last executing test programs:

24m37.37197534s ago: executing program 32 (id=106):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

21m53.945704934s ago: executing program 33 (id=2040):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', <r2=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}]}, 0x2c}}, 0x800)

19m51.672872721s ago: executing program 34 (id=3638):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)

17m25.918326385s ago: executing program 35 (id=5600):
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
msgget(0x3, 0x710)
msgget(0x2, 0x624)
msgget(0x1, 0x240)
msgctl$IPC_RMID(0x0, 0x0)
msgget(0x3, 0x693)
msgget(0x0, 0x200)

15m1.273010432s ago: executing program 36 (id=7764):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x1, 0x5, 0x7fffffff}]})
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0xa, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
ptrace(0x10, r0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000640)={0x4})

13m20.933429821s ago: executing program 37 (id=9000):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x54, 0x0)
mq_timedsend(r0, &(0x7f0000000600)="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", 0xfd1, 0x6, 0x0)
mq_timedreceive(r0, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0)

11m38.729938327s ago: executing program 38 (id=10282):
syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0)
close(0x3)

10m22.067149836s ago: executing program 39 (id=11343):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000)
recvmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/106, 0x6a}, {&(0x7f0000000580)=""/198, 0xc6}, {&(0x7f0000001840)=""/4088, 0xff8}, {&(0x7f0000000080)=""/132, 0x84}], 0x4}, 0x7}], 0x3, 0x40002000, 0x0)
recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000009c0)=""/123, 0x7b}, {&(0x7f0000000a40)=""/91, 0x78}, {&(0x7f0000000ac0)=""/246, 0xf6}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/30, 0x1e}, {&(0x7f0000000c80)=""/223, 0xdf}, {&(0x7f0000000d80)=""/139, 0x8b}], 0x7}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x5, 0x10002, 0x0)

9m57.044586466s ago: executing program 40 (id=11544):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0xd07, 0x18001}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc006}, 0x10)

9m19.807515624s ago: executing program 41 (id=11962):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x178, 0xffffff7a, 0xffffffff, 0x178, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'pimreg0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x11, 0x0, 0x8}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x1, 0x8, 'netbios-ns\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)

7m39.904571309s ago: executing program 0 (id=12973):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r3}, 0x8)

7m39.813298019s ago: executing program 0 (id=12974):
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x5)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000000))

7m39.813025204s ago: executing program 0 (id=12975):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bd52007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000340)="00892c5183b55493737099dad400", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7m39.713940704s ago: executing program 0 (id=12976):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

7m39.713545699s ago: executing program 0 (id=12977):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000100)=@ethtool_stats})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0})

7m39.138340935s ago: executing program 0 (id=12985):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @private=0xa010101, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)

7m38.87969126s ago: executing program 42 (id=12985):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @private=0xa010101, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)

4m48.329812088s ago: executing program 5 (id=15589):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a00010029bd7081d1000000022020000003"], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

4m48.274535372s ago: executing program 5 (id=15590):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file7\x00', 0xc03, &(0x7f0000008040)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES32], 0x2, 0x5fbf, &(0x7f0000002080)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
creat(&(0x7f0000000240)='./file1\x00', 0xd)

4m47.441933778s ago: executing program 5 (id=15597):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

4m47.377329238s ago: executing program 5 (id=15599):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x3, 0x4, 0x87, 0x0, 0x0, 0xfa, 0x22, 0xe, 0x40, 0x17, 0xff, 0x18, 0x1, 0x7}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000700)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001180)={r1, @in={{0x2, 0x4e24, @remote}}, [0xffffffff, 0x53e8, 0x401, 0xb52, 0x8, 0x9, 0x4, 0x8, 0x4, 0xd20b, 0x7f, 0x8, 0x1000, 0x7, 0x80]}, &(0x7f0000001280)=0x100)

4m47.236912204s ago: executing program 5 (id=15600):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

4m47.212420525s ago: executing program 5 (id=15602):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd609fbbb000006c00fc010000000000000000000000000000fe8000000000000000000000000000aa7abd06fc75195c7117dc7b62d51e92b29293fec75ad9405326a3dcf30c1f6c888b878ad2f7cd57ea341c8833873cfd2056f743975c857592a543150ad661ee957af51933ed707cdd145df09d5fd6117af2c93b374b316b608ae5435695f74be519c3615a48d5ef100cc62c2b6921ddd3f49361a3a72c7d6cd40d59da8639b9494c81f190d8f505356d4780bece34a6c5c643e5fae03b183a394160e655e75d5184ccd7bd93203310f8f5677cd3021c32f6867af7c5b8c47a450782d10ae1207a1857e02d22f48d814bee430c7cb5f25b76d1a0675700dd100a4e71377126fd481b5939000bdc8c556630570c463378345542b619"], 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
syz_clone3(&(0x7f0000000480)={0x2400, &(0x7f0000000180), &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000240), {0x1d}, &(0x7f00000002c0)=""/209, 0xd1, &(0x7f00000003c0)=""/115, &(0x7f0000000440)=[0x0], 0x1}, 0x58)
setpriority(0x0, r2, 0x5)

4m39.36256686s ago: executing program 6 (id=15692):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5})
r2 = socket$netlink(0x10, 0x3, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x1, 0xa, 0x6)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

4m39.262364306s ago: executing program 6 (id=15693):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f0000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296)

4m39.157231539s ago: executing program 6 (id=15696):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)={0x6c, 0x0, 0x4, 0x9}, 0x8)

4m39.059338972s ago: executing program 6 (id=15697):
r0 = syz_open_dev$swradio(&(0x7f0000000300), 0x0, 0x2)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000008c0)={0xb, @pix_mp={0x38305343, 0x38305343}})

4m38.970120464s ago: executing program 6 (id=15699):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000100000002"], 0x0, 0x4e, 0x0, 0x1}, 0x28)
r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
writev(r1, &(0x7f0000000640)=[{&(0x7f00000004c0)='0', 0x1}], 0x1)
setsockopt(r0, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x100010, 0xffffffffffffffff, 0x3000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r5, &(0x7f00000004c0)="ac85b24d", &(0x7f0000000080)=""/32}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1802070000000000000000000300000019290000", @ANYRES32=r5, @ANYBLOB="00000000010100009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc040)
setreuid(0x0, 0xee00)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
mount(0x0, 0x0, 0x0, 0xa145cf, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
syz_clone3(&(0x7f0000000c40)={0x4010000, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), {0x18}, &(0x7f0000000ac0)=""/236, 0xec, &(0x7f0000000bc0)=""/17, &(0x7f0000000c00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)

4m38.636314832s ago: executing program 6 (id=15705):
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x141842, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000))
ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, 0x0, 0x1)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x300060c1)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x4050}, 0x4)
close(0xffffffffffffffff)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x20, 0xc, 0x3, 0x0, 0x0, 0xfffffffd, 0x0})
io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, &(0x7f0000000140), 0x1)
close(0x3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3e}, 0x1c)

4m30.199910167s ago: executing program 43 (id=15602):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd609fbbb000006c00fc010000000000000000000000000000fe8000000000000000000000000000aa7abd06fc75195c7117dc7b62d51e92b29293fec75ad9405326a3dcf30c1f6c888b878ad2f7cd57ea341c8833873cfd2056f743975c857592a543150ad661ee957af51933ed707cdd145df09d5fd6117af2c93b374b316b608ae5435695f74be519c3615a48d5ef100cc62c2b6921ddd3f49361a3a72c7d6cd40d59da8639b9494c81f190d8f505356d4780bece34a6c5c643e5fae03b183a394160e655e75d5184ccd7bd93203310f8f5677cd3021c32f6867af7c5b8c47a450782d10ae1207a1857e02d22f48d814bee430c7cb5f25b76d1a0675700dd100a4e71377126fd481b5939000bdc8c556630570c463378345542b619"], 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
syz_clone3(&(0x7f0000000480)={0x2400, &(0x7f0000000180), &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000240), {0x1d}, &(0x7f00000002c0)=""/209, 0xd1, &(0x7f00000003c0)=""/115, &(0x7f0000000440)=[0x0], 0x1}, 0x58)
setpriority(0x0, r2, 0x5)

4m22.490445546s ago: executing program 44 (id=15705):
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x141842, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000))
ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, 0x0, 0x1)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x300060c1)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x4050}, 0x4)
close(0xffffffffffffffff)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x20, 0xc, 0x3, 0x0, 0x0, 0xfffffffd, 0x0})
io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, &(0x7f0000000140), 0x1)
close(0x3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3e}, 0x1c)

4m1.136062457s ago: executing program 4 (id=15815):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
socket$packet(0x11, 0xa, 0x300)

4m0.408742905s ago: executing program 4 (id=15816):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

4m0.130625989s ago: executing program 4 (id=15817):
r0 = socket(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x458003, 0x0)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x713, 0x800, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x4, 0x0, 0x4e23, 0x80, 0x0, 0x0, 0x0, 0x1d}, {@in=@remote, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x4, 0x800, 0x8000000000000000}, {}, {0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x3}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x180}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x1, 0x0)
futex(&(0x7f000000cffc)=0x5, 0xb, 0x4000300, 0x0, &(0x7f0000000040)=0x7fffff5, 0x1000004)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="2100020100000000"], 0x8)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, 0x4, 0x2, 0x4}}, 0x26)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, 0x0, 0x0)
getsockopt$inet_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001380)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000)

3m59.201605266s ago: executing program 4 (id=15818):
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000380)='./file0\x00', 0x280801f, &(0x7f0000000200)={[{@min_batch_time={'min_batch_time', 0x3d, 0x10}}]}, 0xff, 0x52a, &(0x7f0000000c40)="$eJzs3c9vG1kdAPDvTOw2abM4CxxgJWDFLkorWCfZ0G3EoS0S4lYJVO4lJG4UxYmrxGmbqIJU/AFICAESFzhxQeLAEQn1yo1LJXpHgEAIWrhUKgyyPS5uYjtB+IdIPh/pxfNmxvN9z848vzczmgngzHo7Ii5FRJZl2eWIKOXz0zzFQSs11nv+7OFKIyWRZbf+mkSSz2tv63z+ejF/22Se/0ZyNO7O3v7GcrVa2c7zc/XN5GX26zy3VtlaXFz4YOnq0pWl+YHUcyYirn3pj9//zk+/fO1Xn7v/u9t/vvTNVgVbOusxSK2qF199Fg2FiNgeRrAxKTRr2HJlzGUBAKC/Rn//wxHx6Yi4HKWYaPbmTmBy2CUDAAAABiW7Ph0vk9b5PwAAAOB0SiNiOpK0nF/vOx1pWi63ruH9aFxIq7Wd+mez0qvjBTNRTO+sVyvz+bUDM1FMGvmF/Brbdv79Q/nFiHgzIr5Xmmrmyyu16upYj3wAAADA2XHx0Pj/H6XW+B8AAAA4ZWbGXQAAAABg6Iz/AQAA4PQz/gcAAIBT7Ss3bzZS1n7+9eq9vd2N2r33Vis7G+XN3ZWJqG3fLa/VamvNe/ZtHre9aq129/Oxtftgrl7Zqc/t7O3f3qztbtVvr3tiIAAAAIzLm596/DSJiIMvTKURkSUdy4oR2UTnyoXRlw8YnvS/WfkPwysHMHoT/RY6Yg+nmi49nF3FcRcAGLvj2oGeQ4HfdGY+NLDyAAAAgzf78cdPo3X+v5kazuXLknEWDBi6/Px/0tjXb4y7MMBI9Tv/79wgnG7O/8HZVezXA3AAAE699AS7+snO/x9yvjOTZUdXeOP4wgEAAAMz3UxJWv5FaxwwHWlaLrd65jNRTO6sVyvz+ZW9vy0VzzfyC813Jg4PAAAAAAAAAAAAAAAAAAAAAAAAAMAJZVkSWQ9T+dPBei0HAAAA/j9EpH9K8ud/zZbene44NNB+elep8edcRNz/0a0fPFiu17cXIs4lf3s1v/7DfP77YziAAQAAABzRHqe3x/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMEjPnz1caadRxv3LFyNipiN+Enn8Qkw2XyejGBEX/p5EoeN9SURMDCD+waOI+Fi3+ieNYsVMXorD8dOImBpz/IsDiA9n2eNG+3Oj2/6XxtvN1+77XyFP/6sj7V9H/Hb7N9Gj/Xuj2wbTo7PeevLzuZ7xH0W8Veje/rTjJz3iv3PCOn79a/v7vZZlP4mY7fr7k7wWay4p3J3b2dt/b31zea2yVtlaXFz4YOnq0pWl+bk769VK/rdrjO9+4pf/6lf/CxGTvdrffvV/t3NDL3rX/59PHjz7SMRBl0XF+HGWXXqn7+/v9cPx2799n8m/7kZ+tj190Jru9MmflXuWbepRxGqPz/+Y77/Lf1p3l7/67d+fdF0AYPh29vY3lqvVynbXiVbfov86w5iYGGEsE8OfmIrBbGfyJNtZjn7rtDuxI6j7t/JQI/zAX2QD22DvNiMZRcMEAAAM3H86/eMuCQAAAAAAAAAAAAAAAAAAAJxdr9/0K4nDtwGLAdxO7HDMbjdCBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYt38HAAD//xaYwkc=")
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)

3m59.105213898s ago: executing program 4 (id=15819):
r0 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x5, 0x6}]}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x84ff, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

3m55.96776064s ago: executing program 4 (id=15821):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), r0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r0)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000c00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030828bd7000ffdbdf25050000000e0001006e65746c657673696d0000000f0002006e"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010)

3m55.600738187s ago: executing program 45 (id=15821):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), r0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r0)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000c00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030828bd7000ffdbdf25050000000e0001006e65746c657673696d0000000f0002006e"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010)

3m37.187343884s ago: executing program 1 (id=15841):
r0 = socket(0xa, 0x5, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000001500)=[{&(0x7f0000000140)=@in6={0xa, 0x4e23, 0x5, @loopback, 0xbf5c}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)="14", 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000d8bc010000000004000500b701010020000000000000008400000008000000fe8000000000000000000000000000bb20"], 0x58, 0x80}], 0x1, 0x801)

3m37.028185953s ago: executing program 1 (id=15842):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
semget$private(0x0, 0x207, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ustat(0xfffffffffffffffc, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@alu={0x4, 0x1, 0xd, 0x2, 0x0, 0x8, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x4000401)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}}, 0x40000)
landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)

3m34.154702246s ago: executing program 1 (id=15843):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa3000905030000000000000005820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

3m32.590228923s ago: executing program 1 (id=15844):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0x1, 0xc41, &(0x7f0000001b80)="$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")
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

3m32.42856742s ago: executing program 1 (id=15845):
r0 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000100))

3m32.311893342s ago: executing program 1 (id=15846):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="100600001900010028bd7000fbdbdf251d010900500012804c00d5804500cd804b2f4058ee43e9c8ed94431e2f1d57e3ad39148a610738f2f8f2ad25690e8fcf14fa110708387d9119de25eadf839f7130586836f1e818d079d089f8b19dc3a718000000ac050680a8"], 0x610}, 0x1, 0x0, 0x0, 0x5}, 0xc0)

3m16.121805361s ago: executing program 46 (id=15846):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="100600001900010028bd7000fbdbdf251d010900500012804c00d5804500cd804b2f4058ee43e9c8ed94431e2f1d57e3ad39148a610738f2f8f2ad25690e8fcf14fa110708387d9119de25eadf839f7130586836f1e818d079d089f8b19dc3a718000000ac050680a8"], 0x610}, 0x1, 0x0, 0x0, 0x5}, 0xc0)

2m46.428280752s ago: executing program 8 (id=15859):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x7fff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000540)='\f', 0x1}], 0x1}}], 0x1, 0x4008055)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8)

2m46.326710124s ago: executing program 8 (id=15860):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r0, 0x5)
accept(r0, 0x0, 0x0)
listen(r0, 0x0)
shutdown(r0, 0x0)

2m46.164964264s ago: executing program 8 (id=15861):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000010c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x9}}, 0x20)

2m45.082161077s ago: executing program 8 (id=15862):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
ptrace(0x10, 0x1)

2m44.946434075s ago: executing program 8 (id=15863):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x21c)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='u', 0x1}], 0x1)

2m44.545911853s ago: executing program 8 (id=15864):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000740)={0x1c, r2, 0x62c21a4ade68aba1, 0x70bd27, 0x25dfdbfd, {{0x32}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48d4}, 0x24040010)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x20, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}, @NHA_FDB={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

2m28.468224817s ago: executing program 47 (id=15864):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000740)={0x1c, r2, 0x62c21a4ade68aba1, 0x70bd27, 0x25dfdbfd, {{0x32}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48d4}, 0x24040010)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x20, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}, @NHA_FDB={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

1m16.067523853s ago: executing program 3 (id=16517):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5)
syz_clone3(&(0x7f0000000080)={0x0, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_open_dev$sndctrl(0x0, 0x0, 0xc8080)
read(r0, 0x0, 0x0)

1m16.067393781s ago: executing program 3 (id=16518):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x2)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1002, 0x1, 0x11, r0, 0x82000000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000000080)="17000000", 0x4)

1m16.000304628s ago: executing program 3 (id=16520):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
rename(0x0, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)

1m15.894611003s ago: executing program 3 (id=16521):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$eJzs3M1vFOUfAPDvTLvl11/RVsQ38KWKRmK0pYDKwYMaTTxgYqIHPW7aSpCChtZESBOLBzwZY+LdePRf8KQXYzyZeNW7ISGGi+BpzezObHe7L7S4wwL7+SQL32dmdp/nu888u8+8bAMYWbPZP0nE7oj4PSKmG8X2DWYb/129sr547cr6YhK12tt/JfXt/r6yvlhsWjxvqrUQSezvUu/qufOnqisry2fz8vza6Y/mV8+df+7k6eqJ5RPLZw4fO3b0yMKLLxx+fiB5TkWaR2+899Wbx79oy39LHgMy22/lU7XagKsbrrta4vEhtoOdGcv7q1If/9Mx1tJ70/H6Z83Cp0NqIFCaWq1Wm+q9eqMG3MGSaC8b8jAqii/64vi323Hwy6XNPobv8iuNA6As76v5o7FmvHnGoLLl+HaQZiPi3Y1/vskeUc55CACANj9k859ns9nO+mI299icf6Rxf8t2d+fXhmYi4p6I2BMR98aZ2BsR90XUt30gIh7cYf0tF0nq08zO+U966YaT24Zs/vdSfm2rff5XzP5iZqxeOtcoRCV5/+TK8qH8PTkYlV1ZeaFPHT++9tuXvda1zv+yR1Z/MRfM23FpfFf7c5aqa9Ubz7jd5QsR+8a75Z80rwQkEfFQROzr9gLp9es4+cx3D/da1zP/yjYaP4ALTbVvI55u9P9GbMm/kPS/Pjn/v1hZPjRf7BWdfvn14lu96r9+/5cr6///d93/m/nPJK3Xa1d3XsfFPz7veUwzW/TzDvb/jepadSJ5px5P5Ms+qa6tnV2ImEiONxrduvzw5nOLcrF9lv/BA93H/57YfCf2R0S2Ez8SEY9GxGN53z0eEU9ExIE++f/86pMfbF02WeR/C/T/0o76fzOYiPYlaZdtsmDs1E/ft1U6sxnm+V/r//l3tB4dzJds5/OvsxXdg//6/gEAAMDtII2I3ZGkc804TefmGvfw743mWbiPzyw1fiMwE5W0ONM13XI+dCE/rG+UL0RE49aCYv2RSOvnjb8em6yX5xY/XFkaaubAVI/xn/lzbNitA0rnB1swuox/GF19x3/PG3EcHcCdoGP89735blepbQFuri7f/5PDaAdw83Wb/3f+vR/f+3An2jL+HdjDCHH+H0aX8Q+jy/iHkbQ6Gaeqk9v9tXy3oHilG3z69YLpiCjnlUsOonJLNKO0INLSq5god9cqLUhuwzZ3BMP7TAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABikfwMAAP//TfbN6A==")
r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x18)
fcntl$notify(r0, 0x402, 0x8000003d)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m15.798878927s ago: executing program 3 (id=16522):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)

1m15.494147535s ago: executing program 3 (id=16523):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2000, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189)
r2 = dup2(r1, r0)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040))

1m15.389627736s ago: executing program 48 (id=16523):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2000, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189)
r2 = dup2(r1, r0)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040))

2.347794157s ago: executing program 9 (id=17388):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x40, {"f47100", "000000008f47d83d10000000fe7e024f", "00000900ff7f000400"}, 0x7ad, 0x5})
ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29)

2.172122712s ago: executing program 9 (id=17391):
r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})
signalfd4(r0, &(0x7f0000000080), 0x8, 0x0)

1.358171556s ago: executing program 2 (id=17407):
r0 = syz_open_dev$dri(&(0x7f0000000300), 0xd20, 0x80000)
ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000580))

1.301932391s ago: executing program 9 (id=17408):
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth0\x00'})

1.236129922s ago: executing program 2 (id=17409):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x338, 0x0, 0x700001b, 0x148, 0x208, 0x148, 0x2a0, 0x206, 0x240, 0x2a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x78, 0x20}, {0xc}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)

1.235928733s ago: executing program 9 (id=17410):
r0 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f00000000c0)={0x1})

1.159478878s ago: executing program 2 (id=17411):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000240)={0x11, {{0x29, 0x0, 0x5000000, @local, 0x7ff}}}, 0x88)

1.159139418s ago: executing program 9 (id=17412):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0)
syz_usb_connect$uac2(0x3, 0x98, &(0x7f0000000580)=ANY=[@ANYBLOB="12010003000000401e040030400001020301090286000301003003080b00020109200609040000000101200009240102000626000311240500000000000000000200010000000c240304"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})

1.112258431s ago: executing program 2 (id=17413):
openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.024996577s ago: executing program 2 (id=17414):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@journal_ioprio}, {@quota}]}, 0x1, 0x50b, &(0x7f0000001000)="$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")

940.781258ms ago: executing program 2 (id=17415):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xff}})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000140)={0x70, 0x10, 0x2, "9e47"}, 0x0, 0x0})

644.749985ms ago: executing program 7 (id=17418):
syz_emit_ethernet(0x30, &(0x7f0000000300)={@random="525d4e55bc61", @multicast, @void, {@generic={0x88f7, "ff0000e757c4279d0b296174882909d8e75490de85cea97ebadb4ae43c29c6a1fb88"}}}, 0x0)

587.642808ms ago: executing program 7 (id=17419):
openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x1, 0x2}}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
gettid()
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8)
r2 = gettid()
rt_tgsigqueueinfo(0x0, r2, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004})
rt_tgsigqueueinfo(0x0, r2, 0x28, &(0x7f00000001c0)={0xe, 0x5bce, 0x29b})
ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8)

587.401976ms ago: executing program 7 (id=17420):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x807, @empty, 'vlan1\x00'}}, 0x1e)
sendmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)

401.785175ms ago: executing program 7 (id=17421):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)

311.34622ms ago: executing program 7 (id=17422):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x10000002fc)

84.891311ms ago: executing program 7 (id=17423):
connect$qrtr(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)

0s ago: executing program 9 (id=17424):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@prjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000001c0)="$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")

kernel console output (not intermixed with test programs):

01402][T12737] kernel read not supported for file /rfkill (pid: 12737 comm: kworker/0:1)
[ 1459.401460][T14051] loop7: detected capacity change from 0 to 128
[ 1459.433780][T14049] loop3: detected capacity change from 0 to 2048
[ 1459.473173][T14049]  loop3: p1 p2 p3
[ 1459.473173][T14049]  p1: <netbsd:bad subpartition - ignored
[ 1459.473173][T14049]  >
[ 1459.498197][T14049] loop3: p2 size 458752 extends beyond EOD, truncated
[ 1459.501619][T14049] loop3: p3 start 65280 is beyond EOD, truncated
[ 1459.644914][T14059] netem: change failed
[ 1459.765039][    C1] hpet: Lost 1 RTC interrupts
[ 1459.809452][T14061] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1459.879156][T14061] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[ 1459.952646][T14061] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[ 1459.964320][T14061] EXT4-fs (loop9): This should not happen!! Data will be lost
[ 1459.964320][T14061] 
[ 1459.974166][T14061] EXT4-fs (loop9): Total free blocks count 0
[ 1459.976346][T14061] EXT4-fs (loop9): Free/Dirty block details
[ 1459.978380][T14061] EXT4-fs (loop9): free_blocks=4096
[ 1459.980004][T14061] EXT4-fs (loop9): dirty_blocks=16
[ 1459.981947][T14061] EXT4-fs (loop9): Block reservation details
[ 1459.984328][T14061] EXT4-fs (loop9): i_reserved_data_blocks=1
[ 1460.027581][   T27] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 1460.056282][T12892] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[ 1460.096401][    C1] hpet: Lost 1 RTC interrupts
[ 1460.309603][T14080] netlink: 'syz.9.16210': attribute type 29 has an invalid length.
[ 1460.511921][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16216'.
[ 1460.550111][T14096] netlink: 'syz.9.16218': attribute type 28 has an invalid length.
[ 1460.789968][T14107] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1460.837792][T14112] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1460.842655][T14112] bridge1: entered promiscuous mode
[ 1460.844850][T14112] bridge1: entered allmulticast mode
[ 1460.853855][   T33] audit: type=1800 audit(1778973117.850:20037): pid=14107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.16223" name="file1" dev="loop7" ino=1367 res=0 errno=0
[ 1461.100157][T14123] netlink: 'syz.3.16231': attribute type 21 has an invalid length.
[ 1461.105417][T14123] netlink: 'syz.3.16231': attribute type 1 has an invalid length.
[ 1461.112378][T14123] netlink: 144 bytes leftover after parsing attributes in process `syz.3.16231'.
[ 1461.343501][T14133] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (24564!=0)
[ 1461.363518][T14133] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[ 1461.367648][T14133] EXT4-fs (loop7): orphan cleanup on readonly fs
[ 1461.370929][T14133] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz.7.16235: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[ 1461.378615][T14133] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[ 1461.379165][T14133] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.16235: couldn't read orphan inode 13 (err -117)
[ 1461.383204][    C1] EXT4-fs (loop7): error count since last fsck: 1
[ 1461.383223][    C1] EXT4-fs (loop7): last error at time 1778973118: ext4_ext_check_inode:521: inode 13
[ 1461.393737][T14133] loop7: lost filesystem error report for type 5 error -117
[ 1461.396227][T14133] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1461.408968][T14133] EXT4-fs (loop7): ext4_remount: Checksum for group 0 failed (24564!=0)
[ 1461.446245][T12484] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1461.503572][    C1] hpet: Lost 1 RTC interrupts
[ 1461.984117][T14166] set_capacity_and_notify: 4 callbacks suppressed
[ 1461.984134][T14166] loop7: detected capacity change from 0 to 64
[ 1462.037301][T14170] program syz.3.16252 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1462.300193][T24888] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1462.310627][   T33] audit: type=1326 audit(1778973119.383:20038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.7.16259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d0b9cdd9 code=0x7ffc0000
[ 1462.323421][   T33] audit: type=1326 audit(1778973119.383:20039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.7.16259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d0b9cdd9 code=0x7ffc0000
[ 1462.335578][   T33] audit: type=1326 audit(1778973119.394:20040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.7.16259" exe="/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f50d0b9cdd9 code=0x7ffc0000
[ 1462.357369][   T33] audit: type=1326 audit(1778973119.394:20041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.7.16259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d0b9cdd9 code=0x7ffc0000
[ 1462.373171][   T33] audit: type=1326 audit(1778973119.394:20042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.7.16259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d0b9cdd9 code=0x7ffc0000
[ 1462.447903][T24888] usb 10-1: Using ep0 maxpacket: 32
[ 1462.454826][T24888] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 1462.458500][T24888] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1462.460162][T14190] loop7: detected capacity change from 0 to 512
[ 1462.463926][T24888] usb 10-1: Product: syz
[ 1462.465981][T24888] usb 10-1: Manufacturer: syz
[ 1462.469115][T24888] usb 10-1: SerialNumber: syz
[ 1462.504165][T24888] usb 10-1: config 0 descriptor??
[ 1462.520041][T24888] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 1462.552441][T14190] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1462.561547][T14190] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1462.701224][T12484] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1462.747143][    C1] hpet: Lost 1 RTC interrupts
[ 1463.573744][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[ 1463.874464][T14214] loop7: detected capacity change from 0 to 4096
[ 1463.878163][T14214] ntfs3: Unknown parameter 'spare'
[ 1464.078655][    T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1464.221201][    T9] usb 4-1: Using ep0 maxpacket: 32
[ 1464.235433][    T9] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 1464.254291][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1464.266166][    T9] usb 4-1: Product: syz
[ 1464.271456][    T9] usb 4-1: Manufacturer: syz
[ 1464.273004][    T9] usb 4-1: SerialNumber: syz
[ 1464.292011][    T9] usb 4-1: config 0 descriptor??
[ 1464.301980][    T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 1464.306442][T24888] gspca_ov534_9: reg_w failed -71
[ 1464.535659][T24888] gspca_ov534_9: Unknown sensor 0000
[ 1464.535845][T24888] ov534_9 10-1:0.0: probe with driver ov534_9 failed with error -22
[ 1464.552430][T24888] usb 10-1: USB disconnect, device number 17
[ 1464.650001][ T5760] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1464.793936][ T5760] usb 8-1: Using ep0 maxpacket: 32
[ 1464.802498][ T5760] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 1464.806397][ T5760] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1464.808876][ T5760] usb 8-1: Product: syz
[ 1464.810629][ T5760] usb 8-1: Manufacturer: syz
[ 1464.813329][ T5760] usb 8-1: SerialNumber: syz
[ 1464.818102][ T5760] usb 8-1: config 0 descriptor??
[ 1464.827457][ T5760] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 1465.653543][    T9] gspca_topro: Sensor cx0342
[ 1465.851811][T12877] usb 4-1: USB disconnect, device number 51
[ 1466.097792][T14268] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1466.185272][T14268] block nbd9: NBD_DISCONNECT
[ 1466.386757][ T5760] gspca_ov534_9: reg_w failed -71
[ 1466.621946][ T5760] gspca_ov534_9: Unknown sensor 0000
[ 1466.623607][ T5760] ov534_9 8-1:0.0: probe with driver ov534_9 failed with error -22
[ 1466.710026][ T5760] usb 8-1: USB disconnect, device number 5
[ 1466.779766][T14266] block nbd9: Disconnected due to user request.
[ 1466.822885][T14266] block nbd9: shutting down sockets
[ 1467.277488][T14286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16304'.
[ 1467.282754][T14286] hsr_slave_0: left promiscuous mode
[ 1467.289136][T14286] hsr_slave_1: left promiscuous mode
[ 1467.374412][T24888] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1467.526591][T24888] usb 8-1: Using ep0 maxpacket: 16
[ 1467.529655][T24888] usb 8-1: too many configurations: 60, using maximum allowed: 8
[ 1467.533582][T14290] vlan2: entered promiscuous mode
[ 1467.535217][T14290] bond0: entered promiscuous mode
[ 1467.542639][T14290] bond_slave_0: entered promiscuous mode
[ 1467.544594][T14290] bond_slave_1: entered promiscuous mode
[ 1467.560426][T24888] usb 8-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9
[ 1467.564635][T24888] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204
[ 1467.578927][T24888] usb 8-1: Product: syz
[ 1467.584943][T24888] usb 8-1: Manufacturer: syz
[ 1467.585154][T14292] loop9: detected capacity change from 0 to 1024
[ 1467.591927][T24888] usb 8-1: SerialNumber: syz
[ 1467.607073][T24888] usb 8-1: config 0 descriptor??
[ 1467.612614][T14292] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1467.617778][T14292] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1467.619002][T24888] pwc: Philips SPC 880NC USB webcam detected.
[ 1467.712972][T14292] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 3: comm syz.9.16307: lblock 3 mapped to illegal pblock 3 (length 1)
[ 1467.732881][T14292] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[ 1467.745465][T14292] EXT4-fs (loop9): This should not happen!! Data will be lost
[ 1467.745465][T14292] 
[ 1467.758292][T14292] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 3: comm syz.9.16307: lblock 3 mapped to illegal pblock 3 (length 1)
[ 1467.771425][T14292] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[ 1467.778081][T14292] EXT4-fs (loop9): This should not happen!! Data will be lost
[ 1467.778081][T14292] 
[ 1467.818851][T24888] pwc: Warning: more than 1 configuration available.
[ 1467.824071][T24888] pwc: Failed to set LED on/off time (-71)
[ 1467.826204][T24888] pwc: send_video_command error -71
[ 1467.833843][ T5883] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 8: comm kworker/u10:5: lblock 8 mapped to illegal pblock 8 (length 8)
[ 1467.834472][ T5883] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[ 1467.839105][T24888] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1467.850822][T24888] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71
[ 1467.853140][ T5883] EXT4-fs (loop9): This should not happen!! Data will be lost
[ 1467.853140][ T5883] 
[ 1467.861614][T24888] usb 8-1: USB disconnect, device number 6
[ 1467.862945][T12892] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[ 1467.883079][T12892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1467.924569][    C1] hpet: Lost 1 RTC interrupts
[ 1468.051767][T14307] loop9: detected capacity change from 0 to 1024
[ 1468.072070][T14307] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1468.083030][T14307] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1468.117578][   T33] audit: type=1800 audit(1778973125.483:20043): pid=14307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.16313" name="file1" dev="loop9" ino=15 res=0 errno=0
[ 1468.124540][   T33] audit: type=1800 audit(1778973125.483:20044): pid=14307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.16313" name="file1" dev="loop9" ino=15 res=0 errno=0
[ 1468.124732][T14307] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: comm syz.9.16313: lblock 0 mapped to illegal pblock 0 (length 1)
[ 1468.217958][T12892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1468.258115][    C1] hpet: Lost 1 RTC interrupts
[ 1469.182642][T14344] loop7: detected capacity change from 0 to 32768
[ 1469.186541][T14344] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.16330 (14344)
[ 1469.197766][T14344] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1469.202026][T14344] BTRFS info (device loop7): using sha256 checksum algorithm
[ 1469.237180][T14353] netlink: 16 bytes leftover after parsing attributes in process `syz.9.16333'.
[ 1469.287115][T14348] loop3: detected capacity change from 0 to 32768
[ 1469.319224][T14348] btrfs: Deprecated parameter 'usebackuproot'
[ 1469.322722][T14348] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1469.330640][T14348] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.16332 (14348)
[ 1469.360919][T14344] BTRFS info (device loop7): enabling ssd optimizations
[ 1469.381970][T14344] BTRFS info (device loop7): turning on async discard
[ 1469.389247][T14344] BTRFS info (device loop7): enabling free space tree
[ 1469.425353][T14348] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1469.445399][T14348] BTRFS info (device loop3): using crc32c checksum algorithm
[ 1469.458727][T14348] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 1469.471745][T12484] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1469.560920][    C1] hpet: Lost 1 RTC interrupts
[ 1469.668121][    C1] hpet: Lost 1 RTC interrupts
[ 1469.788262][    C1] hpet: Lost 1 RTC interrupts
[ 1469.798950][T14348] BTRFS info (device loop3): rebuilding free space tree
[ 1469.823735][    C1] hpet: Lost 1 RTC interrupts
[ 1469.894988][    C1] hpet: Lost 1 RTC interrupts
[ 1469.959863][    C1] hpet: Lost 1 RTC interrupts
[ 1470.143408][T14348] BTRFS info (device loop3): disabling free space tree
[ 1470.147326][T14348] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1470.150763][T14348] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1470.221430][T14386] loop9: detected capacity change from 0 to 32768
[ 1470.251532][T14348] BTRFS info (device loop3): enabling ssd optimizations
[ 1470.253689][T14348] BTRFS info (device loop3): turning on flush-on-commit
[ 1470.256369][T14348] BTRFS info (device loop3): enabling disk space caching
[ 1470.258945][T14348] BTRFS info (device loop3): force clearing of disk cache
[ 1470.261979][T14348] BTRFS info (device loop3): trying to use backup root at mount time
[ 1470.265463][T14348] BTRFS info (device loop3): force zlib compression, level 3
[ 1470.303014][T14394] loop7: detected capacity change from 0 to 32768
[ 1470.306319][T14394] btrfs: Deprecated parameter 'usebackuproot'
[ 1470.308164][T14394] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1470.311793][T14394] BTRFS info: device /dev/loop7 (7:7) using temp-fsid 41631b34-d610-446c-907e-feacc84a6cee
[ 1470.317636][T14394] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.16340 (14394)
[ 1470.324393][T14394] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1470.327545][T14394] BTRFS info (device loop7): using crc32c checksum algorithm
[ 1470.409299][T14386] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1470.530684][T14386] XFS (loop9): Ending clean mount
[ 1470.644201][ T1111] BTRFS warning (device loop7): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[ 1470.656435][T14394] BTRFS error (device loop7): failed to load root extent
[ 1470.659108][T14394] BTRFS warning (device loop7): try to load backup roots slot 1
[ 1470.667802][   T32] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[ 1470.672725][T14394] BTRFS warning (device loop7): couldn't read tree root
[ 1470.675511][T14394] BTRFS warning (device loop7): try to load backup roots slot 2
[ 1470.680760][ T9513] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1470.705648][T14386] XFS (loop9): Quotacheck needed: Please wait.
[ 1470.724676][T14394] BTRFS warning (device loop7): couldn't read tree root
[ 1470.727720][T14394] BTRFS warning (device loop7): try to load backup roots slot 3
[ 1470.736796][T14394] BTRFS info (device loop7): rebuilding free space tree
[ 1470.763594][T14394] BTRFS info (device loop7): checking UUID tree
[ 1470.768479][T14394] BTRFS info (device loop7): enabling ssd optimizations
[ 1470.771265][T14394] BTRFS info (device loop7): turning on async discard
[ 1470.773772][T14394] BTRFS info (device loop7): enabling free space tree
[ 1470.776486][T14394] BTRFS info (device loop7): force clearing of disk cache
[ 1470.777443][T12491] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1470.779037][T14394] BTRFS info (device loop7): enabling auto defrag
[ 1470.779054][T14394] BTRFS info (device loop7): trying to use backup root at mount time
[ 1470.779069][T14394] BTRFS info (device loop7): use zstd compression, level 3
[ 1471.259283][T14386] XFS (loop9): Quotacheck: Done.
[ 1471.307707][T12892] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1471.849946][T12484] BTRFS info (device loop7): last unmount of filesystem 41631b34-d610-446c-907e-feacc84a6cee
[ 1472.605867][T14437] program syz.7.16348 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1472.723175][    C1] hpet_rtc_timer_reinit: 24 callbacks suppressed
[ 1472.723191][    C1] hpet: Lost 2 RTC interrupts
[ 1472.838619][T14447] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16352'.
[ 1472.859551][    C1] hpet: Lost 1 RTC interrupts
[ 1472.944773][    C1] hpet: Lost 1 RTC interrupts
[ 1473.007421][    C1] hpet: Lost 1 RTC interrupts
[ 1473.292548][T14458] bond0: entered allmulticast mode
[ 1473.298175][T14458] bond_slave_0: entered allmulticast mode
[ 1473.307908][T14458] bond_slave_1: entered allmulticast mode
[ 1473.313567][T14446] loop3: detected capacity change from 0 to 40427
[ 1473.316966][T14446] F2FS-fs (loop3): build fault injection rate: 4
[ 1473.319586][T14446] F2FS-fs (loop3): build fault injection type: 0x3bfe8d
[ 1473.321902][T14446] F2FS-fs (loop3): inject slab alloc in f2fs_alloc_inode of alloc_inode+0x6a/0x1b0
[ 1473.326282][T14446] F2FS-fs (loop3): Failed to read F2FS meta data inode
[ 1473.463440][T14466] netlink: 124 bytes leftover after parsing attributes in process `syz.3.16361'.
[ 1473.474056][T14466] netlink: 124 bytes leftover after parsing attributes in process `syz.3.16361'.
[ 1473.598560][T14472] loop7: detected capacity change from 0 to 1024
[ 1473.889434][T14482] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1474.602710][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16375'.
[ 1474.851441][    T9] usb 10-1: new full-speed USB device number 18 using dummy_hcd
[ 1474.973591][T14500] loop3: detected capacity change from 0 to 32768
[ 1475.015000][T14500] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1475.023893][    T9] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1475.030582][    T9] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1475.043882][    T9] usb 10-1: Product: syz
[ 1475.048452][    T9] usb 10-1: Manufacturer: syz
[ 1475.053546][    T9] usb 10-1: SerialNumber: syz
[ 1475.062694][    T9] usb 10-1: config 0 descriptor??
[ 1475.090035][T14500] XFS (loop3): Ending clean mount
[ 1475.141065][T12491] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1475.188121][T12877] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1475.246269][    C1] hpet: Lost 2 RTC interrupts
[ 1475.312461][    C1] hpet: Lost 2 RTC interrupts
[ 1475.367325][    C1] hpet: Lost 2 RTC interrupts
[ 1475.429022][    C1] hpet: Lost 2 RTC interrupts
[ 1475.437999][T12877] usb 8-1: Using ep0 maxpacket: 8
[ 1475.446262][T12877] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1475.484155][    C1] hpet: Lost 1 RTC interrupts
[ 1475.533769][    C1] hpet: Lost 1 RTC interrupts
[ 1475.579390][T12877] usb 8-1: config 1 has an invalid interface number: 229 but max is 0
[ 1475.581759][T12877] usb 8-1: config 1 has no interface number 0
[ 1475.583526][T12877] usb 8-1: config 1 interface 229 has no altsetting 0
[ 1475.628515][T12877] usb 8-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=a5.73
[ 1475.632400][T12877] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1475.635354][T12877] usb 8-1: Product: syz
[ 1475.636849][T12877] usb 8-1: Manufacturer: syz
[ 1475.638533][T12877] usb 8-1: SerialNumber: syz
[ 1475.709688][    T9] usb 10-1: USB disconnect, device number 18
[ 1475.927509][T12877] usb 8-1: selecting invalid altsetting 1
[ 1475.944996][T12877] comedi comedi5: could not switch to alternate setting 1
[ 1475.948770][T12877] usbduxfast 8-1:1.229: driver 'usbduxfast' failed to auto-configure device.
[ 1475.961136][T12877] usb 8-1: USB disconnect, device number 7
[ 1476.147952][T14523] syzkaller0: entered promiscuous mode
[ 1476.150016][T14523] syzkaller0: entered allmulticast mode
[ 1477.559752][T14570] futex_wake_op: syz.9.16404 tries to shift op by -1; fix this program
[ 1478.935544][T14587] loop7: detected capacity change from 0 to 2048
[ 1478.990344][T14587] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1479.032421][T12484] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1479.073037][    C1] hpet_rtc_timer_reinit: 2 callbacks suppressed
[ 1479.073057][    C1] hpet: Lost 1 RTC interrupts
[ 1479.536847][    T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1479.560849][T14618] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[ 1479.689195][    T9] usb 8-1: Using ep0 maxpacket: 8
[ 1479.694345][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1479.699223][    T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1479.704520][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1479.710541][    T9] usb 8-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1479.713375][    T9] usb 8-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[ 1479.716047][    T9] usb 8-1: Product: syz
[ 1479.719651][    T9] usb 8-1: Manufacturer: syz
[ 1479.722019][    T9] usb 8-1: SerialNumber: syz
[ 1479.725511][    T9] usb 8-1: config 0 descriptor??
[ 1479.813229][    T9] rc_core: IR keymap rc-imon-rsc not found
[ 1479.815797][    T9] Registered IR keymap rc-empty
[ 1479.864713][    T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[ 1479.872790][    T9] input: iMON Station as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input32
[ 1480.214587][    T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1480.380223][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1480.383990][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1480.391200][    T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1480.395672][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1480.398945][    T9] usb 4-1: SerialNumber: syz
[ 1480.613314][    T9] usb 4-1: 0:2 : does not exist
[ 1480.669401][    T9] usb 4-1: USB disconnect, device number 52
[ 1480.689771][T12823] udevd[12823]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1481.081931][T14644] netlink: 28 bytes leftover after parsing attributes in process `syz.9.16437'.
[ 1481.264429][T14652] loop3: detected capacity change from 0 to 1024
[ 1481.287190][T14652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1481.386628][T12491] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1481.504857][T14660] loop3: detected capacity change from 0 to 64
[ 1481.509931][T14660] MINIX-fs: bad superblock
[ 1481.948767][T14664] loop3: detected capacity change from 0 to 32768
[ 1481.977109][T14664] JBD2: Ignoring recovery information on journal
[ 1482.035699][T14664] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1482.114766][T14664] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1482.206813][T27878] usb 8-1: USB disconnect, device number 8
[ 1482.322503][T14676] loop9: detected capacity change from 0 to 8192
[ 1482.890125][    C1] hpet: Lost 1 RTC interrupts
[ 1482.897139][T12491] ocfs2: Unmounting device (7,3) on (node local)
[ 1483.062376][    T9] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1483.228794][    T9] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1483.234692][    T9] usb 10-1: config 0 has an invalid interface number: 217 but max is 0
[ 1483.238732][    T9] usb 10-1: config 0 has no interface number 0
[ 1483.241157][    T9] usb 10-1: config 0 interface 217 has no altsetting 0
[ 1483.247427][    T9] usb 10-1: New USB device found, idVendor=0830, idProduct=0050, bcdDevice=50.a9
[ 1483.250947][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1483.254358][    T9] usb 10-1: Product: syz
[ 1483.256175][    T9] usb 10-1: Manufacturer: syz
[ 1483.258136][    T9] usb 10-1: SerialNumber: syz
[ 1483.263263][    T9] usb 10-1: config 0 descriptor??
[ 1483.464053][T14691] loop7: detected capacity change from 0 to 32768
[ 1483.477442][    T9] usb 10-1: active config #0 != 1 ??
[ 1483.489148][    T9] usb 10-1: USB disconnect, device number 19
[ 1483.504908][T14691] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1483.532205][T14691] XFS (loop7): Ending clean mount
[ 1483.626714][T12484] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1483.776867][    C1] hpet: Lost 1 RTC interrupts
[ 1483.821399][    C1] hpet: Lost 1 RTC interrupts
[ 1483.864337][    C1] hpet: Lost 1 RTC interrupts
[ 1484.371722][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16464'.
[ 1484.431949][T14718] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1484.583526][T14726] loop9: detected capacity change from 0 to 512
[ 1484.642700][T14726] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[ 1484.664423][T14726] ext4 filesystem being mounted at /167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1484.688274][T14734] loop7: detected capacity change from 0 to 8
[ 1484.692939][T14734] Major/Minor mismatch, trying to mount newer 7.0 filesystem
[ 1484.696388][T14734] Please update your kernel
[ 1484.881208][T12892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[ 1485.075397][T14740] loop7: detected capacity change from 0 to 4096
[ 1485.139346][T14740] ntfs3(loop7): Failed to initialize $Extend/$ObjId.
[ 1485.179539][T14750] loop3: detected capacity change from 0 to 2048
[ 1485.204343][T14750] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1485.211573][T14750] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1486.160130][T14768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1486.717699][T14777] netlink: 260 bytes leftover after parsing attributes in process `syz.7.16491'.
[ 1487.255219][T14801] team0: entered promiscuous mode
[ 1487.257352][T14801] team_slave_0: entered promiscuous mode
[ 1487.259763][T14801] team_slave_1: entered promiscuous mode
[ 1487.394769][T13023] usb 10-1: new full-speed USB device number 20 using dummy_hcd
[ 1487.485488][T14812] loop3: detected capacity change from 0 to 1024
[ 1487.504579][T14812] hfsplus: unknown catalog record type 65407
[ 1487.559828][T13023] usb 10-1: config 0 has an invalid interface number: 32 but max is 0
[ 1487.563152][T13023] usb 10-1: config 0 has no interface number 0
[ 1487.570851][T13023] usb 10-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23
[ 1487.575254][T13023] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1487.588211][T13023] usb 10-1: Product: syz
[ 1487.590033][T13023] usb 10-1: Manufacturer: syz
[ 1487.593529][T13023] usb 10-1: SerialNumber: syz
[ 1487.603974][T13023] usb 10-1: config 0 descriptor??
[ 1487.620897][T13023] ftdi_sio 10-1:0.32: FTDI USB Serial Device converter detected
[ 1487.637617][T13023] ftdi_sio ttyUSB0: unknown device type: 0xd723
[ 1487.884929][T14826] comedi comedi3: pcl816: I/O port conflict (0x100,16)
[ 1487.955766][T13023] usb 10-1: USB disconnect, device number 20
[ 1488.265145][T13023] ftdi_sio 10-1:0.32: device disconnected
[ 1488.691245][T14833] loop7: detected capacity change from 0 to 16
[ 1488.715210][T14833] erofs (device loop7): mounted with root inode @ nid 36.
[ 1488.852867][T14844] syz_tun: entered allmulticast mode
[ 1488.935107][T14847] loop3: detected capacity change from 0 to 512
[ 1488.940743][T14847] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1488.942938][T14847] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1488.950540][T14847] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.16521: bad orphan inode 131083
[ 1488.954393][T14847] loop3: lost filesystem error report for type 5 error -117
[ 1488.955732][T14847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1488.967765][T12877] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[ 1488.976748][T14847] overlayfs: upper fs needs to support d_type.
[ 1488.999859][T12491] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /263/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 1489.140125][    C1] hpet: Lost 1 RTC interrupts
[ 1489.149065][T12491] syz_tun (unregistering): left allmulticast mode
[ 1489.168449][T12877] usb 8-1: config 0 has an invalid interface number: 185 but max is 0
[ 1489.171743][T12877] usb 8-1: config 0 has no interface number 0
[ 1489.178082][T12877] usb 8-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=f6.c3
[ 1489.181465][T12877] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1489.184632][T12877] usb 8-1: Product: syz
[ 1489.189553][T12877] usb 8-1: Manufacturer: syz
[ 1489.191743][T12877] usb 8-1: SerialNumber: syz
[ 1489.197839][T12877] usb 8-1: config 0 descriptor??
[ 1489.234040][T12491] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1489.411033][    C1] hpet: Lost 2 RTC interrupts
[ 1489.450271][T12877] sierra 8-1:0.185: Sierra USB modem converter detected
[ 1489.461327][T12877] usb 8-1: Sierra USB modem converter now attached to ttyUSB0
[ 1489.479765][T12877] usb 8-1: USB disconnect, device number 9
[ 1489.493785][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1489.500385][T12877] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1489.505127][T12877] sierra 8-1:0.185: device disconnected
[ 1489.684769][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1489.704985][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1489.711859][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1489.717595][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1489.723579][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1489.922998][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1490.138972][    C1] hpet: Lost 2 RTC interrupts
[ 1490.176428][    C1] hpet: Lost 1 RTC interrupts
[ 1490.185307][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1490.479270][    C1] hpet: Lost 2 RTC interrupts
[ 1490.506246][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1490.564687][T14879] netlink: 'syz.7.16533': attribute type 3 has an invalid length.
[ 1490.653737][T14882] loop9: detected capacity change from 0 to 8
[ 1490.664781][T14882] MTD: Attempt to mount non-MTD device "/dev/loop9"
[ 1490.671942][T14883] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16535'.
[ 1490.717861][T14883] hsr_slave_0: left promiscuous mode
[ 1490.724052][T14883] hsr_slave_1: left promiscuous mode
[ 1490.725403][T14882] cramfs: Error -3 while decompressing!
[ 1490.731546][T14882] cramfs: ffffffff9a57d3c8(18)->ffff88819f5ef000(4096)
[ 1490.738749][T14882] cramfs: Error -3 while decompressing!
[ 1490.740934][T14882] cramfs: ffffffff9a57d3c8(18)->ffff88819f5ef000(4096)
[ 1491.438168][T14895] loop9: detected capacity change from 0 to 32768
[ 1491.446980][T14895] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.16540 (14895)
[ 1491.473657][T14895] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1491.693480][T14895] BTRFS info (device loop9): using blake2b checksum algorithm
[ 1491.794202][T10149] Bluetooth: hci1: command tx timeout
[ 1491.895698][T14895] BTRFS info (device loop9): enabling ssd optimizations
[ 1491.910199][T14895] BTRFS info (device loop9): turning on async discard
[ 1491.912701][T14895] BTRFS info (device loop9): enabling free space tree
[ 1491.915475][T14895] BTRFS info (device loop9): use lzo compression, level 1
[ 1491.999798][   T33] audit: type=1800 audit(1778973150.555:20045): pid=14895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.16540" name="file1" dev="loop9" ino=260 res=0 errno=0
[ 1492.070225][T12892] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1492.217296][ T5355] 8021q: adding VLAN 0 to HW filter on device eth29
[ 1492.299526][    C1] hpet: Lost 2 RTC interrupts
[ 1492.382610][    C1] hpet: Lost 1 RTC interrupts
[ 1492.464515][T14935] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1492.521829][T14851] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1492.522356][    C1] hpet: Lost 2 RTC interrupts
[ 1492.530715][T14851] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1492.576477][    C1] hpet: Lost 1 RTC interrupts
[ 1492.581169][T14851] bridge_slave_0: entered allmulticast mode
[ 1492.599571][T14851] bridge_slave_0: entered promiscuous mode
[ 1492.719709][   T13] bridge_slave_1: left allmulticast mode
[ 1492.722722][   T13] bridge_slave_1: left promiscuous mode
[ 1492.725124][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1492.741353][   T13] bridge_slave_0: left allmulticast mode
[ 1492.743646][   T13] bridge_slave_0: left promiscuous mode
[ 1492.757184][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1492.914804][T14950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1493.747550][T30242] Bluetooth: hci1: command tx timeout
[ 1493.751550][T14918] Bluetooth: hci0: command 0x0406 tx timeout
[ 1493.869104][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1493.874946][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1493.879944][   T13] bond0 (unregistering): Released all slaves
[ 1493.887711][T14851] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1493.890702][T14851] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1493.893922][T14851] bridge_slave_1: entered allmulticast mode
[ 1493.898194][T14851] bridge_slave_1: entered promiscuous mode
[ 1493.904799][ T5355] 8021q: adding VLAN 0 to HW filter on device eth30
[ 1493.989007][T14851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1494.003729][T14851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1494.076080][T14851] team0: Port device team_slave_0 added
[ 1494.086164][T14851] team0: Port device team_slave_1 added
[ 1494.149590][    C1] hpet_rtc_timer_reinit: 9 callbacks suppressed
[ 1494.149614][    C1] hpet: Lost 1 RTC interrupts
[ 1494.200600][T14851] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1494.210006][T14851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1494.222154][T14851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1494.277552][    C1] hpet: Lost 1 RTC interrupts
[ 1494.292643][T14851] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1494.309216][T14851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1494.318073][T14851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1494.573414][T14851] hsr_slave_0: entered promiscuous mode
[ 1494.583102][T14851] hsr_slave_1: entered promiscuous mode
[ 1494.590107][T14851] debugfs: 'hsr0' already exists in 'hsr'
[ 1494.595657][T14851] Cannot create hsr debugfs directory
[ 1494.649295][T14961] loop7: detected capacity change from 0 to 32768
[ 1494.686463][ T5355] 8021q: adding VLAN 0 to HW filter on device eth31
[ 1494.693303][T14961] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1494.726195][T14961] XFS (loop7): Ending clean mount
[ 1494.792580][T14961] XFS (loop7): Quotacheck needed: Please wait.
[ 1494.800027][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1494.803608][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1494.807402][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1494.810401][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1494.863393][   T13] veth1_macvtap: left promiscuous mode
[ 1494.866944][   T13] veth0_macvtap: left promiscuous mode
[ 1494.870880][   T13] veth1_vlan: left promiscuous mode
[ 1494.877083][   T13] veth0_vlan: left promiscuous mode
[ 1494.908730][    C1] hpet: Lost 1 RTC interrupts
[ 1494.922114][T14961] XFS (loop7): Quotacheck: Done.
[ 1494.938203][T12484] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1494.962382][T14990] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[ 1495.001075][    C1] hpet: Lost 1 RTC interrupts
[ 1495.380581][    C1] hpet: Lost 1 RTC interrupts
[ 1495.545375][   T13] team_slave_1 (unregistering): left promiscuous mode
[ 1495.554474][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1495.568149][   T13] team_slave_0 (unregistering): left promiscuous mode
[ 1495.571609][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1495.690804][T15002] syzkaller0: entered promiscuous mode
[ 1495.695143][T15002] syzkaller0: entered allmulticast mode
[ 1495.728410][T10149] Bluetooth: hci1: command tx timeout
[ 1495.834639][    C1] hpet: Lost 1 RTC interrupts
[ 1496.007328][T15024] loop7: detected capacity change from 0 to 256
[ 1496.102842][    C1] hpet: Lost 1 RTC interrupts
[ 1496.273138][    C1] hpet: Lost 1 RTC interrupts
[ 1496.342002][    C1] hpet: Lost 1 RTC interrupts
[ 1496.345819][T15032] loop7: detected capacity change from 0 to 512
[ 1496.389862][    C1] hpet: Lost 1 RTC interrupts
[ 1496.402007][T15032] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[ 1496.505418][T15032] EXT4-fs (loop7): 1 truncate cleaned up
[ 1496.542320][T15032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1496.590459][T15038] loop9: detected capacity change from 0 to 128
[ 1496.782539][ T5355] 8021q: adding VLAN 0 to HW filter on device eth32
[ 1496.866202][T12484] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1497.417732][T15052] loop9: detected capacity change from 0 to 40427
[ 1497.420598][T15052] F2FS-fs: Quota file already specified
[ 1497.710255][T10149] Bluetooth: hci1: command tx timeout
[ 1497.752611][T15083] openvswitch: netlink: push_nsh: missing base or metadata attributes
[ 1497.770828][T15083] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1497.879873][T15087] tipc: Trying to set illegal importance in message
[ 1497.978790][T15091] loop9: detected capacity change from 0 to 128
[ 1498.257406][T14851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1498.264250][T14851] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1498.267597][T14851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1498.274062][T14851] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1498.279285][T14851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1498.303088][T14851] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1498.308251][T14851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1498.316648][T14851] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1498.457882][T14851] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1498.461990][ T5760] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1498.491058][T14851] 8021q: adding VLAN 0 to HW filter on device team0
[ 1498.499272][T13074] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1498.502348][T13074] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1498.515805][T13074] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1498.518740][T13074] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1498.527349][T15117] loop7: detected capacity change from 0 to 4096
[ 1498.558129][T15117] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[ 1498.605651][ T5760] usb 10-1: Using ep0 maxpacket: 16
[ 1498.613910][ T5760] usb 10-1: config 0 has an invalid interface number: 214 but max is 0
[ 1498.616675][T15117] ntfs3(loop7): ino=19, mi_enum_attr
[ 1498.623113][T15117] ntfs3(loop7): Failed to initialize $Extend/$ObjId.
[ 1498.630599][ T5760] usb 10-1: config 0 has no interface number 0
[ 1498.639955][ T5760] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1498.663203][ T5760] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1498.676513][ T5760] usb 10-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[ 1498.682085][ T5760] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1498.686601][ T5760] usb 10-1: Product: syz
[ 1498.692023][ T5760] usb 10-1: Manufacturer: syz
[ 1498.705695][ T5760] usb 10-1: SerialNumber: syz
[ 1498.726268][ T5760] usb 10-1: config 0 descriptor??
[ 1498.946224][ T5760] usbtouchscreen 10-1:0.214: Failed to read FW rev: -71
[ 1498.955339][ T5760] usbtouchscreen 10-1:0.214: probe with driver usbtouchscreen failed with error -71
[ 1498.977951][ T5760] usb 10-1: USB disconnect, device number 21
[ 1499.197681][T14851] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1499.270942][T14851] veth0_vlan: entered promiscuous mode
[ 1499.293899][T14851] veth1_vlan: entered promiscuous mode
[ 1499.324474][T14851] veth0_macvtap: entered promiscuous mode
[ 1499.332143][T14851] veth1_macvtap: entered promiscuous mode
[ 1499.368277][T14851] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1499.392756][T14851] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1499.439691][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1499.447089][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1499.460079][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1499.467700][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1499.584525][T15157] loop9: detected capacity change from 0 to 128
[ 1499.809812][T15157] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1499.848199][T13074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1499.855588][T13074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1499.938567][ T9513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1499.944403][ T9513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1500.083846][ T5734] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1500.165335][T15173] loop2: detected capacity change from 0 to 256
[ 1500.174697][T15173] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1500.199113][T15173] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1500.286474][ T5734] usb 10-1: Using ep0 maxpacket: 16
[ 1500.295920][ T5734] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1500.310764][ T5734] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1500.327034][ T5734] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1500.339102][ T5734] usb 10-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40
[ 1500.346659][ T5734] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1500.353478][ T5734] usb 10-1: Product: syz
[ 1500.358151][ T5734] usb 10-1: Manufacturer: syz
[ 1500.359590][ T5734] usb 10-1: SerialNumber: syz
[ 1500.463745][T15182] loop2: detected capacity change from 0 to 16
[ 1500.488008][T15182] erofs (device loop2): mounted with root inode @ nid 36.
[ 1500.506065][T15182] syz.2.16603: attempt to access beyond end of device
[ 1500.506065][T15182] loop2: rw=524288, sector=12296, nr_sectors = 8 limit=16
[ 1500.519657][T15182] syz.2.16603: attempt to access beyond end of device
[ 1500.519657][T15182] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16
[ 1500.539548][T15182] syz.2.16603: attempt to access beyond end of device
[ 1500.539548][T15182] loop2: rw=0, sector=12296, nr_sectors = 8 limit=16
[ 1500.546317][T15182] erofs (device loop2): read error -5 @ 0 of nid 89
[ 1500.553860][   T33] kauditd_printk_skb: 2 callbacks suppressed
[ 1500.553869][   T33] audit: type=1800 audit(1778973159.532:20046): pid=15182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.16603" name="file2" dev="loop2" ino=89 res=0 errno=0
[ 1500.579327][ T5734] usb 10-1: unit 6: unexpected type 0x0d
[ 1500.581567][ T5734] usb 10-1: unit 0 not found!
[ 1500.649044][ T5734] usb 10-1: USB disconnect, device number 22
[ 1500.699394][T12823] udevd[12823]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1500.894061][T15204] IPv6: addrconf: prefix option has invalid lifetime
[ 1500.930844][T15206] netlink: 24 bytes leftover after parsing attributes in process `syz.7.16611'.
[ 1500.937704][T15206] netlink: 24 bytes leftover after parsing attributes in process `syz.7.16611'.
[ 1500.942078][T15206] netlink: 'syz.7.16611': attribute type 5 has an invalid length.
[ 1501.719755][T15242] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1502.000036][T27878] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1502.119752][ T5760] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1502.148250][T27878] usb 3-1: Using ep0 maxpacket: 32
[ 1502.152326][T27878] usb 3-1: config 0 has no interfaces?
[ 1502.154081][T27878] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1502.156788][T27878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1502.161331][T27878] usb 3-1: config 0 descriptor??
[ 1502.262276][ T5760] usb 10-1: Using ep0 maxpacket: 32
[ 1502.269596][ T5760] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[ 1502.273384][ T5760] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1502.276489][ T5760] usb 10-1: Product: syz
[ 1502.278142][ T5760] usb 10-1: Manufacturer: syz
[ 1502.280143][ T5760] usb 10-1: SerialNumber: syz
[ 1502.288650][ T5760] usb 10-1: config 0 descriptor??
[ 1502.416845][T15245] netlink: 'syz.7.16628': attribute type 1 has an invalid length.
[ 1502.439718][T15245] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1502.489907][ T5760] airspy 10-1:0.0: usb_control_msg() failed -71 request 09
[ 1502.496555][ T5760] airspy 10-1:0.0: Could not detect board
[ 1502.500616][ T5760] airspy 10-1:0.0: probe with driver airspy failed with error -71
[ 1502.513268][ T5760] usb 10-1: USB disconnect, device number 23
[ 1502.556753][T15232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1502.569444][T15232] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1502.577455][T12737] usb 3-1: USB disconnect, device number 27
[ 1502.769822][T15260] loop7: detected capacity change from 0 to 128
[ 1502.872687][T15262] netlink: 'syz.7.16636': attribute type 10 has an invalid length.
[ 1502.910638][T15264] netlink: 'syz.7.16637': attribute type 23 has an invalid length.
[ 1503.814817][ T5760] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1503.959879][ T5760] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1503.963258][ T5760] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1503.967602][ T5760] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1503.975891][ T5760] usb 8-1: string descriptor 0 read error: -22
[ 1503.978122][ T5760] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1503.980830][ T5760] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1503.993708][ T5760] usb 8-1: selecting invalid altsetting 1
[ 1503.996185][ T5760] usb 8-1: unit 6 not found!
[ 1504.005317][T27878] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[ 1504.149696][T27878] usb 3-1: config 0 has an invalid interface number: 3 but max is 2
[ 1504.152258][T27878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1504.155294][T27878] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[ 1504.158857][T27878] usb 3-1: config 0 has no interface number 1
[ 1504.161253][T27878] usb 3-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice=29.ac
[ 1504.164029][T27878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1504.169530][T27878] usb 3-1: config 0 descriptor??
[ 1504.174378][T27878] usb 3-1: unknown number of interfaces: 2
[ 1504.369794][T27878] usb 3-1: USB disconnect, device number 28
[ 1504.776141][ T5760] usb 8-1: 2:0: sticky mixer values (0/123/1 => 0), disabling
[ 1504.982764][T15311] loop2: detected capacity change from 0 to 128
[ 1504.989413][ T5760] usb 8-1: USB disconnect, device number 10
[ 1505.008805][T15311] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1505.013670][T15311] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1505.073897][T14851] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1505.195286][T15321] loop9: detected capacity change from 0 to 256
[ 1505.251496][T15321] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d)
[ 1505.909017][T12877] kernel write not supported for file /61/uid_map (pid: 12877 comm: kworker/1:10)
[ 1506.047258][T15358] loop9: detected capacity change from 0 to 512
[ 1506.060040][T15358] EXT4-fs: inline encryption not supported
[ 1506.089073][T15358] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.16680: corrupted in-inode xattr: e_value size too large
[ 1506.095320][T15358] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1506.095738][T15358] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.16680: couldn't read orphan inode 15 (err -117)
[ 1506.104097][    C0] EXT4-fs (loop9): error count since last fsck: 1
[ 1506.104116][    C0] EXT4-fs (loop9): initial error at time 1778973165: ext4_iget_extra_inode:5128: inode 15
[ 1506.104139][    C0] EXT4-fs (loop9): last error at time 1778973165: ext4_iget_extra_inode:5128: inode 15
[ 1506.120325][T15358] loop9: lost filesystem error report for type 5 error -117
[ 1506.125589][T15358] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1506.189010][T12892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1506.222771][    C1] hpet: Lost 1 RTC interrupts
[ 1506.278677][T15371] Cannot find add_set index 0 as target
[ 1506.406059][T15381] tipc: Enabling of bearer <etb:t> rejected, media not registered
[ 1506.588094][T15393] geneve2: entered promiscuous mode
[ 1506.720797][T15395] loop2: detected capacity change from 0 to 4096
[ 1506.797242][T15395] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[ 1506.804966][T15395] ntfs3(loop2): ino=3, mi_enum_attr
[ 1507.242512][T15411] dlm: plock device version mismatch: kernel (1.2.0), user (619199281.1581691892.1258375512)
[ 1507.767512][T15425] loop2: detected capacity change from 0 to 256
[ 1507.776013][T15425] exfat: Deprecated parameter 'namecase'
[ 1507.797783][T15427] loop9: detected capacity change from 0 to 764
[ 1507.800873][T15427] isofs_fill_super: get root inode failed
[ 1507.805490][T15425] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d)
[ 1507.897892][T15430] xt_cgroup: invalid path, errno=-2
[ 1508.135797][T15441] loop9: detected capacity change from 0 to 128
[ 1508.147001][T15444] xt_hashlimit: size too large, truncated to 1048576
[ 1508.157252][T15441] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1508.169459][T15441] hpfs: filesystem error: improperly stopped
[ 1508.175845][T15441] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1508.184841][T15441] hpfs: You really don't want any checks? You are crazy...
[ 1508.189135][T15441] hpfs: hpfs_map_sector(): read error
[ 1508.191286][T15441] hpfs: code page support is disabled
[ 1508.193383][T15441] hpfs: hpfs_map_4sectors(): unaligned read
[ 1508.195689][T15441] hpfs: hpfs_map_4sectors(): unaligned read
[ 1508.208241][T15441] hpfs: filesystem error: unable to find root dir
[ 1509.021887][T15478] bond2: invalid ARP target 0.0.0.0 specified for addition
[ 1509.024692][T15478] bond2: option arp_ip_target: invalid value (0)
[ 1509.027766][T15478] bond2 (unregistering): Released all slaves
[ 1509.099176][    C1] hpet: Lost 1 RTC interrupts
[ 1509.179549][   T31] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 1509.324448][   T31] usb 10-1: Using ep0 maxpacket: 8
[ 1509.331558][   T31] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1509.340759][   T31] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[ 1509.351328][   T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1509.358681][   T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1509.362829][   T31] usb 10-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1509.373122][   T31] usb 10-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[ 1509.377870][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1509.384480][   T31] usb 10-1: Product: syz
[ 1509.385758][   T31] usb 10-1: Manufacturer: syz
[ 1509.390967][   T31] usb 10-1: SerialNumber: syz
[ 1509.399838][   T31] usb 10-1: config 0 descriptor??
[ 1509.895599][   T31] iowarrior 10-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0
[ 1509.909853][   T31] usb 10-1: USB disconnect, device number 24
[ 1510.034473][ T5426] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[ 1510.210788][ T5426] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40
[ 1510.214488][ T5426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1510.218142][ T5426] usb 3-1: Product: syz
[ 1510.219976][ T5426] usb 3-1: Manufacturer: syz
[ 1510.221801][ T5426] usb 3-1: SerialNumber: syz
[ 1510.441876][ T5426] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1510.449233][ T5426] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2
[ 1510.461586][ T5426] usb 3-1: USB disconnect, device number 29
[ 1510.822775][T15525] loop9: detected capacity change from 0 to 164
[ 1510.888086][T15523] loop7: detected capacity change from 0 to 32768
[ 1510.892719][T15523] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.16746 (15523)
[ 1510.911270][T15523] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1510.915064][T15523] BTRFS info (device loop7): using crc32c checksum algorithm
[ 1510.917847][T15523] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 1511.016299][T15539] ip6gretap1: entered promiscuous mode
[ 1511.020090][T15539] ip6gretap1: entered allmulticast mode
[ 1511.037347][T15523] BTRFS info (device loop7): rebuilding free space tree
[ 1511.065643][T15523] BTRFS info (device loop7): disabling free space tree
[ 1511.068388][T15523] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1511.071808][T15523] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1511.080022][T15523] BTRFS info (device loop7): enabling ssd optimizations
[ 1511.083546][T15523] BTRFS info (device loop7): turning on async discard
[ 1511.085989][T15523] BTRFS info (device loop7): enabling disk space caching
[ 1511.088536][T15523] BTRFS info (device loop7): force clearing of disk cache
[ 1511.091061][T15523] BTRFS info (device loop7): use zstd compression, level 3
[ 1511.289372][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[ 1511.292764][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[ 1511.488285][   T33] audit: type=1804 audit(1778973170.976:20047): pid=15556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.16746" name="/newroot/310/file1/bus" dev="loop7" ino=263 res=1 errno=0
[ 1511.668755][T15558] loop2: detected capacity change from 0 to 8
[ 1511.687511][T15558] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1511.710238][T15558] SQUASHFS error: Failed to read block 0x91: -5
[ 1511.740082][T15558] SQUASHFS error: Unable to read metadata cache entry [8f]
[ 1511.742962][T15558] SQUASHFS error: Unable to read inode 0x11f
[ 1511.832472][T12484] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1511.901614][T15565] loop2: detected capacity change from 0 to 128
[ 1511.909107][T15565] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1511.923448][T15565] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1511.961035][    C1] hpet: Lost 1 RTC interrupts
[ 1512.038788][    C1] hpet: Lost 1 RTC interrupts
[ 1512.143927][    C1] hpet: Lost 1 RTC interrupts
[ 1512.146046][   T32] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1512.160993][T15571] loop7: detected capacity change from 0 to 1024
[ 1512.167407][T15571] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1512.231353][T15571] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1512.235886][T15571] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1512.278754][T12484] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1512.501377][T15582] loop7: detected capacity change from 0 to 128
[ 1512.517707][T15582] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[ 1512.776847][T15582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1512.837830][    C1] hpet: Lost 1 RTC interrupts
[ 1512.878227][    C1] hpet: Lost 1 RTC interrupts
[ 1513.257853][T15599] loop7: detected capacity change from 0 to 128
[ 1513.269485][T15599] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1513.283277][T15599] hpfs: filesystem error: improperly stopped
[ 1513.287983][T15599] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1513.292466][T15599] hpfs: You really don't want any checks? You are crazy...
[ 1513.299968][T15599] hpfs: Code page index out of array
[ 1513.308767][T15599] hpfs: code page support is disabled
[ 1513.321521][T15599] hpfs: hpfs_map_4sectors(): unaligned read
[ 1513.328476][T15599] hpfs: hpfs_map_4sectors(): unaligned read
[ 1513.334706][T15599] hpfs: filesystem error: unable to find root dir
[ 1513.462979][ T5426] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1513.628717][ T5426] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1513.631964][ T5426] usb 3-1: config 66 has an invalid interface number: 168 but max is 0
[ 1513.637122][ T5426] usb 3-1: config 66 has an invalid descriptor of length 30, skipping remainder of the config
[ 1513.642762][ T5426] usb 3-1: config 66 has no interface number 0
[ 1513.651333][ T5426] usb 3-1: config 66 interface 168 altsetting 131 has 0 endpoint descriptors, different from the interface descriptor's value: 20
[ 1513.655557][ T5426] usb 3-1: config 66 interface 168 has no altsetting 0
[ 1513.662952][ T5426] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[ 1513.665930][ T5426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1513.673855][ T5426] usb 3-1: Product: syz
[ 1513.675448][ T5426] usb 3-1: Manufacturer: syz
[ 1513.677045][ T5426] usb 3-1: SerialNumber: syz
[ 1513.900141][ T5426] usb 3-1: USB disconnect, device number 30
[ 1514.241250][T15647] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16791'.
[ 1514.691746][   T31] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[ 1514.724257][ T5734] IPVS: starting estimator thread 0...
[ 1514.769902][T15671] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[ 1514.772858][T15671] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1514.815875][T15669] IPVS: using max 59 ests per chain, 141600 per kthread
[ 1514.846306][   T31] usb 8-1: not running at top speed; connect to a high speed hub
[ 1514.850583][   T31] usb 8-1: config 7 has an invalid interface number: 4 but max is 1
[ 1514.857075][   T31] usb 8-1: config 7 has an invalid interface number: 83 but max is 1
[ 1514.864891][   T31] usb 8-1: config 7 has no interface number 0
[ 1514.870446][   T31] usb 8-1: config 7 has no interface number 1
[ 1514.876515][   T31] usb 8-1: config 7 interface 83 has no altsetting 0
[ 1514.886886][   T31] usb 8-1: New USB device found, idVendor=2357, idProduct=0201, bcdDevice=ae.e5
[ 1514.893881][   T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1514.900152][   T31] usb 8-1: Product: syz
[ 1514.903537][   T31] usb 8-1: Manufacturer: syz
[ 1514.906784][   T31] usb 8-1: SerialNumber: syz
[ 1515.132696][   T31] option 8-1:7.83: GSM modem (1-port) converter detected
[ 1515.144304][   T31] usb 8-1: USB disconnect, device number 11
[ 1515.153180][   T31] option 8-1:7.83: device disconnected
[ 1515.839993][T15689] netlink: 6060 bytes leftover after parsing attributes in process `syz.7.16810'.
[ 1515.898155][T15693] netlink: 'syz.2.16812': attribute type 4 has an invalid length.
[ 1515.965728][T15697] futex_wake_op: syz.9.16814 tries to shift op by 32; fix this program
[ 1516.043460][T15701] hpfs: hpfs_map_sector(): read error
[ 1516.153034][   T33] audit: type=1400 audit(1778973175.911:20048): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=15707 comm="syz.7.16819"
[ 1516.179980][T15709] loop2: detected capacity change from 0 to 1024
[ 1516.187648][T15709] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1516.199098][T15709] JBD2: no valid journal superblock found
[ 1516.242428][T15709] EXT4-fs (loop2): Could not load journal inode
[ 1516.788344][ T5734] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1517.083901][ T5734] usb 8-1: Using ep0 maxpacket: 32
[ 1517.089245][ T5734] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1517.099368][ T5734] usb 8-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[ 1517.109136][ T5734] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1517.116099][ T5734] usb 8-1: Product: syz
[ 1517.121068][ T5734] usb 8-1: Manufacturer: syz
[ 1517.122974][ T5734] usb 8-1: SerialNumber: syz
[ 1517.126132][T15741] loop2: detected capacity change from 0 to 2048
[ 1517.155476][T15741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1517.192144][ T5734] snd-ua101 8-1:1.1: invalid format type
[ 1517.200724][T14851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1517.205348][ T5734] snd-ua101 8-1:1.0: invalid num_altsetting
[ 1517.358119][T15748] loop2: detected capacity change from 0 to 4096
[ 1517.383587][T15749] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1517.408861][ T5734] usb 8-1: USB disconnect, device number 12
[ 1517.438767][T15748] NILFS (loop2): cannot delete checkpoints: invalid range [1793, 1792)
[ 1517.463597][T15748] NILFS (loop2): error -22 preparing GC: cannot delete checkpoints
[ 1517.620172][T15757] netlink: 'syz.2.16840': attribute type 23 has an invalid length.
[ 1517.711847][   T31] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1518.134356][   T31] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1518.141691][   T31] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1518.145676][   T31] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1518.153266][   T31] usb 10-1: string descriptor 0 read error: -22
[ 1518.155846][   T31] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1518.160085][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1518.176023][   T31] usb 10-1: selecting invalid altsetting 1
[ 1518.179013][   T31] usb 10-1: unit 6 not found!
[ 1518.370230][   T31] usb 10-1: 2:0: cannot get min/max values for control 1 (id 2)
[ 1518.491731][   T31] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1518.642883][   T31] usb 10-1: USB disconnect, device number 25
[ 1518.773086][T15775] loop7: detected capacity change from 0 to 32768
[ 1518.782655][T15775] (syz.7.16848,15775,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1518.794163][T15775] (syz.7.16848,15775,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1518.804246][T15775] (syz.7.16848,15775,0):ocfs2_verify_heartbeat:818 ERROR: Cannot heartbeat on a locally mounted device.
[ 1518.811322][T15775] (syz.7.16848,15775,0):ocfs2_fill_super:1177 ERROR: status = -22
[ 1518.839787][    C1] hpet: Lost 1 RTC interrupts
[ 1518.899353][T15782] batadv_slave_1: entered promiscuous mode
[ 1518.907053][T15781] batadv_slave_1: left promiscuous mode
[ 1519.232075][T15784] loop2: detected capacity change from 0 to 32768
[ 1519.252990][T15792] binder: 15791:15792 ioctl 400c620e 0 returned -14
[ 1519.629309][T15814] loop9: detected capacity change from 0 to 512
[ 1519.715954][T15814] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1519.721067][T15814] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1519.771846][T12892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1519.801853][    C1] hpet: Lost 1 RTC interrupts
[ 1519.925768][   T31] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1519.982028][T15825] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1519.987890][T15825] VFS: Can't find a romfs filesystem on dev nullb0.
[ 1519.987890][T15825] 
[ 1520.073570][   T31] usb 3-1: Using ep0 maxpacket: 32
[ 1520.080008][   T31] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[ 1520.083106][   T31] usb 3-1: config 0 has no interface number 0
[ 1520.084959][   T31] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1520.088123][   T31] usb 3-1: config 0 interface 85 has no altsetting 0
[ 1520.094402][   T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1520.099956][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1520.105614][   T31] usb 3-1: Product: syz
[ 1520.107751][   T31] usb 3-1: Manufacturer: syz
[ 1520.115384][   T31] usb 3-1: SerialNumber: syz
[ 1520.125873][   T31] usb 3-1: config 0 descriptor??
[ 1520.524677][   T31] appletouch 3-1:0.85: Geyser mode initialized.
[ 1520.533678][   T31] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input34
[ 1520.679148][T15855] loop7: detected capacity change from 0 to 8
[ 1520.695332][T15855] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1520.698380][T15855] SQUASHFS error: Failed to read block 0x1dd: -5
[ 1520.700245][T15855] SQUASHFS error: Unable to read metadata cache entry [1db]
[ 1520.704006][T15855] SQUASHFS error: Unable to read inode 0xa7
[ 1520.959666][T15869] xt_hashlimit: size too large, truncated to 1048576
[ 1521.595227][T15881] loop9: detected capacity change from 0 to 512
[ 1521.599453][T15881] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1521.605900][T15881] EXT4-fs (loop9): 1 truncate cleaned up
[ 1521.610843][T15881] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1521.660106][T12892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1521.694669][    C1] hpet: Lost 1 RTC interrupts
[ 1522.152613][T15893] loop9: detected capacity change from 0 to 32768
[ 1522.155106][T15893] btrfs: Deprecated parameter 'usebackuproot'
[ 1522.157430][T15893] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1522.162567][T15893] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.16897 (15893)
[ 1522.175084][T15893] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1522.178711][T15893] BTRFS info (device loop9): using crc32c checksum algorithm
[ 1522.270614][   T83] BTRFS warning (device loop9): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[ 1522.293102][T15893] BTRFS error (device loop9): failed to load root extent
[ 1522.295383][T15893] BTRFS warning (device loop9): try to load backup roots slot 1
[ 1522.298516][   T85] BTRFS warning (device loop9): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[ 1522.303684][T15893] BTRFS warning (device loop9): couldn't read tree root
[ 1522.305917][T15893] BTRFS warning (device loop9): try to load backup roots slot 2
[ 1522.308619][   T83] BTRFS error (device loop9): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1522.313796][T15893] BTRFS warning (device loop9): couldn't read tree root
[ 1522.316672][T15893] BTRFS warning (device loop9): try to load backup roots slot 3
[ 1522.348615][T15893] BTRFS info (device loop9): rebuilding free space tree
[ 1522.368531][T15893] BTRFS info (device loop9): disabling free space tree
[ 1522.370637][T15893] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1522.373395][T15893] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1522.379349][T15893] BTRFS info (device loop9): checking UUID tree
[ 1522.381696][T15893] BTRFS info (device loop9): enabling ssd optimizations
[ 1522.383756][T15893] BTRFS info (device loop9): using spread ssd allocation scheme
[ 1522.386179][T15893] BTRFS info (device loop9): turning on async discard
[ 1522.388219][T15893] BTRFS info (device loop9): force clearing of disk cache
[ 1522.390862][T15893] BTRFS info (device loop9): enabling auto defrag
[ 1522.392826][T15893] BTRFS info (device loop9): trying to use backup root at mount time
[ 1522.395147][T15893] BTRFS info (device loop9): use zstd compression, level 3
[ 1522.479617][T12892] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1522.532746][    C1] hpet: Lost 1 RTC interrupts
[ 1522.597731][    C1] hpet: Lost 1 RTC interrupts
[ 1522.609490][ T5760] usb 3-1: USB disconnect, device number 31
[ 1522.704195][    C1] hpet: Lost 1 RTC interrupts
[ 1522.801632][    C1] hpet: Lost 1 RTC interrupts
[ 1522.807767][ T5760] appletouch 3-1:0.85: input: appletouch disconnected
[ 1522.895385][    C1] hpet: Lost 1 RTC interrupts
[ 1522.952863][    C1] hpet: Lost 1 RTC interrupts
[ 1523.020590][    C1] hpet: Lost 1 RTC interrupts
[ 1523.241879][ T5760] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1523.397449][ T5760] usb 8-1: Using ep0 maxpacket: 16
[ 1523.402846][ T5760] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 1523.406136][ T5760] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1523.408560][ T5760] usb 8-1: Product: syz
[ 1523.409950][ T5760] usb 8-1: Manufacturer: syz
[ 1523.411480][ T5760] usb 8-1: SerialNumber: syz
[ 1523.416797][ T5760] usb 8-1: config 0 descriptor??
[ 1523.545108][T15956] netlink: 16 bytes leftover after parsing attributes in process `syz.9.16919'.
[ 1523.556512][T15956] netlink: 48 bytes leftover after parsing attributes in process `syz.9.16919'.
[ 1523.614257][ T5760] dvb_usb_dtv5100 8-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[ 1523.625023][ T5760] usb 8-1: USB disconnect, device number 13
[ 1523.650777][T15960] loop9: detected capacity change from 0 to 512
[ 1523.673825][T15960] EXT4-fs (loop9): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[ 1523.679444][T15960] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1523.686879][T15960] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1523.695308][T15960] EXT4-fs (loop9): Couldn't mount because of unsupported optional features (fffc1829)
[ 1523.700518][T15960] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities
[ 1523.701044][T15958] loop2: detected capacity change from 0 to 4096
[ 1523.712695][T15958] ntfs3(loop2): ino=3, mi_enum_attr
[ 1523.756120][T15958] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[ 1523.777216][T15958] ntfs3(loop2): Failed to initialize $Secure::$SDH (-22).
[ 1523.784056][T15958] ntfs3(loop2): Failed to initialize $Secure (-22).
[ 1524.060941][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16929'.
[ 1524.070795][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16929'.
[ 1524.070828][T12495] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1524.087865][T12495] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1524.095418][T12495] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1524.099825][T12495] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1524.315671][T15986] loop7: detected capacity change from 0 to 4096
[ 1524.339474][T15986] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[ 1524.351937][T15986] ntfs3(loop7): Failed to load $Extend (-22).
[ 1524.354006][T15986] ntfs3(loop7): Failed to initialize $Extend.
[ 1524.389665][   T33] kauditd_printk_skb: 4 callbacks suppressed
[ 1524.389675][   T33] audit: type=1800 audit(1778973184.562:20049): pid=15986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.16932" name="file1" dev="loop7" ino=30 res=0 errno=0
[ 1524.408897][   T33] audit: type=1800 audit(1778973184.583:20050): pid=15986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.16932" name="file1" dev="loop7" ino=30 res=0 errno=0
[ 1524.649100][T16008] netlink: 'syz.7.16943': attribute type 8 has an invalid length.
[ 1525.109954][T16032] loop7: detected capacity change from 0 to 2048
[ 1525.114297][T16032] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1525.135163][T16032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1525.177828][T12484] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1525.208647][    C1] hpet: Lost 1 RTC interrupts
[ 1525.914253][T16051] loop2: detected capacity change from 0 to 2048
[ 1525.933598][T16051] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051
[ 1525.949044][T16051] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1526.049585][    C1] hpet: Lost 1 RTC interrupts
[ 1526.189137][    C1] hpet: Lost 1 RTC interrupts
[ 1526.446497][T16065] netlink: 180 bytes leftover after parsing attributes in process `syz.2.16968'.
[ 1526.449936][T16065] netlink: 'syz.2.16968': attribute type 2 has an invalid length.
[ 1526.453335][T16065] netlink: 'syz.2.16968': attribute type 1 has an invalid length.
[ 1526.541495][T16067] loop2: detected capacity change from 0 to 8192
[ 1526.590402][T16067]  loop2: p1 p2 p3
[ 1526.593108][T16067] loop2: partition table partially beyond EOD, truncated
[ 1526.596351][T16067] loop2: p1 start 51379968 is beyond EOD, truncated
[ 1526.601870][T16067] loop2: p3 start 16777215 is beyond EOD, truncated
[ 1526.703979][T12823] udevd[12823]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[ 1526.912285][   T31] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1527.088460][T16087] macvtap1: entered promiscuous mode
[ 1527.090156][T16087] macvtap1: entered allmulticast mode
[ 1527.092128][T16087] veth1_to_bridge: entered promiscuous mode
[ 1527.094783][T16087] veth1_to_bridge: entered allmulticast mode
[ 1527.102468][   T31] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[ 1527.106105][T16087] team0: Device macvtap1 failed to register rx_handler
[ 1527.109230][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1527.114711][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1527.116394][T16087] veth1_to_bridge: left allmulticast mode
[ 1527.118229][   T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1527.120471][T16087] veth1_to_bridge: left promiscuous mode
[ 1527.124499][   T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1527.124517][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1527.126688][   T31] usb 3-1: config 0 descriptor??
[ 1527.315539][   T33] audit: type=1326 audit(1778973187.628:20051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16094 comm="syz.7.16982" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d0b9cdd9 code=0x7ffc0000
[ 1527.325091][   T33] audit: type=1326 audit(1778973187.628:20052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16094 comm="syz.7.16982" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d0b9cdd9 code=0x7ffc0000
[ 1527.332559][   T33] audit: type=1326 audit(1778973187.639:20053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16094 comm="syz.7.16982" exe="/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f50d0b9cdd9 code=0x7ffc0000
[ 1527.340270][   T33] audit: type=1326 audit(1778973187.639:20054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16094 comm="syz.7.16982" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d0b9cdd9 code=0x7ffc0000
[ 1527.349642][   T33] audit: type=1326 audit(1778973187.639:20055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16094 comm="syz.7.16982" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d0b9cdd9 code=0x7ffc0000
[ 1527.493033][ T5426] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 1527.518242][   T31] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xd
[ 1527.535382][   T31] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1527.640059][ T5426] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1527.644254][ T5426] usb 10-1: config 122 has an invalid interface number: 163 but max is 0
[ 1527.648112][ T5426] usb 10-1: config 122 has no interface number 0
[ 1527.650516][ T5426] usb 10-1: config 122 interface 163 has no altsetting 0
[ 1527.656773][ T5426] usb 10-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=ba.1d
[ 1527.660432][ T5426] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1527.663498][ T5426] usb 10-1: Product: syz
[ 1527.665359][ T5426] usb 10-1: Manufacturer: syz
[ 1527.668554][ T5426] usb 10-1: SerialNumber: syz
[ 1527.802700][ T5760] usb 3-1: USB disconnect, device number 32
[ 1527.875542][ T5426] gspca_main: spca501-2.14.0 probing 0497:c001
[ 1527.878437][ T5426] gspca_spca501: reg write: error -71
[ 1527.880121][ T5426] spca501 10-1:122.163: Reg write failed for 0x02,0x07,0x05
[ 1527.885686][ T5426] spca501 10-1:122.163: probe with driver spca501 failed with error -22
[ 1527.895378][ T5426] usb 10-1: USB disconnect, device number 26
[ 1528.048996][T16107] netlink: 20 bytes leftover after parsing attributes in process `syz.7.16988'.
[ 1528.950177][T13023] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1529.020453][T16149] loop9: detected capacity change from 0 to 32768
[ 1529.031037][T16149] ERROR: (device loop9): dbAlloc: the hint is outside the map
[ 1529.031037][T16149] 
[ 1529.062692][T16149] read_mapping_page failed!
[ 1529.064510][T16149] ERROR: (device loop9): txCommit: 
[ 1529.064510][T16149] 
[ 1529.097580][T13023] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1529.100413][T13023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1529.104309][T13023] usb 3-1: Product: syz
[ 1529.105583][T13023] usb 3-1: Manufacturer: syz
[ 1529.106984][T13023] usb 3-1: SerialNumber: syz
[ 1529.111369][T13023] usb 3-1: config 0 descriptor??
[ 1529.117989][T13023] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 033
[ 1529.474248][   T31] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[ 1529.505974][T13023]  (null): failure reading functionality
[ 1529.518933][T13023] i2c i2c-2: failure reading functionality
[ 1529.523926][T13023] i2c i2c-2: connected i2c-tiny-usb device
[ 1529.527451][T13023] usb 3-1: USB disconnect, device number 33
[ 1529.551129][T16159] netlink: 'syz.7.17013': attribute type 10 has an invalid length.
[ 1529.554085][T16159] netlink: 40 bytes leftover after parsing attributes in process `syz.7.17013'.
[ 1529.557328][T16159] bridge0: port 3(veth1_vlan) entered blocking state
[ 1529.560906][T16159] bridge0: port 3(veth1_vlan) entered disabled state
[ 1529.563403][T16159] veth1_vlan: entered allmulticast mode
[ 1529.566435][T16159] veth1_vlan: left allmulticast mode
[ 1529.568655][T16159] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[ 1529.626232][   T31] usb 10-1: Using ep0 maxpacket: 32
[ 1529.631558][   T31] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1529.635933][   T31] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1529.645591][   T31] usb 10-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40
[ 1529.649180][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1529.652181][   T31] usb 10-1: Product: syz
[ 1529.653738][   T31] usb 10-1: Manufacturer: syz
[ 1529.656971][   T31] usb 10-1: SerialNumber: syz
[ 1529.838875][T16169] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17018'.
[ 1529.842504][T16169] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17018'.
[ 1529.846552][T16169] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17018'.
[ 1529.850231][T16169] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17018'.
[ 1529.853740][T16169] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17018'.
[ 1529.858607][T16169] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17018'.
[ 1529.863428][T16169] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17018'.
[ 1529.868997][T16169] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17018'.
[ 1529.872632][T16169] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17018'.
[ 1529.882491][   T31] usb 10-1: 0:1 : does not exist
[ 1529.884388][   T31] usb 10-1: unit 1 not found!
[ 1529.886088][   T31] usb 10-1: unit 8 not found!
[ 1529.937880][   T31] usb 10-1: USB disconnect, device number 27
[ 1529.979376][T12820] udevd[12820]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1530.225176][T16181] netlink: 'syz.7.17023': attribute type 29 has an invalid length.
[ 1530.230984][T16181] netlink: 'syz.7.17023': attribute type 29 has an invalid length.
[ 1530.302661][ T5760] usb 3-1: new low-speed USB device number 34 using dummy_hcd
[ 1530.457702][ T5760] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1530.463226][ T5760] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1530.468107][ T5760] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1530.471723][ T5760] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1530.478562][ T5760] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1530.492573][ T5760] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1530.496414][ T5760] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1530.504002][ T5760] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1530.512898][ T5760] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1530.517626][ T5760] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1530.525929][ T5760] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1530.530869][ T5760] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1530.536856][ T5760] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1530.541992][ T5760] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1530.548707][ T5760] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1530.558909][ T5760] usb 3-1: string descriptor 0 read error: -22
[ 1530.565357][ T5760] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1530.572215][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1530.666760][ T5760] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1531.376957][   T33] kauditd_printk_skb: 1 callbacks suppressed
[ 1531.376975][   T33] audit: type=1326 audit(1778973191.891:20057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.9.17039" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b399cdd9 code=0x7ffc0000
[ 1531.405772][   T33] audit: type=1326 audit(1778973191.891:20058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.9.17039" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b399cdd9 code=0x7ffc0000
[ 1531.417677][   T33] audit: type=1326 audit(1778973191.891:20059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.9.17039" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b399cdd9 code=0x7ffc0000
[ 1531.432569][   T33] audit: type=1326 audit(1778973191.891:20060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.9.17039" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b399cdd9 code=0x7ffc0000
[ 1531.442325][   T33] audit: type=1326 audit(1778973191.891:20061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.9.17039" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc8b399cdd9 code=0x7ffc0000
[ 1531.451370][   T33] audit: type=1326 audit(1778973191.891:20062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.9.17039" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b399cdd9 code=0x7ffc0000
[ 1531.460011][   T33] audit: type=1326 audit(1778973191.891:20063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.9.17039" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b399cdd9 code=0x7ffc0000
[ 1531.468481][   T33] audit: type=1326 audit(1778973191.891:20064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.9.17039" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b399cdd9 code=0x7ffc0000
[ 1531.477015][   T33] audit: type=1326 audit(1778973191.891:20065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.9.17039" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc8b399cdd9 code=0x7ffc0000
[ 1531.484063][   T33] audit: type=1326 audit(1778973191.891:20066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.9.17039" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b399cdd9 code=0x7ffc0000
[ 1531.657789][T16236] netlink: 'syz.7.17046': attribute type 83 has an invalid length.
[ 1532.459217][T16253] cgroup: Unknown subsys name '@﬽4*oңhoU'
[ 1532.833901][T16275] syz_tun: entered allmulticast mode
[ 1532.836449][T11032] usb 10-1: new low-speed USB device number 28 using dummy_hcd
[ 1532.841546][T16274] syz_tun: left allmulticast mode
[ 1533.001193][T11032] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1533.014646][T11032] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 16, setting to 8
[ 1533.021855][T11032] usb 10-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1533.031174][T11032] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1533.033884][T11032] usb 10-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[ 1533.042667][T11032] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1533.049419][T11032] usb 10-1: config 0 descriptor??
[ 1533.052575][T16263] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1533.135391][T16287] overlayfs: failed to resolve './cgroup': -2
[ 1533.194393][   T31] usb 3-1: USB disconnect, device number 34
[ 1533.367339][T16296] openvswitch: netlink: Multiple metadata blocks provided
[ 1533.458493][T11032] pantherlord 0003:0810:0001.0018: unknown global tag 0xd
[ 1533.464210][T16299] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1533.464228][T11032] pantherlord 0003:0810:0001.0018: item 0 4 1 13 parsing failed
[ 1533.473084][T11032] pantherlord 0003:0810:0001.0018: parse failed
[ 1533.477934][T11032] pantherlord 0003:0810:0001.0018: probe with driver pantherlord failed with error -22
[ 1533.666658][T11032] usb 10-1: USB disconnect, device number 28
[ 1534.751741][T16348] __nla_validate_parse: 14 callbacks suppressed
[ 1534.751759][T16348] netlink: 24 bytes leftover after parsing attributes in process `syz.9.17096'.
[ 1535.307586][T16355] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17100'.
[ 1535.612299][T16375] loop9: detected capacity change from 0 to 256
[ 1535.822856][T16375] FAT-fs (loop9): Directory bread(block 64) failed
[ 1535.825234][T16375] FAT-fs (loop9): Directory bread(block 65) failed
[ 1535.828428][T16375] FAT-fs (loop9): Directory bread(block 66) failed
[ 1535.830629][T16375] FAT-fs (loop9): Directory bread(block 67) failed
[ 1535.833062][T16375] FAT-fs (loop9): Directory bread(block 68) failed
[ 1535.835138][T16375] FAT-fs (loop9): Directory bread(block 69) failed
[ 1535.837213][T16375] FAT-fs (loop9): Directory bread(block 70) failed
[ 1535.839409][T16375] FAT-fs (loop9): Directory bread(block 71) failed
[ 1535.841277][T16375] FAT-fs (loop9): Directory bread(block 72) failed
[ 1535.843609][T16375] FAT-fs (loop9): Directory bread(block 73) failed
[ 1535.860137][T16372] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17103'.
[ 1535.978161][T16386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17111'.
[ 1536.034070][T16388] netlink: 88 bytes leftover after parsing attributes in process `syz.2.17112'.
[ 1536.385888][T16405] netlink: 28 bytes leftover after parsing attributes in process `syz.9.17120'.
[ 1536.663361][T16415] overlayfs: failed to clone upperpath
[ 1537.077626][    C1] hpet_rtc_timer_reinit: 13 callbacks suppressed
[ 1537.077641][    C1] hpet: Lost 2 RTC interrupts
[ 1537.154945][T16437] netlink: 'syz.9.17133': attribute type 7 has an invalid length.
[ 1537.197458][    C1] hpet: Lost 1 RTC interrupts
[ 1537.260522][    C1] hpet: Lost 1 RTC interrupts
[ 1537.429813][T16452] loop9: detected capacity change from 0 to 24
[ 1537.722072][T10149] Bluetooth: hci2: command 0x0406 tx timeout
[ 1538.922237][   T33] audit: type=1326 audit(1778973199.618:20074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16465 comm="syz.7.17146" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d0b9cdd9 code=0x7ffc0000
[ 1538.978694][   T33] audit: type=1326 audit(1778973199.618:20075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16465 comm="syz.7.17146" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d0b9cdd9 code=0x7ffc0000
[ 1539.005991][   T33] audit: type=1326 audit(1778973199.629:20076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16465 comm="syz.7.17146" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50d0b9cdd9 code=0x7ffc0000
[ 1539.038779][   T33] audit: type=1326 audit(1778973199.629:20077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16465 comm="syz.7.17146" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d0b9cdd9 code=0x7ffc0000
[ 1539.054111][   T33] audit: type=1326 audit(1778973199.629:20078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16465 comm="syz.7.17146" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d0b9cdd9 code=0x7ffc0000
[ 1539.061915][   T33] audit: type=1326 audit(1778973199.639:20079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16465 comm="syz.7.17146" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50d0b9cdd9 code=0x7ffc0000
[ 1539.082410][   T33] audit: type=1326 audit(1778973199.639:20080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16465 comm="syz.7.17146" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d0b9cdd9 code=0x7ffc0000
[ 1539.242326][T16478] input: syz0 as /devices/virtual/input/input35
[ 1539.385483][T16482] 9p: Bad value for 'rfdno'
[ 1539.541357][ T5426] usb 10-1: new low-speed USB device number 29 using dummy_hcd
[ 1540.050016][ T5426] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1540.063751][ T5426] usb 10-1: unable to read config index 0 descriptor/start: -71
[ 1540.066870][ T5426] usb 10-1: can't read configurations, error -71
[ 1540.738553][T16521] ptrace attach of "/syz-executor exec"[12892] was attempted by "\x22"[16521]
[ 1540.816265][T16525] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.17172'.
[ 1541.021408][T16537] xt_hashlimit: overflow, rate too high: 0
[ 1541.072638][T16539] overlayfs: failed to clone upperpath
[ 1541.174614][T16542] openvswitch: netlink: Key 26 has unexpected len 0 expected 16
[ 1541.790913][T16561] loop9: detected capacity change from 0 to 65536
[ 1541.793644][T16561] xfs: Deprecated parameter 'ikeep'
[ 1541.795886][T16561] XFS: ikeep mount option is deprecated.
[ 1541.823450][T16561] XFS (loop9): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 1541.894863][T16561] XFS (loop9): Metadata corruption detected at __xfs_buf_ioend+0x332/0x6f0, xfs_inode block 0x20 xfs_inode_buf_verify
[ 1541.899608][T16561] XFS (loop9): Unmount and run xfs_repair
[ 1541.901759][T16561] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[ 1541.905305][T16561] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00  IN..............
[ 1541.908604][T16561] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1541.911881][T16561] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1541.915237][T16561] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1541.918554][T16561] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1541.922816][T16561] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1541.926133][T16561] 00000060: ff ff ff 7f 00 ef 6f a0 00 00 00 00 00 00 00 00  ......o.........
[ 1541.929402][T16561] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1541.932873][T16561] XFS (loop9): metadata I/O error in "xfs_imap_to_bp+0x12a/0x2d0" at daddr 0x20 len 32 error 117
[ 1541.937380][T16561] loop9: lost filesystem error report for type 5 error -117
[ 1541.937466][T16561] XFS (loop9): Failed to read root inode 0x20, error 117
[ 1541.943923][T16561] XFS (loop9): Uncorrected metadata errors detected; please run xfs_repair.
[ 1541.978338][T16572] loop2: detected capacity change from 0 to 32768
[ 1541.992404][T16572] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.17190 (16572)
[ 1542.068402][    C1] hpet_rtc_timer_reinit: 25 callbacks suppressed
[ 1542.068428][    C1] hpet: Lost 2 RTC interrupts
[ 1542.091839][T16572] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1542.095027][T16572] BTRFS info (device loop2): using crc32c checksum algorithm
[ 1542.097648][T16572] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 1542.130358][    C1] hpet: Lost 2 RTC interrupts
[ 1542.209343][    C1] hpet: Lost 1 RTC interrupts
[ 1542.666272][    C1] hpet: Lost 1 RTC interrupts
[ 1542.729279][T16572] BTRFS info (device loop2): rebuilding free space tree
[ 1542.847982][    C1] hpet: Lost 1 RTC interrupts
[ 1542.889899][T16572] BTRFS info (device loop2): disabling free space tree
[ 1542.892649][T16572] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1542.896557][T16572] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1542.919081][T16572] BTRFS info (device loop2): enabling ssd optimizations
[ 1542.922285][T16572] BTRFS info (device loop2): turning on async discard
[ 1542.925029][T16572] BTRFS info (device loop2): enabling disk space caching
[ 1542.927634][T16572] BTRFS info (device loop2): force clearing of disk cache
[ 1542.930196][T16572] BTRFS info (device loop2): use zstd compression, level 3
[ 1543.113740][    C1] hpet: Lost 1 RTC interrupts
[ 1543.449027][   T31] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[ 1543.455522][T10149] Bluetooth: hci0: unexpected event for opcode 0x204b
[ 1543.502265][T14851] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1543.555115][    C1] hpet: Lost 1 RTC interrupts
[ 1543.612030][    C1] hpet: Lost 1 RTC interrupts
[ 1543.646614][   T31] usb 10-1: Using ep0 maxpacket: 32
[ 1543.659808][   T31] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1543.663015][   T31] usb 10-1: config 0 has no interface number 0
[ 1543.679865][   T31] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1543.682890][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1543.685992][   T31] usb 10-1: Product: syz
[ 1543.687265][   T31] usb 10-1: Manufacturer: syz
[ 1543.690365][   T31] usb 10-1: SerialNumber: syz
[ 1543.697031][   T31] usb 10-1: config 0 descriptor??
[ 1543.740008][    C1] hpet: Lost 1 RTC interrupts
[ 1543.747067][   T31] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1543.750442][   T31] usb 10-1: selecting invalid altsetting 1
[ 1543.768923][   T31] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1543.800104][   T31] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1543.804365][   T31] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1543.807520][   T31] usb 10-1: media controller created
[ 1543.864883][    C1] hpet: Lost 2 RTC interrupts
[ 1543.888774][   T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1544.148949][   T31] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1544.178193][   T31] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1544.183263][   T31] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1544.314317][   T31] usb 10-1: USB disconnect, device number 31
[ 1544.580633][T16617] loop9: detected capacity change from 0 to 8
[ 1544.583649][T16617] squashfs: Bad value for 'errors'
[ 1544.714423][T16619] loop9: detected capacity change from 0 to 256
[ 1544.719784][T16619] exfat: Deprecated parameter 'namecase'
[ 1544.746662][T16619] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d)
[ 1544.801959][T16619] exFAT-fs (loop9): error, in sector 160, dentry 5 should be unused, but 0xc1
[ 1545.003824][T16628] fuse: Bad value for 'fd'
[ 1545.020861][T16630] loop2: detected capacity change from 0 to 512
[ 1545.023319][T16630] EXT4-fs: Ignoring removed nobh option
[ 1545.076479][T16634] binder: 16633:16634 ioctl c0306201 2000000001c0 returned -14
[ 1545.081854][T16630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1545.091688][T16630] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1545.130313][T16630] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[ 1545.206688][T14851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1545.290467][T16647] loop2: detected capacity change from 0 to 2048
[ 1545.300415][T16647] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[ 1545.305235][T16647] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[ 1545.617713][T16655] program syz.2.17218 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1546.186171][T16671] loop9: detected capacity change from 0 to 8
[ 1546.203443][T16671] SQUASHFS error: Failed to read block 0x1ec: -5
[ 1546.205476][T16671] SQUASHFS error: Unable to read metadata cache entry [1ea]
[ 1546.219292][T16671] SQUASHFS error: Unable to read metadata cache entry [1ea]
[ 1547.448492][T16708] loop9: detected capacity change from 0 to 8
[ 1547.589954][T16712] loop9: detected capacity change from 0 to 4096
[ 1547.631930][T16712] ntfs3(loop9): ino=19, mi_enum_attr
[ 1547.634514][T16712] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[ 1548.098191][T16735] loop9: detected capacity change from 0 to 4096
[ 1548.110588][T16736] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1548.114051][T16735] NILFS error (device loop9): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[ 1548.134500][T16735] NILFS (loop9): mounting fs with errors
[ 1548.475378][T16738] loop9: detected capacity change from 0 to 32768
[ 1548.486952][T16738] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.17255 (16738)
[ 1548.526989][T16738] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1548.530988][T16738] BTRFS info (device loop9): using sha256 checksum algorithm
[ 1548.615726][T16738] BTRFS info (device loop9): enabling ssd optimizations
[ 1548.618752][T16738] BTRFS info (device loop9): turning on async discard
[ 1548.621261][T16738] BTRFS info (device loop9): enabling free space tree
[ 1548.680379][T12892] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1548.746757][    C1] hpet_rtc_timer_reinit: 10 callbacks suppressed
[ 1548.746779][    C1] hpet: Lost 1 RTC interrupts
[ 1548.857837][    C1] hpet: Lost 2 RTC interrupts
[ 1548.912506][    C1] hpet: Lost 1 RTC interrupts
[ 1548.960777][    C1] hpet: Lost 1 RTC interrupts
[ 1548.964867][T16775] loop2: detected capacity change from 0 to 2048
[ 1548.992123][    C1] hpet: Lost 1 RTC interrupts
[ 1549.036131][    C1] hpet: Lost 1 RTC interrupts
[ 1549.050049][T16775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1549.053766][T16775] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1549.081323][    C1] hpet: Lost 1 RTC interrupts
[ 1549.117008][    C1] hpet: Lost 1 RTC interrupts
[ 1549.163135][    C1] hpet: Lost 1 RTC interrupts
[ 1549.210946][    C1] hpet: Lost 1 RTC interrupts
[ 1549.378876][T14851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1549.507676][T16785] tmpfs: Cannot change global quota limit on remount
[ 1549.980723][ T5760] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1550.004840][T16811] loop9: detected capacity change from 0 to 1024
[ 1550.019519][T16811] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1550.041880][T16811] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1550.045860][T16811] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1550.116318][T12892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1550.196158][ T5760] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1550.202890][ T5760] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[ 1550.211833][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1550.245826][ T5760] usb 3-1: config 0 descriptor??
[ 1550.250344][T16821] loop9: detected capacity change from 0 to 512
[ 1550.258957][ T5760] smsusb:smsusb_probe: board id=8, interface number 0
[ 1550.311466][ T5760] smsusb:smsusb_probe: Device initialized with return code -19
[ 1550.324973][T16821] EXT4-fs (loop9): orphan cleanup on readonly fs
[ 1550.327726][T16821] EXT4-fs warning (device loop9): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[ 1550.356947][T16821] EXT4-fs (loop9): Cannot turn on quotas: error -117
[ 1550.367455][T16821] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #14: comm syz.9.17286: invalid orphan symlink nlink 1
[ 1550.386834][T16821] loop9: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117
[ 1550.389501][    C1] EXT4-fs (loop9): error count since last fsck: 1
[ 1550.395333][    C1] EXT4-fs (loop9): last error at time 1778973211: ext4_orphan_get:1397: inode 14
[ 1550.399857][T16821] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.17286: couldn't read orphan inode 14 (err -117)
[ 1550.405230][T16821] loop9: lost filesystem error report for type 5 error -117
[ 1550.405738][T16821] EXT4-fs (loop9): 1 truncate cleaned up
[ 1550.417815][T16821] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1550.451747][T12892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1550.457384][ T5760] usb 3-1: USB disconnect, device number 35
[ 1550.781587][ T5426] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[ 1550.936548][ T5426] usb 10-1: config 9 has an invalid interface number: 48 but max is 0
[ 1550.941585][ T5426] usb 10-1: config 9 has no interface number 0
[ 1550.946826][ T5426] usb 10-1: config 9 interface 48 has no altsetting 0
[ 1550.956147][ T5426] usb 10-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01
[ 1550.963050][ T5426] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1550.975936][ T5426] usb 10-1: Product: syz
[ 1550.977791][ T5426] usb 10-1: Manufacturer: syz
[ 1550.979702][ T5426] usb 10-1: SerialNumber: syz
[ 1551.061365][T16841] loop2: detected capacity change from 0 to 4096
[ 1551.071297][T16841] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[ 1551.098179][T16841] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[ 1551.105964][T16841] ntfs3(loop2): ino=19, mi_enum_attr
[ 1551.214959][ T5426] usb 10-1: USB disconnect, device number 32
[ 1551.351158][T16845] loop2: detected capacity change from 0 to 4096
[ 1551.417520][T16845] NILFS (loop2): invalid segment: Checksum error in segment payload
[ 1551.424795][T16845] NILFS (loop2): trying rollback from an earlier position
[ 1551.444877][T16845] NILFS (loop2): recovery complete
[ 1551.458234][T16846] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1551.978014][T16861] overlayfs: failed to clone upperpath
[ 1552.294960][ T5760] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 1552.437427][ T5760] usb 3-1: Using ep0 maxpacket: 16
[ 1552.442306][ T5760] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[ 1552.445539][ T5760] usb 3-1: config 0 has no interface number 0
[ 1552.448098][ T5760] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1552.452414][ T5760] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1552.459170][ T5760] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1552.462934][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1552.466909][ T5760] usb 3-1: Product: syz
[ 1552.468707][ T5760] usb 3-1: Manufacturer: syz
[ 1552.470663][ T5760] usb 3-1: SerialNumber: syz
[ 1552.476218][ T5760] usb 3-1: config 0 descriptor??
[ 1552.479356][T16855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1552.483022][T16855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1552.689568][T16855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1552.694203][T16855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1553.511558][T16867] loop9: detected capacity change from 0 to 131072
[ 1553.514672][T16867] xfs: Deprecated parameter 'ikeep'
[ 1553.516172][T16867] XFS: ikeep mount option is deprecated.
[ 1553.520598][ T5760] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1553.530476][T16867] XFS (loop9): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[ 1553.584666][T16867] XFS (loop9): Starting recovery (logdev: internal)
[ 1553.623524][T16867] XFS (loop9): Ending recovery (logdev: internal)
[ 1553.671350][T12892] XFS (loop9): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[ 1553.788117][    C1] hpet_rtc_timer_reinit: 5 callbacks suppressed
[ 1553.788132][    C1] hpet: Lost 1 RTC interrupts
[ 1553.860954][    C1] hpet: Lost 1 RTC interrupts
[ 1554.126628][    C1] hpet: Lost 1 RTC interrupts
[ 1554.184700][    C1] hpet: Lost 1 RTC interrupts
[ 1554.362640][T16902] loop9: detected capacity change from 0 to 4096
[ 1554.379481][T16903] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1554.452915][T16905] loop9: detected capacity change from 0 to 1024
[ 1554.470806][T16905] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[ 1554.480136][T16905] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1554.484242][T16905] EXT4-fs error (device loop9): ext4_get_journal_inode:5896: inode #32: comm syz.9.17318: iget: special inode unallocated
[ 1554.489683][T16905] loop9: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[ 1554.489902][T16905] EXT4-fs (loop9): Remounting filesystem read-only
[ 1554.494985][T16905] EXT4-fs (loop9): no journal found
[ 1554.497049][T16905] EXT4-fs (loop9): can't get journal size
[ 1554.499718][T16905] EXT4-fs (loop9): filesystem is read-only
[ 1554.502475][T16905] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1554.521150][T12892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1554.585225][ T5760] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1554.589047][ T5760] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[ 1554.593909][ T5760] asix 3-1:0.34: probe with driver asix failed with error -71
[ 1554.602908][ T5760] usb 3-1: USB disconnect, device number 36
[ 1554.845619][T16913] loop9: detected capacity change from 0 to 4096
[ 1554.964018][T16921] loop9: detected capacity change from 0 to 512
[ 1554.987806][T16921] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1554.993247][T16921] ext4 filesystem being mounted at /427/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1555.061108][T12892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1555.615465][T16948] loop2: detected capacity change from 0 to 2048
[ 1555.628293][   T31] usb 10-1: new full-speed USB device number 33 using dummy_hcd
[ 1555.663942][T16948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1555.690828][T16948] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1555.717043][T16948] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28
[ 1555.725090][T16948] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 1555.725090][T16948] 
[ 1555.728070][T16948] EXT4-fs (loop2): Total free blocks count 0
[ 1555.729850][T16948] EXT4-fs (loop2): Free/Dirty block details
[ 1555.732534][T16948] EXT4-fs (loop2): free_blocks=2415919104
[ 1555.734703][T16948] EXT4-fs (loop2): dirty_blocks=32
[ 1555.736352][T16948] EXT4-fs (loop2): Block reservation details
[ 1555.738512][T16948] EXT4-fs (loop2): i_reserved_data_blocks=2
[ 1555.783601][   T31] usb 10-1: config 253 has an invalid interface number: 254 but max is 0
[ 1555.787256][   T31] usb 10-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config
[ 1555.794305][   T31] usb 10-1: config 253 has no interface number 0
[ 1555.799747][   T31] usb 10-1: config 253 interface 254 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1555.822763][   T31] usb 10-1: New USB device found, idVendor=abc1, idProduct=8371, bcdDevice=1d.1d
[ 1555.827288][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1555.833140][   T31] usb 10-1: Product: syz
[ 1555.835033][   T31] usb 10-1: Manufacturer: syz
[ 1555.838003][   T31] usb 10-1: SerialNumber: syz
[ 1556.022972][T16948] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28
[ 1556.056443][   T31] rndis_host 10-1:253.254: skipping garbage
[ 1556.060786][   T31] rndis_host 10-1:253.254: rndis: master #0/0000000000000000 slave #1/0000000000000000
[ 1556.072101][   T31] usb 10-1: USB disconnect, device number 33
[ 1556.171895][T14851] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[ 1556.591984][   T31] usb 3-1: new full-speed USB device number 37 using dummy_hcd
[ 1556.744759][   T31] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[ 1556.748903][   T31] usb 3-1: config 0 has no interface number 0
[ 1556.751644][   T31] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1556.756463][   T31] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1556.763227][   T31] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1556.766674][   T31] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1556.769718][   T31] usb 3-1: Product: syz
[ 1556.775835][   T31] usb 3-1: SerialNumber: syz
[ 1556.781737][   T31] usb 3-1: config 0 descriptor??
[ 1556.787904][   T31] usbhid 3-1:0.8: couldn't find an input interrupt endpoint
[ 1556.828517][   T24] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[ 1556.981348][   T24] usb 10-1: Using ep0 maxpacket: 8
[ 1556.992602][   T24] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[ 1557.000472][   T24] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1557.006528][   T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1557.011184][   T31] usb 3-1: USB disconnect, device number 37
[ 1557.014235][   T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1557.019350][   T24] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1557.030664][   T24] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1557.034000][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1557.235518][   T24] usb 10-1: GET_CAPABILITIES returned 0
[ 1557.239836][   T24] usbtmc 10-1:16.0: can't read capabilities
[ 1557.437408][ T5426] usb 10-1: USB disconnect, device number 34
[ 1557.536957][T16980] loop2: detected capacity change from 0 to 8
[ 1557.544635][T16980] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1557.579902][T16980] cramfs: wrong endianness
[ 1558.424158][T16998] loop9: detected capacity change from 0 to 512
[ 1558.433448][T16998] EXT4-fs (loop9): invalid inodes per group: 4294967295
[ 1558.433448][T16998] 
[ 1559.518412][ T5426] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[ 1559.680619][ T5426] usb 10-1: Using ep0 maxpacket: 32
[ 1559.684784][ T5426] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[ 1559.692060][ T5426] usb 10-1: config 0 has no interface number 0
[ 1559.694735][ T5426] usb 10-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping
[ 1559.702402][ T5426] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1559.712150][ T5426] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1559.719095][ T5426] usb 10-1: Product: syz
[ 1559.723259][ T5426] usb 10-1: Manufacturer: syz
[ 1559.726804][ T5426] usb 10-1: SerialNumber: syz
[ 1559.734611][ T5426] usb 10-1: config 0 descriptor??
[ 1559.747143][ T5426] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1559.757766][ T5426] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22
[ 1559.911098][T17016] loop2: detected capacity change from 0 to 32768
[ 1559.970113][ T5734] usb 10-1: USB disconnect, device number 35
[ 1560.905016][   T31] usb 10-1: new high-speed USB device number 36 using dummy_hcd
[ 1561.116705][   T31] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1561.122141][   T31] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1561.128919][   T31] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1561.140974][   T31] usb 10-1: string descriptor 0 read error: -22
[ 1561.147630][   T31] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1561.157424][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1561.171017][   T31] usb 10-1: selecting invalid altsetting 1
[ 1561.173816][   T31] usb 10-1: unit 3 not found!
[ 1561.304996][ T5426] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1561.363070][   T31] usb 10-1: cannot request logical cluster ID: 0 (err: -5)
[ 1561.365582][   T31] usb 10-1: invalid MIXER UNIT descriptor 6
[ 1561.393143][   T31] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -5
[ 1561.404034][T12823] udevd[12823]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1561.448798][ T5426] usb 3-1: Using ep0 maxpacket: 32
[ 1561.453291][ T5426] usb 3-1: config 1 has an invalid interface number: 33 but max is 2
[ 1561.456516][ T5426] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1561.460909][ T5426] usb 3-1: config 1 has no interface number 2
[ 1561.463369][ T5426] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint descriptor of length 4, skipping
[ 1561.467658][ T5426] usb 3-1: config 1 interface 1 has no altsetting 0
[ 1561.473069][ T5426] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[ 1561.479231][ T5426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1561.482511][ T5426] usb 3-1: Product: syz
[ 1561.484190][ T5426] usb 3-1: Manufacturer: syz
[ 1561.486239][ T5426] usb 3-1: SerialNumber: syz
[ 1561.577520][ T5760] usb 10-1: USB disconnect, device number 36
[ 1561.692458][ T5426] usb 3-1: interface 2 not found
[ 1561.694505][ T5426] usb 3-1: selecting invalid altsetting 0
[ 1561.711936][ T5426] usb 3-1: selecting invalid altsetting 0
[ 1561.713778][ T5426] usbtest 3-1:1.1: probe with driver usbtest failed with error -22
[ 1561.716932][ T5426] usb 3-1: selecting invalid altsetting 0
[ 1561.718635][ T5426] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22
[ 1561.721384][ T5426] usb 3-1: selecting invalid altsetting 0
[ 1561.723509][ T5426] snd-ua101 3-1:1.1: probe with driver snd-ua101 failed with error -22
[ 1561.729858][ T5426] usb 3-1: USB disconnect, device number 38
[ 1562.169603][T17051] loop9: detected capacity change from 0 to 4096
[ 1562.333100][T17060] loop2: detected capacity change from 0 to 4096
[ 1562.352443][T17058] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1562.377053][T17060] ntfs3(loop2): ino=b, mi_enum_attr
[ 1562.381239][T17060] ntfs3(loop2): Failed to load $Extend (-22).
[ 1562.383144][T17060] ntfs3(loop2): Failed to initialize $Extend.
[ 1563.223276][   T33] audit: type=1400 audit(1778973225.331:20106): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17100 comm="syz.2.17400"
[ 1563.431637][T17111] loop2: detected capacity change from 0 to 256
[ 1563.799155][T17129] loop2: detected capacity change from 0 to 512
[ 1563.806638][T17129] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 1563.905415][ T5734] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[ 1564.053530][ T5734] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1564.058224][ T5734] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1564.061927][ T5734] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1564.067503][ T5734] usb 10-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[ 1564.070226][ T5734] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1564.072657][ T5734] usb 10-1: Product: syz
[ 1564.074042][ T5734] usb 10-1: Manufacturer: syz
[ 1564.075423][ T5734] usb 10-1: SerialNumber: syz
[ 1564.084088][ T5734] usb 10-1: 0:1 : does not exist
[ 1564.125534][   T31] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 1564.283267][   T31] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[ 1564.291361][   T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253
[ 1564.301934][   T31] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[ 1564.311415][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1564.314940][   T31] usb 3-1: Product: syz
[ 1564.316730][   T31] usb 3-1: Manufacturer: syz
[ 1564.318656][   T31] usb 3-1: SerialNumber: syz
[ 1564.323316][   T31] usb 3-1: config 0 descriptor??
[ 1564.327719][ T5760] usb 10-1: USB disconnect, device number 37
[ 1564.372715][   T31] gspca_main: sunplus-2.14.0 probing 055f:c630
[ 1564.881816][T17150] loop9: detected capacity change from 0 to 512
[ 1564.982660][T17150] 
[ 1564.983653][T17150] ======================================================
[ 1564.986233][T17150] WARNING: possible circular locking dependency detected
[ 1564.988794][T17150] syzkaller #0 Tainted: G             L     
[ 1564.991136][T17150] ------------------------------------------------------
[ 1564.993685][T17150] syz.9.17424/17150 is trying to acquire lock:
[ 1564.996010][T17150] ffff88811050ac18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[ 1565.000257][T17150] 
[ 1565.000257][T17150] but task is already holding lock:
[ 1565.002879][T17150] ffff888118e02f78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3db/0x710
[ 1565.006579][T17150] 
[ 1565.006579][T17150] which lock already depends on the new lock.
[ 1565.006579][T17150] 
[ 1565.010345][T17150] 
[ 1565.010345][T17150] the existing dependency chain (in reverse order) is:
[ 1565.013674][T17150] 
[ 1565.013674][T17150] -> #1 (&ei->xattr_sem){++++}-{4:4}:
[ 1565.016516][T17150]        down_write+0x96/0x200
[ 1565.018294][T17150]        ext4_destroy_inline_data+0x28/0xe0
[ 1565.020544][T17150]        ext4_do_writepages+0x51e/0x4670
[ 1565.022663][T17150]        ext4_writepages+0x241/0x3b0
[ 1565.024788][T17150]        do_writepages+0x32e/0x550
[ 1565.026697][T17150]        __writeback_single_inode+0x133/0x10e0
[ 1565.029045][T17150]        writeback_sb_inodes+0x979/0x19d0
[ 1565.031197][T17150]        wb_writeback+0x445/0xb00
[ 1565.033097][T17150]        wb_workfn+0x3f8/0xf10
[ 1565.034920][T17150]        process_scheduled_works+0xb5d/0x1860
[ 1565.037216][T17150]        worker_thread+0xa53/0xfc0
[ 1565.039187][T17150]        kthread+0x388/0x470
[ 1565.040969][T17150]        ret_from_fork+0x514/0xb70
[ 1565.042889][T17150]        ret_from_fork_asm+0x1a/0x30
[ 1565.044909][T17150] 
[ 1565.044909][T17150] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[ 1565.048006][T17150]        __lock_acquire+0x15a5/0x2cf0
[ 1565.050039][T17150]        lock_acquire+0x106/0x350
[ 1565.051968][T17150]        percpu_down_read_internal+0x48/0x1c0
[ 1565.054304][T17150]        ext4_writepages+0x205/0x3b0
[ 1565.056340][T17150]        do_writepages+0x32e/0x550
[ 1565.058269][T17150]        __writeback_single_inode+0x133/0x10e0
[ 1565.060619][T17150]        writeback_single_inode+0x4ac/0xdc0
[ 1565.062858][T17150]        write_inode_now+0x1c2/0x290
[ 1565.064860][T17150]        iput+0x8c1/0xe80
[ 1565.066505][T17150]        ext4_xattr_block_set+0x2359/0x2ad0
[ 1565.068711][T17150]        ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[ 1565.071171][T17150]        __ext4_expand_extra_isize+0x30d/0x400
[ 1565.073521][T17150]        __ext4_mark_inode_dirty+0x45c/0x710
[ 1565.075784][T17150]        ext4_evict_inode+0x986/0x10e0
[ 1565.077887][T17150]        evict+0x61e/0xb10
[ 1565.079569][T17150]        ext4_orphan_cleanup+0xc38/0x1470
[ 1565.081695][T17150]        ext4_fill_super+0x5a19/0x6330
[ 1565.083721][T17150]        get_tree_bdev_flags+0x431/0x4f0
[ 1565.085826][T17150]        vfs_get_tree+0x92/0x2a0
[ 1565.087725][T17150]        do_new_mount+0x341/0xd30
[ 1565.089663][T17150]        __se_sys_mount+0x31d/0x420
[ 1565.091644][T17150]        do_syscall_64+0x15f/0xf80
[ 1565.093583][T17150]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1565.095973][T17150] 
[ 1565.095973][T17150] other info that might help us debug this:
[ 1565.095973][T17150] 
[ 1565.099769][T17150]  Possible unsafe locking scenario:
[ 1565.099769][T17150] 
[ 1565.102550][T17150]        CPU0                    CPU1
[ 1565.104590][T17150]        ----                    ----
[ 1565.106609][T17150]   lock(&ei->xattr_sem);
[ 1565.108260][T17150]                                lock(&sbi->s_writepages_rwsem);
[ 1565.111160][T17150]                                lock(&ei->xattr_sem);
[ 1565.113754][T17150]   rlock(&sbi->s_writepages_rwsem);
[ 1565.115727][T17150] 
[ 1565.115727][T17150]  *** DEADLOCK ***
[ 1565.115727][T17150] 
[ 1565.118762][T17150] 3 locks held by syz.9.17424/17150:
[ 1565.120758][T17150]  #0: ffff88812013a0d8 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xab0
[ 1565.124551][T17150]  #1: ffff88812013a600 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10e0
[ 1565.128056][T17150]  #2: ffff888118e02f78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3db/0x710
[ 1565.131992][T17150] 
[ 1565.131992][T17150] stack backtrace:
[ 1565.134210][T17150] CPU: 1 UID: 0 PID: 17150 Comm: syz.9.17424 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1565.134235][T17150] Tainted: [L]=SOFTLOCKUP
[ 1565.134242][T17150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1565.134254][T17150] Call Trace:
[ 1565.134264][T17150]  <TASK>
[ 1565.134276][T17150]  dump_stack_lvl+0xe8/0x150
[ 1565.134298][T17150]  print_circular_bug+0x2e1/0x300
[ 1565.134324][T17150]  check_noncircular+0x12e/0x150
[ 1565.134348][T17150]  __lock_acquire+0x15a5/0x2cf0
[ 1565.134396][T17150]  ? __pfx_hlock_conflict+0x10/0x10
[ 1565.134414][T17150]  ? __bfs+0x153/0x290
[ 1565.134431][T17150]  ? __pfx_hlock_conflict+0x10/0x10
[ 1565.134454][T17150]  ? ext4_writepages+0x205/0x3b0
[ 1565.134475][T17150]  lock_acquire+0x106/0x350
[ 1565.134491][T17150]  ? ext4_writepages+0x205/0x3b0
[ 1565.134514][T17150]  percpu_down_read_internal+0x48/0x1c0
[ 1565.134534][T17150]  ? ext4_writepages+0x205/0x3b0
[ 1565.134553][T17150]  ext4_writepages+0x205/0x3b0
[ 1565.134574][T17150]  ? __pfx_ext4_writepages+0x10/0x10
[ 1565.134599][T17150]  ? do_raw_spin_unlock+0x4d/0x210
[ 1565.134620][T17150]  ? __pfx_ext4_writepages+0x10/0x10
[ 1565.134636][T17150]  do_writepages+0x32e/0x550
[ 1565.134658][T17150]  __writeback_single_inode+0x133/0x10e0
[ 1565.134679][T17150]  ? do_raw_spin_unlock+0x4d/0x210
[ 1565.134698][T17150]  writeback_single_inode+0x4ac/0xdc0
[ 1565.134717][T17150]  write_inode_now+0x1c2/0x290
[ 1565.134742][T17150]  ? __pfx_write_inode_now+0x10/0x10
[ 1565.134772][T17150]  ? do_raw_spin_unlock+0x4d/0x210
[ 1565.134793][T17150]  iput+0x8c1/0xe80
[ 1565.134815][T17150]  ext4_xattr_block_set+0x2359/0x2ad0
[ 1565.134843][T17150]  ? __pfx___ext4_get_inode_loc+0x10/0x10
[ 1565.134860][T17150]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[ 1565.134878][T17150]  ? ext4_xattr_block_find+0xea/0x350
[ 1565.134897][T17150]  ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[ 1565.134923][T17150]  __ext4_expand_extra_isize+0x30d/0x400
[ 1565.134941][T17150]  __ext4_mark_inode_dirty+0x45c/0x710
[ 1565.134963][T17150]  ext4_evict_inode+0x986/0x10e0
[ 1565.134987][T17150]  ? __pfx_ext4_evict_inode+0x10/0x10
[ 1565.135010][T17150]  ? do_raw_spin_unlock+0x4d/0x210
[ 1565.135029][T17150]  ? __pfx_ext4_evict_inode+0x10/0x10
[ 1565.135050][T17150]  evict+0x61e/0xb10
[ 1565.135068][T17150]  ? __pfx_evict+0x10/0x10
[ 1565.135083][T17150]  ? _raw_spin_unlock+0x28/0x50
[ 1565.135099][T17150]  ? iput+0xb25/0xe80
[ 1565.135121][T17150]  ext4_orphan_cleanup+0xc38/0x1470
[ 1565.135150][T17150]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 1565.135171][T17150]  ? ext4_register_li_request+0x640/0x720
[ 1565.135192][T17150]  ? errseq_check_and_advance+0x66/0x120
[ 1565.135210][T17150]  ext4_fill_super+0x5a19/0x6330
[ 1565.135238][T17150]  ? __pfx_ext4_fill_super+0x10/0x10
[ 1565.135257][T17150]  ? snprintf+0xe8/0x140
[ 1565.135273][T17150]  ? __pfx_snprintf+0x10/0x10
[ 1565.135287][T17150]  ? set_blocksize+0x1c9/0x440
[ 1565.135311][T17150]  ? sb_set_blocksize+0x155/0x240
[ 1565.135332][T17150]  ? setup_bdev_super+0x4c1/0x5b0
[ 1565.135347][T17150]  get_tree_bdev_flags+0x431/0x4f0
[ 1565.135393][T17150]  ? __pfx_ext4_fill_super+0x10/0x10
[ 1565.135414][T17150]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 1565.135434][T17150]  vfs_get_tree+0x92/0x2a0
[ 1565.135450][T17150]  do_new_mount+0x341/0xd30
[ 1565.135470][T17150]  ? apparmor_capable+0x126/0x170
[ 1565.135488][T17150]  ? __pfx_do_new_mount+0x10/0x10
[ 1565.135506][T17150]  ? ns_capable+0x89/0xe0
[ 1565.135526][T17150]  ? user_path_at+0xd4/0x160
[ 1565.135550][T17150]  __se_sys_mount+0x31d/0x420
[ 1565.135573][T17150]  ? __pfx___se_sys_mount+0x10/0x10
[ 1565.135593][T17150]  ? __x64_sys_mount+0x20/0xc0
[ 1565.135612][T17150]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1565.135628][T17150]  do_syscall_64+0x15f/0xf80
[ 1565.135648][T17150]  ? trace_irq_disable+0x3b/0x140
[ 1565.135671][T17150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1565.135689][T17150] RIP: 0033:0x7fc8b399e04a
[ 1565.135707][T17150] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1565.135724][T17150] RSP: 002b:00007fc8b1bf5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1565.135748][T17150] RAX: ffffffffffffffda RBX: 00007fc8b1bf5ee0 RCX: 00007fc8b399e04a
[ 1565.135761][T17150] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fc8b1bf5ea0
[ 1565.135773][T17150] RBP: 0000200000000180 R08: 00007fc8b1bf5ee0 R09: 0000000000000000
[ 1565.135785][T17150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[ 1565.135795][T17150] R13: 00007fc8b1bf5ea0 R14: 000000000000047a R15: 0000200000000b40
[ 1565.135814][T17150]  </TASK>
[ 1565.281387][    C1] hpet: Lost 18 RTC interrupts
[ 1565.295736][ T5760] usb 3-1: USB disconnect, device number 39
[ 1565.306044][T17150] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.17424: iget: bad extra_isize 58 (inode size 256)
[ 1565.311501][T17150] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1565.311824][T17150] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.17424: error while reading EA inode 11 err=-117
[ 1565.314836][    C1] EXT4-fs (loop9): error count since last fsck: 1
[ 1565.314848][    C1] EXT4-fs (loop9): initial error at time 1778973227: ext4_xattr_inode_iget:441: inode 11
[ 1565.314863][    C1] EXT4-fs (loop9): last error at time 1778973227: ext4_xattr_inode_iget:441: inode 11
[ 1565.329770][T17150] loop9: lost filesystem error report for type 5 error -117
[ 1565.330258][T17150] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.17424: iget: bad extra_isize 58 (inode size 256)
[ 1565.336785][T17150] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1565.337378][T17150] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.17424: error while reading EA inode 11 err=-117
[ 1565.344597][T17150] loop9: lost filesystem error report for type 5 error -117
[ 1565.345023][T17150] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #18: comm syz.9.17424: iget: bad extra_isize 58 (inode size 256)
[ 1565.352937][T17150] loop9: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[ 1565.353754][T17150] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.17424: error while reading EA inode 18 err=-117
[ 1565.361731][T17150] loop9: lost filesystem error report for type 5 error -117
[ 1565.362110][T17150] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #18: comm syz.9.17424: iget: bad extra_isize 58 (inode size 256)
[ 1565.368067][T17150] loop9: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[ 1565.368665][T17150] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.17424: error while reading EA inode 18 err=-117
[ 1565.375965][T17150] loop9: lost filesystem error report for type 5 error -117
[ 1565.376238][T17150] EXT4-fs (loop9): 1 orphan inode deleted
[ 1565.380554][T17150] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1565.394970][T12892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1569.793823][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[ 1569.796875][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
