last executing test programs:

9m10.683062966s ago: executing program 32 (id=2089):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4)
recvmmsg(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40010032, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0)

8m55.452255761s ago: executing program 3 (id=2218):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001000)=ANY=[@ANYBLOB="f00700001000010400"/20, @ANYBLOB="3f000000000000002c0012800b0001006970"], 0x7f0}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0)

8m55.322206372s ago: executing program 3 (id=2220):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200)=0xf, 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x38dd53c5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0xd9, &(0x7f0000000f80)=""/217, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)

8m55.183763344s ago: executing program 3 (id=2222):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r1, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff2abc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x310b869e}]}]}, 0x38}}, 0x0)

8m55.075798679s ago: executing program 3 (id=2224):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000022c0)=ANY=[], 0x2, 0xc36, &(0x7f0000002540)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

8m54.520592263s ago: executing program 3 (id=2227):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0806450000140000000001170000010203040506070800000c00020006002000080000000c0003000800170004"]}, 0x58}}, 0x0)

8m53.83362407s ago: executing program 3 (id=2232):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000004000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008800}, 0x2000c450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

8m53.61378794s ago: executing program 33 (id=2232):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000004000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008800}, 0x2000c450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

8m38.335859528s ago: executing program 4 (id=2372):
socket(0x400000000010, 0x3, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETVESABLANK(r0, 0x4bfb, 0x0)

8m38.335728085s ago: executing program 4 (id=2373):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002600)=@report={0x4c, 0x20, 0x1, 0x70bd2d, 0x25dfdbfb, {0x3c, {@in=@rand_addr=0x64010102, @in=@remote, 0x4e22, 0xfff, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x2f}}}, 0x4c}}, 0x0)

8m38.266270644s ago: executing program 4 (id=2375):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001d00010025bd7000cddbdf2507000000", @ANYRES32=r1, @ANYBLOB="820002080b0002"], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044050)

8m38.176209666s ago: executing program 4 (id=2377):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18509b, 0x0)
mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@block_validity}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@discard}, {@prjquota}]}, 0x1, 0x4a0, &(0x7f0000000b80)="$eJzs289rHGUfAPDvTH60ffsjefv2VVurRosQFJMmrdqDBxUFkYqCHiqeYrItodtGkii2FBtF6kWQgp6LR9G/wJsoop4Er3rxJIWivbT1IJGZnU02293GJptszH4+MNnnmXlm5vnu/HrmeTYBdKyB7E8SsSMifo6Ivkp2aYGBysf1q+fGb1w9N57E/PzLvyd5uWtXz41Xi1bX215kBtOI9P2k2MlSM2fOnhwrl0vTRX549tQbwzNnzj7y1qmxE6UTpdOjR44cPjTy+GOjj9atmSQriTOL69q+d6b2733u1YsvjB+7+Pr3X2Qb2lEsr42jVQaywP+Yz9Uve7DVO2uznTXppLuNFeG2dEVEdrh68uu/L7pi8eD1xbPvtbVywJrKnk1bmi+emwc2sSTaXQOgPaoP+uz9tzqtU9NjQ7jyVOUFKIv7ejFVlnRHWpTpqXu/baWBiDg29+elbIo16ocAAKj14fgnR3sj5vtufP581vboW1iSxh3556/5313FGEp/RPw3InZHxP8iYk9E/D8iL3tnRNy1yvrc3P5JL69yk7eUtf+eKMa2lrb/qq2/6O8qcjvz+HuS45Pl0sHiOxmMni1ZfuQW+/jqmZ8+arastv2XTdn+j6VxabFEerm7roNuYmx2LG+UtsCVdyP2dTeKP1kYCUgiYm9E7Lu9Te+qJiYf+mx/s0IN4y/awstqwTjT/KdZeHNZ/HNRF39VUjs+OXnT+OTw1iiXDg5Xz4qb/fDjhZea7b9p/Os0hnalVPmsOf71RfqTxS+jND1z+/u48MsHTd9plj/+Dc//tDd5JR9n7i3mvT02Ozs9EtGbHM3zS+aP9i6sW8kvls/O/8EDja//3cU6WfB3R0R2Et8TEfc+GXFfUff7I+KBiDhwi/i/e7r5smr8ka7g/G+BLP6Jhve/hfM/O/6L4/UrSHSd/PbLZvv/Z8f/cJ4aLObk979lNKpOdknVV3A13x0AAAD8W6T5b+CTdGghnaZDQ5Xf8O+J/6TlqZnZh49PvXl6ovJb+f7oSas9XX1Ff2h5slwaSeaKLVb6R0eLvuJqf+mhot/4465teX5ofKo80ebYodNtb3L9Z37ranftgDW2reHcmjETYBOrH2tOl2bPvxhuBrBZ+X9t6FxNrv/q7HQ96wKsr5U+/19rcT2A9dfo+j9flzcWAJuT93/oXK5/6FDp1+2uAdBGnv/QkVbzf/1rmNg6PfPNxq7hGiY2dMgR1US6TOG/5jdKnTsssSVasZ0235gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa5O8AAAD///B74xQ=")

8m37.991719415s ago: executing program 4 (id=2380):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206010200000000000000000000000014000780080006400000000308000840000000300500010006000000050005000a0000000900020073797a31000000000d000300686173683a6e657400000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

8m37.706882504s ago: executing program 4 (id=2382):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8m37.404095329s ago: executing program 34 (id=2382):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6m57.528359003s ago: executing program 2 (id=3416):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @adiantum, 0x0, '\x00', @auto="fc06d4cd1131a6f26983e371d4f64c42"})
chdir(0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x4}, 0xfe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = syz_clone(0x84008000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r6 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r6, 0x105, 0x10000839, r5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)

6m51.488294187s ago: executing program 2 (id=3419):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c)
listen(r0, 0x100)
r1 = dup(r0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000400)='%', 0x1}], 0x1, &(0x7f0000000280)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18}, 0x8050)

6m40.794330202s ago: executing program 1 (id=3427):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
close_range(r2, 0xffffffffffffffff, 0x0)

6m36.714237425s ago: executing program 2 (id=3428):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000000a0000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000400)="b9ff03318944268cb89904f086dd", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

6m35.536360855s ago: executing program 1 (id=3429):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0)

6m33.414194741s ago: executing program 2 (id=3432):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000260b0a0002000180c200000c00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010)

6m33.413927478s ago: executing program 1 (id=3433):
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, 0x3010})
syz_open_dev$dri(0x0, 0x1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x202200, 0x84)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000580)=0x41)
setns(0xc9, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x8864, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)

6m32.707939309s ago: executing program 2 (id=3434):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
preadv(r0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/99, 0x63}], 0x1, 0x0, 0xd)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)

6m32.607201462s ago: executing program 5 (id=3435):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a00010000000000000000001c14000000000000000000f707000100"], 0x24}}, 0x0)

6m32.397453529s ago: executing program 5 (id=3436):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)={0x10001, {{0xa, 0x4e22, 0x2, @mcast1, 0x2}}}, 0x90)

6m31.96609789s ago: executing program 1 (id=3437):
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$MEMERASE(r0, 0x40084d02, &(0x7f0000000000)={0x779, 0xe})

6m29.327343861s ago: executing program 5 (id=3438):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001a00)={r0, &(0x7f0000000440), 0x0}, 0x20)

6m28.612551338s ago: executing program 1 (id=3439):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000000280)=@udp=r0}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$cgroup_type(r3, &(0x7f0000000040), 0x9)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0)

6m26.862120611s ago: executing program 5 (id=3440):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001e80)={'syz1\x00', {0x6ec9, 0x4, 0x5, 0x5}, 0x33, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x3a, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0x6, 0x4, 0x3, 0x8, 0x7252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x8fdf, 0xc, 0x4, 0x2, 0x0, 0x8, 0x6, 0x1, 0x199d, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x0, 0xf7, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x985, 0x4, 0x100, 0x7fffffff, 0xfffffffc, 0xfffffffe, 0x0, 0x1000001, 0x12, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x7fc, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0xfffffffd, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x600, 0x5, 0x7, 0x6, 0x0, 0x1, 0xffffffff, 0x8, 0x6, 0x7, 0x80000003], [0x401, 0xc584, 0xffff, 0xcd7, 0x7, 0x20000020, 0x7, 0x4, 0x8, 0x437, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0xf5e, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x8, 0x47, 0x2, 0x1, 0x4, 0x7, 0x6d7e, 0x403, 0x4, 0x8004, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffe, 0x2005, 0x7, 0x2, 0xea, 0x7, 0x8, 0x2, 0xd9, 0xd, 0x7ff, 0x6, 0x5], [0x108e, 0x7fff, 0x3, 0x4, 0x88, 0x2, 0x9, 0x0, 0x50, 0xa, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7d, 0x5, 0x4, 0x4, 0x0, 0x5, 0x1e0, 0x2, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0xffffffff, 0x4, 0x4, 0x10, 0x0, 0x0, 0x8003, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, 0x0, 0x0)
write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0x50)
syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x1, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
getresgid(&(0x7f0000000300), &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000380))
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x102040, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[], [{@fowner_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, 'fuse\x00'}}, {@appraise_type}, {@flag='sync'}, {@audit}, {@dont_measure}]}})
io_setup(0x202, &(0x7f0000000200))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4c20, @remote}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, {0x2, 0x4ea0, @multicast2}})
getpeername(0xffffffffffffffff, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000400)=0x80)
r4 = syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0)
socket$inet6(0xa, 0x3, 0x6)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd8}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "804479", 0x14, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

6m26.288111709s ago: executing program 2 (id=3441):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
set_mempolicy(0x3, 0x0, 0x8)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

6m26.199093738s ago: executing program 1 (id=3442):
r0 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="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", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="96cb9dfd0c61d5ed863c5a35109d427201da53416c37631f95451a170fdb734214157996b04630903a7ad20aca669b5120871c47c6ef4e5975222b9676223895144ae5c2898ba0e94642e43e374bf9515c7e840e62021f25181401bda4c4d2d77867390c0a05af019adabfe896d7824f0dcb1724c64da40478808059ea83fa60145e108809ca25edf6ab820f23a5ce2b1779aa8c037a26d99df56f39ff5beca1c1e0cbfd69e415971a02f5115f6da0ba6da9be9772efa870aa6b62774ce009e7bcca4b4a7a910aab97e7f3da899eaaf573ac8a926a7be9b5875b3bb707ae9124ead39e70948bcf654b6b4342043f756323494e4ec559866c5a480c3b156c0427f1cc1d373b77424ea38e3697e36dcefd261575e5516bfcedc7baa8cbebed0ce49dd27e6291dd6f968eaf37f13313ba0bd22b6a63496be04a42df10fef87386434103b5ef819a969e8792a7765dc52c310fbe89851eaf8b2eabcf27bd487f817d48a54b0c7e8b151f0941a6f4adcf6a4486f96f8d18a2928829db333ec08bffe029f4840fdc0433d75157e80b33c3041f193e5c3fb1b7c13d1d7d7a8fe3122ddef181a6534232731c8f91dae42d9a66b9c2e0c6de6da74c24752b53d344b3c9a48ed62705c3e93f7e346c0379a6ec672b3a73dcfc159a79a77bd7b9edd013e3e9832d4dca6f9f973d63d5d235c7e22822e012e4181e102e68b03bdec323db739968061a7ba6fcf9589bd2975520fe9f1b44e52489bf5f5b0125b14bc894f4ff1ad2ba817dad6ab1654a2cacce1cc5160ea4bf3d7011cbf16ad0389b6511448c4186da0a7a55be54031a6d2773ac33aab5d533e7bb213309193f2ca3970e8fffc2fdacbc96e6f49c116b0505385a8bf282589be6b844e2aaaa652459b5d021127f59009020d34932cd03fbe5fea45bdc1f68463c4afe2b5ea8f97dee5e2e6b58196aff00e5ca51a0087f02bcb1dbdd638a5c7590095561578c30904f7ea80072de21fcedd0e41da8e7fe3514eaabc603d770a6fbed5367edb7feb5c5edfda04c7b8a4bfce5c73b876f52fde7dc929f3ffa632eb9514596793533d20fd191b484e902ab104dfc34a8486ba64d3e31c495e043279d8d6b4e6ca3c3fd4ae43529e55be690309e1bc90af2e9188cd5673eea73c75d4decf8972039c086e4b47caee900e1422fd2fbe0303dd5147a9fa487a7b08ad529d0d3db2bae4b26a83de0b15b9b82f26b23336481aca875c48605dc8d25d872920d01e2e163cc13d1f026666f8f54d6fe7895b47939599d168dc98a2de4aac463d98cb39375ac13fadd722b9f1e221d35bde594c9e53aa0f34b235a9d68d8f4841f9455804cd8a7bf05315c5bab2fa8820e956a8161cdd685fc4e1344f9d89189057376a5d1c23273d475aaa72ccbf4b5d8f2863f3f0fe7c0f8b001c065bae68aad9d8878a5edcd8dcbeec07d317c0a81fc84b8b208c60db73c6cf86d46cac98a7df449581d74be7991f1fa6924b76a2d6077aacca10fc777f0d09c5420cfc38c4638957086c9a2065ce94a286da01527bd8b8fd5830f93bcab97a4d0ca13c55b4ee32a49e078b4d79e7b17200fb6a550cfcccd33c681e37bc83c7fcda081a67c2a828e65a75df33e587a05f75fe05aef4078b3482c9078e2edb63c74134f92461044871e4a71f40228d156cbb3beb53eb898e0b6ade2d486a7111ce074510ad957f0eeae0812dd3802db231d9a15948a6b133167eb51dde0199023dfb3471661c7f13f14e786278c551d60929ef969b15d4ea544a9cda830183052ca1072083fb304502f38bcfd46ef64091a2a64bacc55ff3e91f8a7a97f69a9524bdaa60c14d75ddb44e399158c603cded78f42b79a6e9b9c30575289a92558f4d1d9cbb35780c86462cb56d5b474901c17df6ccba95481c004c384b17f99fb29458c9c59666c5305c508561e654d5f1b8ed375231358828b73b487c5f3096211f863375333bb1d3970f7c4cbc7b0f122dbb330b24498f38d804ec0e9c8a5976578bfbc2e46e8d898ec08b3742d5f9ba03d56567f6541f075c4f45eec94a6af78065689e8851294c48f02d48b1266586db86266bd2d0cbb729b567ed7643edf6849f50ca7a28b4ef59433ff22ce0680ffb3348a458ff77b6a796e849cb456df4b443d625d423d10e21bf0bcc785a243cf70ed2ea7c52548cd366ad9af486a4a0171f21ee9d961aa808a69a066aeb0c605fe7a83291ba942df3d11ba1e12da7381d7af20ccbd0de5416ef389c65d1fd0ff209dce808c490707a371b317ce65765082d1c5f67846ddfa65f291117d6e5a795ac2961d56eb24060d8b160d5bd146cd61589c00a108a1dba9e8730157e403cc35b0cd64b3aa66eada80be3bbb974d4642aa76bdf87c2d63134af1c646b1f0bfd218d4e4ebd277ad1cfc9b6f20c4036c6a511cb1ce486c3a563ca9368b10bed088bcfcdab752e0c78a10e550544ee6250d3908e3e7b09b2119f94abc2fdf43d7c82a4ffce81a3f962124ace1108443f41202c6d055d37e99b4eb6287c485acabff03f3a115db1ec790fdc5436e97bf2443c2f707ffb513f6d6494812b2238d679c8787a854ec92126bdc4681803ed4a5b84590e4f00ce956c6c3394773303b0620d118d2290cb229ea3b9bb9de8d719a0f92a50d34909a363f5f6ff906326f917be78c914c78846ef30c9b107b26c0a55401ceabf5b3c669eaa7a1a36d97b01d5da410366e3da5d232fb711d26afd9d4a5016425e47c0ec9b6305673af4cb46526af752011793c322797fb706042da364b6e723b513fd73db6721b00bd80e0923fe075300951d4dfefdd029c3fed21b734bf102f96d58b50bf4edcad014670c2d93eeb4d7bda3d1b70d9e21262c644bb96855895e4c0b32c9ed599d940ac24814b69812c124648428e13d7f72d74feb30288eb78b4a99fadc96589d8a9c7047787aa802514ba28af4d5520ac50928cd75ca92e2934a2e126456bfe1587003e87d9428b1fdb6b7662c44a5fee9d537b7f43822e5b103aeece1aa603215c215de2873e3a6b327c5ed0a0190fb7645034e1839ad165f3f7f80fd793734ac1412bbe20d82aea543792047ba5c5b37ee11988cd7e71cd43547e13c6bbc1ce3cf6aff9727381f06feb83b23b694724d9259d3736eba6ee66ee73a224b8a978debbbc35f8e28cc8267646e5c8cd8076d2044d41eadce01738ab2c7dc763de5a8042b957680223c4d9fdbf65d17e8998444e8db36c50fbe3c9a83e506661a029c4538617d46b6a43675c6dcf283a45b99e44188fd2681a50747e819e7f37496207ec448670fe62a3cb94712abeafb5dd2690ec12b18f8d67d5b0db41a897124f8b94695501aba517447338034bf14d0f99cbf5518aa013e1f35a052b4d27d1247349ff7a83362444372f017fcbdfe972b91c46a0a57f4639204673341ae92bc2dbf2b8d1680b432552850964eb1e14f38995e7e404b1bd1bf63d8d58c7b4ec38e3b9e73959e6509ad9f67d684f62759f5cae90bf8c1781b5800922c312aa634e5748b6181fc37df267eb5c66afc0c9249f9f601136c78d817beddf308c6970ee0e8221abe6fa124f55de7e5e78398004095a175f58cc270840e8c6759627f139e4f9b3b362e2700c5d06da66e862d1016c9f89d18646a6bb823f992342433b03397ed7586f489824a1495d707c81d3885029a47845802ef97856e530789a5cb7239752c6509cdd094212cb4b1b8baa7416cf5000db59418ad7f7a0d7d8e4cb8ebbbe4c40ba0ccc25283b9c933e251fff9871fc01026fafd8eed7ddcbe454b79339be93cd4b25a55af449f5c0893a957c5468c9147a973478c834ac4ecfea339cf3", 0xa9b}], 0x7}}], 0x300, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)

6m24.223749187s ago: executing program 5 (id=3443):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="1000000000000000b37884c2098785bf"], 0x10)

6m20.376684819s ago: executing program 5 (id=3444):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
kexec_load(0x20000000, 0x0, &(0x7f0000000900), 0x2a0000)
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)={[{}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f00000002c0)=""/48, 0x30)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
getdents64(r3, 0xfffffffffffffffe, 0x29)

6m9.175144514s ago: executing program 35 (id=3442):
r0 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="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", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)

6m5.179974322s ago: executing program 36 (id=3441):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
set_mempolicy(0x3, 0x0, 0x8)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

6m3.949822911s ago: executing program 37 (id=3444):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
kexec_load(0x20000000, 0x0, &(0x7f0000000900), 0x2a0000)
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)={[{}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$eJzKKC4sZmJgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUeOpqaRinJCQ2bJBKS3AoMlRm27uFcLdDAgBRtKgwMDNsZYXELAddgjFEwCkbBKBgFo2AUjIJRMApGwSgYBSMCAAIAAP//8JWYxg==")
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f00000002c0)=""/48, 0x30)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
getdents64(r3, 0xfffffffffffffffe, 0x29)

2m40.547924424s ago: executing program 8 (id=3516):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000200)={0x3, {{0x2, 0x4e23, @multicast2}}}, 0x88)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

2m40.401848229s ago: executing program 8 (id=3518):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x10a0, 0x1, 0x0, 0x6, 0x0, 0xe17}, 0x20)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r0, 0x8b32, &(0x7f0000000040))

2m40.342460433s ago: executing program 8 (id=3520):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00010028bd7000fddbdf2500000000", @ANYBLOB="04"], 0x1c}}, 0x20000000)

2m40.34229568s ago: executing program 8 (id=3521):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x81900)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
open_tree(r2, &(0x7f0000000640)='\x00', 0x89901)

2m39.432548745s ago: executing program 8 (id=3524):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
recvmmsg$unix(r0, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004840)=""/215, 0xd7}, {&(0x7f0000000700)=""/239, 0xef}, {&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f00000005c0)=""/177, 0xb1}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/230, 0xe6}, {&(0x7f00000004c0)=""/215, 0xd7}], 0x7}}, {{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000000080)=""/8, 0x8}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000980)=""/212, 0xd4}, {&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f0000001ac0)=""/161, 0xa1}, {&(0x7f0000001b80)=""/72, 0x48}], 0x6, &(0x7f0000001c80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x2, 0x0, 0x0)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)

2m39.161673656s ago: executing program 8 (id=3525):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
lseek(r0, 0xf800100000000000, 0x4)

2m38.97465679s ago: executing program 38 (id=3525):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
lseek(r0, 0xf800100000000000, 0x4)

1m54.33975836s ago: executing program 6 (id=3974):
r0 = socket(0xa, 0x802, 0x0)
setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x2, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xa, @mcast1, 0x6}, 0x1c)

1m54.231908063s ago: executing program 6 (id=3976):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c616773000702", 0x2c)

1m54.131406413s ago: executing program 6 (id=3978):
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x4800, 0x0)

1m52.55582677s ago: executing program 6 (id=3994):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/filecache\x00', 0x2, 0x80)
r1 = socket$netlink(0x10, 0x3, 0xb)
capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4)
read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020)

1m52.388256119s ago: executing program 6 (id=3998):
ioprio_set$pid(0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4)
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './mnt\x00'})

1m51.39194702s ago: executing program 6 (id=4012):
rt_sigpending(&(0x7f00000002c0), 0x2c)

1m36.273939952s ago: executing program 39 (id=4012):
rt_sigpending(&(0x7f00000002c0), 0x2c)

2.008848084s ago: executing program 0 (id=5035):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

2.008586496s ago: executing program 9 (id=5036):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4)

1.949595481s ago: executing program 9 (id=5037):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x101891c, &(0x7f00000004c0)={[{@noload}, {@noblock_validity}, {@mblk_io_submit}, {@noinit_itable}, {@noinit_itable}, {@grpjquota}, {@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@barrier_val={'barrier', 0x3d, 0x7ff}, 0x32}]}, 0x1, 0x4e7, &(0x7f0000000580)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x100f1, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f00000000c0))
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140))

1.494548176s ago: executing program 9 (id=5042):
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x40, &(0x7f00000043c0)=ANY=[], 0x1, 0x1a1, &(0x7f0000000a80)="$eJzs0L9rE2Ecx/H397knv4SqUXGoYAMWzwuV3l3VwSk4RciBQxfBoKE9m+JFTS+DLS24SEGq/Rd0qqMKOokoOFcHwUHPpZs0QnFw0kiSi+Df4PMa7nPfD9w9D99m3I5zwK+91TkqDFjs5wOCBiZk2Ck1zJfp/C3NzWFwIZ030nyS5ni8vHKjEUXhUul8ieI/BfBj0P2t4mccVXSFCvJpb3WuIdcCehVaaj6gWKP8AKtO23nIuB7jyFUsevYGFxVtsWtwYLrTuj0dL6+cXmw1FsKF8Kbvz5xzz7ju2d/fIQrdF4hzXxSPWMMJyAUUnDUyde5t631MCeI0VWJJuUu2zua2derEVBfl7NKjwBu7S+6LbpbULCfJX+lfvsph4TFWwGSNgkJzfTEK3SpyST0XT3/UPzOz74GDcCuaX7+s8mS3KrKbF2+HjO3hlz1m+qvhEG9ZT5hMqCZsJex8ZUJe9U8Z7VXf7T+fptMxjkOWO41OZ8nLwjvRAb4d4BdhbPA7NbhXEV6n36TB59GLYRiGYRiGYRiG8R/4EwAA//98f2PZ")

1.366336956s ago: executing program 9 (id=5044):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x129801, 0x0)
writev(r0, &(0x7f0000001900)=[{&(0x7f0000000440)="a5c38d53532d3ddd5f3619c56987790d69d3fafa5228049c67e981e4872e2eca6d73d72261f7fe6b34aade567e4b943479f5fb8c06c5e6b0af983e90", 0x3c}, {0x0}], 0x2)

1.27894539s ago: executing program 9 (id=5046):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000640)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@resgid}, {@noblock_validity}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@abort}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0)

1.039571379s ago: executing program 0 (id=5048):
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140b, 0x101, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4)
setns(0xc9, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00\b\b'], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4)

949.743592ms ago: executing program 0 (id=5050):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x83, @none}, 0xe)

863.696925ms ago: executing program 0 (id=5052):
syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x149, &(0x7f0000000240)="$eJzs0DFLAnEYx/HfdSYSFpENFmRCQ5KY54k5SVgoCdlRIUGToBcFipFQNxrR1hC03mAJTeJrqGixPAh7HW5BY/HXjhxa2n+f4Tn43sNzcAErkQL8ACCLsV4pH5/o1ape9O9o2fTuqm/KwoATgOv3/SAmH8Q8FMNz3hOPItxA/OCopC8XKiWxluz3AFxASHQFwGB3TLRt0SJ2W+jv7Ymm/tGidnPMipaw791+iXuLoqXsewA+DDPYar5sddqZ0NL9nIzLTHAekDzD3adfqemZhtsrI6c/3wGQ1gzzPdwOvYVbza7VyW5qWc2KqupKVIkoSqyrvXYysdo1HBvuU/EZaX/4nhNenyPX7xeAdGOYvUdpHMBT/VMrT8TrPz+0dib7AckwC3nvaCM/PTkCOQAJRERERERERERERERERERE//UdAAD//yMzYdU=")

862.353042ms ago: executing program 9 (id=5053):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000180)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0))

767.95523ms ago: executing program 0 (id=5055):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0xe1}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2031}, 0x0)

349.611724ms ago: executing program 7 (id=5060):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000fcffffff00000000800000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007ea000085000000060000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40081}, 0x50)

276.474349ms ago: executing program 7 (id=5061):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r0, &(0x7f0000003c40), 0x12)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r1, &(0x7f0000005940), 0x12)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

200.488615ms ago: executing program 7 (id=5062):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x100, 0x0)

140.040894ms ago: executing program 7 (id=5063):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)='8', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x723e, 0x8}, 0x90)

79.87331ms ago: executing program 7 (id=5064):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
capset(&(0x7f00000006c0)={0x20080522}, &(0x7f0000000040)={0x200000, 0x41200003, 0x0, 0x6, 0x2040007, 0x9})
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

158.127µs ago: executing program 7 (id=5065):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff)
mkdir(0x0, 0x1ff)
mkdir(0x0, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff)

0s ago: executing program 0 (id=5066):
setgid(0x0)

kernel console output (not intermixed with test programs):

 Remounting filesystem read-only
[  676.641943][T16083] EXT4-fs (loop6): 1 orphan inode deleted
[  676.647635][T16083] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  676.677470][T14465] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  676.921970][T16093] loop6: detected capacity change from 0 to 1024
[  676.953297][T16093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  676.991409][   T36] audit: type=1800 audit(1788964219.633:3729): pid=16093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3938" name="file1" dev="loop6" ino=15 res=0 errno=0
[  677.045510][T14465] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  677.159767][T14492] pegasus 10-1:1.0: can't reset MAC
[  677.159915][T14492] pegasus 10-1:1.0: probe with driver pegasus failed with error -5
[  677.162474][T14492] usb 10-1: USB disconnect, device number 9
[  677.422908][  T730] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  677.572869][  T730] usb 7-1: Using ep0 maxpacket: 8
[  677.578031][  T730] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  677.582270][  T730] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  677.586886][  T730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.591270][  T730] usb 7-1: config 0 descriptor??
[  677.811240][  T730] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  677.883518][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3946'.
[  678.064302][T14492] usb 7-1: USB disconnect, device number 9
[  678.116362][T16117] loop9: detected capacity change from 0 to 32768
[  678.138733][T16117] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  678.152013][T16117] XFS (loop9): Ending clean mount
[  678.177307][   T36] audit: type=1800 audit(1788964220.823:3730): pid=16117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3948" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=4425 res=0 errno=0
[  678.217385][T14984] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  678.752463][T16145] loop6: detected capacity change from 0 to 128
[  678.768394][T16145] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  678.768511][T16145] System zones: 1-3, 19-19, 35-36
[  678.778382][T16145] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  678.783807][T16145] ext4 filesystem being mounted at /238/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  678.855458][T14465] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  678.964126][T16154] loop6: detected capacity change from 0 to 8
[  680.038877][T14274] Bluetooth: hci2: Invalid connection link type handle 0x00c8
[  680.140775][T16173] FAULT_INJECTION: forcing a failure.
[  680.140775][T16173] name fail_futex, interval 1, probability 0, space 0, times 0
[  680.145604][T16173] CPU: 0 UID: 0 PID: 16173 Comm: syz.6.3970 Not tainted syzkaller #0 PREEMPT(full) 
[  680.145633][T16173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  680.145640][T16173] Call Trace:
[  680.145644][T16173]  <TASK>
[  680.145648][T16173]  dump_stack_lvl+0xe8/0x150
[  680.145665][T16173]  should_fail_ex+0x410/0x560
[  680.145677][T16173]  get_futex_key+0x8e2/0x1580
[  680.145690][T16173]  ? __pfx_get_futex_key+0x10/0x10
[  680.145698][T16173]  ? futex_unqueue+0x22/0x240
[  680.145706][T16173]  ? futex_unqueue+0x22/0x240
[  680.145713][T16173]  ? futex_unqueue+0x22/0x240
[  680.145725][T16173]  futex_requeue+0x246/0x1c40
[  680.145738][T16173]  ? __pfx___futex_wait+0x10/0x10
[  680.145754][T16173]  ? __pfx_futex_requeue+0x10/0x10
[  680.145765][T16173]  ? futex_hash+0x4e/0x2b0
[  680.145773][T16173]  ? futex_hash+0x275/0x2b0
[  680.145790][T16173]  ? __pfx___sys_bpf+0x10/0x10
[  680.145800][T16173]  do_futex+0x41b/0x4e0
[  680.145812][T16173]  ? __pfx_do_futex+0x10/0x10
[  680.145825][T16173]  __se_sys_futex+0x3a8/0x450
[  680.145836][T16173]  ? ksys_write+0x242/0x270
[  680.145843][T16173]  ? __pfx___se_sys_futex+0x10/0x10
[  680.145852][T16173]  ? rcu_is_watching+0x16/0xb0
[  680.145863][T16173]  ? __x64_sys_futex+0x21/0xf0
[  680.145873][T16173]  do_syscall_64+0x166/0x520
[  680.145881][T16173]  ? trace_irq_disable+0x3b/0x140
[  680.145889][T16173]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.145898][T16173]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.145906][T16173] RIP: 0033:0x7f049b39e159
[  680.145914][T16173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  680.145921][T16173] RSP: 002b:00007f049c19f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  680.145931][T16173] RAX: ffffffffffffffda RBX: 00007f049b625fa0 RCX: 00007f049b39e159
[  680.145937][T16173] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000
[  680.145943][T16173] RBP: 00007f049b435024 R08: 0000000000000000 R09: 0000000000000001
[  680.145948][T16173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  680.145953][T16173] R13: 00007f049b626038 R14: 00007f049b625fa0 R15: 00007ffd477ecda8
[  680.145971][T16173]  </TASK>
[  681.175652][T16180] loop9: detected capacity change from 0 to 4096
[  681.210994][T16180] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  681.246601][T16180] ntfs3(loop9): Failed to load $Extend (-22).
[  681.248706][T16180] ntfs3(loop9): Failed to initialize $Extend.
[  681.280589][T16180] ntfs3(loop9): ino=5, "/" indx_read_ra
[  681.302896][   T36] audit: type=1400 audit(1788964223.943:3731): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=16186 comm="syz.6.3976" name="p" offset=43
[  681.511709][T16196] IPVS: Unknown mcast interface: batadv0
[  681.618014][T16202] loop9: detected capacity change from 0 to 8
[  681.623276][  T730] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  682.059376][T16206] loop9: detected capacity change from 0 to 131072
[  682.060070][T16206] xfs: Deprecated parameter 'ikeep'
[  682.060106][T16206] XFS: ikeep mount option is deprecated.
[  682.083377][  T730] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  682.087713][  T730] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  682.087756][  T730] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  682.087823][  T730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.121655][T16206] XFS (loop9): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  682.176338][T16206] XFS (loop9): Starting recovery (logdev: internal)
[  682.206327][T16217] 9p: Bad value for 'wfdno'
[  682.219374][T16206] XFS (loop9): Ending recovery (logdev: internal)
[  682.268377][T14984] XFS (loop9): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  682.367708][T14492] usb 7-1: USB disconnect, device number 10
[  682.739549][T16230] loop7: detected capacity change from 0 to 512
[  682.761379][T16230] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  682.767382][T16230] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  682.846386][T16234] EXT4-fs error (device loop7): ext4_empty_dir:3084: inode #12: comm syz.7.3992: invalid size
[  682.909368][T16236] ieee802154 phy0 wpan0: encryption failed: -22
[  682.912117][T14530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  683.040056][T16240] bridge1: entered promiscuous mode
[  683.040099][T16240] bridge1: entered allmulticast mode
[  683.360328][T16258] Cannot find add_set index 0 as target
[  683.412575][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4004'.
[  683.417164][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4004'.
[  683.556419][T16266] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4007'.
[  683.789160][T16274] FAULT_INJECTION: forcing a failure.
[  683.789160][T16274] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  683.794987][T16274] CPU: 0 UID: 0 PID: 16274 Comm: syz.9.4011 Not tainted syzkaller #0 PREEMPT(full) 
[  683.795034][T16274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  683.795041][T16274] Call Trace:
[  683.795046][T16274]  <TASK>
[  683.795050][T16274]  dump_stack_lvl+0xe8/0x150
[  683.795067][T16274]  should_fail_ex+0x410/0x560
[  683.795079][T16274]  prepare_alloc_pages+0x223/0x600
[  683.795091][T16274]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  683.795102][T16274]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  683.795111][T16274]  ? __alloc_frozen_pages_noprof+0x29e/0x5a0
[  683.795122][T16274]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  683.795135][T16274]  __alloc_pages_noprof+0x10/0x100
[  683.795145][T16274]  alloc_pages_bulk_noprof+0x5fa/0x7c0
[  683.795157][T16274]  ? alloc_pages_noprof+0x140/0x2b0
[  683.795170][T16274]  __kasan_populate_vmalloc+0xb7/0x1c0
[  683.795182][T16274]  alloc_vmap_area+0xd1a/0x1420
[  683.795199][T16274]  ? __pfx_alloc_vmap_area+0x10/0x10
[  683.795209][T16274]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[  683.795218][T16274]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  683.795225][T16274]  ? __get_vm_area_node+0x155/0x2f0
[  683.795238][T16274]  __get_vm_area_node+0x200/0x2f0
[  683.795251][T16274]  __vmalloc_node_range_noprof+0x36e/0x16f0
[  683.795262][T16274]  ? dvb_dvr_open+0x1cc/0x5c0
[  683.795275][T16274]  ? rcu_is_watching+0x16/0xb0
[  683.795284][T16274]  ? trace_contention_end+0x3d/0x140
[  683.795294][T16274]  ? __mutex_lock+0x30b/0x1550
[  683.795304][T16274]  ? __lock_acquire+0x6df/0x2e50
[  683.795313][T16274]  ? dvb_dvr_open+0x8f/0x5c0
[  683.795325][T16274]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  683.795336][T16274]  ? lock_acquire+0x115/0x350
[  683.795345][T16274]  ? dvb_dvr_open+0x1cc/0x5c0
[  683.795356][T16274]  vmalloc_noprof+0xb2/0xe0
[  683.795368][T16274]  ? dvb_dvr_open+0x1cc/0x5c0
[  683.795379][T16274]  dvb_dvr_open+0x1cc/0x5c0
[  683.795389][T16274]  ? __pfx_dvb_dvr_open+0x10/0x10
[  683.795400][T16274]  dvb_device_open+0x24f/0x340
[  683.795412][T16274]  chrdev_open+0x4d9/0x600
[  683.795422][T16274]  ? __pfx_chrdev_open+0x10/0x10
[  683.795433][T16274]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  683.795444][T16274]  ? __pfx_chrdev_open+0x10/0x10
[  683.795452][T16274]  do_dentry_open+0x816/0x1380
[  683.795467][T16274]  vfs_open+0x3b/0x340
[  683.795475][T16274]  ? path_openat+0x1428/0x1d60
[  683.795484][T16274]  path_openat+0x1443/0x1d60
[  683.795500][T16274]  do_file_open+0x23e/0x4a0
[  683.795515][T16274]  ? __pfx_do_file_open+0x10/0x10
[  683.795532][T16274]  ? _raw_spin_unlock+0x28/0x50
[  683.795542][T16274]  ? alloc_fd+0x651/0x6c0
[  683.795556][T16274]  do_sys_openat2+0x115/0x200
[  683.795568][T16274]  ? __pfx_do_sys_openat2+0x10/0x10
[  683.795579][T16274]  ? exc_page_fault+0x6a/0xc0
[  683.795592][T16274]  ? do_user_addr_fault+0xc4c/0x1340
[  683.795602][T16274]  __x64_sys_openat+0x138/0x170
[  683.795614][T16274]  do_syscall_64+0x166/0x520
[  683.795622][T16274]  ? trace_irq_disable+0x3b/0x140
[  683.795629][T16274]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.795639][T16274]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.795647][T16274] RIP: 0033:0x7feb8835e98e
[  683.795656][T16274] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  683.795662][T16274] RSP: 002b:00007feb89197b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  683.795672][T16274] RAX: ffffffffffffffda RBX: 00007feb891986c0 RCX: 00007feb8835e98e
[  683.795677][T16274] RDX: 0000000000000100 RSI: 00007feb89197c00 RDI: ffffffffffffff9c
[  683.795683][T16274] RBP: 00007feb89197c00 R08: 0000000000000000 R09: 0000000000000000
[  683.795688][T16274] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  683.795693][T16274] R13: 00007feb88626038 R14: 00007feb88625fa0 R15: 00007ffc8f2e5858
[  683.795705][T16274]  </TASK>
[  684.077793][T16274] syz.9.4011: vmalloc error: size 1925120, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz9,mems_allowed=0-1
[  684.092132][T16274] CPU: 0 UID: 0 PID: 16274 Comm: syz.9.4011 Not tainted syzkaller #0 PREEMPT(full) 
[  684.092161][T16274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  684.092169][T16274] Call Trace:
[  684.092174][T16274]  <TASK>
[  684.092179][T16274]  dump_stack_lvl+0xe8/0x150
[  684.092202][T16274]  warn_alloc+0x24d/0x270
[  684.092216][T16274]  ? lockdep_hardirqs_on+0x7b/0x110
[  684.092239][T16274]  ? __pfx_warn_alloc+0x10/0x10
[  684.092251][T16274]  ? kfree+0x1c5/0x650
[  684.092274][T16274]  ? __get_vm_area_node+0x219/0x2f0
[  684.092297][T16274]  __vmalloc_node_range_noprof+0x396/0x16f0
[  684.092320][T16274]  ? rcu_is_watching+0x16/0xb0
[  684.092335][T16274]  ? trace_contention_end+0x3d/0x140
[  684.092347][T16274]  ? __mutex_lock+0x30b/0x1550
[  684.092356][T16274]  ? __lock_acquire+0x6df/0x2e50
[  684.092366][T16274]  ? dvb_dvr_open+0x8f/0x5c0
[  684.092380][T16274]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  684.092391][T16274]  ? lock_acquire+0x115/0x350
[  684.092402][T16274]  ? dvb_dvr_open+0x1cc/0x5c0
[  684.092412][T16274]  vmalloc_noprof+0xb2/0xe0
[  684.092425][T16274]  ? dvb_dvr_open+0x1cc/0x5c0
[  684.092437][T16274]  dvb_dvr_open+0x1cc/0x5c0
[  684.092448][T16274]  ? __pfx_dvb_dvr_open+0x10/0x10
[  684.092459][T16274]  dvb_device_open+0x24f/0x340
[  684.092471][T16274]  chrdev_open+0x4d9/0x600
[  684.092481][T16274]  ? __pfx_chrdev_open+0x10/0x10
[  684.092490][T16274]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  684.092510][T16274]  ? __pfx_chrdev_open+0x10/0x10
[  684.092520][T16274]  do_dentry_open+0x816/0x1380
[  684.092535][T16274]  vfs_open+0x3b/0x340
[  684.092545][T16274]  ? path_openat+0x1428/0x1d60
[  684.092555][T16274]  path_openat+0x1443/0x1d60
[  684.092572][T16274]  do_file_open+0x23e/0x4a0
[  684.092582][T16274]  ? __pfx_do_file_open+0x10/0x10
[  684.092599][T16274]  ? _raw_spin_unlock+0x28/0x50
[  684.092610][T16274]  ? alloc_fd+0x651/0x6c0
[  684.092625][T16274]  do_sys_openat2+0x115/0x200
[  684.092637][T16274]  ? __pfx_do_sys_openat2+0x10/0x10
[  684.092647][T16274]  ? exc_page_fault+0x6a/0xc0
[  684.092660][T16274]  ? do_user_addr_fault+0xc4c/0x1340
[  684.092669][T16274]  __x64_sys_openat+0x138/0x170
[  684.092681][T16274]  do_syscall_64+0x166/0x520
[  684.092705][T16274]  ? trace_irq_disable+0x3b/0x140
[  684.092716][T16274]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.092727][T16274]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.092735][T16274] RIP: 0033:0x7feb8835e98e
[  684.092744][T16274] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  684.092752][T16274] RSP: 002b:00007feb89197b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  684.092762][T16274] RAX: ffffffffffffffda RBX: 00007feb891986c0 RCX: 00007feb8835e98e
[  684.092769][T16274] RDX: 0000000000000100 RSI: 00007feb89197c00 RDI: ffffffffffffff9c
[  684.092775][T16274] RBP: 00007feb89197c00 R08: 0000000000000000 R09: 0000000000000000
[  684.092780][T16274] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  684.092786][T16274] R13: 00007feb88626038 R14: 00007feb88625fa0 R15: 00007ffc8f2e5858
[  684.092799][T16274]  </TASK>
[  684.209925][T16274] Mem-Info:
[  684.211124][T16274] active_anon:31160 inactive_anon:8 isolated_anon:0
[  684.211124][T16274]  active_file:12 inactive_file:57123 isolated_file:0
[  684.211124][T16274]  unevictable:1000 dirty:448 writeback:0
[  684.211124][T16274]  slab_reclaimable:7012 slab_unreclaimable:87329
[  684.211124][T16274]  mapped:22053 shmem:21286 pagetables:1847
[  684.211124][T16274]  sec_pagetables:0 bounce:0
[  684.211124][T16274]  kernel_misc_reclaimable:0
[  684.211124][T16274]  free:1069844 free_pcp:33233 free_cma:0
[  684.226073][T16274] Node 0 active_anon:116064kB inactive_anon:32kB active_file:48kB inactive_file:169296kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:81412kB dirty:172kB writeback:0kB shmem:82132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8068kB pagetables:6384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  684.236718][T16274] Node 1 active_anon:8576kB inactive_anon:0kB active_file:0kB inactive_file:59196kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:6800kB dirty:1620kB writeback:0kB shmem:3012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5568kB pagetables:1004kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  684.236743][T16274] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  684.236768][T16274] lowmem_reserve[]: 0 1581 2111 2111 2111
[  684.236784][T16274] Node 0 DMA32 free:1099352kB boost:0kB min:24948kB low:31184kB high:37420kB reserved_highatomic:0kB free_highatomic:0kB active_anon:99536kB inactive_anon:32kB active_file:16kB inactive_file:16884kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1619432kB mlocked:0kB bounce:0kB free_pcp:55016kB local_pcp:55016kB free_cma:0kB
[  684.236808][T16274] lowmem_reserve[]: 0 0 529 529 529
[  684.236823][T16274] Node 0 Normal free:10544kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0kB free_highatomic:0kB active_anon:16528kB inactive_anon:0kB active_file:32kB inactive_file:152412kB unevictable:2000kB writepending:172kB zspages:0kB present:1572868kB managed:542440kB mlocked:0kB bounce:0kB free_pcp:10436kB local_pcp:10436kB free_cma:0kB
[  684.236847][T16274] lowmem_reserve[]: 0 0 0 0 0
[  684.236862][T16274] Node 1 Normal free:3154120kB boost:0kB min:56408kB low:70508kB high:84608kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8576kB inactive_anon:0kB active_file:0kB inactive_file:59196kB unevictable:2000kB writepending:1620kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:67472kB local_pcp:67472kB free_cma:0kB
[  684.236885][T16274] lowmem_reserve[]: 0 0 0 0 0
[  684.236900][T16274] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  684.236966][T16274] Node 0 DMA32: 990*4kB (UME) 314*8kB (UME) 287*16kB (UM) 86*32kB (UM) 53*64kB (M) 2*128kB (UM) 6*256kB (U) 18*512kB (UM) 30*1024kB (UM) 28*2048kB (UME) 240*4096kB (UM) = 1099320kB
[  684.237058][T16274] Node 0 Normal: 0*4kB 2*8kB (UE) 0*16kB 35*32kB (UE) 39*64kB (UE) 22*128kB (UE) 12*256kB (E) 2*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 10544kB
[  684.237114][T16274] Node 1 Normal: 2218*4kB (UME) 1444*8kB (UME) 686*16kB (UME) 991*32kB (UME) 423*64kB (UME) 131*128kB (UM) 63*256kB (UME) 30*512kB (UME) 5*1024kB (UM) 6*2048kB (UME) 732*4096kB (UM) = 3154120kB
[  684.237182][T16274] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  684.237189][T16274] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  684.237196][T16274] 78389 total pagecache pages
[  684.237199][T16274] 0 pages in swap cache
[  684.237202][T16274] Free swap  = 124996kB
[  684.237206][T16274] Total swap = 124996kB
[  684.237209][T16274] 1834877 pages RAM
[  684.237213][T16274] 0 pages HighMem/MovableOnly
[  684.237216][T16274] 391897 pages reserved
[  684.237219][T16274] 0 pages cma reserved
[  684.428600][T16278] loop9: detected capacity change from 0 to 8192
[  684.440544][T16278] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  684.457680][   T36] audit: type=1800 audit(1788964227.103:3732): pid=16278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4013" name="file2" dev="loop9" ino=1048794 res=0 errno=0
[  684.486278][T16278] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  684.489951][T16278] FAT-fs (loop9): Filesystem has been set read-only
[  684.492351][T16278] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  684.498652][T16278] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  684.501698][T16278] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  684.508541][T16278] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  684.511534][T16278] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  684.515540][T16278] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  684.518513][T16278] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  684.559751][T16278] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  684.610121][T16278] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  684.613397][T16281] loop7: detected capacity change from 0 to 1024
[  685.328057][T16300] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4024'.
[  685.540741][T16310] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3)
[  685.540770][T16310] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  685.544923][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  685.544948][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  685.566024][T16310] vhci_hcd vhci_hcd.0: Device attached
[  685.612004][T16315] vhci_hcd vhci_hcd.0: port 0 already used
[  685.634513][T16313] vhci_hcd: connection closed
[  685.651681][   T12] vhci_hcd vhci_hcd.9: stop threads
[  685.680632][   T12] vhci_hcd vhci_hcd.9: release socket
[  685.682448][   T12] vhci_hcd vhci_hcd.9: disconnect device
[  686.224660][T16330] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  686.502775][  T730] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  686.656351][  T730] usb 10-1: Using ep0 maxpacket: 16
[  686.661390][  T730] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  686.670614][  T730] usb 10-1: config 0 has an invalid interface number: 34 but max is 0
[  686.670650][  T730] usb 10-1: config 0 has no interface number 0
[  686.670691][  T730] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  686.670719][  T730] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  686.686296][  T730] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.686344][  T730] usb 10-1: Product: syz
[  686.686382][  T730] usb 10-1: Manufacturer: syz
[  686.686413][  T730] usb 10-1: SerialNumber: syz
[  686.696355][  T730] usb 10-1: config 0 descriptor??
[  686.701433][T16332] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  686.704209][T16332] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  686.710722][T16336] loop7: detected capacity change from 0 to 256
[  686.731395][T16336] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb2f9d067, utbl_chksum : 0xe619d30d)
[  686.750415][   T36] audit: type=1800 audit(1788964229.393:3733): pid=16336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4038" name="file0" dev="loop7" ino=1048795 res=0 errno=0
[  686.779037][T16336] Invalid ELF header magic: != ELF
[  686.929712][T16332] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  686.929933][T16332] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  687.746136][  T730] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  687.746179][  T730] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9
[  687.764154][  T730] asix 10-1:0.34: probe with driver asix failed with error -71
[  687.776341][  T730] usb 10-1: USB disconnect, device number 10
[  688.298581][T16360] FAULT_INJECTION: forcing a failure.
[  688.298581][T16360] name failslab, interval 1, probability 0, space 0, times 0
[  688.298635][T16360] CPU: 0 UID: 0 PID: 16360 Comm: syz.7.4050 Not tainted syzkaller #0 PREEMPT(full) 
[  688.298669][T16360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  688.298676][T16360] Call Trace:
[  688.298680][T16360]  <TASK>
[  688.298684][T16360]  dump_stack_lvl+0xe8/0x150
[  688.298700][T16360]  should_fail_ex+0x410/0x560
[  688.298713][T16360]  should_failslab+0xa8/0x100
[  688.298724][T16360]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  688.298737][T16360]  ? __d_alloc+0x37/0x6f0
[  688.298745][T16360]  ? __d_alloc+0x37/0x6f0
[  688.298754][T16360]  __d_alloc+0x37/0x6f0
[  688.298763][T16360]  d_alloc_pseudo+0x21/0xc0
[  688.298771][T16360]  alloc_path_pseudo+0x107/0x220
[  688.298783][T16360]  ? __pfx_alloc_path_pseudo+0x10/0x10
[  688.298794][T16360]  ? do_raw_spin_lock+0x12b/0x2f0
[  688.298807][T16360]  alloc_file_pseudo+0xa8/0x1e0
[  688.298818][T16360]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  688.298828][T16360]  ? _raw_spin_unlock+0x28/0x50
[  688.298838][T16360]  ? alloc_fd+0x651/0x6c0
[  688.298849][T16360]  sock_alloc_file+0xb8/0x2e0
[  688.298859][T16360]  ? __sys_socket+0x12b/0x1b0
[  688.298870][T16360]  __sys_socket+0x13f/0x1b0
[  688.298882][T16360]  __x64_sys_socket+0x7a/0x90
[  688.298893][T16360]  do_syscall_64+0x166/0x520
[  688.298900][T16360]  ? trace_irq_disable+0x3b/0x140
[  688.298907][T16360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.298918][T16360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.298926][T16360] RIP: 0033:0x7f303d19e159
[  688.298958][T16360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  688.298966][T16360] RSP: 002b:00007f303df8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  688.298976][T16360] RAX: ffffffffffffffda RBX: 00007f303d425fa0 RCX: 00007f303d19e159
[  688.298982][T16360] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f
[  688.298987][T16360] RBP: 00007f303d235024 R08: 0000000000000000 R09: 0000000000000000
[  688.298994][T16360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  688.298999][T16360] R13: 00007f303d426038 R14: 00007f303d425fa0 R15: 00007ffee564d7e8
[  688.299011][T16360]  </TASK>
[  688.391990][T16362] loop9: detected capacity change from 0 to 256
[  688.417331][T16362] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd022927, utbl_chksum : 0xe619d30d)
[  688.545493][ T1112] i801_smbus 0000:00:00.0: SMBus base address uninitialized, upgrade BIOS
[  688.912584][T16388] trusted_key: encrypted_key: master key parameter 'user:' is invalid
[  689.185842][T16400] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4066'.
[  689.250807][T16404] loop9: detected capacity change from 0 to 512
[  689.256859][T16404] ext4: Bad value for 'data'
[  689.493853][T16405] loop9: detected capacity change from 0 to 1024
[  689.507481][T16405] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  690.875665][T16437] netlink: 136 bytes leftover after parsing attributes in process `syz.9.4083'.
[  691.067377][T16443] loop9: detected capacity change from 0 to 8192
[  691.093850][T16443]  loop9: p1 p2 p4
[  691.095215][T16443] loop9: partition table partially beyond EOD, truncated
[  691.103622][T16443] loop9: p4 start 131072 is beyond EOD, truncated
[  691.405782][T16457] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  691.409475][T16457] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  691.542043][T16465] loop9: detected capacity change from 0 to 1024
[  691.548640][T16465] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  691.555336][T16465] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  691.578823][T14984] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  691.883790][T16476] loop9: detected capacity change from 0 to 32768
[  691.894963][T16476] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  691.920144][T16476] XFS (loop9): Ending clean mount
[  691.937935][T16476] XFS (loop9): Quotacheck needed: Please wait.
[  691.987361][T16476] XFS (loop9): Quotacheck: Done.
[  692.011781][T14984] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  692.236026][T16488] loop9: detected capacity change from 0 to 8192
[  693.451302][T16505] loop9: detected capacity change from 0 to 16
[  693.457029][T16505] erofs (device loop9): mounted with root inode @ nid 36.
[  693.468684][T16505] syz.9.4111: attempt to access beyond end of device
[  693.468684][T16505] loop9: rw=524288, sector=12296, nr_sectors = 8 limit=16
[  693.474859][T16505] syz.9.4111: attempt to access beyond end of device
[  693.474859][T16505] loop9: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  693.487983][T16505] syz.9.4111: attempt to access beyond end of device
[  693.487983][T16505] loop9: rw=0, sector=12296, nr_sectors = 8 limit=16
[  693.494185][T16505] erofs (device loop9): read error -5 @ 0 of nid 89
[  693.496788][   T36] audit: type=1800 audit(1788964236.143:3734): pid=16505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4111" name="file2" dev="loop9" ino=89 res=0 errno=0
[  693.561251][   T36] audit: type=1807 audit(1788964236.203:3735): UNKNOWN=easure res=0
[  693.564523][   T36] audit: type=1802 audit(1788964236.223:3736): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.9.4112" res=0 errno=0
[  693.570544][T16506] ima: policy update failed
[  693.572330][   T36] audit: type=1802 audit(1788964236.223:3737): pid=16506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.4112" res=0 errno=0
[  693.724132][T16509] loop9: detected capacity change from 0 to 32768
[  693.746396][T16509] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  693.755296][T16509] XFS (loop9): Ending clean mount
[  693.767344][T14984] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  694.292934][T14492] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  694.449363][T14492] usb 10-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[  694.454791][T14492] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  694.459474][T14492] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  694.463832][T14492] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.492177][T14492] idmouse 10-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[  696.104460][T14492] usb 10-1: USB disconnect, device number 11
[  696.108263][T14492] idmouse 10-1:1.0: disconnected
[  696.713580][T16534] FAULT_INJECTION: forcing a failure.
[  696.713580][T16534] name failslab, interval 1, probability 0, space 0, times 0
[  696.713616][T16534] CPU: 0 UID: 0 PID: 16534 Comm: syz.9.4121 Not tainted syzkaller #0 PREEMPT(full) 
[  696.713627][T16534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  696.713633][T16534] Call Trace:
[  696.713636][T16534]  <TASK>
[  696.713640][T16534]  dump_stack_lvl+0xe8/0x150
[  696.713655][T16534]  should_fail_ex+0x410/0x560
[  696.713667][T16534]  should_failslab+0xa8/0x100
[  696.713679][T16534]  __kmalloc_noprof+0xfe/0x720
[  696.713687][T16534]  ? raw_queue_event+0x84/0x300
[  696.713697][T16534]  ? raw_queue_event+0x84/0x300
[  696.713708][T16534]  raw_queue_event+0x84/0x300
[  696.713719][T16534]  gadget_bind+0x481/0x610
[  696.713731][T16534]  ? __pfx_gadget_bind+0x10/0x10
[  696.713740][T16534]  gadget_bind_driver+0x2ca/0x9e0
[  696.713754][T16534]  ? __pfx_gadget_bind_driver+0x10/0x10
[  696.713764][T16534]  really_probe+0x254/0xae0
[  696.713775][T16534]  __driver_probe_device+0x1e8/0x360
[  696.713784][T16534]  driver_probe_device+0x4f/0x240
[  696.713794][T16534]  __driver_attach+0x339/0x600
[  696.713803][T16534]  bus_for_each_dev+0x23b/0x2c0
[  696.713813][T16534]  ? __pfx___driver_attach+0x10/0x10
[  696.713847][T16534]  ? __pfx_bus_for_each_dev+0x10/0x10
[  696.713859][T16534]  ? do_raw_spin_unlock+0x4d/0x200
[  696.713871][T16534]  bus_add_driver+0x345/0x670
[  696.713884][T16534]  driver_register+0x23a/0x320
[  696.713896][T16534]  usb_gadget_register_driver_owner+0xf9/0x270
[  696.713909][T16534]  raw_ioctl+0x1541/0x41c0
[  696.713920][T16534]  ? tomoyo_path_number_perm+0x219/0x5f0
[  696.713931][T16534]  ? do_vfs_ioctl+0x116f/0x1530
[  696.713943][T16534]  ? __pfx_raw_ioctl+0x10/0x10
[  696.713957][T16534]  ? hook_file_ioctl+0x1f2/0x600
[  696.713974][T16534]  ? __fget_files+0x2a/0x420
[  696.713986][T16534]  ? __fget_files+0x2a/0x420
[  696.713997][T16534]  ? __fget_files+0x3a2/0x420
[  696.714007][T16534]  ? __fget_files+0x2a/0x420
[  696.714018][T16534]  ? bpf_lsm_file_ioctl+0x9/0x20
[  696.714028][T16534]  ? __pfx_raw_ioctl+0x10/0x10
[  696.714036][T16534]  __se_sys_ioctl+0xfc/0x170
[  696.714045][T16534]  do_syscall_64+0x166/0x520
[  696.714053][T16534]  ? trace_irq_disable+0x3b/0x140
[  696.714060][T16534]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.714069][T16534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.714077][T16534] RIP: 0033:0x7feb8839ddeb
[  696.714085][T16534] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  696.714110][T16534] RSP: 002b:00007feb89195f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  696.714120][T16534] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007feb8839ddeb
[  696.714126][T16534] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[  696.714131][T16534] RBP: 00007feb89196fd0 R08: 0000000000000000 R09: 00000000ffffffff
[  696.714136][T16534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  696.714140][T16534] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000
[  696.714152][T16534]  </TASK>
[  696.733205][T16534] raw-gadget.1 gadget.9: failed to queue connect event
[  696.733216][T16534] udc dummy_udc.9: failed to start USB Raw Gadget: -12
[  696.733225][T16534] raw-gadget.1 gadget.9: probe with driver raw-gadget.1 failed with error -12
[  696.837065][T16534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  696.837273][T16534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  697.492318][T16536] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  697.590329][T16542] loop9: detected capacity change from 0 to 8192
[  697.621236][T16542] Dev loop9: unable to read partition block 1929379610
[  697.624232][T16542]  loop9: RDSK (-512) unable to read partition table
[  697.624348][T16542] loop9: partition table beyond EOD, truncated
[  697.624397][T16542] loop_reread_partitions: partition scan of loop9 () failed (rc=-5)
[  697.726619][T16546] loop9: detected capacity change from 0 to 256
[  697.734762][T16546] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d)
[  697.919462][T16548] loop9: detected capacity change from 0 to 32768
[  697.979656][T16548] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  698.013879][T16548] XFS (loop9): Ending clean mount
[  698.023735][T16548] XFS (loop9): Quotacheck needed: Please wait.
[  698.078789][T16548] XFS (loop9): Quotacheck: Done.
[  698.362990][   T36] audit: type=1800 audit(1788964240.993:3738): pid=16559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4126" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=4430 res=0 errno=0
[  698.363041][   T36] audit: type=1800 audit(1788964241.013:3739): pid=16559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4126" name="file1" dev="loop9" ino=4422 res=0 errno=0
[  698.718192][T14984] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  698.988845][T16565] loop9: detected capacity change from 0 to 512
[  698.996313][T16565] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  699.028947][T16565] Quota error (device loop9): do_check_range: Getting block 196613 out of range 1-5
[  699.033117][T16565] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  699.037050][T16565] EXT4-fs error (device loop9): ext4_acquire_dquot:7069: comm syz.9.4130: Failed to acquire dquot type 1
[  699.041037][T16565] loop9: lost filesystem error report for type 5 error -117
[  699.041882][T16565] EXT4-fs (loop9): 1 truncate cleaned up
[  699.044737][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  699.044746][    C0] EXT4-fs (loop9): last error at time 1788964241: ext4_acquire_dquot:7069
[  699.060205][T16565] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  699.069211][T16565] Quota error (device loop9): do_check_range: Getting block 196613 out of range 1-5
[  699.073638][T16565] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  699.076981][T16565] EXT4-fs error (device loop9): ext4_acquire_dquot:7069: comm syz.9.4130: Failed to acquire dquot type 1
[  699.109971][T14984] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  699.245519][T16570] bridge1: entered promiscuous mode
[  699.247409][T16570] bridge1: entered allmulticast mode
[  699.449042][   T58] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  699.469184][   T58] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  699.476879][   T58] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  699.480028][   T58] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  699.482656][   T58] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  700.266237][ T5727] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.424463][T16596] loop9: detected capacity change from 0 to 4096
[  700.467701][T16596] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  700.470148][T16596] ntfs3(loop9): Failed to load $Extend (-22).
[  700.470186][T16596] ntfs3(loop9): Failed to initialize $Extend.
[  700.538511][ T5727] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.611817][ T5727] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.667916][ T5727] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.680823][T16600] syzkaller0: entered promiscuous mode
[  700.690126][T16600] syzkaller0: entered allmulticast mode
[  701.213241][ T5727] vlan2: left promiscuous mode
[  701.215115][ T5727] bridge0: port 3(vlan2) entered disabled state
[  701.221640][ T5727] bridge_slave_1: left allmulticast mode
[  701.221675][ T5727] bridge_slave_1: left promiscuous mode
[  701.221806][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.234514][ T5727] bridge_slave_0: left promiscuous mode
[  701.234650][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state
[  701.543105][   T58] Bluetooth: hci3: command tx timeout
[  701.620167][T16622] loop9: detected capacity change from 0 to 32768
[  701.639047][T16622] JBD2: Ignoring recovery information on journal
[  701.687855][ T5727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  701.695657][ T5727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  701.699164][ T5727] bond0 (unregistering): Released all slaves
[  701.711167][T16576] bridge0: port 1(bridge_slave_0) entered blocking state
[  701.718233][T16576] bridge0: port 1(bridge_slave_0) entered disabled state
[  701.720835][T16576] bridge_slave_0: entered allmulticast mode
[  701.726575][T16622] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode.
[  701.729697][T16576] bridge_slave_0: entered promiscuous mode
[  701.752401][T16576] bridge0: port 2(bridge_slave_1) entered blocking state
[  701.752472][T16576] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.752544][T16576] bridge_slave_1: entered allmulticast mode
[  701.766419][T16576] bridge_slave_1: entered promiscuous mode
[  701.770471][ T5341] 8021q: adding VLAN 0 to HW filter on device eth29
[  701.823728][ T5727] IPVS: stopping master sync thread 14844 ...
[  701.836890][T16576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  701.849678][T16576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  701.924866][T14984] ocfs2: Unmounting device (7,9) on (node local)
[  701.941870][T16576] team0: Port device team_slave_0 added
[  702.138351][T16576] team0: Port device team_slave_1 added
[  702.227679][T16576] batman_adv: batadv0: Adding interface: batadv_slave_0
[  702.230030][T16576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  702.238460][T16576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  702.283197][ T5727] hsr_slave_0: left promiscuous mode
[  702.285498][ T5727] hsr_slave_1: left promiscuous mode
[  702.285961][ T5727] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  702.285989][ T5727] batman_adv: batadv0: Removing interface: batadv_slave_0
[  702.295734][ T5727] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  702.298286][ T5727] batman_adv: batadv0: Removing interface: batadv_slave_1
[  702.340907][ T5727] veth1_macvtap: left promiscuous mode
[  702.340965][ T5727] veth0_macvtap: left promiscuous mode
[  702.341045][ T5727] veth1_vlan: left promiscuous mode
[  702.341159][ T5727] veth0_vlan: left promiscuous mode
[  702.689160][ T5727] team0 (unregistering): Port device team_slave_1 removed
[  702.706574][ T5727] team0 (unregistering): Port device team_slave_0 removed
[  702.780166][T16576] batman_adv: batadv0: Adding interface: batadv_slave_1
[  702.782509][T16576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  702.782523][T16576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  702.785251][ T5341] 8021q: adding VLAN 0 to HW filter on device eth30
[  702.905558][T16576] hsr_slave_0: entered promiscuous mode
[  702.910777][T16653] loop7: detected capacity change from 0 to 1024
[  702.913082][T16576] hsr_slave_1: entered promiscuous mode
[  702.966424][T16653] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  703.282092][ T5727] IPVS: stop unused estimator thread 0...
[  703.624377][   T58] Bluetooth: hci3: command tx timeout
[  703.761794][T16673] [U] 
[  703.761855][T16673] [U] 
[  703.761872][T16673] [U] 
[  703.761891][T16673] [U] 
[  703.769134][T16673] [U] 
[  703.769169][T16673] [U] 
[  703.769184][T16673] [U] 
[  703.769197][T16673] [U] 
[  703.773380][T16673] [U] 
[  703.773420][T16673] [U] 
[  703.773441][T16673] [U] 
[  703.773461][T16673] [U] 
[  703.778337][T16673] [U] 
[  703.778367][T16673] [U] 
[  703.778381][T16673] [U] 
[  703.778393][T16673] [U] 
[  703.782411][T16673] [U] 
[  703.782441][T16673] [U] 
[  703.782455][T16673] [U] 
[  703.782468][T16673] [U] 
[  703.786792][T16673] [U] 
[  703.786821][T16673] [U] 
[  703.786836][T16673] [U] 
[  703.786849][T16673] [U] 
[  703.791075][T16673] [U] 
[  703.791105][T16673] [U] 
[  703.791123][T16673] [U] 
[  703.791135][T16673] [U] 
[  703.795444][T16673] [U] 
[  703.795474][T16673] [U] 
[  703.795489][T16673] [U] 
[  703.795503][T16673] [U] 
[  703.800822][T16673] [U] 
[  703.800851][T16673] [U] 
[  703.800870][T16673] [U] 
[  703.800883][T16673] [U] 
[  703.805340][T16673] [U] 
[  703.805370][T16673] [U] 
[  703.805384][T16673] [U] 
[  703.805397][T16673] [U] 
[  703.809586][T16673] [U] 
[  703.809630][T16673] [U] 
[  703.809644][T16673] [U] 
[  703.809658][T16673] [U] 
[  703.814127][T16673] [U] 
[  703.814160][T16673] [U] 
[  703.814174][T16673] [U] 
[  703.814187][T16673] [U] 
[  703.819014][T16673] [U] 
[  703.819049][T16673] [U] 
[  703.819063][T16673] [U] 
[  703.819075][T16673] [U] 
[  703.819130][T16673] [U] 
[  703.819159][T16673] [U] 
[  703.819173][T16673] [U] 
[  703.819186][T16673] [U] 
[  703.819217][T16673] [U] 
[  703.819246][T16673] [U] 
[  703.819260][T16673] [U] 
[  703.819273][T16673] [U] 
[  703.819308][T16673] [U] 
[  703.819337][T16673] [U] 
[  703.819351][T16673] [U] 
[  703.819363][T16673] [U] 
[  703.819391][T16673] [U] 
[  703.819419][T16673] [U] 
[  703.819432][T16673] [U] 
[  703.819444][T16673] [U] 
[  703.819535][T16673] [U] 
[  703.819563][T16673] [U] 
[  703.819576][T16673] [U] 
[  703.819588][T16673] [U] 
[  703.819680][T16673] [U] 
[  703.819708][T16673] [U] 
[  703.819757][T16673] [U] 
[  703.819771][T16673] [U] 
[  703.819855][T16673] [U] 
[  703.819882][T16673] [U] 
[  703.819896][T16673] [U] 
[  703.819908][T16673] [U] 
[  703.819936][T16673] [U] 
[  703.819964][T16673] [U] 
[  703.819978][T16673] [U] 
[  703.819992][T16673] [U] 
[  703.820027][T16673] [U] 
[  703.820056][T16673] [U] 
[  703.820084][T16673] [U] 
[  703.820098][T16673] [U] 
[  703.820181][T16673] [U] 
[  703.820209][T16673] [U] 
[  703.820223][T16673] [U] 
[  703.820236][T16673] [U] 
[  703.820272][T16673] [U] 
[  703.820301][T16673] [U] 
[  703.820315][T16673] [U] 
[  703.820327][T16673] [U] 
[  703.872563][T16673] [U] 
[  703.872595][T16673] [U] 
[  703.872610][T16673] [U] 
[  703.872623][T16673] [U] 
[  703.878567][T16673] [U] 
[  703.878600][T16673] [U] 
[  703.878614][T16673] [U] 
[  703.878627][T16673] [U] 
[  703.882954][T16673] [U] 
[  703.882986][T16673] [U] 
[  703.883000][T16673] [U] 
[  703.883013][T16673] [U] 
[  703.883060][T16673] [U] 
[  703.883089][T16673] [U] 
[  703.883104][T16673] [U] 
[  703.883117][T16673] [U] 
[  703.883147][T16673] [U] 
[  703.883175][T16673] [U] 
[  703.883190][T16673] [U] 
[  703.883208][T16673] [U] 
[  703.883245][T16673] [U] 
[  703.883273][T16673] [U] 
[  703.883287][T16673] [U] 
[  703.883300][T16673] [U] 
[  703.883330][T16673] [U] 
[  703.883358][T16673] [U] 
[  703.883374][T16673] [U] 
[  703.883387][T16673] [U] 
[  703.883416][T16673] [U] 
[  703.883445][T16673] [U] 
[  703.883458][T16673] [U] 
[  703.914032][T16672] [U] 
[  704.192842][  T730] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  704.343624][  T730] usb 10-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  704.348700][  T730] usb 10-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  704.348762][  T730] usb 10-1: Product: syz
[  704.366830][  T730] usb 10-1: config 0 descriptor??
[  704.371318][  T730] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected
[  704.375454][  T730] usb 10-1: Detected FT232H
[  704.591299][  T730] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  704.757890][ T5341] 8021q: adding VLAN 0 to HW filter on device eth31
[  705.020081][  T730] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  705.228797][T14741] usb 10-1: USB disconnect, device number 12
[  705.246794][T14741] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  705.259353][T14741] ftdi_sio 10-1:0.0: device disconnected
[  705.286515][ T5341] 8021q: adding VLAN 0 to HW filter on device eth32
[  705.702921][   T58] Bluetooth: hci3: command tx timeout
[  706.221184][T16576] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  706.236963][T16576] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  706.237364][T16576] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  706.248803][T16576] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  706.255598][T16576] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  706.311671][T16576] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  706.312097][T16576] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  706.336350][T16576] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  706.567516][T16576] 8021q: adding VLAN 0 to HW filter on device bond0
[  706.608713][T16576] 8021q: adding VLAN 0 to HW filter on device team0
[  706.646779][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  706.646844][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  706.659489][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  706.659554][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  706.917542][T16740] loop7: detected capacity change from 0 to 4096
[  706.962479][T16740] ntfs3(loop7): Failed to load $Extend (-22).
[  706.962523][T16740] ntfs3(loop7): Failed to initialize $Extend.
[  707.053641][ T5766] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  707.214526][ T5766] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  707.218353][ T5766] usb 10-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61
[  707.218395][ T5766] usb 10-1: config 0 interface 0 has no altsetting 0
[  707.229597][ T5766] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  707.229632][ T5766] usb 10-1: Product: syz
[  707.229662][ T5766] usb 10-1: Manufacturer: syz
[  707.229695][ T5766] usb 10-1: SerialNumber: syz
[  707.240236][ T5766] usb 10-1: config 0 descriptor??
[  707.243738][T16736] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  707.257076][ T5766] usb 10-1: selecting invalid altsetting 0
[  707.443799][T16576] 8021q: adding VLAN 0 to HW filter on device batadv0
[  707.554281][T16736] usb 10-1: BOGUS urb xfer, pipe 0 != type 3
[  707.987346][T16768] loop7: detected capacity change from 0 to 131072
[  707.990282][   T58] Bluetooth: hci3: command tx timeout
[  708.003439][T16768] F2FS-fs (loop7): invalid crc value
[  708.039278][T16768] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  708.047914][T16768] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  708.075138][T16576] veth0_vlan: entered promiscuous mode
[  708.117372][T16576] veth1_vlan: entered promiscuous mode
[  708.197521][T16576] veth0_macvtap: entered promiscuous mode
[  708.207749][T16576] veth1_macvtap: entered promiscuous mode
[  708.247226][T16576] batman_adv: batadv0: Interface activated: batadv_slave_0
[  708.261104][T16576] batman_adv: batadv0: Interface activated: batadv_slave_1
[  708.355040][T14256] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  708.355151][T14256] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  708.355407][T14256] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  708.355441][T14256] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  708.558538][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  708.558574][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  708.644835][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  708.644873][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.371353][T16735] snd-usb-audio 10-1:0.0: Runtime PM usage count underflow!
[  709.395268][T14492] usb 10-1: USB disconnect, device number 13
[  709.846965][T16822] loop5: detected capacity change from 0 to 7
[  709.879577][T16822]  loop5: p1 < > p3 p4 < p5 >
[  709.881466][T16822] loop5: partition table partially beyond EOD, truncated
[  709.990863][T14538] udevd[14538]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  709.998908][T14881] udevd[14881]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  710.008019][T14779] udevd[14779]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  710.060863][T14363] udevd[14363]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[  710.095373][T16829] loop9: detected capacity change from 0 to 22
[  710.095852][T16829] MTD: Attempt to mount non-MTD device "/dev/loop9"
[  710.118324][T16829] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  710.318867][T16838] input: syz1 as /devices/virtual/input/input32
[  710.462664][T16843] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4196'.
[  711.073168][T14741] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  711.224705][T14741] usb 10-1: Using ep0 maxpacket: 32
[  711.227172][T14741] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  711.231871][T14741] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  711.231915][T14741] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  711.231949][T14741] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  711.231978][T14741] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  711.249566][T14741] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.249604][T14741] usb 10-1: Product: syz
[  711.249644][T14741] usb 10-1: Manufacturer: syz
[  711.249668][T14741] usb 10-1: SerialNumber: syz
[  711.285392][    C0] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  711.331488][T14741] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input33
[  711.492763][T14741] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  711.492798][T14741]  (id 0x00)
[  711.553186][T14741] rc_core: IR keymap rc-imon-pad not found
[  711.555188][T14741] Registered IR keymap rc-empty
[  711.557092][T14741] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  711.560462][T14741] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  711.696831][T14741] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0
[  711.707895][T14741] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0/input34
[  711.714596][T14741] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:14> initialized
[  712.289136][T16865] imon:send_packet: task interrupted
[  712.301493][T16865] imon:send_packet: packet tx failed (-512)
[  712.306065][T16865] imon:vfd_write: send packet #1 failed
[  712.308502][T16865] imon:send_packet: packet tx failed (-32)
[  712.323038][T16865] imon:vfd_write: send packet #0 failed
[  712.439628][T14492] usb 10-1: USB disconnect, device number 14
[  712.885487][T16886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4214'.
[  712.888785][T16886] bond0: option lp_interval: invalid value (0)
[  712.888825][T16886] bond0: option lp_interval: allowed values 1 - 2147483647
[  713.262908][T14492] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  713.291643][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4224'.
[  713.298176][T16907] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4224'.
[  713.415617][T14492] usb 10-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  713.419169][T14492] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  713.419208][T14492] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  713.419247][T14492] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.438537][T14492] uvcvideo 10-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  713.550340][T16919] loop7: detected capacity change from 0 to 512
[  713.557508][T16919] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  713.580468][T16919] EXT4-fs (loop7): 1 truncate cleaned up
[  713.586833][T16919] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  713.648632][T14530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  713.651885][T14492] uvcvideo 10-1:1.0: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1).
[  713.651934][T14492] uvcvideo 10-1:1.0: No streaming interface found for terminal 32770.
[  713.675438][T14492] usb 10-1: USB disconnect, device number 15
[  713.721387][   T36] audit: type=1326 audit(1797353120.368:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16922 comm="syz.0.4231" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa7859e159 code=0x0
[  714.506093][T16945] vlan2: entered promiscuous mode
[  714.507860][T16945] bridge0: entered promiscuous mode
[  715.756005][T16958] loop0: detected capacity change from 0 to 2048
[  715.767730][T16958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  715.786859][  T730] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  715.817421][T16576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  715.869406][T16962] FAULT_INJECTION: forcing a failure.
[  715.869406][T16962] name failslab, interval 1, probability 0, space 0, times 0
[  715.869449][T16962] CPU: 0 UID: 0 PID: 16962 Comm: syz.0.4248 Not tainted syzkaller #0 PREEMPT(full) 
[  715.869475][T16962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  715.869482][T16962] Call Trace:
[  715.869486][T16962]  <TASK>
[  715.869490][T16962]  dump_stack_lvl+0xe8/0x150
[  715.869505][T16962]  should_fail_ex+0x410/0x560
[  715.869516][T16962]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  715.869527][T16962]  should_failslab+0xa8/0x100
[  715.869539][T16962]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  715.869550][T16962]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  715.869587][T16962]  ? shmem_alloc_inode+0x28/0x40
[  715.869597][T16962]  ? shmem_alloc_inode+0x28/0x40
[  715.869608][T16962]  ? do_raw_spin_lock+0x12b/0x2f0
[  715.869620][T16962]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  715.869630][T16962]  shmem_alloc_inode+0x28/0x40
[  715.869641][T16962]  alloc_inode+0x6a/0x1b0
[  715.869653][T16962]  new_inode+0x1f/0x170
[  715.869665][T16962]  shmem_get_inode+0x3a4/0x1030
[  715.869679][T16962]  ? __pfx_shmem_get_inode+0x10/0x10
[  715.869695][T16962]  ? devcgroup_check_permission+0x31/0x8f0
[  715.869709][T16962]  shmem_mknod+0x17d/0x340
[  715.869721][T16962]  vfs_mknod+0x441/0x600
[  715.869732][T16962]  filename_mknodat+0x3cb/0x660
[  715.869743][T16962]  ? __pfx_filename_mknodat+0x10/0x10
[  715.869753][T16962]  ? do_getname+0x151/0x250
[  715.869763][T16962]  __se_sys_mknodat+0x3b/0x150
[  715.869773][T16962]  do_syscall_64+0x166/0x520
[  715.869781][T16962]  ? trace_irq_disable+0x3b/0x140
[  715.869788][T16962]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.869798][T16962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.869805][T16962] RIP: 0033:0x7faa7859e159
[  715.869813][T16962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  715.869822][T16962] RSP: 002b:00007faa7952e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[  715.869832][T16962] RAX: ffffffffffffffda RBX: 00007faa78825fa0 RCX: 00007faa7859e159
[  715.869838][T16962] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  715.869844][T16962] RBP: 00007faa78635024 R08: 0000000000000000 R09: 0000000000000000
[  715.869849][T16962] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000
[  715.869855][T16962] R13: 00007faa78826038 R14: 00007faa78825fa0 R15: 00007ffd6395e468
[  715.869867][T16962]  </TASK>
[  715.949132][  T730] usb 10-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  715.962000][  T730] usb 10-1: config 0 has an invalid interface number: 127 but max is 1
[  715.962014][  T730] usb 10-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  715.962023][  T730] usb 10-1: config 0 has no interface number 1
[  715.962041][  T730] usb 10-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  715.962056][  T730] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29
[  715.994393][  T730] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  715.994432][  T730] usb 10-1: Product: syz
[  715.994461][  T730] usb 10-1: Manufacturer: syz
[  715.994485][  T730] usb 10-1: SerialNumber: syz
[  716.009745][  T730] usb 10-1: config 0 descriptor??
[  716.013909][  T730] usb-storage 10-1:0.127: USB Mass Storage device detected
[  716.019454][  T730] usb-storage 10-1:0.127: Quirks match for vid 1908 pid 1315: 20000
[  716.043259][  T730] usb-storage 10-1:0.0: USB Mass Storage device detected
[  716.049960][  T730] usb-storage 10-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  716.221097][  T730] usb 10-1: USB disconnect, device number 16
[  716.235318][T14492] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  716.382781][T14492] usb 1-1: Using ep0 maxpacket: 16
[  716.385088][T14492] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  716.391225][T14492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.394161][T14492] usb 1-1: Product: syz
[  716.395625][T14492] usb 1-1: Manufacturer: syz
[  716.397496][T14492] usb 1-1: SerialNumber: syz
[  716.400610][T14492] usb 1-1: config 0 descriptor??
[  716.611251][T14492] speedtch 1-1:0.0: speedtch_bind: data interface not found!
[  716.617244][T14492] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  716.836376][T14492] usb 1-1: USB disconnect, device number 36
[  716.994221][T16980] netlink: 'syz.7.4252': attribute type 1 has an invalid length.
[  716.996926][T16980] netlink: 200 bytes leftover after parsing attributes in process `syz.7.4252'.
[  717.000462][T16980] netlink: 'syz.7.4252': attribute type 1 has an invalid length.
[  717.084955][T14494] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  717.233400][T14494] usb 10-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  717.237565][T14494] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  717.241472][T14494] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  717.246877][T14494] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.249706][T14494] usb 10-1: Product: syz
[  717.251283][T14494] usb 10-1: Manufacturer: syz
[  717.253109][T14494] usb 10-1: SerialNumber: syz
[  717.480396][T14494] kaweth 10-1:1.0: Firmware present in device.
[  717.670590][T14494] kaweth 10-1:1.0: Statistics collection: 0
[  717.672911][T14494] kaweth 10-1:1.0: Multicast filter limit: 0
[  717.675134][T14494] kaweth 10-1:1.0: MTU: 0
[  717.676903][T14494] kaweth 10-1:1.0: Read MAC address 00:00:00:00:00:00
[  718.072973][T14494] kaweth 10-1:1.0: Error setting SOFS wait
[  718.073149][T14494] kaweth 10-1:1.0: probe with driver kaweth failed with error -5
[  718.088566][T14494] usb 10-1: USB disconnect, device number 17
[  718.345619][   T58] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  718.345677][   T58] Bluetooth: hci2: Injecting HCI hardware error event
[  718.351017][T14274] Bluetooth: hci2: hardware error 0x00
[  718.477578][T14494] kernel read not supported for file /84/net/snmp6 (pid: 14494 comm: kworker/0:9)
[  718.972314][T17019] loop0: detected capacity change from 0 to 256
[  718.984312][T17019] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  720.162261][T17029] netlink: 'syz.0.4273': attribute type 11 has an invalid length.
[  720.261893][T17033] netlink: 'syz.0.4275': attribute type 4 has an invalid length.
[  720.283481][T17035] loop9: detected capacity change from 0 to 256
[  720.302132][T17033] netlink: 'syz.0.4275': attribute type 4 has an invalid length.
[  720.409012][T17039] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4278'.
[  720.409186][T17039] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4278'.
[  720.422980][T14274] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  720.478921][T17041] netlink: 4384 bytes leftover after parsing attributes in process `syz.0.4279'.
[  720.880971][T17061] loop0: detected capacity change from 0 to 4096
[  720.886827][T17061] ntfs3(loop0): Primary boot: invalid record size -127.
[  720.889346][T17061] ntfs3(loop0): try to read out of volume at offset 0x1ffe00
[  720.988783][T17065] loop0: detected capacity change from 0 to 1024
[  720.993651][T17065] hfsplus: Filesystem is marked locked, mounting read-only.
[  720.998430][T17065] hfsplus: failed to load catalog file
[  721.013619][T14411] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  721.061961][T17067] loop0: detected capacity change from 0 to 512
[  721.080358][T17067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  721.088112][T17067] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  721.128090][T16576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  721.167953][T14411] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  721.174437][T14411] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.185151][T14411] usb 10-1: config 0 descriptor??
[  721.188583][T14411] cp210x 10-1:0.0: cp210x converter detected
[  721.377668][T17078] loop0: detected capacity change from 0 to 4096
[  721.390216][T17078] EXT4-fs: Ignoring removed nobh option
[  721.392087][T17078] EXT4-fs: Ignoring removed bh option
[  721.398017][T17078] EXT4-fs (loop0): Test dummy encryption mode enabled
[  721.423446][T17078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  721.518981][T16576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  721.611679][T14411] usb 10-1: cp210x converter now attached to ttyUSB0
[  721.770402][T17088] loop0: detected capacity change from 0 to 256
[  721.786047][T17088] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  721.791151][T17088] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  721.795286][T17088] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  721.798941][   T36] audit: type=1800 audit(1797353128.448:3741): pid=17088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4297" name="file1" dev="loop0" ino=1048804 res=0 errno=0
[  721.806717][T14411] usb 10-1: USB disconnect, device number 18
[  721.810854][T14411] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  721.818889][T14411] cp210x 10-1:0.0: device disconnected
[  721.981827][T17090] loop0: detected capacity change from 0 to 32768
[  721.987147][T17090] BTRFS error: invalid value 0 for thread_pool
[  724.518229][T17141] loop7: detected capacity change from 0 to 512
[  724.954229][T17158] loop7: detected capacity change from 0 to 2048
[  724.970676][T17158] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  725.047414][T17160] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4323'.
[  725.052972][ T5743] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  725.205691][ T5743] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  725.210156][ T5743] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  725.215135][ T5743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  725.220738][ T5743] usb 1-1: config 0 descriptor??
[  725.243966][ T5743] pwc: Askey VC010 type 2 USB webcam detected.
[  725.350406][T17171] loop9: detected capacity change from 0 to 128
[  725.375949][T17171] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  725.517891][T17171] ext4 filesystem being mounted at /297/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  725.560287][T14984] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  725.896172][T17181] loop9: detected capacity change from 0 to 8
[  725.905828][T17181] SQUASHFS error: lzo decompression failed, data probably corrupt
[  725.905949][T17181] SQUASHFS error: Failed to read block 0x91: -5
[  725.905979][T17181] SQUASHFS error: Unable to read metadata cache entry [8f]
[  725.906002][T17181] SQUASHFS error: Unable to read inode 0x11f
[  725.968982][ T5743] pwc: recv_control_msg error -71 req 02 val 2700
[  725.972476][ T5743] pwc: recv_control_msg error -71 req 02 val 2c00
[  725.979666][ T5743] pwc: recv_control_msg error -71 req 04 val 1000
[  725.982567][ T5743] pwc: recv_control_msg error -71 req 04 val 1300
[  725.986811][ T5743] pwc: recv_control_msg error -71 req 04 val 1400
[  725.992175][ T5743] pwc: recv_control_msg error -71 req 02 val 2000
[  725.995604][ T5743] pwc: recv_control_msg error -71 req 02 val 2100
[  725.998306][ T5743] pwc: recv_control_msg error -71 req 04 val 1500
[  726.001459][ T5743] pwc: recv_control_msg error -71 req 02 val 2500
[  726.003972][ T5743] pwc: recv_control_msg error -71 req 02 val 2400
[  726.007616][ T5743] pwc: recv_control_msg error -71 req 02 val 2600
[  726.010048][ T5743] pwc: recv_control_msg error -71 req 02 val 2900
[  726.012350][ T5743] pwc: recv_control_msg error -71 req 02 val 2800
[  726.016736][ T5743] pwc: recv_control_msg error -71 req 04 val 1100
[  726.019141][ T5743] pwc: recv_control_msg error -71 req 04 val 1200
[  726.024878][ T5743] pwc: Registered as video103.
[  726.035835][ T5743] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35
[  726.051858][ T5743] usb 1-1: USB disconnect, device number 37
[  726.098957][T17183] loop9: detected capacity change from 0 to 256
[  726.127821][   T36] audit: type=1800 audit(1797353132.778:3742): pid=17183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4332" name="file1" dev="loop9" ino=1048806 res=0 errno=0
[  726.780570][T17201] loop7: detected capacity change from 0 to 512
[  726.796506][T17201] EXT4-fs (loop7): Test dummy encryption mode enabled
[  727.543886][T17201] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  727.591009][T17201] EXT4-fs error (device loop7): ext4_orphan_get:1429: comm syz.7.4340: bad orphan inode 131083
[  727.591047][T17201] loop7: lost filesystem error report for type 5 error -117
[  727.592746][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  727.592773][    C0] EXT4-fs (loop7): initial error at time 1797353134: ext4_orphan_get:1429
[  727.592817][    C0] EXT4-fs (loop7): last error at time 1797353134: ext4_orphan_get:1429
[  727.607270][T17201] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  727.681089][T14530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  727.804445][T17215] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4343'.
[  728.143668][ T5743] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  728.251719][T17244] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4359'.
[  728.293344][ T5743] usb 1-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice= 0.01
[  728.297295][ T5743] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  728.297337][ T5743] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  728.307866][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  728.307905][ T5743] usb 1-1: Product: syz
[  728.307934][ T5743] usb 1-1: Manufacturer: syz
[  728.318599][T17222] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  728.318749][T17222] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  728.329206][ T5743] ipw 1-1:1.0: IPWireless converter converter detected
[  728.348670][ T5743] usb 1-1: IPWireless converter converter now attached to ttyUSB0
[  728.415268][ T5766] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  728.562786][ T5766] usb 10-1: Using ep0 maxpacket: 32
[  728.566928][ T5766] usb 10-1: unable to get BOS descriptor or descriptor too short
[  728.566979][ T5766] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  728.573475][ T5766] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  728.576684][ T5766] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  728.576701][ T5766] usb 10-1: config 1 interface 0 has no altsetting 0
[  728.585952][ T5766] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.588641][ T5766] usb 10-1: Product: syz
[  728.590805][ T5766] usb 10-1: Manufacturer: syz
[  728.590835][ T5766] usb 10-1: SerialNumber: syz
[  728.967461][ T5766] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22
[  728.977669][ T5766] usb 10-1: USB disconnect, device number 19
[  728.997067][T14881] udevd[14881]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  729.039811][T14411] usb 1-1: USB disconnect, device number 38
[  729.064982][T14411] ipw ttyUSB0: IPWireless converter converter now disconnected from ttyUSB0
[  729.070075][T14411] ipw 1-1:1.0: device disconnected
[  729.905084][T17280] CIFS: Attempting to mount //::1/share
[  729.951687][T17280] CIFS: VFS: Error connecting to socket. Aborting operation.
[  729.959762][T17280] CIFS: VFS: cifs_mount failed w/return code = -111
[  730.029488][T17283] loop7: detected capacity change from 0 to 2048
[  730.047869][T17283] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  730.078954][T17283] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  730.136060][T14530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  730.972053][T17313] loop0: detected capacity change from 0 to 32768
[  730.981808][T17313] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  731.008101][T17313] XFS (loop0): Ending clean mount
[  731.039120][T16576] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  731.203687][T17295] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  731.203841][T17295] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  731.297395][T17325] loop0: detected capacity change from 0 to 8192
[  731.310282][T17295] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  731.386391][T17295] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  731.396428][T17295] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  731.405393][T17295] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  731.779767][T17342] loop0: detected capacity change from 0 to 1024
[  731.805082][T17342] hfsplus: bad catalog file entry
[  731.828955][T17342] hfsplus: walked past end of dir
[  731.888661][ T1112] hfsplus: bad catalog file entry
[  732.109882][T17356] netlink: 'syz.0.4401': attribute type 29 has an invalid length.
[  732.116910][T17356] netlink: 'syz.0.4401': attribute type 29 has an invalid length.
[  732.336808][T17366] netlink: 'syz.0.4406': attribute type 23 has an invalid length.
[  732.453116][ T5766] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  732.584401][T14274] Bluetooth: hci1: command 0x0c1a tx timeout
[  732.603628][ T5766] usb 10-1: Using ep0 maxpacket: 32
[  732.606170][ T5766] usb 10-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  732.611394][ T5766] usb 10-1: config 0 interface 0 has no altsetting 0
[  732.611447][ T5766] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.624026][ T5766] usb 10-1: config 0 descriptor??
[  733.039246][ T5766] ntrig 0003:1B96:0008.0012: unexpected long global item
[  733.045553][ T5766] ntrig 0003:1B96:0008.0012: parse failed
[  733.048560][ T5766] ntrig 0003:1B96:0008.0012: probe with driver ntrig failed with error -22
[  733.242302][ T5743] usb 10-1: USB disconnect, device number 20
[  733.462965][T14274] Bluetooth: hci3: command 0x0c1a tx timeout
[  733.568173][T17386] loop0: detected capacity change from 0 to 128
[  733.587946][T17386] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  733.593344][T17386] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  733.612348][T16576] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  733.670920][T17390] loop0: detected capacity change from 0 to 1024
[  733.690512][T17390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  733.701844][T17390] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.4417: missing EA_INODE flag
[  733.708505][T17390] EXT4-fs (loop0): Remounting filesystem read-only
[  733.727256][T16576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  734.069297][T17406] bridge1: left promiscuous mode
[  734.072601][   T12] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  734.320777][T14411] input: syz0 as /devices/virtual/misc/uhid/0018:0B05:0101.0013/input/input36
[  734.406109][T14411] asus 0018:0B05:0101.0013: input,hidraw0: I2C HID v0.00 Mouse [syz0] on syz1
[  734.409100][T14411] asus 0018:0B05:0101.0013: Asus failed to start multitouch: -5
[  734.444077][T14411] asus 0018:0B05:0101.0013: probe with driver asus failed with error -5
[  734.664025][T14274] Bluetooth: hci1: command 0x0c1a tx timeout
[  734.729725][T17430] loop9: detected capacity change from 0 to 16
[  734.761087][T17430] erofs (device loop9): mounted with root inode @ nid 36.
[  734.897249][T17435] loop7: detected capacity change from 0 to 2048
[  734.914988][T17435] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  734.918487][T17435] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  734.925389][T17435] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  734.996989][T17430] syz.9.4435: attempt to access beyond end of device
[  734.996989][T17430] loop9: rw=0, sector=301990144, nr_sectors = 257 limit=16
[  735.016730][T17430] syz.9.4435: attempt to access beyond end of device
[  735.016730][T17430] loop9: rw=0, sector=301990400, nr_sectors = 2 limit=16
[  735.017435][T17430] erofs (device loop9): read error -5 @ 0 of nid 36
[  735.091038][T17437] syzkaller0: entered promiscuous mode
[  735.091077][T17437] syzkaller0: entered allmulticast mode
[  735.103828][T14411] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  735.255930][T14411] usb 1-1: Using ep0 maxpacket: 8
[  735.266163][T14411] usb 1-1: unable to get BOS descriptor or descriptor too short
[  735.266214][T14411] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  735.272607][T14411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  735.272645][T14411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  735.272677][T14411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  735.272940][T14411] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  735.272969][T14411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  735.272996][T14411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 12639, setting to 1024
[  735.273024][T14411] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[  735.304466][T14411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.304501][T14411] usb 1-1: Product: syz
[  735.304531][T14411] usb 1-1: Manufacturer: syz
[  735.304554][T14411] usb 1-1: SerialNumber: syz
[  735.313410][T14411] usb 1-1: config 0 descriptor??
[  735.319445][T17433] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  735.322147][T17433] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  735.330387][T14411] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  735.440267][T17449] netlink: 188 bytes leftover after parsing attributes in process `syz.7.4444'.
[  735.543026][T14274] Bluetooth: hci3: command 0x0c1a tx timeout
[  735.616811][T14411] usb 1-1: USB disconnect, device number 39
[  735.691532][T17457] loop9: detected capacity change from 0 to 512
[  735.727046][T17457] EXT4-fs error (device loop9): ext4_iget_extra_inode:5210: inode #15: comm syz.9.4448: corrupted in-inode xattr: invalid ea_ino
[  735.727091][T17457] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  735.732121][T17457] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.4448: couldn't read orphan inode 15 (err -117)
[  735.732164][T17457] loop9: lost filesystem error report for type 5 error -117
[  735.735142][    C0] EXT4-fs (loop9): error count since last fsck: 2
[  735.735152][    C0] EXT4-fs (loop9): initial error at time 1797353142: ext4_iget_extra_inode:5210: inode 15
[  735.735163][    C0] EXT4-fs (loop9): last error at time 1797353142: ext4_orphan_get:1408
[  735.736802][T17457] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  735.858055][T14984] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  735.999270][T17465] bond1: option updelay: invalid value (18446744071562067968)
[  736.001903][T17465] bond1: option updelay: allowed values 0 - 2147483647
[  736.010045][T17465] bond1 (unregistering): Released all slaves
[  736.218013][T17474] udevd[17474]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  736.607682][T17493] net_ratelimit: 3321 callbacks suppressed
[  736.607739][T17493] ip_tables: iptables: counters copy to user failed while replacing table
[  736.674981][T17485] loop0: detected capacity change from 0 to 32768
[  736.690005][T17485] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  736.715350][T17485] XFS (loop0): Ending clean mount
[  736.719938][T17495] loop9: detected capacity change from 0 to 4096
[  736.746224][T14274] Bluetooth: hci1: command 0x0c1a tx timeout
[  736.783505][T17504] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  736.924174][T17507] loop9: detected capacity change from 0 to 4096
[  736.926484][T16576] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  736.990315][T17507] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities
[  737.031742][T17507] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4465'.
[  737.483123][T14411] usb 1-1: new full-speed USB device number 40 using dummy_hcd
[  737.520965][T17523] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4473'.
[  737.617700][T17527] loop9: detected capacity change from 0 to 256
[  737.623171][T14274] Bluetooth: hci3: command 0x0c1a tx timeout
[  737.625991][T17527] exfat: Deprecated parameter 'utf8'
[  737.627882][T17527] exfat: Deprecated parameter 'namecase'
[  737.629965][T17527] exfat: Deprecated parameter 'namecase'
[  737.633942][T14411] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  737.637807][T14411] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  737.637841][T14411] usb 1-1: config 0 has no interface number 0
[  737.637881][T14411] usb 1-1: config 0 interface 41 has no altsetting 0
[  737.646815][T14411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.646849][T14411] usb 1-1: Product: syz
[  737.646878][T14411] usb 1-1: Manufacturer: syz
[  737.646902][T14411] usb 1-1: SerialNumber: syz
[  737.656972][T14411] usb 1-1: config 0 descriptor??
[  737.667809][T17527] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  738.182807][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  738.288929][T17546] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4484'.
[  739.514562][T14411] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  739.850517][T17557] loop9: detected capacity change from 0 to 736
[  739.851728][T14411] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  739.851775][T14411] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[  739.851892][T14411] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71
[  739.880614][T14411] usb 1-1: USB disconnect, device number 40
[  740.497595][T17570] loop0: detected capacity change from 0 to 32768
[  740.508021][T14411] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  740.562482][T17570] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  740.592557][T17570] XFS (loop0): Ending clean mount
[  740.665158][T14411] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  740.670410][T14411] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  740.670458][T14411] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  740.682647][T14411] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  740.682689][T14411] usb 10-1: SerialNumber: syz
[  740.851578][T16576] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  740.917462][T14411] usb 10-1: 0:2 : does not exist
[  741.003476][T14411] usb 10-1: USB disconnect, device number 21
[  741.044952][T17477] udevd[17477]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  741.321361][T17586] loop0: detected capacity change from 0 to 32768
[  741.387298][T17586] JBD2: Ignoring recovery information on journal
[  741.418196][T17586] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  741.450519][T14256] (kworker/u8:4,14256,0):ocfs2_check_dir_entry:339 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1
[  741.559404][T16576] ocfs2: Unmounting device (7,0) on (node local)
[  741.651682][T17590] overlayfs: failed to verify upper (375/file0, ino=1981, err=-116)
[  741.665896][T17590] overlayfs: failed to verify index dir 'upper' xattr
[  741.668303][T17590] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  741.739837][T17594] loop9: detected capacity change from 0 to 512
[  741.762045][T17594] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -13
[  741.762096][T17594] EXT4-fs error (device loop9): ext4_orphan_get:1403: comm syz.9.4499: inode #15: comm syz.9.4499: iget: illegal inode #
[  741.762187][T17594] loop9: lost filesystem error report for type 5 error -117
[  741.765058][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  741.765068][    C0] EXT4-fs (loop9): initial error at time 1797353148: ext4_orphan_get:1403
[  741.765077][    C0] EXT4-fs (loop9): last error at time 1797353148: ext4_orphan_get:1403
[  741.767043][T17594] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.4499: couldn't read orphan inode 15 (err -117)
[  741.767057][T17594] loop9: lost filesystem error report for type 5 error -117
[  741.771943][T17594] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  741.856077][T14984] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  742.455510][T17605] loop0: detected capacity change from 0 to 32768
[  742.552511][   T36] audit: type=1800 audit(1797353149.198:3743): pid=17605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4504" name="file1" dev="loop0" ino=7 res=0 errno=0
[  743.002288][T17626] loop0: detected capacity change from 0 to 4096
[  743.028950][T17626] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  743.065951][ T1115] ntfs3(loop0): ino=9, ntfs3_write_inode failed, -22.
[  743.071140][T16576] ntfs3(loop0): ino=9, ntfs_sync_fs failed, -22.
[  743.458765][T17633] loop0: detected capacity change from 0 to 32768
[  743.486917][T17633] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  743.510022][T17633] XFS (loop0): Ending clean mount
[  743.590861][T16576] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  744.032862][ T5753] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  744.194419][ T5753] usb 10-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  744.199566][ T5753] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  744.199608][ T5753] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  744.199636][ T5753] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  744.199667][ T5753] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  744.199701][ T5753] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  744.217798][T17649] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  744.217887][T17649] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  744.218034][T17649] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  744.218107][T17649] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  744.300791][ T5753] cxacru 10-1:1.0: send of cm 0x90 failed (-71)
[  744.366047][T17661] cxacru 10-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2
[  744.370099][T17661] cxacru 10-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin
[  745.455106][ T5753] usb 10-1: USB disconnect, device number 22
[  746.082623][T17676] loop9: detected capacity change from 0 to 512
[  746.089302][T17676] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  746.104620][T17676] EXT4-fs (loop9): 1 truncate cleaned up
[  746.107617][T17676] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  746.147921][T14984] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  746.987883][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  746.991616][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  746.999214][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  747.115603][T17685] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4531'.
[  747.228891][T17691] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  748.389653][T14274] Bluetooth: hci1: unexpected event for opcode 0x0c25
[  749.464768][T17717] Invalid argument reading file caps for ./file0
[  749.514969][T17719] loop0: detected capacity change from 0 to 2048
[  749.529585][T17719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  749.574408][T16576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  749.760565][T17724] loop0: detected capacity change from 0 to 40427
[  749.767738][T17724] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  749.767811][T17724] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  749.776397][T17724] F2FS-fs (loop0): invalid crc value
[  749.848548][T17724] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  749.859220][T17724] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  749.861639][T17724] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  749.892207][T16576] syz-executor: attempt to access beyond end of device
[  749.892207][T16576] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  749.903879][T16576] CPU: 0 UID: 0 PID: 16576 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  749.903916][T16576] Tainted: [L]=SOFTLOCKUP
[  749.903920][T16576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  749.903925][T16576] Call Trace:
[  749.903929][T16576]  <TASK>
[  749.903933][T16576]  dump_stack_lvl+0xe8/0x150
[  749.903948][T16576]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  749.903960][T16576]  f2fs_write_end_bio+0x1211/0x16e0
[  749.903969][T16576]  ? blkg_put+0x22/0x240
[  749.903985][T16576]  __submit_merged_bio+0x258/0x6a0
[  749.903995][T16576]  ? rcu_is_watching+0x16/0xb0
[  749.904008][T16576]  __submit_merged_write_cond+0x3c9/0x4e0
[  749.904021][T16576]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  749.904039][T16576]  f2fs_write_data_pages+0x2a27/0x36f0
[  749.904062][T16576]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  749.904112][T16576]  ? __pfx_hlock_conflict+0x10/0x10
[  749.904122][T16576]  ? __bfs+0x153/0x290
[  749.904129][T16576]  ? __pfx_hlock_conflict+0x10/0x10
[  749.904144][T16576]  ? lockdep_unlock+0x5c/0xd0
[  749.904154][T16576]  ? __lock_acquire+0x14b9/0x2e50
[  749.904171][T16576]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  749.904182][T16576]  do_writepages+0x338/0x560
[  749.904197][T16576]  ? do_raw_spin_unlock+0x4d/0x200
[  749.904209][T16576]  filemap_fdatawrite+0x1e9/0x2f0
[  749.904218][T16576]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  749.904257][T16576]  ? do_raw_spin_unlock+0x4d/0x200
[  749.904270][T16576]  f2fs_sync_dirty_inodes+0x30e/0x830
[  749.904283][T16576]  f2fs_write_checkpoint+0xa3d/0x2710
[  749.904290][T16576]  ? __lock_acquire+0x6df/0x2e50
[  749.904308][T16576]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  749.904335][T16576]  kill_f2fs_super+0x2dd/0x700
[  749.904350][T16576]  ? __pfx_kill_f2fs_super+0x10/0x10
[  749.904365][T16576]  ? call_rcu+0x64d/0x8b0
[  749.904373][T16576]  ? lockdep_hardirqs_on+0x7b/0x110
[  749.904390][T16576]  deactivate_locked_super+0xbc/0x110
[  749.904401][T16576]  cleanup_mnt+0x3d3/0x460
[  749.904411][T16576]  task_work_run+0x1d9/0x270
[  749.904421][T16576]  ? __pfx_task_work_run+0x10/0x10
[  749.904432][T16576]  exit_to_user_mode_loop+0x204/0x770
[  749.904441][T16576]  ? rcu_is_watching+0x16/0xb0
[  749.904450][T16576]  do_syscall_64+0x328/0x520
[  749.904457][T16576]  ? trace_irq_disable+0x3b/0x140
[  749.904465][T16576]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.904475][T16576]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.904482][T16576] RIP: 0033:0x7faa7859f397
[  749.904491][T16576] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  749.904497][T16576] RSP: 002b:00007ffd6395d6d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  749.904507][T16576] RAX: 0000000000000000 RBX: 00007faa78634474 RCX: 00007faa7859f397
[  749.904513][T16576] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6395d790
[  749.904517][T16576] RBP: 00007ffd6395d790 R08: 00007ffd6395e790 R09: 00000000ffffffff
[  749.904523][T16576] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6395e820
[  749.904527][T16576] R13: 00007faa78634474 R14: 00000000000b72ba R15: 00007ffd6395e860
[  749.904539][T16576]  </TASK>
[  750.035263][T16576] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  750.527394][T17744] UBIFS error (pid: 17744): cannot open "ubi:0", error -19
[  750.846174][T17753] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4557'.
[  750.953269][T17758] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4559'.
[  751.269652][   T36] audit: type=1800 audit(1797353157.918:3744): pid=17769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.4564" name="/newroot/148/file0" dev="tmpfs" ino=798 res=0 errno=0
[  751.366330][T17778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4569'.
[  751.410486][T17778] netlink: 'syz.0.4569': attribute type 1 has an invalid length.
[  751.413887][T17778] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4569'.
[  751.467264][T17781] loop7: detected capacity change from 0 to 4096
[  751.484335][T17781] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  751.484373][T17781] EXT4-fs (loop7): Test dummy encryption mode enabled
[  751.498186][T17782] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication
[  751.501773][T17781] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  751.501868][T17781] System zones: 0-5
[  751.508180][T17781] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  751.611323][T14530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  751.689904][T17785] comedi comedi1: pcl812: I/O port conflict (0x100,16)
[  752.058525][T17799] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode
[  752.063745][T17799] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  752.359460][T17807] loop0: detected capacity change from 0 to 2048
[  752.369835][T17807] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  752.369872][T17807] UDF-fs: Scanning with blocksize 512 failed
[  752.377609][T17807] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  752.390935][T17807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  752.772825][   T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  752.927167][   T10] usb 1-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00
[  752.931996][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  752.936289][   T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[  752.942983][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.946317][   T10] usb 1-1: Product: syz
[  752.948302][   T10] usb 1-1: Manufacturer: syz
[  752.950273][   T10] usb 1-1: SerialNumber: syz
[  752.964099][   T10] whiteheat 1-1:1.0: Connect Tech - WhiteHEAT converter detected
[  753.168286][   T10] usb 1-1: Connect Tech - WhiteHEAT: Send command incomplete [0]
[  753.171336][   T10] usb 1-1: Connect Tech - WhiteHEAT: Unable to retrieve firmware version, try replugging
[  753.176208][   T10] usb 1-1: Connect Tech - WhiteHEAT: If the firmware is not running (status led not blinking)
[  753.179943][   T10] usb 1-1: Connect Tech - WhiteHEAT: please contact support@connecttech.com
[  753.380667][   T10] usb 1-1: USB disconnect, device number 41
[  754.026996][T17817] loop0: detected capacity change from 0 to 1024
[  754.031655][T17817] EXT4-fs: Ignoring removed nomblk_io_submit option
[  754.054955][T17817] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2042c018, mo2=0102]
[  754.057953][T17817] System zones: 0-1, 3-12
[  754.063639][T17817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  754.084906][T16576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  754.859629][T17832] loop7: detected capacity change from 0 to 256
[  754.891879][T17832] exFAT-fs (loop7): error, no upcase table entry. Please run fsck
[  754.900380][T17832] exFAT-fs (loop7): Filesystem has been set read-only
[  754.903761][T17832] exFAT-fs (loop7): failed to test first cluster bit of root dir(5)
[  754.988958][T17834] Rounding down aligned max_sectors from 4294967295 to 4294967288
[  755.406828][   T36] audit: type=1326 audit(1797353162.058:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.9.4601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8839e159 code=0x7ffc0000
[  755.406878][   T36] audit: type=1326 audit(1797353162.058:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.9.4601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8839e159 code=0x7ffc0000
[  755.425709][   T36] audit: type=1326 audit(1797353162.078:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.9.4601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8839e159 code=0x7ffc0000
[  755.435723][   T36] audit: type=1326 audit(1797353162.088:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.9.4601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8839e159 code=0x7ffc0000
[  755.445670][   T36] audit: type=1326 audit(1797353162.098:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.9.4601" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7feb8839e159 code=0x7ffc0000
[  755.485807][   T36] audit: type=1326 audit(1797353162.138:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17853 comm="syz.9.4601" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb8835e98e code=0x7ffc0000
[  755.510095][   T36] audit: type=1326 audit(1797353162.158:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.9.4601" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb8835e98e code=0x7ffc0000
[  755.518683][   T36] audit: type=1326 audit(1797353162.168:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.9.4601" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb8835e98e code=0x7ffc0000
[  755.528809][   T36] audit: type=1326 audit(1797353162.178:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.9.4601" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb8835e98e code=0x7ffc0000
[  755.831523][T17846] loop0: detected capacity change from 0 to 32768
[  756.511379][T17882] netlink: 'syz.0.4615': attribute type 1 has an invalid length.
[  756.697131][T17886] loop0: detected capacity change from 0 to 1024
[  756.706434][T17886] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  757.087635][T17896] tmpfs: Bad value for 'mpol'
[  757.316199][T17907] loop0: detected capacity change from 0 to 512
[  757.330469][T17907] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  757.341734][T17907] EXT4-fs (loop0): 1 truncate cleaned up
[  757.342510][T17907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  757.366246][   T36] kauditd_printk_skb: 49 callbacks suppressed
[  757.366313][   T36] audit: type=1800 audit(1797353164.018:3803): pid=17907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4627" name="file1" dev="loop0" ino=15 res=0 errno=0
[  757.411745][T17907] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6537: inode #15: comm syz.0.4627: bad extra_isize 62 (inode size 256)
[  757.462356][T17907] EXT4-fs (loop0): Remounting filesystem read-only
[  757.487507][T16576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  757.799346][T17911] loop0: detected capacity change from 0 to 32768
[  757.810511][T17911] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  757.831320][T17911] XFS (loop0): Ending clean mount
[  757.879223][T16576] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  758.166806][T14274] Bluetooth: hci3: unexpected event for opcode 0x2019
[  758.206389][T17902] comedi comedi1: reset error (fatal)
[  760.018121][T17932] syz.9.4634 (17932): drop_caches: 2
[  760.560975][T17942] loop0: detected capacity change from 0 to 1024
[  760.566898][T17942] EXT4-fs: Ignoring removed orlov option
[  760.589056][T17942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  760.701199][T17942] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  761.771806][T17962] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4647'.
[  761.824584][T17962] netlink: 'syz.9.4647': attribute type 14 has an invalid length.
[  761.824638][T17962] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4647'.
[  762.183112][T14274] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  762.191567][T14274] Bluetooth: hci3: Injecting HCI hardware error event
[  762.202208][T14274] Bluetooth: hci3: hardware error 0x00
[  762.462058][T17963] loop7: detected capacity change from 0 to 32768
[  762.486888][T17963] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  762.518680][T17963] XFS (loop7): Ending clean mount
[  762.559595][T17979] input: syz1 as /devices/virtual/input/input37
[  762.658793][T14530] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  763.008369][T17987] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4653'.
[  763.384923][T18005] netlink: 'syz.7.4663': attribute type 1 has an invalid length.
[  763.406209][T18005] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4663'.
[  763.622836][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  763.896224][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4677'.
[  764.091078][T18044] netlink: 'syz.0.4683': attribute type 13 has an invalid length.
[  764.267399][T14274] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  764.452033][T18062] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  764.939315][T18064] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02
[  765.014899][T18078] device-mapper: ioctl: name not supplied when creating device
[  765.495985][T18104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4711'.
[  766.359043][T18138] xt_hashlimit: size too large, truncated to 1048576
[  766.828445][T18142] loop7: detected capacity change from 0 to 32768
[  767.486525][T18152] netlink: 'syz.7.4731': attribute type 10 has an invalid length.
[  767.524409][T18154] loop7: detected capacity change from 0 to 256
[  769.161757][T18217] loop9: detected capacity change from 0 to 512
[  769.171400][T18217] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  769.179536][T18217] EXT4-fs (loop9): 1 truncate cleaned up
[  769.180247][T18217] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  769.202059][T18217] EXT4-fs error (device loop9): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.9.4763: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  769.221304][T18217] EXT4-fs (loop9): Remounting filesystem read-only
[  769.224735][T18217] EXT4-fs warning (device loop9): ext4_rename_delete:3741: inode #2: comm syz.9.4763: Deleting old file: nlink 5, error=-117
[  769.241219][T14984] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  770.007729][T18234] bond1: option all_slaves_active: invalid value (8)
[  770.013523][T18234] bond1 (unregistering): Released all slaves
[  770.088730][T18237] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4771'.
[  771.093937][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  771.618144][T18302] netlink: 'syz.0.4801': attribute type 2 has an invalid length.
[  771.620862][T18302] netlink: 'syz.0.4801': attribute type 2 has an invalid length.
[  771.871423][T18317] netlink: 'syz.0.4808': attribute type 11 has an invalid length.
[  771.874868][T18317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4808'.
[  772.024035][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  773.078072][T18349] loop7: detected capacity change from 0 to 1024
[  773.158299][T18349] syz.7.4823: attempt to access beyond end of device
[  773.158299][T18349] loop7: rw=8390665, sector=262, nr_sectors = 65274 limit=1024
[  773.329984][T18357] input: syz0 as /devices/virtual/input/input38
[  773.874222][T18379] netlink: 'syz.7.4837': attribute type 32 has an invalid length.
[  773.970235][T18383] team0: No ports can be present during mode change
[  774.263509][ T5341] veth0_vlan: left promiscuous mode
[  774.291321][T14741] veth0_vlan: entered promiscuous mode
[  774.484423][T18410] loop7: detected capacity change from 0 to 1024
[  774.493639][T18410] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  774.608114][T18410] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 2: comm syz.7.4848: lblock 2 mapped to illegal pblock 2 (length 1)
[  774.612611][T18410] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  774.622760][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  774.622793][    C0] EXT4-fs (loop7): initial error at time 1797353181: ext4_map_blocks:790: inode 3: block 2
[  774.622876][    C0] EXT4-fs (loop7): last error at time 1797353181: ext4_map_blocks:790: inode 3: block 2
[  774.638838][T18410] Quota error (device loop7): qtree_write_dquot: dquota write failed
[  774.638897][T18410] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 48: comm syz.7.4848: lblock 0 mapped to illegal pblock 48 (length 1)
[  774.638933][T18410] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  774.649029][T18410] Quota error (device loop7): v2_write_file_info: Can't write info structure
[  774.649065][T18410] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.4848: Failed to acquire dquot type 0
[  774.649099][T18410] loop7: lost filesystem error report for type 5 error -117
[  774.661014][T18410] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6517: Corrupt filesystem
[  774.661053][T18410] loop7: lost filesystem error report for type 5 error -117
[  774.667029][T18410] EXT4-fs error (device loop7): ext4_evict_inode:269: inode #11: comm syz.7.4848: mark_inode_dirty error
[  774.667068][T18410] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  774.673448][T18410] EXT4-fs warning (device loop7): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[  774.673496][T18410] EXT4-fs (loop7): 1 orphan inode deleted
[  774.674237][T18410] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  774.693788][ T1112] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 1: comm kworker/u9:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  774.774178][ T1112] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  774.829443][ T1112] EXT4-fs error (device loop7): ext4_release_dquot:7105: comm kworker/u9:8: Failed to release dquot type 0
[  774.952085][T14530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  774.957858][   T55] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 1: comm kworker/u9:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  774.957897][   T55] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  774.963201][   T55] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  774.963248][   T55] EXT4-fs error (device loop7): ext4_release_dquot:7105: comm kworker/u9:3: Failed to release dquot type 0
[  774.963281][   T55] loop7: lost filesystem error report for type 5 error -117
[  774.977300][T14530] EXT4-fs error (device loop7): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  774.977349][T14530] loop7: lost filesystem error report for type 5 error -117
[  775.056125][T14530] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6517: Corrupt filesystem
[  775.079066][T14530] loop7: lost filesystem error report for type 5 error -117
[  775.079453][T14530] EXT4-fs error (device loop7): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error
[  775.079496][T14530] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  775.088449][T14530] EXT4-fs error (device loop7): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  775.088489][T14530] loop7: lost filesystem error report for type 5 error -117
[  775.725020][T18458] loop7: detected capacity change from 0 to 512
[  775.736281][T18458] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  775.751267][T18458] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: block 1803188595: comm syz.7.4865: lblock 0 mapped to illegal pblock 1803188595 (length 1)
[  775.751314][T18458] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  775.756323][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  775.756333][    C0] EXT4-fs (loop7): initial error at time 1797353182: ext4_map_blocks:790: inode 15: block 1803188595
[  775.756347][    C0] EXT4-fs (loop7): last error at time 1797353182: ext4_map_blocks:790: inode 15: block 1803188595
[  775.770461][T18458] EXT4-fs (loop7): Remounting filesystem read-only
[  775.770703][T18458] EXT4-fs (loop7): mount failed
[  777.000067][T18481] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  777.004451][T18481] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  777.733529][T18516] fuse: fd is not a fuse device
[  781.001857][T18541] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22
[  781.001909][T18541] netdevsim netdevsim9: Direct firmware load for . failed with error -22
[  781.001942][T18541] netdevsim netdevsim9: Falling back to sysfs fallback for: .
[  781.117298][T18553] loop7: detected capacity change from 0 to 1024
[  781.259066][T18553] hfsplus: xattr search failed
[  781.500846][T18570] netlink: 'syz.0.4915': attribute type 1 has an invalid length.
[  781.500886][T18570] netlink: 'syz.0.4915': attribute type 2 has an invalid length.
[  782.505615][T18618] bridge0: port 1(bridge_slave_0) entered forwarding state
[  782.918712][T18641] 9p: Bad value for 'rfdno'
[  785.540029][T18675] netlink: 'syz.9.4959': attribute type 1 has an invalid length.
[  785.617370][T18679] loop9: detected capacity change from 0 to 1764
[  785.750042][T18683] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4963'.
[  786.176222][T18704] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4973'.
[  786.176265][T18704] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4973'.
[  786.176339][T18704] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4973'.
[  787.707117][T18733] loop9: detected capacity change from 0 to 8
[  787.718293][T18733] SQUASHFS error: lzo decompression failed, data probably corrupt
[  787.721987][T18733] SQUASHFS error: Failed to read block 0x91: -5
[  787.722044][T18733] SQUASHFS error: Unable to read metadata cache entry [8f]
[  787.722076][T18733] SQUASHFS error: Unable to read inode 0x11f
[  788.763410][ T5766] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  788.825471][T18747] mac80211_hwsim hwsim24 wlan0: left promiscuous mode
[  788.828734][T18747] vlan2: left promiscuous mode
[  788.831990][T18747] bridge0: left promiscuous mode
[  789.294124][ T5727] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  789.296788][ T5727] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  789.323974][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  789.544528][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  789.632140][T14411] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  790.023262][T14492] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  790.079404][T18785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5004'.
[  791.567152][   T55] IPVS: starting estimator thread 0...
[  791.708009][T18796] IPVS: using max 86 ests per chain, 206400 per kthread
[  791.733296][T18798] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5009'.
[  792.308484][T18825] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5021'.
[  792.810881][T18831] sg_write: data in/out 483328/136 bytes for SCSI command 0x0-- guessing data in;
[  792.810881][T18831]    program syz.7.5023 not setting count and/or reply_len properly
[  792.995629][T18841] VFS: file-max limit 0 reached
[  793.094060][T18845] sd 0:0:0:0: PR command failed: 1026
[  793.096035][T18845] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  793.098576][T18845] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  793.462900][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  793.537846][T18864] loop9: detected capacity change from 0 to 512
[  793.543127][T18864] EXT4-fs: Ignoring removed mblk_io_submit option
[  793.546905][T18864] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  793.546942][T18864] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  793.569237][T18864] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4223: comm syz.9.5037: Allocating blocks 41-42 which overlap fs metadata
[  793.569287][T18864] loop9: lost filesystem error report for type 5 error -117
[  793.573722][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  793.573732][    C0] EXT4-fs (loop9): initial error at time 1797353200: ext4_mb_mark_diskspace_used:4223
[  793.573742][    C0] EXT4-fs (loop9): last error at time 1797353200: ext4_mb_mark_diskspace_used:4223
[  793.593235][T18864] Quota error (device loop9): write_blk: dquota write failed
[  793.596549][T18864] Quota error (device loop9): find_free_dqentry: Can't write quota data block 5
[  793.596686][T18864] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4223: comm syz.9.5037: Allocating blocks 41-42 which overlap fs metadata
[  793.596719][T18864] loop9: lost filesystem error report for type 5 error -117
[  793.608344][T18864] Quota error (device loop9): write_blk: dquota write failed
[  793.613551][T18864] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[  793.616895][T18864] EXT4-fs error (device loop9): ext4_acquire_dquot:7069: comm syz.9.5037: Failed to acquire dquot type 1
[  793.620626][T18864] loop9: lost filesystem error report for type 5 error -117
[  793.621307][T18864] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  793.632532][T18864] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.5037: corrupted inode contents
[  793.639697][T18864] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  793.641380][T18864] EXT4-fs error (device loop9): ext4_dirty_inode:6731: inode #12: comm syz.9.5037: mark_inode_dirty error
[  793.649210][T18864] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  793.649840][T18864] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.5037: corrupted inode contents
[  793.657398][T18864] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  793.657798][T18864] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #12: comm syz.9.5037: mark_inode_dirty error
[  793.668058][T18864] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  793.668642][T18864] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.5037: corrupted inode contents
[  793.668681][T18864] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  793.676053][T18864] EXT4-fs error (device loop9) in ext4_orphan_del:304: Corrupt filesystem
[  793.676089][T18864] loop9: lost filesystem error report for type 5 error -117
[  793.682223][T18864] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.5037: corrupted inode contents
[  793.682264][T18864] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  793.682454][T18864] EXT4-fs error (device loop9): ext4_truncate:4721: inode #12: comm syz.9.5037: mark_inode_dirty error
[  793.682520][T18864] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  793.696131][T18864] EXT4-fs error (device loop9) in ext4_process_orphan:346: Corrupt filesystem
[  793.696169][T18864] loop9: lost filesystem error report for type 5 error -117
[  793.702547][T18864] EXT4-fs (loop9): 1 truncate cleaned up
[  793.709185][T18864] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  793.760144][T18864] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  793.771041][T18864] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended
[  793.800974][T18864] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  793.857241][T18864] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4223: comm syz.9.5037: Allocating blocks 41-42 which overlap fs metadata
[  793.918814][T18864] Quota error (device loop9): write_blk: dquota write failed
[  793.930556][T18864] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[  793.935100][T18864] EXT4-fs error (device loop9): ext4_acquire_dquot:7069: comm syz.9.5037: Failed to acquire dquot type 1
[  793.975461][T14984] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  794.061917][T18881] loop9: detected capacity change from 0 to 8
[  794.069519][T18881] SQUASHFS error: lzo decompression failed, data probably corrupt
[  794.069560][T18881] SQUASHFS error: Failed to read block 0x144: -5
[  794.069643][T18881] SQUASHFS error: Unable to read metadata cache entry [142]
[  794.069667][T18881] SQUASHFS error: Unable to read inode 0x11f
[  794.255676][T18889] loop9: detected capacity change from 0 to 1024
[  794.258286][T18889] EXT4-fs: Ignoring removed bh option
[  794.288619][T18889] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  794.311765][T18893] FAULT_INJECTION: forcing a failure.
[  794.311765][T18893] name failslab, interval 1, probability 0, space 0, times 0
[  794.311812][T18893] CPU: 0 UID: 0 PID: 18893 Comm: syz.7.5047 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  794.311840][T18893] Tainted: [L]=SOFTLOCKUP
[  794.311845][T18893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  794.311850][T18893] Call Trace:
[  794.311853][T18893]  <TASK>
[  794.311880][T18893]  dump_stack_lvl+0xe8/0x150
[  794.311897][T18893]  should_fail_ex+0x410/0x560
[  794.311909][T18893]  should_failslab+0xa8/0x100
[  794.311921][T18893]  __kmalloc_noprof+0xfe/0x720
[  794.311930][T18893]  ? load_msg+0xd1/0x3b0
[  794.311940][T18893]  ? load_msg+0xd1/0x3b0
[  794.311951][T18893]  load_msg+0xd1/0x3b0
[  794.311964][T18893]  do_msgrcv+0x278/0x13f0
[  794.311975][T18893]  ? __pfx_do_msg_fill+0x10/0x10
[  794.311987][T18893]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  794.311998][T18893]  ? __se_sys_futex+0x3a8/0x450
[  794.312008][T18893]  ? __pfx_do_msgrcv+0x10/0x10
[  794.312017][T18893]  ? __pfx___x64_sys_timer_create+0x10/0x10
[  794.312026][T18893]  ? ksys_write+0x242/0x270
[  794.312035][T18893]  ? rcu_is_watching+0x16/0xb0
[  794.312046][T18893]  ? __x64_sys_msgrcv+0x20/0xd0
[  794.312058][T18893]  do_syscall_64+0x166/0x520
[  794.312065][T18893]  ? trace_irq_disable+0x3b/0x140
[  794.312073][T18893]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.312083][T18893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.312090][T18893] RIP: 0033:0x7f303d19e159
[  794.312099][T18893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  794.312106][T18893] RSP: 002b:00007f303df8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046
[  794.312116][T18893] RAX: ffffffffffffffda RBX: 00007f303d425fa0 RCX: 00007f303d19e159
[  794.312121][T18893] RDX: 00000000ffffff4e RSI: 0000200000002fc0 RDI: 0000000000000000
[  794.312127][T18893] RBP: 00007f303d235024 R08: 0000000000004800 R09: 0000000000000000
[  794.312132][T18893] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  794.312136][T18893] R13: 00007f303d426038 R14: 00007f303d425fa0 R15: 00007ffee564d7e8
[  794.312148][T18893]  </TASK>
[  794.473909][T18897] netlink: 'syz.0.5048': attribute type 1 has an invalid length.
[  794.473948][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5048'.
[  794.473979][T18897] netlink: 'syz.0.5048': attribute type 1 has an invalid length.
[  794.474003][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5048'.
[  794.474062][T18897] iwpm_send_hello: Unable to send a nlmsg
[  794.546435][T18889] EXT4-fs error (device loop9): __ext4_remount:6872: comm syz.9.5046: Abort forced by user
[  794.558385][T18889] EXT4-fs (loop9): Remounting filesystem read-only
[  794.558424][T18889] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000.
[  794.605247][T14984] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  794.832452][T18918] loop9: detected capacity change from 0 to 1024
[  794.883915][T18918] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  794.968690][T18924] loop7: detected capacity change from 0 to 164
[  795.434697][T18936] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  795.438376][T18936] overlayfs: overlapping lowerdir path
[  795.555039][T18938] 
[  795.555855][T18938] ======================================================
[  795.558215][T18938] WARNING: possible circular locking dependency detected
[  795.560575][T18938] syzkaller #0 Tainted: G             L     
[  795.562537][T18938] ------------------------------------------------------
[  795.564722][T18938] syz.7.5065/18938 is trying to acquire lock:
[  795.566570][T18938] ffff888107891900 (&sb->s_type->i_mutex_key#34){++++}-{4:4}, at: configfs_depend_item_unlocked+0x153/0x420
[  795.570013][T18938] 
[  795.570013][T18938] but task is already holding lock:
[  795.572328][T18938] ffffffff8fc6dc60 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0xf8/0x550
[  795.575154][T18938] 
[  795.575154][T18938] which lock already depends on the new lock.
[  795.575154][T18938] 
[  795.578324][T18938] 
[  795.578324][T18938] the existing dependency chain (in reverse order) is:
[  795.581079][T18938] 
[  795.581079][T18938] -> #3 (tpg_instances_lock){+.+.}-{4:4}:
[  795.583532][T18938]        __mutex_lock+0x19d/0x1550
[  795.585137][T18938]        tcm_alloc_inst+0x65/0x1a0
[  795.586739][T18938]        usb_get_function_instance+0xe3/0x2f0
[  795.588649][T18938]        function_make+0x127/0x360
[  795.590221][T18938]        configfs_mkdir+0x4f6/0x9e0
[  795.591852][T18938]        vfs_mkdir+0x40c/0x620
[  795.593358][T18938]        filename_mkdirat+0x285/0x510
[  795.595002][T18938]        __se_sys_mkdir+0x34/0x150
[  795.596579][T18938]        do_syscall_64+0x166/0x520
[  795.598182][T18938]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.600185][T18938] 
[  795.600185][T18938] -> #2 (func_lock){+.+.}-{4:4}:
[  795.602334][T18938]        __mutex_lock+0x19d/0x1550
[  795.603930][T18938]        usb_get_function_instance+0x2e/0x2f0
[  795.605792][T18938]        function_make+0x127/0x360
[  795.607409][T18938]        configfs_mkdir+0x4f6/0x9e0
[  795.609035][T18938]        vfs_mkdir+0x40c/0x620
[  795.610543][T18938]        filename_mkdirat+0x285/0x510
[  795.612173][T18938]        __se_sys_mkdirat+0x35/0x150
[  795.613807][T18938]        do_syscall_64+0x166/0x520
[  795.615356][T18938]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.617303][T18938] 
[  795.617303][T18938] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}:
[  795.619773][T18938]        __mutex_lock+0x19d/0x1550
[  795.621324][T18938]        uvcg_streaming_header_allow_link+0x75/0x4d0
[  795.623389][T18938]        configfs_symlink+0x59a/0x1030
[  795.625057][T18938]        vfs_symlink+0x18b/0x330
[  795.626579][T18938]        filename_symlinkat+0x1cd/0x410
[  795.628304][T18938]        __se_sys_symlink+0x4d/0x2b0
[  795.629960][T18938]        do_syscall_64+0x166/0x520
[  795.631554][T18938]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.633551][T18938] 
[  795.633551][T18938] -> #0 (&sb->s_type->i_mutex_key#34){++++}-{4:4}:
[  795.636208][T18938]        __lock_acquire+0x15ff/0x2e50
[  795.637888][T18938]        lock_acquire+0x115/0x350
[  795.639486][T18938]        down_write+0x96/0x200
[  795.640991][T18938]        configfs_depend_item_unlocked+0x153/0x420
[  795.643016][T18938]        usbg_make_tpg+0x1e0/0x550
[  795.644620][T18938]        target_fabric_make_tpg+0xa8/0x6d0
[  795.646440][T18938]        configfs_mkdir+0x4f6/0x9e0
[  795.648094][T18938]        vfs_mkdir+0x40c/0x620
[  795.649631][T18938]        filename_mkdirat+0x285/0x510
[  795.651482][T18938]        __se_sys_mkdir+0x34/0x150
[  795.653146][T18938]        do_syscall_64+0x166/0x520
[  795.654802][T18938]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.656886][T18938] 
[  795.656886][T18938] other info that might help us debug this:
[  795.656886][T18938] 
[  795.660124][T18938] Chain exists of:
[  795.660124][T18938]   &sb->s_type->i_mutex_key#34 --> func_lock --> tpg_instances_lock
[  795.660124][T18938] 
[  795.664519][T18938]  Possible unsafe locking scenario:
[  795.664519][T18938] 
[  795.666957][T18938]        CPU0                    CPU1
[  795.668649][T18938]        ----                    ----
[  795.670302][T18938]   lock(tpg_instances_lock);
[  795.671777][T18938]                                lock(func_lock);
[  795.673742][T18938]                                lock(tpg_instances_lock);
[  795.675934][T18938]   lock(&sb->s_type->i_mutex_key#34);
[  795.677646][T18938] 
[  795.677646][T18938]  *** DEADLOCK ***
[  795.677646][T18938] 
[  795.680143][T18938] locks held by syz.7.5065/18938: 4, last CPU#0:
[  795.682199][T18938]  #0: ffff888106f5e460 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  795.685336][T18938]  #1: ffff88811aea9900 (&sb->s_type->i_mutex_key#8/1){+.+.}-{4:4}, at: filename_create+0x200/0x370
[  795.688792][T18938]  #2: ffffffff8f938528 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b0/0x9e0
[  795.691800][T18938]  #3: ffffffff8fc6dc60 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0xf8/0x550
[  795.694882][T18938] 
[  795.694882][T18938] stack backtrace:
[  795.696927][T18938] CPU: 0 UID: 0 PID: 18938 Comm: syz.7.5065 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  795.700377][T18938] Tainted: [L]=SOFTLOCKUP
[  795.701965][T18938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  795.705442][T18938] Call Trace:
[  795.706608][T18938]  <TASK>
[  795.707583][T18938]  dump_stack_lvl+0xe8/0x150
[  795.709063][T18938]  print_circular_bug+0x2e2/0x300
[  795.710680][T18938]  check_noncircular+0x12f/0x150
[  795.712249][T18938]  __lock_acquire+0x15ff/0x2e50
[  795.713918][T18938]  ? __mutex_trylock_common+0x15f/0x270
[  795.715714][T18938]  ? __pfx___mutex_trylock_common+0x10/0x10
[  795.717667][T18938]  ? rcu_is_watching+0x16/0xb0
[  795.719213][T18938]  lock_acquire+0x115/0x350
[  795.720862][T18938]  ? configfs_depend_item_unlocked+0x153/0x420
[  795.722842][T18938]  down_write+0x96/0x200
[  795.724238][T18938]  ? configfs_depend_item_unlocked+0x153/0x420
[  795.726251][T18938]  ? __pfx_down_write+0x10/0x10
[  795.727847][T18938]  ? kstrtoull+0x137/0x1d0
[  795.729302][T18938]  configfs_depend_item_unlocked+0x153/0x420
[  795.731221][T18938]  usbg_make_tpg+0x1e0/0x550
[  795.732676][T18938]  ? configfs_mkdir+0x4b0/0x9e0
[  795.734298][T18938]  ? __pfx___mutex_lock+0x10/0x10
[  795.735924][T18938]  ? __pfx_usbg_make_tpg+0x10/0x10
[  795.737628][T18938]  ? do_raw_spin_lock+0x12b/0x2f0
[  795.739239][T18938]  target_fabric_make_tpg+0xa8/0x6d0
[  795.740918][T18938]  configfs_mkdir+0x4f6/0x9e0
[  795.742418][T18938]  ? d_splice_alias+0x12/0x30
[  795.744206][T18938]  ? __pfx_configfs_mkdir+0x10/0x10
[  795.745918][T18938]  ? generic_permission+0x2bf/0x670
[  795.747674][T18938]  ? bpf_lsm_inode_mkdir+0x9/0x20
[  795.749298][T18938]  vfs_mkdir+0x40c/0x620
[  795.750693][T18938]  filename_mkdirat+0x285/0x510
[  795.752251][T18938]  ? __pfx_filename_mkdirat+0x10/0x10
[  795.754009][T18938]  ? do_getname+0x151/0x250
[  795.755466][T18938]  __se_sys_mkdir+0x34/0x150
[  795.756951][T18938]  do_syscall_64+0x166/0x520
[  795.758408][T18938]  ? trace_irq_disable+0x3b/0x140
[  795.760016][T18938]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.761942][T18938]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.763836][T18938] RIP: 0033:0x7f303d19e159
[  795.765264][T18938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  795.771696][T18938] RSP: 002b:00007f303df8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  795.774370][T18938] RAX: ffffffffffffffda RBX: 00007f303d425fa0 RCX: 00007f303d19e159
[  795.776868][T18938] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600
[  795.779263][T18938] RBP: 00007f303d235024 R08: 0000000000000000 R09: 0000000000000000
[  795.781782][T18938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  795.784317][T18938] R13: 00007f303d426038 R14: 00007f303d425fa0 R15: 00007ffee564d7e8
[  795.786871][T18938]  </TASK>
[  795.807492][T14984] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  798.182964][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  802.663062][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
