last executing test programs:

15m17.862955184s ago: executing program 32 (id=356):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==")
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80, 0x6}, 'port1\x00', 0x54, 0x110004, 0xc1af, 0x1, 0x9, 0xfffffffc, 0xf35, 0x0, 0x1, 0x8})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0)

13m47.975730878s ago: executing program 33 (id=1046):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r2, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x0, 0x0, 0x0, 0x3})
ioctl$HIDIOCGUSAGE(r1, 0xc0105b08, &(0x7f0000000000)={0x1, 0xfffffffe, 0x7, 0x0, 0x110001})

13m44.203675558s ago: executing program 34 (id=1186):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010003008500000082000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b93a7ed387dbe9abe57c48a773", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

13m25.629492057s ago: executing program 35 (id=1360):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000002440)={0x0, 0x0, 0x0, @raw})

12m23.009400619s ago: executing program 36 (id=2123):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nobarrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$eJzs3U1vG0UfAPD/bt7atE+TSs+Bl4sFSERCJE3aApVAIuLCoT3RA0es2C1RnQYlRqJVxItA3EAC8QHgAHwEjnDgO8AZOEClCOVAys1o7V3HxHbapA6ukt9PGnlmZ+2Z9XjW68nsJIBjqxQRL0fESESci4ipfHuah3i/FbL9trc2lv7e2lhKotF47c8kknxb8VpJ/ngqf4GZNCL9KInHe5S7fuv2jXKtVl3L03P1lbfm1m/dfnZ5pXy9er16c+G58xcuXnzh0sLzAzvWzZXkk6e+ufzbZx9XPv/pj++ns/qezvM6j2NQSlFqvye7XRp0YUN2oiOejA6xIgAA7CnNr/1Hm9f/UzESOxdvU/Hpj0OtHAAAADAQjUbxCAAAABxdid/+AAAAcMQV8wC2tzaWijDE6Qj8xzYXI2K61f5389DKGW3f0zu26/7eQSpFxKsnrixkIQ7pPmwAAACA4+yHxdbCf93jf2k80rHfyYiYLNb2G6DSrnT3+E96Z8BF0mFzMeLFiLjbNf6XFrtMj+Sp/zWHCseSa8u16rmIOBMRMzE2kaXn9yjj3SdufNsvr3P878tfX5/Pys8ed/ZI74xO/Ps5lXK9/CDHzI7NDyIeG+3V/kl7zLdzncyDeGN5+6V+eVn7Z+1dhO725zA1vop4umf/31m5NNl7fda55vlgLj8rTHSX8cvprz/sV35n/89CVn7xtwAOX9b/J/du/+Y6ue31etf3X8Z3f135uV/evdu/9/l/PLnarOB4vu2dcr2+Nh8xnlzu3u7T1Fa8H8X7lbX/zJO9v/+L678k/+4/07E+9H688t7Zq/3y9P/hytq/sq/+v//Im5OPzvQr//76/4VmZYoXcf13b/fbQMOuJwAAAAAAAACDkTbn9iXpbDueprOzrXm+/4/JtLa6Xn/m2urbNyutOYDTMZYW8z+nOuaDzrduI2+nF3alz0fE2Yj4YupkMz27tFqrDPvgAQAA4Jg41ef3f+b3g9zsAQAAADycpoddAQAAAODQ+f0PAAAAR9qDrOtfq64V/yLogE8XETlYZCT/4D0s9Tl6kSGelAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIfwIAAP//keS8Nw==")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

12m10.570331575s ago: executing program 37 (id=2255):
socket$packet(0x11, 0x3, 0x300)
socket$unix(0x1, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xd}}}, 0x24}}, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="163280", 0x3}], 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

12m8.845383036s ago: executing program 38 (id=2269):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002a80), r0)
sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f00000001c0)={0x14, r1, 0x5, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40060)

11m47.65690684s ago: executing program 39 (id=2461):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}}, 0x4001)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

11m30.805690448s ago: executing program 40 (id=2593):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x2})

10m27.564371254s ago: executing program 41 (id=3154):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r0, 0x1)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000001c0)=0xc, 0x4)
connect$bt_rfcomm(r0, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)

9m35.436325393s ago: executing program 42 (id=3650):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x6c00}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40)

7m43.714736436s ago: executing program 43 (id=4632):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x7fffffe, 0xc0, [0x200000000140, 0x80000000000, 0x10, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x138)

7m27.103482955s ago: executing program 44 (id=4947):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

7m23.688050838s ago: executing program 45 (id=4968):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000003f40), 0xfe, 0x2a4, &(0x7f0000000a80)="$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")
creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9)
symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc5)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000000)=""/27, 0x1b)

7m13.802830554s ago: executing program 2 (id=5012):
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc0000000000000014000000000000000100000041"], 0x4c}, 0x20001850)

7m13.80273069s ago: executing program 2 (id=5013):
r0 = socket(0x2000000000000021, 0x2, 0x2)
shutdown(r0, 0x2)

7m13.725093782s ago: executing program 2 (id=5014):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000000)={[{@creator={'creator', 0x3d, 'r0\a('}}, {@force}, {@nls={'nls', 0x3d, 'iso8859-9'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==")
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)

7m13.69505451s ago: executing program 2 (id=5015):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
umount2(&(0x7f0000000380)='./file0\x00', 0x4)

7m13.594472802s ago: executing program 2 (id=5016):
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1ef, &(0x7f0000000b80)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00))
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

7m13.390482486s ago: executing program 2 (id=5017):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4})
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1)
ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29)

7m13.317904801s ago: executing program 46 (id=5017):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4})
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1)
ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29)

6m15.964974217s ago: executing program 7 (id=5494):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)

6m15.307727197s ago: executing program 7 (id=5498):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x8401, 0x0)
ppoll(&(0x7f0000000bc0)=[{r0, 0x182}], 0x1, 0x0, 0x0, 0x0)

6m15.121939418s ago: executing program 7 (id=5499):
r0 = syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x80000, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',allow_other,default_permissions,max_read=0x0000000000000002,blksize=0x0000000000001e00,default_permissions,allow_other,max_read=0x0000000000000401,obj_user={,'], 0x1, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x184)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000640)=ANY=[@ANYRESDEC=r1, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRESDEC=r0], 0xb, 0x0, &(0x7f0000000000))
sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file0\x00', 0x2000898, &(0x7f00000003c0), 0x1, 0x55ae, &(0x7f000000abc0)="$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")
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'})
lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[], 0x32600)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f00000005c0)={[{@rodir}, {@utf8}, {@shortname_lower}, {@fat=@dos1xfloppy}, {@shortname_win95}, {@fat=@nfs_stale_rw}, {@shortname_winnt}, {@shortname_win95}, {@shortname_winnt}]}, 0xfc, 0x2b8, &(0x7f0000000300)="$eJzs3EFr02AYwPGnXbt2HVt7EhTEB73oJWz1ExTZQCwocxX1IGQu1dLYjqZWKuJ2E29+juHRm+D8Art48y5ehiB42UEWadLYtBQ3Z7vM7f+DkWd53yfvmzYbTwJ5d+6+eVItO0bZbEo8rRIX2ZBdkVwn6opJwtvGvXhSwjbkyvSPz+dv37t/o1AsLiypLhaWr+ZVdfbCh2cv3l782Jy+8272fUq2cw92vue/bJ/ZPruztxwcvd5UU1fq9aa5Ylu6WnGqhuot2zIdSys1x2r0tZft+tpaW83a6kxmrWE5jpq1tlattjbr2my01XxkVmpqGIbOZOS0mfjrjNLm0pJZGMtkEIWpYTsbjYI54TfGJBZuKW0e2cwAAMCxcbD63zfK+v9xxdGKo7X96v+4UP+Pj1f/7w0tGnEyJDs3AAUz0/377Uf9DwAAAAAAAAAAAAAAAAAAAADA/2DXdbOu62aDbfCTEpG0iAS/Rz1PjMchvv9YhNPFiIVe3EuL2K9apVbJ3/rthbJUxBZL5pIiP73rocuPF68XF+bUk5Mte72b770kmAryA7nh+fN+voby11ulpGTC4+f99w6H5ecH8pMi0ipNyuVLoXxDsvLpodTFllXvOL38l/Oq124WB8af8voBAAAAAHASGPpbrv/+119N0jA0WDZkoN3f2Xs+INl9ng+obE1KLz8h5xLRnTcAAAAAAKeJ035eNW3banQCSYg0+vaMPpge25GPNhj46AaC18dghqMPjLR/0fyxs+u6651O/z5oXEQiOtNvInL0n3NKRMY6xNen/hd4kM5R/lcCAAAAMA69oj/qmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHoddPGwoP9h1h4LDTcRzVkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8OvAAAA//8XzBeO")
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0)
ioctl$SNDCTL_DSP_POST(r4, 0x5008, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="2c0000001500210026bd7000fedbdf250a"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)

6m13.160245234s ago: executing program 7 (id=5512):
close(0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x43, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fsetxattr(r0, 0x0, 0x0, 0x0, 0x1)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0)
mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0)
umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1)

6m12.684178273s ago: executing program 7 (id=5516):
syz_mount_image$ubifs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x0, &(0x7f0000000100)={[{@auth_key={'auth_key', 0x3d, 'md5'}}, {@bulk_read}, {@auth_hash_name={'auth_hash_name', 0x3d, 'md5'}}, {@compr_none}, {@auth_key={'auth_key', 0x3d, ',&(]{[]$?\']'}}, {@no_bulk_read}, {@norm_unmount}, {@no_chk_data_crc}, {@auth_hash_name={'auth_hash_name', 0x3d, 'md5'}}, {@bulk_read}, {@compr_zstd}, {@compr_zlib}]}, 0xfd, 0x9e19, &(0x7f0000009e80)="$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")

6m12.406327641s ago: executing program 7 (id=5517):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}, 0x0, 0x0, 0x0}, 0x0)

6m12.360533896s ago: executing program 47 (id=5517):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}, 0x0, 0x0, 0x0}, 0x0)

5m7.869999737s ago: executing program 8 (id=6178):
socket$inet6(0xa, 0x1, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000213000/0x2000)=nil, 0x2000, 0xb, 0x11, r0, 0x180000000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

5m7.816722755s ago: executing program 8 (id=6181):
syz_emit_ethernet(0x196, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x160, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0xa, "bd3e6d4706598080a80300378927fc503b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x1e, "77f902045490290b6e87f278e94724e20c43c95f9b49204a64d614d4cc9d0d46d954fda9a75d076993e3b87aa99b2454a86662e37b42678a74974ddd50b21e499efae61e3a816a367d019bc7f892d8975f1fc8a3e27139041cd21d2d12f30ee6f029d8d73f80f9b19d138598345b9c0feda226b333c55c668fb17b5b39603ee66b8534f1fbf97e139d35762307516482a1787d8f3bb76940602a0104ac045b59510dfd944672de5f77c0e6136c06847bbe70dd65236ef4d112e88fabc57d02a2a380eb697adf4e1d9090705f85ddf041bc076775f5d27555d3f60c44192fa92eee16828c1c4aa17f4a743e212cd2"}]}}}}}}, 0x0)

5m7.736103536s ago: executing program 8 (id=6183):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000000000008ec13060000000000000109022400010000200209040000090300000009210b00020122250009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200629"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0xd0)

5m5.994967364s ago: executing program 8 (id=6196):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2008802, &(0x7f00000003c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000006605,errors=remount-ro,uid=', @ANYRESDEC=0x0, @ANYBLOB=',iocharset=cp936,namecase=1,keep_last_dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c646d61736b3d30303030303030303030303030303030303030303030312c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00ae5a637b4cdf7db6ca2f1ee004696a9f8eba64f9abbe6ed336b9977b9f7da99c5f427d615381f8cc01febda6eacc"], 0x2, 0x1530, &(0x7f00000014c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)

5m5.852275876s ago: executing program 8 (id=6197):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, 0x0)

5m5.309831346s ago: executing program 8 (id=6200):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], 0x1, 0x4ac, &(0x7f00000009c0)="$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")
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

5m5.204649632s ago: executing program 48 (id=6200):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], 0x1, 0x4ac, &(0x7f00000009c0)="$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")
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

2m54.950463306s ago: executing program 1 (id=7801):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x90, 0x0, 0x8, {0x1, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, {0x400a, 0x200000000, 0x0, 0x6, 0x3, 0x0, 0x0, 0xfffffbff, 0x2, 0x6000, 0x2, 0xffffffffffffffff, 0x0, 0x101, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
lstat(&(0x7f0000008300)='./file0/file0/file0\x00', 0x0)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x2d, 0x0, 0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)

2m54.77949096s ago: executing program 1 (id=7802):
r0 = syz_open_dev$vbi(&(0x7f0000000280), 0x1, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x0, [0xff, 0x5, 0x8, 0x7f7f, 0x8, 0x7fe, 0x7, 0xfffa, 0x42b7, 0x1, 0x2, 0x10, 0x3fd, 0x5, 0x8008, 0x2, 0x7, 0x4, 0x7f, 0xfffd, 0x4, 0x3, 0x97, 0x457f, 0x6, 0x5, 0x81, 0x1, 0x8, 0x8544, 0xb, 0x85, 0x3, 0x7685, 0x98bd, 0x80, 0x8000, 0x8, 0x5, 0xc, 0x0, 0x5, 0x3, 0xf, 0x8, 0x6, 0x0, 0x8], 0x6})

2m54.779310413s ago: executing program 1 (id=7803):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x103881, 0x0)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000001040)='d', 0x1}], 0x1)

2m54.091424133s ago: executing program 1 (id=7809):
mkdir(&(0x7f0000000200)='./file0\x00', 0x88)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

2m54.091106115s ago: executing program 1 (id=7810):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349", @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESDEC=0x0], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
openat$mice(0xffffffffffffff9c, 0x0, 0x101)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0xa8, 0x0, &(0x7f00000005c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@fda={0x66646185, 0x0, 0x1, 0x27}, @fda={0x66646185, 0x7, 0x0, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x11}}, &(0x7f0000000340)={0x0, 0x20, 0x40}}}, @dead_binder_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0xffffffffffffff35, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x1}, @fda={0x66646185, 0x1, 0x1, 0x12}, @fda={0x66646185, 0x7, 0x0, 0x3e}}, &(0x7f0000000580)={0x0, 0x18, 0x38}}, 0x40}, @dead_binder_done], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000007c0)={0x0, 0xfddb, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x80)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}}, 0x40080c4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x800)
ioctl$SNDRV_PCM_IOCTL_DROP(r6, 0x4143, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000bc0)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
io_setup(0x7ff, 0x0)
io_submit(0x0, 0x0, &(0x7f0000004500))
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r8, &(0x7f0000000480)=""/74, 0x4a)

2m53.261666826s ago: executing program 1 (id=7820):
r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000000))

2m53.203096417s ago: executing program 49 (id=7820):
r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000000))

1m14.74232826s ago: executing program 0 (id=9100):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00')
pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)

1m14.67182387s ago: executing program 0 (id=9103):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1m14.192362s ago: executing program 0 (id=9115):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
dup(0xffffffffffffffff)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

1m14.139895071s ago: executing program 0 (id=9118):
getpgid(0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000580)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x3f2}}, {@noload}]}, 0x3, 0x482, &(0x7f0000001240)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b)
getdents(r0, &(0x7f0000001900)=""/76, 0x20000)

1m14.032276691s ago: executing program 0 (id=9122):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000003c0)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@utf8}, {@utf8no}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@utf8no}, {@utf8}, {@rodir}, {@shortname_lower}, {@numtail}]}, 0x1, 0x371, &(0x7f0000000c00)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)

1m13.582365316s ago: executing program 0 (id=9128):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0x4000}, 0xc)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)

1m13.407510784s ago: executing program 50 (id=9128):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0x4000}, 0xc)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)

1m10.941823813s ago: executing program 3 (id=9130):
unshare(0x28040600)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x3c)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)

1m10.822858166s ago: executing program 3 (id=9146):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x4044000)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="12030000000000000a000100aaaa"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)

1m10.822579662s ago: executing program 3 (id=9147):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x11, 0x286237e8b9b45828)

1m10.751286287s ago: executing program 3 (id=9148):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x1533, &(0x7f0000006800)="$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")
rename(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000080)='.\x02\x00')
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

1m10.643051407s ago: executing program 3 (id=9149):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0xab8, 0x0, 0x100000})

1m9.271422148s ago: executing program 3 (id=9153):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4e, 0x40, 0x5, 0x80, 0x7c, 0x80, 0x9, 0x40, 0x7f, 0x7, 0x9, 0x40, 0x9e, 0x8}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={<r1=>0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x6, 0x8000, 0x208, 0xfffffffc, 0x0, 0x3ff, 0x91, 0x1, r1}, &(0x7f0000000280)=0x20)

1m9.073557748s ago: executing program 51 (id=9153):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4e, 0x40, 0x5, 0x80, 0x7c, 0x80, 0x9, 0x40, 0x7f, 0x7, 0x9, 0x40, 0x9e, 0x8}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={<r1=>0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x6, 0x8000, 0x208, 0xfffffffc, 0x0, 0x3ff, 0x91, 0x1, r1}, &(0x7f0000000280)=0x20)

41.804356252s ago: executing program 5 (id=9504):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0)

41.735667863s ago: executing program 5 (id=9505):
r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046})
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)={0x0, 0xe, 0x2, "c5d0"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000800)={0x0, 0x15, 0xf, "91b259ed6b6599aefd61ef4e17eea5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x19, 0x2, "9ed2"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000006c0)={0x40, 0x12, 0x2, "00a3"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="000502"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

39.190969008s ago: executing program 5 (id=9535):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x9, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @generic='x']}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

39.076028176s ago: executing program 5 (id=9537):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000180)="$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")
open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

38.965130912s ago: executing program 5 (id=9542):
syz_mount_image$minix(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1, 0x1cc, &(0x7f0000000280)="$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")

38.610342339s ago: executing program 5 (id=9547):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
prlimit64(0x0, 0x2, &(0x7f0000000000)={0x1000000000000009, 0xffffffffffffffff}, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)

38.37992396s ago: executing program 52 (id=9547):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
prlimit64(0x0, 0x2, &(0x7f0000000000)={0x1000000000000009, 0xffffffffffffffff}, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)

2.544030797s ago: executing program 9 (id=9835):
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04225506"], 0x58)

2.180531278s ago: executing program 9 (id=9836):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x1, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f00000007c0)="30e3f3f827fa8c24a9", 0x9}], 0x1, 0x0, 0x0, 0x10}, 0x20040040)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84)

2.117571674s ago: executing program 9 (id=9837):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0041, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000039000100faff0700040000000000040004"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffedd}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket(0x10, 0x803, 0x0)
bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000040)={0x6808a5d9, 0x7, 0x1000, 0xfff, 0x5, "02126830d85ee00a4024294c9b928494cec629", 0x5, 0x1})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

1.489707183s ago: executing program 9 (id=9842):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)

1.328756665s ago: executing program 4 (id=9844):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000180), 0xd5, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001a80)={r0, &(0x7f00000000c0)="97", &(0x7f0000000040)=""/60}, 0x20)

1.257676999s ago: executing program 4 (id=9846):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@inode32}, {@swalloc}, {@prjquota}]}, 0x1, 0x98aa, &(0x7f000001c880)="$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")

1.165279106s ago: executing program 9 (id=9847):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r0, &(0x7f00000078c0)={&(0x7f00000077c0)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14, &(0x7f0000007880)={&(0x7f0000007800)="378ffe92d978a8b4a607c75a72d4ced5d3969ea4bb18b070ee6a76ae56e449005b41001d7a591b786bcbc4783c5f2bedbfdd04e3043f5abcec86bbbd100ec618f3f558dab607daf4d67c230c71898c7617c022696ad2abb8e005902fada449f0c8e03b60400028a6ef71447961", 0x6d}}, 0x0)

1.08011017s ago: executing program 9 (id=9848):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01)
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f022})
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(r1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={<r4=>r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000400)={r4}, &(0x7f0000000500)=0x8)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, 0x0, 0x0, 0x40800)
recvmsg(r6, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009cb5984071042903dadb00000001090212"], 0x0)
syz_emit_vhci(0x0, 0xd)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket(0x10, 0x3, 0x0)
write(r8, 0x0, 0x0)
sendmsg$nl_xfrm(r7, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @pix={0x9, 0x1000, 0x32314d56, 0x8, 0xfffffffe, 0x0, 0x5, 0x40, 0x1, 0x3, 0x0, 0x3}})

719.229099ms ago: executing program 6 (id=9851):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x1, 0x3}, 0x10)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

609.730657ms ago: executing program 6 (id=9852):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e6576650000500002800500080000000000040006000500090001000000050003000900000005000a00010000000500"], 0x88}}, 0x0)

609.389779ms ago: executing program 4 (id=9853):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x3, 0x800000, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x0, 0x1, 0x2}, 0x800}}, 0xb8}}, 0x2c000010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10)

537.933828ms ago: executing program 6 (id=9854):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
sendfile(r2, r3, 0x0, 0xffffffff004)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, 0x0, 0x0, 0x40800)

228.52182ms ago: executing program 4 (id=9855):
r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000880), 0x60)
r3 = fsmount(r0, 0x0, 0x1)
syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)

227.604454ms ago: executing program 6 (id=9856):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8001, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20010055}, 0x24040004)

60.533461ms ago: executing program 4 (id=9857):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0xb, 0x4, 0x3}, 0x50)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r0, &(0x7f0000000200)}, 0x20)

60.347659ms ago: executing program 6 (id=9858):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x4}]}]}, 0x38}}, 0x0)

180.394µs ago: executing program 4 (id=9859):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x12, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916680000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad430100000000009500000000000000150000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @cgroup_sock_addr=0x20}, 0x94)
write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))

0s ago: executing program 6 (id=9860):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680))
clock_settime(0x0, &(0x7f0000000240)={0x77359400})

kernel console output (not intermixed with test programs):

lan 0003:04F3:0755.0042: failed to start in urb: -90
[  923.005797][   T10] elan 0003:04F3:0755.0042: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0
[  923.034188][T12054] usb 1-1: Using ep0 maxpacket: 32
[  923.037212][T12054] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  923.039833][T12054] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  923.042870][T12054] usb 1-1: config 0 has no interface number 0
[  923.045035][T12054] usb 1-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  923.051915][T12054] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  923.055312][T12054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  923.058906][T12054] usb 1-1: Product: syz
[  923.060577][T12054] usb 1-1: Manufacturer: syz
[  923.062303][T12054] usb 1-1: SerialNumber: syz
[  923.067278][T12054] usb 1-1: config 0 descriptor??
[  923.070747][T12054] hub 1-1:0.89: bad descriptor, ignoring hub
[  923.072697][T12054] hub 1-1:0.89: probe with driver hub failed with error -5
[  923.075481][T12054] option 1-1:0.89: GSM modem (1-port) converter detected
[  923.444383][T30378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  923.460170][T30378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  923.468287][T30378] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8871'.
[  923.492353][T25341] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  923.496303][T30378] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8871'.
[  923.500544][T25341] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  923.507419][T25341] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  923.511212][T25341] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  923.863549][T12054] usb 1-1: USB disconnect, device number 87
[  923.867481][T12054] option 1-1:0.89: device disconnected
[  924.000245][T30419] loop0: detected capacity change from 0 to 2048
[  924.006545][T30419] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  924.024833][   T10] usb 10-1: USB disconnect, device number 41
[  924.057464][T30422] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  924.061936][T30419] syz.0.8890: attempt to access beyond end of device
[  924.061936][T30419] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  924.101209][T30419] syz.0.8890: attempt to access beyond end of device
[  924.101209][T30419] loop0: rw=0, sector=33554430, nr_sectors = 2 limit=2048
[  924.109283][T30424] netlink: 'syz.9.8892': attribute type 29 has an invalid length.
[  924.112624][T30419] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=3)
[  924.114899][T30424] netlink: 'syz.9.8892': attribute type 29 has an invalid length.
[  924.313243][T30433] loop9: detected capacity change from 0 to 256
[  924.352877][T30433] FAT-fs (loop9): Directory bread(block 64) failed
[  924.356848][T30433] FAT-fs (loop9): Directory bread(block 65) failed
[  924.364005][T30433] FAT-fs (loop9): Directory bread(block 66) failed
[  924.366308][T30433] FAT-fs (loop9): Directory bread(block 67) failed
[  924.370516][T30433] FAT-fs (loop9): Directory bread(block 68) failed
[  924.372659][T30433] FAT-fs (loop9): Directory bread(block 69) failed
[  924.380317][T30433] FAT-fs (loop9): Directory bread(block 70) failed
[  924.382872][T30433] FAT-fs (loop9): Directory bread(block 71) failed
[  924.387302][T30428] loop0: detected capacity change from 0 to 32768
[  924.392192][T30433] FAT-fs (loop9): Directory bread(block 72) failed
[  924.402146][T30428] ERROR: (device loop0): diAllocAG: nfreeinos = 0, but iag on freelist
[  924.402146][T30428] 
[  924.409730][T30433] FAT-fs (loop9): Directory bread(block 73) failed
[  924.415877][T30428] ERROR: (device loop0): remounting filesystem as read-only
[  924.419410][T30428] ialloc: diAlloc returned -5!
[  924.512469][T30439] loop9: detected capacity change from 0 to 256
[  924.538740][T30439] FAT-fs (loop9): Directory bread(block 64) failed
[  924.543034][T30439] FAT-fs (loop9): Directory bread(block 65) failed
[  924.548349][T30439] FAT-fs (loop9): Directory bread(block 66) failed
[  924.555083][T30439] FAT-fs (loop9): Directory bread(block 67) failed
[  924.563374][T30439] FAT-fs (loop9): Directory bread(block 68) failed
[  924.569255][T30439] FAT-fs (loop9): Directory bread(block 69) failed
[  924.574110][T30439] FAT-fs (loop9): Directory bread(block 70) failed
[  924.578268][T30439] FAT-fs (loop9): Directory bread(block 71) failed
[  924.586893][T30439] FAT-fs (loop9): Directory bread(block 72) failed
[  924.590790][T30439] FAT-fs (loop9): Directory bread(block 73) failed
[  924.876175][T30463] netlink: 'syz.9.8907': attribute type 32 has an invalid length.
[  924.876675][T30462] loop0: detected capacity change from 0 to 2048
[  924.881001][T30463] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8907'.
[  924.893402][T30463] bond2: option coupled_control: invalid value (255)
[  924.897785][T30462]  loop0: p3 p4 < >
[  924.899502][T30462] loop0: p3 size 4278190083 extends beyond EOD, truncated
[  924.908474][T30463] bond2 (unregistering): Released all slaves
[  924.985510][ T7416] udevd[7416]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  924.990242][ T7423] udevd[7423]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  925.093441][   T33] audit: type=1326 audit(1778560515.175:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30475 comm="syz.6.8915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  925.100662][   T33] audit: type=1326 audit(1778560515.175:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30475 comm="syz.6.8915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  925.116213][   T33] audit: type=1326 audit(1778560515.185:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30475 comm="syz.6.8915" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  925.125128][   T33] audit: type=1326 audit(1778560515.185:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30475 comm="syz.6.8915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  925.134208][   T33] audit: type=1326 audit(1778560515.185:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30475 comm="syz.6.8915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  925.149167][   T33] audit: type=1326 audit(1778560515.185:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30475 comm="syz.6.8915" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  925.158095][   T33] audit: type=1326 audit(1778560515.185:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30475 comm="syz.6.8915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  925.169734][   T33] audit: type=1326 audit(1778560515.185:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30475 comm="syz.6.8915" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  925.180969][   T33] audit: type=1326 audit(1778560515.185:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30475 comm="syz.6.8915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  925.243887][T11967] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  925.405926][T11967] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  925.409574][T11967] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  925.414780][T11967] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  925.418695][T11967] usb 1-1: config 1 has no interface number 1
[  925.421258][T11967] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  925.426605][T11967] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0
[  925.432802][T11967] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  925.438131][T11967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.441347][T11967] usb 1-1: Product: syz
[  925.443029][T11967] usb 1-1: Manufacturer: syz
[  925.445092][T11967] usb 1-1: SerialNumber: syz
[  925.661916][T11967] usb 1-1: Failed to set altset
[  925.664123][T11967] usb 1-1: 0:2: cannot create sequencer device
[  925.681215][T11967] usb 1-1: Failed to set altset
[  925.716391][T11967] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71
[  925.735609][T11967] usb 1-1: USB disconnect, device number 88
[  925.777645][ T7416] udevd[7416]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  925.907048][T30488] loop9: detected capacity change from 0 to 4096
[  925.914719][T30488] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[  925.948495][T30488] ntfs3(loop9): ino=19, mi_enum_attr
[  925.950765][T30488] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  925.963170][T30488] ntfs3(loop9): failed to convert "c46c" to cp865
[  925.967554][T30488] ntfs3(loop9): ino=20, mi_enum_attr
[  926.146531][T30504] 9p: Bad value for 'rfdno'
[  926.208111][T30509] loop0: detected capacity change from 0 to 1024
[  926.304791][T30514] loop9: detected capacity change from 0 to 4096
[  926.311436][T30518] loop0: detected capacity change from 0 to 8192
[  926.314065][T30514] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512).
[  926.412793][   T10] kernel read not supported for file /rfkill (pid: 10 comm: kworker/0:1)
[  926.629586][T30538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8946'.
[  926.677708][T30532] loop0: detected capacity change from 0 to 32768
[  926.696485][T30532] JBD2: Ignoring recovery information on journal
[  926.720104][T30532] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  926.784175][T23624] ocfs2: Unmounting device (7,0) on (node local)
[  926.824452][ T5812] usb 10-1: new high-speed USB device number 42 using dummy_hcd
[  926.885685][T30552] fuse: fd is not a fuse device
[  926.957855][T11967] IPVS: starting estimator thread 0...
[  926.983802][ T5812] usb 10-1: Using ep0 maxpacket: 8
[  926.988160][ T5812] usb 10-1: unable to get BOS descriptor or descriptor too short
[  926.989905][T30560] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8955'.
[  926.993130][ T5812] usb 10-1: config 2 has an invalid interface number: 31 but max is 0
[  927.001578][ T5812] usb 10-1: config 2 has no interface number 0
[  927.005367][ T5812] usb 10-1: config 2 interface 31 altsetting 7 bulk endpoint 0xB has invalid maxpacket 32
[  927.011708][ T5812] usb 10-1: config 2 interface 31 has no altsetting 0
[  927.016253][ T5812] usb 10-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=ce.7a
[  927.019059][ T5812] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  927.022305][ T5812] usb 10-1: Product: syz
[  927.024332][ T5812] usb 10-1: Manufacturer: syz
[  927.026033][ T5812] usb 10-1: SerialNumber: syz
[  927.035474][T30534] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  927.063713][T30558] IPVS: using max 80 ests per chain, 192000 per kthread
[  927.182890][T30569] loop0: detected capacity change from 0 to 4096
[  927.191719][T30569] ntfs3: Bad value for 'gid'
[  927.201883][T30569] ntfs3: Bad value for 'gid'
[  927.227523][T30572] hugetlbfs: syz.6.8961 (30572): Using mlock ulimits for SHM_HUGETLB is obsolete
[  927.248247][ T5812] hdpvr 10-1:2.31: Could not find bulk-in endpoint
[  927.251117][ T5812] hdpvr 10-1:2.31: probe with driver hdpvr failed with error -12
[  927.260184][ T5812] usb 10-1: USB disconnect, device number 42
[  927.564397][T11967] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  927.717176][T11967] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  927.721376][T11967] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  927.725337][T11967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  927.730949][T11967] usb 1-1: config 0 descriptor??
[  928.053534][ T5812] usb 10-1: new high-speed USB device number 43 using dummy_hcd
[  928.139615][T11967] ath6kl: Unsupported hardware version: 0x0
[  928.156947][T11967] ath6kl: Failed to init ath6kl core: -22
[  928.159444][T11967] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22
[  928.205094][ T5812] usb 10-1: config 0 interface 0 has no altsetting 0
[  928.207851][ T5812] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  928.211455][ T5812] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  928.216105][ T5812] usb 10-1: config 0 descriptor??
[  928.344748][T11967] usb 1-1: USB disconnect, device number 89
[  928.423664][ T5812]  (null): keene_cmd_main failed (-71)
[  928.430877][ T5812] video4linux radio48: keene_cmd_main failed (-71)
[  928.437980][ T5812] radio-keene 10-1:0.0: V4L2 device registered as radio48
[  928.441715][ T5812] usb 10-1: USB disconnect, device number 43
[  928.479130][T30594] overlayfs: failed to clone upperpath
[  928.481761][   T33] audit: type=1326 audit(1778560518.565:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30593 comm="syz.6.8970" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  928.527791][T30598] fuse: fd is not a fuse device
[  928.562695][T30600] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8973'.
[  928.565638][T30600] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8973'.
[  928.666400][T30606] netlink: 1355 bytes leftover after parsing attributes in process `syz.6.8976'.
[  929.212288][T30639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8990'.
[  929.230484][T30645] loop0: detected capacity change from 0 to 512
[  929.251722][T30645] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  929.262264][T30645] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  929.266224][T30645] System zones: 1-12
[  929.269039][T30645] EXT4-fs (loop0): 1 truncate cleaned up
[  929.271722][T30645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  929.895467][T30655] loop9: detected capacity change from 0 to 128
[  929.918953][T30655] vxfs: WRONG superblock magic 7b3185b5 at 1
[  929.923493][T30655] vxfs: unsupported VxFS version (-1232326277)
[  930.118485][T23624] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  930.295367][T30663] loop9: detected capacity change from 0 to 32768
[  930.301458][T30663] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.9000 (30663)
[  930.333040][T30663] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  930.336446][T30663] BTRFS info (device loop9): using sha256 checksum algorithm
[  930.431065][T30663] BTRFS info (device loop9): rebuilding free space tree
[  930.467770][T30663] BTRFS info (device loop9): enabling ssd optimizations
[  930.470144][T30663] BTRFS info (device loop9): turning on async discard
[  930.472344][T30663] BTRFS info (device loop9): enabling free space tree
[  930.478204][T30663] BTRFS info (device loop9): force clearing of disk cache
[  931.048159][T27717] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  931.404773][T30698] loop9: detected capacity change from 0 to 512
[  931.480101][T30690] loop0: detected capacity change from 0 to 40427
[  931.484229][T30690] f2fs: Bad value for 'fault_injection'
[  931.660733][T30704] loop0: detected capacity change from 0 to 4096
[  931.666745][T30704] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  931.678232][T30704] ntfs3(loop0): ino=19, mi_enum_attr
[  931.680333][T30704] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  931.702456][T30700] loop9: detected capacity change from 0 to 32768
[  931.709750][T30700] BTRFS info: device /dev/loop9 (7:9) using temp-fsid 3eade64e-2ec1-4316-b1b8-8ff5ecbeacef
[  931.733328][T30700] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.9010 (30700)
[  931.752281][T30700] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  931.758074][T30700] BTRFS info (device loop9): using crc32c checksum algorithm
[  931.761183][T30700] BTRFS error (device loop9): nologreplay must be used with ro mount option
[  931.764186][T30700] BTRFS error (device loop9): cannot disable free-space-tree
[  931.767553][T30700] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  931.773670][T30700] BTRFS error (device loop9): open_ctree failed: -22
[  931.893433][T30715] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9017'.
[  931.909487][T30714] loop9: detected capacity change from 0 to 2048
[  931.932345][T30717] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  931.935366][T30717] batman_adv: batadv0: Removing interface: batadv_slave_1
[  931.938660][T30717] batman_adv: batadv0: Interface deactivated: macvlan2
[  931.940970][T30717] batman_adv: batadv0: Removing interface: macvlan2
[  931.958152][T30714] Alternate GPT is invalid, using primary GPT.
[  931.961840][T30714]  loop9: p1 p2 p3
[  931.964437][T30714] loop9: partition table partially beyond EOD, truncated
[  931.996806][T30709] loop0: detected capacity change from 0 to 32768
[  932.020850][T30720] loop9: detected capacity change from 0 to 2048
[  932.027053][T30720] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  932.027699][T30709] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  932.041860][ T7416] udevd[7416]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  932.047439][ T7417] udevd[7417]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[  932.048231][T30726] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  932.052596][ T5790] udevd[5790]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[  932.073434][T30709] XFS (loop0): Ending clean mount
[  932.127851][T23624] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  932.793535][T11967] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  932.954421][T11967] usb 1-1: Using ep0 maxpacket: 16
[  932.958776][T11967] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  932.962033][T11967] usb 1-1: config 0 has no interface number 0
[  932.968030][T11967] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  932.971707][T11967] usb 1-1: New USB device strings: Mfr=1, Product=1, SerialNumber=227
[  932.976544][T11967] usb 1-1: Product: syz
[  932.978309][T11967] usb 1-1: Manufacturer: syz
[  932.980326][T11967] usb 1-1: SerialNumber: syz
[  932.985306][T11967] usb 1-1: config 0 descriptor??
[  932.994117][T11967] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  933.173032][ T5427] usb 10-1: new high-speed USB device number 44 using dummy_hcd
[  933.324563][ T5427] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9
[  933.333375][ T5427] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  933.342963][ T5427] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  933.348071][ T5427] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  933.355665][ T5427] usb 10-1: Product: syz
[  933.359061][ T5427] usb 10-1: Manufacturer: syz
[  933.361548][ T5427] usb 10-1: SerialNumber: syz
[  933.366410][ T5427] usb 10-1: config 0 descriptor??
[  933.795947][T11678] usb 10-1: USB disconnect, device number 44
[  933.801705][T11967] gspca_spca1528: reg_w err -71
[  933.823495][T11967] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71
[  933.835723][T11967] usb 1-1: USB disconnect, device number 90
[  934.626826][T30817] loop9: detected capacity change from 0 to 1024
[  934.632213][T30817] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  934.693826][T11678] usb 1-1: new full-speed USB device number 91 using dummy_hcd
[  934.864497][T11678] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  934.870150][T11678] usb 1-1: config 0 has no interface number 0
[  934.883392][T11678] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  934.891546][T11678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.895154][T11678] usb 1-1: Product: syz
[  934.897022][T11678] usb 1-1: Manufacturer: syz
[  934.899069][T11678] usb 1-1: SerialNumber: syz
[  934.907071][T11678] usb 1-1: config 0 descriptor??
[  934.914190][T11678] usb 1-1: selecting invalid altsetting 1
[  934.918766][T11678] dvb_ttusb_budget: ttusb_init_controller: error
[  934.921993][T30831] loop9: detected capacity change from 0 to 256
[  934.927786][T11678] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  934.929156][T30831] exfat: Deprecated parameter 'utf8'
[  934.941075][T30831] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  934.966934][T11678] DVB: Unable to find symbol stv0299_attach()
[  934.989570][T11678] DVB: Unable to find symbol tda8083_attach()
[  934.992279][T11678] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  935.059850][T30837] loop9: detected capacity change from 0 to 1024
[  935.069082][T30837] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  935.122830][T11678] usb 1-1: USB disconnect, device number 91
[  935.443746][T30847] netlink: 'syz.6.9074': attribute type 30 has an invalid length.
[  935.849453][T30863] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  936.226216][ T9576] usb 10-1: new high-speed USB device number 45 using dummy_hcd
[  936.382658][ T9576] usb 10-1: Using ep0 maxpacket: 32
[  936.386798][ T9576] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  936.390752][ T9576] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  936.404102][ T9576] usb 10-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  936.410753][ T9576] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  936.419390][ T9576] usb 10-1: config 0 descriptor??
[  936.553777][T30875] set_capacity_and_notify: 1 callbacks suppressed
[  936.553787][T30875] loop0: detected capacity change from 0 to 128
[  936.559311][T30875] affs: Bad value for 'setgid'
[  936.566236][T30875] affs: Bad value for 'setgid'
[  936.805544][T30887] loop0: detected capacity change from 0 to 256
[  936.836978][ T9576] apple 0003:05AC:024B.0043: unknown main item tag 0x0
[  936.839778][ T9576] apple 0003:05AC:024B.0043: unknown main item tag 0x0
[  936.849101][T30887] FAT-fs (loop0): Directory bread(block 64) failed
[  936.851948][ T9576] apple 0003:05AC:024B.0043: unknown main item tag 0x0
[  936.855728][ T9576] apple 0003:05AC:024B.0043: unknown main item tag 0x0
[  936.858696][T30887] FAT-fs (loop0): Directory bread(block 65) failed
[  936.861391][ T9576] apple 0003:05AC:024B.0043: unknown main item tag 0x0
[  936.865088][T30887] FAT-fs (loop0): Directory bread(block 66) failed
[  936.868496][ T9576] apple 0003:05AC:024B.0043: unknown main item tag 0x0
[  936.871802][ T9576] apple 0003:05AC:024B.0043: unknown main item tag 0x0
[  936.886011][T30887] FAT-fs (loop0): Directory bread(block 67) failed
[  936.894328][T30887] FAT-fs (loop0): Directory bread(block 68) failed
[  936.897041][T30887] FAT-fs (loop0): Directory bread(block 69) failed
[  936.899784][T30887] FAT-fs (loop0): Directory bread(block 70) failed
[  936.903814][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  936.907504][ T1379] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  936.913299][ T9576] apple 0003:05AC:024B.0043: unknown main item tag 0x0
[  936.915746][T30887] FAT-fs (loop0): Directory bread(block 71) failed
[  936.916222][ T9576] apple 0003:05AC:024B.0043: unknown main item tag 0x0
[  936.922732][ T9576] apple 0003:05AC:024B.0043: unknown main item tag 0x0
[  936.924152][T30887] FAT-fs (loop0): Directory bread(block 72) failed
[  936.932280][ T9576] apple 0003:05AC:024B.0043: hidraw0: USB HID v0.0d Device [HID 05ac:024b] on usb-dummy_hcd.9-1/input0
[  936.934363][T30887] FAT-fs (loop0): Directory bread(block 73) failed
[  937.006583][T30897] netlink: 'syz.0.9097': attribute type 8 has an invalid length.
[  937.041371][T11967] usb 10-1: USB disconnect, device number 45
[  937.188912][T30914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  937.198098][T30914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  937.200757][T30914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  937.203154][T30914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  937.205325][T30914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  937.207582][T30914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  937.210420][T30914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  937.213156][T30914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  937.215283][T30914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  937.719323][T30943] loop0: detected capacity change from 0 to 512
[  937.729666][T30943] EXT4-fs: Ignoring removed nomblk_io_submit option
[  937.733669][T30943] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  937.739428][T30943] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.9118: bad orphan inode 131083
[  937.752161][T30943] loop0: lost filesystem error report for type 5 error -117
[  937.752334][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  937.756788][    C0] EXT4-fs (loop0): initial error at time 1778560527: ext4_orphan_get:1423
[  937.759582][    C0] EXT4-fs (loop0): last error at time 1778560527: ext4_orphan_get:1423
[  937.765901][T30943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  937.801971][T30943] overlayfs: upper fs needs to support d_type.
[  937.903909][T30953] bond2: option ad_user_port_key: invalid value (2304)
[  937.906794][T30953] bond2: option ad_user_port_key: allowed values 0 - 1023
[  937.934173][T30953] bond2 (unregistering): Released all slaves
[  937.998383][T23624] syz_tun (unregistering): left allmulticast mode
[  938.005766][T30956] netlink: 84 bytes leftover after parsing attributes in process `syz.6.9124'.
[  938.205602][T23624] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  938.577081][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  938.583692][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  938.587254][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  938.601250][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  938.604176][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  938.722313][ T5812] usb 10-1: new high-speed USB device number 46 using dummy_hcd
[  939.055725][ T5812] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  939.060257][ T5812] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  939.065366][ T5812] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  939.070661][ T5812] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  939.074659][ T5812] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.080080][ T5812] usb 10-1: config 0 descriptor??
[  939.172035][T30973] bridge0: port 1(bridge_slave_0) entered blocking state
[  939.175786][T30973] bridge0: port 1(bridge_slave_0) entered disabled state
[  939.178107][T30973] bridge_slave_0: entered allmulticast mode
[  939.180712][T30973] bridge_slave_0: entered promiscuous mode
[  939.187113][T30973] bridge0: port 2(bridge_slave_1) entered blocking state
[  939.189426][T30973] bridge0: port 2(bridge_slave_1) entered disabled state
[  939.191728][T30973] bridge_slave_1: entered allmulticast mode
[  939.195281][T30973] bridge_slave_1: entered promiscuous mode
[  939.223177][T30973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  939.228539][T30973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  939.253518][T30973] team0: Port device team_slave_0 added
[  939.257752][T30973] team0: Port device team_slave_1 added
[  939.277702][T30973] batman_adv: batadv0: Adding interface: batadv_slave_0
[  939.279931][T30973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  939.290096][T30973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  939.297666][T30973] batman_adv: batadv0: Adding interface: batadv_slave_1
[  939.300216][T30973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  939.310161][T30973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  939.371242][T30973] hsr_slave_0: entered promiscuous mode
[  939.374980][T30973] hsr_slave_1: entered promiscuous mode
[  939.378188][T30973] debugfs: 'hsr0' already exists in 'hsr'
[  939.380670][T30973] Cannot create hsr debugfs directory
[  939.499983][ T5812] plantronics 0003:047F:FFFF.0044: reserved main item tag 0xd
[  939.527418][ T5812] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  939.624218][T30973] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  939.738738][T30973] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  939.784266][ T5427] usb 10-1: USB disconnect, device number 46
[  939.888270][T30973] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  939.970801][T30973] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  940.176181][T30973] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  940.183478][T30973] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  940.186796][T30973] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  940.191245][T30973] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  940.194397][T30973] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  940.198525][T30973] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  940.201721][T30973] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  940.206439][T30973] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  940.253483][T30973] 8021q: adding VLAN 0 to HW filter on device bond0
[  940.265045][T30973] 8021q: adding VLAN 0 to HW filter on device team0
[  940.269912][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  940.272195][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  940.282246][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  940.284576][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  940.540119][T30973] 8021q: adding VLAN 0 to HW filter on device batadv0
[  940.550358][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  940.550367][   T33] audit: type=1326 audit(1778560530.636:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31030 comm="syz.6.9145" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x0
[  940.577615][T30973] veth0_vlan: entered promiscuous mode
[  940.587405][T30973] veth1_vlan: entered promiscuous mode
[  940.603620][ T9576] usb 10-1: new high-speed USB device number 47 using dummy_hcd
[  940.608749][T30973] veth0_macvtap: entered promiscuous mode
[  940.613546][T30973] veth1_macvtap: entered promiscuous mode
[  940.627977][T30973] batman_adv: batadv0: Interface activated: batadv_slave_0
[  940.632210][   T54] Bluetooth: hci0: command tx timeout
[  940.648623][T30973] batman_adv: batadv0: Interface activated: batadv_slave_1
[  940.655330][T25340] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  940.659137][T25340] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  940.664410][T25340] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  940.668084][T25340] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  940.782249][T17180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  940.783238][ T9576] usb 10-1: config 0 has an invalid interface number: 11 but max is 0
[  940.788356][T17180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  940.801734][ T9576] usb 10-1: config 0 has no interface number 0
[  940.813606][ T9576] usb 10-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024
[  940.819235][ T9576] usb 10-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  940.836096][T17180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  940.836911][ T9576] usb 10-1: config 0 interface 11 has no altsetting 0
[  940.839783][T17180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  940.866174][ T9576] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  940.875754][ T9576] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  940.893035][ T9576] usb 10-1: config 0 descriptor??
[  940.903414][ T9576] keyspan 10-1:0.11: Keyspan 2 port adapter converter detected
[  940.907247][ T9576] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 81
[  940.909959][ T9576] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 82
[  940.913214][ T9576] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 1
[  940.916374][ T9576] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 2
[  940.919204][ T9576] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 85
[  940.925110][ T9576] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 5
[  940.928540][ T9576] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  940.934737][ T9576] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 83
[  940.937676][ T9576] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 84
[  940.940226][ T9576] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 3
[  940.945098][ T9576] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 4
[  940.949259][ T9576] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 86
[  940.954409][ T9576] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 6
[  940.960513][ T9576] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  941.018836][T31036] netlink: 'syz.3.9146': attribute type 1 has an invalid length.
[  941.023692][T31036] erspan0: entered promiscuous mode
[  941.025628][T31036] erspan0: entered allmulticast mode
[  941.091563][T31040] loop3: detected capacity change from 0 to 256
[  941.096171][T31040] exfat: Deprecated parameter 'utf8'
[  941.101046][T31040] exfat: Deprecated parameter 'utf8'
[  941.119699][ T9576] usb 10-1: USB disconnect, device number 47
[  941.124844][T31040] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  941.135119][ T9576] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  941.142878][ T9576] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  941.147307][ T9576] keyspan 10-1:0.11: device disconnected
[  941.679296][T31042] loop9: detected capacity change from 0 to 64
[  941.744674][T31044] loop9: detected capacity change from 0 to 128
[  941.748919][T31044] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  942.725554][T25341] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.890501][T31053] loop9: detected capacity change from 0 to 256
[  942.897683][T31053] exfat: Deprecated parameter 'utf8'
[  942.904063][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  942.916317][T31053] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  942.925181][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  942.929690][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  942.934747][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  942.937592][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  943.389706][T31051] bridge0: port 1(bridge_slave_0) entered blocking state
[  943.392692][T31051] bridge0: port 1(bridge_slave_0) entered disabled state
[  943.395106][T31051] bridge_slave_0: entered allmulticast mode
[  943.398103][T31051] bridge_slave_0: entered promiscuous mode
[  943.402031][T31051] bridge0: port 2(bridge_slave_1) entered blocking state
[  943.404626][T31051] bridge0: port 2(bridge_slave_1) entered disabled state
[  943.407225][T31051] bridge_slave_1: entered allmulticast mode
[  943.410288][T31051] bridge_slave_1: entered promiscuous mode
[  943.426207][T31051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  943.432307][T31051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  943.456172][T31051] team0: Port device team_slave_0 added
[  943.459304][T31051] team0: Port device team_slave_1 added
[  943.473699][T31051] batman_adv: batadv0: Adding interface: batadv_slave_0
[  943.476102][T31051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  943.484323][T31051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  943.488779][T31051] batman_adv: batadv0: Adding interface: batadv_slave_1
[  943.491003][T31051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  943.499598][T31051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  943.526748][T31051] hsr_slave_0: entered promiscuous mode
[  943.529133][T31051] hsr_slave_1: entered promiscuous mode
[  943.531422][T31051] debugfs: 'hsr0' already exists in 'hsr'
[  943.533384][T31051] Cannot create hsr debugfs directory
[  944.092085][T25341] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  944.335015][T25341] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  944.491964][ T9576] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[  944.641696][ T9576] usb 10-1: Using ep0 maxpacket: 16
[  944.645013][ T9576] usb 10-1: config index 0 descriptor too short (expected 51443, got 18)
[  944.649466][ T9576] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  944.653017][ T9576] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  944.655588][ T9576] usb 10-1: Product: syz
[  944.656942][ T9576] usb 10-1: Manufacturer: syz
[  944.658518][ T9576] usb 10-1: SerialNumber: syz
[  944.675548][ T9576] r8152-cfgselector 10-1: Unknown version 0x0000
[  944.678416][ T9576] r8152-cfgselector 10-1: config 0 descriptor??
[  944.811040][T25341] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  944.951948][ T5616] Bluetooth: hci0: command tx timeout
[  945.106637][   T10] r8152-cfgselector 10-1: USB disconnect, device number 48
[  945.344712][T25341] bridge_slave_1: left allmulticast mode
[  945.347073][T25341] bridge_slave_1: left promiscuous mode
[  945.348982][T25341] bridge0: port 2(bridge_slave_1) entered disabled state
[  945.354250][T25341] bridge_slave_0: left allmulticast mode
[  945.357879][T25341] bridge_slave_0: left promiscuous mode
[  945.360181][T25341] bridge0: port 1(bridge_slave_0) entered disabled state
[  945.545707][T25341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  945.552810][T25341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  945.558076][T25341] bond0 (unregistering): Released all slaves
[  945.594033][T31051] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  945.598585][T31051] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  945.602614][T31051] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  945.606936][T31051] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  945.611606][T31051] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  945.615538][T31051] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  945.618398][T31051] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  945.646036][T31051] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  945.913256][T31166] af_packet: tpacket_rcv: packet too big, clamped from 86 to 4294967286. macoff=82
[  945.987580][T31051] 8021q: adding VLAN 0 to HW filter on device bond0
[  946.027939][T25341] hsr_slave_0: left promiscuous mode
[  946.035979][T25341] hsr_slave_1: left promiscuous mode
[  946.039501][T25341] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  946.043556][T25341] batman_adv: batadv0: Removing interface: batadv_slave_0
[  946.048119][T25341] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  946.050368][T25341] batman_adv: batadv0: Removing interface: batadv_slave_1
[  946.059866][T25341] veth1_macvtap: left promiscuous mode
[  946.061898][T25341] veth0_macvtap: left promiscuous mode
[  946.065168][T25341] veth1_vlan: left promiscuous mode
[  946.068830][T25341] veth0_vlan: left promiscuous mode
[  946.088846][T31176] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9181'.
[  946.098795][T31176] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9181'.
[  946.729680][T31191] loop9: detected capacity change from 0 to 256
[  946.737161][T25341] team0 (unregistering): Port device team_slave_1 removed
[  946.738131][T31191] exfat: Deprecated parameter 'utf8'
[  946.743017][T31191] exfat: Deprecated parameter 'namecase'
[  946.745731][T31191] exfat: Deprecated parameter 'namecase'
[  946.748039][T31191] exfat: Deprecated parameter 'utf8'
[  946.758410][T31191] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  946.763526][T25341] team0 (unregistering): Port device team_slave_0 removed
[  946.763730][T31191] exFAT-fs (loop9): failed to test first cluster bit of root dir(5)
[  946.779674][   T33] audit: type=1800 audit(1778560536.867:838): pid=31191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.9185" name="file1" dev="loop9" ino=1049019 res=0 errno=0
[  946.793359][   T33] audit: type=1800 audit(1778560536.867:839): pid=31191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.9185" name="file1" dev="loop9" ino=1049019 res=0 errno=0
[  946.945923][T31051] 8021q: adding VLAN 0 to HW filter on device team0
[  946.960737][T17180] bridge0: port 1(bridge_slave_0) entered blocking state
[  946.963106][T17180] bridge0: port 1(bridge_slave_0) entered forwarding state
[  946.982280][T17180] bridge0: port 2(bridge_slave_1) entered blocking state
[  946.984697][T17180] bridge0: port 2(bridge_slave_1) entered forwarding state
[  947.029418][T31195] loop9: detected capacity change from 0 to 32768
[  947.031882][ T5616] Bluetooth: hci0: command tx timeout
[  947.052476][T31051] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  947.076974][T31051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  947.086374][T31195] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  947.373951][T27717] ocfs2: Unmounting device (7,9) on (node local)
[  947.634553][T31232] loop9: detected capacity change from 0 to 128
[  947.654904][T31232] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  947.659722][T31232] ext4 filesystem being mounted at /427/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  947.734896][T27717] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  947.735381][T31051] 8021q: adding VLAN 0 to HW filter on device batadv0
[  947.783514][ T5356] 8021q: adding VLAN 0 to HW filter on device eth5
[  947.890439][T31255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9196'.
[  947.897009][T31255] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9196'.
[  947.904021][T31255] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9196'.
[  948.102683][T31051] veth0_vlan: entered promiscuous mode
[  948.108740][ T5356] 8021q: adding VLAN 0 to HW filter on device eth6
[  948.131790][T31051] veth1_vlan: entered promiscuous mode
[  948.192795][T31051] veth0_macvtap: entered promiscuous mode
[  948.203276][T31051] veth1_macvtap: entered promiscuous mode
[  948.223121][T31051] batman_adv: batadv0: Interface activated: batadv_slave_0
[  948.230814][T31051] batman_adv: batadv0: Interface activated: batadv_slave_1
[  948.256501][T25341] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  948.268060][T25341] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  948.273376][T25341] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  948.287561][T25341] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  948.348678][ T5356] 8021q: adding VLAN 0 to HW filter on device eth7
[  948.357544][T31291] loop9: detected capacity change from 0 to 128
[  948.451849][T31293] netlink: 144 bytes leftover after parsing attributes in process `syz.9.9208'.
[  948.480538][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  948.484673][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  948.539165][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  948.543557][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  948.718433][T31311] net_ratelimit: 3321 callbacks suppressed
[  948.718447][T31311] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  948.742994][ T5356] 8021q: adding VLAN 0 to HW filter on device eth8
[  948.837569][T31314] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.9214'.
[  948.937345][T31306] loop5: detected capacity change from 0 to 32768
[  949.014114][T31309] loop9: detected capacity change from 0 to 32768
[  949.017019][T31309] BTRFS info: device /dev/loop9 (7:9) using temp-fsid 88df9e07-f33c-4278-b0e1-d4caef633030
[  949.020190][T31309] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.9212 (31309)
[  949.038267][T31309] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  949.049597][T31309] BTRFS info (device loop9): using crc32c checksum algorithm
[  949.111048][ T5616] Bluetooth: hci0: command tx timeout
[  949.119259][T31309] BTRFS info (device loop9): setting nodatasum
[  949.127704][T31309] BTRFS info (device loop9): setting nodatacow
[  949.131568][T31309] BTRFS info (device loop9): turning on async discard
[  949.137026][T31309] BTRFS info (device loop9): enabling free space tree
[  949.142284][T31309] BTRFS info (device loop9): max_inline set to 0
[  949.209298][T27717] BTRFS info (device loop9): last unmount of filesystem 88df9e07-f33c-4278-b0e1-d4caef633030
[  949.286447][T31349] loop5: detected capacity change from 0 to 512
[  949.296422][T31349] EXT4-fs: Ignoring removed orlov option
[  949.305966][T31349] EXT4-fs: Ignoring removed mblk_io_submit option
[  949.313511][T31349] EXT4-fs: Ignoring removed mblk_io_submit option
[  949.344611][T31349] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.9222: corrupted in-inode xattr: e_value size too large
[  949.364949][T31349] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  949.365184][T31349] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.9222: couldn't read orphan inode 15 (err -117)
[  949.372014][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  949.372025][    C0] EXT4-fs (loop5): initial error at time 1778560539: ext4_iget_extra_inode:5128: inode 15
[  949.372038][    C0] EXT4-fs (loop5): last error at time 1778560539: ext4_iget_extra_inode:5128: inode 15
[  949.380687][T31349] loop5: lost filesystem error report for type 5 error -117
[  949.382059][T31349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  949.427801][T31051] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  949.505064][T31355] fuse: fd is not a fuse device
[  949.700502][T31367] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  949.764711][T31371] loop9: detected capacity change from 0 to 1024
[  949.773126][T31371] hfsplus: failed to load attributes file
[  950.041972][ T5616] Bluetooth: hci1: unexpected subevent 0x10 length: 5 > 2
[  950.430659][T31401] loop5: detected capacity change from 0 to 32768
[  950.462905][T31401] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  950.477768][T31401] XFS (loop5): Ending clean mount
[  950.495069][T31051] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  950.840620][T31417] loop5: detected capacity change from 0 to 32768
[  950.848437][T31417] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.9245 (31417)
[  950.859220][T31417] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  950.867999][T31417] BTRFS info (device loop5): using sha256 checksum algorithm
[  950.922476][  T811] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[  950.931498][T31417] BTRFS info (device loop5): enabling ssd optimizations
[  950.934321][T31417] BTRFS info (device loop5): turning on async discard
[  950.936993][T31417] BTRFS info (device loop5): enabling free space tree
[  950.999458][T31051] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  951.074164][  T811] usb 10-1: Using ep0 maxpacket: 16
[  951.082754][  T811] usb 10-1: config 0 has an invalid interface number: 41 but max is 0
[  951.092229][  T811] usb 10-1: config 0 has no interface number 0
[  951.120906][  T811] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  951.124123][  T811] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  951.127289][  T811] usb 10-1: config 0 interface 41 has no altsetting 0
[  951.158263][  T811] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  951.161205][  T811] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  951.163739][  T811] usb 10-1: Product: syz
[  951.165128][  T811] usb 10-1: Manufacturer: syz
[  951.166592][  T811] usb 10-1: SerialNumber: syz
[  951.183811][  T811] usb 10-1: config 0 descriptor??
[  951.186333][T31414] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  951.188654][T31414] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  951.205801][ T5616] Bluetooth: hci0: command tx timeout
[  951.357040][T31447] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9252'.
[  951.373195][T31447] team0: Port device team_slave_0 removed
[  951.402799][  T811] sr9700 10-1:0.41: probe with driver sr9700 failed with error -71
[  951.410767][  T811] usb 10-1: USB disconnect, device number 49
[  952.075874][T31460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9257'.
[  952.178622][T31451] loop9: detected capacity change from 0 to 32768
[  952.189003][T31451] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.9254 (31451)
[  952.203786][T31451] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  952.211526][T31451] BTRFS info (device loop9): using sha256 checksum algorithm
[  952.312389][T31451] BTRFS info (device loop9): enabling ssd optimizations
[  952.314767][T31451] BTRFS info (device loop9): turning on async discard
[  952.317625][T31451] BTRFS info (device loop9): enabling free space tree
[  952.346595][T27717] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  952.680170][T31495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9266'.
[  953.754614][   T33] audit: type=1326 audit(1778560543.838:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31526 comm="syz.6.9279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  953.776645][   T33] audit: type=1326 audit(1778560543.838:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31526 comm="syz.6.9279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  953.795959][   T33] audit: type=1326 audit(1778560543.838:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31526 comm="syz.6.9279" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  953.837191][   T33] audit: type=1326 audit(1778560543.838:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31526 comm="syz.6.9279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  953.857784][   T33] audit: type=1326 audit(1778560543.838:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31526 comm="syz.6.9279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  953.882159][   T33] audit: type=1326 audit(1778560543.838:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31526 comm="syz.6.9279" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  953.903601][   T33] audit: type=1326 audit(1778560543.838:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31526 comm="syz.6.9279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  953.928376][   T33] audit: type=1326 audit(1778560543.838:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31526 comm="syz.6.9279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  953.959016][T11967] usb 6-1: new low-speed USB device number 11 using dummy_hcd
[  953.966399][   T33] audit: type=1326 audit(1778560543.838:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31526 comm="syz.6.9279" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  953.986402][   T33] audit: type=1326 audit(1778560543.838:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31526 comm="syz.6.9279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  954.124590][T11967] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  954.130436][T11967] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 16, setting to 8
[  954.138825][T11967] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  954.149659][T11967] usb 6-1: config 0 interface 0 has no altsetting 0
[  954.160912][T11967] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  954.165170][T11967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  954.171009][T11967] usb 6-1: config 0 descriptor??
[  954.178852][T31518] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  954.690197][T11967] pantherlord 0003:0810:0001.0045: unknown global tag 0xd
[  954.693090][T11967] pantherlord 0003:0810:0001.0045: item 0 4 1 13 parsing failed
[  954.697828][T11967] pantherlord 0003:0810:0001.0045: parse failed
[  954.699923][T11967] pantherlord 0003:0810:0001.0045: probe with driver pantherlord failed with error -22
[  954.730386][T12056] usb 10-1: new high-speed USB device number 50 using dummy_hcd
[  954.907174][  T811] usb 6-1: USB disconnect, device number 11
[  954.974394][T12056] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  955.022756][T12056] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  955.066008][T12056] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  955.079821][T12056] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.14
[  955.086122][T12056] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  955.092593][T12056] usb 10-1: Product: syz
[  955.094379][T12056] usb 10-1: Manufacturer: syz
[  955.102578][T12056] usb 10-1: SerialNumber: syz
[  955.106868][T12056] usb 10-1: config 0 descriptor??
[  955.114004][T12056] dm9601 10-1:0.0: probe with driver dm9601 failed with error -22
[  955.320737][T12056] usb 10-1: USB disconnect, device number 50
[  955.381946][T31577] gre1: entered promiscuous mode
[  955.447736][T31579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9300'.
[  955.450812][T31579] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9300'.
[  955.457257][T31579] geneve2: entered promiscuous mode
[  955.459400][T31579] geneve2: entered allmulticast mode
[  955.497673][T31584] loop5: detected capacity change from 0 to 128
[  955.516724][T31584] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  955.524973][T31584] hpfs: filesystem error: improperly stopped
[  955.528783][T31584] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  955.534316][T31584] hpfs: You really don't want any checks? You are crazy...
[  955.536794][T31584] hpfs: hpfs_map_sector(): read error
[  955.538463][T31584] hpfs: code page support is disabled
[  955.540758][T31584] hpfs: hpfs_map_4sectors(): unaligned read
[  955.542671][T31584] hpfs: hpfs_map_4sectors(): unaligned read
[  955.544641][T31584] hpfs: filesystem error: unable to find root dir
[  955.558988][T31584] hpfs: hpfs_map_4sectors(): unaligned read
[  956.182250][T31619] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9315'.
[  956.819754][T31637] x_tables: duplicate underflow at hook 1
[  957.294901][T31647] syzkaller1: tun_chr_ioctl cmd 35111
[  957.314021][T31649] loop5: detected capacity change from 0 to 128
[  957.332088][T31649] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  957.335907][T31649] FAT-fs (loop5): Filesystem has been set read-only
[  957.383084][T31651] netlink: 'syz.5.9331': attribute type 29 has an invalid length.
[  957.387104][T31651] netlink: 'syz.5.9331': attribute type 29 has an invalid length.
[  957.396384][T31651] netlink: 'syz.5.9331': attribute type 29 has an invalid length.
[  957.457195][T31655] loop5: detected capacity change from 0 to 8
[  957.464025][T31655] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  957.571922][T31657] loop9: detected capacity change from 0 to 1024
[  957.588309][T31657] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (63440!=20869)
[  957.594453][T31657] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  957.609332][T31657] EXT4-fs error (device loop9): __ext4_get_inode_loc:4885: comm syz.9.9334: Invalid inode table block 0 in block_group 0
[  957.614965][T31657] loop9: lost filesystem error report for type 5 error -117
[  957.615129][T31657] EXT4-fs (loop9): Remounting filesystem read-only
[  957.620524][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  957.620535][    C1] EXT4-fs (loop9): initial error at time 1778560547: __ext4_get_inode_loc:4885
[  957.620545][    C1] EXT4-fs (loop9): last error at time 1778560547: __ext4_get_inode_loc:4885
[  957.637247][T31657] EXT4-fs (loop9): no journal found
[  957.651031][T31657] EXT4-fs (loop9): can't get journal size
[  957.665383][T31657] EXT4-fs (loop9): get root inode failed
[  957.667616][T31657] EXT4-fs (loop9): mount failed
[  957.815579][T31673] loop9: detected capacity change from 0 to 512
[  957.862259][T31673] EXT4-fs (loop9): 1 truncate cleaned up
[  957.875717][T31673] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  957.906913][T31673] EXT4-fs (loop9): shut down requested (2)
[  958.105195][T27717] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  958.876387][T31695] loop9: detected capacity change from 0 to 1024
[  958.889923][T31695] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  959.243716][T31695] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  959.267568][T27717] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  959.662057][T11967] usb 10-1: new high-speed USB device number 51 using dummy_hcd
[  959.672945][T31703] loop5: detected capacity change from 0 to 40427
[  959.686922][T31703] F2FS-fs (loop5): Small segment_count (9 < 1 * 24)
[  959.701835][T31703] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  959.831311][T11967] usb 10-1: Using ep0 maxpacket: 8
[  959.847526][T11967] usb 10-1: unable to get BOS descriptor or descriptor too short
[  959.857274][T11967] usb 10-1: config 127 has an invalid interface number: 1 but max is 0
[  959.863309][T11967] usb 10-1: config 127 has no interface number 0
[  959.868366][T31703] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  959.872257][T11967] usb 10-1: config 127 interface 1 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16
[  959.884807][T11967] usb 10-1: config 127 interface 1 has no altsetting 0
[  959.898537][T11967] usb 10-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=df.89
[  959.908755][T11967] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.913824][T31703] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  959.919054][T11967] usb 10-1: Product: syz
[  959.921359][T31703] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  959.924470][T11967] usb 10-1: Manufacturer: syz
[  959.927181][T11967] usb 10-1: SerialNumber: syz
[  959.937084][T31708] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  959.995725][T31051] syz-executor: attempt to access beyond end of device
[  959.995725][T31051] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  960.031340][T31051] CPU: 0 UID: 0 PID: 31051 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  960.031364][T31051] Tainted: [L]=SOFTLOCKUP
[  960.031369][T31051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  960.031376][T31051] Call Trace:
[  960.031382][T31051]  <TASK>
[  960.031388][T31051]  dump_stack_lvl+0xe8/0x150
[  960.031408][T31051]  f2fs_stop_checkpoint+0x3c7/0x590
[  960.031427][T31051]  f2fs_write_end_io+0x1274/0x1740
[  960.031458][T31051]  __submit_merged_bio+0x256/0x6a0
[  960.031479][T31051]  __submit_merged_write_cond+0x3c9/0x4e0
[  960.031499][T31051]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  960.031527][T31051]  f2fs_write_data_pages+0x287e/0x34f0
[  960.031543][T31051]  ? unwind_next_frame+0xa6/0x2550
[  960.031582][T31051]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  960.031597][T31051]  ? is_bpf_text_address+0x26/0x2b0
[  960.031618][T31051]  ? arch_stack_walk+0xfb/0x150
[  960.031681][T31051]  ? add_lock_to_list+0xc7/0x100
[  960.031699][T31051]  ? lockdep_unlock+0x5d/0xd0
[  960.031711][T31051]  ? __lock_acquire+0x146e/0x2cf0
[  960.031763][T31051]  ? do_raw_spin_lock+0x12b/0x2f0
[  960.031788][T31051]  ? do_raw_spin_unlock+0x4d/0x210
[  960.031805][T31051]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  960.031822][T31051]  do_writepages+0x32e/0x550
[  960.031843][T31051]  ? do_raw_spin_unlock+0x4d/0x210
[  960.031863][T31051]  filemap_fdatawrite+0x1e9/0x2f0
[  960.031879][T31051]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  960.031920][T31051]  ? do_raw_spin_unlock+0x4d/0x210
[  960.031940][T31051]  f2fs_sync_dirty_inodes+0x30e/0x830
[  960.031968][T31051]  f2fs_write_checkpoint+0x9df/0x26a0
[  960.032004][T31051]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  960.032054][T31051]  kill_f2fs_super+0x314/0x730
[  960.032076][T31051]  ? __pfx_kill_f2fs_super+0x10/0x10
[  960.032098][T31051]  ? lockdep_hardirqs_on+0x7a/0x110
[  960.032120][T31051]  deactivate_locked_super+0xbc/0x130
[  960.032139][T31051]  cleanup_mnt+0x437/0x4d0
[  960.032157][T31051]  ? _raw_spin_unlock_irq+0x23/0x50
[  960.032173][T31051]  task_work_run+0x1d9/0x270
[  960.032192][T31051]  ? __pfx_task_work_run+0x10/0x10
[  960.032212][T31051]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  960.032225][T31051]  exit_to_user_mode_loop+0xed/0x480
[  960.032242][T31051]  ? rcu_is_watching+0x15/0xb0
[  960.032256][T31051]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  960.032269][T31051]  do_syscall_64+0x33e/0xf80
[  960.032283][T31051]  ? trace_irq_disable+0x3b/0x140
[  960.032302][T31051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  960.032313][T31051] RIP: 0033:0x7f0f66b9e017
[  960.032325][T31051] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  960.032335][T31051] RSP: 002b:00007ffe961d85d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  960.032349][T31051] RAX: 0000000000000000 RBX: 00007f0f66c32120 RCX: 00007f0f66b9e017
[  960.032358][T31051] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe961d8690
[  960.032365][T31051] RBP: 00007ffe961d8690 R08: 00007ffe961d9690 R09: 00000000ffffffff
[  960.032373][T31051] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe961d9720
[  960.032379][T31051] R13: 00007f0f66c32120 R14: 00000000000ea564 R15: 00007ffe961d9760
[  960.032399][T31051]  </TASK>
[  960.033886][T31051] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  960.148597][T11967] redrat3 10-1:127.1: Couldn't find all endpoints
[  960.191147][T11967] usb 10-1: USB disconnect, device number 51
[  960.442707][T31747] loop5: detected capacity change from 0 to 512
[  960.455026][T31747] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.9356: inode has both inline data and extents flags
[  960.466155][T31747] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  960.466373][T31747] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.9356: couldn't read orphan inode 15 (err -117)
[  960.473329][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  960.473340][    C0] EXT4-fs (loop5): initial error at time 1778560550: ext4_orphan_get:1397: inode 15
[  960.473352][    C0] EXT4-fs (loop5): last error at time 1778560550: ext4_orphan_get:1397: inode 15
[  960.484825][T31747] loop5: lost filesystem error report for type 5 error -117
[  960.486778][T31747] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  960.521130][T31051] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  960.617023][T31752] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid
[  960.982594][T31777] loop9: detected capacity change from 0 to 512
[  960.987296][T31777] EXT4-fs warning (device loop9): ext4_multi_mount_protect:314: fsck is running on the filesystem
[  960.993120][T31777] EXT4-fs warning (device loop9): ext4_multi_mount_protect:314: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4
[  961.237512][T31783] loop9: detected capacity change from 0 to 32768
[  961.240464][T31783] btrfs: Deprecated parameter 'usebackuproot'
[  961.242526][T31783] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  961.245846][T31783] BTRFS info: device /dev/loop9 (7:9) using temp-fsid d32e9534-7074-4dc4-9282-9502cfc6f5cd
[  961.249439][T31783] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.9375 (31783)
[  961.255439][T31783] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  961.258595][T31783] BTRFS info (device loop9): using crc32c checksum algorithm
[  961.317861][T17180] BTRFS warning (device loop9): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  961.358192][T31783] BTRFS error (device loop9): failed to load root extent
[  961.362894][T31783] BTRFS warning (device loop9): try to load backup roots slot 1
[  961.366976][ T3409] BTRFS warning (device loop9): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  961.374670][T31783] BTRFS warning (device loop9): couldn't read tree root
[  961.376936][T31783] BTRFS warning (device loop9): try to load backup roots slot 2
[  961.379989][T17180] BTRFS error (device loop9): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  961.394174][T31783] BTRFS warning (device loop9): couldn't read tree root
[  961.396929][T31783] BTRFS warning (device loop9): try to load backup roots slot 3
[  961.408505][T31783] BTRFS info (device loop9): rebuilding free space tree
[  961.429051][T31783] BTRFS info (device loop9): checking UUID tree
[  961.436606][T31783] BTRFS info (device loop9): enabling ssd optimizations
[  961.439783][T31783] BTRFS info (device loop9): disabling tree log
[  961.442355][T31783] BTRFS info (device loop9): turning on async discard
[  961.445093][T31783] BTRFS info (device loop9): enabling free space tree
[  961.447829][T31783] BTRFS info (device loop9): force clearing of disk cache
[  961.451246][T31783] BTRFS info (device loop9): enabling auto defrag
[  961.454385][T31783] BTRFS info (device loop9): trying to use backup root at mount time
[  961.457560][T31783] BTRFS info (device loop9): force zlib compression, level 3
[  961.632163][T27717] BTRFS info (device loop9): last unmount of filesystem d32e9534-7074-4dc4-9282-9502cfc6f5cd
[  961.881469][T31816] loop5: detected capacity change from 0 to 2048
[  961.901547][T31816] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  961.926018][T31816] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  962.395444][T31834] sit0: entered promiscuous mode
[  962.399318][T31834] netlink: 'syz.5.9391': attribute type 1 has an invalid length.
[  962.402845][T31834] netlink: 1 bytes leftover after parsing attributes in process `syz.5.9391'.
[  962.686069][T31840] loop9: detected capacity change from 0 to 32768
[  962.692433][T31840] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.9394 (31840)
[  962.706364][T31855] loop5: detected capacity change from 0 to 32768
[  962.708854][T31855] btrfs: Deprecated parameter 'usebackuproot'
[  962.711020][T31855] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  962.721345][T31840] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  962.724713][T31855] BTRFS info: device /dev/loop5 (7:5) using temp-fsid 5fc45aa2-1188-438a-acf6-fdbb217c2ebc
[  962.728364][T31855] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.9401 (31855)
[  962.729179][T31840] BTRFS info (device loop9): using sha256 checksum algorithm
[  962.736519][T31855] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  962.740378][T31855] BTRFS info (device loop5): using crc32c checksum algorithm
[  962.812587][T13677] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  962.865872][T31855] BTRFS error (device loop5): failed to load root extent
[  962.868798][T31855] BTRFS warning (device loop5): try to load backup roots slot 1
[  962.872464][T13677] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  962.878607][T31840] BTRFS info (device loop9): enabling ssd optimizations
[  962.890570][T31840] BTRFS info (device loop9): turning on async discard
[  962.897090][T31840] BTRFS info (device loop9): enabling free space tree
[  962.902674][T31855] BTRFS warning (device loop5): couldn't read tree root
[  962.905455][T31855] BTRFS warning (device loop5): try to load backup roots slot 2
[  962.908666][T19360] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  962.918192][T31855] BTRFS warning (device loop5): couldn't read tree root
[  962.921732][T31855] BTRFS warning (device loop5): try to load backup roots slot 3
[  962.934221][T31855] BTRFS info (device loop5): rebuilding free space tree
[  962.949496][T31855] BTRFS info (device loop5): checking UUID tree
[  962.953860][T31855] BTRFS info (device loop5): enabling ssd optimizations
[  962.956469][T31855] BTRFS info (device loop5): turning on async discard
[  962.958816][T31855] BTRFS info (device loop5): enabling free space tree
[  962.961980][T31855] BTRFS info (device loop5): force clearing of disk cache
[  962.964778][T31855] BTRFS info (device loop5): enabling auto defrag
[  962.973732][T31855] BTRFS info (device loop5): trying to use backup root at mount time
[  962.977998][T31855] BTRFS info (device loop5): use zstd compression, level 3
[  962.999431][T27717] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  963.215118][T31051] BTRFS info (device loop5): last unmount of filesystem 5fc45aa2-1188-438a-acf6-fdbb217c2ebc
[  963.476720][T31899] loop5: detected capacity change from 0 to 512
[  963.527845][T31899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  963.543261][T31899] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  963.568417][T31051] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  963.617644][T31906] loop5: detected capacity change from 0 to 128
[  963.623815][T31906] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  963.628814][T31906] hpfs: filesystem error: improperly stopped
[  963.633039][T31906] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  963.636319][T31906] hpfs: You really don't want any checks? You are crazy...
[  963.644976][T31906] hpfs: hpfs_map_sector(): read error
[  963.647442][T31906] hpfs: code page support is disabled
[  963.650269][T31906] hpfs: hpfs_map_4sectors(): unaligned read
[  963.653505][T31906] hpfs: hpfs_map_4sectors(): unaligned read
[  963.656170][T31906] hpfs: filesystem error: unable to find root dir
[  963.987305][ T5427] usb 10-1: new full-speed USB device number 52 using dummy_hcd
[  964.151966][ T5427] usb 10-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  964.156469][ T5427] usb 10-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  964.161487][T31925] loop5: detected capacity change from 0 to 1024
[  964.165737][T31925] hfsplus: failed to load extents file
[  964.168308][ T5427] usb 10-1: config 0 interface 0 has no altsetting 0
[  964.171866][ T5427] usb 10-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  964.184493][ T5427] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  964.193286][ T5427] usb 10-1: config 0 descriptor??
[  964.200258][T31911] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  964.355948][T31933] netlink: 72 bytes leftover after parsing attributes in process `syz.5.9421'.
[  964.362287][T31933] netlink: 3 bytes leftover after parsing attributes in process `syz.5.9421'.
[  964.449840][T31935] loop5: detected capacity change from 0 to 4096
[  964.528170][T31935] ntfs3(loop5): ino=9, attr_set_size_ex
[  964.549538][T27721] Bluetooth: hci1: command 0x0406 tx timeout
[  964.617179][ T5427] hid_parser_main: 26 callbacks suppressed
[  964.617191][ T5427] holtek_kbd 0003:04D9:A055.0046: unknown main item tag 0x0
[  964.646475][ T5427] holtek_kbd 0003:04D9:A055.0046: unbalanced collection at end of report description
[  964.655369][ T5427] holtek_kbd 0003:04D9:A055.0046: probe with driver holtek_kbd failed with error -22
[  964.831544][ T5427] usb 10-1: USB disconnect, device number 52
[  964.922348][T31963] loop5: detected capacity change from 0 to 512
[  964.936192][T31963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  964.941469][T31963] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  964.965399][T31051] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  965.495633][T31977] loop9: detected capacity change from 0 to 1024
[  966.161213][T32000] loop5: detected capacity change from 0 to 8
[  966.176510][T32000] SQUASHFS error: Failed to read block 0x636: -5
[  966.179687][T32000] SQUASHFS error: Unable to read metadata cache entry [634]
[  966.184371][T32000] SQUASHFS error: Unable to read metadata cache entry [634]
[  966.187356][T32000] SQUASHFS error: Unable to read directory block [629:0]
[  966.276645][T32004] netlink: 'syz.5.9450': attribute type 3 has an invalid length.
[  966.842064][T32024] netlink: 'syz.6.9459': attribute type 7 has an invalid length.
[  967.343244][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  967.343258][   T33] audit: type=1326 audit(1778560557.440:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32041 comm="syz.5.9468" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f66b9cdd9 code=0x7ffc0000
[  967.358705][   T33] audit: type=1326 audit(1778560557.440:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32041 comm="syz.5.9468" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f66b9cdd9 code=0x7ffc0000
[  967.368931][   T33] audit: type=1326 audit(1778560557.460:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32041 comm="syz.5.9468" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f66b9cdd9 code=0x7ffc0000
[  967.380050][   T33] audit: type=1326 audit(1778560557.460:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32041 comm="syz.5.9468" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f66b9cdd9 code=0x7ffc0000
[  967.390697][   T33] audit: type=1326 audit(1778560557.460:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32041 comm="syz.5.9468" exe="/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f0f66b9cdd9 code=0x7ffc0000
[  967.407137][   T33] audit: type=1326 audit(1778560557.460:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32041 comm="syz.5.9468" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f66b9cdd9 code=0x7ffc0000
[  967.416511][   T33] audit: type=1326 audit(1778560557.460:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32041 comm="syz.5.9468" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f66b9cdd9 code=0x7ffc0000
[  967.425797][   T33] audit: type=1326 audit(1778560557.460:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32041 comm="syz.5.9468" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0f66b9cdd9 code=0x7ffc0000
[  967.434579][   T33] audit: type=1326 audit(1778560557.460:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32041 comm="syz.5.9468" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0f66b9cdd9 code=0x7ffc0000
[  967.558955][ T5720] usb 10-1: new high-speed USB device number 53 using dummy_hcd
[  967.728904][T32054] loop5: detected capacity change from 0 to 32768
[  967.733078][T32054] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.9473 (32054)
[  967.742686][T32054] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  967.745771][T32054] BTRFS info (device loop5): using sha256 checksum algorithm
[  967.749390][ T5720] usb 10-1: Using ep0 maxpacket: 16
[  967.754926][ T5720] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  967.757970][ T5720] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.761427][ T5720] usb 10-1: Product: syz
[  967.763089][ T5720] usb 10-1: Manufacturer: syz
[  967.765060][ T5720] usb 10-1: SerialNumber: syz
[  967.768188][ T5720] usb 10-1: config 0 descriptor??
[  967.774214][ T5720] ssu100 10-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  967.889353][T32054] BTRFS info (device loop5): rebuilding free space tree
[  967.903309][T32054] BTRFS info (device loop5): enabling ssd optimizations
[  967.905636][T32054] BTRFS info (device loop5): using spread ssd allocation scheme
[  967.908253][T32054] BTRFS info (device loop5): enabling free space tree
[  967.911335][T32054] BTRFS info (device loop5): force clearing of disk cache
[  967.913894][T32054] BTRFS info (device loop5): enabling auto defrag
[  967.916241][T32054] BTRFS info (device loop5): max_inline set to 0
[  968.077011][T31051] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  968.084958][T25341] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared)
[  968.565082][T32083] xt_TPROXY: Can be used only with -p tcp or -p udp
[  968.998772][ T5720] usb 10-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0
[  969.198232][ T5720] usb 10-1: USB disconnect, device number 53
[  969.204085][ T5720] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0
[  969.218975][ T5720] ssu100 10-1:0.0: device disconnected
[  969.551938][T32110] loop5: detected capacity change from 0 to 164
[  969.639503][T32114] loop5: detected capacity change from 0 to 256
[  969.647705][T32114] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  969.656538][T32114] exFAT-fs (loop5): valid_size(562949953421322) is greater than size(10)
[  969.832110][T32123] loop5: detected capacity change from 0 to 4096
[  969.840309][T32123] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  969.857001][T32123] ntfs3(loop5): $Secure::$SII is corrupted.
[  969.859735][T32123] ntfs3(loop5): Failed to initialize $Secure (-22).
[  970.314027][T32145] loop9: detected capacity change from 0 to 512
[  970.318907][T32145] EXT4-fs: inline encryption not supported
[  970.321276][T32145] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  970.335581][T32145] EXT4-fs (loop9): orphan cleanup on readonly fs
[  970.337785][T32145] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.9510: inode #15: comm syz.9.9510: iget: illegal inode #
[  970.341781][T32145] loop9: lost filesystem error report for type 5 error -117
[  970.342052][T32145] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.9510: couldn't read orphan inode 15 (err -117)
[  970.348306][T32145] loop9: lost filesystem error report for type 5 error -117
[  970.348461][    C0] EXT4-fs (loop9): error count since last fsck: 2
[  970.348533][T16356] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  970.350795][    C0] EXT4-fs (loop9): initial error at time 1778560560: ext4_orphan_get:1397
[  970.358060][    C0] EXT4-fs (loop9): last error at time 1778560560: ext4_orphan_get:1402
[  970.363343][T32145] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  970.374265][T32145] EXT4-fs (loop9): shut down requested (2)
[  970.398053][T27717] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  970.450650][T32148] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9511'.
[  970.514909][T16356] usb 6-1: unable to get BOS descriptor or descriptor too short
[  970.518785][T16356] usb 6-1: not running at top speed; connect to a high speed hub
[  970.522668][T16356] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  970.526284][T16356] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  970.532879][T16356] usb 6-1: string descriptor 0 read error: -22
[  970.535152][T16356] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  970.538224][T16356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  970.550497][T16356] usb 6-1: 0:2 : does not exist
[  970.771118][T32155] netdevsim netdevsim6: Firmware load for './file0/../file0/file0' refused, path contains '..' component
[  971.483203][T32172] loop9: detected capacity change from 0 to 1024
[  971.489345][T32172] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  971.575151][T32176] usb usb8: usbfs: process 32176 (syz.9.9524) did not claim interface 0 before use
[  972.013044][T16356] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  972.057124][T16356] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[  972.246916][T16356] usb 6-1: USB disconnect, device number 12
[  972.737002][T32201] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  972.803845][T32207] loop5: detected capacity change from 0 to 128
[  972.807291][T32207] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  972.820892][T32207] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  972.838073][   T33] audit: type=1800 audit(1778560562.930:863): pid=32207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.9537" name="file1" dev="loop5" ino=1049042 res=0 errno=0
[  972.884255][T32212] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  972.887932][T32212] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  972.907710][T31051] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  972.918246][T31051] FAT-fs (loop5): Filesystem has been set read-only
[  972.943932][T31051] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  973.175237][T31051] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  973.427116][T25341] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  973.551033][ T9576] usb 10-1: new high-speed USB device number 54 using dummy_hcd
[  973.553209][T27721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  973.566119][T27721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  973.574759][T27721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  973.604411][T25341] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  973.615564][T27721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  973.619348][T27721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  973.723067][ T9576] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  973.727674][ T9576] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  973.731295][ T9576] usb 10-1: Product: syz
[  973.733180][ T9576] usb 10-1: Manufacturer: syz
[  973.735521][ T9576] usb 10-1: SerialNumber: syz
[  973.781456][T25341] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  973.875187][T25341] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  974.083638][ T9576] rtl8150 10-1:1.0: couldn't reset the device
[  974.094384][ T9576] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5
[  974.111020][ T9576] usb 10-1: USB disconnect, device number 54
[  974.258808][T25341] bridge_slave_1: left allmulticast mode
[  974.261301][T25341] bridge_slave_1: left promiscuous mode
[  974.263716][T25341] bridge0: port 2(bridge_slave_1) entered disabled state
[  974.275565][T25341] bridge_slave_0: left allmulticast mode
[  974.288189][T25341] bridge_slave_0: left promiscuous mode
[  974.290694][T25341] bridge0: port 1(bridge_slave_0) entered disabled state
[  974.654828][T25341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  974.662375][T25341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  974.667655][T25341] bond0 (unregistering): Released all slaves
[  974.683251][ T5356] 8021q: adding VLAN 0 to HW filter on device eth9
[  974.799085][T32226] bridge0: port 1(bridge_slave_0) entered blocking state
[  974.802233][T32226] bridge0: port 1(bridge_slave_0) entered disabled state
[  974.814279][T32226] bridge_slave_0: entered allmulticast mode
[  974.842206][T32226] bridge_slave_0: entered promiscuous mode
[  974.892375][T32226] bridge0: port 2(bridge_slave_1) entered blocking state
[  974.901928][T32226] bridge0: port 2(bridge_slave_1) entered disabled state
[  974.913639][T32226] bridge_slave_1: entered allmulticast mode
[  974.923399][T32249] loop9: detected capacity change from 0 to 32768
[  974.939751][T32226] bridge_slave_1: entered promiscuous mode
[  974.967999][T32249] XFS (loop9): DAX unsupported by block device. Turning off DAX.
[  974.976289][T32249] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  975.025077][T32249] XFS (loop9): Ending clean mount
[  975.056018][T32226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  975.076613][T32249] XFS (loop9): Quotacheck needed: Please wait.
[  975.091245][T32226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  975.321744][ T5356] 8021q: adding VLAN 0 to HW filter on device eth10
[  975.325783][T32226] team0: Port device team_slave_0 added
[  975.332800][T32226] team0: Port device team_slave_1 added
[  975.380877][T32226] batman_adv: batadv0: Adding interface: batadv_slave_0
[  975.389820][T32226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  975.424681][T32226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  975.436141][T32226] batman_adv: batadv0: Adding interface: batadv_slave_1
[  975.444165][T32226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  975.498932][T32249] XFS (loop9): Quotacheck: Done.
[  975.507674][T32226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  975.662807][T27717] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  975.750481][   T54] Bluetooth: hci0: command tx timeout
[  975.821087][T32226] hsr_slave_0: entered promiscuous mode
[  975.825658][T32226] hsr_slave_1: entered promiscuous mode
[  975.830968][T32226] debugfs: 'hsr0' already exists in 'hsr'
[  975.851646][T32226] Cannot create hsr debugfs directory
[  975.871433][ T5356] 8021q: adding VLAN 0 to HW filter on device eth11
[  976.047366][T25341] hsr_slave_0: left promiscuous mode
[  976.088815][T25341] hsr_slave_1: left promiscuous mode
[  976.100023][T25341] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  976.105881][T25341] batman_adv: batadv0: Removing interface: batadv_slave_0
[  976.123325][T25341] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  976.144529][T25341] batman_adv: batadv0: Removing interface: batadv_slave_1
[  976.185927][T25341] veth1_macvtap: left promiscuous mode
[  976.193647][T25341] veth0_macvtap: left promiscuous mode
[  976.203214][T25341] veth1_vlan: left promiscuous mode
[  976.227892][T25341] veth0_vlan: left promiscuous mode
[  976.580754][T25341] team0 (unregistering): Port device team_slave_1 removed
[  976.648966][T25341] team0 (unregistering): Port device team_slave_0 removed
[  977.313719][ T5356] 8021q: adding VLAN 0 to HW filter on device eth12
[  977.724918][T32305] netdevsim netdevsim9 netdevsim0: entered promiscuous mode
[  977.731907][T32305] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  977.755262][T32305] netlink: 88 bytes leftover after parsing attributes in process `syz.9.9560'.
[  977.758269][T32305] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  977.842067][   T54] Bluetooth: hci0: command tx timeout
[  977.963936][T32309] x_tables: ip6_tables: mh match: only valid for protocol 135
[  978.193455][T32311] loop9: detected capacity change from 0 to 128
[  978.203788][T32311] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  978.216978][T32311] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  978.311131][T32226] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  978.696935][T32322] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9566'.
[  978.856616][T32226] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  978.986733][T32226] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  979.146948][T32226] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  979.384834][T32331] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9569'.
[  979.391971][T32331] netlink: 'syz.9.9569': attribute type 3 has an invalid length.
[  979.421049][T32331] gretap0: entered promiscuous mode
[  979.423957][T32331] gretap0: left promiscuous mode
[  979.486687][T32226] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  979.508899][T32226] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  979.515108][T32226] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  979.545616][T32226] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  979.555694][T32226] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  979.563810][T32226] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  979.567092][T32226] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  979.594158][T32226] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  979.907616][   T54] Bluetooth: hci0: command tx timeout
[  979.912590][T32226] 8021q: adding VLAN 0 to HW filter on device bond0
[  979.939909][T32226] 8021q: adding VLAN 0 to HW filter on device team0
[  979.946623][T13641] bridge0: port 1(bridge_slave_0) entered blocking state
[  979.949619][T13641] bridge0: port 1(bridge_slave_0) entered forwarding state
[  979.981876][T13641] bridge0: port 2(bridge_slave_1) entered blocking state
[  979.984768][T13641] bridge0: port 2(bridge_slave_1) entered forwarding state
[  980.189565][T32354] netlink: 'syz.6.9577': attribute type 5 has an invalid length.
[  980.234408][T32354] ip6erspan0: entered promiscuous mode
[  980.606773][   T33] audit: type=1326 audit(1778560570.641:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32370 comm="syz.6.9581" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  980.623168][   T33] audit: type=1326 audit(1778560570.641:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32370 comm="syz.6.9581" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  980.632740][   T33] audit: type=1326 audit(1778560570.651:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32370 comm="syz.6.9581" exe="/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  980.640828][   T33] audit: type=1326 audit(1778560570.651:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32370 comm="syz.6.9581" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  980.665771][T32226] 8021q: adding VLAN 0 to HW filter on device batadv0
[  981.752879][T32397] vlan2: entered allmulticast mode
[  981.755196][T32397] macsec0: entered allmulticast mode
[  981.758388][T32397] veth1_macvtap: entered allmulticast mode
[  981.852006][T32226] veth0_vlan: entered promiscuous mode
[  981.876063][T32226] veth1_vlan: entered promiscuous mode
[  981.922955][T32226] veth0_macvtap: entered promiscuous mode
[  981.932234][T32226] veth1_macvtap: entered promiscuous mode
[  981.958237][T31392] usb 10-1: new high-speed USB device number 55 using dummy_hcd
[  981.968241][T32226] batman_adv: batadv0: Interface activated: batadv_slave_0
[  981.988883][T27721] Bluetooth: hci0: command tx timeout
[  982.003201][T32226] batman_adv: batadv0: Interface activated: batadv_slave_1
[  982.028712][T25341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  982.038291][T25341] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  982.065778][T25341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  982.081053][T25341] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  982.121238][T31392] usb 10-1: Using ep0 maxpacket: 16
[  982.149832][T31392] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  982.183048][T31392] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  982.253634][T31392] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  982.274745][T31392] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  982.296862][T31392] usb 10-1: Product: syz
[  982.302845][T31392] usb 10-1: Manufacturer: syz
[  982.327741][T31392] usb 10-1: SerialNumber: syz
[  982.382267][T31392] usb 10-1: config 0 descriptor??
[  982.395952][T31392] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  982.402258][T13640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  982.416450][T13640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  982.422946][T31392] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class)
[  982.662716][ T3409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  982.667233][ T3409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  983.064830][T31392] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[  983.070267][T31392] em28xx 10-1:0.0: Config register raw data: 0xf0
[  983.074418][T31392] em28xx 10-1:0.0: I2S Audio (3 sample rate(s))
[  983.081704][T31392] em28xx 10-1:0.0: No AC97 audio processor
[  983.387143][T32415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  983.389539][T32415] IPv6: NLM_F_CREATE should be set when creating new route
[  983.392982][T32415] IPv6: NLM_F_CREATE should be set when creating new route
[  983.971275][T31392] usb 10-1: USB disconnect, device number 55
[  984.067536][T27721] Bluetooth: hci0: command 0x0405 tx timeout
[  984.219302][T32439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9607'.
[  984.225478][T32439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9607'.
[  984.232060][T32439] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  984.837206][T11995] usb 10-1: new high-speed USB device number 56 using dummy_hcd
[  985.012662][T11995] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  985.018028][T11995] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  985.021989][T11995] usb 10-1: config 1 has no interface number 0
[  985.024906][T11995] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  985.040177][T11995] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  985.056989][T11995] usb 10-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30
[  985.063338][T11995] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247
[  985.096014][T11995] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  985.102241][T11995] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  985.111930][T11995] usb 10-1: Product: syz
[  985.113707][T11995] usb 10-1: Manufacturer: syz
[  985.115372][T11995] usb 10-1: SerialNumber: syz
[  985.801018][T11995] cdc_ncm 10-1:1.1: bind() failure
[  985.853642][T11995] usb 10-1: USB disconnect, device number 56
[  986.075093][   T33] audit: type=1326 audit(1778560576.172:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32465 comm="syz.6.9620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  986.092927][   T33] audit: type=1326 audit(1778560576.182:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32465 comm="syz.6.9620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  986.101633][   T33] audit: type=1326 audit(1778560576.182:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32465 comm="syz.6.9620" exe="/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  986.110271][   T33] audit: type=1326 audit(1778560576.182:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32465 comm="syz.6.9620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  986.120310][   T33] audit: type=1326 audit(1778560576.182:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32465 comm="syz.6.9620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  986.130079][   T33] audit: type=1326 audit(1778560576.182:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32465 comm="syz.6.9620" exe="/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  986.139787][   T33] audit: type=1326 audit(1778560576.182:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32465 comm="syz.6.9620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  986.150252][   T33] audit: type=1326 audit(1778560576.182:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32465 comm="syz.6.9620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  986.171086][   T33] audit: type=1326 audit(1778560576.182:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32465 comm="syz.6.9620" exe="/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  986.191867][   T33] audit: type=1326 audit(1778560576.182:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32465 comm="syz.6.9620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229b99cdd9 code=0x7ffc0000
[  986.237727][T32469] fuse: fd is not a fuse device
[  986.276859][T32351] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  986.429515][T32351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  986.439606][T32351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  986.448335][T32351] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  986.454634][T32351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  986.463874][T32351] usb 5-1: config 0 descriptor??
[  986.881339][T32351] cp2112 0003:10C4:EA90.0047: unknown main item tag 0x0
[  986.892529][T32351] cp2112 0003:10C4:EA90.0047: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  987.084166][T32351] cp2112 0003:10C4:EA90.0047: Part Number: 0x00 Device Version: 0x00
[  987.381093][T32507] loop9: detected capacity change from 0 to 512
[  987.494078][T32351] cp2112 0003:10C4:EA90.0047: error setting SMBus config
[  987.509360][T32351] cp2112 0003:10C4:EA90.0047: probe with driver cp2112 failed with error -71
[  987.522090][T32351] usb 5-1: USB disconnect, device number 27
[  987.583210][T32507] FAT-fs (loop9): FAT read failed (blocknr 128)
[  987.608956][T32509] FAT-fs (loop9): FAT read failed (blocknr 128)
[  987.877599][T32518] loop9: detected capacity change from 0 to 8
[  987.895642][T32518] SQUASHFS error: Failed to read block 0xdfa: -5
[  987.900761][T32518] SQUASHFS error: Unable to read metadata cache entry [dfa]
[  987.913942][T32518] SQUASHFS error: Failed to read block 0x4e8: -5
[  987.922308][T32518] SQUASHFS error: Failed to read block 0x4de: -5
[  987.926741][T32518] SQUASHFS error: Failed to read block 0x4de: -5
[  987.933341][T32518] SQUASHFS error: Failed to read block 0x4de: -5
[  987.936200][T32518] SQUASHFS error: Failed to read block 0x4de: -5
[  987.939557][T32518] SQUASHFS error: Failed to read block 0x4de: -5
[  987.949272][T32518] SQUASHFS error: Failed to read block 0x4de: -5
[  987.951805][T32518] SQUASHFS error: Failed to read block 0x4de: -5
[  987.955128][T32518] SQUASHFS error: Failed to read block 0x4de: -5
[  987.960919][T32518] SQUASHFS error: Failed to read block 0x4e8: -5
[  988.330129][T32532] xt_bpf: check failed: parse error
[  988.426631][T12056] usb 10-1: new high-speed USB device number 57 using dummy_hcd
[  988.577380][T12056] usb 10-1: Using ep0 maxpacket: 32
[  988.583562][T12056] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  988.601047][T12056] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  988.614474][T12056] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  988.625525][T12056] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  988.642989][T12056] usb 10-1: config 0 descriptor??
[  988.898870][T31716] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  989.091785][T31716] usb 5-1: Using ep0 maxpacket: 16
[  989.094504][T12056] savu 0003:1E7D:2D5A.0048: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0
[  989.143092][T31716] usb 5-1: unable to get BOS descriptor or descriptor too short
[  989.160993][T31716] usb 5-1: config 8 has an invalid interface number: 111 but max is 0
[  989.177462][T31716] usb 5-1: config 8 has no interface number 0
[  989.188478][T31716] usb 5-1: config 8 interface 111 has no altsetting 0
[  989.208102][T31716] usb 5-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice=c5.04
[  989.217238][T31716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  989.222022][T31716] usb 5-1: Product: syz
[  989.232012][T31716] usb 5-1: Manufacturer: syz
[  989.233853][T31716] usb 5-1: SerialNumber: syz
[  989.338928][T31392] usb 10-1: USB disconnect, device number 57
[  989.550164][T31716] kaweth 5-1:8.111: couldn't find required endpoints
[  989.572120][T31716] usb 5-1: USB disconnect, device number 28
[  990.203807][T32592] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  990.472235][T32603] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9671'.
[  990.891275][T11995] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  991.070925][T11995] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  991.074699][T11995] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  991.079615][T11995] usb 5-1: Product: syz
[  991.081186][T11995] usb 5-1: SerialNumber: syz
[  991.090649][T11995] usb 5-1: config 0 descriptor??
[  991.193307][T32617] fuse: fd is not a fuse device
[  991.333225][T11995] hso 5-1:0.0: Can't find BULK endpoints
[  991.538522][ T9576] usb 5-1: USB disconnect, device number 29
[  991.587553][T32625] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9684'.
[  991.590614][T32625] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9684'.
[  991.695147][T32629] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9687'.
[  991.903058][T32633] loop9: detected capacity change from 0 to 8192
[  992.099447][T32645] loop4: detected capacity change from 0 to 512
[  992.110681][T32645] FAT-fs (loop4): count of clusters too big (2155872268)
[  992.118811][T32645] FAT-fs (loop4): Can't find a valid FAT filesystem
[  992.476324][T32652] loop4: detected capacity change from 0 to 32768
[  992.505627][T32652] JBD2: Ignoring recovery information on journal
[  992.565505][T32652] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  992.579296][T32652] (syz.4.9696,32652,0):ocfs2_find_entry:1111 ERROR: status = -117
[  992.582175][T32652] (syz.4.9696,32652,0):ocfs2_find_entry:1111 ERROR: status = -117
[  992.584708][T32652] (syz.4.9696,32652,0):ocfs2_symlink:2078 ERROR: status = -117
[  992.694447][T32226] ocfs2: Unmounting device (7,4) on (node local)
[  992.934907][T32668] loop9: detected capacity change from 0 to 4096
[  992.958244][T32668] ntfs3(loop9): Primary boot: invalid bytes per index 2(-1).
[  992.973886][T32668] ntfs3(loop9): try to read out of volume at offset 0x1ffe00
[  993.432589][T32679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9705'.
[  993.563740][T32681] loop9: detected capacity change from 0 to 2048
[  993.584761][T32681] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  993.598752][ T7416] udevd[7416]: incorrect nilfs2 checksum on /dev/loop9
[  993.605057][T32681] NILFS (loop9): mounting unchecked fs
[  993.632487][ T7416] udevd[7416]: incorrect nilfs2 checksum on /dev/loop9
[  993.692692][T32681] NILFS (loop9): recovery complete
[  993.731903][T32684] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  993.887921][T32686] loop9: detected capacity change from 0 to 2048
[  993.902230][T32686] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  994.017757][T32683] loop4: detected capacity change from 0 to 32768
[  994.026105][T32683] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.9707 (32683)
[  994.181722][T32683] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  994.194732][T32683] BTRFS info (device loop4): using sha256 checksum algorithm
[  994.480385][T32683] BTRFS info (device loop4): enabling ssd optimizations
[  994.489510][T32683] BTRFS info (device loop4): turning on async discard
[  994.494788][T32683] BTRFS info (device loop4): enabling free space tree
[  994.731589][T32226] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  994.778241][T31716] usb 10-1: new high-speed USB device number 58 using dummy_hcd
[  995.015428][T31716] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  995.019487][T31716] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  995.039814][T31716] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.087487][T31716] usb 10-1: config 0 descriptor??
[  995.159624][T31716] pwc: Askey VC010 type 2 USB webcam detected.
[  995.325228][T31716] pwc: send_video_command error -71
[  995.335714][T31716] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  995.382697][T31716] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71
[  995.441903][T31716] usb 10-1: USB disconnect, device number 58
[  996.151442][T32729] loop4: detected capacity change from 0 to 40427
[  996.159908][T32729] F2FS-fs: heap/no_heap options were deprecated
[  996.166606][T32729] F2FS-fs (loop4): build fault injection rate: 19
[  996.169625][T32729] F2FS-fs (loop4): build fault injection type: 0xeffa
[  996.176606][T32729] F2FS-fs (loop4): invalid crc value
[  996.182283][T32729] F2FS-fs (loop4): inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x329f/0x4a80
[  996.192866][T32729] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-12)
[  996.420824][T32735] netlink: 68 bytes leftover after parsing attributes in process `syz.9.9722'.
[  997.013421][T32743] program syz.4.9726 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  997.233226][T32749] loop9: detected capacity change from 0 to 32768
[  997.264769][T32749] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  998.312032][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  998.314675][ T1379] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  998.345541][T27717] ocfs2: Unmounting device (7,9) on (node local)
[  998.618260][T32767] loop9: detected capacity change from 0 to 4096
[  998.629925][T32767] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[  998.689950][T32767] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  998.725839][T32767] ntfs3(loop9): ino=1e, mi_enum_attr
[  998.727614][T32767] ntfs3(loop9): ino=1e, mi_enum_attr
[  998.756555][  T304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9738'.
[  999.085259][ T9576] usb 10-1: new high-speed USB device number 59 using dummy_hcd
[  999.162214][  T318] loop4: detected capacity change from 0 to 4096
[  999.176167][  T318] ntfs3(loop4): ino=4, mi_enum_attr
[  999.182395][  T318] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  999.190789][  T318] ntfs3(loop4): Failed to load $AttrDef (-22)
[  999.239822][ T9576] usb 10-1: Using ep0 maxpacket: 32
[  999.247470][ T9576] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  999.257083][ T9576] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  999.280441][ T9576] usb 10-1: config 0 descriptor??
[  999.500338][ T9576] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  999.533825][ T9576] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  999.538879][ T9576] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  999.541939][ T9576] usb 10-1: media controller created
[  999.557977][ T9576] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  999.637382][ T9576] DVB: Unable to find symbol dib7000p_attach()
[  999.640752][ T9576] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  999.870739][ T9576] rc_core: IR keymap rc-dib0700-rc5 not found
[  999.874455][ T9576] Registered IR keymap rc-empty
[  999.881061][ T9576] dvb-usb: could not initialize remote control.
[  999.890328][ T9576] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  999.914448][ T9576] usb 10-1: USB disconnect, device number 59
[ 1000.026610][ T9576] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[ 1000.605155][T12056] usb 10-1: new full-speed USB device number 60 using dummy_hcd
[ 1000.760291][T12056] usb 10-1: config index 0 descriptor too short (expected 1307, got 27)
[ 1000.764130][T12056] usb 10-1: config 0 has an invalid interface number: 0 but max is -1
[ 1000.768395][T12056] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1000.772619][T12056] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[ 1000.778667][T12056] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1000.783626][T12056] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1000.797928][T12056] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1000.802656][T12056] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[ 1000.811411][T12056] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[ 1000.817730][T12056] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1000.827004][T12056] usb 10-1: Product: syz
[ 1000.829031][T12056] usb 10-1: Manufacturer: syz
[ 1000.831204][T12056] usb 10-1: SerialNumber: syz
[ 1000.838446][T12056] usb 10-1: config 0 descriptor??
[ 1000.844411][T12056] hub 10-1:0.0: bad descriptor, ignoring hub
[ 1000.849772][T12056] hub 10-1:0.0: probe with driver hub failed with error -5
[ 1000.857632][T12056] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input59
[ 1001.154226][T12056] usb 10-1: USB disconnect, device number 60
[ 1001.876987][  T361] loop4: detected capacity change from 0 to 512
[ 1001.900163][  T361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1001.904543][  T361] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1002.106169][   T33] kauditd_printk_skb: 3 callbacks suppressed
[ 1002.106179][   T33] audit: type=1326 audit(1778560592.214:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=362 comm="syz.9.9763" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309939cdd9 code=0x7ffc0000
[ 1002.148260][   T33] audit: type=1326 audit(1778560592.214:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=362 comm="syz.9.9763" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309939cdd9 code=0x7ffc0000
[ 1002.163617][   T33] audit: type=1326 audit(1778560592.224:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=362 comm="syz.9.9763" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309939cdd9 code=0x7ffc0000
[ 1002.181101][   T33] audit: type=1326 audit(1778560592.224:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=362 comm="syz.9.9763" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309939cdd9 code=0x7ffc0000
[ 1002.199419][   T33] audit: type=1326 audit(1778560592.224:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=362 comm="syz.9.9763" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f309939cdd9 code=0x7ffc0000
[ 1002.222326][   T33] audit: type=1326 audit(1778560592.224:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=362 comm="syz.9.9763" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309939cdd9 code=0x7ffc0000
[ 1002.239417][   T33] audit: type=1326 audit(1778560592.224:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=362 comm="syz.9.9763" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309939cdd9 code=0x7ffc0000
[ 1002.277681][   T33] audit: type=1326 audit(1778560592.224:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=362 comm="syz.9.9763" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309939cdd9 code=0x7ffc0000
[ 1002.298878][   T33] audit: type=1326 audit(1778560592.224:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=362 comm="syz.9.9763" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309939cdd9 code=0x7ffc0000
[ 1002.325088][   T33] audit: type=1326 audit(1778560592.224:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=362 comm="syz.9.9763" exe="/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f309939cdd9 code=0x7ffc0000
[ 1002.338197][  T380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9768'.
[ 1002.649989][  T382] loop9: detected capacity change from 0 to 256
[ 1002.682653][  T382] FAT-fs (loop9): Directory bread(block 64) failed
[ 1002.696169][  T382] FAT-fs (loop9): Directory bread(block 65) failed
[ 1002.700414][  T382] FAT-fs (loop9): Directory bread(block 66) failed
[ 1002.703933][  T382] FAT-fs (loop9): Directory bread(block 67) failed
[ 1002.710909][  T382] FAT-fs (loop9): Directory bread(block 68) failed
[ 1002.713756][  T382] FAT-fs (loop9): Directory bread(block 69) failed
[ 1002.718319][  T382] FAT-fs (loop9): Directory bread(block 70) failed
[ 1002.720554][  T382] FAT-fs (loop9): Directory bread(block 71) failed
[ 1002.723320][  T382] FAT-fs (loop9): Directory bread(block 72) failed
[ 1002.726684][  T382] FAT-fs (loop9): Directory bread(block 73) failed
[ 1003.113080][T32226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1003.143511][  T384] loop9: detected capacity change from 0 to 256
[ 1003.209972][  T384] FAT-fs (loop9): Directory bread(block 64) failed
[ 1003.221614][  T384] FAT-fs (loop9): Directory bread(block 65) failed
[ 1003.230169][  T384] FAT-fs (loop9): Directory bread(block 66) failed
[ 1003.237673][  T384] FAT-fs (loop9): Directory bread(block 67) failed
[ 1003.249215][  T384] FAT-fs (loop9): Directory bread(block 68) failed
[ 1003.254406][  T384] FAT-fs (loop9): Directory bread(block 69) failed
[ 1003.259660][  T384] FAT-fs (loop9): Directory bread(block 70) failed
[ 1003.262155][  T384] FAT-fs (loop9): Directory bread(block 71) failed
[ 1003.265025][  T384] FAT-fs (loop9): Directory bread(block 72) failed
[ 1003.267323][  T384] FAT-fs (loop9): Directory bread(block 73) failed
[ 1003.406462][  T389] loop9: detected capacity change from 0 to 256
[ 1003.451911][  T393] loop4: detected capacity change from 0 to 128
[ 1003.468383][  T393] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[ 1003.482432][  T393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1003.917772][  T409] loop4: detected capacity change from 0 to 256
[ 1003.968667][  T409] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[ 1004.081353][  T416] loop4: detected capacity change from 0 to 64
[ 1004.648362][  T442] loop4: detected capacity change from 0 to 512
[ 1004.656060][  T442] EXT4-fs: Ignoring removed oldalloc option
[ 1004.671112][  T442] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1004.683442][  T442] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.9798: invalid indirect mapped block 83886080 (level 1)
[ 1004.691537][  T442] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[ 1004.691840][  T442] EXT4-fs (loop4): Remounting filesystem read-only
[ 1004.695783][    C0] EXT4-fs (loop4): error count since last fsck: 1
[ 1004.695797][    C0] EXT4-fs (loop4): initial error at time 1778560594: ext4_free_branches:1023: inode 16
[ 1004.695817][    C0] EXT4-fs (loop4): last error at time 1778560594: ext4_free_branches:1023: inode 16
[ 1004.716904][  T442] EXT4-fs (loop4): 1 orphan inode deleted
[ 1004.719366][  T442] EXT4-fs (loop4): 1 truncate cleaned up
[ 1004.722333][  T442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1004.739827][T32226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1005.196188][  T462] loop4: detected capacity change from 0 to 1024
[ 1005.291704][  T440] loop9: detected capacity change from 0 to 40427
[ 1005.298411][  T440] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[ 1005.304997][  T440] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 1005.316337][  T440] F2FS-fs (loop9): invalid crc value
[ 1005.429037][  T440] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1005.445971][  T440] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[ 1005.448792][  T440] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 1006.943998][   T55] block nbd0: Receive control failed (result -32)
[ 1008.286419][  T502] loop9: detected capacity change from 0 to 512
[ 1008.297096][  T502] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1008.325397][  T502] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1008.336020][  T502] ext4 filesystem being mounted at /604/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1008.407576][T27717] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1008.521887][  T511] netlink: 408 bytes leftover after parsing attributes in process `syz.9.9823'.
[ 1008.648830][  T517] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1008.674412][  T519] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9827'.
[ 1008.802533][T27721] Bluetooth: hci1: unexpected event for opcode 0x042f
[ 1009.037709][  T531] xt_hashlimit: size too large, truncated to 1048576
[ 1010.601076][  T564] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[ 1010.618146][  T564] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[ 1010.647031][  T564] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[ 1010.754274][  T564] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1011.029762][  T565] loop4: detected capacity change from 0 to 32768
[ 1011.063288][  T565] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1011.092122][  T565] XFS (loop4): Ending clean mount
[ 1011.119809][  T565] XFS (loop4): Quotacheck needed: Please wait.
[ 1011.146691][T12056] usb 10-1: new high-speed USB device number 61 using dummy_hcd
[ 1011.187561][  T565] XFS (loop4): Quotacheck: Done.
[ 1011.221681][T32226] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1011.256869][  T589] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9852'.
[ 1011.260668][  T589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9852'.
[ 1011.307276][T12056] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1011.313736][T12056] usb 10-1: config 0 has no interfaces?
[ 1011.315955][T12056] usb 10-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da
[ 1011.328639][T12056] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1011.338087][T12056] usb 10-1: config 0 descriptor??
[ 1011.549637][ T9576] usb 10-1: USB disconnect, device number 61
[ 1116.843588][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1116.846248][    C0] rcu: 	1-...!: (2 ticks this GP) idle=720c/1/0x4000000000000000 softirq=190823/190823 fqs=2
[ 1116.852785][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=202985, q=583 ncpus=2)
[ 1116.855960][    C0] Sending NMI from CPU 0 to CPUs 1:
[ 1116.856032][    C1] NMI backtrace for cpu 1
[ 1116.856058][    C1] CPU: 1 UID: 0 PID: 537 Comm: syz.6.9829 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1116.856075][    C1] Tainted: [L]=SOFTLOCKUP
[ 1116.856079][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1116.856087][    C1] RIP: 0010:rcu_is_watching+0x10/0xb0
[ 1116.856109][    C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 e0 38 8e 11 <e8> eb 78 fd 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df
[ 1116.856119][    C1] RSP: 0018:ffffc90000a08bc0 EFLAGS: 00000082
[ 1116.856131][    C1] RAX: ffffffff81b275b1 RBX: 0000000000000001 RCX: 0000000000010100
[ 1116.856140][    C1] RDX: ffff88801c451d80 RSI: 0000000000000001 RDI: 0000000000000002
[ 1116.856147][    C1] RBP: ffff88810be53300 R08: ffffffff9030b1f7 R09: 1ffffffff206163e
[ 1116.856156][    C1] R10: dffffc0000000000 R11: fffffbfff206163f R12: 0000000000000001
[ 1116.856164][    C1] R13: 1ffff110478c507a R14: ffff88823c628420 R15: ffffffff89b84aa0
[ 1116.856173][    C1] FS:  00007f229c8d56c0(0000) GS:ffff8882a9290000(0000) knlGS:0000000000000000
[ 1116.856183][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1116.856191][    C1] CR2: 0000200000000100 CR3: 00000000241ee000 CR4: 00000000000006f0
[ 1116.856228][    C1] Call Trace:
[ 1116.856237][    C1]  <IRQ>
[ 1116.856244][    C1]  ? __pfx_advance_sched+0x10/0x10
[ 1116.856262][    C1]  __hrtimer_run_queues+0x32a/0xa20
[ 1116.856284][    C1]  hrtimer_interrupt+0x44b/0x950
[ 1116.856346][    C1]  __sysvec_apic_timer_interrupt+0x102/0x430
[ 1116.856365][    C1]  sysvec_apic_timer_interrupt+0x52/0xc0
[ 1116.856381][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1116.856399][    C1] RIP: 0010:__rcu_read_lock+0x0/0x60
[ 1116.856415][    C1] Code: 3f fc ff ff 4c 89 ff e8 5e 82 85 00 e9 32 fc ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 53 65 48 8b 1d ab 83 8d 11 48 81 c3 c4 04 00 00 48 89
[ 1116.856425][    C1] RSP: 0018:ffffc90000a08ec8 EFLAGS: 00000202
[ 1116.856435][    C1] RAX: 00000000000569f2 RBX: 1ffff110478c7977 RCX: 0000000080000100
[ 1116.856443][    C1] RDX: 0000000000000002 RSI: ffffffff8dfa8792 RDI: ffffffff8c28b5e0
[ 1116.856451][    C1] RBP: 0000000000000001 R08: ffffffff9030b1f7 R09: 1ffffffff206163e
[ 1116.856459][    C1] R10: dffffc0000000000 R11: fffffbfff206163f R12: ffff88823c63cbc0
[ 1116.856467][    C1] R13: 0000000000000002 R14: ffff88823c63cbb8 R15: ffff88810be53000
[ 1116.856481][    C1]  net_tx_action+0x5af/0xc30
[ 1116.856497][    C1]  handle_softirqs+0x22a/0x840
[ 1116.856511][    C1]  ? __irq_exit_rcu+0xca/0x220
[ 1116.856526][    C1]  __irq_exit_rcu+0xca/0x220
[ 1116.856538][    C1]  irq_exit_rcu+0x9/0x30
[ 1116.856549][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1116.856562][    C1]  </IRQ>
[ 1116.856566][    C1]  <TASK>
[ 1116.856570][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1116.856580][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x8/0x90
[ 1116.856596][    C1] Code: 89 44 11 20 e9 d9 70 e5 09 cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d d8 56 73 11 65 8b 15 f9 56 73 11 81 e2 00 01 ff 00 74
[ 1116.856606][    C1] RSP: 0018:ffffc90003b16860 EFLAGS: 00000246
[ 1116.856616][    C1] RAX: ffffffff820e3d8c RBX: ffffea0006a5bac0 RCX: ffff88801c451d80
[ 1116.856624][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1116.856632][    C1] RBP: dffffc0000000000 R08: ffffea0006a5bac7 R09: 1ffffd4000d4b758
[ 1116.856640][    C1] R10: dffffc0000000000 R11: fffff94000d4b759 R12: 0000000000001000
[ 1116.856648][    C1] R13: 0000000000001000 R14: 0000000000000000 R15: ffffea0006a5bac8
[ 1116.856659][    C1]  ? shmem_write_end+0x3fc/0x5d0
[ 1116.856677][    C1]  shmem_write_end+0x3fc/0x5d0
[ 1116.856694][    C1]  generic_perform_write+0x620/0x8f0
[ 1116.856714][    C1]  ? __pfx_generic_perform_write+0x10/0x10
[ 1116.856729][    C1]  ? down_write+0x16d/0x200
[ 1116.856749][    C1]  ? file_update_time_flags+0x3b3/0x4a0
[ 1116.856763][    C1]  shmem_file_write_iter+0xf8/0x120
[ 1116.856780][    C1]  __kernel_write_iter+0x41e/0x880
[ 1116.856800][    C1]  ? __pfx___kernel_write_iter+0x10/0x10
[ 1116.856819][    C1]  ? __asan_memset+0x22/0x50
[ 1116.856835][    C1]  ? iov_iter_bvec+0xb8/0x180
[ 1116.856853][    C1]  dump_user_range+0xc19/0x12c0
[ 1116.856872][    C1]  ? __pfx_dump_user_range+0x10/0x10
[ 1116.856885][    C1]  ? elf_coredump_extra_notes_write+0x129/0x4d0
[ 1116.856900][    C1]  ? __pfx_elf_coredump_extra_notes_write+0x10/0x10
[ 1116.856917][    C1]  elf_core_dump+0x34c2/0x3ad0
[ 1116.856937][    C1]  ? __pfx_elf_core_dump+0x10/0x10
[ 1116.856950][    C1]  ? __kasan_kmalloc+0x93/0xb0
[ 1116.856966][    C1]  ? __kvmalloc_node_noprof+0x528/0x8a0
[ 1116.856983][    C1]  ? coredump_write+0x387/0x1910
[ 1116.856994][    C1]  ? vfs_coredump+0x3807/0x4530
[ 1116.857006][    C1]  ? get_signal+0x1107/0x1330
[ 1116.857016][    C1]  ? arch_do_signal_or_restart+0xbc/0x830
[ 1116.857032][    C1]  ? irqentry_exit+0x284/0x730
[ 1116.857045][    C1]  ? exc_general_protection+0x16b/0x1f0
[ 1116.857061][    C1]  ? asm_exc_general_protection+0x26/0x30
[ 1116.857074][    C1]  ? mas_ascend+0x304/0x890
[ 1116.857101][    C1]  ? vfs_coredump+0x3807/0x4530
[ 1116.857113][    C1]  ? 0xffffffffff600000
[ 1116.857128][    C1]  coredump_write+0x1216/0x1910
[ 1116.857147][    C1]  ? __pfx_coredump_write+0x10/0x10
[ 1116.857165][    C1]  ? unshare_files+0xa8/0x140
[ 1116.857181][    C1]  vfs_coredump+0x3807/0x4530
[ 1116.857200][    C1]  ? __pfx_vfs_coredump+0x10/0x10
[ 1116.857213][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[ 1116.857227][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[ 1116.857242][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[ 1116.857257][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[ 1116.857270][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[ 1116.857286][    C1]  ? unwind_next_frame+0xa6/0x2550
[ 1116.857329][    C1]  ? lock_acquire+0x106/0x350
[ 1116.857345][    C1]  ? unwind_next_frame+0xa6/0x2550
[ 1116.857359][    C1]  ? is_bpf_text_address+0x26/0x2b0
[ 1116.857371][    C1]  ? lock_acquire+0x106/0x350
[ 1116.857387][    C1]  ? is_bpf_text_address+0x26/0x2b0
[ 1116.857405][    C1]  ? is_bpf_text_address+0x292/0x2b0
[ 1116.857416][    C1]  ? is_bpf_text_address+0x26/0x2b0
[ 1116.857428][    C1]  ? kernel_text_address+0xa5/0xe0
[ 1116.857444][    C1]  ? __kernel_text_address+0xd/0x30
[ 1116.857459][    C1]  ? unwind_get_return_address+0x4d/0x90
[ 1116.857472][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1116.857489][    C1]  ? arch_stack_walk+0xfb/0x150
[ 1116.857507][    C1]  ? stack_trace_save+0xa9/0x100
[ 1116.857523][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1116.857540][    C1]  ? stack_depot_save_flags+0x33/0x810
[ 1116.857558][    C1]  ? kasan_save_track+0x4f/0x80
[ 1116.857573][    C1]  ? kasan_save_track+0x3e/0x80
[ 1116.857588][    C1]  ? kasan_save_free_info+0x46/0x50
[ 1116.857601][    C1]  ? __kasan_slab_free+0x5c/0x80
[ 1116.857616][    C1]  ? kmem_cache_free+0x182/0x650
[ 1116.857632][    C1]  ? get_signal+0xa4a/0x1330
[ 1116.857642][    C1]  ? arch_do_signal_or_restart+0xbc/0x830
[ 1116.857657][    C1]  ? irqentry_exit+0x284/0x730
[ 1116.857669][    C1]  ? exc_general_protection+0x16b/0x1f0
[ 1116.857683][    C1]  ? asm_exc_general_protection+0x26/0x30
[ 1116.857713][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1116.857728][    C1]  get_signal+0x1107/0x1330
[ 1116.857747][    C1]  arch_do_signal_or_restart+0xbc/0x830
[ 1116.857765][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1116.857782][    C1]  ? force_sig_info_to_task+0x37e/0x4a0
[ 1116.857805][    C1]  irqentry_exit+0x284/0x730
[ 1116.857820][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1116.857835][    C1]  exc_general_protection+0x16b/0x1f0
[ 1116.857857][    C1]  asm_exc_general_protection+0x26/0x30
[ 1116.857869][    C1] RIP: 0033:0x7f229b99cde1
[ 1116.857881][    C1] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[ 1116.857890][    C1] RSP: 002b:0000200000000280 EFLAGS: 00010217
[ 1116.857900][    C1] RAX: 0000000000000000 RBX: 00007f229bc15fa0 RCX: 00007f229b99cdd9
[ 1116.857908][    C1] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000120000
[ 1116.857916][    C1] RBP: 00007f229ba32d69 R08: 0000200000000440 R09: 0000200000000440
[ 1116.857924][    C1] R10: 0000200000000300 R11: 0000000000000206 R12: 0000000000000000
[ 1116.857931][    C1] R13: 00007f229bc16038 R14: 00007f229bc15fa0 R15: 00007ffc5bed5e78
[ 1116.857945][    C1]  </TASK>
[ 1116.858001][    C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g202985 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1117.123721][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1117.127007][    C0] rcu: RCU grace-period kthread stack dump:
[ 1117.128880][    C0] task:rcu_preempt     state:R  running task     stack:27536 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1117.133177][    C0] Call Trace:
[ 1117.134373][    C0]  <TASK>
[ 1117.135387][    C0]  __schedule+0x17b4/0x5680
[ 1117.137221][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[ 1117.138857][    C0]  ? __pfx___schedule+0x10/0x10
[ 1117.140521][    C0]  ? schedule+0x90/0x360
[ 1117.142229][    C0]  schedule+0x164/0x360
[ 1117.143753][    C0]  schedule_timeout+0x158/0x2c0
[ 1117.145526][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[ 1117.147263][    C0]  ? __pfx_process_timeout+0x10/0x10
[ 1117.149031][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1117.150873][    C0]  ? prepare_to_swait_event+0x340/0x370
[ 1117.152690][    C0]  rcu_gp_fqs_loop+0x312/0x11d0
[ 1117.154268][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[ 1117.156393][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1117.158502][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1117.160575][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1117.162528][    C0]  rcu_gp_kthread+0x9e/0x2b0
[ 1117.164021][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1117.165695][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1117.167651][    C0]  ? __kthread_parkme+0x7a/0x1f0
[ 1117.169288][    C0]  ? __kthread_parkme+0x19c/0x1f0
[ 1117.171174][    C0]  kthread+0x388/0x470
[ 1117.172568][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1117.174328][    C0]  ? __pfx_kthread+0x10/0x10
[ 1117.175832][    C0]  ret_from_fork+0x514/0xb70
[ 1117.177508][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1117.179600][    C0]  ? __switch_to+0xc79/0x1410
[ 1117.181577][    C0]  ? __pfx_kthread+0x10/0x10
[ 1117.183530][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1117.185525][    C0]  </TASK>
[ 1117.186821][    C0] rcu: Stack dump where RCU GP kthread last ran:
[ 1117.189411][    C0] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1117.193752][    C0] Tainted: [L]=SOFTLOCKUP
[ 1117.195531][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1117.199560][    C0] Workqueue: events_unbound toggle_allocation_gate
[ 1117.202232][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x30/0x70
[ 1117.204790][    C0] Code: 04 24 65 48 8b 0d b8 5b 73 11 65 8b 15 d9 5b 73 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 cc 16 00 00 00 74 2c <8b> 91 a8 16 00 00 83 fa 02 75 21 48 8b 91 b0 16 00 00 48 8b 32 48
[ 1117.212608][    C0] RSP: 0018:ffffc90000a176f8 EFLAGS: 00000246
[ 1117.215128][    C0] RAX: ffffffff81b9abb6 RBX: ffff88812103c2c8 RCX: ffff8881032dd880
[ 1117.218382][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1117.221633][    C0] RBP: ffffc90000a17840 R08: ffffffff9030b1f7 R09: 1ffffffff206163e
[ 1117.224992][    C0] R10: dffffc0000000000 R11: fffffbfff206163f R12: 1ffff110478c8199
[ 1117.228251][    C0] R13: dffffc0000000000 R14: ffff88823c640cc8 R15: 0000000000000001
[ 1117.231441][    C0] FS:  0000000000000000(0000) GS:ffff88818dc90000(0000) knlGS:0000000000000000
[ 1117.234964][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1117.237661][    C0] CR2: 000020000015bffc CR3: 000000000e74a000 CR4: 00000000000006f0
[ 1117.240980][    C0] Call Trace:
[ 1117.242407][    C0]  <TASK>
[ 1117.243660][    C0]  smp_call_function_many_cond+0xfe6/0x13d0
[ 1117.246118][    C0]  ? __pfx_do_sync_core+0x10/0x10
[ 1117.248235][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 1117.250856][    C0]  ? kmem_cache_alloc_bulk_noprof+0xae/0x7c0
[ 1117.253113][    C0]  ? __pfx___text_poke+0x10/0x10
[ 1117.255120][    C0]  ? __pfx_do_sync_core+0x10/0x10
[ 1117.257148][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[ 1117.259043][    C0]  smp_text_poke_batch_finish+0x5f5/0x1160
[ 1117.260936][    C0]  ? arch_jump_label_transform_apply+0x17/0x30
[ 1117.262938][    C0]  ? __pfx___mutex_lock+0x10/0x10
[ 1117.264728][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[ 1117.266707][    C0]  ? arch_jump_label_transform_queue+0x97/0x110
[ 1117.268775][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[ 1117.270726][    C0]  static_key_enable_cpuslocked+0x128/0x240
[ 1117.272651][    C0]  static_key_enable+0x1a/0x20
[ 1117.274193][    C0]  toggle_allocation_gate+0xab/0x290
[ 1117.276355][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[ 1117.278290][    C0]  ? process_scheduled_works+0xa70/0x1860
[ 1117.280253][    C0]  ? process_scheduled_works+0xa70/0x1860
[ 1117.282101][    C0]  ? process_scheduled_works+0xa70/0x1860
[ 1117.283981][    C0]  process_scheduled_works+0xb5d/0x1860
[ 1117.285910][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1117.288251][    C0]  ? assign_work+0x3d5/0x5e0
[ 1117.289971][    C0]  worker_thread+0xa53/0xfc0
[ 1117.291717][    C0]  kthread+0x388/0x470
[ 1117.293120][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1117.294841][    C0]  ? __pfx_kthread+0x10/0x10
[ 1117.296353][    C0]  ret_from_fork+0x514/0xb70
[ 1117.297812][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1117.299487][    C0]  ? __switch_to+0xc79/0x1410
[ 1117.301178][    C0]  ? __pfx_kthread+0x10/0x10
[ 1117.302859][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1117.304466][    C0]  </TASK>
