0x36f0
[  430.157555][ T6646]  ? is_bpf_text_address+0x26/0x2b0
[  430.157592][ T6646]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  430.157606][ T6646]  ? is_bpf_text_address+0x26/0x2b0
[  430.157629][ T6646]  ? arch_stack_walk+0xfb/0x150
[  430.157655][ T6646]  ? add_lock_to_list+0xc7/0x100
[  430.157672][ T6646]  ? lockdep_unlock+0x5d/0xd0
[  430.157685][ T6646]  ? __lock_acquire+0x13e8/0x2cf0
[  430.157715][ T6646]  ? do_raw_spin_lock+0x12b/0x2f0
[  430.157735][ T6646]  ? do_raw_spin_unlock+0x4d/0x210
[  430.157748][ T6646]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  430.157763][ T6646]  do_writepages+0x338/0x560
[  430.157781][ T6646]  ? do_raw_spin_unlock+0x4d/0x210
[  430.157824][ T6646]  filemap_fdatawrite+0x1e9/0x2f0
[  430.157844][ T6646]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  430.157884][ T6646]  ? do_raw_spin_unlock+0x4d/0x210
[  430.157900][ T6646]  f2fs_sync_dirty_inodes+0x30e/0x830
[  430.157926][ T6646]  f2fs_write_checkpoint+0xa3d/0x2710
[  430.157941][ T6646]  ? __lock_acquire+0x683/0x2cf0
[  430.157964][ T6646]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  430.157992][ T6646]  kill_f2fs_super+0x2f6/0x700
[  430.158003][ T6646]  ? __pfx_kill_f2fs_super+0x10/0x10
[  430.158017][ T6646]  ? call_rcu+0x64b/0x8b0
[  430.158028][ T6646]  ? lockdep_hardirqs_on+0x7a/0x110
[  430.158044][ T6646]  deactivate_locked_super+0xbc/0x130
[  430.158056][ T6646]  cleanup_mnt+0x3d3/0x460
[  430.158069][ T6646]  task_work_run+0x1d9/0x270
[  430.158083][ T6646]  ? __pfx_task_work_run+0x10/0x10
[  430.158097][ T6646]  exit_to_user_mode_loop+0x1fa/0x750
[  430.158107][ T6646]  ? rcu_is_watching+0x15/0xb0
[  430.158118][ T6646]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.158126][ T6646]  do_syscall_64+0x353/0x580
[  430.158136][ T6646]  ? trace_irq_disable+0x3b/0x140
[  430.158148][ T6646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.158155][ T6646] RIP: 0033:0x7fe93759f317
[  430.158164][ T6646] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  430.158171][ T6646] RSP: 002b:00007ffd6c8046c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  430.158181][ T6646] RAX: 0000000000000000 RBX: 00007fe937634474 RCX: 00007fe93759f317
[  430.158186][ T6646] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6c804780
[  430.158191][ T6646] RBP: 00007ffd6c804780 R08: 00007ffd6c805780 R09: 00000000ffffffff
[  430.158195][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6c805810
[  430.158200][ T6646] R13: 00007fe937634474 R14: 0000000000068f85 R15: 00007ffd6c805850
[  430.158211][ T6646]  </TASK>
[  430.158215][ T6646] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  430.497928][T15462] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  430.497928][T15462] The task syz.5.3926 (15462) triggered the difference, watch for misbehavior.
[  430.698012][T15466] loop4: detected capacity change from 0 to 32768
[  430.703810][T15466] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3920 (15466)
[  430.710227][T15466] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  430.713572][T15466] BTRFS info (device loop4): using sha256 checksum algorithm
[  430.879515][T15466] BTRFS info (device loop4): enabling ssd optimizations
[  430.881727][T15466] BTRFS info (device loop4): turning on sync discard
[  430.884138][T15466] BTRFS info (device loop4): enabling free space tree
[  430.886955][T15466] BTRFS info (device loop4): use zlib compression, level 3
[  431.047134][ T6646] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  431.300660][T15486] fuse: fd is not a fuse device
[  431.379822][T15488] loop4: detected capacity change from 0 to 256
[  431.825050][T15504] netlink: 'syz.4.3937': attribute type 2 has an invalid length.
[  432.550166][T15543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3951'.
[  432.830577][T15555] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3956'.
[  433.332046][T15582] tipc: Can't bind to reserved service type 0
[  433.371411][T15584] loop4: detected capacity change from 0 to 512
[  433.390108][T15584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  433.412817][T15584] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.3970: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  433.429844][T15584] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 12: comm syz.4.3970: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0
[  433.445919][T15584] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 13: comm syz.4.3970: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0
[  433.484067][T15588] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 18: comm syz.4.3970: lblock 23 mapped to illegal pblock 18 (length 1)
[  433.540936][ T6646] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.873941][T15605] netlink: 'syz.5.3976': attribute type 10 has an invalid length.
[  433.881037][T15605] 8021q: adding VLAN 0 to HW filter on device batadv0
[  433.884427][T15605] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  434.588320][T15639] loop4: detected capacity change from 0 to 764
[  434.611416][T15639] Symlink component flag not implemented
[  434.628084][T15639] Symlink component flag not implemented (128)
[  434.819051][T15652] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  434.857979][T15652] batman_adv: batadv0: Removing interface: batadv_slave_1
[  435.225334][   T33] kauditd_printk_skb: 29 callbacks suppressed
[  435.225345][   T33] audit: type=1326 audit(436.097:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.4.4002" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe93759e0d9 code=0x0
[  435.697631][T15675] netlink: zone id is out of range
[  435.699406][T15675] netlink: zone id is out of range
[  435.701229][T15675] netlink: zone id is out of range
[  435.703013][T15675] netlink: zone id is out of range
[  435.704904][T15675] netlink: zone id is out of range
[  435.708210][T15675] netlink: zone id is out of range
[  435.710369][T15675] netlink: zone id is out of range
[  435.712107][T15675] netlink: zone id is out of range
[  435.713823][T15675] netlink: zone id is out of range
[  435.716246][T15675] netlink: zone id is out of range
[  436.253297][   T33] audit: type=1804 audit(437.127:1636): pid=15695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4017" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=42729 res=1 errno=0
[  436.400164][T15705] netlink: 'syz.7.4022': attribute type 15 has an invalid length.
[  437.124319][T15747] loop4: detected capacity change from 0 to 1024
[  437.458886][T15760] tmpfs: Bad value for 'nr_blocks'
[  437.660168][   T33] audit: type=1326 audit(438.537:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.5.4051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  437.699781][   T33] audit: type=1326 audit(438.547:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.5.4051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  437.751063][   T33] audit: type=1326 audit(438.547:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.5.4051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  437.799519][   T33] audit: type=1326 audit(438.547:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.5.4051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  437.842029][   T33] audit: type=1326 audit(438.547:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.5.4051" exe="/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  437.875065][   T33] audit: type=1326 audit(438.547:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.5.4051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  437.908565][   T33] audit: type=1326 audit(438.547:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.5.4051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  437.941165][   T33] audit: type=1326 audit(438.557:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.5.4051" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  438.334529][T15804] netlink: 'syz.5.4067': attribute type 1 has an invalid length.
[  438.342150][T15805] xt_SECMARK: invalid mode: 2
[  438.934951][T15833] bond0: (slave batadv0): Releasing backup interface
[  438.942348][T15833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.951248][T15833] team0: Port device batadv0 added
[  438.962498][T15833] bridge0: port 3(team0) entered blocking state
[  438.969106][T15833] bridge0: port 3(team0) entered disabled state
[  438.973508][T15833] team0: entered allmulticast mode
[  438.981644][T15823] loop4: detected capacity change from 0 to 32768
[  438.983969][T15833] team_slave_0: entered allmulticast mode
[  438.986817][T15833] team_slave_1: entered allmulticast mode
[  438.988666][T15833] batadv0: entered allmulticast mode
[  439.018925][T15833] team0: entered promiscuous mode
[  439.027852][T15833] team_slave_0: entered promiscuous mode
[  439.031997][T15833] team_slave_1: entered promiscuous mode
[  439.037085][T15823] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  439.041193][T15833] batadv0: entered promiscuous mode
[  439.063377][T15823] XFS (loop4): Ending clean mount
[  439.091542][T15823] XFS (loop4): syz.4.4076 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[  439.148533][ T6646] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  439.478283][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  439.484456][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  439.678732][T15859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4090'.
[  439.903229][T15869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4094'.
[  439.921774][T15866] bond4: entered allmulticast mode
[  439.935979][T15866] 8021q: adding VLAN 0 to HW filter on device bond4
[  440.300188][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  440.922374][T15906] netlink: 'syz.5.4111': attribute type 5 has an invalid length.
[  440.931576][T15906] netlink: 'syz.5.4111': attribute type 9 has an invalid length.
[  440.942106][T15906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4111'.
[  442.969292][T15975] loop4: detected capacity change from 0 to 16
[  442.980913][T15975] erofs (device loop4): mounted with root inode @ nid 36.
[  444.002091][T16023] net_ratelimit: 496 callbacks suppressed
[  444.002105][T16023] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  444.141118][T16033] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4167'.
[  444.410027][T16043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4174'.
[  444.853547][T16056] loop4: detected capacity change from 0 to 128
[  446.544724][T16087] netlink: 'syz.7.4192': attribute type 1 has an invalid length.
[  447.037650][T16114] loop4: detected capacity change from 0 to 256
[  447.269671][T16122] loop4: detected capacity change from 0 to 8
[  450.243208][T16270] loop4: detected capacity change from 0 to 512
[  450.334661][T16270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.413206][ T6646] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.036941][ T6578] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  451.122146][T16292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4252'.
[  451.188793][ T6578] usb 5-1: Using ep0 maxpacket: 8
[  451.192687][ T6578] usb 5-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40
[  451.202248][ T6578] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.207152][ T6578] usb 5-1: Product: syz
[  451.208466][ T6578] usb 5-1: Manufacturer: syz
[  451.216186][ T6578] usb 5-1: SerialNumber: syz
[  451.403269][T16300] netlink: 'syz.5.4256': attribute type 1 has an invalid length.
[  451.439360][ T6578] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  451.454948][ T6578] usb 5-1: unit 3 not found!
[  451.463698][ T6578] usb 5-1: 6:0: cannot get min/max values for control 2 (id 6)
[  451.538263][ T6578] usb 5-1: USB disconnect, device number 41
[  452.335778][ T6578] usb 5-1: new full-speed USB device number 42 using dummy_hcd
[  452.488745][ T6578] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  452.503272][ T6578] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  452.522000][ T6578] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  452.542597][ T6578] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.548910][ T6578] usb 5-1: Product: syz
[  452.550238][ T6578] usb 5-1: Manufacturer: syz
[  452.558630][ T6578] usb 5-1: SerialNumber: syz
[  452.996676][    C0] usb 5-1: received EP1 urb->status = -2
[  453.003560][ T6578] usb 5-1: unable to init card! (ret=-110)
[  453.007322][ T6578] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -110
[  453.187866][ T6578] usb 5-1: USB disconnect, device number 42
[  455.177076][T16346] AppArmor: change_hat: Invalid input ''
[  455.727700][T16363] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4286'.
[  456.532278][T16389] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4298'.
[  456.541724][T16389] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4298'.
[  456.550882][T16389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4298'.
[  456.916742][ T6578] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  457.047270][T16401] netlink: 'syz.5.4304': attribute type 2 has an invalid length.
[  457.066619][ T6578] usb 5-1: Using ep0 maxpacket: 8
[  457.069541][ T6578] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a
[  457.088335][ T6578] usb 5-1: config 2 has an invalid interface number: 57 but max is 0
[  457.100852][ T6578] usb 5-1: config 2 has no interface number 0
[  457.110032][ T6578] usb 5-1: config 2 interface 57 has no altsetting 0
[  457.120733][ T6578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.168192][T16403] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4305'.
[  457.182896][T16403] ip6gre1: entered promiscuous mode
[  457.188937][T16403] ip6gre1: entered allmulticast mode
[  457.198522][T16403] netlink: 'syz.5.4305': attribute type 6 has an invalid length.
[  457.206185][T16403] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4305'.
[  457.310726][T16407] fuse: fd is not a fuse device
[  457.346266][    T9] usb 5-1: USB disconnect, device number 43
[  457.561830][T16415] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4311'.
[  458.749311][T16447] sctp: [Deprecated]: syz.4.4326 (pid 16447) Use of struct sctp_assoc_value in delayed_ack socket option.
[  458.749311][T16447] Use struct sctp_sack_info instead
[  458.844255][T16450] netlink: 'syz.4.4327': attribute type 12 has an invalid length.
[  459.046048][T16454] program syz.4.4329 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  459.197885][T16460] tc_dump_action: action bad kind
[  459.288055][T16464] fuse: fd is not a fuse device
[  459.460625][T16472] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4338'.
[  459.470628][T16472] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4338'.
[  459.693918][T16480] x_tables: duplicate underflow at hook 2
[  460.058551][T16496] bridge2: the hash_elasticity option has been deprecated and is always 16
[  460.482921][T16494] loop4: detected capacity change from 0 to 32768
[  460.551694][T16506] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  460.573136][T16506] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  460.995042][T16516] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4360'.
[  461.086152][T16522] tmpfs: Bad value for 'nr_inodes'
[  462.048637][T16557] No such timeout policy "s"
[  462.053347][T16557] netlink: Failed to associated timeout policy 's'
[  462.270604][T16566] loop4: detected capacity change from 0 to 512
[  462.339765][T16566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  462.600092][ T6646] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.774691][T16572] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  462.840431][T16575] netlink: 'syz.4.4386': attribute type 2 has an invalid length.
[  463.102232][T16585] fuse: fd is not a fuse device
[  463.936277][T16602] nlmon0: Caught tx_queue_len zero misconfig
[  464.269482][    T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  464.417638][    T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  464.424405][    T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  464.430125][    T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  464.448225][    T9] usb 5-1: config 220 has no interface number 2
[  464.453217][    T9] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  464.471184][    T9] usb 5-1: config 220 interface 0 has no altsetting 0
[  464.482697][    T9] usb 5-1: config 220 interface 76 has no altsetting 0
[  464.495052][    T9] usb 5-1: config 220 interface 1 has no altsetting 0
[  464.508732][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.516969][    T9] usb 5-1: Product: syz
[  464.518289][    T9] usb 5-1: Manufacturer: syz
[  464.528370][    T9] usb 5-1: SerialNumber: syz
[  464.764215][    T9] usb 5-1: selecting invalid altsetting 0
[  464.790288][    T9] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  464.802445][    T9] uvcvideo 5-1:220.0: No valid video chain found.
[  464.825209][    T9] usb 5-1: selecting invalid altsetting 0
[  464.833671][    T9] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  464.867284][    T9] usb 5-1: USB disconnect, device number 44
[  465.044924][T16632] openvswitch: netlink: IPv6 tunnel dst address is zero
[  465.188059][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  465.188068][   T33] audit: type=1326 audit(466.067:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.5.4412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  465.218054][   T33] audit: type=1326 audit(466.067:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.5.4412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  465.244233][   T33] audit: type=1326 audit(466.067:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.5.4412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  465.281860][   T33] audit: type=1326 audit(466.067:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.5.4412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  465.338326][   T33] audit: type=1326 audit(466.067:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.5.4412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  465.373057][   T33] audit: type=1326 audit(466.067:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.5.4412" exe="/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  465.404701][   T33] audit: type=1326 audit(466.067:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.5.4412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  465.455212][   T33] audit: type=1326 audit(466.067:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.5.4412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  465.482357][   T33] audit: type=1326 audit(466.067:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.5.4412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  465.510176][   T33] audit: type=1326 audit(466.067:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.5.4412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  465.590073][ T4990] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  465.601987][ T4990] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  465.605290][ T4990] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  465.608202][ T4990] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  465.615795][ T4990] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  466.231768][T11596] syz_tun (unregistering): left allmulticast mode
[  466.682664][T16684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4428'.
[  466.690319][T16684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4428'.
[  466.694222][T16684] netlink: 'syz.4.4428': attribute type 4 has an invalid length.
[  466.904165][T16640] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.907610][T16640] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.910119][T16640] bridge_slave_0: entered allmulticast mode
[  466.913203][T16640] bridge_slave_0: entered promiscuous mode
[  466.917550][T16640] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.920256][T16640] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.922857][T16640] bridge_slave_1: entered allmulticast mode
[  466.926542][T16640] bridge_slave_1: entered promiscuous mode
[  466.951551][T16640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  466.961290][T16640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  466.981321][T16640] team0: Port device team_slave_0 added
[  466.985052][T16640] team0: Port device team_slave_1 added
[  467.004202][T16640] batman_adv: batadv0: Adding interface: batadv_slave_0
[  467.007118][T16640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  467.015193][T16640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  467.021568][T16640] batman_adv: batadv0: Adding interface: batadv_slave_1
[  467.024444][T16640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  467.033214][T16640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  467.065079][T16640] hsr_slave_0: entered promiscuous mode
[  467.068932][T16640] hsr_slave_1: entered promiscuous mode
[  467.098110][T11872] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  467.246276][T11872] usb 5-1: Using ep0 maxpacket: 32
[  467.253146][T11872] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  467.263449][T11872] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  467.271072][T11872] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  467.281911][T11872] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  467.288778][T11872] usb 5-1: Product: syz
[  467.293824][T11872] usb 5-1: Manufacturer: syz
[  467.306348][T11872] hub 5-1:4.0: USB hub found
[  467.363313][T16640] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  467.369739][T16640] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  467.372905][T16640] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  467.379263][T16640] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  467.383634][T16640] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  467.389123][T16640] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  467.392176][T16640] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  467.401001][T16640] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  467.431230][T16640] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.433598][T16640] bridge0: port 2(bridge_slave_1) entered forwarding state
[  467.436017][T16640] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.438282][T16640] bridge0: port 1(bridge_slave_0) entered forwarding state
[  467.491523][T16640] 8021q: adding VLAN 0 to HW filter on device bond0
[  467.514056][T11872] hub 5-1:4.0: 2 ports detected
[  467.516800][T16235] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.521782][T16235] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.539342][T16640] 8021q: adding VLAN 0 to HW filter on device team0
[  467.548267][T16231] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.550820][T16231] bridge0: port 1(bridge_slave_0) entered forwarding state
[  467.565323][T16231] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.567618][T16231] bridge0: port 2(bridge_slave_1) entered forwarding state
[  467.636213][ T4990] Bluetooth: hci3: command tx timeout
[  467.924830][T11872] hub 5-1:4.0: set hub depth failed
[  467.937738][T11872] usb 5-1: USB disconnect, device number 45
[  468.569861][T16640] 8021q: adding VLAN 0 to HW filter on device batadv0
[  468.853542][T16640] veth0_vlan: entered promiscuous mode
[  468.863990][T16640] veth1_vlan: entered promiscuous mode
[  469.002432][T16640] veth0_macvtap: entered promiscuous mode
[  469.019120][T16640] veth1_macvtap: entered promiscuous mode
[  469.067909][T16640] batman_adv: batadv0: Interface activated: batadv_slave_0
[  469.081164][T16730] PKCS7: Unknown OID: [4] 0.17
[  469.086314][T16640] batman_adv: batadv0: Interface activated: batadv_slave_1
[  469.091208][T16730] PKCS7: Only support pkcs7_signedData type
[  469.206626][T16731] loop4: detected capacity change from 0 to 40427
[  469.224317][T16731] F2FS-fs (loop4): invalid crc value
[  469.254817][T16731] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  469.261988][T16731] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0
[  469.264572][T16731] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  469.268150][T16731] F2FS-fs (loop4): Start checkpoint disabled!
[  469.280122][T16731] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0
[  469.282793][T16731] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  469.445695][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  469.462705][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  469.659793][ T5791] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  469.678121][ T5791] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  469.716517][ T4990] Bluetooth: hci3: command tx timeout
[  469.803499][ T7296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.821785][ T7296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.914933][ T7296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.921390][ T7296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.971357][T16742] netlink: 'syz.5.4439': attribute type 2 has an invalid length.
[  469.977465][T16231] kworker/u9:21: attempt to access beyond end of device
[  469.977465][T16231] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  469.997067][T16231] CPU: 0 UID: 0 PID: 16231 Comm: kworker/u9:21 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  469.997082][T16231] Tainted: [L]=SOFTLOCKUP
[  469.997085][T16231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  469.997090][T16231] Workqueue: writeback wb_workfn (flush-7:4)
[  469.997106][T16231] Call Trace:
[  469.997110][T16231]  <TASK>
[  469.997114][T16231]  dump_stack_lvl+0xe8/0x150
[  469.997127][T16231]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  469.997139][T16231]  f2fs_write_end_io+0x124b/0x1710
[  469.997158][T16231]  __submit_merged_bio+0x258/0x6a0
[  469.997168][T16231]  ? rcu_is_watching+0x15/0xb0
[  469.997182][T16231]  __submit_merged_write_cond+0x3c9/0x4e0
[  469.997194][T16231]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  469.997212][T16231]  f2fs_write_data_pages+0x2a27/0x36f0
[  469.997235][T16231]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  469.997250][T16231]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  469.997274][T16231]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  469.997289][T16231]  ? __lock_acquire+0x683/0x2cf0
[  469.997305][T16231]  ? set_shrinker_bit+0x7c/0x350
[  469.997317][T16231]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  469.997354][T16231]  do_writepages+0x338/0x560
[  469.997368][T16231]  ? reacquire_held_locks+0x104/0x190
[  469.997378][T16231]  ? writeback_sb_inodes+0x450/0x1b00
[  469.997389][T16231]  __writeback_single_inode+0x12e/0xf90
[  469.997402][T16231]  writeback_sb_inodes+0x9de/0x1b00
[  469.997410][T16231]  ? __lock_acquire+0x683/0x2cf0
[  469.997429][T16231]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  469.997454][T16231]  ? rcu_is_watching+0x15/0xb0
[  469.997465][T16231]  ? queue_io+0x2d3/0x470
[  469.997475][T16231]  wb_writeback+0x41c/0xad0
[  469.997485][T16231]  ? queue_io+0x1e1/0x470
[  469.997496][T16231]  ? __pfx_wb_writeback+0x10/0x10
[  469.997504][T16231]  ? do_raw_spin_lock+0x12b/0x2f0
[  469.997518][T16231]  wb_workfn+0x431/0x10f0
[  469.997532][T16231]  ? __pfx_wb_workfn+0x10/0x10
[  469.997539][T16231]  ? rcu_is_watching+0x15/0xb0
[  469.997549][T16231]  ? trace_hrtimer_start+0x82/0x200
[  469.997562][T16231]  ? do_raw_spin_lock+0x12b/0x2f0
[  469.997570][T16231]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  469.997579][T16231]  ? process_scheduled_works+0xa20/0x14e0
[  469.997588][T16231]  ? process_scheduled_works+0xa20/0x14e0
[  469.997598][T16231]  ? rcu_is_watching+0x15/0xb0
[  469.997609][T16231]  ? process_scheduled_works+0xa20/0x14e0
[  469.997617][T16231]  process_scheduled_works+0xa8e/0x14e0
[  469.997636][T16231]  ? __pfx_process_scheduled_works+0x10/0x10
[  469.997646][T16231]  ? assign_work+0x3cf/0x5d0
[  469.997663][T16231]  worker_thread+0xa47/0xfb0
[  469.997683][T16231]  kthread+0x388/0x470
[  469.997692][T16231]  ? __pfx_worker_thread+0x10/0x10
[  469.997700][T16231]  ? __pfx_kthread+0x10/0x10
[  469.997710][T16231]  ret_from_fork+0x514/0xb70
[  469.997721][T16231]  ? __pfx_ret_from_fork+0x10/0x10
[  469.997731][T16231]  ? __switch_to+0xc89/0x1420
[  469.997741][T16231]  ? __pfx_kthread+0x10/0x10
[  469.997751][T16231]  ret_from_fork_asm+0x1a/0x30
[  469.997768][T16231]  </TASK>
[  469.997772][T16231] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  470.139150][T16744] overlayfs: failed to clone upperpath
[  471.607394][T16807] loop4: detected capacity change from 0 to 2048
[  471.634049][T16807] UDF-fs: error (device loop4): udf_read_inode: (ino 1312) failed !bh
[  471.653221][T16807] UDF-fs: Scanning with blocksize 512 failed
[  471.659105][T16810] Cannot find del_set index 0 as target
[  471.681083][T16807] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  471.692651][T16807] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  471.701733][T16807] UDF-fs: Scanning with blocksize 1024 failed
[  471.712945][T16807] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  471.732499][T16807] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  471.742980][T16807] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  471.754358][T16807] UDF-fs: Scanning with blocksize 2048 failed
[  471.764413][T16807] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  471.782207][T16807] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  471.797881][ T4990] Bluetooth: hci3: command tx timeout
[  471.805224][T16807] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  471.821206][T16807] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  471.830509][T16807] UDF-fs: Scanning with blocksize 4096 failed
[  471.836688][T16807] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[  473.414798][T16851] loop4: detected capacity change from 0 to 4096
[  473.450714][T16851] ntfs3(loop4): Failed to load $Extend (-22).
[  473.461746][T16851] ntfs3(loop4): Failed to initialize $Extend.
[  473.496202][T16851] ntfs3(loop4): ino=5, "/" indx_read_ra
[  473.826858][T16866] macvlan1: entered allmulticast mode
[  473.836965][T16866] veth1_vlan: entered allmulticast mode
[  473.841758][T16866] macvlan1: left allmulticast mode
[  473.844325][T16866] veth1_vlan: left allmulticast mode
[  473.876488][ T4990] Bluetooth: hci3: command tx timeout
[  474.004934][T16876] loop8: detected capacity change from 0 to 2048
[  474.043032][T16876] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  474.056353][T16876] syz.8.4483: attempt to access beyond end of device
[  474.056353][T16876] loop8: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[  474.060949][T16879] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  474.087005][T16876] syz.8.4483: attempt to access beyond end of device
[  474.087005][T16876] loop8: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048
[  474.107622][T16876] NILFS (loop8): I/O error reading meta-data file (ino=6, block-offset=3)
[  475.105252][T16925] team0: Port device syz_tun added
[  475.293161][T16931] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.313133][T16931] bond0: entered promiscuous mode
[  475.320039][T16931] bond_slave_1: entered promiscuous mode
[  475.326054][T16931] netdevsim netdevsim5 netdevsim1: entered promiscuous mode
[  475.334323][T16931] gretap0: entered promiscuous mode
[  475.340382][T16931] dummy0: entered promiscuous mode
[  475.356836][T16931] debugfs: 'hsr0' already exists in 'hsr'
[  475.362606][T16931] Cannot create hsr debugfs directory
[  475.365776][ T6578] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  475.370058][T16935] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  475.377772][T16935] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  475.384537][T16935] hsr0: Interlink (dummy0) is not up; please bring it up to get a fully working HSR network
[  475.516280][ T6578] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  475.522039][ T6578] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  475.527035][ T6578] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  475.534038][ T6578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  475.541289][ T6578] usb 5-1: SerialNumber: syz
[  475.801305][ T6578] usb 5-1: 0:2 : does not exist
[  475.850654][ T6578] usb 5-1: USB disconnect, device number 46
[  475.897332][T15372] udevd[15372]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  476.010509][T16941] loop8: detected capacity change from 0 to 40427
[  476.017878][T16944] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4511'.
[  476.030651][T16941] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  476.043378][T16941] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  476.057723][T16941] F2FS-fs (loop8): invalid crc value
[  476.180831][T16941] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  476.222725][T16941] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  476.228456][T16941] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  476.363242][T16961] bond_slave_1: Caught tx_queue_len zero misconfig
[  476.850693][T16965] loop4: detected capacity change from 0 to 32768
[  478.817022][T17010] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4538'.
[  478.973994][T17016] netlink: 'syz.4.4542': attribute type 2 has an invalid length.
[  479.078270][T17016] : entered promiscuous mode
[  480.855310][T17035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4549'.
[  480.858874][T17035] bridge_slave_0: Caught tx_queue_len zero misconfig
[  480.919444][T17038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4550'.
[  481.014342][T17041] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  481.374874][T17050] xt_hashlimit: size too large, truncated to 1048576
[  482.962585][T17061] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4557'.
[  483.474822][T17089] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  483.490293][T17089] netdevsim netdevsim5 netdevsim0: left allmulticast mode
[  483.497358][T17089] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  483.541316][T17092] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  484.281193][T17117] usb usb8: usbfs: process 17117 (syz.4.4584) did not claim interface 0 before use
[  484.402422][T17110] loop8: detected capacity change from 0 to 40427
[  484.412408][T17110] F2FS-fs: heap/no_heap options were deprecated
[  484.471472][T17110] F2FS-fs (loop8): build fault injection rate: 19
[  484.485005][T17110] F2FS-fs (loop8): build fault injection type: 0x3bfe8c
[  484.502779][T17110] F2FS-fs (loop8): invalid crc value
[  484.531779][T17110] F2FS-fs (loop8): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0
[  484.639138][T17110] F2FS-fs (loop8): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  484.646413][T17110] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  484.661498][T17110] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  484.682921][T17110] F2FS-fs (loop8): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[  484.692652][T17110] F2FS-fs (loop8): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0
[  484.722791][T16640] syz-executor: attempt to access beyond end of device
[  484.722791][T16640] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  484.734449][T16640] CPU: 0 UID: 0 PID: 16640 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  484.734465][T16640] Tainted: [L]=SOFTLOCKUP
[  484.734468][T16640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  484.734473][T16640] Call Trace:
[  484.734477][T16640]  <TASK>
[  484.734481][T16640]  dump_stack_lvl+0xe8/0x150
[  484.734498][T16640]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  484.734511][T16640]  f2fs_write_end_io+0x124b/0x1710
[  484.734529][T16640]  __submit_merged_bio+0x258/0x6a0
[  484.734537][T16640]  ? rcu_is_watching+0x15/0xb0
[  484.734552][T16640]  __submit_merged_write_cond+0x3c9/0x4e0
[  484.734563][T16640]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  484.734580][T16640]  f2fs_write_data_pages+0x2a27/0x36f0
[  484.734589][T16640]  ? __lock_acquire+0x683/0x2cf0
[  484.734611][T16640]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  484.734619][T16640]  ? is_bpf_text_address+0x26/0x2b0
[  484.734634][T16640]  ? arch_stack_walk+0xfb/0x150
[  484.734652][T16640]  ? add_lock_to_list+0xc7/0x100
[  484.734663][T16640]  ? lockdep_unlock+0x5d/0xd0
[  484.734671][T16640]  ? __lock_acquire+0x13e8/0x2cf0
[  484.734689][T16640]  ? do_raw_spin_lock+0x12b/0x2f0
[  484.734701][T16640]  ? do_raw_spin_unlock+0x4d/0x210
[  484.734709][T16640]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  484.734719][T16640]  do_writepages+0x338/0x560
[  484.734751][T16640]  ? do_raw_spin_unlock+0x4d/0x210
[  484.734763][T16640]  filemap_fdatawrite+0x1e9/0x2f0
[  484.734776][T16640]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  484.734801][T16640]  ? do_raw_spin_unlock+0x4d/0x210
[  484.734810][T16640]  f2fs_sync_dirty_inodes+0x30e/0x830
[  484.734827][T16640]  f2fs_write_checkpoint+0xa3d/0x2710
[  484.734837][T16640]  ? __lock_acquire+0x683/0x2cf0
[  484.734857][T16640]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  484.734886][T16640]  kill_f2fs_super+0x2f6/0x700
[  484.734898][T16640]  ? __pfx_kill_f2fs_super+0x10/0x10
[  484.734912][T16640]  ? call_rcu+0x64b/0x8b0
[  484.734922][T16640]  ? lockdep_hardirqs_on+0x7a/0x110
[  484.734938][T16640]  deactivate_locked_super+0xbc/0x130
[  484.734950][T16640]  cleanup_mnt+0x3d3/0x460
[  484.734963][T16640]  task_work_run+0x1d9/0x270
[  484.734976][T16640]  ? __pfx_task_work_run+0x10/0x10
[  484.734990][T16640]  exit_to_user_mode_loop+0x1fa/0x750
[  484.735000][T16640]  ? rcu_is_watching+0x15/0xb0
[  484.735011][T16640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.735020][T16640]  do_syscall_64+0x353/0x580
[  484.735030][T16640]  ? trace_irq_disable+0x3b/0x140
[  484.735041][T16640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.735049][T16640] RIP: 0033:0x7fa89639f317
[  484.735058][T16640] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  484.735064][T16640] RSP: 002b:00007ffeb6840928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  484.735075][T16640] RAX: 0000000000000000 RBX: 00007fa896434474 RCX: 00007fa89639f317
[  484.735080][T16640] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb68409e0
[  484.735084][T16640] RBP: 00007ffeb68409e0 R08: 00007ffeb68419e0 R09: 00000000ffffffff
[  484.735089][T16640] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb6841a70
[  484.735094][T16640] R13: 00007fa896434474 R14: 00000000000764e8 R15: 00007ffeb6841ab0
[  484.735106][T16640]  </TASK>
[  484.735176][T16640] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  485.182785][T17142] loop8: detected capacity change from 0 to 32768
[  485.209036][T17142] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  485.684160][T16640] ocfs2: Unmounting device (7,8) on (node local)
[  486.014116][T17175] netlink: 'syz.5.4601': attribute type 6 has an invalid length.
[  486.383713][T17196] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  486.466344][T17200] loop8: detected capacity change from 0 to 8
[  486.509198][T17200] SQUASHFS error: lzo decompression failed, data probably corrupt
[  486.522492][T17200] SQUASHFS error: Failed to read block 0x91: -5
[  486.541865][T17200] SQUASHFS error: Unable to read metadata cache entry [8f]
[  486.558880][T17200] SQUASHFS error: Unable to read inode 0x11f
[  486.777888][T17212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4612'.
[  487.399515][T17238] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.4624'.
[  489.674748][T17272] loop4: detected capacity change from 0 to 4096
[  489.718232][T17276] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  489.929569][T17286] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4645'.
[  489.945292][T17287] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  490.210479][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4648'.
[  490.251247][T17292] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4648'.
[  490.260899][T17292] netlink: 'syz.8.4648': attribute type 18 has an invalid length.
[  490.558486][T17295] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  490.583213][T17294] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  490.603421][T17295] block device autoloading is deprecated and will be removed.
[  490.608416][T17294] block device autoloading is deprecated and will be removed.
[  491.127262][T17303] loop4: detected capacity change from 0 to 32768
[  491.154809][   T33] kauditd_printk_skb: 45 callbacks suppressed
[  491.154820][   T33] audit: type=1800 audit(493.034:1701): pid=17303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4652" name="file1" dev="loop4" ino=4 res=0 errno=0
[  492.107744][   T10] usb 5-1: new full-speed USB device number 47 using dummy_hcd
[  492.295796][   T10] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  492.318285][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64
[  492.341159][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.350525][   T10] usb 5-1: Product: syz
[  492.352125][   T10] usb 5-1: Manufacturer: syz
[  492.362798][   T10] usb 5-1: SerialNumber: syz
[  492.371970][   T10] usb 5-1: config 0 descriptor??
[  492.386940][T17330] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  492.398363][T17330] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  492.437042][    C0] port100 5-1:0.0: NFC: Urb failure (status -71)
[  492.472969][    C0] port100 5-1:0.0: NFC: Urb failure (status -71)
[  492.487401][   T10] port100 5-1:0.0: NFC: Could not get supported command types
[  492.630219][   T10] usb 5-1: USB disconnect, device number 47
[  492.825259][T17364] netlink: 'syz.5.4675': attribute type 61 has an invalid length.
[  493.155922][    T9] usb 9-1: new low-speed USB device number 2 using dummy_hcd
[  493.306781][    T9] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  493.317005][    T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  493.322161][    T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  493.334186][    T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  493.347593][    T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  493.364167][    T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  493.393232][    T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  493.402179][    T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  493.418740][    T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  493.429191][    T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  493.442934][    T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  493.466717][    T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  493.478000][    T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  493.492137][    T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  493.507425][    T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  493.523587][    T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  493.546778][    T9] usb 9-1: string descriptor 0 read error: -22
[  493.549578][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.609840][T17390] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4688'.
[  493.628092][    T9] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  493.822472][    T9] usb 9-1: USB disconnect, device number 2
[  493.983958][T17400] netlink: 'syz.4.4693': attribute type 1 has an invalid length.
[  494.118303][T17400] 8021q: adding VLAN 0 to HW filter on device bond5
[  494.346214][T17400] bond5: (slave geneve3): making interface the new active one
[  494.352927][T17400] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  494.363565][T17400] syz.4.4693 (17400) used greatest stack depth: 18272 bytes left
[  494.614778][T17415] loop4: detected capacity change from 0 to 512
[  494.624239][T17415] EXT4-fs: Invalid want_extra_isize 1969
[  495.020604][T17430] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4703'.
[  495.033194][T17430] tc_dump_action: action bad kind
[  495.190798][T17434] loop4: detected capacity change from 0 to 4096
[  495.255264][T17439] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  495.281359][T17442] netlink: 'syz.5.4711': attribute type 10 has an invalid length.
[  495.411214][T17449] overlayfs: failed to resolve './file2': -2
[  495.617537][T17460] loop4: detected capacity change from 0 to 4096
[  495.650273][T17460] NILFS (loop4): invalid segment: Checksum error in segment payload
[  495.658920][T17460] NILFS (loop4): trying rollback from an earlier position
[  495.681625][T17460] NILFS (loop4): recovery complete
[  495.688384][T17465] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  495.948693][T17478] loop4: detected capacity change from 0 to 128
[  495.988391][T17478] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  496.046420][ T6646] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  496.224864][T17490] loop4: detected capacity change from 0 to 4096
[  496.286506][T17495] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  497.392902][T17520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4747'.
[  497.417278][T17520] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4747'.
[  497.429979][T17520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4747'.
[  497.841355][T17529] xt_hashlimit: size too large, truncated to 1048576
[  499.557554][T17551] loop4: detected capacity change from 0 to 128
[  499.803584][T17559] loop4: detected capacity change from 0 to 4096
[  499.824442][T17559] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  499.871670][T17559] ntfs3(loop4): Inode r=19 is not in use!
[  499.881617][T17559] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  499.910762][T17559] ntfs3(loop4): ino=1b, mi_enum_attr
[  499.919195][T17559] ntfs3(loop4): ino=1b, mi_enum_attr
[  500.329242][T17581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4772'.
[  500.335149][T17569] loop8: detected capacity change from 0 to 32768
[  500.374597][T17569] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4768 (17569)
[  500.539474][T17584] loop4: detected capacity change from 0 to 32768
[  500.571096][T17584] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4773 (17584)
[  500.582392][T17584] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  500.586227][T17584] BTRFS info (device loop4): using sha256 checksum algorithm
[  500.595110][T17569] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  500.608808][T17569] BTRFS info (device loop8): using crc32c checksum algorithm
[  500.799274][T17584] BTRFS info (device loop4): enabling ssd optimizations
[  500.801513][T17584] BTRFS info (device loop4): turning on sync discard
[  500.803631][T17584] BTRFS info (device loop4): enabling free space tree
[  500.832303][   T33] audit: type=1800 audit(502.714:1702): pid=17584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4773" name="file1" dev="loop4" ino=260 res=0 errno=0
[  501.721046][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  502.109998][T17616] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  502.115348][T17569] BTRFS info (device loop8): enabling ssd optimizations
[  502.133882][T17569] BTRFS info (device loop8): turning on flush-on-commit
[  502.148330][T17569] BTRFS info (device loop8): enabling free space tree
[  502.157553][T17569] BTRFS info (device loop8): enabling auto defrag
[  502.178327][T17569] BTRFS info (device loop8): use lzo compression, level 1
[  502.189336][T17569] BTRFS info (device loop8): max_inline set to 4096
[  502.292282][T17621] netlink: 'syz.5.4775': attribute type 4 has an invalid length.
[  502.821132][ T6646] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  503.025319][T16640] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  503.942389][T17665] loop4: detected capacity change from 0 to 1024
[  503.978254][T17665] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  504.018310][T17665] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  504.044298][T17665] JBD2: no valid journal superblock found
[  504.098840][T17665] EXT4-fs (loop4): Could not load journal inode
[  504.363467][T17673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4801'.
[  504.384443][T17654] loop8: detected capacity change from 0 to 32768
[  504.390561][T17673] netlink: 'syz.5.4801': attribute type 5 has an invalid length.
[  504.404964][T17673] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4801'.
[  504.415251][T17654] jfs_mount: Failed to read AGGREGATE_I
[  504.419796][T17654] Mount JFS Failure: -5
[  504.461805][T17673] geneve3: entered promiscuous mode
[  504.471892][T17673] geneve3: entered allmulticast mode
[  504.488253][ T5791] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 60211 - 0
[  504.491229][ T5791] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 60211 - 0
[  504.510653][ T5791] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 60211 - 0
[  504.536067][ T5791] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 60211 - 0
[  504.567487][T17677] ucma_write: process 200 (syz.8.4802) changed security contexts after opening file descriptor, this is not allowed.
[  504.626453][    T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  504.776613][    T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  504.780553][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.795028][    T9] usb 5-1: config 0 descriptor??
[  504.808881][    T9] cp210x 5-1:0.0: cp210x converter detected
[  505.745787][    T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  505.755298][    T9] usb 5-1: cp210x converter now attached to ttyUSB0
[  506.712018][ T5847] usb 5-1: USB disconnect, device number 48
[  506.750767][ T5847] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  506.764764][ T5847] cp210x 5-1:0.0: device disconnected
[  507.450565][T17715] loop4: detected capacity change from 0 to 512
[  507.462323][T17715] EXT4-fs: Ignoring removed i_version option
[  507.483554][T17715] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  507.559165][T17715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  507.752006][ T6646] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  510.106031][ T6578] usb 5-1: new full-speed USB device number 49 using dummy_hcd
[  510.257198][ T6578] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  510.266342][ T6578] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[  510.274076][ T6578] usb 5-1: config 0 has an invalid interface number: 21 but max is 0
[  510.281904][ T6578] usb 5-1: config 0 has no interface number 0
[  510.287931][ T6578] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  510.299450][ T6578] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  510.308085][ T6578] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  510.321613][ T6578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.355064][ T6578] usb 5-1: config 0 descriptor??
[  510.367396][T17778] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  510.593099][T17722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  510.990358][ T6578] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input15
[  511.123072][T17780] loop8: detected capacity change from 0 to 32768
[  511.184711][ T5847] usb 5-1: USB disconnect, device number 49
[  511.186983][    C0] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  511.349555][T17784] kernel read not supported for file /file1 (pid: 17784 comm: syz.8.4847)
[  511.353597][   T33] audit: type=1800 audit(513.234:1703): pid=17784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4847" name="file1" dev="mqueue" ino=48811 res=0 errno=0
[  511.820351][T17805] tipc: Enabling of bearer <Eth:s> rejected, media not registered
[  511.947770][T17807] syz_tun (unregistering): left allmulticast mode
[  512.112646][T17815] syz_tun: entered allmulticast mode
[  512.594970][T17842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4875'.
[  512.599920][T17842] netlink: 'syz.4.4875': attribute type 1 has an invalid length.
[  513.264017][T17870] loop8: detected capacity change from 0 to 512
[  513.294727][T17870] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.4889: iget: bad i_size value: 38620345925642
[  513.307499][   T33] audit: type=1800 audit(515.184:1704): pid=17872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4890" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0
[  513.332864][T17870] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  513.333173][T17870] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.4889: couldn't read orphan inode 15 (err -117)
[  513.335961][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  513.335971][    C0] EXT4-fs (loop8): initial error at time 515: ext4_orphan_get:1399: inode 15
[  513.335984][    C0] EXT4-fs (loop8): last error at time 515: ext4_orphan_get:1399: inode 15
[  513.382569][T17870] loop8: lost filesystem error report for type 5 error -117
[  513.383616][T17870] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  513.579297][T16640] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.077744][T17899] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4901'.
[  514.090340][T17899] openvswitch: netlink: Message has 4 unknown bytes.
[  516.770066][T17940] loop8: detected capacity change from 0 to 2048
[  516.778563][T17940] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  518.317238][T17974] loop8: detected capacity change from 0 to 32768
[  518.406694][T17974] JFS: block map error in dbBackSplit
[  518.452315][T17974] ERROR: (device loop8): dbDiscardAG: -EIO
[  518.452315][T17974] 
[  518.463937][T17974] ERROR: (device loop8): remounting filesystem as read-only
[  518.485250][T17974] syz.8.4932: attempt to access beyond end of device
[  518.485250][T17974] loop8: rw=8390659, sector=2629632, nr_sectors = 8192 limit=32768
[  518.501941][T17974] JFS: sb_issue_discard(ffff888108dca000, 328704, 1024, GFP_NOFS, 0) = -5 => failed!
[  518.517310][T17974] blkno = 50400, nblocks = 400
[  518.528969][T17974] ERROR: (device loop8): dbFree: block to be freed is outside the map
[  518.528969][T17974] 
[  518.638467][T17983] loop4: detected capacity change from 0 to 1024
[  518.650874][T17983] EXT4-fs: Ignoring removed nomblk_io_submit option
[  518.682643][T17983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  520.012409][ T6646] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  520.722642][T17996] loop8: detected capacity change from 0 to 32768
[  520.754887][T17996] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  520.792862][T17996] XFS (loop8): Ending clean mount
[  520.994399][T16640] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  521.249085][T18022] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4949'.
[  521.480816][T18028] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4951'.
[  521.974724][T18038] loop4: detected capacity change from 0 to 512
[  522.005750][ T6578] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  522.011762][T18038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  522.063488][ T6646] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.165954][ T6578] usb 9-1: Using ep0 maxpacket: 32
[  522.169939][ T6578] usb 9-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  522.174389][ T6578] usb 9-1: config 2 has an invalid interface number: 88 but max is 0
[  522.177429][ T6578] usb 9-1: config 2 has no interface number 0
[  522.181531][ T6578] usb 9-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  522.189028][ T6578] usb 9-1: config 2 interface 88 has no altsetting 0
[  522.209862][ T6578] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  522.220191][ T6578] usb 9-1: Product: syz
[  522.221584][ T6578] usb 9-1: Manufacturer: syz
[  522.228248][ T6578] usb 9-1: SerialNumber: syz
[  522.254513][T18033] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  522.366656][T18050] loop4: detected capacity change from 0 to 256
[  522.370362][T18050] exfat: Deprecated parameter 'namecase'
[  522.380287][T18050] exfat: Deprecated parameter 'utf8'
[  522.393692][T18050] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  522.500034][T18033] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  523.071585][T18054] loop4: detected capacity change from 0 to 32768
[  523.108524][   T33] audit: type=1800 audit(524.994:1705): pid=18054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4962" name="file1" dev="loop4" ino=4 res=0 errno=0
[  523.182616][T18054] ERROR: (device loop4): diWrite: ixpxd invalid
[  523.182616][T18054] 
[  523.216612][T18054] ERROR: (device loop4): remounting filesystem as read-only
[  523.225897][T18054] ERROR: (device loop4): txCommit: 
[  523.225897][T18054] 
[  523.533808][ T6578] asix 9-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  523.550737][ T6578] asix 9-1:2.88: probe with driver asix failed with error -71
[  523.569211][ T6578] usb 9-1: USB disconnect, device number 3
[  523.615009][T18076] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  525.127397][T18080] loop4: detected capacity change from 0 to 2048
[  525.143298][T18080] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  525.203904][T18085] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  525.445149][T18097] raw_sendmsg: syz.5.4982 forgot to set AF_INET. Fix it!
[  525.631725][T18105] loop4: detected capacity change from 0 to 1024
[  525.660313][T18105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  525.708592][   T33] audit: type=1800 audit(527.594:1706): pid=18105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4986" name="file1" dev="loop4" ino=15 res=0 errno=0
[  525.717448][T18105] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4986: bg 0: block 112: padding at end of block bitmap is not set
[  525.747407][T18105] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.4986: Freeing blocks not in datazone - block = 0, count = 16
[  525.782905][ T6646] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  525.861004][   T33] audit: type=1326 audit(527.744:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18113 comm="syz.8.4990" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa89639e0d9 code=0x0
[  526.052518][T18120] loop4: detected capacity change from 0 to 4096
[  526.069358][T18120] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  526.103855][T18120] ntfs3(loop4): Failed to load $Extend (-22).
[  526.107269][T18120] ntfs3(loop4): Failed to initialize $Extend.
[  526.261949][T18122] loop4: detected capacity change from 0 to 512
[  526.270292][T18122] EXT4-fs: Ignoring removed nomblk_io_submit option
[  526.290082][T18122] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  526.300513][T18122] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102]
[  526.308049][T18122] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80)
[  526.312636][T18122] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[  526.317460][T18122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  526.323878][T18122] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.4992: dx entry: limit 65535 != root limit 120
[  526.328616][T18122] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4992: Corrupt directory, running e2fsck is recommended
[  526.351697][ T6646] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.808340][T18134] netlink: 666 bytes leftover after parsing attributes in process `syz.8.4997'.
[  526.912004][   T33] audit: type=1326 audit(528.794:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.8.4999" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89639e0d9 code=0x7ffc0000
[  526.946968][T18138] loop8: detected capacity change from 0 to 128
[  526.959074][   T33] audit: type=1326 audit(528.804:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.8.4999" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89639e0d9 code=0x7ffc0000
[  527.283569][   T33] audit: type=1326 audit(528.824:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.8.4999" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89639e0d9 code=0x7ffc0000
[  527.339686][   T33] audit: type=1326 audit(528.824:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.8.4999" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa89639e0d9 code=0x7ffc0000
[  527.382198][   T33] audit: type=1326 audit(528.824:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.8.4999" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa89639de42 code=0x7ffc0000
[  527.411047][   T33] audit: type=1326 audit(528.824:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.8.4999" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa89635e90e code=0x7ffc0000
[  527.457757][   T33] audit: type=1326 audit(528.824:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.8.4999" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa89639df07 code=0x7ffc0000
[  527.542573][T18143] loop8: detected capacity change from 0 to 2048
[  527.547104][T18146] xt_hashlimit: size too large, truncated to 1048576
[  527.579317][T18143] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  527.594150][T18143] EXT4-fs error (device loop8): ext4_ext_precache:631: inode #2: comm syz.8.5001: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  527.605303][T18150] xt_hashlimit: size too large, truncated to 1048576
[  527.650866][T18143] EXT4-fs (loop8): Remounting filesystem read-only
[  527.677331][T16640] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.899893][T18153] loop8: detected capacity change from 0 to 40427
[  527.913469][T18153] F2FS-fs (loop8): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  527.916960][T18153] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  527.921238][T18153] F2FS-fs (loop8): invalid crc value
[  527.962158][T18153] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  527.973818][T18153] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  527.976357][T18153] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  528.331226][T18158] IPv6: NLM_F_CREATE should be specified when creating new route
[  528.703614][T16640] syz-executor: attempt to access beyond end of device
[  528.703614][T16640] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  528.765746][T16640] CPU: 0 UID: 0 PID: 16640 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  528.765762][T16640] Tainted: [L]=SOFTLOCKUP
[  528.765766][T16640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  528.765771][T16640] Call Trace:
[  528.765775][T16640]  <TASK>
[  528.765778][T16640]  dump_stack_lvl+0xe8/0x150
[  528.765796][T16640]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  528.765808][T16640]  f2fs_write_end_io+0x124b/0x1710
[  528.765826][T16640]  __submit_merged_bio+0x258/0x6a0
[  528.765835][T16640]  ? rcu_is_watching+0x15/0xb0
[  528.765849][T16640]  __submit_merged_write_cond+0x3c9/0x4e0
[  528.765861][T16640]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  528.765877][T16640]  f2fs_write_data_pages+0x2a27/0x36f0
[  528.765899][T16640]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  528.765924][T16640]  ? __pfx_hlock_conflict+0x10/0x10
[  528.765935][T16640]  ? __bfs+0x153/0x290
[  528.765944][T16640]  ? __pfx_hlock_conflict+0x10/0x10
[  528.765961][T16640]  ? lockdep_unlock+0x5d/0xd0
[  528.765968][T16640]  ? __lock_acquire+0x13e8/0x2cf0
[  528.765987][T16640]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  528.765997][T16640]  do_writepages+0x338/0x560
[  528.766012][T16640]  ? do_raw_spin_unlock+0x4d/0x210
[  528.766022][T16640]  filemap_fdatawrite+0x1e9/0x2f0
[  528.766034][T16640]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  528.766060][T16640]  ? do_raw_spin_unlock+0x4d/0x210
[  528.766069][T16640]  f2fs_sync_dirty_inodes+0x30e/0x830
[  528.766086][T16640]  f2fs_write_checkpoint+0xa3d/0x2710
[  528.766095][T16640]  ? __lock_acquire+0x683/0x2cf0
[  528.766115][T16640]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  528.766144][T16640]  kill_f2fs_super+0x2f6/0x700
[  528.766155][T16640]  ? __pfx_kill_f2fs_super+0x10/0x10
[  528.766169][T16640]  ? call_rcu+0x64b/0x8b0
[  528.766180][T16640]  ? lockdep_hardirqs_on+0x7a/0x110
[  528.766198][T16640]  deactivate_locked_super+0xbc/0x130
[  528.766211][T16640]  cleanup_mnt+0x3d3/0x460
[  528.766224][T16640]  task_work_run+0x1d9/0x270
[  528.766237][T16640]  ? __pfx_task_work_run+0x10/0x10
[  528.766251][T16640]  exit_to_user_mode_loop+0x1fa/0x750
[  528.766261][T16640]  ? rcu_is_watching+0x15/0xb0
[  528.766271][T16640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.766280][T16640]  do_syscall_64+0x353/0x580
[  528.766289][T16640]  ? trace_irq_disable+0x3b/0x140
[  528.766301][T16640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.766308][T16640] RIP: 0033:0x7fa89639f317
[  528.766317][T16640] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  528.766324][T16640] RSP: 002b:00007ffeb6840928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  528.766333][T16640] RAX: 0000000000000000 RBX: 00007fa896434474 RCX: 00007fa89639f317
[  528.766338][T16640] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb68409e0
[  528.766343][T16640] RBP: 00007ffeb68409e0 R08: 00007ffeb68419e0 R09: 00000000ffffffff
[  528.766348][T16640] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb6841a70
[  528.766352][T16640] R13: 00007fa896434474 R14: 0000000000080f61 R15: 00007ffeb6841ab0
[  528.766364][T16640]  </TASK>
[  528.766368][T16640] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  528.867897][T18175] tipc: Cannot configure node identity twice
[  528.871811][T18175] tipc: Cannot configure node identity twice
[  528.883758][T18175] tipc: New replicast peer: 127.0.0.1
[  528.891393][T18175] tipc: Enabled bearer <udp:syz0>, priority 10
[  529.500523][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  529.518871][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  529.525011][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  529.533466][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  529.551228][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  530.007416][ T5847] tipc: Node number set to 3664630480
[  530.761361][T18187] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.767626][T18187] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.774273][T18187] bridge_slave_0: entered allmulticast mode
[  530.940571][T18187] bridge_slave_0: entered promiscuous mode
[  530.956640][T18187] bridge0: port 2(bridge_slave_1) entered blocking state
[  530.963788][T18187] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.969869][T18187] bridge_slave_1: entered allmulticast mode
[  530.976222][T18187] bridge_slave_1: entered promiscuous mode
[  531.046389][T18187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  531.065327][T18187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  531.117476][T18187] team0: Port device team_slave_0 added
[  531.125027][T18187] team0: Port device team_slave_1 added
[  531.169145][T18187] batman_adv: batadv0: Adding interface: batadv_slave_0
[  531.173529][T18187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.195300][T18187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  531.207484][T18187] batman_adv: batadv0: Adding interface: batadv_slave_1
[  531.213289][T18187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.235998][T18187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  531.323614][T18187] hsr_slave_0: entered promiscuous mode
[  531.331256][T18187] hsr_slave_1: entered promiscuous mode
[  531.337464][T18187] debugfs: 'hsr0' already exists in 'hsr'
[  531.342049][T18187] Cannot create hsr debugfs directory
[  531.636799][ T5801] Bluetooth: hci0: command tx timeout
[  532.217944][T18187] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  532.252395][T18187] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  532.260796][T18187] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  532.273450][T18187] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  532.279528][T18187] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  532.307905][T18187] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  532.314064][T18187] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  532.332401][T18187] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  532.624679][T18187] 8021q: adding VLAN 0 to HW filter on device bond0
[  532.670373][T18187] 8021q: adding VLAN 0 to HW filter on device team0
[  532.848608][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.850951][ T7296] bridge0: port 1(bridge_slave_0) entered forwarding state
[  532.875324][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.877951][ T7296] bridge0: port 2(bridge_slave_1) entered forwarding state
[  533.486159][T18303] loop8: detected capacity change from 0 to 4096
[  533.492825][T18303] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  533.803550][ T5801] Bluetooth: hci0: command tx timeout
[  534.450434][ T5438] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.471447][T18320] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5064'.
[  534.478861][ T5347] 8021q: adding VLAN 0 to HW filter on device eth17
[  534.494099][T18187] 8021q: adding VLAN 0 to HW filter on device batadv0
[  534.619687][T18333] team0: entered promiscuous mode
[  534.630287][T18333] team_slave_0: entered promiscuous mode
[  534.637735][T18333] team_slave_1: entered promiscuous mode
[  534.651546][T18333] syz_tun: entered promiscuous mode
[  534.667738][T18333] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  534.834859][T18343] loop8: detected capacity change from 0 to 64
[  534.889332][ T5438] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.185326][ T5438] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.193052][T18351] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5073'.
[  535.201065][T18351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5073'.
[  535.271277][ T5347] 8021q: adding VLAN 0 to HW filter on device eth18
[  535.434038][T18359] netlink: 'syz.5.5075': attribute type 21 has an invalid length.
[  535.442829][ T5438] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.471088][T18359] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5075'.
[  535.484726][T18359] netlink: 'syz.5.5075': attribute type 21 has an invalid length.
[  535.508885][T18359] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5075'.
[  535.603847][T18187] veth0_vlan: entered promiscuous mode
[  535.653009][T18187] veth1_vlan: entered promiscuous mode
[  535.817353][T18366] bridge0: entered allmulticast mode
[  535.879846][ T5801] Bluetooth: hci0: command tx timeout
[  535.980711][T18187] veth0_macvtap: entered promiscuous mode
[  536.111382][ T5347] 8021q: adding VLAN 0 to HW filter on device eth20
[  536.131972][T18187] veth1_macvtap: entered promiscuous mode
[  536.150092][ T5438] team0: left allmulticast mode
[  536.155864][ T5438] team_slave_0: left allmulticast mode
[  536.161848][ T5438] team_slave_1: left allmulticast mode
[  536.169230][ T5438] team0: left promiscuous mode
[  536.174852][ T5438] team_slave_0: left promiscuous mode
[  536.180446][ T5438] team_slave_1: left promiscuous mode
[  536.184193][T18363] loop8: detected capacity change from 0 to 32768
[  536.187734][T18378] netlink: 'syz.5.5081': attribute type 6 has an invalid length.
[  536.190471][ T5438] bridge0: port 3(team0) entered disabled state
[  536.209524][ T5438] bridge_slave_1: left allmulticast mode
[  536.223152][ T5438] bridge_slave_1: left promiscuous mode
[  536.234258][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.262837][ T5438] bridge_slave_0: left allmulticast mode
[  536.267827][T18363] JBD2: Ignoring recovery information on journal
[  536.273119][ T5438] bridge_slave_0: left promiscuous mode
[  536.286678][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.330075][T18363] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  536.342991][ T5438] veth0: left allmulticast mode
[  536.354748][ T5438] veth0: left promiscuous mode
[  536.361396][ T5438] bridge0: port 4(veth0) entered disabled state
[  536.368353][ T5438] bond1: left allmulticast mode
[  536.371897][ T5438] bond1: left promiscuous mode
[  536.378834][ T5438] bridge0: port 3(bond1) entered disabled state
[  536.390772][ T5438] bridge_slave_1: left allmulticast mode
[  536.396162][ T5438] bridge_slave_1: left promiscuous mode
[  536.403126][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.412209][T18363] OCFS2: ERROR (device loop8): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048
[  536.420076][ T5438] bridge_slave_0: left allmulticast mode
[  536.422518][ T5438] bridge_slave_0: left promiscuous mode
[  536.424990][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.429218][T18363] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  536.444093][T18363] OCFS2: Returning error to the calling process.
[  536.467811][T18363] (syz.8.5077,18363,0):ocfs2_search_chain:1935 ERROR: status = -5
[  536.479332][T18363] (syz.8.5077,18363,0):ocfs2_search_chain:2058 ERROR: status = -5
[  536.488840][T18363] (syz.8.5077,18363,0):ocfs2_claim_suballoc_bits:2145 ERROR: status = -5
[  536.495342][T18363] (syz.8.5077,18363,0):ocfs2_claim_suballoc_bits:2198 ERROR: status = -5
[  536.503266][T18363] (syz.8.5077,18363,0):ocfs2_claim_new_inode:2439 ERROR: status = -5
[  536.510414][T18363] (syz.8.5077,18363,0):ocfs2_claim_new_inode:2454 ERROR: status = -5
[  536.522261][T18363] (syz.8.5077,18363,0):ocfs2_mknod_locked:642 ERROR: status = -5
[  536.529124][T18363] (syz.8.5077,18363,0):ocfs2_mknod:389 ERROR: status = -5
[  536.543931][T18363] (syz.8.5077,18363,0):ocfs2_mknod:506 ERROR: status = -5
[  536.639956][T16640] ocfs2: Unmounting device (7,8) on (node local)
[  536.855889][T18385] device-mapper: ioctl: name not supplied when creating device
[  536.960795][ T5438] bond2 (unregistering): (slave gretap1): Removing an active aggregator
[  536.983318][ T5438] bond2 (unregistering): (slave gretap1): Releasing backup interface
[  537.053371][ T5438] team0: Port device bridge1 removed
[  537.063258][ T5438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  537.070277][ T5438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  537.074557][ T5438] bond0 (unregistering): Released all slaves
[  537.080990][ T5438] bond1 (unregistering): (slave vlan3): Releasing active interface
[  537.084197][ T5438] bond1 (unregistering): Released all slaves
[  537.096241][ T5438] bond2 (unregistering): Released all slaves
[  537.214909][ T5438] bond5 (unregistering): (slave geneve3): Releasing active interface
[  537.260791][ T5438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  537.264432][ T5438] bond0 (unregistering): Released all slaves
[  537.272704][ T5438] bond1 (unregistering): Released all slaves
[  537.280369][ T5438] bond2 (unregistering): Released all slaves
[  537.293475][ T5438] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface
[  537.302192][ T5438] bond3 (unregistering): Released all slaves
[  537.312712][ T5438] bond4 (unregistering): Released all slaves
[  537.341541][ T5438] bond5 (unregistering): Released all slaves
[  537.593933][T18187] batman_adv: batadv0: Interface activated: batadv_slave_0
[  537.651501][T18187] batman_adv: batadv0: Interface activated: batadv_slave_1
[  537.697582][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  537.770420][   T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  537.781489][T18397] loop8: detected capacity change from 0 to 2048
[  537.808406][   T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  537.838926][T18397] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  537.862692][T18397] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  537.903748][T18397] UDF-fs: Scanning with blocksize 512 failed
[  537.925634][ T5438] : left promiscuous mode
[  537.941862][T18397] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  537.956640][ T5801] Bluetooth: hci0: command tx timeout
[  537.988170][   T33] kauditd_printk_skb: 39 callbacks suppressed
[  537.988180][   T33] audit: type=1800 audit(539.874:1754): pid=18397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5088" name="file1" dev="loop8" ino=838 res=0 errno=0
[  538.217345][T18081] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  538.392772][ T7296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  538.413667][ T7296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  538.538557][ T5347] 8021q: adding VLAN 0 to HW filter on device eth19
[  538.601305][T11161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  538.613572][T11161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  539.142738][T18433] netlink: 'syz.9.5017': attribute type 12 has an invalid length.
[  539.174851][T18433] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5017'.
[  539.299817][T18437] loop8: detected capacity change from 0 to 2048
[  539.309122][T18437] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  539.393105][T18441] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  539.433066][ T5347] 8021q: adding VLAN 0 to HW filter on device eth21
[  539.525828][T18443] netlink: 'syz.9.5103': attribute type 11 has an invalid length.
[  539.562625][ T5438] batman_adv: batadv0: Removing interface: wlan0
[  539.793123][T18452] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.5106'.
[  539.978121][T18463] geneve2: entered promiscuous mode
[  540.184669][T18472] loop8: detected capacity change from 0 to 512
[  540.714403][T18472] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  540.922724][ T5347] 8021q: adding VLAN 0 to HW filter on device eth22
[  540.986223][T18481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5117'.
[  541.027065][T18481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5117'.
[  541.251831][T18488] loop8: detected capacity change from 0 to 128
[  541.273938][T18488] FAT-fs (loop8): bogus logical sector size 65535
[  541.293390][T18488] FAT-fs (loop8): Can't find a valid FAT filesystem
[  541.381644][T18488] loop8: detected capacity change from 0 to 2048
[  541.390244][ T5438] hsr_slave_0: left promiscuous mode
[  541.430871][T18488] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  541.439963][ T5438] hsr_slave_1: left promiscuous mode
[  541.454152][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_0
[  541.549211][ T5438] hsr_slave_0: left promiscuous mode
[  541.568933][ T5438] hsr_slave_1: left promiscuous mode
[  541.587831][ T5438] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  541.604656][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_0
[  541.699520][ T5438] veth1_macvtap: left promiscuous mode
[  541.714659][ T5438] veth0_macvtap: left promiscuous mode
[  541.729509][ T5438] veth1_vlan: left promiscuous mode
[  541.736952][ T5438] veth0_vlan: left promiscuous mode
[  542.354361][T18512] netlink: 'syz.8.5127': attribute type 11 has an invalid length.
[  542.397877][T18512] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.5127'.
[  542.524418][ T5438] team0 (unregistering): Port device team_slave_1 removed
[  542.536322][ T5438] team0 (unregistering): Port device team_slave_0 removed
[  542.840838][ T5438] team0 (unregistering): Port device team_slave_1 removed
[  542.850457][ T5438] team0 (unregistering): Port device team_slave_0 removed
[  542.994249][ T5347] 8021q: adding VLAN 0 to HW filter on device eth23
[  543.692240][T18532] IPVS: persistence engine module ip_vs_pe_ not found
[  543.811993][ T5347] 8021q: adding VLAN 0 to HW filter on device eth24
[  543.939126][ T5438] IPVS: stop unused estimator thread 0...
[  543.971895][ T5438] IPVS: stop unused estimator thread 0...
[  544.007329][T18550] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5140'.
[  544.026732][T18550] openvswitch: netlink: Missing key (keys=c0, expected=10000000)
[  544.204597][ T5847] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  544.411011][ T5847] usb 10-1: Using ep0 maxpacket: 32
[  544.427569][ T5847] usb 10-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[  544.444135][ T5847] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  544.471157][ T5847] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.483407][ T5847] usb 10-1: Product: syz
[  544.506946][ T5847] usb 10-1: Manufacturer: syz
[  544.510134][ T5847] usb 10-1: SerialNumber: syz
[  544.677866][T18569] /dev/nullb0: Can't lookup blockdev
[  544.749991][ T5847] usb 10-1: found format II with max.bitrate = 276, frame size=64
[  544.773229][ T5847] usb 10-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  544.857644][ T5847] usb 10-1: USB disconnect, device number 2
[  544.910435][T15372] udevd[15372]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  545.073517][T18566] loop8: detected capacity change from 0 to 32768
[  545.102863][T18566] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  545.142864][T18566] XFS (loop8): Ending clean mount
[  545.154923][T18566] XFS (loop8): User initiated shutdown received.
[  545.158303][T18566] XFS (loop8): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468).  Shutting down filesystem.
[  545.162513][T18566] XFS (loop8): Please unmount the filesystem and rectify the problem(s)
[  545.187696][T16640] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  545.462275][T18594] loop9: detected capacity change from 0 to 512
[  545.508491][T18594] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  545.589977][T18594] EXT4-fs (loop9): 1 truncate cleaned up
[  545.597167][T18594] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  545.638911][T18594] EXT4-fs warning (device loop9): verify_group_input:137: Cannot add at group 2 (only 1 groups)
[  545.682704][T18187] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  545.887629][ T6578] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  546.037384][ T6578] usb 9-1: Using ep0 maxpacket: 16
[  546.046209][ T6578] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  546.060761][ T6578] usb 9-1: config 1 has an invalid interface number: 105 but max is 0
[  546.071393][ T6578] usb 9-1: config 1 has no interface number 0
[  546.080644][ T6578] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  546.094528][ T6578] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  546.113866][ T6578] usb 9-1: config 1 interface 105 has no altsetting 0
[  546.124611][ T6578] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  546.130863][ T6578] usb 9-1: Product: syz
[  546.132190][ T6578] usb 9-1: Manufacturer: syz
[  546.141502][ T6578] usb 9-1: SerialNumber: syz
[  546.162492][T18602] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  546.179871][T18602] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  546.414725][ T6578] aqc111 9-1:1.105: probe with driver aqc111 failed with error -71
[  546.443973][ T6578] usb 9-1: USB disconnect, device number 4
[  546.590697][T18627] fuse: fd is not a fuse device
[  546.896249][ T5847] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  547.047102][ T5847] usb 10-1: Using ep0 maxpacket: 32
[  547.049561][ T5847] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  547.054455][ T5847] usb 10-1: config index 0 descriptor too short (expected 156, got 27)
[  547.061410][ T5847] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  547.066397][ T5847] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  547.069865][ T5847] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  547.073939][ T5847] usb 10-1: config 0 interface 0 has no altsetting 0
[  547.078974][ T5847] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  547.081618][ T5847] usb 10-1: Product: syz
[  547.082906][ T5847] usb 10-1: Manufacturer: syz
[  547.084454][ T5847] usb 10-1: SerialNumber: syz
[  547.088486][ T5847] usb 10-1: config 0 descriptor??
[  547.094113][ T5847] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  547.098552][ T5847] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  547.205530][T18623] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  547.356873][T18623] usb 9-1: Using ep0 maxpacket: 32
[  547.363624][T18623] usb 9-1: unable to get BOS descriptor or descriptor too short
[  547.376603][T18623] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  547.383932][T18623] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  547.392368][T18623] usb 9-1: config 1 interface 0 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  547.401465][T18623] usb 9-1: config 1 interface 0 has no altsetting 0
[  547.412029][T18623] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.417561][T18623] usb 9-1: Product: syz
[  547.418911][T18623] usb 9-1: Manufacturer: syz
[  547.425962][T18623] usb 9-1: SerialNumber: syz
[  547.593090][ T6578] usb 10-1: USB disconnect, device number 3
[  547.610239][ T6578] ldusb 10-1:0.0: LD USB Device #0 now disconnected
[  547.646790][T18623] usb 9-1: No union descriptors
[  547.657251][T18623] usb 9-1: USB disconnect, device number 5
[  548.249542][T18655] overlayfs: overlapping lowerdir path
[  549.105738][ T6578] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  549.266448][ T6578] usb 10-1: Using ep0 maxpacket: 32
[  549.272475][ T6578] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  549.279655][ T6578] usb 10-1: config 0 has an invalid interface number: 188 but max is 0
[  549.283504][ T6578] usb 10-1: config 0 has no interface number 0
[  549.288341][ T6578] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  549.297526][ T6578] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.301098][ T6578] usb 10-1: Product: syz
[  549.305116][ T6578] usb 10-1: Manufacturer: syz
[  549.309343][ T6578] usb 10-1: SerialNumber: syz
[  549.316771][ T6578] usb 10-1: config 0 descriptor??
[  549.329441][T18685] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  549.559477][T18685] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  549.768543][ T6578] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  549.774271][ T6578] asix 10-1:0.188: probe with driver asix failed with error -71
[  549.781217][ T6578] usb 10-1: USB disconnect, device number 4
[  550.742526][T18724] loop9: detected capacity change from 0 to 131072
[  550.769479][T18724] F2FS-fs (loop9): invalid crc value
[  550.796816][T18724] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  550.804534][T18724] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  553.467312][T18742] xt_bpf: check failed: parse error
[  553.574405][T18744] loop8: detected capacity change from 0 to 1024
[  553.586851][T18744] hfsplus: Bad value for 'session'
[  553.755097][T18748] loop8: detected capacity change from 0 to 1024
[  553.812815][T18748] hfsplus: bad catalog file entry
[  554.096685][ T2989] hfsplus: bad catalog file entry
[  557.482771][T18772] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5223'.
[  557.741412][T18782] xt_cgroup: invalid path, errno=-2
[  559.227695][T18782] CIFS: Attempting to mount //127.0.0.1/share
[  559.305142][T18790] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes)
[  559.449332][T18782] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -512
[  559.455275][T18782] CIFS: VFS: cifs_mount failed w/return code = -512
[  559.566058][T18798] loop8: detected capacity change from 0 to 1024
[  559.816478][T18809] loop8: detected capacity change from 0 to 2048
[  559.881781][T18809] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  559.902217][T18809] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  559.914315][T18809] UDF-fs: Scanning with blocksize 512 failed
[  559.940489][T18809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  560.295974][ T5847] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  560.885663][ T5847] usb 10-1: Using ep0 maxpacket: 8
[  560.890553][ T5847] usb 10-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  560.903050][ T5847] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  560.914043][ T5847] usb 10-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  560.920706][ T5847] usb 10-1: Manufacturer: syz
[  560.928341][ T5847] usb 10-1: config 0 descriptor??
[  560.941581][ T5847] hub 10-1:0.0: bad descriptor, ignoring hub
[  560.951949][ T5847] hub 10-1:0.0: probe with driver hub failed with error -5
[  560.959494][ T5847] usb 10-1: selecting invalid altsetting 1
[  560.973738][ T5847] usb 10-1: Can not set alternate setting to 1, error: -22
[  560.984126][ T5847] synaptics_usb 10-1:0.0: probe with driver synaptics_usb failed with error -22
[  561.266635][ T6578] usb 10-1: USB disconnect, device number 5
[  561.968080][T18868] overlayfs: failed to clone lowerpath
[  562.204162][T18874] comedi comedi4: bad chanlist[0]=0x00000020 chan=32 range length=1
[  562.282640][T18862] loop9: detected capacity change from 0 to 32768
[  563.158525][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  563.840460][T18903] loop8: detected capacity change from 0 to 512
[  563.854781][T18903] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  563.905064][T18903] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  563.926059][T18903] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  563.994623][T16640] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  564.169392][T18914] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  564.338018][T18924] syzkaller0: tun_chr_ioctl cmd 1074025677
[  564.347304][T18924] syzkaller0: linktype set to 805
[  564.608775][T18923] loop9: detected capacity change from 0 to 32768
[  564.632129][T18933] 9pnet: p9_errstr2errno: server reported unknown error 0x00000
[  564.698209][ T2224] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  564.848674][ T2224] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  564.862432][ T2224] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  564.870811][ T2224] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  564.879783][ T2224] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.884089][T18940] loop9: detected capacity change from 0 to 1024
[  564.934860][T18940] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  564.956210][T18940] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  564.994917][T18187] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  565.097952][ T2224] usb 9-1: usb_control_msg returned -32
[  565.105305][ T2224] usbtmc 9-1:16.0: can't read capabilities
[  565.178206][T18946] loop9: detected capacity change from 0 to 4096
[  565.188151][T18946] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  565.248391][T18187] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  565.322357][T18949] netlink: 'syz.9.5283': attribute type 4 has an invalid length.
[  565.530639][T18950] usbtmc 9-1:16.0: stb usb_control_msg returned -32
[  565.543177][ T2224] logitech-hidpp-device 0005:046D:B012.000C: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  565.562718][ T2224] usb 9-1: USB disconnect, device number 6
[  566.177394][T18982] Invalid ELF header magic: != ELF
[  566.382944][T18994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  566.387762][T18994] IPv6: NLM_F_CREATE should be set when creating new route
[  566.438810][T18994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  567.038662][T19003] loop8: detected capacity change from 0 to 131072
[  567.067182][T19003] F2FS-fs (loop8): invalid crc value
[  567.095219][T19003] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  567.106239][T19003] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  567.732850][T19019] input: syz0 as /devices/virtual/input/input17
[  569.465508][ T5847] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  569.617013][ T5847] usb 9-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  569.633278][ T5847] usb 9-1: config 2 has an invalid interface number: 4 but max is 0
[  569.644029][ T5847] usb 9-1: config 2 has no interface number 0
[  569.649005][ T5847] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.687806][ T5847] ums-realtek 9-1:2.4: USB Mass Storage device detected
[  569.913278][ T5847] usb 9-1: USB disconnect, device number 7
[  570.253416][ T5847] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  570.271066][ T5847] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  570.622464][T19092] loop8: detected capacity change from 0 to 1024
[  570.744756][T19092] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  570.768751][T19092] EXT4-fs (loop8): shut down requested (2)
[  570.820666][T16640] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  571.573502][T19137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  571.636965][ T5801] Bluetooth: hci3: command 0x0c1a tx timeout
[  571.644984][T11872] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  571.651420][T11872] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[  571.657255][T19140] ./file0: Can't open blockdev
[  571.776704][ T2224] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  572.679398][T19153] loop9: detected capacity change from 0 to 1024
[  572.725934][ T2224] usb 9-1: Using ep0 maxpacket: 8
[  572.733985][ T2224] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  572.752735][ T2224] usb 9-1: config 0 has an invalid interface number: 55 but max is 0
[  572.760950][T19153] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  572.763915][T19153] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  572.773092][ T2224] usb 9-1: config 0 has no interface number 0
[  572.777473][ T2224] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  572.780987][T19153] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  572.783680][T19153] EXT4-fs (loop9): orphan cleanup on readonly fs
[  572.787743][T19153] EXT4-fs error (device loop9): ext4_free_blocks:6718: comm syz.9.5347: Freeing blocks not in datazone - block = 0, count = 4096
[  572.791807][T19153] loop9: lost filesystem error report for type 5 error -117
[  572.793664][T19153] EXT4-fs (loop9): Remounting filesystem read-only
[  572.796049][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  572.796060][    C0] EXT4-fs (loop9): initial error at time 2000000032: ext4_free_blocks:6718
[  572.796070][    C0] EXT4-fs (loop9): last error at time 2000000032: ext4_free_blocks:6718
[  572.805590][T19153] EXT4-fs (loop9): 1 orphan inode deleted
[  572.808064][T19153] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  572.812888][T19153] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  572.869928][ T2224] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  572.883975][ T2224] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  572.900786][ T2224] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  572.921486][ T2224] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.944423][ T2224] usb 9-1: config 0 descriptor??
[  572.962438][ T2224] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  573.086197][T19160] loop9: detected capacity change from 0 to 64
[  573.186853][ T2224] usb 9-1: USB disconnect, device number 8
[  573.211022][ T2224] ldusb 9-1:0.55: LD USB Device #0 now disconnected
[  574.379897][T19176] loop9: detected capacity change from 0 to 8
[  574.382525][T19176] MTD: Attempt to mount non-MTD device "/dev/loop9"
[  574.417334][T19176] cramfs: Error -3 while decompressing!
[  574.421206][T19176] cramfs: ffffffff9a8c0268(18)->ffff88802bbd7000(4096)
[  574.423526][T19176] cramfs: Error -3 while decompressing!
[  574.425300][T19176] cramfs: ffffffff9a8c0268(18)->ffff88802bbd7000(4096)
[  574.428585][   T33] audit: type=1800 audit(2000000034.460:1755): pid=19176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5357" name="file1" dev="loop9" ino=324 res=0 errno=0
[  574.799142][T19182] netlink: 488 bytes leftover after parsing attributes in process `syz.8.5360'.
[  574.933144][T19190] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5363'.
[  574.995778][ T5801] Bluetooth: hci0: command 0x0c1a tx timeout
[  575.000737][T11872] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  575.018355][T11872] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  575.034210][T19194] Bluetooth: MGMT ver 1.23
[  575.155972][ T5847] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[  575.259817][T19200] loop8: detected capacity change from 0 to 2048
[  575.276778][T19200] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  575.291816][T18767] udevd[18767]: incorrect nilfs2 checksum on /dev/loop8
[  575.299678][T19200] NILFS (loop8): too large checkpoint size: 1741 bytes
[  575.315174][T19200] NILFS (loop8): error -22 while loading super root
[  575.327385][T18767] udevd[18767]: incorrect nilfs2 checksum on /dev/loop8
[  575.336892][ T5847] usb 10-1: not running at top speed; connect to a high speed hub
[  575.342017][ T5847] usb 10-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  575.359703][ T5847] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  575.372494][ T5847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.404737][ T5847] uvcvideo 10-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000
[  575.437907][ T5847] uvcvideo 10-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  575.448162][ T5847] uvcvideo 10-1:1.1: No supported video formats found.
[  575.454177][ T5847] uvcvideo 10-1:1.1: Failed to initialize the device (-22).
[  575.464121][ T5847] uvcvideo 10-1:1.0: probe with driver uvcvideo failed with error -22
[  575.612627][ T2224] usb 10-1: USB disconnect, device number 6
[  575.629504][T19214] libceph: resolve '96.' (ret=-3): failed
[  576.573442][T19231] loop8: detected capacity change from 0 to 1024
[  576.618805][T19231] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  576.687336][T16640] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.920677][T19248] netlink: 'syz.5.5389': attribute type 3 has an invalid length.
[  577.717641][T19282] loop9: detected capacity change from 0 to 256
[  577.747104][   T33] audit: type=1800 audit(2000000037.780:1756): pid=19282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5406" name="file1" dev="loop9" ino=1048794 res=0 errno=0
[  577.766144][T19284] loop8: detected capacity change from 0 to 512
[  577.786677][T19284] EXT4-fs (loop8): orphan cleanup on readonly fs
[  577.807395][T19284] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  577.857306][T19284] EXT4-fs (loop8): Cannot turn on quotas: error -22
[  577.870565][T19284] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #13: comm syz.8.5407: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  577.894394][T19284] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  577.894673][T19284] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.5407: couldn't read orphan inode 13 (err -117)
[  577.897699][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  577.897710][    C0] EXT4-fs (loop8): last error at time 2000000037: ext4_ext_check_inode:521: inode 13
[  577.953093][T19284] loop8: lost filesystem error report for type 5 error -117
[  577.954006][T19284] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  578.004086][T19284] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended
[  578.032829][T19284] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  578.117292][T19284] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[  578.141829][T19284] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  578.792942][T16640] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  578.894511][T19302] loop9: detected capacity change from 0 to 1024
[  578.909920][T19302] hfsplus: Filesystem is marked locked, mounting read-only.
[  578.943122][T19302] hfsplus: failed to load catalog file
[  579.009693][ T5847] IPVS: starting estimator thread 0...
[  579.012539][T19307] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available
[  579.106331][T19308] IPVS: using max 83 ests per chain, 199200 per kthread
[  579.398553][T16740] e1000 0000:00:03.0 eth0: Reset adapter
[  579.419141][ T5847] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  579.565796][ T5847] usb 9-1: device descriptor read/64, error -71
[  579.815498][ T5847] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  579.945537][ T5847] usb 9-1: device descriptor read/64, error -71
[  580.055777][ T5847] usb usb9-port1: attempt power cycle
[  580.395534][ T5847] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  580.422546][ T5847] usb 9-1: device descriptor read/8, error -71
[  580.655623][ T5847] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  580.676098][ T5847] usb 9-1: device descriptor read/8, error -71
[  580.792180][ T5847] usb usb9-port1: unable to enumerate USB device
[  581.796624][T16740] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  584.916785][T16740] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  592.839447][T19403] netlink: 'syz.9.5443': attribute type 39 has an invalid length.
[  593.166170][ T5846] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  593.184943][T19415] loop9: detected capacity change from 0 to 128
[  593.218009][T19415] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  593.232818][T19415] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  593.270587][T19415] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #2: comm syz.9.5449: No space for directory leaf checksum. Please run e2fsck -D.
[  593.285081][T19415] EXT4-fs error (device loop9): __ext4_find_entry:1626: inode #2: comm syz.9.5449: checksumming directory block 0
[  593.325763][ T5846] usb 9-1: Using ep0 maxpacket: 32
[  593.328163][ T5846] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  593.332130][T18187] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  593.341764][ T5846] usb 9-1: config 0 has an invalid interface number: 51 but max is 0
[  593.346974][ T5846] usb 9-1: config 0 has no interface number 0
[  593.386227][ T5846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.389439][ T5846] usb 9-1: Product: syz
[  593.405092][ T5846] usb 9-1: Manufacturer: syz
[  593.412677][ T5846] usb 9-1: SerialNumber: syz
[  593.436630][ T5846] usb 9-1: config 0 descriptor??
[  593.447723][ T5846] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  593.655183][ T5846] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  593.680483][ T5846] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  593.873400][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6
[  594.083450][    C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71
[  594.086369][ T5847] usb 9-1: USB disconnect, device number 13
[  594.109568][ T5847] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  594.123356][ T5847] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  594.136596][ T5847] quatech2 9-1:0.51: device disconnected
[  594.352986][T19448] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5463'.
[  594.361457][T19448] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5463'.
[  594.373745][T19448] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5463'.
[  594.377076][T19448] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5463'.
[  594.385523][ T5438] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  594.395347][ T5438] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  594.411213][ T5438] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  594.436848][T18081] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  596.261155][T19492] syz.5.5483 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  596.436002][ T5846] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  596.586316][ T5846] usb 10-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=cc.2f
[  596.591465][ T5846] usb 10-1: config 1 has an invalid interface number: 36 but max is 0
[  596.594168][ T5846] usb 10-1: config 1 has no interface number 0
[  596.602136][ T5846] usb 10-1: config 1 interface 36 altsetting 129 bulk endpoint 0x8 has invalid maxpacket 8
[  596.608793][ T5846] usb 10-1: config 1 interface 36 has no altsetting 0
[  596.619981][ T5846] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  596.622924][ T5846] usb 10-1: Product: syz
[  596.626863][ T5846] usb 10-1: Manufacturer: syz
[  596.630931][ T5846] usb 10-1: SerialNumber: syz
[  596.644513][T19490] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  596.866256][ T5846] redrat3 10-1:1.36: Couldn't find all endpoints
[  596.887211][ T5846] usb 10-1: USB disconnect, device number 7
[  597.000686][T19511] program syz.8.5489 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  597.089147][T19516] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  597.349681][   T33] audit: type=1326 audit(2000000057.380:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19529 comm="syz.8.5498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89639e0d9 code=0x7ffc0000
[  597.374202][   T33] audit: type=1326 audit(2000000057.390:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19529 comm="syz.8.5498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89639e0d9 code=0x7ffc0000
[  597.410132][   T33] audit: type=1326 audit(2000000057.390:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19529 comm="syz.8.5498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89639e0d9 code=0x7ffc0000
[  597.468518][   T33] audit: type=1326 audit(2000000057.390:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19529 comm="syz.8.5498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89639e0d9 code=0x7ffc0000
[  597.502330][   T33] audit: type=1326 audit(2000000057.390:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19529 comm="syz.8.5498" exe="/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa89639e0d9 code=0x7ffc0000
[  597.537562][   T33] audit: type=1326 audit(2000000057.390:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19529 comm="syz.8.5498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89639e0d9 code=0x7ffc0000
[  597.594824][   T33] audit: type=1326 audit(2000000057.390:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19529 comm="syz.8.5498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89639e0d9 code=0x7ffc0000
[  597.630336][   T33] audit: type=1326 audit(2000000057.390:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19529 comm="syz.8.5498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89639e0d9 code=0x7ffc0000
[  597.630358][   T33] audit: type=1326 audit(2000000057.390:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19529 comm="syz.8.5498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89639e0d9 code=0x7ffc0000
[  597.630373][   T33] audit: type=1326 audit(2000000057.390:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19529 comm="syz.8.5498" exe="/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fa89639e0d9 code=0x7ffc0000
[  598.584035][T19552] loop8: detected capacity change from 0 to 4096
[  598.609732][T19552] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  598.780915][T19552] ntfs3(loop8): ino=3, ntfs_set_state failed, -22.
[  598.794804][T19559] ntfs3(loop8): ino=3, ntfs_set_state failed, -22.
[  598.804930][T19552] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  598.870002][T19559] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  598.897476][T19559] ntfs3(loop8): ino=3, ntfs_set_state failed, -22.
[  598.933621][ T1914] ntfs3(loop8): ino=3, ntfs3_write_inode failed, -22.
[  599.044211][T19562] overlayfs: failed to clone upperpath
[  599.383261][T19570] virtio-fs: tag </dev/md0> not found
[  601.865010][T19659] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5548'.
[  601.874573][T19659] netlink: 'syz.8.5548': attribute type 1 has an invalid length.
[  601.982309][T19666] netlink: 'syz.8.5551': attribute type 10 has an invalid length.
[  602.018185][T19666] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  602.028960][T19666] netdevsim netdevsim8 netdevsim1: entered promiscuous mode
[  602.032041][ T5846] kernel read not supported for file /mtd0 (pid: 5846 comm: kworker/0:3)
[  602.038611][T19666] team0: Port device netdevsim1 added
[  602.044693][T19669] netlink: 'syz.8.5551': attribute type 10 has an invalid length.
[  602.079652][T19669] netdevsim netdevsim8 netdevsim1: left promiscuous mode
[  602.132304][T19669] team0: Port device netdevsim1 removed
[  602.142316][T19669] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  602.152329][T19669] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  602.630261][T19671] loop9: detected capacity change from 0 to 131072
[  602.725653][T19671] F2FS-fs (loop9): Invalid log sectorsize (67108873)
[  602.728197][T19671] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  602.733342][T19671] F2FS-fs (loop9): invalid crc value
[  602.778674][T19671] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  602.800974][T19671] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  602.803295][T19671] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  602.813938][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  602.813947][   T33] audit: type=1800 audit(2000000062.840:1772): pid=19671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5553" name="file1" dev="loop9" ino=7 res=0 errno=0
[  603.724317][T19693] xt_hashlimit: size too large, truncated to 1048576
[  603.777304][T19695] x9: renamed from bridge_slave_0 (while UP)
[  604.079910][T19705] overlayfs: failed to clone lowerpath
[  604.406687][ T5847] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  604.485692][T18623] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  604.561477][ T5847] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  604.571876][ T5847] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  604.580338][ T5847] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  604.590741][ T5847] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  604.598175][ T5847] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  604.609129][ T5847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.634691][ T5847] usb 10-1: config 0 descriptor??
[  604.644675][T18623] usb 9-1: Using ep0 maxpacket: 8
[  604.660451][T18623] usb 9-1: unable to get BOS descriptor or descriptor too short
[  604.673742][T18623] usb 9-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  604.688198][T18623] usb 9-1: config 0 has an invalid interface number: 88 but max is 0
[  604.691449][T18623] usb 9-1: config 0 has no interface number 0
[  604.696259][T18623] usb 9-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  604.704107][T18623] usb 9-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  604.710773][T18623] usb 9-1: config 0 interface 88 has no altsetting 0
[  604.718829][T18623] usb 9-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  604.722890][T18623] usb 9-1: Product: syz
[  604.724473][T18623] usb 9-1: Manufacturer: syz
[  604.729557][T18623] usb 9-1: SerialNumber: syz
[  604.734900][T18623] usb 9-1: config 0 descriptor??
[  604.956936][T18623] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.88/input/input18
[  604.980398][T18623] usb 9-1: USB disconnect, device number 14
[  605.112536][ T5847] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  605.779233][T19744] netlink: 384 bytes leftover after parsing attributes in process `syz.8.5584'.
[  605.910473][ T5847] usb 10-1: USB disconnect, device number 8
[  605.981364][T19748] fuse: Bad value for 'user_id'
[  605.990312][T19748] fuse: Bad value for 'user_id'
[  606.207491][T19755] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5589'.
[  606.517620][ T5847] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  606.667141][ T5847] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  606.672251][ T5847] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  606.684571][ T5847] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  606.688358][ T5847] usb 9-1: Product: syz
[  606.690198][ T5847] usb 9-1: Manufacturer: syz
[  606.692263][ T5847] usb 9-1: SerialNumber: syz
[  606.908460][ T5847] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  607.127240][T19762] input: syz1 as /devices/virtual/input/input20
[  607.298146][T19764] F2FS-fs: Conflicting test_dummy_encryption options
[  607.337459][ T5847] usb 9-1: USB disconnect, device number 15
[  607.359747][ T5847] usblp0: removed
[  607.513582][T19772] veth0_to_bond: entered allmulticast mode
[  608.750798][T19775] loop9: detected capacity change from 0 to 256
[  608.770132][T19775] exfat: Deprecated parameter 'utf8'
[  608.801424][T19775] exfat: Deprecated parameter 'namecase'
[  608.816393][T19775] exfat: Deprecated parameter 'namecase'
[  608.840173][T19775] exfat: Deprecated parameter 'utf8'
[  608.880788][T19775] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  608.900312][T19775] exFAT-fs (loop9): failed to test first cluster bit of root dir(5)
[  608.928868][T19774] exFAT-fs (loop9): start_clu is invalid cluster(0x400)
[  609.422898][T19779] loop8: detected capacity change from 0 to 32768
[  609.426803][T19790] netlink: 'syz.9.5603': attribute type 1 has an invalid length.
[  609.445829][T19790] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5603'.
[  609.483947][T19779] JBD2: Ignoring recovery information on journal
[  609.496932][T19779] jbd2_journal_bmap: journal block not found at offset 32 on loop8-75
[  609.519571][T19779] JBD2: bad block at offset 32
[  609.536020][T19779] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  609.545050][T19795] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5604'.
[  609.756922][T16640] ocfs2: Unmounting device (7,8) on (node local)
[  609.946938][T16740] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  610.096259][T16740] usb 10-1: Using ep0 maxpacket: 32
[  610.102657][T16740] usb 10-1: unable to get BOS descriptor or descriptor too short
[  610.108328][T16740] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  610.115309][T16740] usb 10-1: config 14 has an invalid interface number: 57 but max is 1
[  610.119848][T16740] usb 10-1: config 14 has an invalid interface number: 228 but max is 1
[  610.126570][T16740] usb 10-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[  610.134447][T16740] usb 10-1: config 14 has no interface number 0
[  610.149807][T16740] usb 10-1: config 14 has no interface number 1
[  610.157773][T16740] usb 10-1: config 14 interface 57 altsetting 220 endpoint 0x8 has invalid maxpacket 38910, setting to 64
[  610.170621][T16740] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  610.182253][T16740] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xC3, changing to 0x83
[  610.194231][T19815] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  610.199776][T16740] usb 10-1: config 14 interface 228 altsetting 5 bulk endpoint 0x83 has invalid maxpacket 209
[  610.203357][T16740] usb 10-1: config 14 interface 57 has no altsetting 0
[  610.208965][T16740] usb 10-1: config 14 interface 228 has no altsetting 0
[  610.216344][T16740] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.219062][T16740] usb 10-1: Product: syz
[  610.222566][T16740] usb 10-1: Manufacturer: syz
[  610.226942][T16740] usb 10-1: SerialNumber: syz
[  610.479284][T16740] legousbtower 10-1:14.57: interrupt endpoints not found
[  610.488258][T16740] legousbtower 10-1:14.228: interrupt endpoints not found
[  610.499768][T16740] usb 10-1: USB disconnect, device number 9
[  610.625245][T19821] loop8: detected capacity change from 0 to 40427
[  610.824571][T19821] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  610.840814][T19821] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  610.859294][T19830] overlayfs: failed to clone upperpath
[  611.331141][T19836] loop9: detected capacity change from 0 to 1024
[  611.349487][T19836] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  611.406408][T19843] loop8: detected capacity change from 0 to 1024
[  611.416107][T19836] EXT4-fs error (device loop9): ext4_empty_dir:3114: inode #11: block 449: comm syz.9.5622: Attempting to read directory block (449) that is past i_size (460032)
[  611.470797][T19843] hfsplus: invalid file type 0174377 for inode 21
[  611.486977][T18187] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  611.753949][T19847] loop8: detected capacity change from 0 to 2048
[  611.905031][T19847] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[  611.927207][T19847] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  612.128586][   T33] audit: type=1326 audit(2000000072.160:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19856 comm="syz.5.5629" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  612.148896][   T33] audit: type=1326 audit(2000000072.170:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19856 comm="syz.5.5629" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  612.156526][T19855] loop8: detected capacity change from 0 to 8192
[  612.179323][   T33] audit: type=1326 audit(2000000072.170:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19856 comm="syz.5.5629" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  612.205833][   T33] audit: type=1326 audit(2000000072.170:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19856 comm="syz.5.5629" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  612.239803][   T33] audit: type=1326 audit(2000000072.170:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19856 comm="syz.5.5629" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  612.269936][   T33] audit: type=1326 audit(2000000072.190:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19856 comm="syz.5.5629" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  612.296534][   T33] audit: type=1326 audit(2000000072.190:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19858 comm="syz.5.5629" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f298d15e90e code=0x7ffc0000
[  612.311922][   T33] audit: type=1326 audit(2000000072.200:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19856 comm="syz.5.5629" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  612.321336][T19860] loop5: detected capacity change from 0 to 7
[  612.338216][T19860] Dev loop5: unable to read RDB block 7
[  612.340726][   T33] audit: type=1326 audit(2000000072.230:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19856 comm="syz.5.5629" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  612.350609][T19860]  loop5: AHDI p1
[  612.351987][T19860] loop5: partition table partially beyond EOD, truncated
[  612.367045][   T33] audit: type=1326 audit(2000000072.230:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19856 comm="syz.5.5629" exe="/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f298d19e0d9 code=0x7ffc0000
[  612.583123][T19866] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5633'.
[  614.443045][T19902] loop9: detected capacity change from 0 to 512
[  614.488104][T19902] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.9.5647: corrupted xattr block 95: invalid header
[  614.510194][T19902] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  614.511272][T19902] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.5647: bg 0: block 7: invalid block bitmap
[  614.519444][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  614.519457][    C0] EXT4-fs (loop9): initial error at time 2000000074: ext4_expand_extra_isize_ea:2810: inode 11
[  614.519471][    C0] EXT4-fs (loop9): last error at time 2000000074: ext4_expand_extra_isize_ea:2810: inode 11
[  614.571803][T19902] loop9: lost filesystem error report for type 5 error -117
[  614.572525][T19902] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  614.592417][T19902] loop9: lost filesystem error report for type 5 error -117
[  614.592775][T19902] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2972: inode #11: comm syz.9.5647: corrupted xattr block 95: invalid header
[  614.634289][T19902] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  614.667068][T19902] EXT4-fs warning (device loop9): ext4_evict_inode:287: xattr delete (err -117)
[  614.693471][T19902] EXT4-fs (loop9): 1 orphan inode deleted
[  614.707805][T19902] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  614.813924][T18187] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.185536][T16740] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  615.344759][T16740] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  615.352611][T16740] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.355259][T16740] usb 10-1: Product: syz
[  615.361727][T16740] usb 10-1: Manufacturer: syz
[  615.366428][T16740] usb 10-1: SerialNumber: syz
[  615.460173][T19922] fuse: fd is not a fuse device
[  615.641225][T19930] netlink: 'syz.5.5657': attribute type 3 has an invalid length.
[  616.180559][T16740] rtl8150 10-1:1.0: couldn't reset the device
[  616.184494][T16740] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5
[  616.201709][T16740] usb 10-1: USB disconnect, device number 10
[  616.295041][T19954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5666'.
[  616.649594][    C0] vcan0: j1939_tp_rxtimer: 0xffff888115ac3400: rx timeout, send abort
[  616.659643][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888115ac3400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  616.880287][T19968] loop9: detected capacity change from 0 to 2048
[  616.894876][T19968] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  616.913274][T19436] udevd[19436]: incorrect nilfs2 checksum on /dev/loop9
[  616.918558][T19968] NILFS (loop9): too large filesystem blocksize: 2 ^ 347668480 KiB
[  617.000778][T19970] ipvlan1: entered promiscuous mode
[  617.004931][T19970] ipvlan1: entered allmulticast mode
[  617.009984][T19970] veth0_vlan: entered allmulticast mode
[  617.733751][T19985] loop8: detected capacity change from 0 to 32768
[  617.790553][T19985] XFS (loop8): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  617.820952][T19994] overlayfs: failed to clone upperpath
[  617.829203][T19985] XFS (loop8): Starting recovery (logdev: internal)
[  617.856249][T19985] XFS (loop8): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xe0, xfs_refcountbt block 0x8 
[  617.859861][T19985] XFS (loop8): Unmount and run xfs_repair
[  617.861615][T19985] XFS (loop8): First 128 bytes of corrupted metadata buffer:
[  617.863919][T19985] 00000000: 52 33 46 43 00 00 00 03 ff ff ff ff ff ff ff ff  R3FC............
[  617.866621][T19985] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  617.869209][T19985] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  617.871892][T19985] 00000030: 00 00 00 00 ea d5 90 f3 00 00 00 07 00 00 00 01  ................
[  617.874540][T19985] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  617.877318][T19985] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  617.880003][T19985] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  617.882607][T19985] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  617.886016][T19985] XFS (loop8): Filesystem has been shut down due to log error (0x2).
[  617.888392][T19985] XFS (loop8): Please unmount the filesystem and rectify the problem(s).
[  617.891025][T19985] XFS (loop8): log mount/recovery failed: error -74
[  617.894137][T19985] XFS (loop8): log mount failed
[  618.061494][T20000] netlink: 88 bytes leftover after parsing attributes in process `syz.9.5683'.
[  618.130001][T20005] loop9: detected capacity change from 0 to 256
[  618.136856][T20005] exfat: Deprecated parameter 'namecase'
[  618.148897][T20005] exfat: Bad value for 'fmask'
[  618.579708][T20019] IPVS: set_ctl: invalid protocol: 47 172.20.20.24:20003
[  618.599275][T20019] netlink: 'syz.5.5692': attribute type 4 has an invalid length.
[  619.116010][T16740] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  619.358098][T16740] usb 10-1: unable to get BOS descriptor or descriptor too short
[  619.383142][T16740] usb 10-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2
[  619.405716][T16740] usb 10-1: config 64 has an invalid interface number: 44 but max is 0
[  619.413338][T16740] usb 10-1: config 64 has no interface number 0
[  619.420279][T16740] usb 10-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9
[  619.440660][T16740] usb 10-1: config 64 interface 44 has no altsetting 0
[  619.474328][T16740] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.478303][T16740] usb 10-1: Product: syz
[  619.482259][T16740] usb 10-1: Manufacturer: syz
[  619.483785][T16740] usb 10-1: SerialNumber: syz
[  619.708838][T16740] iowarrior 10-1:64.44: no interrupt-out endpoint found
[  619.726744][T16740] usb 10-1: USB disconnect, device number 11
[  620.328176][T20072] loop9: detected capacity change from 0 to 128
[  620.652616][T20078] loop9: detected capacity change from 0 to 1024
[  621.264376][T20083] tmpfs: Bad value for 'mpol'
[  621.475634][T20087] loop8: detected capacity change from 0 to 32768
[  621.478858][T20087] btrfs: Unknown parameter 'check_int'
[  622.871307][T20097] loop9: detected capacity change from 0 to 1024
[  622.898356][T20097] __quota_error: 45 callbacks suppressed
[  622.898367][T20097] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=1
[  622.931867][T20097] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  622.956767][T20097] EXT4-fs (loop9): mount failed
[  623.168476][T20105] loop8: detected capacity change from 0 to 1024
[  623.649802][T20123] netlink: 'syz.9.5738': attribute type 27 has an invalid length.
[  623.664088][T20123] netlink: 'syz.9.5738': attribute type 3 has an invalid length.
[  623.686966][T20123] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5738'.
[  624.323758][T20143] loop8: detected capacity change from 0 to 1024
[  624.352734][T20143] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  624.367635][T20143] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  624.412695][T16640] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /367/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0
[  624.449723][T16640] EXT4-fs (loop8): Remounting filesystem read-only
[  624.466484][T20148] netlink: 'syz.5.5748': attribute type 64 has an invalid length.
[  624.470391][T20148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5748'.
[  624.476867][T20148] A link change request failed with some changes committed already. Interface 26]0 may have been left with an inconsistent configuration, please check.
[  624.514679][T17358] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  624.604339][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  624.627285][T17358] syz_tun (unregistering): left allmulticast mode
[  624.630599][T17358] syz_tun (unregistering): left promiscuous mode
[  624.763265][T17358] team0: Port device syz_tun removed
[  625.394477][ T5438] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.528727][ T4990] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  625.549558][ T4990] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  625.556913][ T4990] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  625.562798][ T4990] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  625.566105][ T4990] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  625.618890][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  625.639120][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  625.641588][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  625.644386][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  625.647163][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  625.816617][ T5438] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.916201][ T5438] bond0: (slave netdevsim1): Releasing backup interface
[  625.931277][ T5438] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  626.024291][ T5438] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  626.289336][T20194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5765'.
[  626.576025][ T5438] bridge_slave_1: left allmulticast mode
[  626.581347][ T5438] bridge_slave_1: left promiscuous mode
[  626.588739][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.599219][ T5438] bridge_slave_0: left allmulticast mode
[  626.601607][ T5438] bridge_slave_0: left promiscuous mode
[  626.607450][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.435260][ T5438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  627.440221][ T5438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  627.444282][ T5438] bond0 (unregistering): Released all slaves
[  627.464782][T20213] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  627.715899][ T4990] Bluetooth: hci1: command tx timeout
[  627.962777][T20165] bridge0: port 1(bridge_slave_0) entered blocking state
[  627.970275][T20165] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.992673][T20165] bridge_slave_0: entered allmulticast mode
[  628.000448][T20165] bridge_slave_0: entered promiscuous mode
[  628.030304][T20165] bridge0: port 2(bridge_slave_1) entered blocking state
[  628.046919][T20165] bridge0: port 2(bridge_slave_1) entered disabled state
[  628.053278][T20165] bridge_slave_1: entered allmulticast mode
[  628.082662][T20165] bridge_slave_1: entered promiscuous mode
[  628.098845][ T5347] 8021q: adding VLAN 0 to HW filter on device eth25
[  628.163759][T20165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  628.206909][ T5438] hsr_slave_0: left promiscuous mode
[  628.209216][ T5438] hsr_slave_1: left promiscuous mode
[  628.211390][ T5438] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  628.214146][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_0
[  628.217850][ T5438] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  628.246079][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_1
[  628.264771][ T5438] veth1_macvtap: left promiscuous mode
[  628.281739][ T5438] veth0_macvtap: left promiscuous mode
[  628.283663][ T5438] veth1_vlan: left promiscuous mode
[  628.285700][ T5438] veth0_vlan: left promiscuous mode
[  628.531904][ T5438] team_slave_1 (unregistering): left promiscuous mode
[  628.535084][ T5438] team0 (unregistering): Port device team_slave_1 removed
[  628.545900][ T5438] team_slave_0 (unregistering): left promiscuous mode
[  628.548608][ T5438] team0 (unregistering): Port device team_slave_0 removed
[  628.660974][T20165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  628.750097][T20165] team0: Port device team_slave_0 added
[  628.771538][T20165] team0: Port device team_slave_1 added
[  628.968501][T20165] batman_adv: batadv0: Adding interface: batadv_slave_0
[  629.008362][T20165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  629.061240][T20165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  629.183160][T20165] batman_adv: batadv0: Adding interface: batadv_slave_1
[  629.205739][T20247] loop9: detected capacity change from 0 to 2048
[  629.207933][T20165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  629.543136][T20165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  629.555090][T20251] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  629.663832][ T5438] IPVS: stop unused estimator thread 0...
[  629.795575][ T4990] Bluetooth: hci1: command tx timeout
[  629.822789][T20251] NILFS (loop9): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  629.857932][T20165] hsr_slave_0: entered promiscuous mode
[  629.867406][T20251] NILFS error (device loop9): nilfs_bmap_propagate: broken bmap (inode number=4)
[  629.888163][T20165] hsr_slave_1: entered promiscuous mode
[  630.109241][T20251] Remounting filesystem read-only
[  630.126650][ T5347] 8021q: adding VLAN 0 to HW filter on device eth26
[  631.884820][ T4990] Bluetooth: hci1: command tx timeout
[  633.975966][ T4990] Bluetooth: hci1: command tx timeout
[  635.185457][    C0] sched: DL replenish lagged too much
[  671.675200][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  671.712544][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  672.268178][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  672.465337][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  672.470529][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  674.756132][ T5801] Bluetooth: hci3: command tx timeout
[  675.205214][ T5347] 8021q: adding VLAN 0 to HW filter on device eth27
[  676.855566][ T5801] Bluetooth: hci3: command tx timeout
[  678.420650][ T4990] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  678.438716][ T4990] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  678.885521][ T4990] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  678.917462][ T4990] Bluetooth: hci3: command tx timeout
[  678.962427][ T4990] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  679.032674][ T4990] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  681.035944][ T4990] Bluetooth: hci3: command tx timeout
[  682.239769][ T4990] Bluetooth: hci4: command tx timeout
[  684.385924][ T4990] Bluetooth: hci4: command tx timeout
[  686.042560][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  686.448933][ T5801] Bluetooth: hci4: command tx timeout
[  688.515590][ T5801] Bluetooth: hci4: command tx timeout
[  703.265425][ T5801] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  703.998125][ T5801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  706.065624][T20311] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  729.930945][ T5347] 8021q: adding VLAN 0 to HW filter on device eth28
[  747.491962][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  749.701549][ T5801] Bluetooth: hci1: command 0x0406 tx timeout
[  753.136411][T20285] syz_tun (unregistering): left allmulticast mode
[  756.917153][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  756.931235][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  756.937981][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  756.944072][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  756.975023][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  757.272549][T16641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  757.573082][T16641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  757.584635][T16641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  757.622509][T16641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  757.706183][T16641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  757.711701][T16641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  758.128338][T16641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  758.145297][T16641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  758.157196][T16641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  758.661623][T16641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  761.145627][T16641] Bluetooth: hci0: command tx timeout
[  761.655594][T16641] Bluetooth: hci2: command tx timeout
[  761.660249][T16641] Bluetooth: hci5: command tx timeout
[  763.235676][T20334] Bluetooth: hci0: command tx timeout
[  763.915490][T20334] Bluetooth: hci5: command tx timeout
[  763.917373][T20334] Bluetooth: hci2: command tx timeout
[  765.585548][T16641] Bluetooth: hci0: command tx timeout
[  766.025753][T16641] Bluetooth: hci2: command tx timeout
[  766.027517][T16641] Bluetooth: hci5: command tx timeout
[  767.882341][T20334] Bluetooth: hci0: command tx timeout
[  768.284483][T20334] Bluetooth: hci5: command tx timeout
[  768.286646][T20334] Bluetooth: hci2: command tx timeout
[  808.923127][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  810.029130][T20334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  810.360221][T20334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  810.375330][T20334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  810.385448][T20334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  810.391329][T20334] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  813.095729][T20334] Bluetooth: hci3: command tx timeout
[  814.499414][ T5438] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  815.165190][T20334] Bluetooth: hci3: command tx timeout
[  815.853856][T16641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  815.865505][T16641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  815.932512][T16641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  816.017666][T16641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  816.037056][T16641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  816.501737][ T5438] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  817.615764][ T5801] Bluetooth: hci3: command tx timeout
[  817.641700][ T5801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  818.306134][ T5801] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  818.329938][ T5801] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  818.335466][ T5801] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  818.340051][ T5801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  819.273381][T20334] Bluetooth: hci4: command tx timeout
[  819.869413][T20334] Bluetooth: hci3: command tx timeout
[  820.519662][T20334] Bluetooth: hci6: command tx timeout
[  821.354952][T20334] Bluetooth: hci4: command tx timeout
[  822.600764][T20334] Bluetooth: hci6: command tx timeout
[  823.416036][T20334] Bluetooth: hci4: command tx timeout
[  824.715469][T20334] Bluetooth: hci6: command tx timeout
[  825.735580][T20334] Bluetooth: hci4: command tx timeout
[  827.025588][T20334] Bluetooth: hci6: command tx timeout
[  857.989117][ T5438] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  857.992276][ T5438] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.364685][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  874.007399][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  874.116529][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  874.122768][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  874.131874][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  874.140280][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  877.557908][ T5801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  878.679330][ T5801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  878.697055][ T5801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  878.746863][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  878.787426][ T4990] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  878.799532][ T5801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  878.896790][T16641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  879.002177][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  879.007761][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  879.044226][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  879.965992][ T5801] Bluetooth: hci1: command tx timeout
[  881.202724][T20334] Bluetooth: hci5: command tx timeout
[  882.305882][T20334] Bluetooth: hci0: command tx timeout
[  882.309466][T20334] Bluetooth: hci1: command tx timeout
[  883.442096][ T5801] Bluetooth: hci5: command tx timeout
[  884.525581][ T5801] Bluetooth: hci1: command tx timeout
[  884.527356][ T5801] Bluetooth: hci0: command tx timeout
[  885.482826][T20334] Bluetooth: hci5: command tx timeout
[  886.715621][T20334] Bluetooth: hci0: command tx timeout
[  886.717914][T20334] Bluetooth: hci1: command tx timeout
[  887.585495][T20334] Bluetooth: hci5: command tx timeout
[  888.835904][T20334] Bluetooth: hci0: command tx timeout
[  896.750880][ T5438] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  896.754704][ T5438] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  932.249190][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  935.846340][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  935.864700][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  935.975474][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  936.324659][T16641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  936.342535][T16641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  939.417303][T20334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  939.516587][T20334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  939.997811][T20334] Bluetooth: hci2: command tx timeout
[  940.006072][T20334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  940.012840][T20334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  940.068735][T20334] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  942.325812][T16641] Bluetooth: hci2: command tx timeout
[  942.328111][T16641] Bluetooth: hci3: command tx timeout
[  942.511927][ T5438] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  944.297913][ T5438] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  944.365504][T20334] Bluetooth: hci3: command tx timeout
[  944.367460][T20334] Bluetooth: hci2: command tx timeout
[  946.517155][T16641] Bluetooth: hci2: command tx timeout
[  946.519326][T16641] Bluetooth: hci3: command tx timeout
[  948.625773][T20334] Bluetooth: hci3: command tx timeout
[  949.182747][T16641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  949.576740][T16641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  949.582727][T16641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  949.590302][T16641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  949.594747][T16641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  951.806703][T16641] Bluetooth: hci4: command tx timeout
[  953.875930][T16641] Bluetooth: hci4: command tx timeout
[  956.145568][T16641] Bluetooth: hci4: command tx timeout
[  958.378735][T16641] Bluetooth: hci4: command tx timeout
[  991.415534][ T5438] bridge_slave_1: left allmulticast mode
[  991.786043][ T5438] bridge_slave_1: left promiscuous mode
[  991.790251][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state
[  993.605429][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  997.351647][ T5438] x9: left allmulticast mode
[  997.965428][ T5438] x9: left promiscuous mode
[  997.992862][T20334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  998.528855][ T5438] bridge0: port 1(1x9) entered disabled state
[  998.533665][T20334] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  998.540170][T20334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  998.672359][T20334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  998.677156][T20334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1000.147755][T16641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1000.628493][T16641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1000.641070][T16641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1000.653674][T16641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1000.658706][T16641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1001.075711][ T5801] Bluetooth: hci0: command tx timeout
[ 1003.155555][T16641] Bluetooth: hci0: command tx timeout
[ 1003.326090][T16641] Bluetooth: hci1: command tx timeout
[ 1005.235665][T16641] Bluetooth: hci0: command tx timeout
[ 1005.395560][T16641] Bluetooth: hci1: command tx timeout
[ 1006.439063][T20334] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1006.451392][T20334] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1006.457648][T20334] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1006.467468][T20334] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1007.036350][T20334] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1007.335823][T20334] Bluetooth: hci0: command tx timeout
[ 1007.477303][T20334] Bluetooth: hci1: command tx timeout
[ 1009.397291][T20334] Bluetooth: hci5: command tx timeout
[ 1009.555565][T20334] Bluetooth: hci1: command tx timeout
[ 1011.475530][T20334] Bluetooth: hci5: command tx timeout
[ 1013.555547][T20334] Bluetooth: hci5: command tx timeout
[ 1015.645970][T20334] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
07:49:23  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b3a99a RBX=ffff888121028368 RCX=ffff888121028468 RDX=ffff8881210283e8
RSI=ffff888121028368 RDI=ffff888121028208 RBP=dffffc0000000000 RSP=ffffc90000007d20
R8 =ffffffff90574c37 R9 =1ffffffff20ae986 R10=dffffc0000000000 R11=fffffbfff20ae987
R12=ffff8881210281c0 R13=0000000000000002 R14=ffff8881210283e8 R15=000000ecfead560e
RIP=ffffffff81b47a30 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6436f64800 ffffffff 00c00000
GS =0000 ffff88818d952000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3d1202fc4e CR3=00000001169ae000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81749a12 RBX=000000000000000f RCX=ffff8881604f0000 RDX=0000000000000000
RSI=000000000000000f RDI=0000000000000003 RBP=ffffc90000197f10 RSP=ffffc90000197e38
R8 =ffff88823c623fcb R9 =1ffff110478c47f9 R10=dffffc0000000000 R11=ffffed10478c47fa
R12=0000000000000000 R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff81749a13 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a8f52000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3d101f2238 CR3=000000000e946000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00005555574c4b08
XMM02=8188e7884e6c446e cc3742b70f8d91ce XMM03=0376c00bfe44550c 7ad6613697522ace
XMM04=ffffffff0428030f ffffffffffff0418 XMM05=010fffffffffffff 0400040100000008
XMM06=06060179e20fffff ffffffff0448030f XMM07=ffffffffffff0438 030fffffffffffff
XMM08=0428030fffffffff ffff04180376c00b XMM09=5f5f207220363833 3532656139666666
XMM10=666e69646f6d5f44 495f455551494e55 XMM11=6666666666666666 0a38313433315f6f
XMM12=6666666666660a38 303533315f6f666e XMM13=555f5f2072203737 3536326561396666
XMM14=6f666e69646f6d5f 44495f455551494e XMM15=3966666666666666 660a39303533315f
