last executing test programs:

7m54.32775014s ago: executing program 1 (id=143):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000646c6c25180100002020702500000000002020207b9af8ff000000001d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7m54.126688131s ago: executing program 1 (id=145):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="64002d8024"], 0x80}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000000)

7m54.05995191s ago: executing program 1 (id=147):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a500300000c0a010100000000000000000a0000050900020073797a31000000000900010073797a3100000000240303801c0000800c00018006000100000000000c0004400000000000000007040300800c00044080000000000000001c00064025b85d0e6b21bc430c53bff3dee236115c0dab3d48e8a060500002801c0002800900020073797a30000000000900020073797a31000000003000028008000340000000010800034000000004080003400000000308000340000000030900020073797a310000000008000340000000000c0004400000000000000006fc0001"], 0x378}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

7m53.868431899s ago: executing program 1 (id=150):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./file2\x00', 0x2204002, &(0x7f0000000040)={[{@fat=@errors_continue}, {@shortname_winnt}, {@fat=@sys_immutable}, {@utf8}, {@shortname_win95}, {@rodir}, {@shortname_win95}]}, 0x2, 0x226, &(0x7f0000000600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x2)

7m53.576499259s ago: executing program 1 (id=151):
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000680), 0x80, 0x0)

7m52.937751828s ago: executing program 32 (id=152):
unshare(0x26020480)
r0 = socket$pptp(0x18, 0x1, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1e)

7m52.199554763s ago: executing program 1 (id=159):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001380)={r3, 0x4}, &(0x7f00000013c0)=0x8)

7m52.146623671s ago: executing program 33 (id=159):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001380)={r3, 0x4}, &(0x7f00000013c0)=0x8)

7m50.730201513s ago: executing program 2 (id=176):
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa8201, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x20000090)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2, 0x7, 0x401, "5debca56de5667430241dbfaf876b2ff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
socket(0x11, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00')
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)

7m50.210073677s ago: executing program 2 (id=177):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00')
getdents(r0, &(0x7f0000000000)=""/35, 0x23)
getdents(r0, 0xffffffffffffffff, 0x5a)

7m50.129479275s ago: executing program 2 (id=178):
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/223, 0xdf}], 0x1)

7m50.067142826s ago: executing program 2 (id=179):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./file2\x00', 0x2204002, &(0x7f0000000040)={[{@fat=@errors_continue}, {@shortname_winnt}, {@fat=@sys_immutable}, {@utf8}, {@shortname_win95}, {@rodir}, {@shortname_win95}]}, 0x2, 0x226, &(0x7f0000000600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x2)

7m49.852323049s ago: executing program 2 (id=180):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@grpid}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

7m49.376236094s ago: executing program 2 (id=181):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0)

7m49.164924591s ago: executing program 34 (id=181):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0)

6m48.93063003s ago: executing program 3 (id=841):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

6m48.764491727s ago: executing program 3 (id=843):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000240)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6b]}}, {@size={'size', 0x3d, [0x67]}}]})
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

6m48.713828006s ago: executing program 3 (id=844):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x3c}}, 0x0)

6m48.653569235s ago: executing program 3 (id=845):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@discard}, {@clear_cache}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f0000005600)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x99501e, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000001a40)={0x2020}, 0x2020)

6m48.190004354s ago: executing program 3 (id=850):
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996d7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2"], 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000040)={0x243a3, 0x100000000, 0x7ffffffffff00002, 0x1, 0xffffdfff, 0x2})

6m47.969290226s ago: executing program 3 (id=853):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0)

6m47.818024827s ago: executing program 35 (id=853):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0)

6m13.630520062s ago: executing program 5 (id=1199):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000ac1e000100"], 0xb8}}, 0x20040804)

6m13.580988299s ago: executing program 5 (id=1200):
r0 = socket$rds(0x15, 0x5, 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000000040)=ANY=[@ANYBLOB="10"], 0x2, 0x2)

6m13.580772598s ago: executing program 5 (id=1201):
syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x1c9, &(0x7f0000000540)="$eJzs289y0lAUx/HfTUIa8U/R+mfGceFKXShpWaDucO9LdGja6TStHXFTxhnrC/gEbtz5RD6FXbhzZR1CkoEQgQl/guX72XBOzr3kMuQyZ4AIwNpq6bGMjNxe8sirfdp6WvaSACzJZfz45xLA+rF/l70CAOW4eCOdSvr562Nbtpu0BQ+SoFdvJXVrY6R/uPgsPXTiuvF0LdtffJOeJPNNNXd+Na1fz60/0/OT/vlv6KZuaVM13dYdbcX1vXT+/Rm7IQAA1oNRPZsPHbC0fxgG22leifIdVZ1+7kZ5I6272m8Nzt+I6vX2u3BvUS8BQEGW6t8H8+z+tzP734n3P4D/X+ese7QbhsH78YE57w/vHn358VYTBo8Lku8HCk6ff2DHC5o8WOe9YDMePzKmImm+K/SyR0zcdM1+ikpmqe2VeC9yAmvai63hSdM9s7tCl1/ednBm2V/zC5b6MQSgBP6H41O/c9Z9cXi8exAcBCfNRrP5evvVyx0/avz94fYfwBXScZPeo9D07M99AAAAAAAAAAAAAACgBHd1b/Kg2jJWAgAAAGDRFnYXkZH0VcX/WQwAAAAAAAAAAAAAAAAAAP7pbwAAAP//QMwCTg==")
truncate(&(0x7f0000000040)='./file1\x00', 0x8800000)

6m13.5105774s ago: executing program 5 (id=1202):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x28a5291, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

6m13.449610257s ago: executing program 5 (id=1203):
umount2(0x0, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000040)={0x0, 0x21, 0x7, {0x7, 0x4, "b1634fa078"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x40010)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

6m13.341306032s ago: executing program 5 (id=1204):
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff})
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')

6m13.140863644s ago: executing program 36 (id=1204):
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff})
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')

4m21.078905979s ago: executing program 4 (id=2431):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xcc, 0xc}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10)

4m20.778800554s ago: executing program 4 (id=2433):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r1=>0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10)
shutdown(r0, 0x2)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000800)={r1, @in={{0x2, 0x4e22, @empty}}, 0x9, 0x10}, 0x90)

4m20.582667763s ago: executing program 4 (id=2434):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000001780))

4m20.581095078s ago: executing program 4 (id=2435):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000080)=[0x20, 0x9, 0x2, 0x4, 0x4, 0xffffdffa, 0x2d7b, 0x40000003, 0x5d, 0x5, 0xfffffffa, 0x8, 0x6, 0x880e, 0x5], 0x2, 0x4000007})

4m20.428649275s ago: executing program 4 (id=2438):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
symlink(&(0x7f000009df80)='./file0\x00', &(0x7f000009df40)='./file0\x00')

4m20.428471559s ago: executing program 4 (id=2439):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000004000000080000000800"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000400)=r1, 0x4)

4m4.977873423s ago: executing program 37 (id=2439):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000004000000080000000800"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000400)=r1, 0x4)

3m46.305486889s ago: executing program 6 (id=2787):
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xc, 0xff03, 0x260, 0xffffffff, 0xc0, 0x0, 0x158, 0x98, 0xffffffff, 0x1f0, 0x1f0, 0x1f0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ip={@rand_addr=0x64010101, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'macsec0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)

3m46.203923331s ago: executing program 6 (id=2789):
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)

3m46.157481829s ago: executing program 6 (id=2791):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xe00, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000f0500030000000000200001800700010063740000140002800800024000000003080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)

3m46.023253007s ago: executing program 6 (id=2792):
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$eJzs3AuYj1XXMPC99t43Y5L+TXIY9trr5p8G2yRJDgk5JEmSJDklJCZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMkjTZKE5BT2d+np/Tzv0/O+fe9X3+e93lm/69qXvdz/tf7rnjXX3Pf9v66Z73uOqtu8Xq2mRCT+FPj7P8lCiBghxDAhxA1CiEAIUTGuYtyV4/kUJP+5N2F/rUfTrnUH7Fri+eduPP/cjeefu/H8czeef+7G88/deP65G8+fsdxs+5yiN/LKvYs//8/N+Pr/P0hOuclfbyx3c6//QgrPP3fj+eduPP/cjeefu/H8czee//98Nf+TYzz/3I3nz1hudq0/f+Z1bde1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaSHEv+2vdV+MMcYYY4wxxhj76/i817oDxhhjjDHGGGOM/b8HQgoltAhEHpFXxIh8IlZcJ/KL60UBcYOIiBtFnLhJFBQ3i0KisCgiiop4UUwUF0agsIJEKEqIkiIqbhGlxK0iQZQWZURZ4UQ5kShuE+XF7aKCuENUFHeKSuIuUVlUEVVFNXG3qC7uETVETVFL3Ctqizqirqgn7hP1xf2igXhANBQPikbiIdFYPCyaiEdEU/GoaCYeE83F46KFeEK0FK1Ea9FGtP2/yn9Z9BWviH6iv0gWA8RA8aoYJAaLIWKoGCZeE8PF62KEeEOkiJFilHhTjBZviTHibTFWjBPjxTtigpgoJonJYoqYKlLFu2KaeE9MF++LGWKmmCVmizQxR8wVH4h5Yr5YID4UC8VHYpFYLJaIpSJdfCwyxDKRKT4Ry8WnIkusECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFdfCZ2iJ1il9gt9oi9Yp/4XOwXX4gD4kuRLb76L+af/af8XiBAgAQJGjTkgTwQAzEQC7GQH/JDASgAEYhAHMRBQSgIhaAQFIEiEA/xUByKAwICAUEJKAFRiEIpKAUJkABloAw4cJAIiVAebocKUAEqQkWoBJWgMlSBKlANqkF1qA41oAbUglpQG2pDXagL98F9cD80gAbQEBpCI2gEjaExNIEm0BSaQjNoBs2hObSAFtASWkJraA1toS20g3bQHtpDR+gInaATdIbOkARJ0BW6QjfoBt2hO/SAHtATekIv6A294WV4GV6BV6A/1JYDYCAMhEEwCIbAUBgKr8FweB1ehzcgBUbCKHgT3oS3YAycgbEwDsbDeKguJ8IkmAwkp0IqpMI0mAbTYTrMgJkwE2ZDGsyBuTAX5sF8mA8fwkL4CD6CxbAYlkI6pEMGLINMyITlcBayYAWshFWwGtbAalgH62EdbIRNsBG2wBbYBtvgM/gMdsJO2A27YS/shc/hc/gCvoAUyIZsOAgH4RAcgsNwGHIgB47AETgKR+EYHIPjcBxOwEk4BSfhNJyGM3AWzsE5uAAX4CK8GP9ts72lN6QIeYWWWuaReWSMjJGxMlbml/llAVlARmRExsk4WVAWlIVkIVlEFpHxMl4Wl8UlSpQkQ1lClogRQshSspRMkAmyjCwjnXQyUSbK8rK8rCAryIryTllJ3iUryyqyg6smq8nqsqOrIWvKWrKWrC3ryLqynqwn68v6soFsIBvKhrKRbCQby4dlEzkAhsCj8spkmsuR0EKOgpaylWwt28i34EnZTo6B9rKD7CifluNgLHSW7VySfFZ2lZOgm3xeToYXZA85FXrKl2Qv2Vv2kS/LvrK96yf7yxkwQA6Us2GQHCyHyKFyHtSRVyZWV74hU+RIOUq+KZfCW3KMfFuOlePkePmOnCAnyklyspwip8pU+a6cJt+T0+X7coacKWfJ2TJNzpFz5QdynpwvF8gP5UL5kVwkF8slcqlMlx/LDLlMZspP5HL5qcySK+RKuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ul5/JHXKn3CV3yz1yr9wnP5f75RfygPxSZsuv5EH5N3lIfi0Py29kjvxWHpHfyaPye3lM/iCPyx/lCXlSnpI/ydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaDyqLwqRuVTseo6lV9drwqoG1RE3aji1E2qoLpZFVKFVRFVVMWrYqq4MgqVVaRCVUKVVFF1iyqlblUJqrQqo8oqp8qpRHWbKq9uVxXUHaqiulNVUnepyqqKqqqqqbtVdXWPqqFqqlrqXlVb1VF1VT11n6qv7lcN1AOqoXpQNVIPqcbqYdVEPaKaqkdVM/WYaq4eVy3UE6qlaqVaqzaqrXpStVNPqfaqg+qonlad1DOqs+qiktSzqqt6TnVTz6vu6gXVQ72oeqqXVC/VW/VRl9Rl5VU/1V8lqwFqoHpVDVKD1RA1VA1Tr6nh6nU1Qr2hUtRINUq9qUart9QY9bYaq8ap8eodNUFNVJPUZDVFTVWp6l01Tb2npqv31Qw1U81Ss1WamqOG/FZpwT/lD/jtqvuP+e/9i/wRv777NrVdfaZ2qJ1ql9qt9qi9ap/ap/ar/eqAOqCyVbY6qA6qQ+qQOqwOqxyVo46oI+qoOqqOqWPquDquTqiT6rz6SZ1WP6sz6qw6q86rC+qCuvjb10Bo0FIrrXWg8+i8Okbn07H6Op1fX68L6Bt0RN+o4/RNuqC+WRfShXURXVTH62K6uDYatdWkQ11Cl9RRfYsupW/VCbq0LqPLaqfL6UR925/O/6P+2uq2up1up9vr9rqj7qg76U66s+6sk3SS7qq76m66m+6uu+seuofuqXvqXrqX7qP76L66r+6n++lknawH6lf1ID1YD9FD9TD9mh6uh+sReoRO0Sl6lB6lR+vReoweo8fqsXq8Hq8n6Al6kp6kp+gpOlWn6ml6mp6up+sZeoaepWfpNJ2m5+q5ep6epxfoBXqhXqgX6UV6iV6i03W6ztAZOlNn6uV6uc7SK/QKvUqv0mv0Gr1Or9Mb9Aa9SW/SW/QWnaW36+16h96hd+ldeo/eo/fpfXq/3q8P6AM6W2frg/qgPqQP6cP6sM7ROfqIPqKP6qP6mD424Lg+rk/oE/qUPqVP69P6jD6jz+lz+oK+oC/qi/qyvnzlti+QgQx0oIM8QZ4gJogJYoPYIH+QPygQFAgiQSSIC+KCgsHNQaGgcFAkKBrEB8WC4oEJMLABBWFQIigZRINbglLBrUFCUDooE5QNXFAuSAxuC8oHtwcVgjuCisGdQaXgrqByUCWoGlQL7g6qB/cENYKaQa3g3qB2UCeoG9QL7gvqB/cHDYIHgobBg0Gj4KGgcfBw0CR4JGgaPBo0Cx4LmgePBy2CJ4KWQaugddAmaPuX1vf+TOGnXD/T3ySbAWagedUMMoPNEDPUDDOvmeHmdTPCvGFSzEgzyrxpRpu3zBjzthlrxpnx5h0zwUw0k8xkM8VMNanmXTPNvGemm/fNDDPTzDKzTZqZY+aaD8w8M98sMB+aheYjs8gsNkvMUpNuPjYZZpnJNJ+Y5eZTk2VWmJVmlVlt1py/UQiz3mwwG80ms9lsMVvNNrPdfGZ2mJ1ml9lt9pi9Zp/53Ow3X5gD5kuTbb4yB83fzCHztTlsvjE55ltzxHxnjprvzTHzgzlufjQnzElzyvxkTpufzRlz1pwz580F84u5aC6Zy8Zfubm/cnlHjRrzYB6MwRiMxVjMj/mxABbACEYwDuOwIBbEQlgIi2ARjMd4LI7F8QpCwhJYAqMYxVJYChMwActgGXToMBETsTyWxwpYAStiRayElbAyVsaqWBXvxrvxHrwHa2JNvBfvxTpYB+thPayP9bEBNsCG2BAbYSNsjI2xCTbBptgUm2EzbI7NsQW2wJbYEltja2yLbbEdtsP22B47YkfshJ2wM3bGJEzCrtgVu2E37I7dsQf2wJ7YE3thL+yDfbAv9sV+2A+TMRkH4kAchINwCA7BYTgMh+NwHIEjMAVTcBSOwtE4GsfgGByL43A8voMTcCJOwsk4BadiKqbiNJyG03E6zsAZOAtnYRqm4Vyci/NwHi7ABbgQF+IiXIRLcAmmYzpmYAZmYiYux+WYhVm4ElfialyNa3Etrsf1uBE34mbcjFtxK27H7bgDd+Au3IV7cA/uw324H/fjATyA2ZiNB/EgHsJDeBgPYw7m4BE8gkfxKB7DY3gcj+MJPIGn8BSextN4Bs/gOTyHF/AXvIiX8DJ6jLFSxNrrbH57vS1gb7AxNp/9x7iILWrjbTFb3BpbyBb+dzFaaxNsaVvGlrXOlrOJ9rbfxZVtFVvVVrN32+r2Hlvjd3F9e79tYB+wDe2Dtp6977c4769xI/uQbWwft03sE7apbWWb2Ta2uX3ctrBP2Ja2lW1t29hO9hnb2XaxSfZZ29U+97s4wy6z6+0Gu9FusvvtF/acPW+P2u/tBfuL7Wf722H2NTvcvm5H2Ddsih35u3i8fcdOsBPtJDvZTrFTfxfPsrNtmp1j59oP7Dw7/3dxuv3YLrSZdpFdbJfYpb/GV3rKtJ/Y5fZTm2VX2JV2lV1t19i1dt3/7nWV3WK32m12n/3c7rA77S672+6xe3+Nr5zHAfulzbZf2SP2O3vIfm0P22M2x377a3zl/I7ZH+xx+6M9YU/aU/Yne9r+bM/Ys7+e/5Vz/8lespett4KAJCnSFFAeyksxlI9i6TrKT9dTAbqBInQjxdFNVJBupkJUmIpQUYqnYlScDCFZIgqpBJWkKN1CpehWSqDSVIbKkqNylEi3UXm6nSrQHVSR7qRKdBdVpipUlarR3VSd7qEaVJNq0b1Um+pQXapH91F9up8a0APUkB6kRvQQNaaHqQk9Qk3pUWpGj1Fzepxa0BPUklpRa2pDbelJakdPUXvqQB3paepEz1Bn6kJJ9Cx1peeoGz1P3ekF6kEvUk96iXpRb+pDL1NfeoX6UX9KpgE0kF6lQTSYhtBQGkav0XB6nUbQG5RCI2kUvUmj6S0aQ2/TWBpH4+kdmkATaRJNpik0lVLpXTqb3qXIlXu9GTSTZtFsSqM5NJc+oHk0nxbQh7SQPqJFtJiW0FJKp48pg5ZRJn1Cy+lTyqIVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttp89oB+2kXbSb9tBe2kef0376gg7Ql5RNX9FB+hsdoq/pMH1DOfQtHaHv6Ch9T8foBzpOP9IJOkmn6Cc6TT/TGTpL5+g8XaBf6CJdosvkSYQQylCFOgzCPGHeMCbMF8aG14X5w+vDAuENYSS8MYwLbwoLhjeHhcLCYZGwaBgfFguLhybE0IYUhmGJsGQYDW8JS4W3hglh6bBMWDZ0YbkwMbwtLB/eHlYI7wgrhneGlcK7wsphlfDxB6uFd4fVw3vCGmHNsFZ4b1g7rBPWDeuF94X1w/vDBuEDYcPwwbBC+FDYOHw4bBI+EjYNHw2bhY+FzcPHwxbhE2HLsFXYOmwTtg2fDNuFT4Xtww5hx/DpsFP4TNg57BImhc+GXcPn/vB4cjggHBi+Gr4aev+AWhJdGk2PfhzNiC6LZkY/iS6PfhrNiq6Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jbo1ui3pfL69w4KRTTrvA5XF5XYzL52LddS6/u94VcDe4iLvRxbmbXEF3syvkCrsirqiLd8VccWccOuvIha6EK+mi7hZXyt3qElxpV8aVdc6Vc4mujWvr2rp27inX3nVwHd3T7mn3jHvGdXFd3LOuq3vOdXPPu+7uBdfDvehedC+5Xq636+Nedn3dK66f6++SXbIb6Aa6QW6QG+KGuGFumBvuhrsRboRLcSlulBvlRrvRbowb48a6sW68G+8muAlukpvkprgpLtWlumlumpvuprsZboab5Wa5NJfm5rq5bp6b5xa4BW5hwkK3yC1yS9wSl+7SXYbLcJku0y13y12Wy3Ir3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1w2S7bHXQH3SF3yB1237gc96074r5zR9337pj7wR13P7oT7qQ75X5yp93P7ow768658+6C+8VddJfcZeddauTdyLTIe5HpkfcjMyIzI7MisyNpkTmRuZEPIvMi8yMLIh9GFkY+iiyKLI4siSyNpEc+jmRElkUyI59Elkc+jWRFVkRWRlZFVkfWRLwvtiP0JXxJH/W3+FL+Vp/gS/syvqx3vpxP9Lf58v52X8Hf4Sv6O30lf5ev7Kv4qv4J39K38q19G9/WP+nb+ad8e9/Bd/RP+07+Gd/Zd/FJ/lnf1T/nu/nnfXf/gu/hX/Q9/Uu+l+/t+/iXfV//iu/n+/tkP8AP9K/6QX6wH+KH+mH+NT/cv+5H+Dd8ih/pR/k3/Wj/lh/j3/Zj/Tg/3r/jJ/iJfpKf7Kf4qT7Vv+un+ff8dP++n+Fn+ll+tk/zc/xc/4Gf5+f7Bf5Dv9B/5Bf5xX6JX+rT/cc+wy/zmf4Tv9x/6rP8Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Wd+h9/pd/ndfo/f6/f5z/1+/4U/4L/02f4rf9D/zR/yX/vD/huf47/1R/x3/qj/3h/zP/jj/kd/wp/0p/xP/rT/2Z/xZ/05f95f8L/4i/6Sv8y/s8YYY4wx9n9E/cHxAf/i/+Rv64qBQojrdxbN+eeamwv9fT9YxneKCCGe7d/z0X9btWsnJyf/9tosJYKSi4UQkav5ecTVeIXoKJ4RSaKDKP8v+xsse1+gP6gfvVOI2KuVfxUr/rn+7f9B/SefHp9RKTwX95/UXyxEQsmrOfnE1fhq/Qr/Qf3C7f6g/3xfpwrR/h9y8our8dX6ieIp8ZxI+nevZIwxxhhjjDHG/m6wrNr9j56frzyfx+urOXnF1fiPns8ZY4wxxhhjjDF27b3Qu0+XJ5OSOnTnzZ/Y1Pjv0QZvePOXba71TybGGGOMMcbYX+3qTf+17oQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/n/8ObFrfY6MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYtfa/AgAA///mJjhh")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3m45.077164788s ago: executing program 6 (id=2804):
socket$inet6(0xa, 0x800000000000002, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x600100)
syslog(0x2, &(0x7f0000002480)=""/13, 0xd)
syslog(0x2, &(0x7f0000002480)=""/13, 0xd)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)

3m44.086508532s ago: executing program 6 (id=2814):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f00000001c0)=@can={{0x0, 0x0, 0x0, 0x1}, 0x7e, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0)

3m43.909428178s ago: executing program 38 (id=2814):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f00000001c0)=@can={{0x0, 0x0, 0x0, 0x1}, 0x7e, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0)

2m37.149196694s ago: executing program 8 (id=3662):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000700), 0x4)

2m37.059135164s ago: executing program 8 (id=3663):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x1, 0x3, 0x3008, 0x0, 0xd, 0x1, 0x2, 0x6}})

2m36.860405743s ago: executing program 8 (id=3665):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

2m36.750899754s ago: executing program 8 (id=3669):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, 0x0, 0x0)

2m36.532617059s ago: executing program 8 (id=3672):
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

2m36.050209413s ago: executing program 8 (id=3678):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1e0)
lsm_get_self_attr(0x65, 0x0, &(0x7f00000002c0)=0x3000, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x7f, 0x0, &(0x7f0000001180))
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0], 0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='\xcfD\xc4\xbf\x95@q\xf0\x0f \x02\xa8\xff\xa7\xfdi\xa7\xd6j\'$\x1d\x14\xb7!\x8b\x84=r \xe34\xdb\x84\x00\xe7\xc9L\a\xfds1n@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\r\x7f;\xf6J18G\x83\xe9]\xf4\x96\xbc\x9e\xfcG\xb5\x1b', 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1d, 0x21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x40)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f00000002c0)={0x0, 0x8, 0x1})
socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @remote, 0x200}, 0x1c)

2m35.876854657s ago: executing program 39 (id=3678):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
write$apparmor_exec(0xffffffffffffffff, 0x0, 0x1e0)
lsm_get_self_attr(0x65, 0x0, &(0x7f00000002c0)=0x3000, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x7f, 0x0, &(0x7f0000001180))
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0], 0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='\xcfD\xc4\xbf\x95@q\xf0\x0f \x02\xa8\xff\xa7\xfdi\xa7\xd6j\'$\x1d\x14\xb7!\x8b\x84=r \xe34\xdb\x84\x00\xe7\xc9L\a\xfds1n@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\r\x7f;\xf6J18G\x83\xe9]\xf4\x96\xbc\x9e\xfcG\xb5\x1b', 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1d, 0x21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x40)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f00000002c0)={0x0, 0x8, 0x1})
socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @remote, 0x200}, 0x1c)

1.354686225s ago: executing program 9 (id=5165):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipmr_delroute={0x24, 0x19, 0x1, 0x70bd2b, 0x25dfdbff, {0x80, 0x20, 0x90, 0x0, 0x0, 0x4, 0x0, 0x5, 0x5100}, [@RTA_DST={0x8, 0x1, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x4000004)

1.293184215s ago: executing program 9 (id=5166):
r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0xff, "194c46e4df5018e7bb4b7040a4b5a3b87d132fe11ea6cad6cc200b36fd2d85c7", 0x5, 0x2, 0x2, 0x2, 0x10, 0x2, 0xc00, 0x10001})

1.215594657s ago: executing program 9 (id=5167):
file_getattr(0xffffffffffffff9c, 0x0, 0x0, 0x2f, 0x1000)

1.215385495s ago: executing program 9 (id=5168):
r0 = landlock_create_ruleset(&(0x7f0000000100)={0x81, 0x0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x1)
r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x3564}, 0x18, 0x0)
landlock_restrict_self(r1, 0x8)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0xc5, 0x3}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e)
connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e)

959.009827ms ago: executing program 0 (id=5171):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000680)=[{&(0x7f00000003c0)="b1f3e591937d8b12860eb438e350bae82eecc402814086fac94445a7f6cad18110c54a443a064d7d0b7b38358fe5ee323ca628d73d627cf38ef6faddbdbde6c1729a19da73e58afd22a865497aadbb9e9342d6142092d58076f033c0c0168cbbc3fad3cf3e2de62c16cfc6ea707a4f56ad7dfeaf642c96d9490853cea955dc55dd7f11946b66e6d324e75245a653a1c3b7937fcabf059f6d3a3d6a2408769104173218e44202b11b8a79470c", 0xac}, {&(0x7f0000003380)="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", 0xf54}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040))
write$binfmt_script(r1, &(0x7f0000020240), 0x10010)

865.40016ms ago: executing program 0 (id=5172):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

844.170963ms ago: executing program 0 (id=5174):
r0 = socket$kcm(0x10, 0x2, 0x4)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000)

710.959041ms ago: executing program 0 (id=5175):
r0 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0)

560.724868ms ago: executing program 7 (id=5179):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x1, 0x71c, 0x4e22, 0x6, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffefe}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}]}, 0x148}}, 0x844)

560.340385ms ago: executing program 7 (id=5180):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000002c0)={0x1, 0x7ff, 0x0, 0x10000000, 0x2, "fbe20c8a515d59d2476aa3068d94a8009b1b10", 0xde37, 0x4005})
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x11)
read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0xfffffe39)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b)

477.714005ms ago: executing program 7 (id=5181):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20)

477.325963ms ago: executing program 0 (id=5182):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4f1, &(0x7f00000005c0)="$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")
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x4)
fcntl$setstatus(r0, 0x4, 0x6000)
r1 = creat(&(0x7f0000000e40)='./file1\x00', 0x18)
write$FUSE_NOTIFY_RESEND(r1, &(0x7f00000002c0)={0x14}, 0x14)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x8, 0x0, 0xffffffffffffffff}}, 0x10)
io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000}])

348.370858ms ago: executing program 7 (id=5183):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, '[M', 0x3a, '', 0x3a, './file0', 0x3a, [0x4f, 0x50]}, 0x2b)

234.990311ms ago: executing program 9 (id=5184):
mq_unlink(&(0x7f0000000040)='\x7f+\x04\x94NjN|\xe6\xa5\xe32\xde\xbb\x1a\xff\xa8\xdeJ\xd4gy\nZeW\x83\xf80\xfa\xb6\x83sP\xb7\xd7\x887\f\xb81\xa8\x92\ne\xfd\x89\x88J\x9b\xedpq\xf2\xb4\x84\xc8\x03\xf7\x14sawo\x8b\xb3J\xaa\x850.W\xd3\xe2\xf5\xf1\xf8\xc2~V\\\xe9\xa8[\x9f\x8d*\xe1\xa3\xe5*\xd1\xf2\xb8\'R\xaaW\x03V>-\x01\xc9\x1d75\xba\x03r\x99\x82\x13\v\xc9Z\xe3\xfaL\x05\xf8\x8b\x10\x06\xc8\v1DW\xc7n\x1f\xe1\xb4\xd0\x11\xf3\x14\xbe\xf5\xc0\b\x1f\xb8\v\xdc5d5\x95\x99N^\x8f\xd2\xf4b~c\x0f\xbe,\f\xa9\x06\x92R\xe1w\"\xd9\xa0^|\x90\v\xdfe\x03\xcf\n\xcb>\xd0\x04D-\x8d\x7fs\xdcq\xe5\xc7\xbeqR\x8e\xb2o\xf8\x15\xbd\xdcK\x8d\b\b}\x1c\x9e\x95f\xf1\xc1\xff\xe3\xac\xfe0\x1a\xcd\xfc\b}\x96p\xb8C\xa9\xda\xfc\xf9\x84\xff5\xdcB\b\xe5\x03<\xc4nc\xc9\xe6\xaa\r\x8b\xca\x1f\x82\xa0\xdd`t\xbe\x91\xea:\xec\xdd\xed[\x9d\xa1\xff\x8f\x85b\xa3\xbb\xa6\xc4\xbb\x92\xc0\xa3\xe1\xed@\xd6a\x05\xb9\x13O\x84\x0ea,j\xce\xaew\xcf\xa4E\xe4a\xf3w\xe7\xf5dG\x8d\x15I\xfc\xdak\xb0c!\x1a\t$\x8a\xbe\x14\x0eK\xa2\x94,:\xa6\xd6\xc017uZ\xba\x0f+\xc4X,~\x8fW\x84\xe0T\xfdF\x05Q\f\xf0\t\x9a\xa4\x1e`\x9d\bv\xc3T\xe8`\t\xa0\x93]J\xe0j2\x93I\xad\x1d\x00\xb1\xe5\x17\xb8\xc3%P\x89I=\x89d\x17\fM\xba\a\xea\x04\xe3hQS\xe0\xd0\xeb\xfa\xaa\x93z!\xf6\xd0y\xb2')
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380"], 0x138}, 0x1, 0x0, 0x0, 0x20000811}, 0x400c050)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

234.704183ms ago: executing program 7 (id=5185):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
capset(&(0x7f0000000580)={0x20080522}, &(0x7f0000000040)={0x200000, 0x4200003, 0x9, 0x0, 0x20000003, 0x800})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xfb, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

234.498974ms ago: executing program 7 (id=5186):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x2, 0x1, 0x1000b0a7}, 0x1c)
ppoll(&(0x7f0000000040)=[{r0, 0x1380}], 0x1, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0), 0x400000000000181, 0x20004050)

146.678232ms ago: executing program 9 (id=5187):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20)
connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

0s ago: executing program 0 (id=5188):
clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x0, 0x10000000000f48, 0x8, 0x25})

kernel console output (not intermixed with test programs):

ce59 code=0x7ffc0000
[  367.465869][   T33] audit: type=1326 audit(1778873432.673:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.8.3345" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203139ce59 code=0x7ffc0000
[  367.497871][   T33] audit: type=1326 audit(1778873432.673:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.8.3345" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203139ce59 code=0x7ffc0000
[  367.504667][   T33] audit: type=1326 audit(1778873432.673:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.8.3345" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f203139ce59 code=0x7ffc0000
[  367.521684][   T33] audit: type=1326 audit(1778873432.673:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.8.3345" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f203139ce59 code=0x7ffc0000
[  367.529838][T14571] netlink: 'syz.7.3350': attribute type 1 has an invalid length.
[  367.558176][T14571] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3350'.
[  367.677333][T14580] loop8: detected capacity change from 0 to 2048
[  367.713408][T14580] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  367.719935][T14580] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #12: block 2: comm syz.8.3354: lblock 0 mapped to illegal pblock 2 (length 1)
[  367.774832][T12664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.014531][T14605] sch_tbf: burst 1023 is lower than device lo mtu (65550) !
[  368.028965][T12297] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  368.178619][T12297] usb 10-1: Using ep0 maxpacket: 16
[  368.183428][T12297] usb 10-1: config 9 has an invalid interface number: 226 but max is 0
[  368.186769][T12297] usb 10-1: config 9 has no interface number 0
[  368.189668][T12297] usb 10-1: config 9 interface 226 has no altsetting 0
[  368.195235][T12297] usb 10-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=dc.fd
[  368.199118][T12297] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.202272][T12297] usb 10-1: Product: syz
[  368.204107][T12297] usb 10-1: Manufacturer: syz
[  368.206137][T12297] usb 10-1: SerialNumber: syz
[  368.608423][T12297] mdc800 10-1:9.226: probe fails -> wrong Interface
[  368.615877][T12297] usb 10-1: USB disconnect, device number 7
[  369.144370][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3374'.
[  369.213701][T14636] netlink: 'syz.9.3375': attribute type 2 has an invalid length.
[  369.418158][ T2213] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  369.529812][T12307] usb 10-1: new full-speed USB device number 8 using dummy_hcd
[  369.586167][ T2213] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  369.592278][ T2213] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  369.595751][ T2213] usb 9-1: Product: syz
[  369.597535][ T2213] usb 9-1: Manufacturer: syz
[  369.602423][ T2213] usb 9-1: SerialNumber: syz
[  369.606751][ T2213] usb 9-1: config 0 descriptor??
[  369.620319][ T2213] ch341 9-1:0.0: ch341-uart converter detected
[  369.703083][T12307] usb 10-1: config 8 has an invalid interface number: 177 but max is 0
[  369.706548][T12307] usb 10-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  369.712053][T12307] usb 10-1: config 8 has no interface number 0
[  369.714593][T12307] usb 10-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  369.722549][T12307] usb 10-1: config 8 interface 177 has no altsetting 0
[  369.726058][T12307] usb 10-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  369.730973][T12307] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.747654][T12307] ir_toy 10-1:8.177: required endpoints not found
[  369.800542][T14662] cgroup: noprefix used incorrectly
[  369.874312][T14666] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3391'.
[  369.881679][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3391'.
[  369.950637][T12307] usb 10-1: USB disconnect, device number 8
[  369.974816][T14670] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3393'.
[  370.523653][   T33] audit: type=1326 audit(1778873435.793:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14677 comm="syz.9.3397" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd93879ce59 code=0x7ffc0000
[  370.646327][ T2213] usb 9-1: ch341-uart converter now attached to ttyUSB0
[  370.864988][T12303] usb 9-1: USB disconnect, device number 6
[  370.910625][T12303] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  370.916682][T12303] ch341 9-1:0.0: device disconnected
[  371.773284][T14695] loop8: detected capacity change from 0 to 32768
[  371.783067][T14695] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3403 (14695)
[  371.802499][T14695] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  371.817234][T14695] BTRFS info (device loop8): using sha256 checksum algorithm
[  371.916589][T14695] BTRFS info (device loop8): enabling ssd optimizations
[  371.921102][T14695] BTRFS info (device loop8): turning on async discard
[  371.926925][T14695] BTRFS info (device loop8): enabling free space tree
[  372.020498][T12664] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  372.256038][T14730] syz_tun: entered allmulticast mode
[  372.882863][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3430'.
[  372.937408][T14770] loop8: detected capacity change from 0 to 8
[  372.948370][T14770] SQUASHFS error: zlib decompression failed, data probably corrupt
[  372.954116][T14770] SQUASHFS error: Failed to read block 0x9b: -5
[  372.956114][T14770] SQUASHFS error: Unable to read metadata cache entry [99]
[  372.962038][T14770] SQUASHFS error: Unable to read inode 0x104
[  373.479956][T14786] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3438'.
[  373.609516][T14792] random: crng reseeded on system resumption
[  373.687598][T14796] loop9: detected capacity change from 0 to 512
[  373.691064][T14796] EXT4-fs: Ignoring removed nobh option
[  373.695293][T14796] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  373.731800][T14796] EXT4-fs (loop9): 1 truncate cleaned up
[  373.736311][T14796] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  373.787328][T13253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.128389][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3455'.
[  374.355894][T14804] loop8: detected capacity change from 0 to 131072
[  374.528489][T14825] loop9: detected capacity change from 0 to 32768
[  374.547559][T14825] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3448 (14825)
[  374.589609][T14804] XFS (loop8): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  374.640432][T14804] XFS (loop8): Starting recovery (logdev: internal)
[  374.676234][T14804] XFS (loop8): Ending recovery (logdev: internal)
[  374.764919][T12664] XFS (loop8): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  374.896917][T14825] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  374.900751][T14825] BTRFS info (device loop9): using sha256 checksum algorithm
[  375.096799][T14825] BTRFS info (device loop9): rebuilding free space tree
[  375.114290][T14825] BTRFS info (device loop9): disabling free space tree
[  375.116921][T14825] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  375.121549][T14825] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  375.130122][T14825] BTRFS info (device loop9): setting nodatasum
[  375.132574][T14825] BTRFS info (device loop9): setting nodatacow
[  375.134914][T14825] BTRFS info (device loop9): turning off barriers
[  375.137336][T14825] BTRFS info (device loop9): turning on sync discard
[  375.140010][T14825] BTRFS info (device loop9): force clearing of disk cache
[  376.077702][T14859] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  376.183918][T13253] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  376.664124][T14886] loop8: detected capacity change from 0 to 128
[  376.724249][T14886] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  376.731004][T14890] vxcan1: left promiscuous mode
[  376.733497][T14886] ext4 filesystem being mounted at /226/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  376.733712][T14890] veth0_to_bond: left allmulticast mode
[  376.759659][T14886] syz.8.3472 (pid 14886) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  376.760202][T14890] ..0: left allmulticast mode
[  376.766609][T14890] hsr_slave_0: left allmulticast mode
[  376.770586][T14890] hsr_slave_1: left allmulticast mode
[  376.802067][T12664] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  376.968768][ T5939] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  376.976707][ T5939] Bluetooth: hci1: Injecting HCI hardware error event
[  376.981727][ T5939] Bluetooth: hci1: hardware error 0x00
[  377.382930][T14897] loop9: detected capacity change from 0 to 4096
[  377.388952][T14897] nilfs2: Unknown parameter '5'
[  377.711693][ T5943] Bluetooth: hci1: unexpected event for opcode 0x0c1a
[  378.109983][T14910] tc_dump_action: action bad kind
[  378.298269][T14914] No such timeout policy "syz1"
[  378.591712][T14918] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3484'.
[  378.595436][T14918] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3484'.
[  378.706236][T14924] netlink: 133536 bytes leftover after parsing attributes in process `syz.9.3486'.
[  379.059717][ T5939] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  380.004417][   T33] kauditd_printk_skb: 23 callbacks suppressed
[  380.004438][   T33] audit: type=1804 audit(1778873445.273:850): pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3497" name="file0" dev="tmpfs" ino=5066 res=1 errno=0
[  380.134687][T14955] loop8: detected capacity change from 0 to 24
[  380.158478][T14955] MTD: Attempt to mount non-MTD device "/dev/loop8"
[  380.195334][T14955] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  380.535077][T13253] syz_tun (unregistering): left allmulticast mode
[  380.841107][ T6163] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.854913][T14990] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3520'.
[  380.859561][T14990] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3520'.
[  380.862705][T14990] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3520'.
[  380.979546][ T6163] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.002248][ T5943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  381.028072][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  381.033207][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  381.038869][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  381.041850][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  381.107435][T15001] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3524'.
[  381.133997][ T6163] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.245977][ T6163] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.383987][T14994] chnl_net:caif_netlink_parms(): no params data found
[  381.520401][T14994] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.522997][T14994] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.525627][T14994] bridge_slave_0: entered allmulticast mode
[  381.529558][T12313] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  381.532979][T14994] bridge_slave_0: entered promiscuous mode
[  381.537589][ T6163] bridge_slave_1: left allmulticast mode
[  381.540601][ T6163] bridge_slave_1: left promiscuous mode
[  381.543054][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.554052][ T6163] bridge_slave_0: left allmulticast mode
[  381.556274][ T6163] bridge_slave_0: left promiscuous mode
[  381.559678][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.677896][T12313] usb 9-1: Using ep0 maxpacket: 16
[  381.694387][T12313] usb 9-1: config 7 has an invalid interface number: 230 but max is 0
[  381.711265][T12313] usb 9-1: config 7 has no interface number 0
[  381.714192][T12313] usb 9-1: config 7 interface 230 has no altsetting 0
[  381.812349][T12313] usb 9-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=81.f9
[  381.815419][T12313] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.832073][T12313] usb 9-1: Product: syz
[  381.834383][T12313] usb 9-1: Manufacturer: syz
[  381.836214][T12313] usb 9-1: SerialNumber: syz
[  382.141977][T12313] mdc800 9-1:7.230: probe fails -> wrong Interface
[  382.153189][T12313] usb 9-1: USB disconnect, device number 7
[  382.284860][ T6163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  382.310647][ T6163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  382.314406][ T6163] bond0 (unregistering): Released all slaves
[  382.322827][T14994] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.325617][T14994] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.333083][T14994] bridge_slave_1: entered allmulticast mode
[  382.336936][T14994] bridge_slave_1: entered promiscuous mode
[  382.459991][T14994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  382.466396][T14994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  382.498016][T14994] team0: Port device team_slave_0 added
[  382.503360][T14994] team0: Port device team_slave_1 added
[  382.636380][T14994] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.652723][T14994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.654576][T15033] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3535'.
[  382.666647][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3535'.
[  382.681312][T14994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  382.687286][T14994] batman_adv: batadv0: Adding interface: batadv_slave_1
[  382.697905][T14994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.724466][T14994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.955345][T14994] hsr_slave_0: entered promiscuous mode
[  382.964689][T14994] hsr_slave_1: entered promiscuous mode
[  382.971791][T14994] debugfs: 'hsr0' already exists in 'hsr'
[  382.974710][T14994] Cannot create hsr debugfs directory
[  383.045921][ T6163] hsr_slave_0: left promiscuous mode
[  383.051804][ T6163] hsr_slave_1: left promiscuous mode
[  383.054609][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  383.092527][ T6163] batman_adv: batadv0: Removing interface: batadv_slave_0
[  383.107340][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  383.116307][ T6163] batman_adv: batadv0: Removing interface: batadv_slave_1
[  383.129474][ T5939] Bluetooth: hci0: command tx timeout
[  383.153540][ T6163] veth1_macvtap: left promiscuous mode
[  383.155764][ T6163] veth0_macvtap: left promiscuous mode
[  383.160046][ T6163] veth1_vlan: left promiscuous mode
[  383.162713][ T6163] veth0_vlan: left promiscuous mode
[  383.333710][    C1] hpet: Lost 1 RTC interrupts
[  383.485728][ T6163] team0 (unregistering): Port device team_slave_1 removed
[  383.497386][ T6163] team0 (unregistering): Port device team_slave_0 removed
[  384.011809][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  384.014345][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  384.044146][T15079] loop8: detected capacity change from 0 to 256
[  384.061777][T15079] exfat: Deprecated parameter 'namecase'
[  384.063852][T15079] exfat: Deprecated parameter 'namecase'
[  384.076407][T15081] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3552'.
[  384.122315][T15079] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  384.179308][    C1] hpet: Lost 1 RTC interrupts
[  384.239787][    C1] hpet: Lost 1 RTC interrupts
[  384.507216][    C1] hpet: Lost 1 RTC interrupts
[  384.790460][T14994] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  384.803694][T14994] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  384.820328][T14994] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  384.830308][T14994] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  384.942905][T14994] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.961505][T14994] 8021q: adding VLAN 0 to HW filter on device team0
[  384.981317][ T4659] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.983946][ T4659] bridge0: port 1(bridge_slave_0) entered forwarding state
[  385.002432][ T4659] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.005517][ T4659] bridge0: port 2(bridge_slave_1) entered forwarding state
[  385.092690][T15116] loop8: detected capacity change from 0 to 32768
[  385.111200][T15116] ERROR: (device loop8): xtSearch: xt_getpage: xtree page corrupt
[  385.111200][T15116] 
[  385.114778][T15116] xtLookup: xtSearch returned -5
[  385.116507][T15116] read_mapping_page failed!
[  385.126680][T15116] jfs_mount: diMount failed w/rc = -5
[  385.140713][T14994] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.145404][T15116] Mount JFS Failure: -5
[  385.147137][T15116] jfs_mount failed w/return code = -5
[  385.208048][ T5939] Bluetooth: hci0: command tx timeout
[  385.210023][ T5939] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  385.217334][ T5939] Bluetooth: hci3: Injecting HCI hardware error event
[  385.226124][ T5939] Bluetooth: hci3: hardware error 0x00
[  385.387057][T14994] veth0_vlan: entered promiscuous mode
[  385.395314][T14994] veth1_vlan: entered promiscuous mode
[  385.432627][T14994] veth0_macvtap: entered promiscuous mode
[  385.443371][T14994] veth1_macvtap: entered promiscuous mode
[  385.464710][T14994] batman_adv: batadv0: Interface activated: batadv_slave_0
[  385.479230][T14994] batman_adv: batadv0: Interface activated: batadv_slave_1
[  385.497337][ T5927] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.503704][ T5927] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.530183][ T5927] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.551867][ T5927] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.666076][ T4179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  385.670691][ T4179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  385.691632][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  385.694262][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  385.848887][ T2213] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  385.953494][T15155] tmpfs: Bad value for 'mpol'
[  385.983867][T15157] loop9: detected capacity change from 0 to 128
[  386.001320][T15157] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  386.006511][T15157] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  386.022161][ T2213] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  386.026402][ T2213] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64
[  386.034288][ T2213] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  386.038554][ T2213] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.046514][T15157] EXT4-fs (loop9): shut down requested (1)
[  386.047532][ T2213] usb 9-1: config 0 descriptor??
[  386.054185][T15140] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  386.061124][ T2213] uvcvideo 9-1:0.0: Found UVC 0.00 device <unnamed> (10c4:ea90)
[  386.064594][ T2213] uvcvideo 9-1:0.0: No valid video chain found.
[  386.064733][T15157] fscrypt (loop9, inode 12): Error -5 getting encryption context
[  386.118933][T14994] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  386.277379][ T2213] usb 9-1: USB disconnect, device number 8
[  387.287982][ T5943] Bluetooth: hci0: command tx timeout
[  387.290232][ T5939] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  387.378064][T12297] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  387.528281][T12297] usb 9-1: Using ep0 maxpacket: 8
[  387.534519][T12297] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  387.542970][T12297] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  387.546984][T12297] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  387.564823][T12297] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  387.571767][T12297] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.578110][T12297] usb 9-1: Product: syz
[  387.581005][T12297] usb 9-1: Manufacturer: syz
[  387.585289][T12297] usb 9-1: SerialNumber: syz
[  387.824249][T12297] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found
[  387.828765][T12297] cdc_ncm 9-1:1.0: bind() failure
[  387.833333][T12297] usbtest 9-1:1.0: Linux user mode ISO test driver
[  387.836594][T12297] usbtest 9-1:1.0: high-speed {control iso-in} tests (+alt)
[  387.844678][T12297] usb 9-1: USB disconnect, device number 9
[  388.397062][T15217] loop8: detected capacity change from 0 to 512
[  388.436082][T15217] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  388.450978][T15217] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.3599: attempt to clear invalid blocks 1024 len 1
[  388.455353][T15217] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  388.455648][T15217] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3599: invalid indirect mapped block 1819239214 (level 0)
[  388.459127][    C1] EXT4-fs (loop8): error count since last fsck: 2
[  388.459139][    C1] EXT4-fs (loop8): initial error at time 1778873453: ext4_mb_generate_buddy:1315
[  388.459151][    C1] EXT4-fs (loop8): last error at time 1778873453: ext4_clear_blocks:876: inode 13
[  388.474521][T15217] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  388.474938][T15217] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3599: invalid indirect mapped block 33554432 (level 2)
[  388.484341][T15217] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  388.484962][T15217] EXT4-fs (loop8): 1 truncate cleaned up
[  388.492132][T15217] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  388.536808][T12664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  389.367916][ T5939] Bluetooth: hci0: command tx timeout
[  389.490678][T12307] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  389.681677][T12307] usb 9-1: unable to get BOS descriptor or descriptor too short
[  389.685549][T12307] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  389.690660][T12307] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  389.695142][T12307] usb 9-1: config 1 has no interface number 0
[  389.697696][T12307] usb 9-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x62, changing to 0x2
[  389.707172][T12307] usb 9-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40
[  389.710902][T12307] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.714313][T12307] usb 9-1: Product: syz
[  389.716191][T12307] usb 9-1: Manufacturer: syz
[  389.718131][T12307] usb 9-1: SerialNumber: syz
[  390.090017][T15253] xt_hashlimit: max too large, truncated to 1048576
[  390.254137][T12298] IPVS: starting estimator thread 0...
[  390.346010][T12307] snd-usb-us122l 9-1:1.1: probe with driver snd-usb-us122l failed with error -22
[  390.358616][T15262] IPVS: using max 43 ests per chain, 103200 per kthread
[  390.370207][T12307] usb 9-1: USB disconnect, device number 10
[  390.502108][T15273] loop9: detected capacity change from 0 to 2048
[  390.533490][T15273] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  390.543451][   T33] audit: type=1800 audit(1778873455.813:851): pid=15273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3624" name="bus" dev="loop9" ino=18 res=0 errno=0
[  390.554486][T15273] Invalid ELF header magic: != ELF
[  390.587476][T14994] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.615313][    C1] hpet: Lost 1 RTC interrupts
[  390.948019][ T2213] usb 10-1: new full-speed USB device number 9 using dummy_hcd
[  391.032811][T15288] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3630'.
[  391.036393][T15288] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3630'.
[  391.042056][T15288] netlink: 'syz.8.3630': attribute type 19 has an invalid length.
[  391.044822][T15288] netlink: 'syz.8.3630': attribute type 20 has an invalid length.
[  391.120726][ T2213] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  391.125720][ T2213] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  391.131527][ T2213] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  391.136570][ T2213] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.152732][ T2213] usb 10-1: config 0 descriptor??
[  391.239051][T15293] fuse: root generation should be zero
[  391.571736][ T2213] hid_parser_main: 1671 callbacks suppressed
[  391.571758][ T2213] elan 0003:04F3:0755.000B: unknown main item tag 0x0
[  391.576968][ T2213] elan 0003:04F3:0755.000B: item fetching failed at offset 1/5
[  391.581018][ T2213] elan 0003:04F3:0755.000B: Hid Parse failed
[  391.584304][ T2213] elan 0003:04F3:0755.000B: probe with driver elan failed with error -22
[  391.781725][ T2213] usb 10-1: USB disconnect, device number 9
[  392.008142][T15296] netlink: 'syz.8.3633': attribute type 10 has an invalid length.
[  392.039577][T15296] team0 (unregistering): Port device team_slave_0 removed
[  392.052827][T15296] team0 (unregistering): Port device team_slave_1 removed
[  392.146382][T15298] comedi comedi4: bad chanlist[0]=0x04000020 chan=32 range length=1
[  393.310833][T15318] loop8: detected capacity change from 0 to 512
[  393.327176][T15318] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  393.332740][T15318] EXT4-fs (loop8): 1 truncate cleaned up
[  393.336418][T15318] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  393.391809][T12664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.680422][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3650'.
[  393.683974][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3650'.
[  395.733135][T15428] vcan0: tx address claim with different name
[  395.847343][T15432] loop8: detected capacity change from 0 to 512
[  395.863678][T15432] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  395.908883][T15432] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #17: comm syz.8.3669: inode has both inline data and extents flags
[  395.913486][T15438] loop9: detected capacity change from 0 to 512
[  395.917216][T15438] EXT4-fs: Ignoring removed i_version option
[  395.917971][T15432] loop8: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  395.921757][T15432] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3669: couldn't read orphan inode 17 (err -117)
[  395.928488][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  395.928532][    C0] EXT4-fs (loop8): initial error at time 1778873461: ext4_orphan_get:1391: inode 17
[  395.928549][    C0] EXT4-fs (loop8): last error at time 1778873461: ext4_orphan_get:1391: inode 17
[  395.942764][T15438] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  395.968421][T15432] loop8: lost filesystem error report for type 5 error -117
[  395.969529][T15432] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  396.018285][T12664] EXT4-fs error (device loop8): ext4_readdir:265: inode #11: block 4: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=65, rec_len=12, size=4096 fake=1
[  396.063162][T12664] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 65: padding at end of block bitmap is not set
[  396.077490][T12664] Quota error (device loop8): write_blk: dquota write failed
[  396.085375][T12664] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  396.098307][T12664] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz-executor: Failed to acquire dquot type 0
[  396.139023][T14994] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.422177][T15450] dvmrp1: entered allmulticast mode
[  396.423111][T12664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.508821][T15452] loop9: detected capacity change from 0 to 256
[  396.517341][T15452] exfat: Deprecated parameter 'namecase'
[  396.532258][T15452] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[  396.539410][T15452] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  396.854280][ T5943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  396.869042][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  396.880998][ T5943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  396.892671][ T5943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  396.904641][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  397.099187][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3685'.
[  397.170113][T15462] chnl_net:caif_netlink_parms(): no params data found
[  397.336783][T15462] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.339934][T15462] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.342881][T15462] bridge_slave_0: entered allmulticast mode
[  397.347366][T15462] bridge_slave_0: entered promiscuous mode
[  397.353159][T15462] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.356230][T15462] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.360726][T15462] bridge_slave_1: entered allmulticast mode
[  397.365232][T15462] bridge_slave_1: entered promiscuous mode
[  397.401969][T15462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.411000][T15462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.599984][T15462] team0: Port device team_slave_0 added
[  397.604748][T15462] team0: Port device team_slave_1 added
[  397.676572][T15462] batman_adv: batadv0: Adding interface: batadv_slave_0
[  397.679508][T15462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  397.692029][T15462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  397.698965][T15462] batman_adv: batadv0: Adding interface: batadv_slave_1
[  397.701881][T15462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  397.714180][T15462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  397.802398][T15462] hsr_slave_0: entered promiscuous mode
[  397.810959][T15462] hsr_slave_1: entered promiscuous mode
[  397.814041][T15462] debugfs: 'hsr0' already exists in 'hsr'
[  397.819140][T15462] Cannot create hsr debugfs directory
[  398.620230][    C1] hpet: Lost 1 RTC interrupts
[  398.970380][ T5939] Bluetooth: hci2: command tx timeout
[  399.825271][T15462] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  399.836552][T15462] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  399.846976][T15462] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  399.866286][T15462] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  399.944647][T15530] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check.
[  400.077606][T15462] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.121533][T15462] 8021q: adding VLAN 0 to HW filter on device team0
[  400.166122][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.169135][ T4179] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.193106][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.195979][ T4179] bridge0: port 2(bridge_slave_1) entered forwarding state
[  400.207510][T15518] loop9: detected capacity change from 0 to 32768
[  400.563489][T15462] 8021q: adding VLAN 0 to HW filter on device batadv0
[  400.663935][T15462] veth0_vlan: entered promiscuous mode
[  400.674233][T15560] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.3705'.
[  400.675854][T15462] veth1_vlan: entered promiscuous mode
[  400.737547][T15462] veth0_macvtap: entered promiscuous mode
[  400.753637][T15462] veth1_macvtap: entered promiscuous mode
[  400.776965][T15462] batman_adv: batadv0: Interface activated: batadv_slave_0
[  400.787606][T15462] batman_adv: batadv0: Interface activated: batadv_slave_1
[  400.807215][ T6163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  400.819053][ T6163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  400.826256][ T6163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  400.838542][ T6163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  400.930230][ T4462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.933306][ T4462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  400.990608][T12298] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  401.008034][T15404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.012191][T15404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.048398][ T5939] Bluetooth: hci2: command tx timeout
[  401.124986][T15582] loop0: detected capacity change from 0 to 128
[  401.160150][T12298] usb 10-1: config 0 has an invalid interface number: 153 but max is 0
[  401.163260][T12298] usb 10-1: config 0 has no interface number 0
[  401.165277][T12298] usb 10-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30
[  401.178298][T12298] usb 10-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  401.194505][T12298] usb 10-1: config 0 interface 153 has no altsetting 0
[  401.200602][T12298] usb 10-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34
[  401.203267][T12298] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.206740][T12298] usb 10-1: Product: syz
[  401.209733][T12298] usb 10-1: Manufacturer: syz
[  401.216911][T12298] usb 10-1: SerialNumber: syz
[  401.223424][T12298] usb 10-1: config 0 descriptor??
[  401.239932][T12298] hub 10-1:0.153: bad descriptor, ignoring hub
[  402.197483][T12298] hub 10-1:0.153: probe with driver hub failed with error -5
[  402.205100][T12298] sierra 10-1:0.153: Sierra USB modem converter detected
[  402.230083][T12298] usb 10-1: USB disconnect, device number 10
[  402.232679][T12298] sierra 10-1:0.153: device disconnected
[  402.548857][T15604] loop9: detected capacity change from 0 to 512
[  402.584882][T15604] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  402.604860][T15604] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c119, mo2=0002]
[  402.615296][T15604] System zones: 1-12
[  402.617632][T15604] EXT4-fs error (device loop9): ext4_iget_extra_inode:5025: inode #15: comm syz.9.3715: corrupted in-inode xattr: e_value size too large
[  402.625681][T15604] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  402.629293][    C1] EXT4-fs (loop9): initial error at time 1778873467: ext4_iget_extra_inode:5025: inode 15
[  402.635051][    C1] EXT4-fs (loop9): last error at time 1778873467: ext4_iget_extra_inode:5025: inode 15
[  402.648171][T15604] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3715: couldn't read orphan inode 15 (err -117)
[  402.657949][T15604] loop9: lost filesystem error report for type 5 error -117
[  402.659978][T15604] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  402.908141][T14994] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.158380][ T5939] Bluetooth: hci2: command tx timeout
[  403.330070][T15628] program syz.0.3723 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  403.344071][T15631] loop9: detected capacity change from 0 to 512
[  403.366000][T15631] EXT4-fs (loop9): filesystem is read-only
[  404.564701][T15683] nvme_fabrics: missing parameter 'transport=%s'
[  404.576177][T15683] nvme_fabrics: missing parameter 'nqn=%s'
[  405.047617][T15694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3746'.
[  405.143595][T15698] loop0: detected capacity change from 0 to 2048
[  405.157241][T15698] UDF-fs: warning (device loop0): udf_verify_domain_identifier: Descriptor for logical volume marked write protected. Forcing read only mount.
[  405.228078][ T5939] Bluetooth: hci2: command tx timeout
[  405.621301][T15715] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.628430][T12303] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  405.779239][T12303] usb 1-1: Using ep0 maxpacket: 32
[  405.789754][T12303] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  405.793891][T12303] usb 1-1: config 0 interface 0 has no altsetting 0
[  405.796004][T12303] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[  405.807264][T12303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.864282][T12303] usb 1-1: config 0 descriptor??
[  406.428721][T12303] uclogic 0003:2179:0053.000C: interface is invalid, ignoring
[  406.514700][T12310] usb 1-1: USB disconnect, device number 2
[  407.096891][T15771] netlink: 'syz.7.3779': attribute type 9 has an invalid length.
[  407.112249][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3779'.
[  407.123237][T15771] macvlan4: entered promiscuous mode
[  407.125111][T15771] team0: entered promiscuous mode
[  407.127366][T15771] team_slave_0: entered promiscuous mode
[  407.129489][T15771] team_slave_1: entered promiscuous mode
[  407.131579][T15771] macvlan4: entered allmulticast mode
[  407.134047][T15771] team0: entered allmulticast mode
[  407.135674][T15771] team_slave_0: entered allmulticast mode
[  407.137416][T15771] team_slave_1: entered allmulticast mode
[  407.148354][T15771] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  407.238486][T12310] usb 10-1: new full-speed USB device number 11 using dummy_hcd
[  407.392177][T12310] usb 10-1: config 0 has an invalid interface number: 224 but max is 0
[  407.396175][T12310] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  407.400538][T12310] usb 10-1: config 0 has no interface number 0
[  407.403118][T12310] usb 10-1: config 0 interface 224 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  407.407520][T12310] usb 10-1: config 0 interface 224 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  407.415110][T12310] usb 10-1: config 0 interface 224 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14
[  407.425205][T12310] usb 10-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc
[  407.428661][T12310] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.431811][T12310] usb 10-1: Product: syz
[  407.433643][T12310] usb 10-1: Manufacturer: syz
[  407.435581][T12310] usb 10-1: SerialNumber: syz
[  407.444766][T12310] usb 10-1: config 0 descriptor??
[  407.455729][T12310] ldusb 10-1:0.224: Interrupt in endpoint not found
[  407.674421][T12303] usb 10-1: USB disconnect, device number 11
[  407.730099][T15792] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3788'.
[  407.734013][T15792] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3788'.
[  407.938991][T12313] hid-generic 0005:4C4A:4155.000D: item fetching failed at offset 0/1
[  407.950691][T12313] hid-generic 0005:4C4A:4155.000D: probe with driver hid-generic failed with error -22
[  408.033979][T15801] loop0: detected capacity change from 0 to 1024
[  408.538076][T12298] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  408.656052][T15821] fuse: Bad value for 'fd'
[  408.691798][T12298] usb 10-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  408.694859][T12298] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.697593][T12298] usb 10-1: Product: syz
[  408.699862][T12298] usb 10-1: Manufacturer: syz
[  408.701592][T12298] usb 10-1: SerialNumber: syz
[  408.704962][T12298] usb 10-1: config 0 descriptor??
[  408.714085][T12298] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  409.091009][T15838] loop0: detected capacity change from 0 to 512
[  409.110562][T15838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  409.117888][T12298] sonixb 10-1:0.0: Error writing register 01: -71
[  409.127533][T12298] sonixb 10-1:0.0: probe with driver sonixb failed with error -71
[  409.137590][T15838] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  409.148326][T12298] usb 10-1: USB disconnect, device number 12
[  409.213922][T15462] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.965577][T15866] netlink: 116 bytes leftover after parsing attributes in process `syz.9.3819'.
[  411.178033][T15873] loop9: detected capacity change from 0 to 128
[  411.378748][T12313] kernel write not supported for file /sg0 (pid: 12313 comm: kworker/1:15)
[  411.717973][T12298] usb 10-1: new full-speed USB device number 13 using dummy_hcd
[  411.870060][T12298] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  411.876039][T12298] usb 10-1: config 0 has no interfaces?
[  411.878703][T12298] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  411.888079][T12298] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.907322][T12298] usb 10-1: config 0 descriptor??
[  412.137322][T12313] usb 10-1: USB disconnect, device number 13
[  412.505120][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3836'.
[  412.508149][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3836'.
[  412.818101][T12313] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  412.874875][T15929] Bluetooth: MGMT ver 1.23
[  412.968011][T12313] usb 1-1: Using ep0 maxpacket: 16
[  412.979543][T12313] usb 1-1: config index 0 descriptor too short (expected 1810, got 18)
[  412.982801][T12313] usb 1-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6
[  412.987160][T12313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.996426][T12313] usb 1-1: config 0 descriptor??
[  413.008890][T12313] gspca_main: etoms-2.14.0 probing 102c:6151
[  413.015887][T15934] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3848'.
[  413.020663][T15934] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3848'.
[  413.027969][T15934] netlink: 38 bytes leftover after parsing attributes in process `syz.9.3848'.
[  413.134609][T15938] loop9: detected capacity change from 0 to 512
[  413.143036][T15938] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  413.157040][T15938] EXT4-fs (loop9): orphan cleanup on readonly fs
[  413.162641][T15938] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.3850: bad orphan inode 15
[  413.166103][T15938] loop9: lost filesystem error report for type 5 error -117
[  413.169362][    C1] EXT4-fs (loop9): initial error at time 1778873478: ext4_orphan_get:1417
[  413.175388][    C1] EXT4-fs (loop9): last error at time 1778873478: ext4_orphan_get:1417
[  413.183701][T15938] ext4_test_bit(bit=14, block=18) = 1
[  413.185862][T15938] is_bad_inode(inode)=0
[  413.187525][T15938] NEXT_ORPHAN(inode)=1023
[  413.191531][T15938] max_ino=32
[  413.193023][T15938] i_nlink=0
[  413.221185][T15938] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3850: bg 0: block 161: padding at end of block bitmap is not set
[  413.238118][T15938] loop9: lost filesystem error report for type 5 error -117
[  413.238650][T15938] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  413.254105][T15938] loop9: lost filesystem error report for type 5 error -117
[  413.255765][T15938] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  413.279730][T12313] usb 1-1: USB disconnect, device number 3
[  413.332022][T14994] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.160848][T15973] loop0: detected capacity change from 0 to 32768
[  414.178829][T15973] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  414.206132][T15973] XFS (loop0): Ending clean mount
[  414.237014][   T33] audit: type=1800 audit(1778873479.503:852): pid=15973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3864" name="file1" dev="loop0" ino=6150 res=0 errno=0
[  414.299073][T15462] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  414.588584][T12313] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  414.740395][T12313] usb 10-1: Using ep0 maxpacket: 8
[  414.745053][T12313] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  414.749591][T12313] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  414.754029][T12313] usb 10-1: config 1 has no interface number 1
[  414.758154][T12313] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  414.763089][T12313] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  414.773230][T12313] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  414.776731][T12313] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.780216][T12313] usb 10-1: Product: syz
[  414.782010][T12313] usb 10-1: Manufacturer: syz
[  414.784461][T12313] usb 10-1: SerialNumber: syz
[  415.017944][T12313] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor
[  415.022742][T12313] usb 10-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  415.080837][T12313] usb 10-1: USB disconnect, device number 14
[  415.930767][T12300] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  416.078098][T12300] usb 10-1: Using ep0 maxpacket: 16
[  416.083848][T12300] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  416.088074][T12300] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  416.092598][T12300] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  416.096666][T12300] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  416.101275][T12300] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  416.108439][T12300] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  416.112447][T12300] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  416.115866][T12300] usb 10-1: Manufacturer: syz
[  416.125167][T12300] usb 10-1: config 0 descriptor??
[  416.387889][T12300] rc_core: IR keymap rc-hauppauge not found
[  416.389770][T12300] Registered IR keymap rc-empty
[  416.391746][T12300] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  416.417998][T12300] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  416.459312][T12300] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  416.471166][T12300] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input17
[  416.501814][T12300] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  416.519089][T12300] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  416.538614][T12300] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  416.564555][T12300] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  416.578317][T12300] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  416.599377][T12300] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  416.619335][T12300] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  416.638233][T12300] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  416.659998][T12300] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  416.681501][T12300] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  416.685770][T16052] loop0: detected capacity change from 0 to 32768
[  416.691059][T16052] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3898 (16052)
[  416.702574][T16052] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  416.707334][T16052] BTRFS info (device loop0): using sha256 checksum algorithm
[  416.717089][T12300] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  416.763269][T12300] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  416.784244][T12300] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  416.823959][T16052] BTRFS info (device loop0): rebuilding free space tree
[  416.827358][T12300] usb 10-1: USB disconnect, device number 15
[  416.830648][T16071] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  416.853943][T16052] BTRFS info (device loop0): enabling ssd optimizations
[  416.856871][T16052] BTRFS info (device loop0): using spread ssd allocation scheme
[  416.860057][T16052] BTRFS info (device loop0): enabling free space tree
[  416.864189][T16052] BTRFS info (device loop0): force clearing of disk cache
[  416.867037][T16052] BTRFS info (device loop0): enabling auto defrag
[  416.869560][T16052] BTRFS info (device loop0): max_inline set to 0
[  416.996934][   T13] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  417.005228][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3898'.
[  417.078026][T15462] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  417.304635][T16084] loop0: detected capacity change from 0 to 4096
[  417.416107][T16087] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  417.745875][T16101] loop9: detected capacity change from 0 to 256
[  417.759966][T16101] FAT-fs (loop9): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  418.600574][ T4659] FAT-fs (loop9): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  418.911248][T16150] loop0: detected capacity change from 0 to 4096
[  418.914517][T16150] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  418.929470][T16150] ntfs3(loop0): ino=1a, mi_enum_attr
[  418.931478][T16150] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  418.993894][T16146] loop9: detected capacity change from 0 to 32768
[  419.009199][T16150] ntfs3(loop0): ino=1e, "file1" ntfs3_write_inode failed, -22.
[  419.029783][T16146] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  419.062398][T16146] XFS (loop9): Ending clean mount
[  419.064324][T16150] ntfs3(loop0): ino=1e, "file1" ntfs_sync_inode failed, -22.
[  419.108203][ T4659] ntfs3(loop0): ino=1e, ntfs3_write_inode failed, -22.
[  419.195170][T14994] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  419.437949][T12307] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  419.601207][T12307] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 64, changing to 10
[  419.605891][T12307] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  419.614220][T12307] usb 1-1: config 0 interface 0 has no altsetting 0
[  419.617111][T12307] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[  419.621504][T12307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.627972][T12310] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  419.633225][T12307] usb 1-1: config 0 descriptor??
[  419.800484][T12310] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  419.807948][T12310] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  419.821839][T12310] usb 10-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40
[  419.825499][T12310] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.837898][T12310] usb 10-1: Product: syz
[  419.840858][T12310] usb 10-1: Manufacturer: syz
[  419.842890][T12310] usb 10-1: SerialNumber: syz
[  420.069961][T12307] uclogic 0003:5543:0042.000E: unknown main item tag 0x0
[  420.073103][T12307] uclogic 0003:5543:0042.000E: unknown main item tag 0x0
[  420.075918][T12307] uclogic 0003:5543:0042.000E: unknown main item tag 0x0
[  420.082390][T12310] usb 10-1: 0:1 : does not exist
[  420.084428][T12310] usb 10-1: unit 4 not found!
[  420.086438][T12310] usb 10-1: unit 51 not found!
[  420.105063][T12307] uclogic 0003:5543:0042.000E: unknown main item tag 0x0
[  420.113376][T12307] uclogic 0003:5543:0042.000E: unknown main item tag 0x0
[  420.116254][T12307] uclogic 0003:5543:0042.000E: unknown main item tag 0x0
[  420.138207][T12307] uclogic 0003:5543:0042.000E: unknown main item tag 0x0
[  420.141023][T12307] uclogic 0003:5543:0042.000E: unknown main item tag 0x0
[  420.145774][T12307] uclogic 0003:5543:0042.000E: unknown main item tag 0x0
[  420.149056][T12307] uclogic 0003:5543:0042.000E: unknown main item tag 0x0
[  420.170104][T12307] uclogic 0003:5543:0042.000E: hidraw0: USB HID v0.06 Device [HID 5543:0042] on usb-dummy_hcd.0-1/input0
[  420.206758][T12310] usb 10-1: USB disconnect, device number 16
[  420.251317][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  420.273366][T12300] usb 1-1: USB disconnect, device number 4
[  420.640136][T16188] hugetlbfs: syz.7.3948 (16188): Using mlock ulimits for SHM_HUGETLB is obsolete
[  420.914901][T16190] loop0: detected capacity change from 0 to 2048
[  420.946184][T16193] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  420.977282][T16193] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  420.990208][T16193] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  421.005774][T16193] Remounting filesystem read-only
[  421.026623][T15462] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  421.361814][T16211] loop0: detected capacity change from 0 to 128
[  422.024673][T16223] loop9: detected capacity change from 0 to 1024
[  422.042138][T16223] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  422.064629][T16223] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 2: comm syz.9.3963: lblock 2 mapped to illegal pblock 2 (length 1)
[  422.078701][T16223] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  422.078949][T16223] Quota error (device loop9): qtree_write_dquot: dquota write failed
[  422.087967][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  422.090607][    C0] EXT4-fs (loop9): initial error at time 1778873487: ext4_map_blocks:776: inode 3: block 2
[  422.094525][    C0] EXT4-fs (loop9): last error at time 1778873487: ext4_map_blocks:776: inode 3: block 2
[  422.100942][T16223] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 48: comm syz.9.3963: lblock 0 mapped to illegal pblock 48 (length 1)
[  422.106333][T16223] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  422.116763][T16223] Quota error (device loop9): v2_write_file_info: Can't write info structure
[  422.123905][T16223] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.3963: Failed to acquire dquot type 0
[  422.137941][T16223] loop9: lost filesystem error report for type 5 error -117
[  422.138231][T16223] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  422.144875][T16223] loop9: lost filesystem error report for type 5 error -117
[  422.145166][T16223] EXT4-fs error (device loop9): ext4_evict_inode:255: inode #11: comm syz.9.3963: mark_inode_dirty error
[  422.158117][T16223] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  422.158362][T16223] EXT4-fs warning (device loop9): ext4_evict_inode:258: couldn't mark inode dirty (err -117)
[  422.176425][T16223] EXT4-fs (loop9): 1 orphan inode deleted
[  422.179981][T16223] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  422.195092][T15396] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 1: comm kworker/u9:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  422.207467][T15396] Quota error (device loop9): remove_tree: Can't read quota data block 1
[  422.279056][T15396] EXT4-fs error (device loop9): ext4_release_dquot:7037: comm kworker/u9:7: Failed to release dquot type 0
[  422.299743][T14994] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.318122][T14994] EXT4-fs error (device loop9): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0
[  422.338938][T14994] loop9: lost filesystem error report for type 5 error -117
[  422.344763][T14994] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  422.355981][T16228] loop0: detected capacity change from 0 to 4096
[  422.358620][T14994] loop9: lost filesystem error report for type 5 error -117
[  422.358854][T14994] EXT4-fs error (device loop9): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error
[  422.365084][T14994] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  422.384999][T16228] EXT4-fs: Conflicting test_dummy_encryption options
[  422.460992][T16228] binder: 16227:16228 ioctl c018620c 200000000000 returned -22
[  422.787259][T16243] netlink: 6032 bytes leftover after parsing attributes in process `syz.9.3971'.
[  423.003873][T16240] loop0: detected capacity change from 0 to 32768
[  423.035621][T16240] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  423.086630][T16240] XFS (loop0): Ending clean mount
[  423.150571][T15462] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  423.767918][T12310] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  423.933442][T12310] usb 1-1: config 7 has an invalid interface number: 212 but max is 0
[  423.936731][T12310] usb 1-1: config 7 has no interface number 0
[  423.942020][T12310] usb 1-1: config 7 interface 212 has no altsetting 0
[  423.949867][T12310] usb 1-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice=63.1e
[  423.953998][T12310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.966895][T12310] usb 1-1: Product: syz
[  423.969644][T12310] usb 1-1: Manufacturer: syz
[  423.971327][T12310] usb 1-1: SerialNumber: syz
[  424.048930][    C1] hpet: Lost 1 RTC interrupts
[  424.223227][T12310] belkin_sa 1-1:7.212: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  424.244868][T12310] usb 1-1: bcdDevice: 631e, bfc: 0
[  424.272521][T12310] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  424.284325][T12310] usb 1-1: USB disconnect, device number 5
[  424.291724][T12310] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  424.296781][T12310] belkin_sa 1-1:7.212: device disconnected
[  425.406244][T16316] loop0: detected capacity change from 0 to 4096
[  425.459227][T16316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  425.543760][T15462] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.579214][    C1] hpet: Lost 1 RTC interrupts
[  425.989043][T16327] loop0: detected capacity change from 0 to 32768
[  426.021534][T16327] read_mapping_page failed!
[  426.046764][T16327] ERROR: (device loop0): txCommit: 
[  426.046764][T16327] 
[  426.098335][T12310] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  426.101807][T15402] read_mapping_page failed!
[  426.104617][T15402] ERROR: (device loop0): txCommit: 
[  426.104617][T15402] 
[  426.107519][T15402] jfs_write_inode: jfs_commit_inode failed!
[  426.244310][T16345] loop0: detected capacity change from 0 to 256
[  426.252864][T16345] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  426.271684][T12310] usb 10-1: Using ep0 maxpacket: 32
[  426.274744][T12310] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  426.288706][T12310] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  426.291496][T12310] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  426.307551][T12310] usb 10-1: Product: syz
[  426.313866][T12310] usb 10-1: Manufacturer: syz
[  426.315584][T12310] usb 10-1: SerialNumber: syz
[  426.322894][T12310] usb 10-1: config 0 descriptor??
[  426.325411][T16331] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  426.338866][T12310] hub 10-1:0.0: bad descriptor, ignoring hub
[  426.340876][T12310] hub 10-1:0.0: probe with driver hub failed with error -5
[  426.595647][T16371] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.4022'.
[  426.887529][T16376] loop0: detected capacity change from 0 to 32768
[  426.902169][T16376] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  426.919505][T16376] XFS (loop0): Ending clean mount
[  426.967205][T15462] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  427.032469][    C1] hpet: Lost 1 RTC interrupts
[  427.041242][T12300] usb 10-1: USB disconnect, device number 17
[  427.162194][   T33] audit: type=1800 audit(1778873492.433:853): pid=16402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.7.4034" name="/newroot/1232/bus/#6382//deleted" dev="tmpfs" ino=6382 res=0 errno=0
[  427.215533][T16406] loop0: detected capacity change from 0 to 8
[  427.220396][    C1] hpet: Lost 1 RTC interrupts
[  427.230231][T12300] usb 10-1: new full-speed USB device number 18 using dummy_hcd
[  427.239916][T16406] SQUASHFS error: xz decompression failed, data probably corrupt
[  427.246599][T16406] SQUASHFS error: Failed to read block 0x108: -5
[  427.253559][T16406] SQUASHFS error: Unable to read metadata cache entry [106]
[  427.256520][T16406] SQUASHFS error: Unable to read inode 0x11f
[  427.404836][T12300] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64
[  427.421498][T12300] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  427.430028][T12300] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  427.432761][T12300] usb 10-1: Product: syz
[  427.434993][T12300] usb 10-1: Manufacturer: syz
[  427.643198][T12300] usb 10-1: SerialNumber: syz
[  427.646380][T12300] usb 10-1: config 0 descriptor??
[  427.650793][T16372] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  427.655893][T12300] hub 10-1:0.0: bad descriptor, ignoring hub
[  427.658238][T12300] hub 10-1:0.0: probe with driver hub failed with error -5
[  427.727732][T16418] loop0: detected capacity change from 0 to 512
[  427.747418][T16418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  427.753700][T16418] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  427.780057][T15462] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.968506][T12300] usb 10-1: USB disconnect, device number 18
[  428.577828][    C1] hrtimer: interrupt took 70412 ns
[  429.018785][T16451] loop9: detected capacity change from 0 to 131072
[  429.029647][T16451] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0)
[  429.032961][T16451] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  429.037027][T16451] F2FS-fs (loop9): invalid crc value
[  429.146261][T16451] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  429.154507][T16451] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  429.157295][T16451] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  429.569382][T16463] loop0: detected capacity change from 0 to 8192
[  429.979623][T16474] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4057'.
[  430.076501][T16476] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  430.105465][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4067'.
[  430.165960][   T33] audit: type=1326 audit(1778873495.433:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16482 comm="syz.9.4068" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf0d9ce59 code=0x7ffc0000
[  430.187849][   T33] audit: type=1326 audit(1778873495.433:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16482 comm="syz.9.4068" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf0d9ce59 code=0x7ffc0000
[  430.202687][   T33] audit: type=1326 audit(1778873495.453:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16482 comm="syz.9.4068" exe="/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fbcf0d9ce59 code=0x7ffc0000
[  430.227912][   T33] audit: type=1326 audit(1778873495.453:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16482 comm="syz.9.4068" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf0d9ce59 code=0x7ffc0000
[  430.257414][   T33] audit: type=1326 audit(1778873495.453:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16482 comm="syz.9.4068" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf0d9ce59 code=0x7ffc0000
[  430.478508][T12300] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  430.638848][T12300] usb 1-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 1023
[  430.643077][T12300] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0
[  430.647553][T12300] usb 1-1: config 0 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 0
[  430.666899][T12300] usb 1-1: config 0 interface 0 has no altsetting 0
[  430.676617][T12300] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  430.688089][T12300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.698283][T12300] usb 1-1: Product: syz
[  430.702857][T12300] usb 1-1: Manufacturer: syz
[  430.707551][T12300] usb 1-1: SerialNumber: syz
[  430.734567][T12300] usb 1-1: config 0 descriptor??
[  430.750891][T16485] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  431.007676][T12303] usb 1-1: USB disconnect, device number 6
[  432.306955][T16528] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4088'.
[  432.923515][T16550] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4098'.
[  432.927223][T16550] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4098'.
[  433.737132][   T33] audit: type=1800 audit(1778873499.003:859): pid=16578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4107" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  434.473550][T16598] loop0: detected capacity change from 0 to 32768
[  434.485287][T16598] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4120 (16598)
[  434.737585][T16598] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  434.752359][T16598] BTRFS info (device loop0): using sha256 checksum algorithm
[  434.818344][T16598] BTRFS info (device loop0): enabling ssd optimizations
[  434.821530][T16598] BTRFS info (device loop0): turning on async discard
[  434.824651][T16598] BTRFS info (device loop0): enabling free space tree
[  434.867008][T15462] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  435.922759][T16633] loop9: detected capacity change from 0 to 16
[  435.938651][T16633] erofs (device loop9): mounted with root inode @ nid 36.
[  435.960290][T16633] ip6tnl1: entered allmulticast mode
[  435.963112][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  435.970715][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  435.990244][T12303] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  436.283401][T12303] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  436.545099][T16649] loop9: detected capacity change from 0 to 8
[  436.563173][T16649] unable to read inode lookup table
[  436.891175][T12303] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  437.641713][T12303] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  437.686495][   T33] audit: type=1800 audit(1778873502.953:860): pid=16665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4141" name="bus" dev="ramfs" ino=45850 res=0 errno=0
[  437.788126][T12303] usb 1-1: Using ep0 maxpacket: 8
[  437.798008][T12303] usb 1-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config
[  437.816550][T12303] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0
[  437.825634][T12303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.849160][T12303] usb 1-1: probing VID:PID(2201:012C)   
[  437.875361][T12303] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs
[  437.881554][T12303] vub300 1-1:64.0: probe with driver vub300 failed with error -22
[  438.057206][T12303] usb 1-1: USB disconnect, device number 7
[  438.650595][T12303] usb 10-1: new full-speed USB device number 19 using dummy_hcd
[  438.812479][T12303] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  438.834082][T12303] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  438.846252][T12303] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  438.855207][T12303] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.918659][T16715] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  439.103565][T12303] usb 10-1: usb_control_msg returned -32
[  439.105537][T12303] usbtmc 10-1:16.0: can't read capabilities
[  439.226672][T16727] netlink: 'syz.7.4168': attribute type 83 has an invalid length.
[  439.617926][T12303] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  439.771078][T12303] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  439.775518][T12303] usb 1-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=81.51
[  439.780047][T12303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.793491][T12303] s2255 1-1:4.0: Could not find bulk-in endpoint
[  439.795643][T12303] Sensoray 2255 driver load failed: 0xfffffff4
[  439.797588][T12303] s2255 1-1:4.0: probe with driver s2255 failed with error -12
[  440.088079][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  440.103910][T12300] usb 1-1: USB disconnect, device number 8
[  440.741403][ T5939] Bluetooth: hci2: SCO packet too small
[  441.702506][T12302] usb 10-1: USB disconnect, device number 19
[  443.864084][T16809] loop9: detected capacity change from 0 to 512
[  443.887340][T16809] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a857e02c, mo2=0102]
[  443.903788][T16809] System zones: 1-12
[  443.919218][T16809] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4203: invalid indirect mapped block 8 (level 2)
[  443.934071][T16809] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  443.937812][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  443.943131][    C0] EXT4-fs (loop9): initial error at time 1778873509: ext4_free_branches:1023: inode 11
[  443.946724][    C0] EXT4-fs (loop9): last error at time 1778873509: ext4_free_branches:1023: inode 11
[  443.965063][T16809] EXT4-fs (loop9): Remounting filesystem read-only
[  443.969914][T16809] EXT4-fs (loop9): 1 truncate cleaned up
[  443.995963][T16809] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  444.793830][T14994] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.826823][    C1] hpet: Lost 1 RTC interrupts
[  445.017964][T12302] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  445.160279][T16821] netlink: get zone limit has 8 unknown bytes
[  445.168171][T12302] usb 1-1: Using ep0 maxpacket: 32
[  445.172344][T12302] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  445.177168][T12302] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  445.191116][T12302] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  445.194954][T12302] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  445.204849][T12302] usb 1-1: Product: syz
[  445.206586][T12302] usb 1-1: Manufacturer: syz
[  445.249094][T12302] hub 1-1:4.0: USB hub found
[  445.433995][T12302] hub 1-1:4.0: 10 ports detected
[  445.438526][T12302] hub 1-1:4.0: insufficient power available to use all downstream ports
[  445.455764][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  445.458708][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  445.645447][T12302] hub 1-1:4.0: hub_hub_status failed (err = -71)
[  445.650204][T12302] hub 1-1:4.0: config failed, can't get hub status (err -71)
[  445.690390][T12302] usb 1-1: USB disconnect, device number 9
[  445.898972][T16832] loop9: detected capacity change from 0 to 2048
[  445.941595][T16832] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  445.971183][T16832] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  445.983392][T16832] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  446.235555][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4217'.
[  446.578015][T16850] loop9: detected capacity change from 0 to 1024
[  446.828506][T16858] kernel read not supported for file /bus (pid: 16858 comm: syz.0.4225)
[  446.839249][   T33] audit: type=1800 audit(1778873512.113:861): pid=16858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4225" name="bus" dev="mqueue" ino=46323 res=0 errno=0
[  448.007944][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  450.366104][T16920] netlink: 168 bytes leftover after parsing attributes in process `syz.9.4251'.
[  450.432709][T16922] loop9: detected capacity change from 0 to 512
[  450.452108][T16922] EXT4-fs (loop9): Test dummy encryption mode enabled
[  450.454179][T16922] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  450.478498][T16922] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.4252: bad orphan inode 131083
[  450.482719][T16922] loop9: lost filesystem error report for type 5 error -117
[  450.484418][T16922] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  450.876287][T16899] syz.0.4242 (16899): drop_caches: 2
[  451.096968][T16922] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-lib))"
[  451.191625][T14994] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.519955][T12302] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  451.621582][T16957] loop9: detected capacity change from 0 to 128
[  451.644743][T16957] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  451.658369][T16957] hpfs: filesystem error: improperly stopped
[  451.669219][T16957] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  451.673397][T12302] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82
[  451.678835][T16957] hpfs: You really don't want any checks? You are crazy...
[  451.682197][T12302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  451.687693][T16957] hpfs: hpfs_map_sector(): read error
[  451.695450][T12302] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.4b
[  451.700216][T12302] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0
[  451.703397][T12302] usb 1-1: Product: syz
[  451.705211][T16957] hpfs: code page support is disabled
[  451.707381][T16957] hpfs: hpfs_map_4sectors(): unaligned read
[  451.725827][T16957] hpfs: hpfs_map_4sectors(): unaligned read
[  451.727718][T16957] hpfs: filesystem error: unable to find root dir
[  451.732279][T12302] usb 1-1: config 0 descriptor??
[  451.943485][T12302] ath6kl: Failed to submit usb control message: -71
[  451.945960][T12302] ath6kl: unable to send the bmi data to the device: -71
[  451.958510][T12302] ath6kl: Unable to send get target info: -71
[  451.962106][T12302] ath6kl: Failed to init ath6kl core: -71
[  451.980971][T12302] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  451.992887][T12302] usb 1-1: USB disconnect, device number 10
[  452.131313][T16966] loop9: detected capacity change from 0 to 16
[  452.146018][T16966] erofs (device loop9): mounted with root inode @ nid 36.
[  453.708379][    C1] hpet: Lost 2 RTC interrupts
[  453.774932][    C1] hpet: Lost 2 RTC interrupts
[  453.828241][    C1] hpet: Lost 2 RTC interrupts
[  453.915019][    C1] hpet: Lost 3 RTC interrupts
[  455.676829][T17004] loop9: detected capacity change from 0 to 512
[  455.681225][T17004] EXT4-fs: Ignoring removed i_version option
[  455.683742][T17004] EXT4-fs: Ignoring removed nobh option
[  455.745845][T17004] EXT4-fs (loop9): Test dummy encryption mode enabled
[  455.774336][T17004] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  455.950569][T17004] EXT4-fs (loop9): 1 truncate cleaned up
[  455.955101][T17004] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  456.179764][T17009] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode
[  456.647201][T14994] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.098873][T17050] loop9: detected capacity change from 0 to 32768
[  459.105381][T17050] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4302 (17050)
[  459.161935][T17050] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  459.165652][T17050] BTRFS info (device loop9): using crc32c checksum algorithm
[  459.272944][T17050] BTRFS info (device loop9): turning on async discard
[  459.289478][T17050] BTRFS info (device loop9): enabling free space tree
[  459.292159][T17050] BTRFS info (device loop9): enabling auto defrag
[  459.294582][T17050] BTRFS info (device loop9): force zlib compression, level 3
[  459.316623][T17050] BTRFS info (device loop9): max_inline set to 0
[  459.432116][T14994] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  459.532883][T17083] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  459.739450][T17089] loop0: detected capacity change from 0 to 512
[  459.785857][T17089] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  459.812824][T17089] EXT4-fs (loop0): 1 truncate cleaned up
[  459.816390][T17089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  459.946553][T15462] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.322702][T17101] netlink: 'syz.9.4319': attribute type 1 has an invalid length.
[  460.774441][T17109] loop9: detected capacity change from 0 to 16
[  460.810626][T17109] erofs (device loop9): mounted with root inode @ nid 36.
[  461.141279][T17119] loop9: detected capacity change from 0 to 256
[  461.161145][T17119] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  463.248933][T17150] loop0: detected capacity change from 0 to 131072
[  463.253089][T17150] F2FS-fs (loop0): invalid crc value
[  463.286536][T17150] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  463.292045][T17150] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  463.369408][T17156] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4343'.
[  463.719184][T17163] loop9: detected capacity change from 0 to 4096
[  463.729425][T17163] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512).
[  463.795274][T17163] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  464.008032][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  464.404970][T17186] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  464.453245][T17186] IPVS: Error connecting to the multicast addr
[  464.964023][   T33] audit: type=1326 audit(1778873530.233:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.0.4360" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8109b9ce59 code=0x7ffc0000
[  464.980442][   T33] audit: type=1326 audit(1778873530.243:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.0.4360" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8109b9ce59 code=0x7ffc0000
[  465.000497][   T33] audit: type=1326 audit(1778873530.243:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.0.4360" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8109b9ce59 code=0x7ffc0000
[  465.007275][   T33] audit: type=1326 audit(1778873530.243:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.0.4360" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8109b9ce59 code=0x7ffc0000
[  465.027583][   T33] audit: type=1326 audit(1778873530.293:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.0.4360" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8109b9ce59 code=0x7ffc0000
[  465.041744][   T33] audit: type=1326 audit(1778873530.293:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.0.4360" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8109b9ce59 code=0x7ffc0000
[  465.056029][   T33] audit: type=1326 audit(1778873530.293:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.0.4360" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8109b9ce59 code=0x7ffc0000
[  465.071186][   T33] audit: type=1326 audit(1778873530.293:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.0.4360" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8109b9ce59 code=0x7ffc0000
[  465.085783][   T33] audit: type=1326 audit(1778873530.293:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.0.4360" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8109b9ce59 code=0x7ffc0000
[  465.101646][   T33] audit: type=1326 audit(1778873530.293:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.0.4360" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8109b9ce59 code=0x7ffc0000
[  465.797898][T12302] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  465.948619][T12302] usb 1-1: Using ep0 maxpacket: 32
[  465.951829][T12302] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  465.955583][T12302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.966072][T12302] usb 1-1: config 0 descriptor??
[  465.982726][T12302] gspca_main: sq930x-2.14.0 probing 041e:403c
[  466.767881][T12302] gspca_sq930x: reg_w 0305 fd00 failed -71
[  466.770325][T12302] sq930x 1-1:0.0: probe with driver sq930x failed with error -71
[  466.777701][T12302] usb 1-1: USB disconnect, device number 11
[  468.981507][T17275] input: syz0 as /devices/virtual/input/input18
[  469.223061][T17287] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4402'.
[  469.225912][T17287] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4402'.
[  469.653487][T17304] loop9: detected capacity change from 0 to 128
[  470.257356][T17308] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4411'.
[  471.553069][T17326] loop9: detected capacity change from 0 to 131072
[  471.558154][T17326] F2FS-fs (loop9): Test dummy encryption mode enabled
[  471.561181][T17326] F2FS-fs (loop9): invalid crc value
[  471.638544][T17326] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  471.655087][T17326] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  472.095530][T17332] netlink: 'syz.0.4420': attribute type 5 has an invalid length.
[  472.622619][T17344] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4425'.
[  474.450241][T17366] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  474.704232][T17373] sctp: [Deprecated]: syz.9.4437 (pid 17373) Use of struct sctp_assoc_value in delayed_ack socket option.
[  474.704232][T17373] Use struct sctp_sack_info instead
[  474.787632][T17379] netlink: 'syz.9.4440': attribute type 1 has an invalid length.
[  474.795130][T17379] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4440'.
[  474.798365][T17379] netlink: 'syz.9.4440': attribute type 1 has an invalid length.
[  474.804481][T17379] netlink: 638 bytes leftover after parsing attributes in process `syz.9.4440'.
[  474.818870][T17379] netlink: 1 bytes leftover after parsing attributes in process `syz.9.4440'.
[  475.130862][T17399] : renamed from wg2 (while UP)
[  475.247930][T12303] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  475.260162][T17405] kernel profiling enabled (shift: 9)
[  475.433028][T12303] usb 10-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  475.436678][T12303] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.439574][T12303] usb 10-1: Product: syz
[  475.440974][T12303] usb 10-1: Manufacturer: syz
[  475.442795][T12303] usb 10-1: SerialNumber: syz
[  475.451395][T12303] usb 10-1: config 0 descriptor??
[  475.456898][T12303] hub 10-1:0.0: bad descriptor, ignoring hub
[  475.459551][T12303] hub 10-1:0.0: probe with driver hub failed with error -5
[  475.660749][T12303] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  475.686079][T12303] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  475.700352][T12303] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  475.705669][T12303] usb 10-1: media controller created
[  475.725007][T12303] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  475.786266][T12303] DVB: Unable to find symbol dib7000p_attach()
[  475.789049][T12303] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  475.837880][T12303] rc_core: IR keymap rc-dib0700-rc5 not found
[  475.840523][T12303] Registered IR keymap rc-empty
[  475.847258][T12303] dvb-usb: could not initialize remote control.
[  475.853909][T12303] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  475.887932][T12303] usb 10-1: USB disconnect, device number 20
[  475.944284][T12303] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  476.331885][T17412] xt_TPROXY: Can be used only with -p tcp or -p udp
[  476.362814][T17416] sctp: [Deprecated]: syz.0.4455 (pid 17416) Use of struct sctp_assoc_value in delayed_ack socket option.
[  476.362814][T17416] Use struct sctp_sack_info instead
[  476.687741][T12300] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  476.850430][T12300] usb 1-1: unable to get BOS descriptor or descriptor too short
[  476.860275][T12300] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 142, changing to 7
[  476.872132][T12300] usb 1-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40
[  476.875354][T12300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.889285][T12300] usb 1-1: Product: syz
[  476.891020][T12300] usb 1-1: Manufacturer: syz
[  476.893157][T12300] usb 1-1: SerialNumber: syz
[  477.135343][T12300] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  477.142081][T12300] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  477.184146][T17427] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4459'.
[  477.187928][T17427] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  477.196167][T12300] usb 1-1: USB disconnect, device number 12
[  477.237964][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  478.739657][T17465] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  479.298722][T17470] loop9: detected capacity change from 0 to 512
[  479.781837][T17484] netlink: 'syz.0.4484': attribute type 9 has an invalid length.
[  479.951507][T17490] xt_hashlimit: size too large, truncated to 1048576
[  480.139005][T17470] loop9: detected capacity change from 0 to 32768
[  480.174083][T17470] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  480.191325][T17470] XFS (loop9): Ending clean mount
[  480.195932][T17470] XFS (loop9): Quotacheck needed: Please wait.
[  480.241672][T17470] XFS (loop9): Quotacheck: Done.
[  480.339795][T14994] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  480.559227][    C1] hpet_rtc_timer_reinit: 41 callbacks suppressed
[  480.559243][    C1] hpet: Lost 1 RTC interrupts
[  480.994245][T12300] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  481.195494][T12300] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  481.211920][T12300] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  481.234584][T12300] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  481.255520][T12300] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  481.258708][T12300] usb 10-1: SerialNumber: syz
[  481.321352][T17519] netlink: 'syz.7.4497': attribute type 11 has an invalid length.
[  481.790119][T12300] usb 10-1: 0:2 : does not exist
[  481.822755][T12300] usb 10-1: USB disconnect, device number 21
[  483.526952][T12300] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  483.688082][T12300] usb 10-1: Using ep0 maxpacket: 8
[  483.692433][T12300] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  483.695855][T12300] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  483.704127][T12300] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  483.709459][T12300] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  483.715160][T12300] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  483.720806][T12300] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  483.726222][T12300] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  483.732988][T12300] usb 10-1: config 168 interface 0 has no altsetting 0
[  483.737696][T12300] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  483.741459][T12300] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  483.746273][T12300] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  483.752746][T12300] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  483.757688][T12300] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  483.766367][T12300] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  483.771035][T12300] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  483.779425][T12300] usb 10-1: config 168 interface 0 has no altsetting 0
[  483.787374][T12300] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  483.790742][T12300] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  483.795984][T12300] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  483.800808][T12300] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  483.807595][T12300] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  483.812362][T12300] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  483.817893][T12300] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  483.823645][T12300] usb 10-1: config 168 interface 0 has no altsetting 0
[  483.831190][T12300] usb 10-1: string descriptor 0 read error: -22
[  483.833999][T12300] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  483.838483][T12300] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.864461][T12300] adutux 10-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  484.083813][T12300] usb 10-1: USB disconnect, device number 22
[  484.306127][T17564] adutux: No device or device unplugged -19
[  486.075776][T12300] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  486.233223][T12300] usb 1-1: Using ep0 maxpacket: 32
[  486.240253][T12300] usb 1-1: unable to get BOS descriptor or descriptor too short
[  486.247213][T12300] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 60, changing to 7
[  486.277513][T12300] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  486.281052][T12300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.295747][T12300] usb 1-1: Product: syz
[  486.297628][T12300] usb 1-1: Manufacturer: syz
[  486.299389][T12300] usb 1-1: SerialNumber: syz
[  486.516746][T17603] loop9: detected capacity change from 0 to 32768
[  486.562161][T12300] usb 1-1: failed waiting for Axe-Fx III to boot: -71
[  486.564855][T12300] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71
[  486.618693][T12300] usb 1-1: USB disconnect, device number 13
[  486.636758][T17603] __find_get_block_slow() failed. block=72057594037927961, b_blocknr=24, b_state=0x00000019, b_size=512, device loop9 blocksize: 512
[  486.658659][T17603] grow_buffers: requested out-of-range block 72057594037927961 for device loop9
[  486.662352][T17603] (syz.9.4533,17603,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  486.677411][T17603] (syz.9.4533,17603,0):ocfs2_read_locked_inode:599 ERROR: status = -12
[  486.683374][T17603] (syz.9.4533,17603,0):_ocfs2_get_system_file_inode:144 ERROR: status = -12
[  486.699971][T17603] (syz.9.4533,17603,0):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=8, slot=0
[  486.709842][T17603] (syz.9.4533,17603,0):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  486.716526][T17603] (syz.9.4533,17603,0):ocfs2_mount_volume:1758 ERROR: status = -22
[  486.721157][T17603] (syz.9.4533,17603,0):ocfs2_fill_super:1177 ERROR: status = -22
[  486.744697][    C1] hpet: Lost 1 RTC interrupts
[  487.284709][T17625] overlayfs: failed to clone upperpath
[  487.321332][T17625] overlayfs: failed to clone lowerpath
[  487.550594][T17633] syz_tun: entered allmulticast mode
[  487.556197][T17633] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4546'.
[  487.652404][T17633] syz_tun (unregistering): left allmulticast mode
[  487.844692][T12310] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  488.057945][T12310] usb 1-1: Using ep0 maxpacket: 16
[  488.077557][T12310] usb 1-1: unable to get BOS descriptor or descriptor too short
[  488.108615][T12310] usb 1-1: config index 0 descriptor too short (expected 58990, got 43)
[  488.118200][T12310] usb 1-1: config 231 has too many interfaces: 216, using maximum allowed: 32
[  488.122269][T12310] usb 1-1: config 231 has an invalid descriptor of length 0, skipping remainder of the config
[  488.125588][T12310] usb 1-1: config 231 has 1 interface, different from the descriptor's value: 216
[  488.128786][T12310] usb 1-1: config 231 has no interface number 0
[  488.131567][T12310] usb 1-1: config 231 interface 112 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  488.137567][T12310] usb 1-1: config 231 interface 112 has no altsetting 0
[  488.173314][T12310] usb 1-1: string descriptor 0 read error: -22
[  488.188558][T12310] usb 1-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=94.d8
[  488.192867][T12310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.339094][T12310] asix 1-1:231.112: probe with driver asix failed with error -22
[  488.541699][T12302] usb 1-1: USB disconnect, device number 14
[  489.479558][T12300] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  489.649967][T12300] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  489.654352][T12300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  489.671461][T12300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  489.681575][T12300] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  489.693906][T12300] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  489.697881][T12300] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  489.701014][T12300] usb 1-1: Manufacturer: syz
[  489.715637][T12300] usb 1-1: config 0 descriptor??
[  490.190437][T12300] hid_parser_main: 26 callbacks suppressed
[  490.190460][T12300] appleir 0003:05AC:8243.000F: unknown main item tag 0x0
[  490.215146][T12300] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  490.338348][T17667] overlayfs: failed to clone lowerpath
[  490.492642][T12300] usb 1-1: USB disconnect, device number 15
[  490.756427][T17677] loop9: detected capacity change from 0 to 32768
[  490.799319][T17677] JBD2: Ignoring recovery information on journal
[  490.855470][T17677] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  490.952777][T14994] ocfs2: Unmounting device (7,9) on (node local)
[  490.983546][    C1] hpet: Lost 1 RTC interrupts
[  491.474725][T17698] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  491.993306][T17722] loop0: detected capacity change from 0 to 128
[  492.031645][T17722] EXT4-fs (loop0): Test dummy encryption mode enabled
[  492.082968][T17722] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  492.112573][T17722] ext4 filesystem being mounted at /270/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  492.684253][T15462] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  492.733885][    C1] hpet: Lost 1 RTC interrupts
[  492.900069][T17763] loop0: detected capacity change from 0 to 8
[  492.923864][T17763] SQUASHFS error: lzo decompression failed, data probably corrupt
[  492.935700][T17763] SQUASHFS error: Failed to read block 0x91: -5
[  492.939453][T17763] SQUASHFS error: Unable to read metadata cache entry [8f]
[  492.972083][T17763] SQUASHFS error: Unable to read inode 0x11f
[  493.460967][T17778] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  493.605114][T17780] loop0: detected capacity change from 0 to 128
[  493.632285][T17780] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  493.662442][T17780] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  494.674143][T17800] loop0: detected capacity change from 0 to 256
[  495.103062][T17805] batadv_slave_1: entered promiscuous mode
[  495.110010][T17804] batadv_slave_1: left promiscuous mode
[  495.561557][T17817] xt_HMARK: proto mask must be zero with L3 mode
[  495.803144][T17825] loop0: detected capacity change from 0 to 4096
[  495.856183][T17825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  495.896573][T17831] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4614'.
[  495.949862][T17825] Quota error (device loop0): do_check_range: Getting block 1048579 out of range 1-5
[  495.953438][T17825] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  495.976489][T17825] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.4613: Failed to acquire dquot type 1
[  496.044321][T15462] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  496.692120][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  498.287929][T17851] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4624'.
[  499.456461][T12300] kernel read not supported for file /mdstat (pid: 12300 comm: kworker/0:12)
[  501.120427][T17920] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4641'.
[  501.366521][T17925] netlink: 'syz.7.4644': attribute type 12 has an invalid length.
[  501.630105][T17934] loop0: detected capacity change from 0 to 2048
[  501.653368][T17934] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  502.090725][T17949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4655'.
[  502.800500][T12298] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  502.978198][T12298] usb 1-1: unable to get BOS descriptor or descriptor too short
[  502.981923][T12298] usb 1-1: not running at top speed; connect to a high speed hub
[  502.988767][T12298] usb 1-1: config 129 has an invalid interface number: 195 but max is 0
[  502.991731][T12298] usb 1-1: config 129 has no interface number 0
[  502.994243][T12298] usb 1-1: config 129 interface 195 has no altsetting 0
[  503.046300][T12298] usb 1-1: New USB device found, idVendor=684d, idProduct=28e7, bcdDevice= d.12
[  503.049978][T12298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.119315][T12298] usb 1-1: Product: syz
[  503.120590][T12298] usb 1-1: Manufacturer: syz
[  503.122029][T12298] usb 1-1: SerialNumber: syz
[  503.491443][T17963] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  503.494157][T12302] IPVS: starting estimator thread 0...
[  503.549711][T12298] usb-storage 1-1:129.195: USB Mass Storage device detected
[  503.597332][T18001] IPVS: using max 55 ests per chain, 132000 per kthread
[  503.655909][T12298] usb 1-1: USB disconnect, device number 16
[  503.663334][T18006] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  504.528256][T18030] xt_hashlimit: size too large, truncated to 1048576
[  504.731335][T18037] program syz.0.4679 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  504.822746][T18039] loop0: detected capacity change from 0 to 4096
[  504.834246][T18039] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  504.841284][T18039] UDF-fs: Scanning with blocksize 512 failed
[  504.850832][T18039] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  505.039584][T18044] IPVS: length: 8 != 27896200080
[  505.314641][T18059] netlink: 'syz.9.4687': attribute type 10 has an invalid length.
[  505.325257][T18059] bond0: (slave macvlan1): Enslaving as an active interface with an up link
[  505.758366][ T5943] Bluetooth: hci0: command 0x0406 tx timeout
[  507.404744][T18103] loop0: detected capacity change from 0 to 512
[  507.412614][T18103] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  507.428106][T18103] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.4704: corrupted xattr entries
[  507.432312][T18103] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  507.442102][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  507.446891][    C0] EXT4-fs (loop0): initial error at time 1778873570: xattr_find_entry:337: inode 15
[  507.449742][    C0] EXT4-fs (loop0): last error at time 1778873570: xattr_find_entry:337: inode 15
[  507.454423][T18103] EXT4-fs (loop0): 1 truncate cleaned up
[  507.457028][T18103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  507.500618][T15462] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  507.519439][T18107] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4705'.
[  507.630012][T18107] bond1: entered promiscuous mode
[  507.635533][T18107] 8021q: adding VLAN 0 to HW filter on device bond1
[  507.660970][T18114] 8021q: adding VLAN 0 to HW filter on device bond1
[  507.667121][T18114] bond1: (slave sit1): The slave device specified does not support setting the MAC address
[  507.671415][T18114] bond1: (slave sit1): Error -95 calling set_mac_address
[  507.757265][T18116] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4708'.
[  507.838273][T12302] libceph: connect (1)[c::]:6789 error -101
[  507.840528][T12302] libceph: mon0 (1)[c::]:6789 connect error
[  507.845310][T18112] ceph: No mds server is up or the cluster is laggy
[  507.880959][T18112] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4706'.
[  508.849418][T18137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4716'.
[  508.852514][T18137] netlink: 'syz.0.4716': attribute type 2 has an invalid length.
[  509.009327][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  509.011166][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  509.187178][T18154] netlink: 292 bytes leftover after parsing attributes in process `syz.9.4722'.
[  509.446581][T18165] netlink: 420 bytes leftover after parsing attributes in process `syz.0.4730'.
[  509.450642][T18165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4730'.
[  509.455021][T18165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4730'.
[  509.458591][T18165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4730'.
[  509.561195][T18169] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4731'.
[  510.024516][T18192] IPv6: NLM_F_CREATE should be specified when creating new route
[  510.027826][T18192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  510.030722][T18192] IPv6: NLM_F_CREATE should be set when creating new route
[  510.033661][T18192] IPv6: NLM_F_CREATE should be set when creating new route
[  510.036412][T18192] IPv6: NLM_F_CREATE should be set when creating new route
[  510.098132][ T6163] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  510.105821][ T6163] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  510.113418][ T6163] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  510.139367][ T6163] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  511.104521][T18212] overlayfs: failed to clone lowerpath
[  511.502537][T18218] bond2: Removing last arp target with arp_interval on
[  513.171891][ T5939] Bluetooth: hci0: unexpected event for opcode 0x0c25
[  513.537581][T18274] overlayfs: failed to clone upperpath
[  514.337232][T18286] batman_adv: batadv0: Removing interface: batadv_slave_0
[  514.346761][T18286] batman_adv: batadv0: Removing interface: batadv_slave_1
[  514.374340][T18288] __nla_validate_parse: 2 callbacks suppressed
[  514.374395][T18288] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4785'.
[  514.721487][T18278] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  514.729073][T18278] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  515.419135][T18317] loop0: detected capacity change from 0 to 32768
[  515.463192][T18317] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  515.506620][T18317] XFS (loop0): Ending clean mount
[  515.567932][T15462] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  516.270156][T18361] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4815'.
[  516.460717][T18367] netlink: 'syz.7.4817': attribute type 11 has an invalid length.
[  516.467078][T18367] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4817'.
[  517.224889][T18399] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4832'.
[  517.512319][T18409] tmpfs: Bad value for 'mpol'
[  517.697720][T18411] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4840'.
[  517.700542][T18411] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4840'.
[  518.097932][T18430] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  518.102178][T18430] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  518.159893][T18432] loop0: detected capacity change from 0 to 1024
[  518.172820][T18432] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  518.196644][T18432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  518.288158][T18436] EXT4-fs error (device loop0): __ext4_remount:6804: comm syz.0.4847: Abort forced by user
[  518.305872][T18436] EXT4-fs (loop0): Remounting filesystem read-only
[  518.308570][T18436] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  518.340602][T18438] netlink: 84 bytes leftover after parsing attributes in process `syz.7.4848'.
[  518.350017][T18438] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4848'.
[  518.572292][T18447] netlink: 'syz.7.4852': attribute type 10 has an invalid length.
[  518.586658][T18447] veth1_macvtap: left promiscuous mode
[  518.600292][T18447] team0: Device veth1_macvtap failed to register rx_handler
[  520.623048][T15462] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.282925][T18533] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4889'.
[  522.286518][T18533] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4889'.
[  522.441084][T18541] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4893'.
[  522.444216][T18541] bond0: Unable to set down delay as MII monitoring is disabled
[  523.227955][T18548] loop0: detected capacity change from 0 to 2048
[  523.232947][T18548] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  523.260164][ T5925] udevd[5925]: incorrect nilfs2 checksum on /dev/loop0
[  523.278651][ T5925] udevd[5925]: incorrect nilfs2 checksum on /dev/loop0
[  523.294181][T18550] netlink: 'syz.7.4895': attribute type 2 has an invalid length.
[  523.306718][T18551] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  523.317958][T18548] NILFS (loop0): corrupt root inode
[  523.679301][T18559] loop0: detected capacity change from 0 to 164
[  523.714699][T18559] rock: directory entry would overflow storage
[  523.716771][T18559] rock: sig=0x66, size=4, remaining=3
[  523.783893][T18559] rock: directory entry would overflow storage
[  523.789452][T18563] xt_hashlimit: max too large, truncated to 1048576
[  523.791564][T18559] rock: sig=0x66, size=4, remaining=3
[  523.917305][T18570] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  524.021929][T18576] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4907'.
[  524.026047][T18576] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4907'.
[  524.526786][T18602] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  524.544821][T18602] overlayfs: failed to set xattr on upper
[  524.546749][T18602] overlayfs: ...falling back to redirect_dir=nofollow.
[  524.548804][T18602] overlayfs: ...falling back to index=off.
[  524.891097][T18624] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4930'.
[  525.099736][T18631] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4933'.
[  525.103801][T18631] netem: invalid attributes len -8
[  525.105614][T18631] netem: change failed
[  525.537165][T18635] netlink: 'syz.7.4935': attribute type 3 has an invalid length.
[  525.880355][T12298] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  526.054390][T12298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  526.068031][T12298] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  526.071819][T12298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.078712][T12298] usb 1-1: config 0 descriptor??
[  526.082419][T18622] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  526.557311][T12298] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0
[  526.561237][T12298] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0
[  526.564054][T12298] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0
[  526.567171][T12298] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0
[  526.569987][T12298] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0
[  526.573319][T12298] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0
[  526.576072][T12298] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0
[  526.579033][T12298] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0
[  526.583602][T12298] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0
[  526.586526][T12298] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0
[  526.618329][T12298] asus 0003:0B05:1ABE.0010: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.0-1/input0
[  526.798451][T18668] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4950'.
[  527.481318][T18681] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4956'.
[  528.066359][T12298] usb 1-1: USB disconnect, device number 17
[  528.263218][T18706] overlayfs: failed to clone upperpath
[  528.521153][T18712] netlink: 156 bytes leftover after parsing attributes in process `syz.9.4971'.
[  528.525591][T18712] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4971'.
[  529.631286][ T5939] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  529.635735][ T5939] CPU: 0 UID: 0 PID: 5939 Comm: kworker/u11:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  529.635780][ T5939] Tainted: [L]=SOFTLOCKUP
[  529.635788][ T5939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  529.635799][ T5939] Workqueue: hci0 hci_rx_work
[  529.635824][ T5939] Call Trace:
[  529.635832][ T5939]  <TASK>
[  529.635840][ T5939]  dump_stack_lvl+0xe8/0x150
[  529.635866][ T5939]  sysfs_create_dir_ns+0x271/0x2a0
[  529.635892][ T5939]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  529.635915][ T5939]  ? do_raw_spin_unlock+0x4d/0x210
[  529.635936][ T5939]  kobject_add_internal+0x62b/0xd00
[  529.635965][ T5939]  kobject_add+0x163/0x240
[  529.635990][ T5939]  ? __pfx_kobject_add+0x10/0x10
[  529.636010][ T5939]  ? _raw_spin_unlock+0x28/0x50
[  529.636027][ T5939]  ? get_device_parent+0x366/0x3a0
[  529.636050][ T5939]  device_add+0x408/0xb70
[  529.636072][ T5939]  hci_conn_add_sysfs+0xd5/0x210
[  529.636093][ T5939]  le_conn_complete_evt+0xf1d/0x1430
[  529.636124][ T5939]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  529.636143][ T5939]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  529.636164][ T5939]  ? __pfx___mutex_lock+0x10/0x10
[  529.636182][ T5939]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  529.636198][ T5939]  ? skb_pull_data+0xfb/0x200
[  529.636222][ T5939]  hci_le_conn_complete_evt+0x187/0x470
[  529.636248][ T5939]  hci_event_packet+0x7af/0x12c0
[  529.636270][ T5939]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  529.636292][ T5939]  ? __pfx_hci_event_packet+0x10/0x10
[  529.636314][ T5939]  ? kcov_remote_start+0x49a/0x7a0
[  529.636339][ T5939]  ? hci_send_to_monitor+0xe2/0x590
[  529.636363][ T5939]  hci_rx_work+0x3ee/0x1030
[  529.636382][ T5939]  ? preempt_schedule_thunk+0x16/0x30
[  529.636406][ T5939]  ? process_scheduled_works+0xa8d/0x18c0
[  529.636430][ T5939]  process_scheduled_works+0xb6e/0x18c0
[  529.636476][ T5939]  ? __pfx_process_scheduled_works+0x10/0x10
[  529.636503][ T5939]  ? assign_work+0x3d5/0x5e0
[  529.636528][ T5939]  worker_thread+0xa53/0xfc0
[  529.636593][ T5939]  kthread+0x388/0x470
[  529.636610][ T5939]  ? __pfx_worker_thread+0x10/0x10
[  529.636630][ T5939]  ? __pfx_kthread+0x10/0x10
[  529.636648][ T5939]  ret_from_fork+0x51e/0xb90
[  529.636672][ T5939]  ? __pfx_ret_from_fork+0x10/0x10
[  529.636720][ T5939]  ? __switch_to+0xc7d/0x1450
[  529.636743][ T5939]  ? __pfx_kthread+0x10/0x10
[  529.636759][ T5939]  ret_from_fork_asm+0x1a/0x30
[  529.636797][ T5939]  </TASK>
[  529.636950][ T5939] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  529.755112][ T5939] Bluetooth: hci0: failed to register connection device
[  530.498667][T18746] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4985'.
[  530.523455][T18746] 8021q: adding VLAN 0 to HW filter on device bond3
[  530.536302][T18746] 8021q: adding VLAN 0 to HW filter on device batadv0
[  530.543815][T18746] bond3: (slave batadv0): Enslaving as an active interface with an up link
[  530.716014][T18754] tipc: Invalid UDP bearer configuration
[  530.716060][T18754] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  530.814318][T18759] dummy0: mtu less than device minimum
[  530.867209][T18761] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4991'.
[  532.179370][    C1] hpet: Lost 1 RTC interrupts
[  532.283916][    C1] hpet: Lost 4 RTC interrupts
[  532.395360][    C1] hpet: Lost 4 RTC interrupts
[  532.511190][    C1] hpet: Lost 7 RTC interrupts
[  532.554650][    C1] hpet: Lost 2 RTC interrupts
[  532.608064][    C1] hpet: Lost 2 RTC interrupts
[  532.650137][    C1] hpet: Lost 2 RTC interrupts
[  532.686976][    C1] hpet: Lost 1 RTC interrupts
[  532.721030][    C1] hpet: Lost 1 RTC interrupts
[  532.757012][    C1] hpet: Lost 2 RTC interrupts
[  532.950647][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1261719709 wd_nsec: 1261719708
[  534.132873][T18805] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5011'.
[  534.265285][T18821] SET target dimension over the limit!
[  535.431313][T18838] netlink: 'syz.7.5023': attribute type 4 has an invalid length.
[  535.497557][T18844] tipc: Started in network mode
[  535.499116][T18844] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  535.501395][T18844] tipc: Enabled bearer <eth:ipvlan0>, priority 31
[  536.104058][T18861] bond4 (unregistering): Released all slaves
[  536.587477][T12298] tipc: Node number set to 10136234
[  538.489340][T18885] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5043'.
[  540.766053][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5071'.
[  544.058803][ T5943] Bluetooth: hci2: command 0x0406 tx timeout
[  546.404367][T12300] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  546.566239][T12300] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  546.569650][T12300] usb 1-1: config 0 has no interface number 0
[  546.572204][T12300] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  546.579738][T12300] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  546.583483][T12300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.587902][T12300] usb 1-1: Product: syz
[  546.589624][T12300] usb 1-1: Manufacturer: syz
[  546.591442][T12300] usb 1-1: SerialNumber: syz
[  546.597420][T12300] usb 1-1: config 0 descriptor??
[  546.611493][T12300] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0
[  546.830839][    C0] yurex 1-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[  547.045597][T12300] usb 1-1: USB disconnect, device number 18
[  547.054404][T12300] yurex 1-1:0.50: USB YUREX #0 now disconnected
[  547.637359][T19064] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  549.019659][T19096] netlink: 'syz.0.5139': attribute type 1 has an invalid length.
[  549.024463][T19096] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5139'.
[  549.028129][T19096] netlink: 'syz.0.5139': attribute type 1 has an invalid length.
[  549.031127][T19096] netlink: 'syz.0.5139': attribute type 8 has an invalid length.
[  549.035333][T19096] netlink: 582 bytes leftover after parsing attributes in process `syz.0.5139'.
[  549.038999][T19096] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5139'.
[  549.283868][T19104] netlink: 'syz.7.5141': attribute type 2 has an invalid length.
[  549.288073][T19104] netlink: 119 bytes leftover after parsing attributes in process `syz.7.5141'.
[  549.681320][ T5939] Bluetooth: hci0: unexpected event for opcode 0x100c
[  550.098951][T19134] IPv6: NLM_F_CREATE should be specified when creating new route
[  550.142435][T19136] vivid-007: =================  START STATUS  =================
[  550.147698][T19136] vivid-007: Enable Output Cropping: true grabbed
[  550.152187][T19136] vivid-007: Enable Output Composing: true grabbed
[  550.155148][T19136] vivid-007: Enable Output Scaler: true grabbed
[  550.157586][T19136] vivid-007: Tx RGB Quantization Range: Automatic grabbed
[  550.160553][T19136] vivid-007: Transmit Mode: HDMI grabbed
[  550.162789][T19136] vivid-007: Hotplug Present: 0x00000000
[  550.166452][T19136] vivid-007: RxSense Present: 0x00000000
[  550.168555][T19136] vivid-007: EDID Present: 0x00000000
[  550.170627][T19136] vivid-007: ==================  END STATUS  ==================
[  550.463891][T19150] loop0: detected capacity change from 0 to 8
[  550.475340][T19150] SQUASHFS error: xz decompression failed, data probably corrupt
[  550.477961][T19150] SQUASHFS error: Failed to read block 0x108: -5
[  550.480060][T19150] SQUASHFS error: Unable to read metadata cache entry [106]
[  550.482549][T19150] SQUASHFS error: Unable to read inode 0x11f
[  551.792523][T19177] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  552.187328][T19193] loop0: detected capacity change from 0 to 1024
[  552.261306][T19193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  552.339116][T19202] netlink: 212348 bytes leftover after parsing attributes in process `syz.9.5184'.
[  552.487574][T15462] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  563.716778][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  667.706296][    C0] ------------[ cut here ]------------
[  667.710859][    C0] 1
[  667.710875][    C0] WARNING: kernel/rcu/tree_stall.h:1049 at rcu_check_gp_start_stall+0x2e4/0x470, CPU#0: kworker/u9:0/26
[  667.715517][    C0] Modules linked in:
[  667.721666][    C0] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  667.725587][    C0] Tainted: [L]=SOFTLOCKUP
[  667.727095][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  667.730390][    C0] Workqueue: events_unbound toggle_allocation_gate
[  667.732580][    C0] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470
[  667.734865][    C0] Code: ff ff 48 c7 c7 c0 c5 2b 9a be 04 00 00 00 e8 93 ac 84 00 4c 89 f7 b8 01 00 00 00 87 05 e5 7e 80 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 00 41 76 8e 74 47 48 c7 c0 c0 e4 11 90 48 c1 e8
[  667.742103][    C0] RSP: 0018:ffffc90000007db8 EFLAGS: 00010046
[  667.744461][    C0] RAX: 0000000000000000 RBX: 0000000000000246 RCX: ffffffff81ab46cd
[  667.747362][    C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e764100
[  667.750017][    C0] RBP: ffffc90000007f28 R08: 0000000000000003 R09: 0000000000000004
[  667.752877][    C0] R10: dffffc0000000000 R11: fffffbfff34578b8 R12: 0000000000002904
[  667.755310][    C0] R13: dffffc0000000000 R14: ffffffff8e764100 R15: dffffc0000000000
[  667.757601][    C0] FS:  0000000000000000(0000) GS:ffff88818de5d000(0000) knlGS:0000000000000000
[  667.760179][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  667.762250][    C0] CR2: 00007f8109bea540 CR3: 000000000e54c000 CR4: 00000000000006f0
[  667.764662][    C0] Call Trace:
[  667.765805][    C0]  <IRQ>
[  667.766899][    C0]  rcu_core+0x3fe/0x1070
[  667.768352][    C0]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  667.770461][    C0]  ? __pfx_rcu_core+0x10/0x10
[  667.772243][    C0]  ? sched_clock_cpu+0x74/0x440
[  667.773756][    C0]  handle_softirqs+0x22a/0x870
[  667.775191][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  667.776665][    C0]  __irq_exit_rcu+0x5f/0x150
[  667.778236][    C0]  irq_exit_rcu+0x9/0x30
[  667.779700][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  667.781568][    C0]  </IRQ>
[  667.782720][    C0]  <TASK>
[  667.783877][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  667.786094][    C0] RIP: 0010:smp_call_function_many_cond+0xce5/0x12c0
[  667.788603][    C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b4 e6 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 5f e2 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 43 e2
[  667.796000][    C0] RSP: 0018:ffffc90000a17700 EFLAGS: 00000293
[  667.798374][    C0] RAX: ffffffff81b9bfed RBX: 1ffff110478c813d RCX: ffff8881032cd7c0
[  667.801395][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  667.804278][    C0] RBP: ffffc90000a17840 R08: ffffffff9011b1b7 R09: 1ffffffff2023636
[  667.806994][    C0] R10: dffffc0000000000 R11: fffffbfff2023637 R12: ffff88823c6409e8
[  667.809509][    C0] R13: dffffc0000000000 R14: ffff88812103c000 R15: 0000000000000001
[  667.812318][    C0]  ? smp_call_function_many_cond+0xcfd/0x12c0
[  667.814655][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  667.816604][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  667.818998][    C0]  ? kmem_cache_alloc_bulk_noprof+0xae/0x7e0
[  667.821236][    C0]  ? __pfx___text_poke+0x10/0x10
[  667.822961][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  667.824599][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  667.826339][    C0]  smp_text_poke_batch_finish+0x5f5/0x1160
[  667.828125][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  667.829713][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  667.831742][    C0]  ? arch_jump_label_transform_queue+0x97/0x110
[  667.834144][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  667.836538][    C0]  static_key_enable_cpuslocked+0x128/0x240
[  667.838845][    C0]  static_key_enable+0x1a/0x20
[  667.840394][    C0]  toggle_allocation_gate+0xab/0x290
[  667.842183][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  667.844402][    C0]  ? process_scheduled_works+0xa8d/0x18c0
[  667.846482][    C0]  ? process_scheduled_works+0xa8d/0x18c0
[  667.848256][    C0]  process_scheduled_works+0xb6e/0x18c0
[  667.849983][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  667.851819][    C0]  ? assign_work+0x3d5/0x5e0
[  667.853273][    C0]  worker_thread+0xa53/0xfc0
[  667.854753][    C0]  kthread+0x388/0x470
[  667.856037][    C0]  ? __pfx_worker_thread+0x10/0x10
[  667.857608][    C0]  ? __pfx_kthread+0x10/0x10
[  667.859015][    C0]  ret_from_fork+0x51e/0xb90
[  667.860421][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  667.861953][    C0]  ? __switch_to+0xc7d/0x1450
[  667.863398][    C0]  ? __pfx_kthread+0x10/0x10
[  667.864974][    C0]  ret_from_fork_asm+0x1a/0x30
[  667.866433][    C0]  </TASK>
[  667.867361][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  667.869470][    C0] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  667.872622][    C0] Tainted: [L]=SOFTLOCKUP
[  667.874117][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  667.877147][    C0] Workqueue: events_unbound toggle_allocation_gate
[  667.879175][    C0] Call Trace:
[  667.880286][    C0]  <IRQ>
[  667.881369][    C0]  vpanic+0x56c/0xa60
[  667.882891][    C0]  ? __pfx__printk+0x10/0x10
[  667.884701][    C0]  ? __pfx_vpanic+0x10/0x10
[  667.886126][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  667.887733][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  667.889435][    C0]  panic+0xc5/0xd0
[  667.890616][    C0]  ? __pfx_panic+0x10/0x10
[  667.891983][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  667.893517][    C0]  __warn+0x315/0x4f0
[  667.894937][    C0]  ? rcu_check_gp_start_stall+0x2e4/0x470
[  667.897052][    C0]  ? rcu_check_gp_start_stall+0x2e4/0x470
[  667.899043][    C0]  __report_bug+0x29a/0x540
[  667.900605][    C0]  ? rcu_check_gp_start_stall+0x2e4/0x470
[  667.902475][    C0]  ? __pfx___report_bug+0x10/0x10
[  667.904190][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  667.905781][    C0]  ? rcu_check_gp_start_stall+0x2e4/0x470
[  667.907517][    C0]  report_bug+0x16a/0x220
[  667.908934][    C0]  ? rcu_check_gp_start_stall+0x2e4/0x470
[  667.910690][    C0]  ? rcu_check_gp_start_stall+0x2e6/0x470
[  667.912400][    C0]  handle_bug+0x9c/0x200
[  667.913647][    C0]  exc_invalid_op+0x1a/0x50
[  667.915063][    C0]  asm_exc_invalid_op+0x1a/0x20
[  667.916548][    C0] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470
[  667.918488][    C0] Code: ff ff 48 c7 c7 c0 c5 2b 9a be 04 00 00 00 e8 93 ac 84 00 4c 89 f7 b8 01 00 00 00 87 05 e5 7e 80 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 00 41 76 8e 74 47 48 c7 c0 c0 e4 11 90 48 c1 e8
[  667.925924][    C0] RSP: 0018:ffffc90000007db8 EFLAGS: 00010046
[  667.928007][    C0] RAX: 0000000000000000 RBX: 0000000000000246 RCX: ffffffff81ab46cd
[  667.930621][    C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e764100
[  667.933189][    C0] RBP: ffffc90000007f28 R08: 0000000000000003 R09: 0000000000000004
[  667.935869][    C0] R10: dffffc0000000000 R11: fffffbfff34578b8 R12: 0000000000002904
[  667.938465][    C0] R13: dffffc0000000000 R14: ffffffff8e764100 R15: dffffc0000000000
[  667.940952][    C0]  ? rcu_check_gp_start_stall+0x2cd/0x470
[  667.942848][    C0]  ? rcu_check_gp_start_stall+0x2cd/0x470
[  667.944701][    C0]  rcu_core+0x3fe/0x1070
[  667.946023][    C0]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  667.947615][    C0]  ? __pfx_rcu_core+0x10/0x10
[  667.948924][    C0]  ? sched_clock_cpu+0x74/0x440
[  667.950343][    C0]  handle_softirqs+0x22a/0x870
[  667.951815][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  667.953310][    C0]  __irq_exit_rcu+0x5f/0x150
[  667.954723][    C0]  irq_exit_rcu+0x9/0x30
[  667.956011][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  667.957711][    C0]  </IRQ>
[  667.958617][    C0]  <TASK>
[  667.959528][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  667.961333][    C0] RIP: 0010:smp_call_function_many_cond+0xce5/0x12c0
[  667.963351][    C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b4 e6 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 5f e2 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 43 e2
[  667.969414][    C0] RSP: 0018:ffffc90000a17700 EFLAGS: 00000293
[  667.971242][    C0] RAX: ffffffff81b9bfed RBX: 1ffff110478c813d RCX: ffff8881032cd7c0
[  667.973635][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  667.976012][    C0] RBP: ffffc90000a17840 R08: ffffffff9011b1b7 R09: 1ffffffff2023636
[  667.978508][    C0] R10: dffffc0000000000 R11: fffffbfff2023637 R12: ffff88823c6409e8
[  667.981233][    C0] R13: dffffc0000000000 R14: ffff88812103c000 R15: 0000000000000001
[  667.983700][    C0]  ? smp_call_function_many_cond+0xcfd/0x12c0
[  667.985537][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  667.987461][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  667.989706][    C0]  ? kmem_cache_alloc_bulk_noprof+0xae/0x7e0
[  667.992041][    C0]  ? __pfx___text_poke+0x10/0x10
[  667.994212][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  667.996305][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  667.998367][    C0]  smp_text_poke_batch_finish+0x5f5/0x1160
[  668.000507][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  668.002599][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  668.005014][    C0]  ? arch_jump_label_transform_queue+0x97/0x110
[  668.007558][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  668.010013][    C0]  static_key_enable_cpuslocked+0x128/0x240
[  668.012413][    C0]  static_key_enable+0x1a/0x20
[  668.014400][    C0]  toggle_allocation_gate+0xab/0x290
[  668.016484][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  668.018765][    C0]  ? process_scheduled_works+0xa8d/0x18c0
[  668.020914][    C0]  ? process_scheduled_works+0xa8d/0x18c0
[  668.023111][    C0]  process_scheduled_works+0xb6e/0x18c0
[  668.025320][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  668.027641][    C0]  ? assign_work+0x3d5/0x5e0
[  668.029600][    C0]  worker_thread+0xa53/0xfc0
[  668.031546][    C0]  kthread+0x388/0x470
[  668.033173][    C0]  ? __pfx_worker_thread+0x10/0x10
[  668.035225][    C0]  ? __pfx_kthread+0x10/0x10
[  668.037049][    C0]  ret_from_fork+0x51e/0xb90
[  668.038879][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  668.040966][    C0]  ? __switch_to+0xc7d/0x1450
[  668.042846][    C0]  ? __pfx_kthread+0x10/0x10
[  668.044646][    C0]  ret_from_fork_asm+0x1a/0x30
[  668.046603][    C0]  </TASK>
[  669.181811][    C0] Shutting down cpus with NMI
[  669.184026][    C0] Kernel Offset: disabled
[  669.185449][    C0] Rebooting in 86400 seconds..
