last executing test programs:

2m56.090502795s ago: executing program 32 (id=72):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000001280)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100)={0x2, 0x2}, 0x2)

2m49.02673656s ago: executing program 33 (id=136):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40046305, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2m28.473363713s ago: executing program 0 (id=287):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff000005000380ff0000000500030080ff00000500030080000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0)

2m28.151816818s ago: executing program 0 (id=289):
r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x1000000, 0x0, 0xffffffff, 0xfa000, 0x1a5e00})

2m28.115110867s ago: executing program 0 (id=291):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

2m27.543832989s ago: executing program 0 (id=300):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = io_uring_setup(0x3450, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20)

2m27.44399061s ago: executing program 0 (id=301):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xa, 0x1, 0x20a9, 0x3, 0x2, 0x1})

2m27.443667285s ago: executing program 0 (id=303):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, 0x0)

2m12.099854722s ago: executing program 34 (id=303):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, 0x0)

1m57.890436985s ago: executing program 5 (id=524):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00')
read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020)

1m57.890288611s ago: executing program 5 (id=525):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000040)=0x2b)

1m57.843139451s ago: executing program 5 (id=526):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}}, 0x40000)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0403d11, 0x0)
socket$inet(0xa, 0x801, 0x84)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6", 0x3)
r6 = accept4(r5, 0x0, 0x0, 0x80800)
sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
pipe(&(0x7f0000000800))
socket$can_bcm(0x1d, 0x2, 0x2)

1m56.962177943s ago: executing program 5 (id=527):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdir(&(0x7f0000000580)='./file0\x00', 0x92)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152)

1m56.863912537s ago: executing program 5 (id=528):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="202315"], 0x0, 0x0, 0x0, 0x0}, 0x0)

1m56.653656822s ago: executing program 5 (id=529):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000480))
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000001c0)={0x1, 0xffffffff, 0x3, 0x8, 0x0, 0x6})

1m56.578056384s ago: executing program 35 (id=529):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000480))
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000001c0)={0x1, 0xffffffff, 0x3, 0x8, 0x0, 0x6})

1m55.33189431s ago: executing program 4 (id=540):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
unshare(0x20000400)
chdir(&(0x7f0000000140)='./bus\x00')
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x11c)
fadvise64(r0, 0x4, 0xfc, 0x4)
socket$packet(0x11, 0x2, 0x300)

1m55.331598829s ago: executing program 4 (id=541):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x8000000008})
fcntl$lock(r0, 0x26, &(0x7f00000001c0)={0x0, 0x1, 0xa, 0xffff})
fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0xe71})

1m55.262376833s ago: executing program 4 (id=542):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x9, @local, 0x7}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={r1, 0x0, "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"}, &(0x7f0000000180)=0xfebd)

1m55.108963398s ago: executing program 4 (id=543):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x410c04, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@noload}]}, 0x1, 0x779, &(0x7f0000001900)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000007c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd=r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1})
io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0)

1m54.796953116s ago: executing program 4 (id=544):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040))

1m54.373230854s ago: executing program 4 (id=547):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8802, 0x0)
r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x1000, 0x2, 0x800001b4}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1})
io_uring_enter(r0, 0x47ba, 0x3000000, 0x0, 0x0, 0x0)

1m54.218530913s ago: executing program 36 (id=547):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8802, 0x0)
r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x1000, 0x2, 0x800001b4}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1})
io_uring_enter(r0, 0x47ba, 0x3000000, 0x0, 0x0, 0x0)

1m47.753358084s ago: executing program 6 (id=585):
syz_mount_image$cramfs(&(0x7f0000000240), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8080, &(0x7f0000001b40)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="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", @ANYRES32, @ANYRESDEC], 0xfe, 0x14f, &(0x7f0000000ac0)="$eJzszjFLclEcx/Hf4d5HfSqToMCCTGjokph2w5qiNBKE7ELh0lJgNxIUI6Gcwoi2hqDVwQqaxLdgWYulEPYmWpwdi+M1Imhp/32Wy/mec/7nri42NXiBExe6VrKZg0MzlzN3vRtGPLr5Xq2GZbcB6PzYt87fh4F9+VWB9ikg86MT2EulzZlkNi3X7TCgAYj0Y1n2oGxDQJ9sw9bZWVj3tUmgNmI1/Zc212tjKhBxWU3O+7gGpuQ8O4BU2rRbv4d80VcpP6836jH/9N24gvOYb+Jfb++re8wLPTp6O+BWkDCfbhAR8t5boO5/DVTKrWYjvmYsAdD1eQEUgqGW8dKIhQqXULftR8CWAAS+37HB7VETDpwJ4Ko7q/0gnABqpY6RGVwo9d53HCteQOSLyR1Frv8DigYBIiIiIiIiIiIiIiIiIiKiv/oMAAD//2BhXwk=")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

1m47.595619129s ago: executing program 6 (id=586):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000100)={[{@resgid}, {@resgid}, {@noblock_validity}]}, 0xff, 0x454, &(0x7f0000000740)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]})

1m46.945768275s ago: executing program 6 (id=589):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]})

1m46.650036462s ago: executing program 6 (id=592):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2000, 0x103)
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0xfe, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0)

1m46.128600075s ago: executing program 6 (id=595):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0xa00000, &(0x7f0000000140)={[{@user_xattr}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
lchown(0x0, 0x0, 0xee01)
unshare(0x2040400)
pipe2(0x0, 0x80000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@fadd={0x58, 0x114, 0x6, {{0x9, 0x80}, 0x0, 0x0, 0x1, 0x10001, 0x2, 0x9, 0x8, 0xb}}], 0x58}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
sendmmsg$inet6(r2, 0x0, 0x0, 0x0)

1m45.574905071s ago: executing program 6 (id=598):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x2a, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r1, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

1m45.238633488s ago: executing program 37 (id=598):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x2a, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r1, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

1m36.622847512s ago: executing program 8 (id=664):
syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea00403c0020010000000000000000000000000002ff0200000000000000000000000000010004c910"], 0x0)

1m36.562937588s ago: executing program 8 (id=665):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r4, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00000000007fffffff00"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xff02}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x93, 0x1, 0x0, [{@broadcast}, {}, {@private}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="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", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240), 0x300}}], 0x4, 0xc080)

1m35.655300147s ago: executing program 8 (id=669):
syz_emit_ethernet(0x4e, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "f91e2e", 0x18, 0x3c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@hopopts={0x88}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "706a01", 0x0, "cc1978"}}}}}}}, 0x0)

1m35.352465761s ago: executing program 8 (id=670):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2004ce, &(0x7f0000000340)={[{@minixdf}, {@debug}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x464, &(0x7f0000000400)="$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")
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000007480)=ANY=[@ANYBLOB="043e3a0d01150001aaaaaaaaaa500700020d0506000700000000b54710986e64b0aac49fe008f7e62997056505f31e"], 0x3d)

1m34.746389116s ago: executing program 8 (id=671):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000580)=0x5)
r1 = dup(r0)
ioctl$SIOCSIFHWADDR(r1, 0x8910, &(0x7f0000000240)={'hsr0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}})

1m34.343026267s ago: executing program 8 (id=675):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), r1)

1m34.194465541s ago: executing program 38 (id=675):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), r1)

1m19.302327195s ago: executing program 3 (id=765):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xeb0000000, 0xab, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
setresuid(0xffffffffffffffff, 0xee00, 0x0)

1m18.73151346s ago: executing program 3 (id=769):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e0)

1m18.460835862s ago: executing program 3 (id=770):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000c80)='./file1\x00', 0x8081, &(0x7f00000008c0)={[{}, {@type={'type', 0x3d, "bbffffff"}}, {@force}, {@uid}, {@force}, {@creator={'creator', 0x3d, "f5e298ff"}}, {@nls={'nls', 0x3d, 'macturkish'}}, {@part={'part', 0x3d, 0x6}}, {@type={'type', 0x3d, "928fff1b"}}]}, 0x3d, 0x6e8, &(0x7f00000001c0)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000040)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

1m18.358113329s ago: executing program 3 (id=771):
setreuid(0xee01, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c2, &(0x7f00000008c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

1m18.301419234s ago: executing program 3 (id=773):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x8000002000000, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendfile(r0, r1, 0x0, 0x200002)

1m18.092593026s ago: executing program 3 (id=774):
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)

1m17.931261659s ago: executing program 39 (id=774):
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)

46.012632563s ago: executing program 9 (id=1051):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8004}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000bea000/0x2000)=nil, 0x2000, 0xd, 0x10010, 0xffffffffffffffff, 0xfffff000)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, r0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)

43.525869566s ago: executing program 9 (id=1063):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0xd1, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000d80)="5453b4b759f9d4f4f33bda880b70a0dadde06223919f4585429ef6", 0x1b}, {&(0x7f00000002c0)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b45", 0xaa}], 0x2}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)='\a', 0x1}], 0x1}}], 0x2, 0xc0)
close_range(r0, 0xffffffffffffffff, 0x0)

43.445672421s ago: executing program 9 (id=1065):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000140)={[{@barrier}, {@gid}, {@nobarrier}, {@creator={'creator', 0x3d, "ff60f383"}}, {@type={'type', 0x3d, "ca624cf5"}}, {@nls={'nls', 0x3d, 'macceltic'}}, {@force}]}, 0x1, 0x6f0, &(0x7f0000000400)="$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")
mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0)
mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0)

43.337214078s ago: executing program 9 (id=1067):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20)

43.084981896s ago: executing program 9 (id=1071):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900})
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8})
ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"})

42.868078405s ago: executing program 9 (id=1073):
r0 = socket$inet6(0xa, 0x3, 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000180)={0xa, 0x0, 0x1, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c)

42.594032943s ago: executing program 40 (id=1073):
r0 = socket$inet6(0xa, 0x3, 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000180)={0xa, 0x0, 0x1, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c)

2.681506151s ago: executing program 1 (id=1357):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)

2.591641285s ago: executing program 1 (id=1358):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8108c4, &(0x7f0000000300)={[{@resv_level={'resv_level', 0x3d, 0x400}}, {@heartbeat_none}, {@resv_level={'resv_level', 0x3d, 0x1}}, {@coherency_full}, {@err_ro}, {@localalloc={'localalloc', 0x3d, 0x1}}, {@intr}, {@localalloc}]}, 0x1, 0x442f, &(0x7f000000e480)="$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")
creat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00')

2.209940227s ago: executing program 1 (id=1359):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d7, &(0x7f0000001300)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
symlink(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

1.750275652s ago: executing program 1 (id=1360):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9)

1.681870012s ago: executing program 1 (id=1361):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x4000000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x2, 0x0)

1.571275153s ago: executing program 2 (id=1362):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000140)={[{@acl}, {@heartbeat_none}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0x6b2}}, {@acl}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4443, &(0x7f0000004480)="$eJzs3c9rHNcdAPA3I9WWXNuVXB9cKHShhpa2CMmntjJUlmXLkq26uLUpvaxX0tpWu9IaaVV6MFS9GXoK5BByMAnkppPRIVcH8g/kkqNzNiSHXAIBkw27OyvtjHbRxtm1IvP5gDU779d8d78zs28P4xcnKg9WNnIrG7nCWq68dG/jQu7f5dLmajHEr8lhH5/u9D5PUZD7w3Pz8tW/3rkQwkfLn76oVqvVUDMY2ppoef3Vl4+WWrdNcaZPbdz2o/XKP0IIZ/fFVTMQQvj7hyFEIYRLSdl0sh0OIZwOjbo7j/5/N9ejaJ4+L17Mv1x4vDN5fn77yU7n9x6F8G7pZ7+7v/r5LwcmP/tNjw4PAAAAAAAAAAAAAAAAAMARN3vr5u2/jE+EZ1EY3I72P687m2w7PR9b7Zlf9P/NAgAAAAAAAAAAAAAAAAAAwA/U3vP/uehMm+f/Z5LtVIf+1T/1P0b6Z+7PN2eujE8k679H++p/nxR9cWkgjLZZ9z27/vulTP/2678f71n8zfiaxx0JUTyW2o/jsbEQ3k8Wfj8XnYhL5Y3Kb++VN9eWexbGkZXOf2P1/tRZkCzo323+pzPj93/9/5+G7Flb27+7/1SmjXT+Bzq2++B/UVf5v5zp9zryz6tL53+wXjbc2mCqcQOo5f+twYPzP5MZv1/5Px1CyEW1WHOpO0BtDlMr7zRfIS2d/x/Vy1K3zuSD7HT9f53J/5XM+Id1/9/KfhHRVjr/x+plQ6kWe9f/aHzw9X81M/5h5L8W/5bv/66k85/MywdTTeqfZLf3/9nM+P3K/+04ifN0lDoDtqNGeaf/r460dP6H9tXv/f6Lu5r/Xcv0b5//3l2czfiax63//qtWq/9N9n8dNX7/0V46/8Md23V7/c9l+vX7/j9Vn/9151g/Azmi0vk/US9Lz51H6n+7zf98Zvx+5b8+Kxlq5n/vfvLN8Ub5ey3zv9v9COANkc7/jxuFcWuLrfrf+vwvOnj+fz0z/mHM/2rxb8X9PeqbIp3/kx3b1fL/SRff/zcy/fqf/xDGzfVfWTr/pzq2q1//QwfnfyHTr9/5/1U/BwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4AqaT7UiI4rHUfhyPjYVwOdk/F05Ei4Xl/GKpvPSvjRBmkvJcOBPdL5UXC6X8ylp5uZgvlErlpRCuJPVnw1C0USpX8quFh1d3xxqOHhQL65XFYqESQphNyn8eTjXHWlyprBYehhCu7db9JC6vP3xQWMsvr6z/cXx8fDzM7cYwGhX/UymuVRpHb9SGML/bdyRqCa5efX03lpPRP8ub62uFUr38RkufUnmpUGrps5DUvR1Go8r65tpSoVLMl8r3m8fr5ONjr5ic72Aq2c7M3frbrRsT++rvRo3tdP9DAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB7eDb5h3dCCIONvTiEkIuSF1HyL+Xp8+LF/MuFxzuT5+e3n+y8aNcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4lh04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs0j9KA0EUB+A3Y6Glx7BadjvbFUW0cEXwBHoMD6NH8RLewSJF2hQhkMxC2D+wTVJ9X/Ngfsy8B/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLnHt+79tW4iUlxtLyN+P//+j/PnUr/vpu9fnGFGTufppbt/qJvy72mU35ajVZv36Wb99RETtfcz2JPhPh2M+wzN7dvcfH3f60i5ioi25Dcp56pa9hYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3jqJvAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+BQAA///tOyO0")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
fchown(r0, r2, r3)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)

1.056759052s ago: executing program 7 (id=1366):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@setlink={0x40, 0x13, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x20704, 0x40}, [@IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_IFALIAS={0x14, 0x14, 'pimreg\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)

740.348016ms ago: executing program 7 (id=1367):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0)

621.448555ms ago: executing program 2 (id=1368):
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0), 0xc)

499.586855ms ago: executing program 7 (id=1369):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r4, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

304.376665ms ago: executing program 7 (id=1370):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0xe}, 0xe)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000a00)={0x0, 0x2710}, 0x10)
listen(r0, 0x1)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x800)

189.785571ms ago: executing program 7 (id=1371):
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000001a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

110.18443ms ago: executing program 1 (id=1372):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x0, 0x0})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

109.951999ms ago: executing program 2 (id=1373):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0)

109.76514ms ago: executing program 2 (id=1374):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000080000000000010000008500000020000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e000790b6462272963484d3e4206", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

65.302731ms ago: executing program 7 (id=1375):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c0001400000000000000000090003"], 0xd4}}, 0x8818)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

65.048789ms ago: executing program 2 (id=1376):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
set_mempolicy(0x8006, 0x0, 0x5)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000027c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/211, &(0x7f0000000080), &(0x7f0000000440), 0x3, r0}, 0x38)

0s ago: executing program 2 (id=1377):
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
open(&(0x7f0000000140)='./file0\x00', 0x440, 0x0)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache='])

kernel console output (not intermixed with test programs):

 1560 would solve the problem.
[  166.116588][ T8538] EXT4-fs error (device loop9): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.9.796: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  166.127663][ T8466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.150088][ T8538] EXT4-fs (loop9): Remounting filesystem read-only
[  166.153863][ T8538] EXT4-fs warning (device loop9): ext4_rename_delete:3731: inode #2: comm syz.9.796: Deleting old file: nlink 5, error=-117
[  166.211783][ T8069] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.273309][ T8466] hsr_slave_0: entered promiscuous mode
[  166.280593][ T5831] udevd[5831]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system
[  166.281372][ T7946] usb 8-1: USB disconnect, device number 6
[  166.292110][ T8466] hsr_slave_1: entered promiscuous mode
[  166.311512][ T8466] debugfs: 'hsr0' already exists in 'hsr'
[  166.323665][ T8466] Cannot create hsr debugfs directory
[  166.363535][ T5829] Bluetooth: hci0: command tx timeout
[  166.387621][ T8551] loop9: detected capacity change from 0 to 64
[  166.710750][ T8566] loop9: detected capacity change from 0 to 256
[  166.737178][ T8566] FAT-fs (loop9): Directory bread(block 64) failed
[  166.740238][ T8566] FAT-fs (loop9): Directory bread(block 65) failed
[  166.743098][ T8566] FAT-fs (loop9): Directory bread(block 66) failed
[  166.750007][ T8566] FAT-fs (loop9): Directory bread(block 67) failed
[  166.753005][ T8566] FAT-fs (loop9): Directory bread(block 68) failed
[  166.759204][ T8566] FAT-fs (loop9): Directory bread(block 69) failed
[  166.762094][ T8566] FAT-fs (loop9): Directory bread(block 70) failed
[  166.766212][ T8566] FAT-fs (loop9): Directory bread(block 71) failed
[  166.769420][ T8566] FAT-fs (loop9): Directory bread(block 72) failed
[  166.772487][ T8566] FAT-fs (loop9): Directory bread(block 73) failed
[  167.200825][ T8466] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  167.212888][ T8466] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  167.227949][ T8466] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  167.247154][ T8466] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  167.317591][ T8466] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.331602][ T8466] 8021q: adding VLAN 0 to HW filter on device team0
[  167.344159][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.346579][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.352937][ T8580] loop9: detected capacity change from 0 to 32768
[  167.358326][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.360951][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.374451][ T8580] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.807 (8580)
[  167.396546][ T8580] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  167.400541][ T8580] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  167.410664][ T5831] udevd[5831]: symlink '../../loop9' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:9' failed: Read-only file system
[  167.465542][ T8580] BTRFS info (device loop9): enabling ssd optimizations
[  167.468158][ T8580] BTRFS info (device loop9): enabling free space tree
[  167.527994][ T8069] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  167.596800][ T8466] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.678210][ T8466] veth0_vlan: entered promiscuous mode
[  167.729188][ T8466] veth1_vlan: entered promiscuous mode
[  168.185956][ T8466] veth0_macvtap: entered promiscuous mode
[  168.215552][ T8466] veth1_macvtap: entered promiscuous mode
[  168.254028][ T7946] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  168.274052][ T8466] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.295935][ T8466] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.306037][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.309275][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.317368][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.320268][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.420967][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.423417][ T7946] usb 10-1: Using ep0 maxpacket: 8
[  168.427807][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.431284][ T7946] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  168.443702][ T5829] Bluetooth: hci0: command tx timeout
[  168.445086][ T7946] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  168.451021][ T7946] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  168.460642][ T7946] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  168.468622][ T7946] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  168.475433][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.479913][ T7946] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  168.481303][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.485431][ T7946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.701881][ T7946] usb 10-1: usb_control_msg returned -32
[  168.706190][ T7946] usbtmc 10-1:16.0: can't read capabilities
[  168.973453][ T8204] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  169.013398][ T6185] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  169.124497][ T8204] usb 8-1: Using ep0 maxpacket: 16
[  169.130265][ T8204] usb 8-1: config index 0 descriptor too short (expected 65, got 36)
[  169.135437][ T8204] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.140040][ T8204] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  169.146135][ T8204] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  169.153201][ T8204] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.161934][ T8204] usb 8-1: config 0 descriptor??
[  169.171502][ T6185] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  169.180969][ T6185] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  169.187517][ T8204] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input10
[  169.191654][ T6185] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  169.198134][ T6185] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  169.209971][ T6185] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  169.214801][ T6185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.224836][ T6185] usb 3-1: config 0 descriptor??
[  169.386160][  T970] usb 8-1: USB disconnect, device number 7
[  169.640862][ T6185] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max
[  169.650235][ T6185] plantronics 0003:047F:FFFF.000C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  169.854577][ T6185] usb 3-1: USB disconnect, device number 3
[  169.935288][ T8683] loop7: detected capacity change from 0 to 256
[  169.941180][ T8683] exfat: Deprecated parameter 'utf8'
[  169.952245][ T8683] exFAT-fs (loop7): failed to read sector(0x100)
[  169.957155][ T8683] exFAT-fs (loop7): failed to load upcase table
[  169.959863][ T8683] exFAT-fs (loop7): failed to recognize exfat type
[  170.523460][ T5829] Bluetooth: hci0: command tx timeout
[  170.678212][  T970] usb 10-1: USB disconnect, device number 4
[  170.700985][ T8716] loop9: detected capacity change from 0 to 512
[  170.705992][ T8716] EXT4-fs: Ignoring removed mblk_io_submit option
[  170.709122][ T8716] ext4: Bad value for 'max_dir_size_kb'
[  170.783716][ T7946] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  170.836442][ T8719] loop9: detected capacity change from 0 to 4096
[  170.852193][ T8719] ntfs3(loop9): try to read out of volume at offset 0x3fffffc0c00
[  170.856998][ T8719] ntfs3(loop9): try to read out of volume at offset 0x3fffffc0c00
[  170.860468][ T8719] ntfs3(loop9): try to read out of volume at offset 0x3fffffc0c00
[  170.866461][ T8719] ntfs3(loop9): try to read out of volume at offset 0x3fffffc0c00
[  170.866552][ T5831] udevd[5831]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system
[  170.869870][ T8719] ntfs3(loop9): try to read out of volume at offset 0x3fffffc1c00
[  170.869909][ T8719] ntfs3(loop9): try to read out of volume at offset 0x3fffffc2c00
[  170.877027][ T5831] udevd[5831]: symlink '../../loop9' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:9' failed: Read-only file system
[  170.888448][ T8719] ntfs3(loop9): try to read out of volume at offset 0x3fffffc4c00
[  170.891754][ T8719] ntfs3(loop9): try to read out of volume at offset 0x3fffffc8c00
[  170.903509][ T8719] ntfs3(loop9): try to read out of volume at offset 0x3fffffd0c00
[  170.907175][ T8719] ntfs3(loop9): try to read out of volume at offset 0x3fffffe0c00
[  170.933392][ T7946] usb 3-1: Using ep0 maxpacket: 8
[  170.937548][ T7946] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  170.945958][ T7946] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  170.950630][ T7946] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  170.961880][ T7946] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  170.977940][ T5831] udevd[5831]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system
[  170.985471][ T7946] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  170.986215][ T8721] loop7: detected capacity change from 0 to 512
[  170.990329][ T7946] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  171.019174][ T7946] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  171.037872][ T7946] usb 3-1: config 168 interface 0 has no altsetting 0
[  171.056391][ T7946] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  171.059670][ T7946] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  171.067851][ T7946] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  171.072967][ T7946] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  171.078851][ T7946] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  171.093468][ T7946] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  171.104790][ T7946] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  171.111237][ T7946] usb 3-1: config 168 interface 0 has no altsetting 0
[  171.132574][ T7946] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  171.137397][ T7946] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  171.142041][ T7946] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  171.148628][ T7946] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  171.153832][ T7946] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  171.167089][ T7946] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  171.183702][ T7946] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  171.196143][ T7946] usb 3-1: config 168 interface 0 has no altsetting 0
[  171.207318][ T7946] usb 3-1: string descriptor 0 read error: -22
[  171.210584][ T7946] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  171.218632][ T7946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.253006][ T7946] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  171.369472][ T8735] loop7: detected capacity change from 0 to 1024
[  171.382535][ T5831] udevd[5831]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  171.389995][ T8735] EXT4-fs: Ignoring removed i_version option
[  171.393010][ T8735] EXT4-fs: Ignoring removed oldalloc option
[  171.398638][ T5831] udevd[5831]: symlink '../../loop7' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:7' failed: Read-only file system
[  171.425995][ T8735] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  171.431207][ T8735] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.462267][ T6185] usb 3-1: USB disconnect, device number 4
[  171.477716][ T8735] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 3: comm syz.7.829: lblock 3 mapped to illegal pblock 3 (length 1)
[  171.504123][ T8735] EXT4-fs (loop7): Remounting filesystem read-only
[  171.527778][ T7590] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  171.568623][ T5831] udevd[5831]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  171.618696][ T8742] loop7: detected capacity change from 0 to 1024
[  171.636751][ T5831] udevd[5831]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system
[  171.647127][ T5831] udevd[5831]: symlink '../../loop7' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:7' failed: Read-only file system
[  171.654574][ T8742] hfsplus: unable to change nls mapping
[  171.729269][ T8744] loop9: detected capacity change from 0 to 1024
[  171.747914][ T5819] udevd[5819]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system
[  171.750203][ T8744] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  171.755257][ T5819] udevd[5819]: symlink '../../loop9' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:9' failed: Read-only file system
[  171.764170][ T8744] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.796336][ T8744] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: comm syz.9.831: lblock 0 mapped to illegal pblock 0 (length 1)
[  171.821995][ T8744] EXT4-fs (loop9): Remounting filesystem read-only
[  171.855315][ T8069] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  172.131009][ T8748] loop7: detected capacity change from 0 to 32768
[  172.157734][ T8748] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  172.229012][ T8748] XFS (loop7): Ending clean mount
[  172.243934][ T8748] XFS (loop7): Quotacheck needed: Please wait.
[  172.288057][ T8771] loop2: detected capacity change from 0 to 512
[  172.301317][ T8748] XFS (loop7): Quotacheck: Done.
[  172.309687][ T8771] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  172.322287][ T8773] netlink: 96 bytes leftover after parsing attributes in process `syz.9.838'.
[  172.350488][ T8771] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.839: invalid indirect mapped block 4294967295 (level 0)
[  172.386770][ T8771] EXT4-fs (loop2): Remounting filesystem read-only
[  172.390469][ T8771] EXT4-fs (loop2): 1 orphan inode deleted
[  172.392845][ T8771] EXT4-fs (loop2): 1 truncate cleaned up
[  172.406722][ T7590] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  172.411230][ T8771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.439749][ T8466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.665575][ T2287] usb 10-1: new low-speed USB device number 5 using dummy_hcd
[  172.759524][ T8779] loop2: detected capacity change from 0 to 32768
[  172.777137][ T8779] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  172.790205][ T8779] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  172.795864][ T8779] (syz.2.842,8779,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=281474976710721, rec_len=32768, name_len=1
[  172.801425][ T8779] (syz.2.842,8779,0):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  172.806373][ T8779] (syz.2.842,8779,0):ocfs2_mknod:301 ERROR: status = -2
[  172.808764][ T8779] (syz.2.842,8779,0):ocfs2_mknod:505 ERROR: status = -2
[  172.811378][ T8779] (syz.2.842,8779,0):ocfs2_mkdir:661 ERROR: status = -2
[  172.825475][ T2287] usb 10-1: config index 0 descriptor too short (expected 1307, got 27)
[  172.828952][ T2287] usb 10-1: config 0 has an invalid interface number: 0 but max is -1
[  172.832476][ T2287] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0
[  172.838641][ T8466] ocfs2: Unmounting device (7,2) on (node local)
[  172.839654][ T2287] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  172.857277][ T2287] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  172.861635][ T2287] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  172.877300][ T2287] usb 10-1: string descriptor 0 read error: -22
[  172.880353][ T2287] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  172.886984][ T2287] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.892468][ T2287] usb 10-1: config 0 descriptor??
[  172.895001][ T8204] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  172.920146][ T2287] hub 10-1:0.0: bad descriptor, ignoring hub
[  172.922771][ T2287] hub 10-1:0.0: probe with driver hub failed with error -5
[  172.979994][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.844'.
[  172.984301][ T8787] tipc: Started in network mode
[  172.986355][ T8787] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711
[  172.990155][ T8787] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  173.039472][ T8789] loop2: detected capacity change from 0 to 512
[  173.044496][ T8789] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  173.055015][ T8204] usb 8-1: Using ep0 maxpacket: 32
[  173.066391][ T8789] EXT4-fs (loop2): 1 truncate cleaned up
[  173.069514][ T8204] usb 8-1: config 2 has an invalid interface number: 20 but max is 0
[  173.076147][ T8789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.081587][ T8204] usb 8-1: config 2 has no interface number 0
[  173.084963][ T8204] usb 8-1: config 2 interface 20 altsetting 3 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  173.089441][ T8204] usb 8-1: config 2 interface 20 has no altsetting 0
[  173.092325][ T8204] usb 8-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=60.93
[  173.099174][ T8204] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.130526][ T8466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.198348][ T8792] loop2: detected capacity change from 0 to 256
[  173.202930][ T8792] exfat: Deprecated parameter 'utf8'
[  173.213621][ T8511] usb 10-1: USB disconnect, device number 5
[  173.221670][ T8792] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  173.309589][ T8794] loop2: detected capacity change from 0 to 128
[  173.316623][ T8794] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  173.328265][ T8794] hpfs: filesystem error: improperly stopped
[  173.330904][ T8794] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  173.333420][ T8204] usb 8-1: string descriptor 0 read error: -71
[  173.338497][ T8794] hpfs: You really don't want any checks? You are crazy...
[  173.341986][ T8794] hpfs: hpfs_map_sector(): read error
[  173.345277][ T8794] hpfs: code page support is disabled
[  173.349138][ T8794] hpfs: hpfs_map_4sectors(): unaligned read
[  173.352493][ T8794] hpfs: hpfs_map_4sectors(): unaligned read
[  173.353985][ T8204] usb 8-1: USB disconnect, device number 8
[  173.356252][ T8794] hpfs: filesystem error: unable to find root dir
[  174.645154][ T8843] loop2: detected capacity change from 0 to 1024
[  174.692928][ T8843] hfsplus: bad catalog entry type
[  175.119794][ T3542] hfsplus: b-tree write err: -5, ino 4
[  175.701955][ T8862] loop7: detected capacity change from 0 to 512
[  175.715830][ T8862] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  175.750203][ T8862] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.874: bg 0: block 384: padding at end of block bitmap is not set
[  175.759733][ T8862] EXT4-fs (loop7): Remounting filesystem read-only
[  175.775150][ T8862] EXT4-fs (loop7): 1 truncate cleaned up
[  175.792820][ T8862] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.869383][ T7590] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.969262][ T5831] udevd[5831]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  176.216673][   T60] block nbd0: Possible stuck request ffff888021b28000: control (read@0,1024B). Runtime 90 seconds
[  176.221353][   T60] block nbd0: Possible stuck request ffff888021b28200: control (read@1024,1024B). Runtime 90 seconds
[  176.228762][   T60] block nbd0: Possible stuck request ffff888021b28400: control (read@2048,1024B). Runtime 90 seconds
[  176.234002][   T60] block nbd0: Possible stuck request ffff888021b28600: control (read@3072,1024B). Runtime 90 seconds
[  176.354105][ T5885] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  176.498281][ T8866] loop2: detected capacity change from 0 to 32768
[  176.526147][ T5885] usb 8-1: Using ep0 maxpacket: 8
[  176.550356][ T8866] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  176.551861][ T5885] usb 8-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  176.582331][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.591858][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:2' failed: Read-only file system
[  176.596039][ T8866] XFS (loop2): Ending clean mount
[  176.599296][ T5885] usb 8-1: Product: syz
[  176.602890][ T5885] usb 8-1: Manufacturer: syz
[  176.607887][ T5885] usb 8-1: SerialNumber: syz
[  176.612664][ T8866] XFS (loop2): Quotacheck needed: Please wait.
[  176.621257][ T5885] usb 8-1: config 0 descriptor??
[  176.634932][ T5885] gspca_main: sq930x-2.14.0 probing 2770:930c
[  176.665615][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:2' failed: Read-only file system
[  176.719850][ T8866] XFS (loop2): Quotacheck: Done.
[  176.862351][ T5885] gspca_sq930x: reg_r 001f failed -71
[  176.873313][ T5885] sq930x 8-1:0.0: probe with driver sq930x failed with error -71
[  176.890433][ T5885] usb 8-1: USB disconnect, device number 9
[  176.891205][ T8466] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  177.373399][ T5885] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  177.525036][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  177.530895][ T5885] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  177.534678][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.537715][ T5885] usb 3-1: Product: syz
[  177.539337][ T5885] usb 3-1: Manufacturer: syz
[  177.541229][ T5885] usb 3-1: SerialNumber: syz
[  177.545514][ T5885] usb 3-1: config 0 descriptor??
[  177.754771][ T2287] usb 3-1: USB disconnect, device number 5
[  178.590815][ T8909] loop2: detected capacity change from 0 to 512
[  178.613567][ T8909] EXT4-fs (loop2): Test dummy encryption mode enabled
[  178.616559][ T8909] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  178.657493][ T8909] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.889: bad orphan inode 131083
[  178.669130][ T8909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.804151][ T8466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.817306][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  178.885962][ T5831] udevd[5831]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  178.983571][ T8917] tap0: tun_chr_ioctl cmd 2147767521
[  179.263368][ T8924] loop2: detected capacity change from 0 to 256
[  179.267921][ T8924] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  179.272377][ T8924] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  179.306628][ T8924] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  179.350105][ T8924] exFAT-fs (loop2): abnormal access to deleted dentry
[  179.410815][ T8932] loop9: detected capacity change from 0 to 4096
[  179.425478][ T8932] EXT4-fs: Ignoring removed nomblk_io_submit option
[  179.439541][ T5819] udevd[5819]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system
[  179.449775][ T8932] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.491656][ T8069] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.536466][ T5831] udevd[5831]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system
[  179.574004][ T8204] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  179.673588][ T7946] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  179.724540][ T8204] usb 8-1: Using ep0 maxpacket: 32
[  179.735144][ T8204] usb 8-1: config 0 interface 0 has no altsetting 0
[  179.740089][ T8204] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  179.745749][ T8204] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.749287][ T8204] usb 8-1: Product: syz
[  179.751377][ T8204] usb 8-1: Manufacturer: syz
[  179.765158][ T8204] usb 8-1: SerialNumber: syz
[  179.769739][ T8204] usb 8-1: config 0 descriptor??
[  179.849008][ T7946] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  179.854700][ T7946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.861150][ T7946] usb 3-1: config 0 descriptor??
[  179.876401][ T7946] gspca_main: cpia1-2.14.0 probing 0813:0001
[  179.951326][ T8947] netlink: 'syz.9.905': attribute type 3 has an invalid length.
[  180.190034][ T8204] gs_usb 8-1:0.0: Configuring for 49 interfaces
[  180.193084][ T8204] gs_usb 8-1:0.0: Driver cannot handle more that 3 CAN interfaces
[  180.199429][ T8204] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -22
[  180.277433][ T8953] cgroup: fork rejected by pids controller in /syz9
[  180.284913][ T7946] cpia1 3-1:0.0: unexpected state after lo power cmd: 00
[  180.409414][ T8511] usb 8-1: USB disconnect, device number 10
[  180.491700][ T7946] gspca_cpia1: usb_control_msg 01, error -32
[  180.500233][ T7946] gspca_cpia1: usb_control_msg 01, error -71
[  180.510310][ T7946] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0)
[  180.522240][ T7946] usb 3-1: USB disconnect, device number 6
[  180.844019][ T5825] Bluetooth: hci2: command 0x0406 tx timeout
[  181.434883][T11330] use of bytesused == 0 is deprecated and will be removed in the future,
[  181.441785][T11330] use the actual size instead.
[  182.762407][T11362] netlink: 32 bytes leftover after parsing attributes in process `syz.2.924'.
[  182.769544][T11362] tipc: Invalid UDP bearer configuration
[  182.769576][T11362] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  182.812122][T11365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.926'.
[  182.819599][T11365] netlink: 16 bytes leftover after parsing attributes in process `syz.2.926'.
[  182.890827][T11373] loop2: detected capacity change from 0 to 512
[  182.905900][T11373] loop2: detected capacity change from 0 to 512
[  182.909086][T11373] ext4: Unknown parameter 'nouser_xattr'
[  183.056296][T11383] input: syz0 as /devices/virtual/input/input11
[  183.109012][T11388] warning: `syz.7.936' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  183.222269][T11398] loop9: detected capacity change from 0 to 512
[  183.249948][ T5831] udevd[5831]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system
[  183.259030][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  183.274079][T11398] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  183.277781][T11398] EXT4-fs (loop9): orphan cleanup on readonly fs
[  183.289923][T11398] Quota error (device loop9): dq_insert_tree: Quota tree root isn't allocated!
[  183.299925][T11398] Quota error (device loop9): qtree_write_dquot: Error -5 occurred while creating quota
[  183.313352][T11398] EXT4-fs error (device loop9): ext4_acquire_dquot:6943: comm syz.9.940: Failed to acquire dquot type 1
[  183.356815][T11398] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.940: bg 0: block 40: padding at end of block bitmap is not set
[  183.369082][T11398] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  183.374474][T11398] EXT4-fs (loop9): 1 truncate cleaned up
[  183.378147][T11398] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  183.404871][ T8069] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.438979][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  183.442938][   T10] usb 3-1: config 1 interface 0 has no altsetting 0
[  183.449708][ T5831] udevd[5831]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system
[  183.461361][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40
[  183.465028][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.467809][   T10] usb 3-1: Product: syz
[  183.469223][   T10] usb 3-1: Manufacturer: syz
[  183.470760][   T10] usb 3-1: SerialNumber: syz
[  183.506189][T11412] loop7: detected capacity change from 0 to 64
[  183.532007][T11412] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing
[  183.537608][T11412] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop7
[  183.696455][ T6185] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  183.712949][   T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input12
[  183.732331][   T10] usb 3-1: USB disconnect, device number 7
[  183.797190][T11414] loop7: detected capacity change from 0 to 32768
[  183.820667][ T5831] udevd[5831]: symlink '../../loop7' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:7' failed: Read-only file system
[  183.853397][ T6185] usb 10-1: Using ep0 maxpacket: 32
[  183.862858][ T6185] usb 10-1: config 0 has an invalid interface number: 132 but max is 0
[  183.874461][ T6185] usb 10-1: config 0 has no interface number 0
[  183.876908][ T6185] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  183.896495][ T6185] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  183.899702][ T6185] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.903024][ T6185] usb 10-1: Product: syz
[  183.911750][ T6185] usb 10-1: Manufacturer: syz
[  183.923293][ T6185] usb 10-1: SerialNumber: syz
[  183.928067][ T6185] usb 10-1: config 0 descriptor??
[  183.936843][ T6185] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  183.942264][ T6185] em28xx 10-1:0.132: Video interface 132 found:
[  184.339381][T11433] loop7: detected capacity change from 0 to 256
[  184.343948][ T6185] em28xx 10-1:0.132: unknown em28xx chip ID (0)
[  184.362589][T11433] FAT-fs (loop7): Directory bread(block 64) failed
[  184.365912][T11433] FAT-fs (loop7): Directory bread(block 65) failed
[  184.368925][T11433] FAT-fs (loop7): Directory bread(block 66) failed
[  184.371748][T11433] FAT-fs (loop7): Directory bread(block 67) failed
[  184.377782][T11433] FAT-fs (loop7): Directory bread(block 68) failed
[  184.380626][T11433] FAT-fs (loop7): Directory bread(block 69) failed
[  184.385321][T11433] FAT-fs (loop7): Directory bread(block 70) failed
[  184.388163][T11433] FAT-fs (loop7): Directory bread(block 71) failed
[  184.391160][T11433] FAT-fs (loop7): Directory bread(block 72) failed
[  184.395439][T11433] FAT-fs (loop7): Directory bread(block 73) failed
[  184.622425][T11441] loop7: detected capacity change from 0 to 128
[  184.635759][T11441] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  184.645987][T11441] hpfs: filesystem error: improperly stopped
[  184.648626][T11441] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  184.669027][T11441] hpfs: You really don't want any checks? You are crazy...
[  184.672396][T11441] hpfs: hpfs_map_sector(): read error
[  184.678008][T11441] hpfs: code page support is disabled
[  184.680642][T11441] hpfs: hpfs_map_4sectors(): unaligned read
[  184.684231][T11441] hpfs: hpfs_map_4sectors(): unaligned read
[  184.687083][T11441] hpfs: filesystem error: unable to find root dir
[  184.707372][T11441] hpfs: hpfs_map_4sectors(): unaligned read
[  184.918125][T11453] loop2: detected capacity change from 0 to 128
[  184.926777][T11453] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  184.933517][T11453] hpfs: filesystem error: improperly stopped
[  184.937080][T11453] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  184.940635][T11453] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  184.956377][ T6185] em28xx 10-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5)
[  184.960519][ T6185] em28xx 10-1:0.132: failed to read eeprom (err=-5)
[  184.962498][T11453] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[  184.978933][ T6185] em28xx 10-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  185.043743][ T6185] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  185.047226][ T6185] em28xx 10-1:0.132: analog set to bulk mode.
[  185.052562][ T2287] em28xx 10-1:0.132: Registering V4L2 extension
[  185.094915][ T6185] usb 10-1: USB disconnect, device number 6
[  185.098841][ T6185] em28xx 10-1:0.132: Disconnecting em28xx
[  185.130433][T11458] Zero length message leads to an empty skb
[  185.225234][T11451] loop7: detected capacity change from 0 to 32768
[  185.231191][T11451] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.963 (11451)
[  185.240480][ T2287] em28xx 10-1:0.132: Config register raw data: 0xffffffed
[  185.254962][ T2287] em28xx 10-1:0.132: AC97 chip type couldn't be determined
[  185.260982][ T2287] em28xx 10-1:0.132: No AC97 audio processor
[  185.272564][ T5819] udevd[5819]: symlink '../../loop7' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:7' failed: Read-only file system
[  185.279441][T11451] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  185.290053][T11451] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  185.301358][ T2287] usb 10-1: Decoder not found
[  185.304497][ T2287] em28xx 10-1:0.132: failed to create media graph
[  185.309924][ T2287] em28xx 10-1:0.132: V4L2 device video103 deregistered
[  185.322517][ T2287] em28xx 10-1:0.132: Remote control support is not available for this card.
[  185.335012][ T6185] em28xx 10-1:0.132: Closing input extension
[  185.366341][ T6185] em28xx 10-1:0.132: Freeing device
[  185.428533][T11451] BTRFS info (device loop7): enabling ssd optimizations
[  185.431743][T11451] BTRFS info (device loop7): enabling free space tree
[  185.448156][T11461] loop2: detected capacity change from 0 to 32768
[  185.464222][   T33] audit: type=1800 audit(1759243566.274:51): pid=11451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.963" name="file2" dev="loop7" ino=261 res=0 errno=0
[  185.483547][T11461] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.967 (11461)
[  185.516365][ T7590] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  185.536061][T11461] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  185.549902][T11461] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  185.551974][ T6262] udevd[6262]: symlink '../../loop2' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:2' failed: Read-only file system
[  185.588211][ T5831] udevd[5831]: symlink '../../loop7' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:7' failed: Read-only file system
[  185.705553][ T5819] udevd[5819]: symlink '../../loop2' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:2' failed: Read-only file system
[  185.746222][T11461] BTRFS info (device loop2): enabling ssd optimizations
[  185.769566][T11461] BTRFS info (device loop2): enabling free space tree
[  185.943690][ T8466] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  186.272652][T11506] loop9: detected capacity change from 0 to 32768
[  186.282599][T11519] loop2: detected capacity change from 0 to 2048
[  186.284485][T11506] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.971 (11506)
[  186.312572][ T5831] udevd[5831]: symlink '../../loop9' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:9' failed: Read-only file system
[  186.319146][T11519] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  186.338925][ T5819] udevd[5819]: symlink '../../loop2' '/dev/disk/by-label/LinuxUDF.tmp-b7:2' failed: Read-only file system
[  186.346209][T11506] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  186.350663][T11506] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  186.352287][ T5819] udevd[5819]: symlink '../../loop2' '/dev/disk/by-uuid/1234567812345678.tmp-b7:2' failed: Read-only file system
[  186.472181][T11533] input: syz0 as /devices/virtual/input/input13
[  186.588232][T11506] BTRFS info (device loop9): enabling ssd optimizations
[  186.592031][T11506] BTRFS info (device loop9): enabling free space tree
[  186.595177][  T970] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  186.641907][ T8069] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  186.760940][  T970] usb 8-1: Using ep0 maxpacket: 8
[  186.777399][  T970] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  186.783751][  T970] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.829142][  T970] pvrusb2: Hardware description: Terratec Grabster AV400
[  186.832070][  T970] pvrusb2: **********
[  186.845586][  T970] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  186.853624][  T970] pvrusb2: Important functionality might not be entirely working.
[  186.856969][  T970] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  186.871987][  T970] pvrusb2: **********
[  187.045177][ T2396] pvrusb2: Invalid write control endpoint
[  187.119138][ T2396] pvrusb2: Invalid write control endpoint
[  187.129769][ T2396] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  187.137855][ T2396] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  187.140933][ T2396] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  187.145271][ T2396] pvrusb2: Device being rendered inoperable
[  187.151066][ T2396] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  187.158231][ T2396] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  187.178182][ T2396] pvrusb2: Attached sub-driver cx25840
[  187.181506][ T2396] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  187.190431][ T2396] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  187.245467][ T5824] usb 8-1: USB disconnect, device number 11
[  187.736411][T11555] loop2: detected capacity change from 0 to 32768
[  187.784336][T11555] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  187.796928][T11565] loop7: detected capacity change from 0 to 256
[  187.842803][T11555] XFS (loop2): Ending clean mount
[  187.850027][T11555] XFS (loop2): Quotacheck needed: Please wait.
[  187.851865][T11569] loop9: detected capacity change from 0 to 512
[  187.857735][T11569] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  187.877897][T11569] EXT4-fs (loop9): 1 truncate cleaned up
[  187.882123][T11569] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.910992][T11555] XFS (loop2): Quotacheck: Done.
[  187.991800][T11573] loop7: detected capacity change from 0 to 128
[  188.002188][T11573] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  188.011949][T11573] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  188.037488][ T8466] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  188.247252][ T7590] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  188.423541][ T5831] udevd[5831]: symlink '../../loop7' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:7' failed: Read-only file system
[  188.769294][ T8069] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.831075][ T5831] udevd[5831]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system
[  188.907386][T11600] loop9: detected capacity change from 0 to 128
[  188.932625][T11600] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  188.939573][ T5831] udevd[5831]: symlink '../../loop9' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:9' failed: Read-only file system
[  188.944599][T11600] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  188.989554][T11604] loop7: detected capacity change from 0 to 128
[  188.990532][ T8069] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  188.993667][T11604] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  189.028995][ T5831] udevd[5831]: symlink '../../loop9' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:9' failed: Read-only file system
[  189.030435][ T5819] udevd[5819]: symlink '../../loop7' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:7' failed: Read-only file system
[  189.048187][T11604] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  189.098164][ T5831] udevd[5831]: symlink '../../loop7' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:7' failed: Read-only file system
[  189.111360][ T5819] udevd[5819]: symlink '../../loop7' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:9' failed: Read-only file system
[  189.142914][ T7590] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  189.161010][ T5831] udevd[5831]: symlink '../../loop7' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:7' failed: Read-only file system
[  189.294919][   T33] audit: type=1326 audit(1759243570.114:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.9.1009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa974d8ec29 code=0x7ffc0000
[  189.332108][T11620] netlink: 'syz.7.1010': attribute type 1 has an invalid length.
[  189.332715][   T33] audit: type=1326 audit(1759243570.114:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.9.1009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa974d8ec29 code=0x7ffc0000
[  189.337175][T11620] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1010'.
[  189.358984][   T33] audit: type=1326 audit(1759243570.124:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.9.1009" exe="/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fa974d8ec29 code=0x7ffc0000
[  189.378948][   T33] audit: type=1326 audit(1759243570.124:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.9.1009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa974d8ec29 code=0x7ffc0000
[  189.410771][   T33] audit: type=1326 audit(1759243570.124:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.9.1009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa974d8ec29 code=0x7ffc0000
[  190.166518][T11644] kernel read not supported for file /$@ (pid: 11644 comm: syz.9.1020)
[  190.177216][   T33] audit: type=1800 audit(1759243570.984:57): pid=11644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1020" name="$@" dev="mqueue" ino=21243 res=0 errno=0
[  190.512337][T11648] loop9: detected capacity change from 0 to 64
[  190.539509][T11648] BFS-fs: bfs_fill_super(): Last block not available on loop9: 163903
[  191.206440][   T33] audit: type=1326 audit(1759243572.024:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.7.1032" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480c78ec29 code=0x7ffc0000
[  191.216534][   T33] audit: type=1326 audit(1759243572.024:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.7.1032" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480c78ec29 code=0x7ffc0000
[  191.225456][   T33] audit: type=1326 audit(1759243572.044:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.7.1032" exe="/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f480c78ec29 code=0x7ffc0000
[  191.234040][   T33] audit: type=1326 audit(1759243572.044:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.7.1032" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480c78ec29 code=0x7ffc0000
[  191.722239][T11688] loop2: detected capacity change from 0 to 32768
[  191.739660][T11688] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1039 (11688)
[  191.789969][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:2' failed: Read-only file system
[  191.891797][T11688] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  191.902347][T11688] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  192.292177][T11688] BTRFS info (device loop2): enabling ssd optimizations
[  192.298147][T11688] BTRFS info (device loop2): turning on sync discard
[  192.302266][T11688] BTRFS info (device loop2): enabling free space tree
[  192.320296][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:2' failed: Read-only file system
[  192.373469][ T8466] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  192.426387][T11717] loop9: detected capacity change from 0 to 256
[  192.429907][T11717] exfat: Deprecated parameter 'namecase'
[  192.438767][T11717] exfat: Deprecated parameter 'namecase'
[  192.444773][T11717] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  192.702604][T11723] loop7: detected capacity change from 0 to 256
[  192.779064][T11723] FAT-fs (loop7): Directory bread(block 64) failed
[  192.781968][T11723] FAT-fs (loop7): Directory bread(block 65) failed
[  192.814532][T11728] CIFS: VFS: Malformed UNC in devname
[  192.815587][T11723] FAT-fs (loop7): Directory bread(block 66) failed
[  192.820595][T11723] FAT-fs (loop7): Directory bread(block 67) failed
[  192.829958][T11723] FAT-fs (loop7): Directory bread(block 68) failed
[  192.832938][T11723] FAT-fs (loop7): Directory bread(block 69) failed
[  192.840994][T11723] FAT-fs (loop7): Directory bread(block 70) failed
[  192.851361][T11723] FAT-fs (loop7): Directory bread(block 71) failed
[  192.855140][T11723] FAT-fs (loop7): Directory bread(block 72) failed
[  192.857891][T11723] FAT-fs (loop7): Directory bread(block 73) failed
[  193.073288][ T5829] Bluetooth: hci0: command tx timeout
[  193.387399][T11726] loop9: detected capacity change from 0 to 40427
[  193.398278][T11726] F2FS-fs (loop9): invalid crc value
[  193.474645][ T5831] udevd[5831]: symlink '../../loop9' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:9' failed: Read-only file system
[  193.536539][ T5831] udevd[5831]: symlink '../../loop9' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:9' failed: Read-only file system
[  193.538956][T11726] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  193.581537][T11726] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  193.806532][ T8069] syz-executor: attempt to access beyond end of device
[  193.806532][ T8069] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  193.822366][T11730] loop7: detected capacity change from 0 to 32768
[  193.825635][ T8069] CPU: 1 UID: 0 PID: 8069 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  193.825671][ T8069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  193.825679][ T8069] Call Trace:
[  193.825684][ T8069]  <TASK>
[  193.825690][ T8069]  dump_stack_lvl+0x189/0x250
[  193.825710][ T8069]  ? __pfx_dump_stack_lvl+0x10/0x10
[  193.825754][ T8069]  ? __pfx_queue_work_on+0x10/0x10
[  193.825766][ T8069]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  193.825779][ T8069]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  193.825797][ T8069]  f2fs_handle_critical_error+0x37c/0x540
[  193.825813][ T8069]  f2fs_write_end_io+0x886/0xb60
[  193.825838][ T8069]  __submit_merged_bio+0x27a/0x6a0
[  193.825853][ T8069]  __submit_merged_write_cond+0x255/0x530
[  193.825874][ T8069]  f2fs_write_data_pages+0x261d/0x3000
[  193.825908][ T8069]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  193.825919][ T8069]  ? __switch_to+0xdae/0x1670
[  193.825961][ T8069]  ? rcu_is_watching+0x15/0xb0
[  193.825973][ T8069]  ? trace_sched_exit_tp+0x36/0x110
[  193.825987][ T8069]  ? __schedule+0x17ae/0x4cc0
[  193.826001][ T8069]  ? folios_put_refs+0x560/0x640
[  193.826021][ T8069]  ? __lock_acquire+0xab9/0xd20
[  193.826036][ T8069]  ? do_raw_spin_lock+0x121/0x290
[  193.826057][ T8069]  ? do_raw_spin_unlock+0x4d/0x240
[  193.826070][ T8069]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  193.826083][ T8069]  do_writepages+0x32e/0x550
[  193.826105][ T8069]  ? do_raw_spin_unlock+0x4d/0x240
[  193.826121][ T8069]  filemap_fdatawrite+0x199/0x240
[  193.826137][ T8069]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  193.826181][ T8069]  ? do_raw_spin_unlock+0x4d/0x240
[  193.826197][ T8069]  f2fs_sync_dirty_inodes+0x31f/0x830
[  193.826228][ T8069]  f2fs_write_checkpoint+0x95a/0x1df0
[  193.826257][ T8069]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  193.826301][ T8069]  ? kill_f2fs_super+0x298/0x6c0
[  193.826318][ T8069]  kill_f2fs_super+0x2c3/0x6c0
[  193.826335][ T8069]  ? __pfx_kill_f2fs_super+0x10/0x10
[  193.826346][ T8069]  ? radix_tree_delete_item+0x2b6/0x400
[  193.826361][ T8069]  ? shrinker_free+0x2ce/0x3e0
[  193.826376][ T8069]  deactivate_locked_super+0xbc/0x130
[  193.826391][ T8069]  cleanup_mnt+0x425/0x4c0
[  193.826404][ T8069]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.826417][ T8069]  task_work_run+0x1d4/0x260
[  193.826434][ T8069]  ? __pfx_task_work_run+0x10/0x10
[  193.826445][ T8069]  ? __x64_sys_umount+0x122/0x160
[  193.826463][ T8069]  ? exit_to_user_mode_loop+0x40/0x110
[  193.826481][ T8069]  exit_to_user_mode_loop+0xec/0x110
[  193.826496][ T8069]  do_syscall_64+0x2bd/0x3b0
[  193.826509][ T8069]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.826519][ T8069]  ? asm_common_interrupt+0x26/0x40
[  193.826532][ T8069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.826541][ T8069] RIP: 0033:0x7fa974d8ff57
[  193.826553][ T8069] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  193.826562][ T8069] RSP: 002b:00007fffa007d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  193.826575][ T8069] RAX: 0000000000000000 RBX: 00007fa974e11c2d RCX: 00007fa974d8ff57
[  193.826582][ T8069] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa007d840
[  193.826588][ T8069] RBP: 00007fffa007d840 R08: 0000000000000000 R09: 0000000000000000
[  193.826594][ T8069] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffa007e8d0
[  193.826601][ T8069] R13: 00007fa974e11c2d R14: 000000000002f462 R15: 00007fffa007e910
[  193.826620][ T8069]  </TASK>
[  193.832385][ T8069] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  193.854562][T11730] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode.
[  193.871055][ T5831] udevd[5831]: symlink '../../loop7' '/dev/disk/by-uuid/07000000-0000-0000-b33b-244aab9eb3e9.tmp-b7:7' failed: Read-only file system
[  194.071707][ T5831] udevd[5831]: symlink '../../loop7' '/dev/disk/by-uuid/07000000-0000-0000-b33b-244aab9eb3e9.tmp-b7:7' failed: Read-only file system
[  194.152816][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.157847][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.500130][ T7590] ocfs2: Unmounting device (7,7) on (node local)
[  196.432583][T11769] loop9: detected capacity change from 0 to 1024
[  196.460411][ T5831] udevd[5831]: symlink '../../loop9' '/dev/disk/by-label/untitled.tmp-b7:9' failed: Read-only file system
[  196.469942][ T5831] udevd[5831]: symlink '../../loop9' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:9' failed: Read-only file system
[  196.498802][ T5831] udevd[5831]: symlink '../../loop9' '/dev/disk/by-label/untitled.tmp-b7:9' failed: Read-only file system
[  196.506330][ T3542] hfsplus: b-tree write err: -5, ino 4
[  196.509381][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  196.509393][   T33] audit: type=1326 audit(1759243577.324:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.2.1066" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313cd8ec29 code=0x7ffc0000
[  196.512261][ T5831] udevd[5831]: symlink '../../loop9' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:9' failed: Read-only file system
[  196.528843][   T33] audit: type=1326 audit(1759243577.344:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.2.1066" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313cd8ec29 code=0x7ffc0000
[  196.556865][T11773] loop9: detected capacity change from 0 to 256
[  196.559678][   T33] audit: type=1326 audit(1759243577.364:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.2.1066" exe="/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f313cd8ec29 code=0x7ffc0000
[  196.586196][   T33] audit: type=1326 audit(1759243577.364:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.2.1066" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313cd8ec29 code=0x7ffc0000
[  196.588430][T11773] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  196.602809][   T33] audit: type=1326 audit(1759243577.364:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.2.1066" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313cd8ec29 code=0x7ffc0000
[  196.607974][T11773] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[  196.612290][ T5885] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  196.658719][T11773] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  196.797987][ T5885] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  196.802025][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.808968][ T5885] usb 8-1: config 0 descriptor??
[  197.007367][ T5872] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.039784][ T5885] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  197.126446][ T5872] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.162048][T11781] loop2: detected capacity change from 0 to 32768
[  197.182278][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:2' failed: Read-only file system
[  197.240853][ T5885] [drm:udl_init] *ERROR* Selecting channel failed
[  197.261229][ T5872] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.287195][ T5885] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 3
[  197.290213][ T5885] [drm] Initialized udl on minor 3
[  197.308046][ T5885] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  197.331901][ T5885] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  197.349831][  T970] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  197.362081][ T5885] usb 8-1: USB disconnect, device number 12
[  197.370022][  T970] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  197.425825][ T5872] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.654900][ T5872] bridge_slave_1: left allmulticast mode
[  197.657453][ T5872] bridge_slave_1: left promiscuous mode
[  197.660029][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.684212][ T5872] bridge_slave_0: left allmulticast mode
[  197.686617][ T5872] bridge_slave_0: left promiscuous mode
[  197.689254][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.715297][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  197.721607][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  197.726265][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  197.737557][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  197.741131][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  198.458436][ T5872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.466687][ T5872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.471985][ T5872] bond0 (unregistering): Released all slaves
[  198.613579][  T970] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  198.776031][  T970] usb 8-1: Using ep0 maxpacket: 16
[  198.780323][  T970] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  198.793308][  T970] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  198.811645][  T970] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  198.823265][  T970] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.831411][  T970] usb 8-1: Product: syz
[  198.840735][  T970] usb 8-1: Manufacturer: syz
[  198.842798][  T970] usb 8-1: SerialNumber: syz
[  199.116635][  T970] usb 8-1: 0:2 : does not exist
[  199.140056][T11788] chnl_net:caif_netlink_parms(): no params data found
[  199.159504][  T970] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  199.213776][T11807] loop2: detected capacity change from 0 to 131072
[  199.226237][T11807] F2FS-fs (loop2): invalid crc value
[  199.289670][  T970] usb 8-1: USB disconnect, device number 13
[  199.315933][T11807] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  199.320869][T11807] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  199.365992][ T5819] udevd[5819]: symlink '../../loop2' '/dev/disk/by-uuid/7d96804d-fc78-4d7b-ba96-ee448261d02c.tmp-b7:2' failed: Read-only file system
[  199.382767][T11807] F2FS-fs (loop2): lookup inode (7) has corrupted xattr
[  199.399044][T11807] F2FS-fs (loop2): lookup inode (7) has corrupted xattr
[  199.410354][ T5819] udevd[5819]: symlink '../../loop2' '/dev/disk/by-uuid/7d96804d-fc78-4d7b-ba96-ee448261d02c.tmp-b7:2' failed: Read-only file system
[  199.435805][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  199.579877][T11788] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.582393][T11788] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.585939][T11788] bridge_slave_0: entered allmulticast mode
[  199.588978][T11788] bridge_slave_0: entered promiscuous mode
[  199.595999][T11788] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.598767][T11788] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.601366][T11788] bridge_slave_1: entered allmulticast mode
[  199.605115][T11788] bridge_slave_1: entered promiscuous mode
[  199.745167][ T5872] hsr_slave_0: left promiscuous mode
[  199.747473][ T5872] hsr_slave_1: left promiscuous mode
[  199.749901][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.752410][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.763901][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.766544][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.800893][ T5872] veth1_macvtap: left promiscuous mode
[  199.803803][ T5825] Bluetooth: hci3: command tx timeout
[  199.805706][ T5872] veth0_macvtap: left promiscuous mode
[  199.808476][ T5872] veth1_vlan: left promiscuous mode
[  199.810987][ T5872] veth0_vlan: left promiscuous mode
[  199.934217][T11839] loop2: detected capacity change from 0 to 512
[  199.941595][T11839] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1087: bg 0: block 5: invalid block bitmap
[  199.948261][T11839] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  199.954703][T11839] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1087: invalid indirect mapped block 3 (level 2)
[  199.960237][T11839] EXT4-fs (loop2): 2 truncates cleaned up
[  199.968848][T11839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.980280][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  199.994530][ T8466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.998684][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  200.040440][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  200.070161][ T5831] udevd[5831]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  200.557795][ T5872] team0 (unregistering): Port device team_slave_1 removed
[  200.599362][ T5872] team0 (unregistering): Port device team_slave_0 removed
[  200.654390][ T2287] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  200.803271][ T2287] usb 3-1: Using ep0 maxpacket: 32
[  200.808805][ T2287] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  200.812557][ T2287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.827146][ T2287] usb 3-1: config 0 descriptor??
[  201.040715][ T2287] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  201.064436][ T2287] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  201.080110][ T2287] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  201.089029][ T2287] usb 3-1: media controller created
[  201.189472][T11788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.195683][T11788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.195782][ T2287] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  201.255837][ T2287] az6027: usb out operation failed. (-71)
[  201.261340][ T2287] az6027: usb out operation failed. (-71)
[  201.264063][ T2287] stb0899_attach: Driver disabled by Kconfig
[  201.266608][ T2287] az6027: no front-end attached
[  201.266608][ T2287] 
[  201.269535][ T2287] az6027: usb out operation failed. (-71)
[  201.273472][ T2287] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  201.300945][ T2287] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14
[  201.319306][T11788] team0: Port device team_slave_0 added
[  201.320952][ T2287] dvb-usb: schedule remote query interval to 400 msecs.
[  201.327577][ T2287] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  201.328468][T11788] team0: Port device team_slave_1 added
[  201.345986][ T2287] usb 3-1: USB disconnect, device number 8
[  201.400103][T11788] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.404690][T11788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.417552][T11788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.433079][T11788] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.436244][ T2287] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  201.450672][T11788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.467988][T11788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.545857][  T970] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  201.581954][T11788] hsr_slave_0: entered promiscuous mode
[  201.586028][T11788] hsr_slave_1: entered promiscuous mode
[  201.695006][  T970] usb 8-1: config 7 descriptor has 1 excess byte, ignoring
[  201.698061][  T970] usb 8-1: config 7 has 1 interface, different from the descriptor's value: 2
[  201.715304][  T970] usb 8-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84
[  201.718310][  T970] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.721481][  T970] usb 8-1: Product: syz
[  201.733653][  T970] usb 8-1: Manufacturer: syz
[  201.735702][  T970] usb 8-1: SerialNumber: syz
[  201.762914][  T970] rndis_host 8-1:7.0: skipping garbage
[  201.768093][  T970] usb 8-1: bad CDC descriptors
[  201.771033][  T970] option 8-1:7.0: GSM modem (1-port) converter detected
[  201.874397][ T5825] Bluetooth: hci3: command tx timeout
[  201.972523][ T2287] usb 8-1: USB disconnect, device number 14
[  201.984751][ T2287] option 8-1:7.0: device disconnected
[  202.359529][T11876] loop2: detected capacity change from 0 to 40427
[  202.377506][T11876] F2FS-fs (loop2): invalid crc value
[  202.388853][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system
[  202.420031][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system
[  202.426450][T11788] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  202.442785][T11788] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  202.448073][T11788] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  202.452523][T11788] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  202.464912][T11876] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  202.468988][T11876] F2FS-fs (loop2): Start checkpoint disabled!
[  202.475574][T11876] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  202.531818][T11902] loop7: detected capacity change from 0 to 256
[  202.549822][ T3542] kworker/u10:4: attempt to access beyond end of device
[  202.549822][ T3542] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  202.592391][ T3542] CPU: 1 UID: 0 PID: 3542 Comm: kworker/u10:4 Not tainted syzkaller #0 PREEMPT(full) 
[  202.592411][ T3542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  202.592421][ T3542] Workqueue: writeback wb_workfn (flush-7:2)
[  202.592442][ T3542] Call Trace:
[  202.592449][ T3542]  <TASK>
[  202.592455][ T3542]  dump_stack_lvl+0x189/0x250
[  202.592475][ T3542]  ? __pfx_dump_stack_lvl+0x10/0x10
[  202.592490][ T3542]  ? __pfx_queue_work_on+0x10/0x10
[  202.592502][ T3542]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  202.592515][ T3542]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  202.592537][ T3542]  f2fs_handle_critical_error+0x37c/0x540
[  202.592556][ T3542]  f2fs_write_end_io+0x886/0xb60
[  202.592587][ T3542]  __submit_merged_bio+0x27a/0x6a0
[  202.592641][ T3542]  __submit_merged_write_cond+0x255/0x530
[  202.592667][ T3542]  f2fs_write_data_pages+0x261d/0x3000
[  202.592711][ T3542]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  202.592722][ T3542]  ? __local_bh_enable_ip+0x12d/0x1c0
[  202.592746][ T3542]  ? rcu_is_watching+0x15/0xb0
[  202.592790][ T3542]  ? rcu_is_watching+0x15/0xb0
[  202.592803][ T3542]  ? trace_pelt_se_tp+0x39/0x130
[  202.592855][ T3542]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  202.592870][ T3542]  do_writepages+0x32e/0x550
[  202.592891][ T3542]  ? reacquire_held_locks+0x127/0x1d0
[  202.592903][ T3542]  ? writeback_sb_inodes+0x384/0x1010
[  202.592926][ T3542]  __writeback_single_inode+0x145/0xff0
[  202.592940][ T3542]  ? do_raw_spin_unlock+0x4d/0x240
[  202.592959][ T3542]  writeback_sb_inodes+0x6c7/0x1010
[  202.592998][ T3542]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  202.593050][ T3542]  ? rcu_is_watching+0x15/0xb0
[  202.593070][ T3542]  wb_writeback+0x43b/0xaf0
[  202.593093][ T3542]  ? queue_io+0x331/0x590
[  202.593112][ T3542]  ? __pfx_wb_writeback+0x10/0x10
[  202.593157][ T3542]  ? _raw_spin_unlock_irq+0x23/0x50
[  202.593174][ T3542]  wb_workfn+0x409/0xef0
[  202.593210][ T3542]  ? __pfx_wb_workfn+0x10/0x10
[  202.593229][ T3542]  ? __lock_acquire+0xab9/0xd20
[  202.593249][ T3542]  ? process_scheduled_works+0x9ef/0x17b0
[  202.593267][ T3542]  ? _raw_spin_unlock_irq+0x23/0x50
[  202.593277][ T3542]  ? process_scheduled_works+0x9ef/0x17b0
[  202.593288][ T3542]  ? process_scheduled_works+0x9ef/0x17b0
[  202.593302][ T3542]  process_scheduled_works+0xae1/0x17b0
[  202.593341][ T3542]  ? __pfx_process_scheduled_works+0x10/0x10
[  202.593369][ T3542]  worker_thread+0x8a0/0xda0
[  202.593406][ T3542]  kthread+0x711/0x8a0
[  202.593425][ T3542]  ? __pfx_worker_thread+0x10/0x10
[  202.593437][ T3542]  ? __pfx_kthread+0x10/0x10
[  202.593454][ T3542]  ? _raw_spin_unlock_irq+0x23/0x50
[  202.593465][ T3542]  ? lockdep_hardirqs_on+0x9c/0x150
[  202.593475][ T3542]  ? __pfx_kthread+0x10/0x10
[  202.593491][ T3542]  ret_from_fork+0x439/0x7d0
[  202.593507][ T3542]  ? __pfx_ret_from_fork+0x10/0x10
[  202.593526][ T3542]  ? __switch_to_asm+0x39/0x70
[  202.593539][ T3542]  ? __switch_to_asm+0x33/0x70
[  202.593552][ T3542]  ? __pfx_kthread+0x10/0x10
[  202.593568][ T3542]  ret_from_fork_asm+0x1a/0x30
[  202.593625][ T3542]  </TASK>
[  202.707752][T11788] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.716751][T11788] 8021q: adding VLAN 0 to HW filter on device team0
[  202.756303][T11788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  202.760752][T11788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  202.784782][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.787169][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.791414][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.794589][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.807115][ T3542] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  202.976472][T11788] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.072260][T11925] loop7: detected capacity change from 0 to 512
[  203.081732][T11788] veth0_vlan: entered promiscuous mode
[  203.092256][T11788] veth1_vlan: entered promiscuous mode
[  203.131047][ T5831] udevd[5831]: symlink '../../loop7' '/dev/disk/by-label/SYZKALLER.tmp-b7:7' failed: Read-only file system
[  203.185470][T11788] veth0_macvtap: entered promiscuous mode
[  203.210012][T11788] veth1_macvtap: entered promiscuous mode
[  203.257075][T11788] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.283803][T11788] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.309710][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.320258][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.342579][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.351101][T11935] loop2: detected capacity change from 0 to 128
[  203.369234][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.385022][T11935] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  203.398262][T11935] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  203.408830][T11935] syz.2.1105 (pid 11935) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  203.486217][ T8466] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  203.599646][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.607918][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.689414][  T715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.692722][  T715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.873899][ T6185] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  203.963697][ T5825] Bluetooth: hci3: command tx timeout
[  204.023446][ T6185] usb 3-1: Using ep0 maxpacket: 32
[  204.034673][ T6185] usb 3-1: unable to get BOS descriptor or descriptor too short
[  204.039087][ T6185] usb 3-1: config 7 has an invalid interface number: 69 but max is 0
[  204.047477][ T6185] usb 3-1: config 7 has no interface number 0
[  204.049488][ T6185] usb 3-1: config 7 interface 69 has no altsetting 0
[  204.068352][ T6185] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0005, bcdDevice=a5.97
[  204.079349][ T6185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.082636][ T6185] usb 3-1: Product: syz
[  204.089148][ T6185] usb 3-1: Manufacturer: syz
[  204.092197][ T6185] usb 3-1: SerialNumber: syz
[  204.409665][ T6185] kvaser_usb 3-1:7.69: error -ENODEV: Cannot get usb endpoint(s)
[  204.495162][ T6185] usb 3-1: USB disconnect, device number 9
[  205.270044][T11996] loop2: detected capacity change from 0 to 2048
[  205.349519][T11999] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  205.353855][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:2' failed: Read-only file system
[  205.419593][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:2' failed: Read-only file system
[  205.781394][T11989] loop1: detected capacity change from 0 to 32768
[  205.814467][ T5831] udevd[5831]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system
[  206.050168][ T5825] Bluetooth: hci3: command tx timeout
[  206.279761][   T60] block nbd0: Possible stuck request ffff888021b28000: control (read@0,1024B). Runtime 120 seconds
[  206.285104][   T60] block nbd0: Possible stuck request ffff888021b28200: control (read@1024,1024B). Runtime 120 seconds
[  206.290515][   T60] block nbd0: Possible stuck request ffff888021b28400: control (read@2048,1024B). Runtime 120 seconds
[  206.295521][   T60] block nbd0: Possible stuck request ffff888021b28600: control (read@3072,1024B). Runtime 120 seconds
[  206.489044][T12020] loop1: detected capacity change from 0 to 8
[  206.493465][T12020] squashfs image failed sanity check
[  206.697266][T12028] loop2: detected capacity change from 0 to 128
[  206.726583][T12028] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  206.763097][T12028] hpfs: filesystem error: improperly stopped
[  206.767213][T12028] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  206.784681][T12028] hpfs: You really don't want any checks? You are crazy...
[  206.793956][T12028] hpfs: hpfs_map_sector(): read error
[  206.797481][T12028] hpfs: code page support is disabled
[  206.800222][T12028] hpfs: hpfs_map_4sectors(): unaligned read
[  206.803066][T12028] hpfs: hpfs_map_4sectors(): unaligned read
[  206.806170][T12028] hpfs: filesystem error: unable to find root dir
[  207.014697][ T8204] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  207.078074][T12047] loop2: detected capacity change from 0 to 512
[  207.097928][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  207.110421][T12047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.122065][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  207.131232][T12047] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.149965][T12047] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  207.159071][T12047] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  207.162757][T12038] loop1: detected capacity change from 0 to 32768
[  207.163106][T12047] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.1138: Failed to acquire dquot type 0
[  207.165801][ T8204] usb 8-1: Using ep0 maxpacket: 8
[  207.187934][ T8204] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  207.191823][ T8204] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.196351][T12038] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  207.197514][ T8204] usb 8-1: Product: syz
[  207.201766][ T8204] usb 8-1: Manufacturer: syz
[  207.204850][ T8204] usb 8-1: SerialNumber: syz
[  207.208370][ T5831] udevd[5831]: symlink '../../loop1' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:1' failed: Read-only file system
[  207.209316][ T8204] usb 8-1: config 0 descriptor??
[  207.242449][ T5831] udevd[5831]: symlink '../../loop1' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:1' failed: Read-only file system
[  207.258108][ T8466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.308956][ T5831] udevd[5831]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  207.317061][T12038] XFS (loop1): Ending clean mount
[  207.326698][T12038] XFS (loop1): Quotacheck needed: Please wait.
[  207.369742][T12038] XFS (loop1): Quotacheck: Done.
[  207.397427][T11788] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  207.426354][ T8204] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  207.830146][ T8204] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  207.841259][ T8204] usb 8-1: USB disconnect, device number 15
[  208.439271][T12069] Bluetooth: hci4: Frame reassembly failed (-84)
[  208.446950][ T1087] Bluetooth: hci4: Frame reassembly failed (-84)
[  208.581062][T12073] tipc: Can't bind to reserved service type 2
[  208.617066][T12077] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1147'.
[  208.622631][T12077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1147'.
[  209.324301][  T970] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  209.359441][T12103] loop2: detected capacity change from 0 to 8192
[  209.378088][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system
[  209.384635][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:2' failed: Read-only file system
[  209.486871][  T970] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  209.492095][  T970] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  209.496542][  T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.504281][  T970] usb 2-1: config 0 descriptor??
[  209.507269][T12098] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  209.694764][ T7946] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  209.716915][  T970] ath6kl: Failed to submit usb control message: -71
[  209.721898][  T970] ath6kl: unable to send the bmi data to the device: -71
[  209.725547][  T970] ath6kl: Unable to send get target info: -71
[  209.732067][  T970] ath6kl: Failed to init ath6kl core: -71
[  209.746418][  T970] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[  209.762528][  T970] usb 2-1: USB disconnect, device number 4
[  209.843283][ T7946] usb 3-1: Using ep0 maxpacket: 32
[  209.847293][ T7946] usb 3-1: config 0 has an invalid interface number: 247 but max is 0
[  209.850758][ T7946] usb 3-1: config 0 has no interface number 0
[  209.857481][ T7946] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  209.861001][ T7946] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  209.865523][ T7946] usb 3-1: Product: syz
[  209.867281][ T7946] usb 3-1: Manufacturer: syz
[  209.871442][ T7946] usb 3-1: config 0 descriptor??
[  210.088585][  T970] usb 3-1: USB disconnect, device number 10
[  210.503282][ T8204] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  210.513378][ T5825] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  210.513693][ T5829] Bluetooth: hci4: command 0xfc11 tx timeout
[  210.659620][ T8204] usb 2-1: Using ep0 maxpacket: 32
[  210.669861][T12110] loop7: detected capacity change from 0 to 1024
[  210.675183][ T8204] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  210.679928][ T8204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  210.686952][ T5831] udevd[5831]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system
[  210.688762][ T8204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  210.696952][ T5831] udevd[5831]: symlink '../../loop7' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:7' failed: Read-only file system
[  210.697531][ T8204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  210.707689][T12112] loop2: detected capacity change from 0 to 4096
[  210.717698][ T8204] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  210.721801][ T8204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.729874][ T8204] usb 2-1: Product: syz
[  210.731729][ T8204] usb 2-1: Manufacturer: syz
[  210.736395][ T8204] usb 2-1: SerialNumber: syz
[  210.743558][ T8204] usb 2-1: config 0 descriptor??
[  210.750084][ T5819] udevd[5819]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  210.774152][ T5819] udevd[5819]: symlink '../../loop2' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:2' failed: Read-only file system
[  210.796781][ T5819] udevd[5819]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  210.802655][ T5819] udevd[5819]: symlink '../../loop2' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:2' failed: Read-only file system
[  210.846356][ T5831] udevd[5831]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  210.967428][ T7946] usb 2-1: USB disconnect, device number 5
[  211.153893][  T970] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  211.250809][ T1087] hfsplus: b-tree write err: -5, ino 4
[  211.305051][  T970] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[  211.308576][  T970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.328912][  T970] usb 3-1: config 0 has no interface number 0
[  211.331611][  T970] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  211.337274][  T970] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  211.353939][  T970] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  211.362749][  T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.367907][  T970] usb 3-1: Product: syz
[  211.371718][  T970] usb 3-1: Manufacturer: syz
[  211.374798][  T970] usb 3-1: SerialNumber: syz
[  211.379793][T12122] netlink: 'syz.7.1166': attribute type 1 has an invalid length.
[  211.384122][  T970] usb 3-1: config 0 descriptor??
[  211.385843][T12122] netlink: 'syz.7.1166': attribute type 2 has an invalid length.
[  211.597577][T12127] loop1: detected capacity change from 0 to 8
[  211.602392][T12127] SQUASHFS error: Unknown LZ4 version
[  211.605131][T12127] squashfs image failed sanity check
[  211.946860][T12132] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10)
[  211.949590][T12132] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  211.953048][T12132] vhci_hcd vhci_hcd.0: Device attached
[  211.984051][   T10] usb 3-1: USB disconnect, device number 11
[  212.256663][ T5981] usb 47-1: new low-speed USB device number 2 using vhci_hcd
[  212.268739][T12133] vhci_hcd: connection reset by peer
[  212.272670][ T5835] vhci_hcd: stop threads
[  212.275429][ T5835] vhci_hcd: release socket
[  212.277709][ T5835] vhci_hcd: disconnect device
[  212.303343][ T7946] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  212.453437][ T7946] usb 2-1: Using ep0 maxpacket: 8
[  212.458599][ T7946] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  212.462941][ T7946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.478139][ T7946] pvrusb2: Hardware description: Terratec Grabster AV400
[  212.481086][ T7946] pvrusb2: **********
[  212.482782][ T7946] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  212.487805][ T7946] pvrusb2: Important functionality might not be entirely working.
[  212.491263][ T7946] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  212.497759][ T7946] pvrusb2: **********
[  212.676618][ T2396] pvrusb2: Invalid write control endpoint
[  212.701759][T12151] loop2: detected capacity change from 0 to 1024
[  212.707059][ T2396] pvrusb2: Invalid write control endpoint
[  212.708974][ T2396] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  212.712505][ T2396] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  212.729185][ T5819] udevd[5819]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system
[  212.733415][ T2396] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  212.737415][ T2396] pvrusb2: Device being rendered inoperable
[  212.740408][ T5819] udevd[5819]: symlink '../../loop2' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:2' failed: Read-only file system
[  212.741626][ T2396] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  212.749843][ T2396] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  212.753093][ T1086] hfsplus: b-tree write err: -5, ino 4
[  212.758928][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system
[  212.767106][ T2396] pvrusb2: Attached sub-driver cx25840
[  212.769583][ T2396] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  212.793537][ T2396] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  212.879215][ T8204] usb 2-1: USB disconnect, device number 6
[  212.902933][T12155] loop7: detected capacity change from 0 to 1024
[  212.912796][T12155] hfsplus: failed to load root directory
[  213.428127][T12161] loop1: detected capacity change from 0 to 128
[  213.438942][T12161] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  213.443562][T12161] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  213.498323][T12163] loop1: detected capacity change from 0 to 16
[  213.511984][T12163] erofs (device loop1): failed to read inode meta block (nid: 18446744073575399424): -117
[  214.183661][T12182] loop7: detected capacity change from 0 to 128
[  214.668645][T12188] loop7: detected capacity change from 0 to 64
[  214.804389][   T33] audit: type=1800 audit(1759243595.614:69): pid=12188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1186" name="bus" dev="loop7" ino=8 res=0 errno=0
[  215.531998][T12187] loop2: detected capacity change from 0 to 32768
[  215.589630][T12187] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  215.607789][T12191] loop7: detected capacity change from 0 to 32768
[  215.625620][T12191] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  215.651038][T12187] XFS (loop2): Ending clean mount
[  215.660366][T12191] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  215.671748][T12187] XFS (loop2): Quotacheck needed: Please wait.
[  215.710325][T12219] loop1: detected capacity change from 0 to 2048
[  215.731705][ T5831] udevd[5831]: symlink '../../loop1' '/dev/disk/by-label/LinuxUDF.tmp-b7:1' failed: Read-only file system
[  215.737336][T12219] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  215.740777][T12187] XFS (loop2): Quotacheck: Done.
[  215.742582][ T5831] udevd[5831]: symlink '../../loop1' '/dev/disk/by-uuid/1234567812345678.tmp-b7:1' failed: Read-only file system
[  215.750883][T12219] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  215.769531][ T7590] ocfs2: Unmounting device (7,7) on (node local)
[  215.909543][ T8466] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  216.329046][T12239] (syz.7.1199,12239,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  216.335822][T12239] (syz.7.1199,12239,0):ocfs2_fill_super:1177 ERROR: status = -22
[  216.425141][T12243] loop2: detected capacity change from 0 to 64
[  216.978525][T12251] loop2: detected capacity change from 0 to 4096
[  217.048279][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  217.054055][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:2' failed: Read-only file system
[  217.250227][T12254] loop1: detected capacity change from 0 to 32768
[  217.253363][T12254] btrfs: Deprecated parameter 'usebackuproot'
[  217.255835][T12254] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  217.259810][T12254] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1205 (12254)
[  217.394239][T12257] sctp: [Deprecated]: syz.7.1207 (pid 12257) Use of int in max_burst socket option deprecated.
[  217.394239][T12257] Use struct sctp_assoc_value instead
[  217.650765][T12265] capability: warning: `syz.7.1211' uses deprecated v2 capabilities in a way that may be insecure
[  217.658468][T12255] loop2: detected capacity change from 0 to 131072
[  217.664267][T12254] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  217.664823][T12255] F2FS-fs (loop2): Test dummy encryption mode enabled
[  217.669569][T12254] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  217.673918][T12255] F2FS-fs (loop2): invalid crc value
[  217.714212][ T5819] udevd[5819]: symlink '../../loop1' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:1' failed: Read-only file system
[  217.715022][T12255] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  217.725828][T12255] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  217.743529][ T5981] vhci_hcd: vhci_device speed not set
[  217.792279][ T5831] udevd[5831]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  217.792894][ T1094] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x32f839c6 level 0
[  217.812877][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/36fde3fc-a519-493c-8baa-e32931e9a89c.tmp-b7:2' failed: Read-only file system
[  217.823336][T12254] BTRFS warning (device loop1): couldn't read tree root
[  217.826370][T12254] BTRFS warning (device loop1): try to load backup roots slot 1
[  217.844633][ T3578] BTRFS warning (device loop1): checksum verify failed on logical 5316608 mirror 1 wanted 0x5387c9d6 found 0xc5289bf1 level 0
[  217.851223][T12254] BTRFS error (device loop1): failed to load root extent
[  217.863291][T12254] BTRFS warning (device loop1): try to load backup roots slot 2
[  217.864595][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/36fde3fc-a519-493c-8baa-e32931e9a89c.tmp-b7:2' failed: Read-only file system
[  217.866674][ T3578] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  217.888790][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/36fde3fc-a519-493c-8baa-e32931e9a89c.tmp-b7:2' failed: Read-only file system
[  217.893453][T12254] BTRFS warning (device loop1): couldn't read tree root
[  217.897486][T12254] BTRFS warning (device loop1): try to load backup roots slot 3
[  217.929969][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/36fde3fc-a519-493c-8baa-e32931e9a89c.tmp-b7:2' failed: Read-only file system
[  217.947557][T12254] BTRFS info (device loop1): rebuilding free space tree
[  217.986187][T12254] BTRFS info (device loop1): checking UUID tree
[  217.988868][T12254] BTRFS info (device loop1): setting nodatasum
[  217.991013][T12254] BTRFS info (device loop1): setting nodatacow
[  217.997654][T12254] BTRFS info (device loop1): enabling ssd optimizations
[  218.000562][T12254] BTRFS info (device loop1): disabling tree log
[  218.002766][T12254] BTRFS info (device loop1): turning on sync discard
[  218.033493][T12254] BTRFS info (device loop1): enabling free space tree
[  218.053265][T12254] BTRFS info (device loop1): force clearing of disk cache
[  218.055962][T12254] BTRFS info (device loop1): doing ref verification
[  218.058401][T12254] BTRFS info (device loop1): trying to use backup root at mount time
[  218.135278][T11788] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  219.943317][ T6185] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  220.103842][ T6185] usb 3-1: too many configurations: 17, using maximum allowed: 8
[  220.116894][ T6185] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  220.120172][ T6185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.122883][ T6185] usb 3-1: Product: syz
[  220.125024][ T6185] usb 3-1: Manufacturer: syz
[  220.126992][ T6185] usb 3-1: SerialNumber: syz
[  220.130374][ T6185] usb 3-1: config 0 descriptor??
[  220.135269][ T6185] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  220.139735][ T6185] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  220.143576][ T6185] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  220.147277][ T6185] usb 3-1: media controller created
[  220.157212][ T6185] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  220.188604][ T6185] DVB: Unable to find symbol mt352_attach()
[  220.205730][ T6185] DVB: Unable to find symbol nxt6000_attach()
[  220.207869][ T6185] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  220.213762][ T6185] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16
[  220.219162][ T6185] dvb-usb: schedule remote query interval to 1000 msecs.
[  220.221908][ T6185] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  220.226168][ T6185] dvb-usb: bulk message failed: -22 (7/0)
[  220.228032][ T6185] dvb-usb: bulk message failed: -22 (7/0)
[  220.341174][ T6185] usb 3-1: USB disconnect, device number 12
[  220.395672][ T6185] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  220.611282][T12324] netlink: 'syz.1.1222': attribute type 12 has an invalid length.
[  220.614970][T12324] netlink: 'syz.1.1222': attribute type 29 has an invalid length.
[  220.618247][T12324] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1222'.
[  220.621693][T12324] netlink: 'syz.1.1222': attribute type 2 has an invalid length.
[  220.626783][T12324] netlink: 'syz.1.1222': attribute type 3 has an invalid length.
[  220.630153][T12324] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1222'.
[  220.892199][T12330] sp0: Synchronizing with TNC
[  220.935174][T12329] [U] 
[  221.239588][T12343] loop2: detected capacity change from 0 to 1764
[  221.425716][T12349] loop2: detected capacity change from 0 to 4096
[  221.447101][T12352] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  221.451132][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:2' failed: Read-only file system
[  221.480687][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:2' failed: Read-only file system
[  221.631013][T12356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  221.635508][T12356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  221.639284][T12356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  221.643071][T12356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  221.647417][T12356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  221.651393][T12356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  221.654853][T12356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  221.657901][T12356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  221.661087][T12356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  221.664911][T12356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  221.674794][T12360] binder: 12357:12360 unknown command 1885300084
[  221.677449][T12360] binder: 12357:12360 ioctl c0306201 200000000080 returned -22
[  221.793614][T12362] loop1: detected capacity change from 0 to 1024
[  221.810732][ T5831] udevd[5831]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  221.834128][T12362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.880228][ T5831] udevd[5831]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  222.189666][T12362] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.1236: reserved inode found cleared - inode=2
[  222.211749][ T5831] udevd[5831]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  222.215655][T12362] EXT4-fs (loop1): Remounting filesystem read-only
[  222.267626][T11788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.299988][ T5831] udevd[5831]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  222.347930][T12373] loop2: detected capacity change from 0 to 2048
[  222.361234][T12373] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  222.364369][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-label/LinuxUDF.tmp-b7:2' failed: Read-only file system
[  222.391021][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/1234567812345678.tmp-b7:2' failed: Read-only file system
[  222.417934][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-label/LinuxUDF.tmp-b7:2' failed: Read-only file system
[  222.435202][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/1234567812345678.tmp-b7:2' failed: Read-only file system
[  223.499652][T12391] loop2: detected capacity change from 0 to 512
[  223.581705][T12393] loop1: detected capacity change from 0 to 1024
[  223.631184][T12393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.640944][T12393] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.655762][T12391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.675797][T12391] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.806406][T11788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.807576][T12410] loop7: detected capacity change from 0 to 16
[  224.822743][T12410] /dev/loop7: Can't open blockdev
[  225.131548][T12416] binder: Bad value for 'max'
[  225.711621][T12426] loop7: detected capacity change from 0 to 512
[  225.722081][ T8466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.746575][T12426] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  225.749303][T12426] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  225.754209][T12426] System zones: 0-1, 15-15, 18-18, 34-34
[  225.756359][T12426] EXT4-fs (loop7): orphan cleanup on readonly fs
[  225.759072][T12426] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0
[  225.767421][T12426] EXT4-fs warning (device loop7): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  225.773510][T12426] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  225.779034][T12426] EXT4-fs (loop7): 1 truncate cleaned up
[  225.782701][T12426] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  225.809507][ T7590] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.933364][   T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  225.981081][T12434] loop7: detected capacity change from 0 to 1024
[  225.989183][T12430] loop2: detected capacity change from 0 to 32768
[  225.993736][T12430] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1259 (12430)
[  226.014061][T12430] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  226.018795][T12430] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  226.059157][ T1086] hfsplus: b-tree write err: -5, ino 4
[  226.069670][T12430] BTRFS info (device loop2): enabling ssd optimizations
[  226.072414][T12430] BTRFS info (device loop2): enabling free space tree
[  226.098315][   T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  226.101639][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.146505][   T24] usb 2-1: config 0 descriptor??
[  226.158606][   T24] cp210x 2-1:0.0: cp210x converter detected
[  226.178512][T12452] loop7: detected capacity change from 0 to 1024
[  226.316912][ T8466] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  226.580008][   T24] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  226.618416][T12459] loop7: detected capacity change from 0 to 2048
[  226.650442][ T5819] udevd[5819]: symlink '../../loop7' '/dev/disk/by-label/LinuxUDF.tmp-b7:7' failed: Read-only file system
[  226.675250][ T5819] udevd[5819]: symlink '../../loop7' '/dev/disk/by-uuid/1234567812345678.tmp-b7:7' failed: Read-only file system
[  226.685134][T12459] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  226.719018][ T5819] udevd[5819]: symlink '../../loop7' '/dev/disk/by-label/LinuxUDF.tmp-b7:7' failed: Read-only file system
[  226.730423][T12461] loop2: detected capacity change from 0 to 1156
[  226.751171][T12461] ISOFS: unable to read i-node block
[  226.753604][ T5819] udevd[5819]: symlink '../../loop7' '/dev/disk/by-uuid/1234567812345678.tmp-b7:7' failed: Read-only file system
[  226.763419][T12461] isofs_fill_super: get root inode failed
[  226.822030][   T24] usb 2-1: cp210x converter now attached to ttyUSB0
[  227.008087][ T5885] usb 2-1: USB disconnect, device number 7
[  227.026080][ T5885] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  227.041166][ T5885] cp210x 2-1:0.0: device disconnected
[  227.048963][T12469] loop2: detected capacity change from 0 to 128
[  227.088972][T12469] vxfs: unable to set final block size
[  227.875084][   T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  228.028387][   T24] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[  228.031695][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  228.038198][   T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  228.042615][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  228.047134][   T24] usb 2-1: SerialNumber: syz
[  228.203438][ T6185] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  228.275575][   T24] usb 2-1: 0:2 : does not exist
[  228.282541][   T24] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  228.302711][   T24] usb 2-1: USB disconnect, device number 8
[  228.371262][ T6185] usb 3-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf
[  228.380346][ T6185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.399703][ T6185] ums-cypress 3-1:1.0: USB Mass Storage device detected
[  228.629789][    T9] usb 3-1: USB disconnect, device number 13
[  228.869813][T12519] loop1: detected capacity change from 0 to 1024
[  228.895633][ T5831] udevd[5831]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  228.898106][T12519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.927935][T12519] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1290: bg 0: block 88: padding at end of block bitmap is not set
[  228.928435][ T5831] udevd[5831]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  228.950106][T11788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.984652][ T5831] udevd[5831]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  229.366459][T12534] input: syz0 as /devices/virtual/input/input17
[  229.532060][T12546] loop2: detected capacity change from 0 to 128
[  229.548770][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:2' failed: Read-only file system
[  229.557812][T12546] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  229.568985][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:2' failed: Read-only file system
[  229.573395][T12546] ext4 filesystem being mounted at /183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  229.592536][   T33] audit: type=1800 audit(1759243610.404:70): pid=12546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1302" name="file1" dev="loop2" ino=12 res=0 errno=0
[  229.702174][ T8466] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  229.741058][T12538] loop7: detected capacity change from 0 to 32768
[  229.769493][T12538] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1298 (12538)
[  229.801867][ T5831] udevd[5831]: symlink '../../loop7' '/dev/disk/by-uuid/a6a605fc-d5f1-4e66-8595-3726e2b761d6.tmp-b7:7' failed: Read-only file system
[  229.802156][T12538] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  229.854588][T12538] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  229.959092][T12538] BTRFS info (device loop7): enabling ssd optimizations
[  229.962026][T12538] BTRFS info (device loop7): enabling free space tree
[  230.020981][T12580] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  230.024402][T12580] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  230.027298][T12580] overlayfs: missing 'lowerdir'
[  230.235610][ T7590] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  230.377922][T12589] loop2: detected capacity change from 0 to 1024
[  230.397578][T12589] EXT4-fs: inline encryption not supported
[  230.422522][T12589] EXT4-fs: Ignoring removed i_version option
[  230.462144][T12589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.525030][T12589] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt.
[  230.623360][ T8466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.330462][T12615] loop2: detected capacity change from 0 to 32768
[  231.442423][T12615] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  231.498159][T12615] XFS (loop2): Ending clean mount
[  231.639872][ T8466] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  231.806113][T12637] loop7: detected capacity change from 0 to 512
[  231.816363][T12637] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  231.877927][T12637] EXT4-fs (loop7): 1 truncate cleaned up
[  231.878054][ T5819] udevd[5819]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  231.881496][T12637] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.921587][ T5831] udevd[5831]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  231.961213][T12635] loop1: detected capacity change from 0 to 32768
[  231.965004][T12635] btrfs: Deprecated parameter 'usebackuproot'
[  231.967567][T12635] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  231.971929][T12635] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1328 (12635)
[  232.083046][ T5819] udevd[5819]: symlink '../../loop1' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:1' failed: Read-only file system
[  232.101215][T12635] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  232.117628][T12635] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  232.604404][T12635] BTRFS info (device loop1): rebuilding free space tree
[  232.630209][T12635] BTRFS info (device loop1): allowing degraded mounts
[  232.670810][T12643] loop2: detected capacity change from 0 to 32768
[  232.683728][T12635] BTRFS info (device loop1): enabling ssd optimizations
[  232.686753][T12635] BTRFS info (device loop1): turning on flush-on-commit
[  232.689695][T12635] BTRFS info (device loop1): enabling free space tree
[  232.692521][T12635] BTRFS info (device loop1): force clearing of disk cache
[  232.702508][T12635] BTRFS info (device loop1): trying to use backup root at mount time
[  232.711269][ T7590] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.712440][T12635] BTRFS info (device loop1): use zstd compression, level 3
[  232.733754][ T5819] udevd[5819]: symlink '../../loop1' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:1' failed: Read-only file system
[  232.744344][T12643] (syz.2.1329,12643,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0x12eb5780. Applying ECC.
[  232.766366][T12643] (syz.2.1329,12643,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xfaa975d8, computed 0x12eb5780
[  232.774829][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/9357e9d7-5182-4c22-8242-b9b0d0fb6750.tmp-b7:2' failed: Read-only file system
[  232.781261][ T6262] udevd[6262]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  232.808876][T12663] loop7: detected capacity change from 0 to 22
[  232.811562][T12643] (syz.2.1329,12643,1):ocfs2_verify_volume:2331 ERROR: status = -5
[  232.811586][T12643] (syz.2.1329,12643,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  232.831857][T12643] (syz.2.1329,12643,1):ocfs2_fill_super:1177 ERROR: status = -5
[  232.836959][T12663] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  232.841573][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/9357e9d7-5182-4c22-8242-b9b0d0fb6750.tmp-b7:2' failed: Read-only file system
[  232.851545][ T6262] udevd[6262]: symlink '../../loop7' '/dev/disk/by-label/rom\x20637cf1fa.tmp-b7:7' failed: Read-only file system
[  232.904117][T12663] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  232.912620][T11788] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  233.211317][T12669] loop1: detected capacity change from 0 to 4096
[  233.417855][ T5831] udevd[5831]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  233.424529][ T5831] udevd[5831]: symlink '../../loop1' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:1' failed: Read-only file system
[  233.741733][T12681] loop1: detected capacity change from 0 to 4096
[  233.791243][T12681] ntfs3(loop1): failed to convert "0080" to macinuit
[  233.802316][T12681] ntfs3(loop1): failed to convert name for inode 1e.
[  233.807306][T12681] ntfs3(loop1): ino=1f, mi_enum_attr
[  234.151128][T12689] loop1: detected capacity change from 0 to 1024
[  234.177025][T12691] loop7: detected capacity change from 0 to 1024
[  234.197458][T12689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  234.215108][T12689] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.220703][T12691] hfsplus: bad catalog entry type
[  234.235685][T12689] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.1343: lblock 3 mapped to illegal pblock 3 (length 3)
[  234.247492][T12689] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  234.253000][T12689] EXT4-fs (loop1): This should not happen!! Data will be lost
[  234.253000][T12689] 
[  234.255433][ T3578] hfsplus: b-tree write err: -5, ino 4
[  234.265287][   T33] audit: type=1800 audit(1759243615.084:71): pid=12689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1343" name="file1" dev="loop1" ino=15 res=0 errno=0
[  234.275926][T12689] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.1343: lblock 3 mapped to illegal pblock 3 (length 1)
[  234.288634][T12695] loop7: detected capacity change from 0 to 8
[  234.301798][T12695] SQUASHFS error: lzo decompression failed, data probably corrupt
[  234.308667][ T1094] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  234.315775][T12695] SQUASHFS error: Failed to read block 0x82: -5
[  234.319123][T12695] SQUASHFS error: Unable to read metadata cache entry [80]
[  234.321516][ T1094] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 28
[  234.322468][T12695] SQUASHFS error: Unable to read inode 0x11f
[  234.335632][ T1094] EXT4-fs (loop1): This should not happen!! Data will be lost
[  234.335632][ T1094] 
[  234.346085][ T1094] EXT4-fs (loop1): Total free blocks count 0
[  234.354415][ T1094] EXT4-fs (loop1): Free/Dirty block details
[  234.365310][ T1094] EXT4-fs (loop1): free_blocks=4293918720
[  234.372527][ T1094] EXT4-fs (loop1): dirty_blocks=48
[  234.379823][ T1094] EXT4-fs (loop1): Block reservation details
[  234.509516][T12701] syzkaller0: entered promiscuous mode
[  234.514258][T12701] syzkaller0: entered allmulticast mode
[  234.837919][T12708] overlayfs: missing 'lowerdir'
[  234.971463][T12706] loop1: detected capacity change from 0 to 32768
[  235.062372][T12710] ptrace attach of "/syz-executor exec"[8466] was attempted by "/syz-executor exec"[12710]
[  235.229600][T12706] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  235.324234][T11788] ocfs2: Unmounting device (7,1) on (node local)
[  235.803268][ T6185] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  235.958728][ T6185] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.972535][ T6185] usb 2-1: config 0 interface 0 has no altsetting 0
[  235.976237][ T6185] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  235.980026][ T6185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.990237][ T6185] usb 2-1: config 0 descriptor??
[  236.357487][   T60] block nbd0: Possible stuck request ffff888021b28000: control (read@0,1024B). Runtime 150 seconds
[  236.362109][   T60] block nbd0: Possible stuck request ffff888021b28200: control (read@1024,1024B). Runtime 150 seconds
[  236.367323][   T60] block nbd0: Possible stuck request ffff888021b28400: control (read@2048,1024B). Runtime 150 seconds
[  236.372601][   T60] block nbd0: Possible stuck request ffff888021b28600: control (read@3072,1024B). Runtime 150 seconds
[  236.416547][ T6185] megaworld 0003:07B5:0312.000D: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.1-1/input0
[  236.422183][ T6185] megaworld 0003:07B5:0312.000D: no inputs found
[  236.610280][    T9] usb 2-1: USB disconnect, device number 9
[  237.472195][T12731] loop1: detected capacity change from 0 to 32768
[  237.500352][T12731] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  237.503978][ T5831] udevd[5831]: symlink '../../loop1' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:1' failed: Read-only file system
[  237.515571][T12731] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  237.524768][ T5831] udevd[5831]: symlink '../../loop1' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:1' failed: Read-only file system
[  237.713873][T11788] ocfs2: Unmounting device (7,1) on (node local)
[  237.887154][T12735] loop1: detected capacity change from 0 to 1024
[  237.909416][ T5831] udevd[5831]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system
[  237.921677][ T5831] udevd[5831]: symlink '../../loop1' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:1' failed: Read-only file system
[  238.028474][T12735] hfsplus: xattr searching failed
[  238.066610][  T715] hfsplus: b-tree write err: -5, ino 3
[  238.195050][T12727] net_ratelimit: 3319 callbacks suppressed
[  238.195152][T12727] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  238.754235][T12742] loop2: detected capacity change from 0 to 32768
[  238.777516][T12742] JBD2: Ignoring recovery information on journal
[  238.847694][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:2' failed: Read-only file system
[  238.995441][ T5831] udevd[5831]: symlink '../../loop2' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:2' failed: Read-only file system
[  239.006804][T12742] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  239.076454][T12742] OCFS2: ERROR (device loop2): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  239.077474][T12742] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  239.094294][T12742] OCFS2: File system is now read-only.
[  239.202587][ T8466] ocfs2: Unmounting device (7,2) on (node local)
[  239.850229][T12774] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1375'.
[  240.009211][T12779] vcan0: tx address claim with dest, not broadcast
Connection to localhost closed by remote host.
[  240.494546][ T5835] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.600981][ T5835] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.682375][ T5835] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.733512][ T5835] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.862026][ T5835] bridge_slave_1: left allmulticast mode
[  240.867435][ T5835] bridge_slave_1: left promiscuous mode
[  240.871269][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.876465][ T5835] bridge_slave_0: left allmulticast mode
[  240.878774][ T5835] bridge_slave_0: left promiscuous mode
[  240.881392][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.331152][ T5835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.337912][ T5835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.342972][ T5835] bond0 (unregistering): Released all slaves
[  241.619096][ T5835] hsr_slave_0: left promiscuous mode
[  241.623078][ T5835] hsr_slave_1: left promiscuous mode
[  241.626641][ T5835] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  241.629884][ T5835] batman_adv: batadv0: Removing interface: batadv_slave_0
[  241.636380][ T5835] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  241.639581][ T5835] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.653080][ T5835] veth1_macvtap: left promiscuous mode
[  241.656783][ T5835] veth0_macvtap: left promiscuous mode
[  241.659157][ T5835] veth1_vlan: left promiscuous mode
[  241.661357][ T5835] veth0_vlan: left promiscuous mode
[  242.156590][ T5835] team0 (unregistering): Port device team_slave_1 removed
[  242.201343][ T5835] team0 (unregistering): Port device team_slave_0 removed
[  243.008388][ T5835] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.111245][ T5835] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.220433][ T5835] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.296523][ T5835] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.408931][ T5835] bridge_slave_1: left allmulticast mode
[  243.411209][ T5835] bridge_slave_1: left promiscuous mode
[  243.415515][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.422372][ T5835] bridge_slave_0: left allmulticast mode
[  243.424829][ T5835] bridge_slave_0: left promiscuous mode
[  243.427213][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.889340][ T5835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  243.895247][ T5835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  243.900111][ T5835] bond0 (unregistering): Released all slaves
[  244.167422][ T5835] hsr_slave_0: left promiscuous mode
[  244.169740][ T5835] hsr_slave_1: left promiscuous mode
[  244.172044][ T5835] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.175278][ T5835] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.178202][ T5835] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.180933][ T5835] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.196469][ T5835] veth1_macvtap: left promiscuous mode
[  244.198882][ T5835] veth0_macvtap: left promiscuous mode
[  244.201544][ T5835] veth1_vlan: left promiscuous mode
[  244.206797][ T5835] veth0_vlan: left promiscuous mode
[  244.738351][ T5835] team0 (unregistering): Port device team_slave_1 removed
[  244.781926][ T5835] team0 (unregistering): Port device team_slave_0 removed
[  248.568869][ T5275] udevd[5275]: worker [6110] /devices/virtual/block/nbd0 is taking a long time
[  252.993379][   T34] INFO: task syz.0.303:6818 blocked for more than 143 seconds.
[  252.997140][   T34]       Not tainted syzkaller #0
[  252.999682][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  253.004815][   T34] task:syz.0.303       state:D stack:28352 pid:6818  tgid:6817  ppid:5823   task_flags:0x400140 flags:0x00004004
[  253.009528][   T34] Call Trace:
[  253.010715][   T34]  <TASK>
[  253.011737][   T34]  __schedule+0x1798/0x4cc0
[  253.014135][   T34]  ? __lock_acquire+0xab9/0xd20
[  253.015959][   T34]  ? __lock_acquire+0xab9/0xd20
[  253.017935][   T34]  ? __pfx___schedule+0x10/0x10
[  253.019980][   T34]  ? schedule+0x91/0x360
[  253.021715][   T34]  schedule+0x165/0x360
[  253.026074][   T34]  schedule_preempt_disabled+0x13/0x30
[  253.028463][   T34]  __mutex_lock+0x7e6/0x1350
[  253.030490][   T34]  ? __mutex_lock+0x5bb/0x1350
[  253.032580][   T34]  ? bdev_open+0xe0/0xd30
[  253.034993][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  253.037329][   T34]  ? __pfx_bd_prepare_to_claim+0x10/0x10
[  253.040517][   T34]  ? alloc_file_pseudo_noaccount+0x203/0x2c0
[  253.046279][   T34]  ? disk_block_events+0xab/0x120
[  253.048382][   T34]  ? bdev_open+0xbe/0xd30
[  253.050267][   T34]  bdev_open+0xe0/0xd30
[  253.052070][   T34]  bdev_file_open_by_dev+0x1be/0x240
[  253.054768][   T34]  setup_bdev_super+0x5a/0x5b0
[  253.056786][   T34]  get_tree_bdev_flags+0x366/0x4d0
[  253.059372][   T34]  ? __pfx_ocfs2_fill_super+0x10/0x10
[  253.061768][   T34]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  253.067414][   T34]  vfs_get_tree+0x92/0x2b0
[  253.069467][   T34]  do_new_mount+0x2a2/0xa30
[  253.071439][   T34]  ? ns_capable+0x8a/0xf0
[  253.075455][   T34]  ? __pfx_do_new_mount+0x10/0x10
[  253.077721][   T34]  ? path_mount+0x61c/0xfe0
[  253.079706][   T34]  ? user_path_at+0x44/0x60
[  253.081701][   T34]  __se_sys_mount+0x317/0x410
[  253.086459][   T34]  ? __pfx___se_sys_mount+0x10/0x10
[  253.088788][   T34]  ? rcu_is_watching+0x15/0xb0
[  253.091037][   T34]  ? do_syscall_64+0xbe/0x3b0
[  253.094699][   T34]  ? __x64_sys_mount+0x20/0xc0
[  253.096846][   T34]  do_syscall_64+0xfa/0x3b0
[  253.098825][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  253.101085][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.105715][   T34]  ? exc_page_fault+0x9f/0xf0
[  253.107908][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.110817][   T34] RIP: 0033:0x7f965778ec29
[  253.112865][   T34] RSP: 002b:00007f96559ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  253.117157][   T34] RAX: ffffffffffffffda RBX: 00007f96579d5fa0 RCX: 00007f965778ec29
[  253.120615][   T34] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000200000000040
[  253.126425][   T34] RBP: 00007f9657811e41 R08: 0000000000000000 R09: 0000000000000000
[  253.129691][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  253.133051][   T34] R13: 00007f96579d6038 R14: 00007f96579d5fa0 R15: 00007fff14d6ab48
[  253.137955][   T34]  </TASK>
[  253.139422][   T34] 
[  253.139422][   T34] Showing all locks held in the system:
[  253.142735][   T34] 1 lock held by khungtaskd/34:
[  253.148126][   T34]  #0: ffffffff8dd3aca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  253.152401][   T34] 2 locks held by getty/5652:
[  253.155046][   T34]  #0: ffff8880237120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  253.159618][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  253.165349][   T34] 1 lock held by udevd/6110:
[  253.167247][   T34]  #0: ffff888021a34358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  253.171287][   T34] 2 locks held by syz.0.303/6818:
[  253.174273][   T34]  #0: ffff888104c980e0 (&type->s_umount_key#69/1){+.+.}-{4:4}, at: alloc_super+0x204/0x970
[  253.178826][   T34]  #1: ffff888021a34358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  253.183757][   T34] 
[  253.184892][   T34] =============================================
[  253.184892][   T34] 
[  253.188601][   T34] NMI backtrace for cpu 1
[  253.188615][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  253.188628][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  253.188635][   T34] Call Trace:
[  253.188642][   T34]  <TASK>
[  253.188649][   T34]  dump_stack_lvl+0x189/0x250
[  253.188670][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  253.188685][   T34]  ? __pfx__printk+0x10/0x10
[  253.188705][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  253.188724][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  253.188742][   T34]  ? __pfx__printk+0x10/0x10
[  253.188755][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  253.188769][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  253.188787][   T34]  watchdog+0xf93/0xfe0
[  253.188807][   T34]  ? watchdog+0x1de/0xfe0
[  253.188825][   T34]  kthread+0x711/0x8a0
[  253.188842][   T34]  ? __pfx_watchdog+0x10/0x10
[  253.188855][   T34]  ? __pfx_kthread+0x10/0x10
[  253.188893][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  253.188905][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  253.188914][   T34]  ? __pfx_kthread+0x10/0x10
[  253.188929][   T34]  ret_from_fork+0x439/0x7d0
[  253.188943][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  253.188958][   T34]  ? __switch_to_asm+0x39/0x70
[  253.188972][   T34]  ? __switch_to_asm+0x33/0x70
[  253.188986][   T34]  ? __pfx_kthread+0x10/0x10
[  253.189000][   T34]  ret_from_fork_asm+0x1a/0x30
[  253.189026][   T34]  </TASK>
[  253.189030][   T34] Sending NMI from CPU 1 to CPUs 0:
[  253.257068][    C0] NMI backtrace for cpu 0
[  253.257080][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  253.257088][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  253.257092][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  253.257104][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 8c 12 00 f3 0f 1e fa fb f4 <e9> 08 e8 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  253.257117][    C0] RSP: 0018:ffffffff8da07d80 EFLAGS: 00000282
[  253.257124][    C0] RAX: f0167735543afd00 RBX: ffffffff8194f198 RCX: f0167735543afd00
[  253.257129][    C0] RDX: 0000000000000001 RSI: ffffffff8d531ee2 RDI: ffffffff8b9e6fe0
[  253.257133][    C0] RBP: ffffffff8da07eb8 R08: ffff88804b232fdb R09: 1ffff110096465fb
[  253.257137][    C0] R10: dffffc0000000000 R11: ffffed10096465fc R12: ffffffff8f5cac30
[  253.257141][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b52a28
[  253.257145][    C0] FS:  0000000000000000(0000) GS:ffff8880b8d7e000(0000) knlGS:0000000000000000
[  253.257150][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  253.257154][    C0] CR2: 00007ffd3dc3e678 CR3: 00000000228b8000 CR4: 00000000000006f0
[  253.257184][    C0] Call Trace:
[  253.257192][    C0]  <TASK>
[  253.257195][    C0]  default_idle+0x13/0x20
[  253.257203][    C0]  default_idle_call+0x74/0xb0
[  253.257211][    C0]  do_idle+0x1e8/0x510
[  253.257219][    C0]  ? __pfx_do_idle+0x10/0x10
[  253.257228][    C0]  cpu_startup_entry+0x44/0x60
[  253.257234][    C0]  rest_init+0x2de/0x300
[  253.257242][    C0]  start_kernel+0x3ae/0x410
[  253.257250][    C0]  x86_64_start_reservations+0x24/0x30
[  253.257259][    C0]  x86_64_start_kernel+0x143/0x1c0
[  253.257266][    C0]  common_startup_64+0x13e/0x147
[  253.257277][    C0]  </TASK>
[  253.355642][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  253.358492][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  253.362173][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  253.366390][   T34] Call Trace:
[  253.367970][   T34]  <TASK>
[  253.369335][   T34]  dump_stack_lvl+0x99/0x250
[  253.371430][   T34]  ? __asan_memcpy+0x40/0x70
[  253.373408][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  253.375666][   T34]  ? __pfx__printk+0x10/0x10
[  253.377686][   T34]  vpanic+0x281/0x750
[  253.379424][   T34]  ? __pfx_vpanic+0x10/0x10
[  253.381417][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  253.383777][   T34]  ? preempt_schedule+0xae/0xc0
[  253.385846][   T34]  ? preempt_schedule_common+0x83/0xd0
[  253.388175][   T34]  panic+0xb9/0xc0
[  253.389797][   T34]  ? __pfx_panic+0x10/0x10
[  253.391737][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  253.394092][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  253.396705][   T34]  watchdog+0xfd2/0xfe0
[  253.398519][   T34]  ? watchdog+0x1de/0xfe0
[  253.400739][   T34]  kthread+0x711/0x8a0
[  253.402971][   T34]  ? __pfx_watchdog+0x10/0x10
[  253.405370][   T34]  ? __pfx_kthread+0x10/0x10
[  253.407459][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  253.409708][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  253.411934][   T34]  ? __pfx_kthread+0x10/0x10
[  253.413907][   T34]  ret_from_fork+0x439/0x7d0
[  253.415910][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  253.418106][   T34]  ? __switch_to_asm+0x39/0x70
[  253.420155][   T34]  ? __switch_to_asm+0x33/0x70
[  253.422226][   T34]  ? __pfx_kthread+0x10/0x10
[  253.424127][   T34]  ret_from_fork_asm+0x1a/0x30
[  253.426321][   T34]  </TASK>
[  253.428529][   T34] Kernel Offset: disabled
[  253.430328][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:47:10  Registers:
info registers vcpu 0

CPU#0
RAX=f0167735543afd00 RBX=ffffffff8194f198 RCX=f0167735543afd00 RDX=0000000000000001
RSI=ffffffff8d531ee2 RDI=ffffffff8b9e6fe0 RBP=ffffffff8da07eb8 RSP=ffffffff8da07d80
R8 =ffff88804b232fdb R9 =1ffff110096465fb R10=dffffc0000000000 R11=ffffed10096465fc
R12=ffffffff8f5cac30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1b52a28
RIP=ffffffff8b35a153 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8d7e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9de2e7b6c0 CR3=00000000228b8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000500000089 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=00000000ff000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=000000000000002f 000000003265612f
XMM06=ffffffffffffff00 ffffffff00000000 XMM07=00000000000000ff 00000000000000ff
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=0000000000000051 00000000326e6170
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=5b9eb3119d2ae000 RBX=ffffffff8194f198 RCX=5b9eb3119d2ae000 RDX=0000000000000001
RSI=ffffffff8d531ee2 RDI=ffffffff8b9e6fe0 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632fdb R9 =1ffff11026cc65fb R10=dffffc0000000000 R11=ffffed1026cc65fc
R12=ffffffff8f5cac30 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020005000
RIP=ffffffff8b35a153 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a417e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd3dc3e678 CR3=000000000db36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=000000000000002f 000000003265612f
XMM06=ffffffffffffff00 ffffffff00000000 XMM07=00000000000000ff 00000000000000ff
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=0000000000000051 00000000326e6170
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
