last executing test programs:

2m29.025997694s ago: executing program 2 (id=661):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

2m28.884713243s ago: executing program 2 (id=662):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c636f686572656e63793d66756c6c2c726573765f6c6576656c3d303030303030303030303030303030303030303000000000000000006f636b732c636f686572656e63793d66756c6c2c696e6f646536342c00bc223b43a5f0d5ec0cf95242"], 0x1, 0x4421, &(0x7f0000004500)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000380)='.\x00', 0x2042023, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

2m28.554640826s ago: executing program 2 (id=663):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000000), &(0x7f00000000c0)=0x14)

2m28.414794996s ago: executing program 2 (id=666):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x353, @time={0x95}})

2m28.335360382s ago: executing program 2 (id=668):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$eJzskr9OAkEQxr+9O/5oFDWxooGC+KdQjkONnZbY29lI4ETiocKRKITijDEUFsbSJ+A1THwBLYwPQE1BrM2ZvZ3bLL6C+yvu2/l2ZnZ2c+d+208B+JkOajhEhIkMPhiDBSDHhDcxhD6TfpI+CcE75R2Rf0+a9Xv9JAC+nceKMC6qnud28gC+I09a/sGdgUnU6ms6qPHFKYAwDEPu1QGejgUlxwTQVnKyFrAaXSKUORYNsA6g2G1dF/1ef6vZqjbchnvpmOU9e8e2d53iWdNzbfFlyhF0FXDdBJBKQ8L3EwAeKJ7HLEwZjfbZHE5kbTJ+www9IExZayi1sTK8yrlSSsUx1sDHugmWFLcQdbEQXakCBpOCkqXMJ85KRxvbtSuvPgQDi8tGsGSP0hgJGThqUN4PsChaDallgbRCOiIdk+b+/DJWwL+PFG0EQBK31W63U+KPJFYsXjnSc5YD9cH4qS/G7OXeDGg0Go1Go9FoNBrNf+c3AAD//8PfdhM=")
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0)
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)

2m27.44092409s ago: executing program 2 (id=678):
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c42)
r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0, 0x0, 0x22})
io_uring_enter(r0, 0x48ed, 0x0, 0x2, 0x0, 0x0)

2m27.080717089s ago: executing program 0 (id=686):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

2m27.00486889s ago: executing program 0 (id=688):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@const={0xa, 0x0, 0x0, 0xa, 0x1}, @typedef={0x0, 0x0, 0x0, 0x8, 0x4}]}}, 0x0, 0x32, 0x0, 0x1, 0x7, 0x10000}, 0x28)
mknod(0x0, 0x1000, 0x77b)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x442d, &(0x7f0000004480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0x7351, 0x8001)
ioctl$FITRIM(r0, 0x40406f06, &(0x7f00000000c0)={0x13, 0x1000000, 0x20})

2m26.568851003s ago: executing program 0 (id=694):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x1}})

2m26.365421008s ago: executing program 0 (id=695):
setuid(0xee01)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001)
r2 = getpgid(0x0)
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2})
sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1)

2m26.365041339s ago: executing program 0 (id=696):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x84, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0xd, @local, 0xfd5}}, [0x8000000000000000, 0x580, 0x4, 0x8000000005, 0x1, 0xffffffffffffffff, 0x26b3, 0x1, 0x23010c06, 0x0, 0x5, 0x100000000, 0x0, 0x1, 0x10004]}, &(0x7f0000000180)=0x100)

2m26.264316339s ago: executing program 0 (id=697):
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r1, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])
sync()
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1})
mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)

2m20.410811051s ago: executing program 1 (id=721):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x7, 0x0, 0x3}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0xfffd, 0x0, 0xb25}}}}}}}, 0x0)

2m20.325725362s ago: executing program 1 (id=722):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0x2, 0x0, 0x0, 0x1ff}]})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)

2m20.325311215s ago: executing program 1 (id=723):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)

2m20.325103845s ago: executing program 1 (id=724):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x1006019, &(0x7f0000000100)={[{@noblock_validity}, {@commit={'commit', 0x3d, 0x1}}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@quota}]}, 0x1, 0x63e, &(0x7f00000003c0)="$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")
syz_mount_image$fuse(&(0x7f0000002180), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0)

2m20.221566222s ago: executing program 1 (id=725):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=@newsa={0x120, 0x10, 0x421, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@empty, {}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @replay_esn_val={0x1c}]}, 0x120}}, 0x0)

2m19.875366787s ago: executing program 1 (id=726):
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000081c0)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x1, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0xfffffffffffffffd, 0x1, 0x0, 0x5dc, 0x120, 0x2000, 0x0, r2, 0x0, 0x501, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50)
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
ioctl$BLKPG(r3, 0x40104d14, &(0x7f00000002c0)={0x1, 0x0, 0x98, &(0x7f0000000580)={0xfffffffffffffffd, 0x0, 0x4}})

2m19.813219632s ago: executing program 32 (id=726):
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000081c0)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x1, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0xfffffffffffffffd, 0x1, 0x0, 0x5dc, 0x120, 0x2000, 0x0, r2, 0x0, 0x501, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50)
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
ioctl$BLKPG(r3, 0x40104d14, &(0x7f00000002c0)={0x1, 0x0, 0x98, &(0x7f0000000580)={0xfffffffffffffffd, 0x0, 0x4}})

2m12.210607298s ago: executing program 33 (id=678):
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c42)
r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0, 0x0, 0x22})
io_uring_enter(r0, 0x48ed, 0x0, 0x2, 0x0, 0x0)

2m11.27323083s ago: executing program 34 (id=697):
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r1, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])
sync()
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1})
mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)

55.632616882s ago: executing program 3 (id=1738):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x88, &(0x7f0000000080)={[{@barrier}, {@autodefrag}, {@noacl}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x74]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x4)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fsync(r0)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x2)

55.1847305s ago: executing program 3 (id=1739):
r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c64d2, &(0x7f0000000180)={0x0, 0x80000})

54.890790887s ago: executing program 3 (id=1740):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000400)=""/17, 0x11}, 0x100}], 0x1, 0x400101a2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a)

54.553863741s ago: executing program 3 (id=1746):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0)

54.553563067s ago: executing program 3 (id=1747):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x15)

54.394401013s ago: executing program 3 (id=1748):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01", @ANYBLOB="be79acdb6164cce6fcf49c06363592de200a41bdcc182083ef2da301c1a0c02036fd5f03aa147146e983e0d7b4bd943a110216148de63646bda54d59d0ede69fd3800843cc2f03e9a7fb1fd3b8ec8108b2bc84153a8564391aaba71f24c153431856d62c2bf76a3598a34bc24a8014b2a3adc9824ad5510e3b1e898f4f15fca71794bbbd43983d245fa699eb52e2c3b8e0f7147dbb4caf3e5013464340d7952981a83f1192d07208af2e89fa140b0f822044554e7311d0ca"], 0x1, 0x11ef, &(0x7f0000002440)="$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")
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x10000a0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)

54.324367899s ago: executing program 35 (id=1748):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01", @ANYBLOB="be79acdb6164cce6fcf49c06363592de200a41bdcc182083ef2da301c1a0c02036fd5f03aa147146e983e0d7b4bd943a110216148de63646bda54d59d0ede69fd3800843cc2f03e9a7fb1fd3b8ec8108b2bc84153a8564391aaba71f24c153431856d62c2bf76a3598a34bc24a8014b2a3adc9824ad5510e3b1e898f4f15fca71794bbbd43983d245fa699eb52e2c3b8e0f7147dbb4caf3e5013464340d7952981a83f1192d07208af2e89fa140b0f822044554e7311d0ca"], 0x1, 0x11ef, &(0x7f0000002440)="$eJzs3c9r23UYB/CnWbN2man113S7+EEvevnidvDkpUgLsoDSLcImCN/RVENiEvLNIRkeBt48+T94E4/eBPEf6H/hRYogetnJr2yZmx0tttI0HX29Lnng/Ql5HgKBT8hDdt/75ovOdpFt56OoLCzE4qAa6X6KFJU4F1P34u2vNv78+sat29fXGo31zZQ21m5efTeltPL6T598+f0bP48ufvzDyo9LsbP66e7v137ZubRzefevm5+3i9QuUq8/Snm60++P8jvdVtpqF50spY+6rbxopXavaA335Nvd/mAwSXlvq14bDFtFkfLeJHVakzTqp9FwkvLP8nYvZVmW6rVgr6WIKMvDnm5+d798cLosq3E+yrIsL0QtLsZzUY8L8XysxgvxYrwUL8crcSlejdfi8sNTs50BAAAAAAAAAAAAAAAAAAAAzpqD9/9X7P8DAAAAAAAAAAAAAAAAAADACTnq/v+vm/b/AQAAAAAAAAAAAAAAAAAA4Lgd+f//v61H2P8HAAAAAAAAAAAAAAAAAACAY3Xj1u3ra43G+mZKyxG/3Rs3x83p4zTf+KCx/k56aPXJs/4Yj5vnHudXp3namy9F7VF+bd98Od56c5o/yN7/sPFUfiW2Zj8+AAAAnAlZemzf+32WHZRPq399P/DU/X0xrizu94rLsxqF/6GY3O3k3W5rWEyq/xR351YsPOpqzm0ctuieP6DV6mnp8JkpKhFxCtqYfVE5HW38dzHnDyZOxJM3fd6dAAAAAAAAAAAAcBQn8XPCec8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/M0OHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArgoAAP//M0yPPQ==")
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x10000a0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)

15.777097514s ago: executing program 6 (id=2156):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8faa"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0)

15.705284616s ago: executing program 6 (id=2157):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x2}}, 0x10)

15.627345269s ago: executing program 6 (id=2159):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

15.416797115s ago: executing program 6 (id=2163):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000180)={0x1, 0x8000})

15.338052056s ago: executing program 6 (id=2165):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$sock_int(r0, 0x1, 0xe, 0x0, &(0x7f0000007880))

15.22819842s ago: executing program 6 (id=2167):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f00000002c0)=0x20f)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$vga_arbiter(0xffffff9c, &(0x7f00000003c0), 0x40, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

939.440261ms ago: executing program 5 (id=2340):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0xff, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==")
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000001480)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

806.787066ms ago: executing program 5 (id=2341):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x4, {0x7}, [@NDA_SRC_VNI={0x8, 0xb, 0x7}]}, 0x24}}, 0x0)

721.08984ms ago: executing program 5 (id=2342):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x9, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}}, 0x0)

645.924857ms ago: executing program 5 (id=2343):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000500)='./file0\x00', 0x22000844, &(0x7f0000000780)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="0002001100000000303030303030303030303030303030303030303135322c796f636884c178f94be4ee34617273657439697300926f38", @ANYBLOB="51060c4f1adb6e795b70e7edcdc5cd30e197ceacee351e08a6e2ee4650101fb28229b16aecf828a55c8aa0efd840e40fef6612e7b389eb304c41e39360e1f5cb6f78bd7100bd30bbd42aa24b2dc9171d068e92ac848e65c9", @ANYRES64, @ANYRESDEC], 0x81, 0x1536, &(0x7f00000008c0)="$eJzs3AuYjtX6MPB1r7UexiS9TXIY1r3uhzcNlkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyZbmiQJCUnWd7Hbn72/9t79+9f3+X977t91rXfWPc9zr+d+3nuueZ/nua6Zb3qMrNu8Xq2mRCT+EPjrl2QhRIwQYqgQ4hohRCCEqBhXMe7i9qsUJP+xg7A/14NpV7oCdiVx/3M37n/uxv3P3bj/uRv3P3fj/v9n0b9zf+5/7sb9Zyw32za76LU8ct3I+7f5/8vn//l+/fzfwx87KvtD+PP/P0hOuUlfbCh3fc/fkcL9z924/7kb9z934/7nbtz/3I37/5+v5r/Zxv3P3bj/jOVm/wOeRf//MmJ+ecuudB1/6rjCP36MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxnKJs/4yLYT42/xK18UYY4wxxhhjjLE/j897pStgjDHGGGOMMcbY/30gpFBCi0DkEXlFjMgnYsVVIr+4WhQQ14iIuFbEietEQXG9KCQKiyKiqIgXxURxYQQKK0iEooQoKaLiBlFK3CgSRGlRRpQVTpQTieImUV7cLCqIW0RFcauoJG4TlUUVUVVUE7eL6uIOUUPUFLXEnaK2qCPqinriLlFf3C0aiHtEQ3GvaCTuE43F/aKJeEA0FQ+KZuIh0Vw8LFqIR0RL0Uq0Fm1E2/9W/guij3hR9BX9RLLoLwaIl8RAMUgMFkPEUPGyGCZeEcPFqyJFjBAjxWtilHhdjBZviDFirBgn3hTjxQQxUUwSk8UUkSreElPF22KaeEdMFzPETDFLpInZYo54V8wV88R88Z5YIN4XC8UisVgsEeniA5EhlopM8aFYJj4SWWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im3iY7Fd7BA7xS6xW+wRe8UnYp/4VOwXn4ls8fnvzD/zf+T3BAECJEjQoCEP5IEYiIFYiIX8kB8KQAGIQATiIA4KQkEoBIWgCBSBeIiH4lAcEBAICEpACYhCFEpBKUiABCgDZcCBg0RIhPJwM1SAClARKkIlqASVoQpUgWpQDapDdagBNaAW1ILaUBvqQl24C+6Cu6EBNICG0BAaQSNoDI2hCTSBptAUmkEzaA7NoQW0gJbQElpDa2gLbaEdtIP20B46QkfoBJ2gM3SGJEiCLtAFukJX6AbdoDt0hx7QA3pCL+gFL8AL8CK8CP2gtuwPA2AADISBMBiGwBB4GYbBK/AKvAopMAJGwmvwGrwOo+E0jIGxMA7GQXU5ASbCJCA5BVIhFabCVJgG02A6zIAZMAvSYDbMgTkwF+bBPHgPFsD7Z9+HRbAIlkA6pEMGLIVMyIRlcAayYDmsgJWwClbDKlgL62AtbICNsAE2w2bYClvhY/gYdsAO2AW7YA/sgU/gE/gUPoUUyIZsOAAH4CAchENwCHIgBw7DYTgCR+AoHIVjcAyOwwk4CSfgFJyC03AGzsJZOAfn4Dw8F/9Vsz2l16cIeZGWWuaReWSMjJGxMlbml/llAVlARmRExsk4WVAWlIVkIVlEFpHxMl4Wl8UlSpQkQ1lClpBRGZWlZCmZIBNkGVlGOulkokyU5WV5WUFWkBXlrbKSvE1WllVkB1dNVpPVZUdXQ9aUtWQtWVvWkXVlPVlP1pf1ZQPZQDaUDWUj2Ug2lvfLJrI/DIYH5cXONJcjoIUcCS1lK9latpGvw6OynRwN7WUH2VE+LsfCGOgs27kk+ZTsIidCV/mMnATPyu5yCvSQz8uespfsLV+QfWR711f2k9OhvxwgZ8FAOUgOlkPkXKgjL3asrnxVpsgRcqR8TS6B1+Vo+YYcI8fKcfJNOV5OkBPlJDlZTpGp8i05Vb4tp8l35HQ5Q86Us2SanC3nyHflXDlPzpfvyQXyfblQLpKL5RKZLj+QGXKpzJQfymXyI5kll8sVcqVcJVfLNXKtXCfXyw1yo9wkN8stcqvcJj+W2+UOuVPukrvlHrlXfiL3yU/lfvmZzJafywPyL/Kg/EIekl/KHPmVPCy/lkfkN/Ko/FYek9/J4/KEPCm/l6fkD/K0PCPPyh/lOfmTPC9/lhekl0KBkkoprQKVR+VVMSqfilVXqfzqalVAXaMi6loVp65TBdX1qpAqrIqooipeFVPFlVGorCIVqhKqpIqqG1QpdaNKUKVVGVVWOVVOJaqbVHl1s6qgblEV1a2qkrpNVVZVVFVVTd2uqqs7VA1VU9VSd6raqo6qq+qpu1R9dbdqoO5RDdW9qpG6TzVW96sm6gHVVD2omqmHVHP1sGqhHlEtVSvVWrVRbdWjqp16TLVXHVRH9bjqpJ5QndWTKkk9pbqop1VX9Yzqpp5V3dVzqod6XvVUvVRv9bO6oLzqq/qpZNVfDVAvqYFqkBqshqih6mU1TL2ihqtXVYoaoUaq19Qo9board5QY9RYNU69qcarCWqimqQmqykqVb2lpqq31TT1jpquZqiZapZKU7PV4F9Wmv9fyH/7Un6MEOJy/vBLR9+qtqmP1Xa1Q+1Uu9RutUftVXvVPrVP7Vf7VbbKVgfUAXVQHVSH1CGVo3LUYXVYHVFH1FF1VB1Tx9RxdUL9qL5Xp9QP6rQ6o86oH9U5dU6d/+U9EBq01EprHeg8Oq+O0fl0rL5K59dX6wL6Gh3R1+o4fZ0uqK/XhXRhXUQX1fG6mC6ujUZtNelQl9AldVTfoEvpG3WCLq3L6LLa6XI6Ud/0h/N/q762uq1up9vp9rq97qg76k66k+6sO+sknaS76C66q+6qu+luurvurnvoHrqn7ql76966j+6j++q+Olkn6wH6JT1QD9KD9RA9VL+sh+lhergerlN0ih6pR+pRepQerUfrMXqMHqfH6fF6vJ6oJ+rJerJO1al6qp6qp+lperqermfqmTpNp+k5eo6eq+fq+Xq+XqAX6IV6oV6sF+t0na4zdIbO1Jl6mV6ms/RyvVyv1Cv1ar1ar9Vr9Xq9Xm/UG/VmvVln6W16m96ut+udeqferXfrvXqv3qf36f16v87W2fqAPqAP6oP6kD6kc3SOPqwP6yP6iD6qj+pj+pg+ro/rk/qkPqVP6dP6tD6rz+pz+pw+r8/rC/rCxcu+QAYy0IEO8gR5gpggJogNYoP8Qf6gQFAgiASRIC6ICwoG1weFgsJBkaBoEB8UC4oHJsDABhSEQYmgZBANbghKBTcGCUHpoExQNnBBuSAxuCkoH9wcVAhuCSoGtwaVgtuCykGVoGpQLbg9qB7cEdQIaga1gjuD2kGdoG5QL6gy4a/XpPcEDYN7g0bBfUHj4P6gSfBA0DR4MGgWPBQ0Dx4OWgSPBC2DVkHroE3Q9netf1dQP7g7aBD8q/W9P134MdfX9DPJpr8ZYF4yA80gM9gMMUPNy2aYecUMN6+aFDPCjDSvmVHmdTPavGHGmLFmnHnTjDcTzEQzyUw2U0yqectMNW+baeYdM93MMDPNLJNmZps55l0z18wz8817ZoF53yw0i8xis8Skmw9MhllqMs2HZpn5yGSZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wq2mY/NdrPD7DS7zG6zx+w1n5h95lOz33xmss3n5oD5izlovjCHzJcmx3xlDpuvzRHzjTlqvjXHzHfmuDlhTprvzSnzgzltzpiz5kdzzvxkzpufzQXjL17cX/x4R40a82AejMEYjMVYzI/5sQAWwAhGMA7jsCAWxEJYCItgEYzHeCyOxfEiQsISWAKjGMVSWAoTMAHLYBl06DARE7E8lscKWAErYkWshJWwMlbGqlgVb8fb8Q68A2tiTbwT78Q6WAfrYT2sj/WxATbAhtgQG2EjbIyNsQk2wabYFJthM2yOzbEFtsCW2BJbY2tsi22xHbbD9tgeO2JH7ISdsDN2xiRMwi7YBbtiV+yG3bA7dsce2AN7Yk/sjb2xD/bBvtgXkzEZB+AAHIgDcTAOxqE4FIfhMByOwzEFU3AkjsRROApH42gcg2NxHL6J43ECTsRJOBmnYCqm4lScitNwGk7H6TgTZ2IapuEcnINzcS7Ox/m4ABfgQlyIi3ExpmM6ZmAGZmImLsNlmIVZuAJX4CpchWtwDa7DdbgBN+Am3IRbcAtuw224HbfjTtyJu3E37sW9uA/34X7cj9mYjQfwAB7Eg3gID2EO5uBhPIxH8AgexaN4DI/hcTyOJ/EknsJTeBpP41k8i+fwJzyPP+MF9BhjpYi1V9n89mpbwF5jY2w++/dxEVvUxttitrg1tpAt/A8xWmsTbGlbxpa1zpazifamX8WVbRVb1Vazt9vq9g5b41dxfXu3bWDvsQ3tvbaevesf4kb2PtvYPmyb2EdsU9vKNrNtbHP7sG1hH7EtbSvb2raxnewTtrN90ibZp2wX+/Sv4gy71K6z6+0Gu9Hus5/as/ZHe8R+Y8/Zn2xf288OtS/bYfYVO9y+alPsiF/F4+ybdrydYCfaSXaynfKreKadZdPs7LdihbBz7by/xXaOffdSnG4/sAtspl1oF9nFdsml+GJNmfZDu8x+ZLPscrvCrrSr7Gq7xq7937WutJvtFrvV7rWf2O12h91pd9ndds+l+OJ57Lef2Wz7uT1sv7YH7Rf2kD1qc+xXl+KL53fUfmuP2e/scXvCnrTf21P2B3vanrl0/hfP/Xv7s71gvRUEJEmRpoDyUF6KoXwUS1dRfrqaCtA1FKFrKY6uo4J0PRWiwlSEilI8FaPiZAjJElFIJagkRekGKkU3UgKVpjJUlhyVo0S6icrTzVSBbqGKdCtVotuoMlWhqlSNbqfqdAfVoJpUi+6k2lSH6lI9uovq093UgO6hhnQvNaL7qDHdT03oAWpKD1Izeoia08PUgh6hltSKWlMbakuPUjt6jNpTB+pIj1MneoI605OURE9RF3qautIz1I2epe70HPWg56kn9aLe9AL1oRepL/WjZOpPA+glGkiDaDANoaH0Mg2jV2g4vUopNIJG0ms0il6n0fQGjaGxNI7epPE0gSbSJJpMUyiV3qKp9DZNo3doOs2gmTSL0mg2zaF3aS7No/n0Hi2g92khLaLFtITS6QPKoKWUSR/SMvqIsmg5raCVtIpW0xpaS+toPW2gjbSJNtMW2krb6GPaTjtoJ+2i3bSH9tIntI8+pf30GWXT53SA/kIH6Qs6RF9SDn1Fh+lrOkLf0FH6lo7Rd3ScTtBJ+p5O0Q90ms7QWfqRztFPdJ5+pgvkSYQQylCFOgzCPGHeMCbMF8aGV4X5w6vDAuE1YSS8NowLrwsLhteHhcLCYZGwaBgfFguLhybE0IYUhmGJsGQYDW8IS4U3hglh6bBMWDZ0YbkwMbwpLB/eHFYIbwkrhreGlcLbwsphlfDhe6uFt4fVwzvCGmHNsFZ4Z1g7rBPWDeuFd4X1w7vDBuE9YcPw3rBCeF/YOLw/bBI+EDYNHwybhQ+FzcOHwxbhI2HLsFXYOmwTtg0fDduFj4Xtww5hx/DxsFP4RNg5fDJMCp8Ku4RP/+b25LB/OCB8KXwp9P4etTi6JJoe/SCaEV0azYx+GF0W/SiaFV0eXRFdGV0VXR1dE10bXRddH90Q3RjdFN0c3RLdGvW+Xl7hwEmnnHaBy+PyuhiXz8W6q1x+d7Ur4K5xEXeti3PXuYLuelfIFXZFXFEX74q54s44dNaRC10JV9JF3Q2ulLvRJbjSrowr65wr5xJdG9fWtXXt3GOuvevgOrrH3ePuCfeEe9I96Z5yXdzTrqt7xnVzz7ru7jn3nHve9XS9XG/3guvjXnR9XT+X7JLdADfADXQD3WA32A11Q90wN8wNd8NdiktxI91IN8qNcqPdaDfGjXHj3Dg33o13E91EN9lNdqku1U11U900N81Nd9PdTDfTpbk0N8fNcXPdXDffzXcLEha4hW6hW+wWu3SX7jJchst0mW6ZW+ayXJZb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+62u51up9vtdru9bq/b5/a5/W6/y3bZ7oA74A66g+6Q+9LluK/cYfe1O+K+cUfdt+6Y+84ddyfcSfe9O+V+cKfdGXfW/ejOuZ/cefezu+C8S428FZkaeTsyLfJOZHpkRmRmZFYkLTI7MifybmRuZF5kfuS9yILI+5GFkUWRxZElkfTIB5GMyNJIZuTDyLLIR5GsyPLIisjKyKrI6oj3xbaHvoQv6aP+Bl/K3+gTfGlfxpf1zpfzif4mX97f7Cv4W3xFf6uv5G/zlX0VX9U/4lv6Vr61b+Pb+kd9O/+Yb+87+I7+cd/JP+E7+yd9kn/Kd/FP+67+Gd/NP+u7++d8D/+87+l7+d7+Bd/Hv+j7+n4+2ff3A/xLfqAf5Af7IX6of9kP86/44f5Vn+JH+JH+NT/Kv+5H+zf8GD/Wj/Nv+vF+gp/oJ/nJfopP9W/5qf5tP82/46f7GX6mn+XT/Gw/x7/r5/p5fr5/zy/w7/uFfpFf7Jf4dP+Bz/BLfab/0C/zH/ksv9yv8Cv9Kr/ar/Fr/Tq/3m/wG/0mv9lv8Vv9Nv+x3+53+J1+l9/t9/i9/hO/z3/q9/vPfLb/3B/wf/EH/Rf+kP/S5/iv/GH/tT/iv/FH/bf+mP/OH/cn/En/vT/lf/Cn/Rl/1v/oz/mf/Hn/s7/Af7PGGGOMMfZfsqXQv9/e/598T/4yLhoghLh6R9Gcv9+uLr02vvQ6SMZ3igghnurX48G/jdq1k5OTf9k3S4mg5CIhRORyfh5xOV5+6TVJdBDl/2l9g2Svc/Qb60dvFSL273JixOV4uegonri0/s3/Yv1HHx+XUSk8G/dv1l8kRELJyzn5xOX48voV/sX6hdv9Rv35vkgVov3f5eQXl+PL6yeKx8TTIukf9mSMMcYYY4wxxv5qkKza7bfuny/en8fryzl5xeX48v3nP78/Z4wxxhhjjDHG2JX3bK/eTz6alNShG0/+8ATgf0QZPOHJnzC50r+ZGGOMMcYYY3+2yxf9V7oSxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMs9/pv/YcwIUTy78i60ufIGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMXWn/KwAA//80ezWS")

402.850609ms ago: executing program 4 (id=2345):
r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x3e)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
copy_file_range(r1, 0x0, r1, &(0x7f0000000080)=0x87d, 0x401, 0x0)

400.962839ms ago: executing program 5 (id=2346):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r1, 0x10f40, 0x2200a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}]}}}]}, 0x48}}, 0x0)

400.76245ms ago: executing program 5 (id=2347):
syz_usb_connect(0x0, 0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0)

296.100023ms ago: executing program 4 (id=2348):
syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="0431"], 0x9)

295.925956ms ago: executing program 4 (id=2349):
r0 = gettid()
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

154.759312ms ago: executing program 36 (id=2167):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f00000002c0)=0x20f)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$vga_arbiter(0xffffff9c, &(0x7f00000003c0), 0x40, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

102.668448ms ago: executing program 4 (id=2351):
r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1267, 0x1000000000000)

102.438541ms ago: executing program 4 (id=2352):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_perm_addr})

0s ago: executing program 4 (id=2353):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
pipe2$watch_queue(0x0, 0x80)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x14, &(0x7f0000000080)={0x0, &(0x7f0000000040)})
pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18}, './file0\x00'})
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x80000047)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
io_uring_setup(0x819, &(0x7f0000000000)={0x0, 0x3aa2, 0x800, 0x0, 0x1d2})
syz_io_uring_setup(0x4010f, &(0x7f0000000880)={0x0, 0x1000, 0x3ffd, 0x0, 0x10, 0x0, r0}, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)

kernel console output (not intermixed with test programs):

796] playstation 0003:054C:0BA0.000B: unknown main item tag 0x0
[  199.355381][  T796] playstation 0003:054C:0BA0.000B: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.5-1/input0
[  199.549755][  T796] playstation 0003:054C:0BA0.000B: Invalid reportID received, expected 18 got 146
[  199.556642][  T796] playstation 0003:054C:0BA0.000B: Failed to retrieve DualShock4 pairing info: -22
[  199.560391][  T796] playstation 0003:054C:0BA0.000B: Failed to get MAC address from DualShock4
[  199.564286][  T796] playstation 0003:054C:0BA0.000B: Failed to create dualshock4.
[  199.569001][  T796] playstation 0003:054C:0BA0.000B: probe with driver playstation failed with error -22
[  199.570956][ T5913] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  199.651596][ T5848] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  199.655677][ T5848] Bluetooth: hci4: Injecting HCI hardware error event
[  199.663185][ T5230] Bluetooth: hci4: hardware error 0x00
[  199.741296][ T5913] usb 5-1: Using ep0 maxpacket: 32
[  199.745972][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.750017][ T5913] usb 5-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  199.754585][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.757505][  T796] usb 6-1: USB disconnect, device number 7
[  199.766743][ T5913] usb 5-1: config 0 descriptor??
[  199.777239][ T5913] dvb-usb: found a 'TeVii S662' in warm state.
[  199.779779][ T5913] dw2102: su3000_power_ctrl: 1, initialized 0
[  199.790996][ T5913] dvb-usb: bulk message failed: -22 (2/0)
[  199.796230][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  199.810339][ T5913] dvbdev: DVB: registering new adapter (TeVii S662)
[  199.820114][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  199.824211][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  199.828533][ T5913] usb 5-1: media controller created
[  199.832387][ T5913] dvb-usb: bulk message failed: -22 (6/0)
[  199.834913][ T5913] dw2102: i2c transfer failed.
[  199.837115][ T5913] dvb-usb: bulk message failed: -22 (6/0)
[  199.845712][ T5913] dw2102: i2c transfer failed.
[  199.847595][ T5913] dvb-usb: bulk message failed: -22 (6/0)
[  199.849816][ T5913] dw2102: i2c transfer failed.
[  199.850587][ T9594] loop3: detected capacity change from 0 to 128
[  199.855453][ T5913] dvb-usb: bulk message failed: -22 (6/0)
[  199.855499][ T5913] dw2102: i2c transfer failed.
[  199.855526][ T5913] dvb-usb: bulk message failed: -22 (6/0)
[  199.855536][ T5913] dw2102: i2c transfer failed.
[  199.855545][ T5913] dvb-usb: bulk message failed: -22 (6/0)
[  199.855556][ T5913] dw2102: i2c transfer failed.
[  199.855563][ T5913] dvb-usb: MAC address: 02:02:02:02:02:02
[  199.865476][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  199.875798][ T9594] befs: (loop3): No write support. Marking filesystem read-only
[  199.891827][ T9594] befs: (loop3): invalid blocksize: 2066842815
[  199.903745][ T5913] dvb-usb: bulk message failed: -22 (3/0)
[  199.906057][ T5913] dw2102: command 0x0e transfer failed.
[  199.909525][ T5913] dvb-usb: bulk message failed: -22 (3/0)
[  199.917839][ T5913] dw2102: command 0x0e transfer failed.
[  200.021898][ T9598] Cannot find add_set index 0 as target
[  200.221011][ T5913] dvb-usb: bulk message failed: -22 (3/0)
[  200.223083][ T5913] dw2102: command 0x0e transfer failed.
[  200.224847][ T5913] dvb-usb: bulk message failed: -22 (3/0)
[  200.226645][ T5913] dw2102: command 0x0e transfer failed.
[  200.228811][ T5913] dvb-usb: bulk message failed: -22 (1/0)
[  200.231161][ T5913] dw2102: command 0x51 transfer failed.
[  200.233271][ T5913] dvb-usb: bulk message failed: -22 (5/0)
[  200.235089][ T5913] dw2102: i2c probe for address 0x68 failed.
[  200.237127][ T5913] dvb-usb: bulk message failed: -22 (5/0)
[  200.239009][ T5913] dw2102: i2c probe for address 0x69 failed.
[  200.241049][ T5913] dvb-usb: bulk message failed: -22 (5/0)
[  200.242930][ T5913] dw2102: i2c probe for address 0x6a failed.
[  200.244952][ T5913] dw2102: probing for demodulator failed. Is the external power switched on?
[  200.247973][ T5913] dvb-usb: no frontend was attached by 'TeVii S662'
[  200.307750][ T5913] rc_core: IR keymap rc-tt-1500 not found
[  200.315024][ T5913] Registered IR keymap rc-empty
[  200.318464][ T5913] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  200.335686][ T5913] input: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input17
[  200.356296][ T5306] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  200.376148][ T5913] dvb-usb: schedule remote query interval to 250 msecs.
[  200.396233][ T5913] dw2102: su3000_power_ctrl: 0, initialized 1
[  200.406881][ T5913] dvb-usb: TeVii S662 successfully initialized and connected.
[  200.420243][ T5913] usb 5-1: USB disconnect, device number 11
[  200.434205][ T9609] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1428'.
[  200.467928][ T5913] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  200.531102][ T5306] usb 4-1: Using ep0 maxpacket: 32
[  200.540092][ T5306] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  200.545052][ T5306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.548087][ T5306] usb 4-1: Product: syz
[  200.549714][ T5306] usb 4-1: Manufacturer: syz
[  200.561070][ T5306] usb 4-1: SerialNumber: syz
[  200.566272][ T5306] usb 4-1: config 0 descriptor??
[  200.589121][ T5306] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  200.746347][ T9611] loop5: detected capacity change from 0 to 32768
[  200.771779][ T9611] add_index: next_index = 0.  Resetting!
[  200.793786][ T5306] gspca_ov534_9: reg_w failed -71
[  201.221592][ T5306] gspca_ov534_9: Unknown sensor 0000
[  201.221683][ T5306] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22
[  201.233330][ T5306] usb 4-1: USB disconnect, device number 12
[  201.285857][ T9644] loop4: detected capacity change from 0 to 4096
[  201.333181][ T9644] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  201.336057][ T9644] ntfs3(loop4): Failed to load $Extend (-22).
[  201.337811][ T9644] ntfs3(loop4): Failed to initialize $Extend.
[  201.704781][   T24] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  201.737485][ T5230] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  201.792902][ T9648] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  201.797574][ T9648] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  201.804746][ T9648] F2FS-fs (loop5): invalid crc value
[  201.876618][ T9648] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  201.884140][ T9648] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  201.886821][ T9648] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  202.084014][ T9663] capability: warning: `syz.5.1451' uses 32-bit capabilities (legacy support in use)
[  202.182022][ T5306] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  202.342549][ T5306] usb 5-1: Using ep0 maxpacket: 32
[  202.352721][ T5306] usb 5-1: unable to get BOS descriptor or descriptor too short
[  202.357188][ T5306] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  202.361053][ T5306] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 88, changing to 7
[  202.367153][ T5306] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  202.373101][ T5306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.376419][ T5306] usb 5-1: Product: syz
[  202.378184][ T5306] usb 5-1: Manufacturer: syz
[  202.380102][ T5306] usb 5-1: SerialNumber: syz
[  202.595863][ T9681] set_capacity_and_notify: 1 callbacks suppressed
[  202.595881][ T9681] loop3: detected capacity change from 0 to 128
[  202.614269][ T9681] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  202.620265][ T9681] hpfs: filesystem error: improperly stopped
[  202.628524][ T5306] usb 5-1: 2:1 : unsupported format bits 0x800
[  202.632211][ T9681] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  202.636526][ T9681] hpfs: You really don't want any checks? You are crazy...
[  202.649864][ T9681] hpfs: hpfs_map_sector(): read error
[  202.653116][ T9681] hpfs: code page support is disabled
[  202.657131][ T9681] hpfs: hpfs_map_4sectors(): unaligned read
[  202.660617][ T9681] hpfs: hpfs_map_4sectors(): unaligned read
[  202.666607][ T5306] usb 5-1: USB disconnect, device number 12
[  202.670023][ T9681] hpfs: filesystem error: unable to find root dir
[  202.684995][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  202.765790][ T9687] syz.5.1464 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  202.813175][ T9689] loop3: detected capacity change from 0 to 4096
[  202.828673][ T9692] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  202.868877][ T9689] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12
[  202.889293][ T9689] Remounting filesystem read-only
[  202.908676][ T7786] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  202.926290][ T9696] EXT4-fs (nbd5): unable to read superblock
[  202.950272][ T9698] 9pnet_fd: p9_fd_create_unix (9698): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  203.105668][ T9704] loop3: detected capacity change from 0 to 8192
[  203.310180][ T9706] loop5: detected capacity change from 0 to 32768
[  203.316002][ T9706] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1472 (9706)
[  203.345661][ T9706] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  203.349689][ T9706] BTRFS info (device loop5): using blake2b (blake2b-256-lib) checksum algorithm
[  203.398681][ T9714] loop4: detected capacity change from 0 to 4096
[  203.406762][ T9714] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  203.445687][ T9714] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  203.450742][ T9714] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  203.479622][ T9706] BTRFS info (device loop5): enabling ssd optimizations
[  203.484196][ T9706] BTRFS info (device loop5): turning on async discard
[  203.486951][ T9706] BTRFS info (device loop5): enabling free space tree
[  203.489809][ T1154] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22.
[  203.495782][ T9714] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  203.498100][ T9714] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  203.500365][ T9714] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  203.511034][ T1154] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22.
[  203.518995][ T9714] ntfs3(loop4): ino=1e, mi_enum_attr
[  203.520762][ T9714] ntfs3(loop4): ino=1e, mi_enum_attr
[  203.523632][   T34] audit: type=1800 audit(1769135603.372:69): pid=9706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1472" name="file1" dev="loop5" ino=260 res=0 errno=0
[  203.530998][ T5306] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  203.639936][ T7936] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  203.693019][ T5306] usb 4-1: config 0 has too many interfaces: 202, using maximum allowed: 32
[  203.696469][ T5306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  203.702596][ T9732] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input18
[  203.715323][ T5306] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 202
[  203.729003][ T5306] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  203.736217][ T5306] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3
[  203.740877][ T5306] usb 4-1: Product: syz
[  203.742622][ T5306] usb 4-1: Manufacturer: syz
[  203.744519][ T5306] usb 4-1: SerialNumber: syz
[  203.762583][ T5306] usb 4-1: config 0 descriptor??
[  203.768280][ T5306] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  203.987549][ T5306] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2
[  204.027560][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1481'.
[  204.039082][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  204.191885][   T24] usb 4-1: USB disconnect, device number 13
[  204.856130][ T9786] loop4: detected capacity change from 0 to 256
[  204.867717][ T9786] exfat: Deprecated parameter 'utf8'
[  204.870346][ T9786] exfat: Deprecated parameter 'utf8'
[  204.872717][ T9786] exfat: Deprecated parameter 'namecase'
[  204.937754][ T9786] exFAT-fs (loop4): error, The cluster chain has a loop
[  204.940467][ T9786] exFAT-fs (loop4): failed to count the number of clusters in root
[  204.944218][ T9786] exFAT-fs (loop4): failed to recognize exfat type
[  205.014090][ T9789] loop3: detected capacity change from 0 to 256
[  205.017973][ T9789] exfat: Deprecated parameter 'utf8'
[  205.020208][ T9790] loop5: detected capacity change from 0 to 128
[  205.023292][ T9789] exfat: Deprecated parameter 'utf8'
[  205.026181][ T9789] exfat: Deprecated parameter 'utf8'
[  205.028441][ T9790] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  205.037287][ T9790] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  205.040321][ T9789] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  205.066391][ T9790] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  205.074957][ T9789] exfat: Deprecated parameter 'utf8'
[  205.077180][ T9789] exfat: Deprecated parameter 'utf8'
[  205.082705][ T9789] exfat: Deprecated parameter 'utf8'
[  205.391771][ T9808] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1512'.
[  205.423558][ T9810] vlan0: entered promiscuous mode
[  205.425665][ T9809] vlan0: left promiscuous mode
[  205.447739][ T9812] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  205.450728][ T9812] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  205.948632][ T9847] loop3: detected capacity change from 0 to 4096
[  205.987123][ T9850] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  206.009603][ T9852] loop5: detected capacity change from 0 to 1024
[  206.170934][  T796] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  206.274933][   T34] audit: type=1800 audit(1769135606.092:70): pid=9857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1532" name="file1" dev="loop5" ino=2 res=0 errno=0
[  206.535425][ T9861] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  206.539458][ T9861] ext4 filesystem being mounted at /344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  206.576587][ T7786] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  206.623787][  T796] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 49
[  206.627966][  T796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  206.633927][  T796] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  206.651524][  T796] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  206.654452][  T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.657462][  T796] usb 5-1: Product: syz
[  206.668332][  T796] usb 5-1: Manufacturer: syz
[  206.670254][  T796] usb 5-1: SerialNumber: syz
[  206.678306][  T796] usb 5-1: config 0 descriptor??
[  206.694959][  T796] usb-storage 5-1:0.0: USB Mass Storage device detected
[  206.704055][  T796] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  206.897374][  T796] usb 5-1: USB disconnect, device number 13
[  207.180982][   T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  207.351020][   T24] usb 6-1: Using ep0 maxpacket: 32
[  207.355477][   T24] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[  207.358552][   T24] usb 6-1: config 0 has no interface number 0
[  207.361613][   T24] usb 6-1: config 0 interface 89 has no altsetting 0
[  207.366763][   T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  207.370320][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.374087][   T24] usb 6-1: Product: syz
[  207.375886][   T24] usb 6-1: Manufacturer: syz
[  207.377785][   T24] usb 6-1: SerialNumber: syz
[  207.382906][   T24] usb 6-1: config 0 descriptor??
[  207.388517][   T24] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  207.393611][   T24] em28xx 6-1:0.89: Video interface 89 found: bulk
[  207.480489][ T9881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1541'.
[  207.944246][ T9894] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  208.023094][   T24] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[  208.089601][ T9898] netlink: 'syz.4.1548': attribute type 29 has an invalid length.
[  208.094815][ T9898] netlink: 'syz.4.1548': attribute type 29 has an invalid length.
[  208.179702][ T9902] /dev/nullb0: Can't open blockdev
[  208.830957][ T5306] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  208.956208][   T24] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  208.960472][   T24] em28xx 6-1:0.89: board has no eeprom
[  208.983421][ T5306] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[  208.986966][ T5306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  208.990053][ T5306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  208.996918][ T5306] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  209.000977][ T5306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.003648][ T5306] usb 4-1: Product: syz
[  209.004911][ T5306] usb 4-1: Manufacturer: syz
[  209.006394][ T5306] usb 4-1: SerialNumber: syz
[  209.020635][ T5306] usb 4-1: config 0 descriptor??
[  209.022970][   T24] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[  209.029303][   T24] em28xx 6-1:0.89: analog set to bulk mode.
[  209.036575][ T5306] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  209.053386][   T24] usb 6-1: USB disconnect, device number 8
[  209.074949][   T24] em28xx 6-1:0.89: Disconnecting em28xx
[  209.081597][ T5306] em28xx 6-1:0.89: Registering V4L2 extension
[  209.169569][ T5306] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[  209.176432][ T5306] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[  209.179103][ T5306] em28xx 6-1:0.89: No AC97 audio processor
[  209.208056][ T5306] usb 6-1: Decoder not found
[  209.210074][ T5306] em28xx 6-1:0.89: failed to create media graph
[  209.216536][ T5306] em28xx 6-1:0.89: V4L2 device video103 deregistered
[  209.237975][ T5306] em28xx 6-1:0.89: Registering snapshot button...
[  209.254451][ T5913] usb 4-1: USB disconnect, device number 14
[  209.264812][ T5306] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input19
[  209.320406][ T5306] em28xx 6-1:0.89: Remote control support is not available for this card.
[  209.328968][   T24] em28xx 6-1:0.89: Closing input extension
[  209.338457][   T24] em28xx 6-1:0.89: Deregistering snapshot button
[  209.413533][   T24] em28xx 6-1:0.89: Freeing device
[  209.994521][ T9930] set_capacity_and_notify: 1 callbacks suppressed
[  209.994533][ T9930] loop5: detected capacity change from 0 to 512
[  210.021543][ T9930] EXT4-fs (loop5): Test dummy encryption mode enabled
[  210.030530][ T9930] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  210.084594][ T9930] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1562: bad orphan inode 131083
[  210.114639][ T9930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.307832][ T9931] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.312669][ T9931] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.369459][ T7936] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.533180][ T9931] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.623758][ T9931] mac80211_hwsim hwsim9 wlan0: left allmulticast mode
[  210.656230][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.659693][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 8192 - 0
[  210.680334][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.684089][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 8192 - 0
[  210.687524][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.700939][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 8192 - 0
[  210.704648][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.708123][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 8192 - 0
[  211.254249][ T9939] loop3: detected capacity change from 0 to 32768
[  211.261955][ T9939] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1565 (9939)
[  211.299280][ T9939] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  211.303855][ T9939] BTRFS info (device loop3): using blake2b (blake2b-256-lib) checksum algorithm
[  211.464782][ T9939] BTRFS info (device loop3): enabling ssd optimizations
[  211.471460][ T9939] BTRFS info (device loop3): turning on async discard
[  211.477445][ T9939] BTRFS info (device loop3): enabling free space tree
[  211.486164][ T9939] BTRFS info (device loop3): use lzo compression, level 1
[  211.632663][ T9939] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4)
[  211.763201][ T7786] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  212.062628][ T5950] kernel read not supported for file /input/event0 (pid: 5950 comm: kworker/0:5)
[  212.377844][ T9990] loop5: detected capacity change from 0 to 512
[  212.383245][ T9990] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  212.402209][ T9990] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1581: inode has both inline data and extents flags
[  212.409030][ T9990] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1581: couldn't read orphan inode 15 (err -117)
[  212.415608][ T9990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.427104][ T9990] fscrypt (loop5, inode 18): Direct key flag not allowed with different contents and filenames modes
[  212.450754][ T7936] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.630939][ T5950] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  212.794413][ T5950] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  212.797123][ T5950] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  212.814201][ T5950] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  212.817495][ T5950] usb 4-1: config 1 has no interface number 0
[  212.819622][ T5950] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  212.850943][ T5950] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  212.861066][ T5950] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  212.863806][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.882482][ T5950] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  212.983445][T10004] syz.4.1586 uses old SIOCAX25GETINFO
[  213.472708][ T5950] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  213.583832][T10011] batman_adv: batadv0: adding TT local entry 9c:c2:05:e1:ff:ff to non-existent VLAN 815
[  213.588043][T10011] batman_adv: batadv0: adding TT local entry 9c:c2:05:e1:ff:ff to non-existent VLAN 815
[  213.593933][T10011] batman_adv: batadv0: adding TT local entry 9c:c2:05:e1:ff:ff to non-existent VLAN 815
[  213.597289][T10011] batman_adv: batadv0: adding TT local entry 9c:c2:05:e1:ff:ff to non-existent VLAN 815
[  213.600686][T10011] batman_adv: batadv0: adding TT local entry 9c:c2:05:e1:ff:ff to non-existent VLAN 815
[  213.606602][T10011] batman_adv: batadv0: adding TT local entry 9c:c2:05:e1:ff:ff to non-existent VLAN 815
[  213.610845][T10011] batman_adv: batadv0: adding TT local entry 9c:c2:05:e1:ff:ff to non-existent VLAN 815
[  213.614598][T10011] batman_adv: batadv0: adding TT local entry 9c:c2:05:e1:ff:ff to non-existent VLAN 815
[  213.617633][T10011] batman_adv: batadv0: adding TT local entry 9c:c2:05:e1:ff:ff to non-existent VLAN 815
[  213.620532][T10011] batman_adv: batadv0: adding TT local entry 9c:c2:05:e1:ff:ff to non-existent VLAN 815
[  213.691799][  T796] usb 4-1: USB disconnect, device number 15
[  213.697661][  T796] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  215.151885][T10032] loop4: detected capacity change from 0 to 1024
[  215.199419][T10032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.228736][ T7900] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.902133][T10065] loop5: detected capacity change from 0 to 512
[  215.975869][T10067] netlink: 'syz.4.1607': attribute type 21 has an invalid length.
[  215.979274][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1607'.
[  216.101968][T10065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  216.106524][T10065] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  216.127080][T10065] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  216.139039][T10065] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  216.142721][T10065] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1610: Failed to acquire dquot type 0
[  216.185595][ T7936] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  216.283660][T10075] netlink: 'syz.5.1613': attribute type 4 has an invalid length.
[  216.378187][T10079] loop5: detected capacity change from 0 to 128
[  216.399885][T10079] affs: No valid root block on device loop5
[  216.402674][ T5950] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  216.504789][T10083] netlink: 'syz.5.1617': attribute type 7 has an invalid length.
[  216.508469][T10083] netlink: 'syz.5.1617': attribute type 8 has an invalid length.
[  216.636045][ T5950] usb 4-1: Using ep0 maxpacket: 32
[  216.639912][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88
[  216.646500][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  216.654858][ T5950] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  216.657749][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.660723][ T5950] usb 4-1: Product: syz
[  216.662795][ T5950] usb 4-1: Manufacturer: syz
[  216.664683][ T5950] usb 4-1: SerialNumber: syz
[  216.670613][ T5950] usb 4-1: config 0 descriptor??
[  216.679322][ T5950] usb 4-1: no audio or video endpoints found
[  216.832688][T10094] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1621'.
[  216.895153][  T796] usb 4-1: USB disconnect, device number 16
[  217.601874][T10106] loop3: detected capacity change from 0 to 2048
[  217.617074][T10106] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  217.620647][T10106] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  217.628261][T10106] UDF-fs: Scanning with blocksize 512 failed
[  217.653256][T10106] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2047, location=2047
[  217.681242][T10106] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  217.685813][T10106] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  217.688832][T10106] UDF-fs: Scanning with blocksize 1024 failed
[  217.703457][T10106] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2047, location=2047
[  217.708107][T10106] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  217.713473][T10106] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  217.717359][T10106] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  217.720386][T10106] UDF-fs: Scanning with blocksize 2048 failed
[  217.749149][T10106] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2047, location=2047
[  217.754532][T10106] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  217.759703][T10106] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  217.772174][T10106] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  217.777826][T10106] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  217.781825][T10106] UDF-fs: Scanning with blocksize 4096 failed
[  217.784324][T10106] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1)
[  217.912458][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1630'.
[  218.159062][T10111] loop5: detected capacity change from 0 to 32768
[  218.226804][T10111] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  218.266177][T10111] XFS (loop5): Ending clean mount
[  218.279461][   T34] audit: type=1800 audit(1769135618.122:71): pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1629" name="file1" dev="loop5" ino=4422 res=0 errno=0
[  218.304641][ T7936] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  218.422383][T10119] loop3: detected capacity change from 0 to 40427
[  218.432374][T10119] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  218.435677][T10119] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  218.447500][T10119] F2FS-fs (loop3): invalid crc value
[  218.504545][T10119] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  218.508707][T10119] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30
[  218.513305][T10119] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  218.706155][T10141] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  218.713762][T10141] block device autoloading is deprecated and will be removed.
[  219.102758][T10160] loop5: detected capacity change from 0 to 1024
[  219.130382][T10160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.164891][   T34] audit: type=1800 audit(1769135619.012:72): pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1648" name="bus" dev="loop5" ino=18 res=0 errno=0
[  219.206243][ T7936] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.337876][T10175] serio: Serial port ptm0
[  219.479718][T10179] loop4: detected capacity change from 0 to 512
[  219.488080][T10179] EXT4-fs: Ignoring removed nobh option
[  219.501137][T10179] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)!
[  219.507058][T10167] loop3: detected capacity change from 0 to 32768
[  219.509748][T10179] EXT4-fs (loop4): group descriptors corrupted!
[  219.531072][T10167] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1649 (10167)
[  219.604572][T10167] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  219.610499][T10184] loop5: detected capacity change from 0 to 128
[  219.631276][T10167] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  219.657409][T10181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  219.664875][T10181] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.759702][ T7900] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  219.887100][T10167] BTRFS info (device loop3): rebuilding free space tree
[  219.906600][T10167] BTRFS info (device loop3): disabling free space tree
[  219.909122][T10167] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  219.934482][T10167] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  219.949072][T10167] BTRFS info (device loop3): setting nodatasum
[  219.952394][T10167] BTRFS info (device loop3): setting nodatacow
[  219.954262][T10167] BTRFS info (device loop3): turning off barriers
[  219.956676][T10167] BTRFS info (device loop3): force clearing of disk cache
[  220.102713][ T7786] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  220.163464][T10210] ntfs3(loop5): ino=b, mi_enum_attr
[  220.165503][T10210] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  220.168742][T10210] ntfs3(loop5): Failed to load $Extend (-22).
[  220.174207][T10210] ntfs3(loop5): Failed to initialize $Extend.
[  220.209008][T10216] set_capacity_and_notify: 4 callbacks suppressed
[  220.209024][T10216] loop4: detected capacity change from 0 to 2048
[  220.294649][T10223] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  220.354391][T10223] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  220.374850][T10223] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  220.482811][T10223] Remounting filesystem read-only
[  220.559819][ T7900] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  220.574293][T10230] loop5: detected capacity change from 0 to 4096
[  220.637309][T10230] ntfs3(loop5): failed to convert "0000" to iso8859-2
[  220.678834][T10230] ntfs3(loop5): ino=1b, Correct links count -> 1.
[  220.691448][T10230] ntfs3(loop5): failed to convert name for inode 1e.
[  220.697203][T10230] ntfs3(loop5): ino=1f, mi_enum_attr
[  220.699337][T10230] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  220.823108][T10238] loop5: detected capacity change from 0 to 128
[  220.885263][T10227] loop3: detected capacity change from 0 to 32768
[  220.894079][T10227] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1668 (10227)
[  220.938565][T10227] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  220.944047][T10227] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  220.951962][T10227] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  221.145959][T10227] BTRFS info (device loop3): rebuilding free space tree
[  221.174735][T10227] BTRFS info (device loop3): disabling free space tree
[  221.177673][T10227] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  221.181743][T10227] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  221.190129][T10227] BTRFS info (device loop3): enabling ssd optimizations
[  221.196369][T10227] BTRFS info (device loop3): enabling disk space caching
[  221.199949][T10227] BTRFS info (device loop3): force clearing of disk cache
[  221.209994][T10227] BTRFS info (device loop3): enabling auto defrag
[  221.213732][T10227] BTRFS info (device loop3): max_inline set to 0
[  221.218837][T10236] loop4: detected capacity change from 0 to 32768
[  221.265559][T10265] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1678'.
[  221.369406][ T7786] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  221.434226][T10269] loop5: detected capacity change from 0 to 256
[  221.436887][T10269] exfat: Deprecated parameter 'utf8'
[  221.449722][T10269] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  221.534908][T10272] loop4: detected capacity change from 0 to 2048
[  221.580865][T10276] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  221.637092][T10272] NILFS (loop4): failed to count free inodes: err=-34
[  221.777648][ T7900] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 8796093022222
[  221.780638][ T7900] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16)
[  221.798077][T10285] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1687'.
[  221.828892][ T7900] Remounting filesystem read-only
[  221.830561][ T7900] NILFS (loop4): error -5 truncating bmap (ino=16)
[  221.852668][ T7900] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[  221.915292][T10294] loop3: detected capacity change from 0 to 512
[  221.935915][T10294] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  221.938852][T10294] EXT4-fs (loop3): orphan cleanup on readonly fs
[  221.942613][T10297] netlink: 'syz.4.1692': attribute type 2 has an invalid length.
[  221.945139][T10294] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated!
[  221.954579][T10294] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota
[  221.959554][T10294] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1691: Failed to acquire dquot type 1
[  221.975732][T10294] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1691: bg 0: block 40: padding at end of block bitmap is not set
[  221.994635][T10294] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  221.999528][T10294] EXT4-fs (loop3): 1 truncate cleaned up
[  222.005024][T10294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  222.013076][T10294] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.1691: bad symlink.
[  222.017017][T10294] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.1691: bad symlink.
[  222.034674][ T7786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.638252][T10315] loop5: detected capacity change from 0 to 2048
[  222.650267][T10315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  223.520011][T10337] erspan0: entered promiscuous mode
[  223.663575][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1714'.
[  223.921115][   T34] audit: type=1800 audit(1769135623.772:73): pid=10355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1718" name="file0" dev="tmpfs" ino=1611 res=0 errno=0
[  223.949414][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1720'.
[  224.136421][T10367] loop4: detected capacity change from 0 to 4096
[  224.178073][T10367] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  224.189245][T10367] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  224.222341][T10367] ntfs3(loop4): volume is dirty and "force" flag is not set!
[  224.298338][T10377] libceph: resolve '4.4' (ret=-3): failed
[  224.313279][T10381] mmap: syz.3.1730 (10381) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  224.890960][ T5913] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  224.925505][T10398] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1738 (10398)
[  224.932718][T10398] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  224.936443][T10398] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  224.975174][T10398] BTRFS info (device loop3): rebuilding free space tree
[  224.994804][T10398] BTRFS info (device loop3): disabling free space tree
[  224.997450][T10398] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  225.000632][T10398] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  225.008592][T10398] BTRFS info (device loop3): enabling ssd optimizations
[  225.013223][T10398] BTRFS info (device loop3): turning on async discard
[  225.015391][T10398] BTRFS info (device loop3): force clearing of disk cache
[  225.017717][T10398] BTRFS info (device loop3): enabling auto defrag
[  225.019854][T10398] BTRFS info (device loop3): max_inline set to 4096
[  225.054315][ T5913] usb 5-1: config 0 has an invalid interface number: 171 but max is 0
[  225.057715][ T5913] usb 5-1: config 0 has no interface number 0
[  225.060223][ T5913] usb 5-1: config 0 interface 171 has no altsetting 0
[  225.080005][ T5913] usb 5-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00
[  225.087405][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.090571][ T5913] usb 5-1: Product: syz
[  225.100308][ T5913] usb 5-1: Manufacturer: syz
[  225.103519][ T7786] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  225.106762][ T5913] usb 5-1: SerialNumber: syz
[  225.111441][ T5913] usb 5-1: config 0 descriptor??
[  225.129829][ T5913] usb-storage 5-1:0.171: USB Mass Storage device detected
[  225.393025][ T5913] usb 5-1: USB disconnect, device number 14
[  225.596971][T10429] set_capacity_and_notify: 1 callbacks suppressed
[  225.596990][T10429] loop5: detected capacity change from 0 to 8
[  225.604672][T10429] SQUASHFS error: zlib decompression failed, data probably corrupt
[  225.607331][T10429] SQUASHFS error: Failed to read block 0x9b: -5
[  225.609475][T10429] SQUASHFS error: Unable to read metadata cache entry [99]
[  225.612272][T10429] SQUASHFS error: Unable to read inode 0x127
[  226.040501][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  226.047564][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  226.053559][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  226.057924][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  226.062407][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  226.234290][T10438] chnl_net:caif_netlink_parms(): no params data found
[  226.308062][T10447] loop5: detected capacity change from 0 to 4096
[  226.348590][T10449] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  226.404157][T10438] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.407162][T10438] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.410330][T10438] bridge_slave_0: entered allmulticast mode
[  226.433283][T10438] bridge_slave_0: entered promiscuous mode
[  226.442349][T10438] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.445389][T10438] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.448412][T10438] bridge_slave_1: entered allmulticast mode
[  226.466776][T10438] bridge_slave_1: entered promiscuous mode
[  226.494798][T10455] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1754'.
[  226.510642][T10438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.536885][T10438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.569250][T10438] team0: Port device team_slave_0 added
[  226.574195][T10438] team0: Port device team_slave_1 added
[  226.597741][T10438] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.600620][T10438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  226.611072][T10438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.617258][T10438] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.619481][T10438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  226.627594][T10438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.666426][T10438] hsr_slave_0: entered promiscuous mode
[  226.669684][T10438] hsr_slave_1: entered promiscuous mode
[  226.672692][T10438] debugfs: 'hsr0' already exists in 'hsr'
[  226.674581][T10438] Cannot create hsr debugfs directory
[  226.762389][ T5950] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  226.787424][T10438] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  226.791997][T10438] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  226.796052][T10438] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  226.800231][T10438] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  226.841599][T10465] cgroup: Need name or subsystem set
[  226.876627][T10467] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1757'.
[  226.914599][T10438] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.914681][ T5950] usb 6-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66
[  226.919873][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.933344][ T5950] usb 6-1: config 0 descriptor??
[  226.944274][T10438] 8021q: adding VLAN 0 to HW filter on device team0
[  226.949730][ T5950] usb 6-1: invalid MIDI EP
[  226.958411][ T5950] usb 6-1: snd-bcd2000: error during probing
[  226.966610][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.967067][ T5950] snd-bcd2000 6-1:0.0: probe with driver snd-bcd2000 failed with error -22
[  226.968892][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.997601][ T5184] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.999843][ T5184] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.103652][T10438] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.104193][T10471] loop4: detected capacity change from 0 to 32768
[  227.140136][ T5950] usb 6-1: USB disconnect, device number 9
[  227.238243][T10482] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1760'.
[  227.243794][T10482] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1760'.
[  227.306162][T10438] veth0_vlan: entered promiscuous mode
[  227.315123][T10438] veth1_vlan: entered promiscuous mode
[  227.344308][T10438] veth0_macvtap: entered promiscuous mode
[  227.351048][T10438] veth1_macvtap: entered promiscuous mode
[  227.375650][T10438] batman_adv: batadv0: Interface activated: batadv_slave_0
[  227.382966][T10438] batman_adv: batadv0: Interface activated: batadv_slave_1
[  227.389611][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.393914][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.397235][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.400001][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.682988][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.690731][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.714781][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.717780][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.115948][T10493] ceph: No mds server is up or the cluster is laggy
[  228.170981][ T5848] Bluetooth: hci1: command tx timeout
[  228.213035][   T33] libceph: connect (1)[c::]:6789 error -101
[  228.243858][   T33] libceph: mon0 (1)[c::]:6789 connect error
[  228.335651][T10498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1763'.
[  228.789421][T10518] netlink: 'syz.6.1772': attribute type 1 has an invalid length.
[  228.796264][T10518] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1772'.
[  228.802801][T10518] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1772'.
[  228.888781][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1774'.
[  230.211784][ T5848] Bluetooth: hci1: command tx timeout
[  230.347232][T10547] net_ratelimit: 8984 callbacks suppressed
[  230.347245][T10547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  230.391862][T10549] input: syz0 as /devices/virtual/input/input20
[  230.448856][T10551] ALSA: mixer_oss: invalid OSS volume 'LIDE'
[  230.841752][ T5911] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  230.871810][T10572] netlink: 'syz.5.1795': attribute type 27 has an invalid length.
[  230.927171][T10576] loop5: detected capacity change from 0 to 256
[  230.933971][T10576] exfat: Deprecated parameter 'utf8'
[  230.946492][T10576] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  230.999177][ T5911] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  231.016137][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.028673][ T5911] usb 7-1: config 0 descriptor??
[  231.036932][ T5911] cp210x 7-1:0.0: cp210x converter detected
[  231.332787][ T5950] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  231.455122][ T5911] usb 7-1: cp210x converter now attached to ttyUSB0
[  231.481888][ T5950] usb 6-1: Using ep0 maxpacket: 16
[  231.486250][ T5950] usb 6-1: config index 0 descriptor too short (expected 16456, got 72)
[  231.489706][ T5950] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  231.494958][ T5950] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  231.498373][ T5950] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  231.502252][ T5950] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  231.506001][ T5950] usb 6-1: config 0 has no interface number 0
[  231.509185][ T5950] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  231.514228][ T5950] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  231.518249][ T5950] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  231.523320][ T5950] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  231.528596][ T5950] usb 6-1: config 0 interface 125 has no altsetting 0
[  231.531517][ T5950] usb 6-1: config 0 interface 125 has no altsetting 2
[  231.539387][ T5950] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  231.543312][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.546876][ T5950] usb 6-1: Product: syz
[  231.548624][ T5950] usb 6-1: Manufacturer: syz
[  231.550658][ T5950] usb 6-1: SerialNumber: syz
[  231.555267][ T5950] usb 6-1: config 0 descriptor??
[  231.563522][ T5950] usb 6-1: selecting invalid altsetting 2
[  231.651605][ T8270] usb 7-1: USB disconnect, device number 2
[  231.658685][ T8270] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  231.669117][ T8270] cp210x 7-1:0.0: device disconnected
[  232.302177][ T5230] Bluetooth: hci1: command tx timeout
[  232.672212][ T5230] Bluetooth: hci2: command 0x0406 tx timeout
[  232.690019][  T844] usb 6-1: USB disconnect, device number 10
[  232.917300][T10619] loop4: detected capacity change from 0 to 512
[  232.934498][T10619] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  232.948963][T10619] EXT4-fs (loop4): 1 truncate cleaned up
[  232.953106][T10619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.996533][ T7900] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.048586][T10623] Device name cannot be null; rc = [-22]
[  233.472571][T10651] netlink: 'syz.4.1829': attribute type 4 has an invalid length.
[  233.629766][T10661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1834'.
[  233.875496][T10659] loop6: detected capacity change from 0 to 32768
[  233.901461][T10659] jfs_mount: Failed to read FILESYSTEM_I
[  233.905670][T10659] Mount JFS Failure: -5
[  233.907408][T10659] jfs_mount failed w/return code = -5
[  234.372932][ T5230] Bluetooth: hci1: command tx timeout
[  234.589659][T10692] loop5: detected capacity change from 0 to 128
[  234.945759][T10706] smc: net device wlan0 applied user defined pnetid SYZ0
[  234.953496][T10708] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232
[  235.216786][T10711] loop4: detected capacity change from 0 to 32768
[  235.230824][T10711] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  235.251959][T10711] XFS (loop4): Ending clean mount
[  235.281477][T10711] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  235.363535][ T7900] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  235.957790][T10727] loop6: detected capacity change from 0 to 32768
[  235.979556][T10727] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1860 (10727)
[  236.005430][T10727] BTRFS info (device loop6): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  236.011666][T10727] BTRFS info (device loop6): using blake2b (blake2b-256-lib) checksum algorithm
[  236.116062][T10727] BTRFS info (device loop6): enabling ssd optimizations
[  236.118419][T10727] BTRFS info (device loop6): turning on async discard
[  236.120725][T10727] BTRFS info (device loop6): enabling free space tree
[  236.160882][T10438] BTRFS info (device loop6): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  236.233806][   T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  236.444369][   T10] usb 6-1: config index 0 descriptor too short (expected 45, got 36)
[  236.448082][   T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  236.463337][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  236.467396][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  236.471519][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  236.493095][   T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  236.496516][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.509400][T10758] loop4: detected capacity change from 0 to 1024
[  236.514910][   T10] usb 6-1: config 0 descriptor??
[  236.517491][T10734] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  236.555939][T10758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  236.607240][ T7900] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  236.756923][T10754] loop6: detected capacity change from 0 to 32768
[  236.766625][T10754] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1865 (10754)
[  236.784928][T10754] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  236.793713][T10754] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  236.930180][T10754] BTRFS info (device loop6): rebuilding free space tree
[  236.940589][   T10] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd
[  236.953923][   T10] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  236.958700][T10754] BTRFS info (device loop6): turning off barriers
[  236.960743][T10754] BTRFS info (device loop6): enabling free space tree
[  236.974557][T10754] BTRFS info (device loop6): force clearing of disk cache
[  236.976790][T10754] BTRFS info (device loop6): force zlib compression, level 3
[  237.013927][T10754] BTRFS info (device loop6): setting compat-ro feature flag for VERITY (0x4)
[  237.048290][T10438] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  237.277660][   T10] usb 6-1: USB disconnect, device number 11
[  237.428536][T10804] loop4: detected capacity change from 0 to 64
[  237.441518][T10802] loop6: detected capacity change from 0 to 2048
[  237.454796][T10802] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  237.471836][T10805] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  237.476366][T10802] syz.6.1875: attempt to access beyond end of device
[  237.476366][T10802] loop6: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[  237.606523][T10812] loop4: detected capacity change from 0 to 256
[  237.755126][T10814] loop6: detected capacity change from 0 to 4096
[  237.762207][T10814] ntfs3(loop6): mft corrupted
[  237.768416][T10814] ntfs3(loop6): Failed to load $MFT.
[  238.003739][T10822] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1885'.
[  238.956880][T10837] netlink: 'syz.5.1891': attribute type 1 has an invalid length.
[  238.959701][T10837] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1891'.
[  238.999789][T10840] loop5: detected capacity change from 0 to 1024
[  239.024100][T10840] hfsplus: xattr searching failed
[  239.046233][ T3500] hfsplus: bad catalog file entry
[  239.053330][ T3500] hfsplus: b-tree write err: -5, ino 3
[  239.105032][    C0] hrtimer: interrupt took 2096480 ns
[  239.472171][T10854] sctp: [Deprecated]: syz.5.1897 (pid 10854) Use of int in maxseg socket option.
[  239.472171][T10854] Use struct sctp_assoc_value instead
[  239.616788][T10852] loop4: detected capacity change from 0 to 40427
[  239.629824][T10852] F2FS-fs (loop4): Image doesn't support compression
[  239.631978][T10852] F2FS-fs (loop4): build fault injection rate: 684
[  239.642979][T10852] F2FS-fs (loop4): build fault injection type: 0x35f7
[  239.647124][T10852] F2FS-fs (loop4): invalid crc value
[  239.661437][T10861] sctp: [Deprecated]: syz.5.1900 (pid 10861) Use of struct sctp_assoc_value in delayed_ack socket option.
[  239.661437][T10861] Use struct sctp_sack_info instead
[  239.711242][T10852] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  239.717310][T10852] F2FS-fs (loop4): Start checkpoint disabled!
[  239.720665][T10852] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  239.738058][T10852] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  239.762597][   T34] audit: type=1800 audit(1769659927.604:74): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1896" name="file1" dev="loop4" ino=10 res=0 errno=0
[  239.778327][T10852] syz.4.1896: attempt to access beyond end of device
[  239.778327][T10852] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  239.788494][T10866] loop5: detected capacity change from 0 to 4096
[  239.793379][ T5911] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  239.807220][ T4971] kworker/u10:13: attempt to access beyond end of device
[  239.807220][ T4971] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  239.820772][ T4971] CPU: 1 UID: 0 PID: 4971 Comm: kworker/u10:13 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  239.820792][ T4971] Tainted: [L]=SOFTLOCKUP
[  239.820795][ T4971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  239.820802][ T4971] Workqueue: writeback wb_workfn (flush-7:4)
[  239.820826][ T4971] Call Trace:
[  239.820831][ T4971]  <TASK>
[  239.820836][ T4971]  dump_stack_lvl+0xe8/0x150
[  239.820855][ T4971]  f2fs_handle_critical_error+0x37c/0x540
[  239.820876][ T4971]  f2fs_write_end_io+0x886/0xb60
[  239.820904][ T4971]  __submit_merged_bio+0x256/0x650
[  239.820923][ T4971]  __submit_merged_write_cond+0x269/0x530
[  239.820968][ T4971]  f2fs_write_data_pages+0x2806/0x3360
[  239.821009][ T4971]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  239.821031][ T4971]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  239.821082][ T4971]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  239.821095][ T4971]  ? __lock_acquire+0x6b5/0x2cf0
[  239.821120][ T4971]  ? __lock_acquire+0x6b5/0x2cf0
[  239.821145][ T4971]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  239.821160][ T4971]  do_writepages+0x32e/0x550
[  239.821179][ T4971]  ? reacquire_held_locks+0x104/0x190
[  239.821191][ T4971]  ? writeback_sb_inodes+0x41f/0x1820
[  239.821208][ T4971]  __writeback_single_inode+0x133/0x1230
[  239.821222][ T4971]  ? do_raw_spin_unlock+0x4d/0x210
[  239.821238][ T4971]  writeback_sb_inodes+0x92c/0x1820
[  239.821271][ T4971]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  239.821281][ T4971]  ? do_raw_spin_lock+0x12b/0x2f0
[  239.821321][ T4971]  ? rcu_is_watching+0x15/0xb0
[  239.821340][ T4971]  wb_writeback+0x445/0xad0
[  239.821355][ T4971]  ? queue_io+0x2a1/0x450
[  239.821373][ T4971]  ? __pfx_wb_writeback+0x10/0x10
[  239.821382][ T4971]  ? do_raw_spin_lock+0x12b/0x2f0
[  239.821407][ T4971]  wb_workfn+0x3f8/0xef0
[  239.821416][ T4971]  ? __lock_acquire+0x6b5/0x2cf0
[  239.821423][ T4971]  ? look_up_lock_class+0x57/0x110
[  239.821452][ T4971]  ? __pfx_wb_workfn+0x10/0x10
[  239.821461][ T4971]  ? finish_task_switch+0x161/0x920
[  239.821476][ T4971]  ? do_raw_spin_lock+0x12b/0x2f0
[  239.821488][ T4971]  ? lock_acquire+0x106/0x330
[  239.821499][ T4971]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  239.821514][ T4971]  ? process_scheduled_works+0xa0f/0x17a0
[  239.821526][ T4971]  ? process_scheduled_works+0xa0f/0x17a0
[  239.821541][ T4971]  ? process_scheduled_works+0xa0f/0x17a0
[  239.821550][ T4971]  ? process_scheduled_works+0xa0f/0x17a0
[  239.821562][ T4971]  process_scheduled_works+0xaec/0x17a0
[  239.821592][ T4971]  ? __pfx_process_scheduled_works+0x10/0x10
[  239.821601][ T4971]  ? do_raw_spin_lock+0x12b/0x2f0
[  239.821618][ T4971]  ? assign_work+0x3d3/0x440
[  239.821633][ T4971]  worker_thread+0x89f/0xd90
[  239.821671][ T4971]  kthread+0x726/0x8b0
[  239.821687][ T4971]  ? __pfx_worker_thread+0x10/0x10
[  239.821696][ T4971]  ? __pfx_kthread+0x10/0x10
[  239.821711][ T4971]  ? _raw_spin_unlock_irq+0x23/0x50
[  239.821724][ T4971]  ? __pfx_kthread+0x10/0x10
[  239.821736][ T4971]  ret_from_fork+0x51b/0xa40
[  239.821751][ T4971]  ? __pfx_ret_from_fork+0x10/0x10
[  239.821760][ T4971]  ? __switch_to+0xc82/0x1410
[  239.821776][ T4971]  ? __pfx_kthread+0x10/0x10
[  239.821789][ T4971]  ret_from_fork_asm+0x1a/0x30
[  239.821813][ T4971]  </TASK>
[  239.821820][ T4971] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  240.002935][ T5911] usb 7-1: Using ep0 maxpacket: 16
[  240.006801][ T5911] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  240.010135][ T5911] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  240.017745][ T5911] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  240.020524][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.023612][ T5911] usb 7-1: Product: syz
[  240.025224][ T5911] usb 7-1: Manufacturer: syz
[  240.027017][ T5911] usb 7-1: SerialNumber: syz
[  240.280113][ T5911] usb 7-1: 0:2 : does not exist
[  240.286770][ T5911] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  240.327799][ T5911] usb 7-1: USB disconnect, device number 3
[  240.381021][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  240.687239][T10887] syz.4.1912: attempt to access beyond end of device
[  240.687239][T10887] loop4: rw=2049, sector=138, nr_sectors = 4 limit=128
[  240.693299][ T5950] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  240.699317][T10887] syz.4.1912: attempt to access beyond end of device
[  240.699317][T10887] loop4: rw=8390657, sector=142, nr_sectors = 2 limit=128
[  240.707303][T10887] Buffer I/O error on dev loop4, logical block 71, lost async page write
[  240.712144][T10887] syz.4.1912: attempt to access beyond end of device
[  240.712144][T10887] loop4: rw=8390657, sector=138, nr_sectors = 2 limit=128
[  240.717427][T10887] Buffer I/O error on dev loop4, logical block 69, lost async page write
[  240.853291][ T5950] usb 6-1: Using ep0 maxpacket: 32
[  240.862113][ T5950] usb 6-1: config 0 has an invalid interface number: 196 but max is 0
[  240.864852][ T5950] usb 6-1: config 0 has no interface number 0
[  240.866802][ T5950] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  240.870426][ T5950] usb 6-1: config 0 interface 196 has no altsetting 0
[  240.880595][ T5950] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  240.883896][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.886812][ T5950] usb 6-1: Product: syz
[  240.888157][ T5950] usb 6-1: Manufacturer: syz
[  240.889702][ T5950] usb 6-1: SerialNumber: syz
[  240.892901][ T5950] usb 6-1: config 0 descriptor??
[  240.898273][T10881] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  240.905653][T10889] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  240.908680][T10889] ntfs3(loop6): Failed to load $LogFile (-22).
[  240.952837][T10891] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  240.989041][T10893] set_capacity_and_notify: 2 callbacks suppressed
[  240.989059][T10893] loop6: detected capacity change from 0 to 512
[  240.996457][T10893] EXT4-fs: inline encryption not supported
[  241.014082][T10893] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.034373][T10893] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.056664][T10893] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #12: comm syz.6.1915: invalid size
[  241.101190][T10438] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.227718][T10904] loop6: detected capacity change from 0 to 1024
[  241.266189][T10904] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  241.292273][T10904] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #3: block 1: comm syz.6.1918: lblock 1 mapped to illegal pblock 1 (length 1)
[  241.309643][T10904] Quota error (device loop6): write_blk: dquota write failed
[  241.312719][T10904] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  241.336726][T10904] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1918: Failed to acquire dquot type 0
[  241.341982][T10904] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.1918: Freeing blocks not in datazone - block = 0, count = 4096
[  241.377949][T10904] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1918: Invalid inode bitmap blk 0 in block_group 0
[  241.389190][T10904] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  241.394581][ T3500] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u10:10: lblock 1 mapped to illegal pblock 1 (length 1)
[  241.406864][T10904] EXT4-fs (loop6): 1 orphan inode deleted
[  241.410328][T10904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.419403][ T3500] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  241.422807][ T3500] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u10:10: Failed to release dquot type 0
[  241.464782][T10904] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  241.502649][T10438] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.534543][ T5950] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: -71
[  241.546422][ T5950] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached
[  241.576954][ T5950] usb 6-1: USB disconnect, device number 12
[  241.654878][ T5950] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected
[  242.230298][T10929] bridge1: entered promiscuous mode
[  242.632822][T10948] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1939'.
[  242.652672][T10950] loop4: detected capacity change from 0 to 256
[  242.671294][T10950] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65db40a, utbl_chksum : 0x7319d30d)
[  242.808800][T10955] loop4: detected capacity change from 0 to 2048
[  242.847144][T10955]  loop4: p1 < > p4
[  242.850645][T10955] loop4: p4 size 722688 extends beyond EOD, truncated
[  242.982828][T10962] ipvlan2: entered promiscuous mode
[  243.107230][T10972] loop4: detected capacity change from 0 to 512
[  243.111972][T10972] EXT4-fs (loop4): 1 truncate cleaned up
[  243.125726][T10972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.135098][T10972] EXT4-fs (loop4): shut down requested (2)
[  243.190831][ T7900] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.298152][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1954'.
[  243.520169][   T34] audit: type=1800 audit(1769659931.364:75): pid=10956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1941" name="file1" dev="fuse" ino=3 res=0 errno=0
[  243.539007][T10993] loop5: detected capacity change from 0 to 1024
[  243.587207][T10993] hfsplus: failed to load root directory
[  243.988093][T11003] afs: Unknown parameter 'd'
[  244.027380][T11007] loop6: detected capacity change from 0 to 64
[  244.111785][T11011] loop6: detected capacity change from 0 to 1024
[  244.157317][ T4971] hfsplus: b-tree write err: -5, ino 4
[  244.567354][T11024] loop5: detected capacity change from 0 to 32768
[  244.923665][ T5893] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  245.073740][ T5893] usb 6-1: Using ep0 maxpacket: 32
[  245.098258][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7
[  245.102467][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024
[  245.124678][ T5893] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  245.128341][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.131331][ T5893] usb 6-1: Product: syz
[  245.139545][ T5893] usb 6-1: Manufacturer: syz
[  245.141410][ T5893] usb 6-1: SerialNumber: syz
[  245.155294][ T5893] usb 6-1: config 0 descriptor??
[  245.200231][ T5893] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  245.372244][ T5950] usb 6-1: USB disconnect, device number 13
[  245.374579][   T13] usb 6-1: Failed to submit usb control message: -71
[  245.377106][   T13] usb 6-1: unable to send the bmi data to the device: -71
[  245.387222][   T13] usb 6-1: unable to get target info from device
[  245.389187][   T13] usb 6-1: could not get target info (-71)
[  245.391427][   T13] usb 6-1: could not probe fw (-71)
[  245.417055][T11046] tipc: Started in network mode
[  245.419288][T11046] tipc: Node identity , cluster identity 4711
[  245.611356][T11060] netlink: 'syz.4.1989': attribute type 1 has an invalid length.
[  245.657833][T11062] loop6: detected capacity change from 0 to 256
[  245.729397][T11062] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  245.879985][T11070] trusted_key: syz.6.1993 sent an empty control message without MSG_MORE.
[  246.816026][T11086] netlink: 'syz.6.1998': attribute type 1 has an invalid length.
[  246.834007][ T5911] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  246.934841][T11090] bond1: (slave gretap1): making interface the new active one
[  246.939183][T11090] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  246.994406][ T5911] usb 6-1: Using ep0 maxpacket: 8
[  247.011652][ T5911] usb 6-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  247.019604][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.023552][ T5911] usb 6-1: Product: syz
[  247.032368][ T5911] usb 6-1: Manufacturer: syz
[  247.034802][T11093] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1999'.
[  247.042355][ T5911] usb 6-1: SerialNumber: syz
[  247.062805][ T5911] usb 6-1: config 0 descriptor??
[  247.099968][ T5911] option 6-1:0.0: GSM modem (1-port) converter detected
[  247.128380][T11096] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode
[  247.130792][T11096] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode
[  247.145169][T11096] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  247.288782][ T5893] usb 6-1: USB disconnect, device number 14
[  247.304453][ T5893] option 6-1:0.0: device disconnected
[  247.487516][T11107] loop6: detected capacity change from 0 to 4096
[  247.804451][ T5893] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  248.068656][ T5893] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  248.093275][ T5893] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  248.103374][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  248.115951][ T5893] usb 7-1: SerialNumber: syz
[  248.520238][ T5893] usb 7-1: bad CDC descriptors
[  248.530486][ T5893] usb 7-1: USB disconnect, device number 4
[  249.424326][  T796] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  249.517609][T11129] loop4: detected capacity change from 0 to 40427
[  249.521769][T11129] F2FS-fs (loop4): build fault injection rate: 690
[  249.525287][T11129] F2FS-fs (loop4): invalid crc value
[  249.553598][T11129] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  249.775005][T11129] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  249.866409][  T796] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.870437][  T796] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  249.876359][  T796] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  249.879869][  T796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.880407][T11128] syz.4.2013: attempt to access beyond end of device
[  249.880407][T11128] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  249.882720][  T796] usb 7-1: Product: syz
[  249.882733][  T796] usb 7-1: Manufacturer: syz
[  249.882742][  T796] usb 7-1: SerialNumber: syz
[  249.921955][ T7900] syz-executor: attempt to access beyond end of device
[  249.921955][ T7900] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  249.927354][ T7900] CPU: 1 UID: 0 PID: 7900 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  249.927374][ T7900] Tainted: [L]=SOFTLOCKUP
[  249.927378][ T7900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  249.927384][ T7900] Call Trace:
[  249.927389][ T7900]  <TASK>
[  249.927394][ T7900]  dump_stack_lvl+0xe8/0x150
[  249.927419][ T7900]  f2fs_handle_critical_error+0x37c/0x540
[  249.927444][ T7900]  f2fs_write_end_io+0x886/0xb60
[  249.927472][ T7900]  __submit_merged_bio+0x256/0x650
[  249.927489][ T7900]  __submit_merged_write_cond+0x269/0x530
[  249.927507][ T7900]  f2fs_write_data_pages+0x2806/0x3360
[  249.927542][ T7900]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  249.927564][ T7900]  ? __lock_acquire+0x6b5/0x2cf0
[  249.927597][ T7900]  ? unwind_next_frame+0xa5/0x23c0
[  249.927612][ T7900]  ? lock_acquire+0x106/0x330
[  249.927626][ T7900]  ? __lock_acquire+0x6b5/0x2cf0
[  249.927646][ T7900]  ? __lock_acquire+0x6b5/0x2cf0
[  249.927662][ T7900]  ? do_raw_spin_lock+0x12b/0x2f0
[  249.927683][ T7900]  ? do_raw_spin_unlock+0x4d/0x210
[  249.927696][ T7900]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  249.927711][ T7900]  do_writepages+0x32e/0x550
[  249.927733][ T7900]  ? do_raw_spin_unlock+0x4d/0x210
[  249.927751][ T7900]  filemap_fdatawrite+0x1e9/0x2f0
[  249.927770][ T7900]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  249.927839][ T7900]  ? do_raw_spin_unlock+0x4d/0x210
[  249.927857][ T7900]  f2fs_sync_dirty_inodes+0x30e/0x810
[  249.927882][ T7900]  f2fs_write_checkpoint+0x9c6/0x2490
[  249.927892][ T7900]  ? stack_depot_save_flags+0x33/0x810
[  249.927921][ T7900]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  249.927961][ T7900]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  249.927972][ T7900]  ? kfree+0x1be/0x650
[  249.927994][ T7900]  kill_f2fs_super+0x308/0x710
[  249.928008][ T7900]  ? __pfx_kill_f2fs_super+0x10/0x10
[  249.928032][ T7900]  deactivate_locked_super+0xbc/0x130
[  249.928045][ T7900]  cleanup_mnt+0x437/0x4d0
[  249.928055][ T7900]  ? _raw_spin_unlock_irq+0x23/0x50
[  249.928072][ T7900]  task_work_run+0x1d9/0x270
[  249.928092][ T7900]  ? __pfx_task_work_run+0x10/0x10
[  249.928121][ T7900]  exit_to_user_mode_loop+0xed/0x480
[  249.928136][ T7900]  ? rcu_is_watching+0x15/0xb0
[  249.928151][ T7900]  do_syscall_64+0x2b7/0xf80
[  249.928161][ T7900]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.928175][ T7900]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.928184][ T7900] RIP: 0033:0x7f91a3d9bf17
[  249.928196][ T7900] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  249.928204][ T7900] RSP: 002b:00007ffcf7480508 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  249.928216][ T7900] RAX: 0000000000000000 RBX: 00007f91a3e0471f RCX: 00007f91a3d9bf17
[  249.928222][ T7900] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf74805c0
[  249.928228][ T7900] RBP: 00007ffcf74805c0 R08: 00007ffcf74815c0 R09: 00000000ffffffff
[  249.928235][ T7900] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf7481650
[  249.928241][ T7900] R13: 00007f91a3e0471f R14: 000000000003cfc9 R15: 00007ffcf7481690
[  249.928280][ T7900]  </TASK>
[  249.929064][ T7900] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  250.108079][  T796] usb 7-1: 0:2 : does not exist
[  250.118113][  T796] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  250.154869][  T796] usb 7-1: USB disconnect, device number 5
[  250.198594][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  250.471451][ T5950] IPVS: starting estimator thread 0...
[  250.564462][T11157] IPVS: using max 43 ests per chain, 103200 per kthread
[  250.623625][T11164] veth3: entered promiscuous mode
[  250.733175][ T8270] IPVS: starting estimator thread 0...
[  250.748351][T11168] IPVS: rr: FWM 3 0x00000003 - no destination available
[  250.807748][ T5950] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  250.843459][T11171] IPVS: using max 45 ests per chain, 108000 per kthread
[  250.974718][ T5950] usb 5-1: Using ep0 maxpacket: 8
[  250.983402][ T5950] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  250.994412][ T5950] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  250.998386][ T5950] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  251.019386][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.058834][T11177] loop6: detected capacity change from 0 to 32768
[  251.063119][T11177] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2035 (11177)
[  251.073387][T11177] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  251.078030][T11177] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  251.091543][T11181] loop5: detected capacity change from 0 to 512
[  251.172363][T11181] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.183934][T11181] ext4 filesystem being mounted at /418/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  251.197150][T11181] EXT4-fs error (device loop5): ext4_resize_begin:60: comm syz.5.2036: resize_inode disabled but reserved GDT blocks non-zero
[  251.206525][T11177] BTRFS info (device loop6): turning off barriers
[  251.209232][T11177] BTRFS info (device loop6): enabling free space tree
[  251.211722][T11177] BTRFS info (device loop6): use zstd compression, level 3
[  251.241939][ T7936] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.259484][ T5950] usb 5-1: string descriptor 0 read error: -71
[  251.301483][ T5950] usb 5-1: USB disconnect, device number 15
[  251.665190][T11205] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  252.497761][T11219] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2045'.
[  252.502666][T11219] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2045'.
[  252.577159][T11221] loop4: detected capacity change from 0 to 128
[  252.597623][T11221] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  252.601646][T11221] hpfs: filesystem error: improperly stopped
[  252.607416][T11221] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  252.613256][T11221] hpfs: You really don't want any checks? You are crazy...
[  252.623556][T11221] hpfs: hpfs_map_sector(): read error
[  252.630578][T11221] hpfs: code page support is disabled
[  252.639700][T11221] hpfs: hpfs_map_4sectors(): unaligned read
[  252.648636][T11221] hpfs: hpfs_map_4sectors(): unaligned read
[  252.653814][T11221] hpfs: filesystem error: unable to find root dir
[  252.948879][T10438] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  253.213943][T11238] loop6: detected capacity change from 0 to 512
[  253.232823][T11243] overlay: Bad value for 'workdir'
[  253.258382][T11238] EXT4-fs (loop6): 1 truncate cleaned up
[  253.261798][T11238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.284477][T11238] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2050: bg 0: block 465: padding at end of block bitmap is not set
[  253.321949][T11238] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  253.334405][T11238] EXT4-fs (loop6): This should not happen!! Data will be lost
[  253.334405][T11238] 
[  253.338694][T11238] EXT4-fs (loop6): Total free blocks count 0
[  253.340932][T11238] EXT4-fs (loop6): Free/Dirty block details
[  253.345672][T11247] netlink: 'syz.4.2057': attribute type 5 has an invalid length.
[  253.357730][T11238] EXT4-fs (loop6): free_blocks=0
[  253.369667][T11238] EXT4-fs (loop6): dirty_blocks=2
[  253.371722][T11238] EXT4-fs (loop6): Block reservation details
[  253.374068][T11238] EXT4-fs (loop6): i_reserved_data_blocks=2
[  253.479041][T10438] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.578643][ T5893] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  253.739223][ T5893] usb 6-1: Using ep0 maxpacket: 8
[  253.754927][ T5893] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  253.758575][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.768282][ T5893] usb 6-1: Product: syz
[  253.769979][ T5893] usb 6-1: Manufacturer: syz
[  253.771762][ T5893] usb 6-1: SerialNumber: syz
[  253.777176][ T5893] usb 6-1: config 0 descriptor??
[  253.782223][ T5893] gspca_main: sq930x-2.14.0 probing 2770:930c
[  253.935732][   T33] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  254.095106][   T33] usb 5-1: Using ep0 maxpacket: 8
[  254.175875][   T33] usb 5-1: unable to get BOS descriptor or descriptor too short
[  254.181123][   T33] usb 5-1: unable to read config index 0 descriptor/start: -71
[  254.184584][   T33] usb 5-1: can't read configurations, error -71
[  254.592147][ T5893] gspca_sq930x: ucbus_write failed -71
[  254.825187][ T5893] gspca_sq930x: Sensor ov9630 not yet treated
[  254.827526][ T5893] sq930x 6-1:0.0: probe with driver sq930x failed with error -22
[  254.857738][ T5893] usb 6-1: USB disconnect, device number 15
[  254.972058][T11281] loop4: detected capacity change from 0 to 64
[  255.092654][T11287] loop4: detected capacity change from 0 to 256
[  255.124349][T11287] FAT-fs (loop4): Directory bread(block 64) failed
[  255.135725][T11287] FAT-fs (loop4): Directory bread(block 65) failed
[  255.138335][T11287] FAT-fs (loop4): Directory bread(block 66) failed
[  255.140707][T11287] FAT-fs (loop4): Directory bread(block 67) failed
[  255.143133][T11287] FAT-fs (loop4): Directory bread(block 68) failed
[  255.165940][T11287] FAT-fs (loop4): Directory bread(block 69) failed
[  255.169454][T11287] FAT-fs (loop4): Directory bread(block 70) failed
[  255.192483][T11287] FAT-fs (loop4): Directory bread(block 71) failed
[  255.194615][T11287] FAT-fs (loop4): Directory bread(block 72) failed
[  255.197462][T11287] FAT-fs (loop4): Directory bread(block 73) failed
[  255.425089][ T8270] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  255.469271][T11300] loop4: detected capacity change from 0 to 32768
[  255.472204][T11300] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2082 (11300)
[  255.486573][T11300] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  255.496738][T11300] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  255.528743][T11300] BTRFS info (device loop4): enabling ssd optimizations
[  255.531206][T11300] BTRFS info (device loop4): turning on async discard
[  255.533625][T11300] BTRFS info (device loop4): enabling free space tree
[  255.575842][ T8270] usb 6-1: Using ep0 maxpacket: 8
[  255.583196][ T8270] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  255.590545][ T8270] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.630101][ T8270] pvrusb2: Hardware description: Terratec Grabster AV400
[  255.633062][ T8270] pvrusb2: **********
[  255.638004][ T7900] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  255.644059][ T8270] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  255.657881][ T8270] pvrusb2: Important functionality might not be entirely working.
[  255.681783][ T8270] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  255.686731][ T8270] pvrusb2: **********
[  255.833520][ T2400] pvrusb2: Invalid write control endpoint
[  255.914850][ T2400] pvrusb2: Invalid write control endpoint
[  255.919267][ T2400] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  255.922406][ T2400] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  255.924863][ T2400] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  255.932535][ T2400] pvrusb2: Device being rendered inoperable
[  255.935308][ T2400] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  255.937766][ T2400] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  255.996655][ T2400] pvrusb2: Attached sub-driver cx25840
[  255.998897][ T2400] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  256.003350][ T2400] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  256.036802][ T5893] usb 6-1: USB disconnect, device number 16
[  256.138916][   T33] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  256.287424][   T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.291278][   T33] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  256.296705][   T33] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  256.300366][   T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.310875][   T33] usb 5-1: config 0 descriptor??
[  256.732354][   T33] kovaplus 0003:1E7D:2D50.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0
[  256.865572][ T8270] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  257.033282][ T8270] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  257.037228][ T8270] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.059008][ T8270] usb 6-1: config 0 descriptor??
[  257.081716][ T8270] cp210x 6-1:0.0: cp210x converter detected
[  257.329185][   T33] kovaplus 0003:1E7D:2D50.000D: couldn't init struct kovaplus_device
[  257.332567][   T33] kovaplus 0003:1E7D:2D50.000D: couldn't install mouse
[  257.347458][   T33] kovaplus 0003:1E7D:2D50.000D: probe with driver kovaplus failed with error -71
[  257.365720][   T33] usb 5-1: USB disconnect, device number 18
[  257.412286][T11340] loop6: detected capacity change from 0 to 32768
[  257.424966][T11340] (syz.6.2091,11340,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  257.430975][T11340] (syz.6.2091,11340,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  257.440191][T11340] JBD2: Ignoring recovery information on journal
[  257.470809][T11340] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  257.475754][ T8270] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  257.502754][ T8270] usb 6-1: cp210x converter now attached to ttyUSB0
[  257.557769][T10438] ocfs2: Unmounting device (7,6) on (node local)
[  257.702269][ T8270] usb 6-1: USB disconnect, device number 17
[  257.716614][ T8270] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  257.726862][ T8270] cp210x 6-1:0.0: device disconnected
[  257.877387][T11353] loop4: detected capacity change from 0 to 128
[  258.066395][ T8270] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  258.218360][ T8270] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  258.221518][ T8270] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  258.223034][T11363] loop4: detected capacity change from 0 to 4096
[  258.226335][ T8270] usb 7-1: config 0 has no interface number 0
[  258.232148][T11363] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  258.242452][ T8270] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  258.266978][ T8270] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.270220][ T8270] usb 7-1: Product: syz
[  258.271823][ T8270] usb 7-1: Manufacturer: syz
[  258.273631][ T8270] usb 7-1: SerialNumber: syz
[  258.292771][ T8270] usb 7-1: config 0 descriptor??
[  258.298928][T11363] ntfs3(loop4): Inode r=19 is not in use!
[  258.300798][T11363] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  258.304827][T11363] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  258.341706][T11367] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2103'.
[  258.344579][T11367] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  258.515584][ T8270] usb 7-1: USB disconnect, device number 6
[  258.517086][T11377] MINIX-fs: unable to read superblock
[  259.232192][T11380] netlink: 388 bytes leftover after parsing attributes in process `syz.6.2107'.
[  259.505050][T11387] cifs: Bad value for 'source'
[  259.723650][T11400] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2116'.
[  260.504579][T11401] loop6: detected capacity change from 0 to 262144
[  260.507845][T11401] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2117 (11401)
[  260.515257][T11401] BTRFS info (device loop6): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  260.518537][T11401] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  260.563018][T11401] BTRFS info (device loop6): enabling ssd optimizations
[  260.565421][T11401] BTRFS info (device loop6): turning on async discard
[  260.567906][T11401] BTRFS info (device loop6): enabling free space tree
[  260.622519][T10438] BTRFS info (device loop6): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  260.724407][T11423] netlink: 'syz.4.2121': attribute type 25 has an invalid length.
[  260.729211][T11423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2121'.
[  260.737004][T11423] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2121'.
[  260.762120][T11423] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2121'.
[  260.881366][T11433] tipc: Started in network mode
[  260.883186][T11433] tipc: Node identity 2e000000000000000000008, cluster identity 4711
[  261.082486][T11448] netlink: 'syz.4.2132': attribute type 4 has an invalid length.
[  261.258312][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  261.264000][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  261.276439][T11460] loop5: detected capacity change from 0 to 512
[  261.280556][T11460] EXT4-fs: Ignoring removed i_version option
[  261.306585][T11460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.349452][ T7936] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.478558][T11470] loop5: detected capacity change from 0 to 512
[  261.491093][T11470] EXT4-fs warning (device loop5): read_mmp_block:111: Error -117 while reading MMP block 8
[  261.826084][   T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  261.980891][   T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  261.985083][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  261.992768][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  262.006424][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  262.026004][   T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  262.029189][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.034946][   T10] usb 6-1: config 0 descriptor??
[  262.356061][ T8270] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  262.490887][   T10] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  262.507960][ T8270] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.513478][ T8270] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  262.517872][ T8270] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  262.520759][ T8270] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.526516][ T8270] usb 7-1: config 0 descriptor??
[  262.749277][T11491] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  262.755057][T11491] bond1 (unregistering): Released all slaves
[  262.937904][ T8270] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor
[  262.953878][ T8270] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.000F/input/input23
[  263.067591][ T8270] keytouch 0003:0926:3333.000F: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0
[  263.106166][ T5950] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  263.137207][   T24] usb 7-1: USB disconnect, device number 7
[  263.268566][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.272941][ T5950] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  263.276868][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.282846][ T5950] usb 5-1: config 0 descriptor??
[  263.695617][T11497] loop6: detected capacity change from 0 to 2048
[  263.711084][T11497] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  263.719983][ T5923] udevd[5923]: incorrect nilfs2 checksum on /dev/loop6
[  263.723063][T11498] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  263.911359][ T5950] razer 0003:1532:010E.0010: hidraw1: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.4-1/input0
[  264.105876][   T33] usb 5-1: USB disconnect, device number 19
[  264.487576][T11515] loop5: detected capacity change from 0 to 16
[  264.491971][T11515] erofs (device loop5): DAX unsupported by block device. Turning off DAX.
[  264.621924][ T5306] usb 6-1: USB disconnect, device number 18
[  264.706953][T11515] erofs (device loop5): mounted with root inode @ nid 36.
[  264.725217][T11521] netlink: 'syz.6.2159': attribute type 10 has an invalid length.
[  265.526607][T11538] loop5: detected capacity change from 0 to 32768
[  265.533283][T11538] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2166 (11538)
[  265.555364][T11538] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  265.562283][T11538] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  265.576165][T11550] netem: change failed
[  265.651093][T11538] BTRFS info (device loop5): enabling ssd optimizations
[  265.653524][T11538] BTRFS info (device loop5): turning on async discard
[  265.655999][T11538] BTRFS info (device loop5): enabling free space tree
[  265.694402][ T7936] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  265.899704][T11576] loop5: detected capacity change from 0 to 32768
[  265.908364][T11576] JBD2: Ignoring recovery information on journal
[  265.961683][T11576] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  265.998426][ T7936] ocfs2: Unmounting device (7,5) on (node local)
[  266.152010][T11586] loop5: detected capacity change from 0 to 2048
[  266.165528][T11586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.169676][T11586] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.190034][ T7936] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.222668][T11591] loop5: detected capacity change from 0 to 256
[  266.226103][T11591] FAT-fs (loop5): bogus logical sector size 13
[  266.231616][T11591] FAT-fs (loop5): Can't find a valid FAT filesystem
[  266.365569][T11598] program syz.5.2183 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  266.625014][T11602] loop5: detected capacity change from 0 to 32768
[  266.635589][T11602] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2185 (11602)
[  266.655163][T11602] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  266.666718][T11602] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  266.788144][T11602] BTRFS info (device loop5): enabling ssd optimizations
[  266.790850][T11602] BTRFS info (device loop5): turning on async discard
[  266.793210][T11602] BTRFS info (device loop5): enabling free space tree
[  266.828460][ T7936] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  266.908229][T11625] /dev/nullb0: Can't open blockdev
[  266.915823][T11625] /dev/nullb0: Can't open blockdev
[  267.040812][T11619] loop4: detected capacity change from 0 to 32768
[  267.050276][T11619] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2188 (11619)
[  267.094100][T11619] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  267.110766][T11619] BTRFS info (device loop4): using blake2b (blake2b-256-lib) checksum algorithm
[  267.309923][T11619] BTRFS info (device loop4): enabling ssd optimizations
[  267.312681][T11619] BTRFS info (device loop4): turning on async discard
[  267.315058][T11619] BTRFS info (device loop4): enabling free space tree
[  267.396169][ T7900] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  267.724274][T11660] loop5: detected capacity change from 0 to 4096
[  267.727594][T11660] EXT4-fs: Ignoring removed nomblk_io_submit option
[  267.818388][T11660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.873669][ T7936] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.005279][T11669] loop5: detected capacity change from 0 to 512
[  268.032694][T11669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.038037][T11669] ext4 filesystem being mounted at /477/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  268.051700][T11669] EXT4-fs warning (device loop5): ext4_group_extend:1891: can't read last block, resize aborted
[  268.073661][ T7936] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.244139][T11662] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  268.291115][T11662] XFS (loop4): Ending clean mount
[  268.295787][T11662] XFS (loop4): Quotacheck needed: Please wait.
[  268.338173][T11662] XFS (loop4): Quotacheck: Done.
[  268.381473][ T7900] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  268.386377][T11675] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  268.424356][T11675] XFS (loop5): Ending clean mount
[  268.478913][ T7936] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  268.733879][T11699] set_capacity_and_notify: 2 callbacks suppressed
[  268.733896][T11699] loop4: detected capacity change from 0 to 8192
[  268.790647][T11699]  loop4: p1 p2 p4[EZD]
[  268.792139][T11699] loop4: p1 start 589823 is beyond EOD, truncated
[  268.794145][T11699] loop4: p2 size 4294924146 extends beyond EOD, truncated
[  268.801866][T11699] loop4: p4 size 262912 extends beyond EOD, truncated
[  268.955268][ T6666] udevd[6666]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  268.961906][ T5923] udevd[5923]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  269.014052][T11711] bond1: Unable to set up delay as MII monitoring is disabled
[  269.022881][T11711] bond1 (unregistering): Released all slaves
[  269.077133][ T8270] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  269.237022][ T8270] usb 6-1: Using ep0 maxpacket: 16
[  269.241498][ T8270] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  269.245451][ T8270] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  269.251899][ T8270] usb 6-1: New USB device found, idVendor=1f6b, idProduct=0101, bcdDevice= 0.40
[  269.254804][ T8270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.259695][ T8270] usb 6-1: Product: syz
[  269.261658][ T8270] usb 6-1: Manufacturer: syz
[  269.263525][ T8270] usb 6-1: SerialNumber: syz
[  269.488544][ T8270] usb 6-1: 0:66 : does not exist
[  269.490709][ T8270] usb 6-1: unit 4 not found!
[  269.518764][ T8270] usb 6-1: USB disconnect, device number 19
[  269.540452][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  269.709608][T11726] loop4: detected capacity change from 0 to 32768
[  269.768122][T11726] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  269.802475][T11726] XFS (loop4): Ending clean mount
[  269.811619][T11726] XFS (loop4): Quotacheck needed: Please wait.
[  269.851543][T11726] XFS (loop4): Quotacheck: Done.
[  269.872481][ T7900] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  270.265223][T11748] xt_hashlimit: max too large, truncated to 1048576
[  270.383523][T11754] loop4: detected capacity change from 0 to 4096
[  270.386769][T11754] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  270.405913][T11754] ntfs3(loop4): ino=5, mi_enum_attr
[  270.408475][T11754] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  270.677187][   T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  270.837205][   T24] usb 5-1: Using ep0 maxpacket: 32
[  270.841414][   T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  270.844488][   T24] usb 5-1: config 0 has no interface number 0
[  270.849925][   T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  270.853639][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.856668][   T24] usb 5-1: Product: syz
[  270.862893][   T24] usb 5-1: Manufacturer: syz
[  270.864918][   T24] usb 5-1: SerialNumber: syz
[  270.870423][   T24] usb 5-1: config 0 descriptor??
[  270.877030][   T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  271.085251][   T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  271.095003][   T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  271.132348][T11770] loop5: detected capacity change from 0 to 131072
[  271.135863][T11770] F2FS-fs (loop5): Test dummy encryption mode enabled
[  271.138846][T11770] F2FS-fs (loop5): invalid crc value
[  271.203287][T11770] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  271.209796][T11770] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  271.238286][T11770] F2FS-fs (loop5): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix.
[  271.249805][T11770] F2FS-fs (loop5): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix.
[  271.299981][T11758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.303637][T11758] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.511302][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  271.527746][   T24] usb 5-1: USB disconnect, device number 20
[  271.531869][   T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  271.547091][   T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  271.552657][   T24] quatech2 5-1:0.51: device disconnected
[  271.658965][T11776] loop5: detected capacity change from 0 to 1024
[  271.679726][T11776] EXT4-fs: Ignoring removed bh option
[  271.681439][T11776] EXT4-fs: inline encryption not supported
[  271.689035][T11776] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  271.703384][T11776] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000]
[  271.712889][T11776] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.2238: Freeing blocks not in datazone - block = 0, count = 4096
[  271.722690][T11776] EXT4-fs (loop5): Remounting filesystem read-only
[  271.725045][T11776] EXT4-fs (loop5): 1 orphan inode deleted
[  271.728719][T11776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.747528][ T4389] EXT4-fs (loop5): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  271.751945][ T4389] Quota error (device loop5): write_blk: dquota write failed
[  271.754924][ T4389] Quota error (device loop5): remove_free_dqentry: Can't write block (2) with free entries
[  271.760247][ T4389] EXT4-fs (loop5): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  271.775418][ T7936] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.779614][ T4389] Quota error (device loop5): write_blk: dquota write failed
[  271.782590][ T4389] Quota error (device loop5): free_dqentry: Can't move quota data block (2) to free list
[  271.786631][ T4389] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started
[  271.791043][ T4389] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  272.798703][T11791] loop5: detected capacity change from 0 to 16
[  272.826056][T11791] erofs (device loop5): mounted with root inode @ nid 36.
[  272.839116][T11791] syz.5.2243: attempt to access beyond end of device
[  272.839116][T11791] loop5: rw=8912896, sector=131758, nr_sectors = 2 limit=16
[  272.848739][T11791] syz.5.2243: attempt to access beyond end of device
[  272.848739][T11791] loop5: rw=8912896, sector=74, nr_sectors = 2 limit=16
[  272.855094][T11791] syz.5.2243: attempt to access beyond end of device
[  272.855094][T11791] loop5: rw=8912896, sector=262336, nr_sectors = 2 limit=16
[  272.861850][T11791] syz.5.2243: attempt to access beyond end of device
[  272.861850][T11791] loop5: rw=8912896, sector=172, nr_sectors = 2 limit=16
[  272.867505][T11791] syz.5.2243: attempt to access beyond end of device
[  272.867505][T11791] loop5: rw=8912896, sector=131274, nr_sectors = 2 limit=16
[  272.873285][T11791] syz.5.2243: attempt to access beyond end of device
[  272.873285][T11791] loop5: rw=8912896, sector=178, nr_sectors = 2 limit=16
[  272.879235][T11791] syz.5.2243: attempt to access beyond end of device
[  272.879235][T11791] loop5: rw=8912896, sector=131284, nr_sectors = 2 limit=16
[  272.884710][T11791] syz.5.2243: attempt to access beyond end of device
[  272.884710][T11791] loop5: rw=8912896, sector=178, nr_sectors = 2 limit=16
[  272.890631][T11791] syz.5.2243: attempt to access beyond end of device
[  272.890631][T11791] loop5: rw=8912896, sector=4830, nr_sectors = 2 limit=16
[  272.896098][T11791] syz.5.2243: attempt to access beyond end of device
[  272.896098][T11791] loop5: rw=8912896, sector=1556797440, nr_sectors = 2 limit=16
[  272.908601][T11791] erofs (device loop5): failed to readdir of logical block 0 of nid 36
[  272.998857][T11795] tmpfs: User quota block hardlimit too large.
[  273.162531][T11803] loop5: detected capacity change from 0 to 1024
[  273.201811][T11803] hfsplus: unable to load nls mapping ""
[  273.560788][T11820] loop5: detected capacity change from 0 to 2048
[  273.580169][T11820] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  273.649737][T11816] loop4: detected capacity change from 0 to 32768
[  273.672783][T11816] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  273.696681][T11816] XFS (loop4): Ending clean mount
[  273.700634][T11816] XFS (loop4): Quotacheck needed: Please wait.
[  273.736934][T11816] XFS (loop4): Quotacheck: Done.
[  273.770566][ T7900] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  273.962707][T11841] loop4: detected capacity change from 0 to 128
[  273.965549][T11841] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  273.970443][T11841] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  274.234853][   T34] audit: type=1800 audit(1769659962.050:76): pid=11843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2263" name="file1" dev="loop4" ino=1048660 res=0 errno=0
[  274.882205][ T4795] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  275.119128][T11882] loop4: detected capacity change from 0 to 512
[  275.146958][T11882] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2281: inode has both inline data and extents flags
[  275.151891][T11882] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2281: couldn't read orphan inode 15 (err -117)
[  275.165419][T11882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.192576][ T7900] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.599115][T11906] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  275.801946][T11911] loop4: detected capacity change from 0 to 512
[  275.811152][T11911] EXT4-fs (loop4): Test dummy encryption mode enabled
[  275.841264][T11911] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #2: block 4: comm syz.4.2293: lblock 0 mapped to illegal pblock 4 (length 1)
[  275.858301][T11916] Invalid source name
[  275.859719][T11911] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.2293: error -117 reading directory block
[  275.879034][T11911] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  275.883354][T11911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.910542][ T7900] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.006061][T11922] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2298'.
[  276.043487][T11924] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2299'.
[  276.337046][T11940] loop4: detected capacity change from 0 to 4096
[  276.352103][T11940] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  276.358229][T11940] ntfs3(loop4): Failed to load $LogFile (-22).
[  276.499864][T11932] loop5: detected capacity change from 0 to 32768
[  276.517699][T11932] non-latin1 character 0x3ff found in JFS file name
[  276.531556][T11932] mount with iocharset=utf8 to access
[  276.625910][T11952] loop4: detected capacity change from 0 to 1024
[  276.646295][T11952] EXT4-fs (loop4): inodes count not valid: 544 vs 32
[  276.715416][T11958] loop5: detected capacity change from 0 to 16
[  276.731643][T11958] erofs (device loop5): mounted with root inode @ nid 36.
[  276.744876][T11958] erofs (device loop5): failed to decompress (lz4) -117 @ pa 1440 size 1 => 1792
[  276.761092][T11958] erofs (device loop5): read error -117 @ 87 of nid 36
[  276.763354][T11958] erofs (device loop5): failed to readdir of logical block 87 of nid 36
[  277.149438][  T796] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  277.188374][ T8270] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  277.298258][  T796] usb 5-1: Using ep0 maxpacket: 32
[  277.302291][  T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.306842][  T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.310970][  T796] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  277.314560][  T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.320412][  T796] usb 5-1: config 0 descriptor??
[  277.338391][ T8270] usb 6-1: Using ep0 maxpacket: 32
[  277.345087][ T8270] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  277.350240][ T8270] usb 6-1: config 0 has no interface number 0
[  277.360244][ T8270] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  277.364143][ T8270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.367361][ T8270] usb 6-1: Product: syz
[  277.370060][ T8270] usb 6-1: Manufacturer: syz
[  277.371922][ T8270] usb 6-1: SerialNumber: syz
[  277.377150][ T8270] usb 6-1: config 0 descriptor??
[  277.386559][ T8270] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  277.593831][ T8270] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  277.604360][ T8270] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  277.734261][  T796] lenovo 0003:17EF:6067.0011: unknown main item tag 0x0
[  277.740993][  T796] lenovo 0003:17EF:6067.0011: hidraw0: USB HID vff.ff Device [HID 17ef:6067] on usb-dummy_hcd.4-1/input0
[  277.936982][ T5893] usb 5-1: USB disconnect, device number 21
[  277.995857][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  277.996155][ T5306] usb 6-1: USB disconnect, device number 20
[  278.007994][ T5306] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  278.017460][ T5306] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  278.021940][ T5306] quatech2 6-1:0.51: device disconnected
[  278.559385][T11979] loop5: detected capacity change from 0 to 2048
[  278.563140][T11979] EXT4-fs: Ignoring removed mblk_io_submit option
[  278.585913][T11979] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.596103][T11978] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2326: bg 0: block 234: padding at end of block bitmap is not set
[  278.607439][T11978] EXT4-fs (loop5): Remounting filesystem read-only
[  278.611685][T11978] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 15, error -30)
[  278.631219][ T7936] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.689619][T11977] loop4: detected capacity change from 0 to 40427
[  278.698602][T11977] F2FS-fs: heap/no_heap options were deprecated
[  278.701302][T11977] F2FS-fs (loop4): Invalid log sectors per block(0) log sectorsize(9)
[  278.708692][T11977] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  278.719830][T11977] F2FS-fs (loop4): invalid crc value
[  278.722412][T11977] F2FS-fs (loop4): SIT is corrupted node# 0 vs 7
[  278.727272][T11977] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117)
[  279.005617][T11996] loop4: detected capacity change from 0 to 128
[  279.025162][T11998] netlink: 212384 bytes leftover after parsing attributes in process `syz.5.2333'.
[  279.028265][T11996] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  279.032855][T11996] ext4 filesystem being mounted at /528/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  279.034745][T11998] openvswitch: netlink: Message has 6 unknown bytes.
[  279.044122][T11996] EXT4-fs (loop4): shut down requested (1)
[  279.046616][T11996] fscrypt (loop4, inode 12): Error -5 getting encryption context
[  279.076940][ T7900] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  279.364665][T12014] loop5: detected capacity change from 0 to 512
[  279.404742][T12014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.412246][T12014] ext4 filesystem being mounted at /552/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  279.443784][ T7936] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.668860][T12022] loop5: detected capacity change from 0 to 256
[  279.691985][T12022] exFAT-fs (loop5): Invalid exboot-signature(sector = 2): 0x1119abd0
[  279.709934][T12022] exFAT-fs (loop5): Invalid exboot-signature(sector = 5): 0x1119abd0
[  279.713759][T12022] exFAT-fs (loop5): Invalid exboot-signature(sector = 6): 0x00000000
[  279.725313][T12022] exFAT-fs (loop5): Invalid exboot-signature(sector = 7): 0x00000000
[  279.744033][T12022] exFAT-fs (loop5): Invalid exboot-signature(sector = 8): 0x00000000
[  279.748094][T12022] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x13a8bc6e)
[  279.758443][T12022] exFAT-fs (loop5): invalid boot region
[  279.760724][T12022] exFAT-fs (loop5): failed to recognize exfat type
[  280.138658][ T5306] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  280.247424][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  280.254537][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  280.258245][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  280.267570][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  280.276390][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  280.302155][T12044] loop4: detected capacity change from 0 to 1024
[  280.305592][T12044] EXT4-fs: Ignoring removed orlov option
[  280.309872][ T5306] usb 6-1: Using ep0 maxpacket: 32
[  280.322178][ T5306] usb 6-1: config 0 has an invalid interface number: 231 but max is 0
[  280.324681][ T5306] usb 6-1: config 0 has no interface number 0
[  280.330989][T12044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.342518][   T34] audit: type=1800 audit(1769659968.189:77): pid=12044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2353" name="bus" dev="loop4" ino=18 res=0 errno=0
[  280.351750][   T34] audit: type=1804 audit(1769659968.189:78): pid=12044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2353" name="/newroot/536/bus/bus" dev="loop4" ino=18 res=1 errno=0
[  280.396549][ T5306] usb 6-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  280.421914][ T5306] usb 6-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  280.436656][ T5306] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  280.441695][ T5306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.444888][ T5306] usb 6-1: Product: syz
[  280.446536][ T5306] usb 6-1: Manufacturer: syz
[  280.452780][ T5306] usb 6-1: SerialNumber: syz
[  280.459498][ T5306] usb 6-1: config 0 descriptor??
[  280.462117][T12030] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  280.464703][T12030] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  280.487928][ T5306] plusb 6-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 0a:1f:04:90:ed:51
[  280.716034][T12041] chnl_net:caif_netlink_parms(): no params data found
[  280.726952][   T10] usb 6-1: USB disconnect, device number 21
[  280.735080][   T10] plusb 6-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  280.869883][T12041] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.872732][T12041] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.875929][T12041] bridge_slave_0: entered allmulticast mode
[  280.880616][T12041] bridge_slave_0: entered promiscuous mode
[  280.885071][T12041] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.888073][T12041] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.891546][T12041] bridge_slave_1: entered allmulticast mode
[  280.895643][T12041] bridge_slave_1: entered promiscuous mode
[  280.929112][T12041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.935815][T12041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.961767][T12041] team0: Port device team_slave_0 added
[  280.966308][T12041] team0: Port device team_slave_1 added
[  280.991005][T12041] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.993594][T12041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  281.004049][T12041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.010299][T12041] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.013117][T12041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  281.027893][T12041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.063359][T12041] hsr_slave_0: entered promiscuous mode
[  281.066626][T12041] hsr_slave_1: entered promiscuous mode
[  281.070136][T12041] debugfs: 'hsr0' already exists in 'hsr'
[  281.072459][T12041] Cannot create hsr debugfs directory
[  281.099684][   T35] INFO: task syz-executor:5849 blocked for more than 143 seconds.
[  281.103034][   T35]       Tainted: G             L      syzkaller #0
[  281.105846][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  281.112476][   T35] task:syz-executor    state:D stack:21528 pid:5849  tgid:5849  ppid:1      task_flags:0x400140 flags:0x00080002
[  281.117234][   T35] Call Trace:
[  281.118995][   T35]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  281.120247][   T35]  __schedule+0x14ef/0x4fb0
[  281.122359][   T35]  ? lockdep_unlock+0x5d/0xd0
[  281.124283][   T35]  ? __lock_acquire+0x146e/0x2cf0
[  281.126366][   T35]  ? __pfx___schedule+0x10/0x10
[  281.128368][   T35]  ? schedule+0x90/0x360
[  281.130624][   T35]  schedule+0x164/0x360
[  281.132302][   T35]  io_schedule+0x7f/0xd0
[  281.133977][   T35]  folio_wait_bit_common+0x6d8/0xbc0
[  281.136242][   T35]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  281.139103][   T35]  ? __pfx_wake_page_function+0x10/0x10
[  281.148610][   T35]  ? __filemap_get_folio_mpol+0x81/0xb00
[  281.150862][   T35]  __filemap_get_folio_mpol+0x13e/0xb00
[  281.153104][   T35]  truncate_inode_pages_range+0x48b/0xe30
[  281.155398][   T35]  ? stack_depot_save_flags+0x33/0x810
[  281.157579][   T35]  ? __pfx_truncate_inode_pages_range+0x10/0x10
[  281.170787][   T35]  ? lockdep_hardirqs_on+0x7a/0x110
[  281.172953][   T35]  evict+0x631/0xb10
[  281.174596][   T35]  ? __pfx_evict+0x10/0x10
[  281.186980][   T35]  evict_inodes+0x75a/0x7f0
[  281.191942][   T35]  ? __pfx_evict_inodes+0x10/0x10
[  281.194063][   T35]  generic_shutdown_super+0x9a/0x2c0
[  281.196210][   T35]  kill_block_super+0x44/0x90
[  281.198217][   T35]  deactivate_locked_super+0xbc/0x130
[  281.218744][   T35]  cleanup_mnt+0x437/0x4d0
[  281.220738][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.222920][   T35]  task_work_run+0x1d9/0x270
[  281.224788][   T35]  ? __pfx_task_work_run+0x10/0x10
[  281.226847][   T35]  exit_to_user_mode_loop+0xed/0x480
[  281.229690][   T35]  ? rcu_is_watching+0x15/0xb0
[  281.231935][   T35]  do_syscall_64+0x2b7/0xf80
[  281.234043][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.236661][   T35]  ? trace_irq_disable+0x37/0x100
[  281.239290][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.241711][   T35] RIP: 0033:0x7fa6a579bf17
[  281.243544][   T35] RSP: 002b:00007ffd373cbd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  281.246798][   T35] RAX: 0000000000000000 RBX: 00007fa6a580471f RCX: 00007fa6a579bf17
[  281.251296][   T35] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd373cbe40
[  281.254395][   T35] RBP: 00007ffd373cbe40 R08: 00007ffd373cce40 R09: 00000000ffffffff
[  281.257636][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd373cced0
[  281.261633][   T35] R13: 00007fa6a580471f R14: 000000000002066d R15: 00007ffd373ccf10
[  281.264821][   T35]  </TASK>
[  281.266218][   T35] INFO: task syz.0.697:7716 blocked for more than 143 seconds.
[  281.269799][   T35]       Tainted: G             L      syzkaller #0
[  281.272418][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  281.276104][   T35] task:syz.0.697       state:D stack:28760 pid:7716  tgid:7714  ppid:5841   task_flags:0x400040 flags:0x00080002
[  281.281501][   T35] Call Trace:
[  281.282848][   T35]  <TASK>
[  281.284066][   T35]  __schedule+0x14ef/0x4fb0
[  281.285927][   T35]  ? __pfx___schedule+0x10/0x10
[  281.287871][   T35]  ? schedule+0x90/0x360
[  281.295328][   T35]  schedule+0x164/0x360
[  281.297027][   T35]  schedule_preempt_disabled+0x13/0x30
[  281.301937][   T35]  rwsem_down_read_slowpath+0x61e/0x920
[  281.304176][   T35]  ? rwsem_down_read_slowpath+0x4d9/0x920
[  281.306427][   T35]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  281.309495][   T35]  ? super_lock+0x2d6/0x3d0
[  281.311340][   T35]  down_read+0x99/0x2e0
[  281.313004][   T35]  ? super_lock+0x263/0x3d0
[  281.314855][   T35]  super_lock+0x2d6/0x3d0
[  281.316634][   T35]  ? __pfx_super_lock+0x10/0x10
[  281.319391][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  281.321477][   T35]  ? do_raw_spin_unlock+0x4d/0x210
[  281.323580][   T35]  __iterate_supers+0x126/0x290
[  281.325579][   T35]  ? __pfx_sync_inodes_one_sb+0x10/0x10
[  281.327827][   T35]  __ia32_sys_sync+0xa0/0x120
[  281.330740][   T35]  ? __pfx___ia32_sys_sync+0x10/0x10
[  281.332921][   T35]  ? do_syscall_64+0xa6/0xf80
[  281.334835][   T35]  do_syscall_64+0xe2/0xf80
[  281.336704][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.340420][   T35]  ? trace_irq_disable+0x37/0x100
[  281.342529][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.344933][   T35] RIP: 0033:0x7ff2ced9acb9
[  281.346684][   T35] RSP: 002b:00007ff2cfb8d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  281.351158][   T35] RAX: ffffffffffffffda RBX: 00007ff2cf016090 RCX: 00007ff2ced9acb9
[  281.354375][   T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  281.357470][   T35] RBP: 00007ff2cf016090 R08: 0000000000000000 R09: 0000000000000000
[  281.361262][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  281.364023][   T35] R13: 00007ff2cf016128 R14: 00007ff2cf016090 R15: 00007fffd709ae28
[  281.367072][   T35]  </TASK>
[  281.369130][   T35] 
[  281.369130][   T35] Showing all locks held in the system:
[  281.375856][   T35] 3 locks held by kworker/0:1/10:
[  281.377881][   T35]  #0: ffff888100075948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  281.389288][   T35]  #1: ffffc900000f7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  281.393223][   T35]  #2: ffffffff8e360c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  281.397481][   T35] 1 lock held by khungtaskd/35:
[  281.410052][   T35]  #0: ffffffff8e35a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  281.413231][   T35] 2 locks held by kworker/u10:5/3040:
[  281.414955][   T35]  #0: ffff888100089948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  281.428777][   T35]  #1: ffff88823c624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  281.431934][   T35] 2 locks held by getty/5666:
[  281.433460][   T35]  #0: ffff88816bc330a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  281.436870][   T35]  #1: ffffc90002a902f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  281.458613][   T35] 1 lock held by syz-executor/5849:
[  281.460331][   T35]  #0: ffff8881146c20e0 (&type->s_umount_key#70){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
[  281.463780][   T35] 1 lock held by syz.0.697/7716:
[  281.465350][   T35]  #0: ffff8881146c20e0 (&type->s_umount_key#70){++++}-{4:4}, at: super_lock+0x2d6/0x3d0
[  281.468496][   T35] 1 lock held by syz.6.2167/11545:
[  281.480693][   T35]  #0: ffff8881146c20e0 (&type->s_umount_key#70){++++}-{4:4}, at: super_lock+0x2d6/0x3d0
[  281.484653][   T35] 5 locks held by syz-executor/12041:
[  281.486785][   T35]  #0: ffff888117cf8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0
[  281.498998][   T35]  #1: ffff888117cf80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0
[  281.503010][   T35]  #2: ffffffff8f937648 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  281.506949][   T35]  #3: ffff88810dafcb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0
[  281.528567][   T35]  #4: ffffffff8e360c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  281.532265][   T35] 2 locks held by syz.4.2353/12046:
[  281.534027][   T35] 
[  281.534869][   T35] =============================================
[  281.534869][   T35] 
[  281.537492][   T35] NMI backtrace for cpu 1
[  281.537503][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  281.537512][   T35] Tainted: [L]=SOFTLOCKUP
[  281.537515][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  281.537519][   T35] Call Trace:
[  281.537526][   T35]  <TASK>
[  281.537531][   T35]  dump_stack_lvl+0xe8/0x150
[  281.537547][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  281.537557][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  281.537566][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  281.537575][   T35]  sys_info+0x135/0x170
[  281.537582][   T35]  watchdog+0xf90/0xfe0
[  281.537593][   T35]  ? watchdog+0x209/0xfe0
[  281.537604][   T35]  kthread+0x726/0x8b0
[  281.537616][   T35]  ? __pfx_watchdog+0x10/0x10
[  281.537624][   T35]  ? __pfx_kthread+0x10/0x10
[  281.537634][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.537643][   T35]  ? __pfx_kthread+0x10/0x10
[  281.537652][   T35]  ret_from_fork+0x51b/0xa40
[  281.537661][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  281.537667][   T35]  ? __switch_to+0xc82/0x1410
[  281.537678][   T35]  ? __pfx_kthread+0x10/0x10
[  281.537686][   T35]  ret_from_fork_asm+0x1a/0x30
[  281.537700][   T35]  </TASK>
[  281.537703][   T35] Sending NMI from CPU 1 to CPUs 0:
[  281.584810][    C0] NMI backtrace for cpu 0
[  281.584830][    C0] CPU: 0 UID: 0 PID: 5277 Comm: klogd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  281.584845][    C0] Tainted: [L]=SOFTLOCKUP
[  281.584849][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  281.584856][    C0] RIP: 0010:__lock_acquire+0x2e3/0x2cf0
[  281.584876][    C0] Code: 41 23 54 c7 20 09 ca 41 89 54 c7 20 4d 89 44 c7 08 4d 89 4c c7 10 48 8b 94 24 20 01 00 00 49 89 54 c7 18 65 8b 15 49 da 30 11 <31> f6 85 d2 40 0f 95 c6 31 d2 41 83 be 14 0b 00 00 00 0f 95 c2 c1
[  281.584885][    C0] RSP: 0018:ffffc90003b17768 EFLAGS: 00000006
[  281.584897][    C0] RAX: 0000000000000005 RBX: 0000000000000000 RCX: 00000000000005ee
[  281.584904][    C0] RDX: 0000000000000000 RSI: 00000000000005ee RDI: 0000000000000000
[  281.584910][    C0] RBP: 0000000000000001 R08: ffffffff819c65a5 R09: ffff888174b5e158
[  281.584917][    C0] R10: dffffc0000000000 R11: fffffbfff1f9e0cf R12: 0000000000000000
[  281.584925][    C0] R13: 0000000000000000 R14: ffff888116df8000 R15: ffff888116df8b30
[  281.584932][    C0] FS:  00007f09f7eb4380(0000) GS:ffff88818e323000(0000) knlGS:0000000000000000
[  281.584941][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  281.584949][    C0] CR2: 00007f9d58e87e20 CR3: 0000000174914000 CR4: 00000000000006f0
[  281.584987][    C0] Call Trace:
[  281.584994][    C0]  <TASK>
[  281.585001][    C0]  ? __pfx_unix_peer_perm+0x10/0x10
[  281.585031][    C0]  ? prepare_to_wait_exclusive+0x45/0x240
[  281.585046][    C0]  lock_acquire+0x106/0x330
[  281.585056][    C0]  ? prepare_to_wait_exclusive+0x45/0x240
[  281.585074][    C0]  _raw_spin_lock_irqsave+0x40/0x60
[  281.585089][    C0]  ? prepare_to_wait_exclusive+0x45/0x240
[  281.585101][    C0]  prepare_to_wait_exclusive+0x45/0x240
[  281.585115][    C0]  unix_wait_for_peer+0x108/0x2f0
[  281.585128][    C0]  ? __pfx_unix_wait_for_peer+0x10/0x10
[  281.585137][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[  281.585153][    C0]  unix_dgram_sendmsg+0xb5c/0x17b0
[  281.585170][    C0]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  281.585182][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  281.585192][    C0]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  281.585201][    C0]  __sock_sendmsg+0x21c/0x270
[  281.585216][    C0]  __sys_sendto+0x3c0/0x550
[  281.585227][    C0]  ? __pfx___sys_sendto+0x10/0x10
[  281.585243][    C0]  ? rcu_is_watching+0x15/0xb0
[  281.585256][    C0]  __x64_sys_sendto+0xde/0x100
[  281.585266][    C0]  do_syscall_64+0xe2/0xf80
[  281.585275][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.585286][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.585295][    C0] RIP: 0033:0x7f09f80169b5
[  281.585304][    C0] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83
[  281.585312][    C0] RSP: 002b:00007ffe21cc7508 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  281.585323][    C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f09f80169b5
[  281.585330][    C0] RDX: 0000000000000053 RSI: 000055bd9e2cccb0 RDI: 0000000000000003
[  281.585336][    C0] RBP: 000055bd9e2c5910 R08: 0000000000000000 R09: 0000000000000000
[  281.585342][    C0] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013
[  281.585348][    C0] R13: 00007f09f81a4212 R14: 00007ffe21cc7608 R15: 0000000000000000
[  281.585359][    C0]  </TASK>
[  281.703424][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  281.706187][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  281.710341][   T35] Tainted: [L]=SOFTLOCKUP
[  281.712031][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  281.715905][   T35] Call Trace:
[  281.717188][   T35]  <TASK>
[  281.718362][   T35]  vpanic+0x1e0/0x670
[  281.719995][   T35]  panic+0xc5/0xd0
[  281.721510][   T35]  ? __pfx_panic+0x10/0x10
[  281.723273][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  281.725412][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  281.727904][   T35]  watchdog+0xfda/0xfe0
[  281.729598][   T35]  ? watchdog+0x209/0xfe0
[  281.731373][   T35]  kthread+0x726/0x8b0
[  281.733060][   T35]  ? __pfx_watchdog+0x10/0x10
[  281.734983][   T35]  ? __pfx_kthread+0x10/0x10
[  281.736851][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.739007][   T35]  ? __pfx_kthread+0x10/0x10
[  281.740895][   T35]  ret_from_fork+0x51b/0xa40
[  281.742802][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  281.744879][   T35]  ? __switch_to+0xc82/0x1410
[  281.746714][   T35]  ? __pfx_kthread+0x10/0x10
[  281.748347][   T35]  ret_from_fork_asm+0x1a/0x30
[  281.749860][   T35]  </TASK>
[  281.751686][   T35] Kernel Offset: disabled
[  281.753352][   T35] Rebooting in 86400 seconds..
