last executing test programs:

9m53.46503897s ago: executing program 1 (id=1353):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

9m53.40727531s ago: executing program 1 (id=1356):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000f7b40a000000000000850000001100000095"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94)

9m53.237482155s ago: executing program 1 (id=1361):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000940)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5ff2cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb69658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d96700e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b030000002dd1272a3d1609bed545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddbf418ac1b3d4a13839e4b273c4f914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a402ec56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177df97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf6b60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b808451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f5035d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fb4d8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e03c400"/2303], 0xff, 0x5f19, &(0x7f0000005300)="$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")
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2956c7e, 0x0, 0x3, 0x0, &(0x7f0000000080))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

9m53.027867414s ago: executing program 1 (id=1362):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

9m52.634355957s ago: executing program 1 (id=1364):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8)

9m52.497477468s ago: executing program 1 (id=1365):
r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000040)=0x7)
ppoll(&(0x7f00000000c0)=[{r0, 0x50a2}], 0x1, 0x0, 0x0, 0x0)

9m52.427966199s ago: executing program 32 (id=1365):
r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000040)=0x7)
ppoll(&(0x7f00000000c0)=[{r0, 0x50a2}], 0x1, 0x0, 0x0, 0x0)

9m0.036699729s ago: executing program 0 (id=2355):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @pix={0x7, 0x3, 0x52424752, 0x5, 0x0, 0x8, 0x4, 0x4cb1, 0x0, 0x1747eadc38624735, 0x1, 0x7}})

9m0.036267612s ago: executing program 0 (id=2357):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
listen(r1, 0xfffffc01)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

8m59.926937944s ago: executing program 0 (id=2358):
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000100)=0x6, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="8000379bfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0xe20, 0xfffffffe, @local, 0x4}, 0x1c)

8m59.926672329s ago: executing program 0 (id=2359):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f00000000c0)={[{@nls={'nls', 0x3d, 'iso8859-4'}}, {@barrier}, {@part={'part', 0x3d, 0x1fb38dde}}, {@force}, {@umask={'umask', 0x3d, 0x8}}, {@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$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")
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

8m59.832090882s ago: executing program 0 (id=2360):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)

8m59.617365557s ago: executing program 0 (id=2361):
syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x160202)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000480)="0000000000000004000000850800", 0xe, 0x800, &(0x7f0000000540)={0x11, 0x18, r2, 0x1, 0x0, 0x6, @local}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

8m59.558717342s ago: executing program 33 (id=2361):
syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x160202)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000480)="0000000000000004000000850800", 0xe, 0x800, &(0x7f0000000540)={0x11, 0x18, r2, 0x1, 0x0, 0x6, @local}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

4m34.734147899s ago: executing program 3 (id=6083):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$eJzs3d9rXFUeAPDvnWSStJ1u0t3C/njZbtvdLpTOZLKk0IVlW/ZhF9aC2D+gxmQaQyaZkJnUJBRM/wUVLfggIvjki6DvRcRXfRH1QXzxSRAtFRF8GJk7kzZNMklImkzNfD5wuPfcO5nvORnu+c6cSe4JoGudioiViOiLiGcjYrB1PGmVuNwsjcfdv3drvFGSqNevfZek5xv1WPMzDcdazzkQEc/8N+K5ZGPc6tLy9Fi5XJpv1Qu1mblCdWn5wtTM2GRpsjQ7Mjx6abR4sVgsPra+vvRj7venP7j8rzeeeuvjt99bXEzW9HdtP3ZrZZNjza5nI7fmWG9E/H+vwZ4QPa3+9HW6IexKJiJ+GxGn0+t/MHrSVxMAOMzq9cGoD66tAwCHXePzfy6STL41F5CLTCafb87hnYyjmXKlWjt/o7IwOxHpHNZQZDM3psql4dbc2VBkk0a9mO4/rI+sq/8jIk5ExCv9R9J6frxSnujkGx8A6GLH1uX/H/qb+R8AOOQGOt0AAODAyf8A0H3kfwDoPvI/AHQf+R8Auo/8DwDdR/4HgK7y9NWrjVJfvf/1xM2lhenKzQsTpep0fmZhPD9emZ/LT1Yqk+k9e2a2e75ypTJ3MWYXFgu1UrVWqC4tX5+pLMzWrqf39b5eyh5IrwCArZz4890vkohY+eeRtMSatRzkajjcMp1uANAxPZ1uANAxVvuC7uUzPrDJEr1rZNv/idCd3cc09wCdde6P5v+hW8nB0L3M/0P3Mv8P3ateT6z5DwBdZjdz/Jf34X0I0Dlbf/+/xS1C9vD9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPza5dKSZPKttcBzkcnk8xHHI2IossmNqXJpOCJ+ExGf92f7G/VipxsNAOxR5puktf7XucGzufVn+5Kf+tNtRLzw+rXXFsdqtfli4/j3D47X7rSOj3Si/QDAdlbz9GoeX3X/3q3x1XKQ7fn2SnNx0Y3xe6M33Q5ENiKO3k9a9abG+5WexxB/5XZE/GGz+EnkIo4MtVY+XR+/Efv4/sePh/Ezj8TPpOea28bv4nePoS3Qbe5eaS5ovvH6y8SpdLv59T+QjlB71378yzwY/3rajH+ndtrHjwb/1zb+7Yg/9W4+/qzGT9rEP7vD+F9Xvny53bn6mxHnNs0/ySOxCrWZuUJ1afnC1MzYZGmyNDsyPHpptHixWCwW0jnqwupM9Ub/fvWzF7fq/9E28Qe26f9fd9j/rz75z4d/2SL+389s/vqf3CJ+Iyf+bYfx3znz/vPtzjXiT7Tp/3av//kdxr/76bs/7/ChAMABqC4tT4+Vy6V5O3b2c6fvyWiGnZ3udHpkAvbbw4u+0y0BAAAAAAAAAAAAAADaOYh/J+p0HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi8fgkAAP//ZCDc4A==")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xffffffff}}}, {{@arp={@local, @multicast2, 0x0, 0xff000000, 0x10, 0x4, {@mac, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x7, 0xde35, 0x5, 0xd88, 0x9, 0x9, 'veth0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x242}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="16e4ec77bff1", @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)

4m34.470479008s ago: executing program 3 (id=6086):
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0)

4m34.311523049s ago: executing program 3 (id=6089):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r0, 0x5607, 0x4)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x4)

4m34.14820173s ago: executing program 3 (id=6090):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r1, 0x5a)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x5, 0x42}]}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c)
sendmmsg$inet(r2, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="abc9d5f5f4e2ebd6fdb549be4af901e93738b57eaf5d64030000005246bda49640092f", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000004200)="beadcc21615db5adf0841f6384707f1cb8cd5253721a61310e4f630cb4ef44a6ef2389c61b5c1095d821e1635410602b10ad310a6644", 0x36}], 0x1, &(0x7f0000001d40)}}], 0x2, 0x48045)
close_range(r1, 0xffffffffffffffff, 0x0)

4m34.099649895s ago: executing program 3 (id=6091):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x43, 0x62f8, &(0x7f0000019f80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xe042, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

4m33.725543241s ago: executing program 3 (id=6092):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x2, 0x2}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x80041, 0x4}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
close_range(r0, 0xffffffffffffffff, 0x0)

4m33.562527635s ago: executing program 34 (id=6092):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x2, 0x2}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x80041, 0x4}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
close_range(r0, 0xffffffffffffffff, 0x0)

1m59.515074725s ago: executing program 2 (id=8023):
r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x52, 0x30, 0x2c, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x35, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)='\'\x00', r0)

1m59.415126034s ago: executing program 2 (id=8026):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000002fc0), &(0x7f0000003000)=0x4)

1m59.35074848s ago: executing program 2 (id=8028):
r0 = io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x3800})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, &(0x7f0000000300)={&(0x7f0000001000), 0x1000}, &(0x7f0000000200)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1)
mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x30000000)

1m59.289812507s ago: executing program 2 (id=8029):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1m59.259015558s ago: executing program 2 (id=8031):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m59.17523765s ago: executing program 2 (id=8032):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x12, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})

1m42.864633745s ago: executing program 35 (id=8032):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x12, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})

1m0.526030065s ago: executing program 5 (id=8630):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000380)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x8040, &(0x7f0000000100)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c)
getpeername(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000340))

1m0.299243854s ago: executing program 5 (id=8631):
fchmod(0xffffffffffffffff, 0x90)

1m0.244786416s ago: executing program 5 (id=8632):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="4700000001003f", 0x7)

1m0.157433041s ago: executing program 5 (id=8633):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000280)=ANY=[], 0x1, 0x1f5, &(0x7f0000000600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000100)=0xe)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x6, 0xf11, &(0x7f0000001e80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0)
r3 = io_uring_setup(0x3a8c, &(0x7f0000000040)={0x0, 0xc89d, 0x80, 0x4, 0x134})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000200))

59.9500021s ago: executing program 5 (id=8635):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@mcast1, @mcast2, @mcast2, 0x0, 0x70, 0x5, 0x400, 0xf9b, 0x200})

59.24599966s ago: executing program 5 (id=8638):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "b928a7020253641e", "e282d495ff61cdd0c6df00e85dc14e09", "7ec8b2c1", "39ab3e87f65cfcb9"}, 0x28)
sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000)
sendto$inet6(r0, &(0x7f0000000300)="c62ee5d6a8ec1dc4f4d714ffff87cb40", 0x10, 0x8040, 0x0, 0x0)
write$binfmt_elf64(r0, 0x0, 0x78)

59.002989363s ago: executing program 36 (id=8638):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "b928a7020253641e", "e282d495ff61cdd0c6df00e85dc14e09", "7ec8b2c1", "39ab3e87f65cfcb9"}, 0x28)
sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000)
sendto$inet6(r0, &(0x7f0000000300)="c62ee5d6a8ec1dc4f4d714ffff87cb40", 0x10, 0x8040, 0x0, 0x0)
write$binfmt_elf64(r0, 0x0, 0x78)

3.758218767s ago: executing program 4 (id=9294):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000)
read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

2.761570309s ago: executing program 4 (id=9295):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x4001)
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10804, &(0x7f0000002440)=ANY=[@ANYBLOB='uinue,uid=\x00'/25, @ANYRES64=r2, @ANYBLOB="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", @ANYBLOB="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", @ANYRES16, @ANYBLOB], 0x1, 0x1534, &(0x7f0000000cc0)="$eJzs3AucTVX7OPDnWWvtMSSdJtdhrfVsTnJZJEkuSXJJktQrSW4JSZO8kpAYcksakpBchuQyhOQWk8b9fr8kJMk7SZJbbsn6fybmr97q/9568/v/5vl+Pvsza83az9rPPs+cffbe55z5pvOQmo1qVWtARPAfwUs/EgEgFgAGAMB1ABAAQLm4cnEZ49klJv5nG2F/rIdTrnYG7Gri+mdtXP+sjeuftXH9szauf9bG9c/auP5ZG9efsaxs87QC1/OSdRe+/5+V8ev//yLppcZ8ubZUni4AMf9sCNf//3/4H8Ry/f/XCv6Zlbj+WRvXP6uKvdoJsP8B+PmfFWT73RGuf9bG9WcsK/v5veBYuPr3o//sBSL/zfdAfM9Lj/LV38/f3X/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xPcNZfoQAgs32182KMMcYYY4wxxtgfx2e72hkwxhhjjDHGGGPsvw9BgAQFAcRANoiF7JADBEBM5vj1EAc3QG7IA3khH+SHAhAPBaEQaDBggSCEwlAEonAjFIWboBgUhxJQEhyUgtJwM5SBW6As3Arl4DYoD7dDBagIlaAy3AFV4E6oCndBNbgbqkMNqAm14B6oDfdCHbgP6sL9UA8egPrwIDwEf4EG8DA0hEegETwKjeExaAJNoRk0hxb/VvyL0B1egh7QExKhF/SGl6EP9IV+0B8GwCswEF6FQfAaJMFgGAKvw1B4A4bBmzAcRsBIeAtGwdswGsbAWBgHyTAeJsA7MBHehUkwGabAVEiBaTAd3oMZMBNmwfswGz6AOTAX5qmMx/NDWAiLIBU+gsXwMaTBElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDvsgJ3wCeyCT2E37IG98Bnsg8//xfgzfxffBQEBBQpUqDAGYzAWYzEH5sCcmBNzYS6MYATjMA5zY27Mi3kxP+bHeIzHQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOiyNpbEM3oJlsSyWw3JYHstjBayIFbEyVsYqWAWrYlWshtWwOlbHmlgT78F7sBfWwTpYF+tiPayXeXsKG2ADbIgNsRE2wsbYGJtgE2yGzbAFtsCW2BJbYStsg22wLbbFdtgOEzAB22N77IAdsCN2xE7YCTtjZ+yCXbFr+ovZAF/Cl7AnVhe9sDf2xj6YlK0f9sf++AoOxFfxVXwNk3AwDsHX8XV8A4fhaRx+cQSOxJFYRbyNo3EMkhiHyZiME3ACTsSJOAkn42Sciik4DafjdJyBM3Emvo+z8QP8AOfiXJyPC3ABLsRFmIqpuBjPYBouwaW4DJfjClyOq3A1rsK1uA7X4gbcgJtwE27BLbgNt+EO3IGfoALAT3EP7sEk3If7cD/uxwN4AA/iQUzHdDyEh/AwHsYjeASP4lE8hsfxBB7HU3gKT+MZPItn8Tyexwv4fPxXDT8pviYJRAYllIgRMSJWxIocIofIKXKKXCKXiIiIiBNxIrfILfKKvCK/yC/iRbwoJAoJI4wgEeYBABEVUVFUFBXFRDFRQpQQTjhRWpQWZUQZUVaUFeXEbaK8uF1UEBVFa1dZVBZVRBtXVdwlqolqorqoIWqKWqKWqC1qizqijqgr6op6op6oLx4UD4le2A8fFhmVaSQGY2MxBJuIpkJePkK1FMOwlWgt2ognxQgcju1ES5cgnhHtxWjsIP4qxuBzopMYh53FC6KL6Cq6iRdFd9HK9RA9xSTsJXqLqdhH9BX9RH8xA2uI93F29priNZEkBosh4nUxH98Qw8SbYrgYIUaKt8Qo8bYYLcaIsWKcSBbjxQTxjpgo3hWTxGQxRUwVKWKamC7eEzPETDFLvC9miw/EHDFXzBPzxQLxoVgoFolU8ZFYLD4WaWKJWCqWieVihVgpVonVYo1YK9aJ9WKD2Cg2ic1ii9gqtontYofYKT4Ru8SnYrfYI/aKz8Q+8bnYL74QB8SX4qD4m0gXX4lD4mtxWHwjjohvxVHxnTgmjosT4qQ4Jb4Xp8UZcVacE+fFD+KC+FFcFF6ARCmklEoGMkZmk7Eyu8whr5E5ZZB5/Jdx8gaZW+aReWU+mV8WkPGyoCwktTTSSpKhLCyLyKi8URaVN8lisrgsIUtKJ0vJ0vJmWUbeIsvKW2U5eZssL2+XFWRFWUlWlnfIKvJOCZFL26gua8iaspa8RybCvbKOvE/WlffLevIBWV8+mHGMyiAbykdkI/mobCwfk01kU9lMNpct5OOypXxCtpKtZRv5pGwrn5Lt5NMyQT4j20t/+U/kOdlJPi87yxdkF9lVdpM/yovSyx6yp4ReIHvLl2Uf2Vf2k/3lAPmKHChflYPkazJJDpZD5OtyqHxDDpNvyuFyhBwp35Kj5NtytBwjx8pxMlmOlxPkO3KifFdOkpPlFDlVpshpst/lmWZJ+Q/j3/mN+EE/bX2T3Cy3yK1ym9wud8id8hO5S+6Su+VuuVfulfvkPrlf7pcH5AF5UB6U6TJdHpKH5GF5WB6RR+RReVQek8flOXlSnpLfy9PyjDwjz8nz8ry8cPkxAIVKKKmUClSMyqZiVXaVQ12jcqprVS51nYqo61WcukHlVnlUXpVP5VcFVLwqqAoprYyyilSoCqsiKqpuxMt/MKqEKqmcKqVKq5v/lXhVVN2kiqniv4jPzC/xd/JroVqolqqlaqVaqTaqjWqr2qp2qp1KUAmqvWqvOqgOqqPqqDqpTqqz6qy6qC6qm+qmuqvuqofqoRJVouqtXlZ9VF/VT/VXA9QrImMfBqlBKkklqSFqiBqqhqphapgaroarkWqkGqVGqdFqtBqrxqpklawmqAlKqolqkpqkpqgpKkWlqOlqupqhZqhZapaarWarOWqOmqfmqQVqgVqoFqpUlaoWq8UqTS1RS9QytUytUCvUKrVKrVFr1Dq1Tm1QG1Sa2qw2q61qq9qutqudaqfapXap3Wq32qv2qn1qn9qv9qsD6oA6qA6qdJWuDqlD6rA6rI6oI+qoOqqOqWPqhDqhTqlT6rQ6rc6qs+q8Oq8uqAvqorqYcdoXiEAEKlBBTBATxAaxQY4gR5AzyBnkCnIFkSASxAVxQe4gT5A3yBfkDwoE8UHBoFCgAxPYQFwuejS4MSga3BQUC4oHJYKSgQtKBaWDm4MywS1B2eDWoFxwW1A+uD2oEFQMKgWVgzuCKsGdQdXgrqBacHdQPagR1AxqBfcEtYN7gzrBfUHd4P6gXvBAUD94MHgo+EvQIHg4aBg8EjQKHg0aB48FTYKmQbOgedDi35gf4ffm9/50vidcD91TJ+peurd+WffRfXU/3V8P0K/ogfpVPUi/ppP0YD1Ev66H6jf0MP2mHq5H6JH6LT1Kv61H6zF6rB6nk/V4PUG/oyfqd/UkPVlP0VN1ip6mp+v39Aw9U8/S7+vZ+gM9R8/V8/R8vUB/qBfqRTpVf6QX6491ml6il+plerleoVfqVXq1XqPX6nV6vd6gN+pNerPeorfqbXq73qF36k/0Lv2p3q336L36M71Pf6736y/0Af2lPqj/ptP1V/qQ/lof1t/oI/pbfVR/p4/p47qsPqlP6e/1aX1Gn9Xn9Hn9g76gf9QXtc84uc94eTfKKBNjYkysiTU5TA6T0+Q0uUwuEzERE2fiTG6T2+Q1eU1+k9/Em3hTyBQyGciQKWwKm6iJmqKmqClmipkSpoRxxpnSprQpY8qYsqasKWfKmfKmvKlgKphKppK5w9xh7jR3mrvMXeZuc7epYWqYWqaWqW1qmzqmjqlr6pp6pp6pb+qbh8xDpoFpYBqahqaRaWQam8amiWlimplmpoVpYVqalqaVaWXamDamrWlr2pl2JsEkmPamvelgOpiOpqPpZDqZzqaz6WK6mG6mm+luupsepodJNImmt+lt+pg+pp/pZwaYAWagGWgGmUEmySSZIWaIGWqGmmFmmBluRpiRGSeq5m0z2owxY804k2ySzQQzwUw0E80kM8lMMVNMikkx0810M8PMMLPMLDPbzDZzzBwzz8wzC8wCs9AsNKkm1Sw2i02aSTNLzVKz3Cw3K81Ks9qsNmvNWrMe1puNZqPZbDabrWar2W62m51mp9lldpndZrfZa/aafWaf2W/2mwPmgDloDpp0k24OmUPmsDlsjpgj5qg5ao6ZY+aEOWFOmVPmtDltzpqz5rzJd/n10ptYm93msNfYnPZam8teZ/++n98WsPG2oC1ktc1r8/2ib6y1xWxxW8KWtM6WsqXtzb/qV7AVbSVb2d5hq9g7bdVf9Wvbe20de5+ta++3tew9v+jXsw/Y+vZR+xAigG1qG9rmtpF91Da2j9kmtqltZpvbtvYp284+bRPsM7a9ffZX/YV2kV1t19i1dp3dbffYs/acPWy/seftD7aH7WkH2FfsQPuqHWRfs0l28K/6I+1bdpR92462Y+xYO+5X/Sl2qk2x0+x0+56dYWf+qr/Afmhn21Q7x8618+z8n/oZOaXaj+xi+7FNswEstcvscrvCrrSr/m+uy+wGu9Fusrvsp3ar3Wa32x12Z+aJsN1j99rP7D77uT1kv7YH7Jf2oD1i0+1XP/Uz9u+I/dYetd/ZY/a4PWFP2lP2e5UZnbHvJ+2P9qL1FggJSJKigGIoG8VSdspB11BOupZy0XUUoespjm6g3JSH8lI+yk8FKJ4KUiHSZMgSUUiFqQhF6UbKTK8ElSRHpag03Uxl6BYqS7dSObqNytPtVIEqUiWqTHdQFbqTqtJdVI3upupUg2pSLbqHatO9VIfuo7p0P9WjB6g+PUgP0V+oAT1MDekRakSPUmN6jJpQU2pGzakFPU4t6QlqRa2pDT1JbekpakdPUwI9Q+3pWepAf6WO9Bx1ouepM71AXagrdaMXqTu9RD2oJyVSL+pNL1Mf6kv9qD8NoFdoIL1Kg+g1SqLBNIRep6H0Bg2jN2k4jaCR9BaNordpNI2hsTSOkmk8TaB3aCK9S5NoMk2hqZRC02g6vUczaCbNovdpNn1Ac2guzaP5tIA+pIW0iFLpI1pMH1MaLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDtpJn9Au+pR20x7aS5/RPvqc9tMXdIC+pIP0N0qnr+gQfU2H6Rs6Qt/6nvQdHaPjdIJO0in6nk7TGTpL5+g8/UAX6Ee6SJ4gxFCEMlRhEMaE2cLYMHuYI7wmzBleG+YKrwsj4fVhXHhDmDvME+YN84X5wwJhfFgwLBTq0IQ2pDAMC4dFwmh4Y1g0vCksFhYPS4QlQxeWCkuHN4dlwlvCsuGtYbnwtrB8eHtYIawYPnp/5fCOsEp4Z1g1vCusFt4dVg9rhDXDWuE9Ye3w3rBOeF9YN7w/LBs+ENYPHwwfCv8SNggfDhuGj4SNwkfDxuFjYZOwadgsbB62CB8PW4ZPhK3C1mGb8JqwbfhU2C58OkwInwnbh8/+NP7AoszxJ381nhj2CnuHL4cvh97fJ+dF50cXRD+MLowuiqZGP4oujn4cTYsuiS6NLosuj66Iroyuiq6Oromuja6Lro9uiG6Mbop6XysbOHTCSadc4GJcNhfrsrsc7hqX013rcrnrXMRd7+LcDS63y+Pyunwuvyvg4l1BV8hpZ5x15EJX2BVxUXejK+pucsVccVfClXTOlXKlXXPXwrVwLd0TrpVr7dq4J92T7in3lHvaPe2ece3ds66D+6vr6J5zndzz7nn3guviurpu7kXX3Y3Pdek5meh6u96uj+vj+rl+boAb4Aa6gW6QG+SSXJIb4oa4oW6oG+aGueFuuBvpRrpRbpQb7Ua7sW6sS3bJboKb4Ca6iW6Sm+SmuCkuxaW46W66m+FmuCozL21ljpvj5rl5boFb4Ba6jHPGVLfYLXZpLs0tdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e10O90ut8vt9tddmtTtc/vdfnfAHXAH3d9cuvvKHXJfu8PuG3fEfeuOuu/cMXfcnXAn3Sn3vTvtzriz7pw7735wF9yP7qLzLjkyPjIh8k5kYuTdyKTI5MiUyNRISmRaZHrkvciMyMzIrMj7kdmRDyJzInMj8yLzIwsiH0YWRhZFUiMfRRZHPo6kRZZElkaWRZZHVkS8L7g19IV9ER/1N/qi/iZfzBf3JXxJ73wpX9rf7MtcyjvN+9t8eX+7r+Ar+kr+Md/EN/XNfHPfwj/uW/onfCvf2rfxT/q2/infzj/tE/wzvr1/1nfwf/Ud/XO+k3/ed/Yv+C6+q+/mX/Td/Uu+h+/pE30v39u/7Pv4vr6f7+8H+Ff8QP+qH+Rf80l+sB/iX/dD/Rt+mH/TD/cj/MiYt/yozEtkGOeT/Xg/wb/jJ/p3/SQ/2U/xU32Kn+an+/f8DD/Tz/Lv+9n+Az/Hz/Xz/Hy/wH/oF/pFPtV/5Bf7j32aX5J509iv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/D7/Sf+F3+U7/b7/F7/Wd+n//c7/df+AMXM7+B9pU/5L/2h/03/oj/1h/13/lj/rg/4U/6U/57f9qf8Wf9OX/e/+Av+B/9Rf7OGmOMMcbYP2X8lab45cil2/m9fiNG/Gzl3gBw7bYC6T8fzzijXJ/3UruviI/N+PlMz84PZy7VqycmJl5eN01CUGQuQOY7QRl++ujB5X7Gek9BArSGMr+Zf1/R9Tz9g/mjtwHk+FlMRkKZ/SXQ5vL8XwBg4m/M//iTIxeWD8/G/T/mnwtQrMiVmOxwpb8E2vx0f6U1lP2d/PO1/Af5Z/8yGaDVz2JywpX+lfxLwxPwLCT8Yk3GGGOMMcYYY+ySvqJSx8zrz8xPfP7W9Xm8uhKTDa70r1x//vb1OWOMMcYYY4wxxq6+57p2e/rxhITWHf/1RtV/K+qfbjSG/9bM3PjNhvcAmb9RAPAfTgiQ0ZB/5l5s+VO2lXT5qfP3Q8vP+QD+Z5Tyj2hc5QMTY4wxxhhj7A935aT/l79XVyshxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsC/oz/p3Y1d5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Gr7PwEAAP//kFH3Jw==")
ftruncate(0xffffffffffffffff, 0x6000000)
llistxattr(0x0, 0x0, 0x0)
getresgid(&(0x7f00000000c0), 0x0, &(0x7f0000000280))

1.770420741s ago: executing program 4 (id=9302):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000a40)=""/4083, 0xff3}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000100)=""/21, 0x15}], 0x6}, 0xd}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}}], 0x4, 0x40000102, 0x0)

1.627635274s ago: executing program 4 (id=9304):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000002f80)=""/54)

1.627387281s ago: executing program 4 (id=9305):
socket$kcm(0xa, 0x3, 0x106)
socket$kcm(0xa, 0x3, 0x106)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)

1.627124134s ago: executing program 6 (id=9306):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x28)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)

1.568262243s ago: executing program 6 (id=9307):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
landlock_restrict_self(r0, 0xa)

1.567925447s ago: executing program 4 (id=9308):
syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x109002, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x6fa)
read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c)
write$dsp(r0, &(0x7f0000002000)='`', 0x88020)

1.479438927s ago: executing program 6 (id=9310):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b405000000000000611065000000000063512c00000000009500090000000000bf63f052d770fc29938a4ed5ee28b4453c2f3ad7c588418d133edd223896d40e0cc45dbb0fc4df32b52baef6d8c3ed43061e7a4886615ef7ef8fa9e4527a5df9d215ff5a661ec4c600a5c5a0ebb1497389438211946cf0d488491bd943f1d541d6c5f641a23640d1e625427bf6adefe0fc7a571fd775cfa88787ef006f13e3d316857e65edbaff143c0eb355898a14eccd4200d877f0287fe57ddc6f66e9c83cd8d87f4330b2bc85bbefae52aa39534a5504bd86915950360a698748203215d3743949c63f3623f4f4149d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)

1.416605404s ago: executing program 6 (id=9312):
syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd0233776100090507dfff03814006090587", @ANYBLOB="339f8f"], 0x0)

171.178514ms ago: executing program 7 (id=9327):
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x80000001)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x80000024)
close(0x3)

171.04143ms ago: executing program 7 (id=9328):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000cbfffbff00000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

105.10243ms ago: executing program 7 (id=9329):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000004bc0), r0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004c80)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf251e000000080004000100000008000100bb92"], 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x10)

104.922787ms ago: executing program 6 (id=9330):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffd, 0x8000000000010, 0x7, 0x7, 0x0, 0x4], 0x1, 0x0, 0x0, [{}]}, 0x88)

104.846633ms ago: executing program 7 (id=9331):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000005200010000000000000000000a0000000c000100feffffff"], 0x20}}, 0x0)

584.298µs ago: executing program 7 (id=9332):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1c}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

257.72µs ago: executing program 6 (id=9333):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl(r0, 0x3b8f, &(0x7f00000000c0)="280000000600")

0s ago: executing program 7 (id=9334):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0)
close(r1)

0s ago: executing program 6 (id=9335):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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")

kernel console output (not intermixed with test programs):

dding VLAN 0 to HW filter on device team0
[  607.836684][T16298] bridge0: port 1(bridge_slave_0) entered blocking state
[  607.839134][T16298] bridge0: port 1(bridge_slave_0) entered forwarding state
[  607.855143][T16298] bridge0: port 2(bridge_slave_1) entered blocking state
[  607.857562][T16298] bridge0: port 2(bridge_slave_1) entered forwarding state
[  607.946685][T25358] tcpci 0-0050: Can't find connector node.
[  607.951820][T25358] tcpci 0-0050: probe with driver tcpci failed with error -22
[  607.964611][T25358] i2c i2c-0: new_device: Instantiated device tcpci at 0x50
[  608.014740][T25358] tcpci 0-0051: Can't find connector node.
[  608.058122][T25362] net_ratelimit: 13 callbacks suppressed
[  608.058135][T25362] IPVS: sed: FWM 3 0x00000003 - no destination available
[  608.063073][T25358] tcpci 0-0051: probe with driver tcpci failed with error -22
[  608.063912][T25358] i2c i2c-0: new_device: Instantiated device tcpci at 0x51
[  608.066866][T20339] IPVS: starting estimator thread 0...
[  608.182653][T25363] IPVS: using max 88 ests per chain, 211200 per kthread
[  608.257146][T25372] netlink: 260 bytes leftover after parsing attributes in process `syz.5.8236'.
[  608.476824][T25384] tipc: Started in network mode
[  608.483923][T25384] tipc: Node identity ac14140f, cluster identity 4711
[  608.489747][T25384] tipc: Enabled bearer <udp:syz2>, priority 4
[  608.524660][T25387] loop4: detected capacity change from 0 to 1024
[  608.554646][T25387] hfsplus: invalid btree flag
[  608.562628][ T4988] Bluetooth: hci3: command tx timeout
[  608.570332][T25387] hfsplus: failed to load attributes file
[  608.593962][T25233] 8021q: adding VLAN 0 to HW filter on device batadv0
[  608.641191][T25390] loop5: detected capacity change from 0 to 2048
[  608.678594][T25390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  608.719930][ T9132] Process accounting resumed
[  608.738753][T16298] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  608.745786][T16298] EXT4-fs (loop5): Remounting filesystem read-only
[  608.799579][T20179] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  609.059405][T25233] veth0_vlan: entered promiscuous mode
[  609.082627][T25233] veth1_vlan: entered promiscuous mode
[  609.161638][T25233] veth0_macvtap: entered promiscuous mode
[  609.179948][T25233] veth1_macvtap: entered promiscuous mode
[  609.193891][T25233] batman_adv: batadv0: Interface activated: batadv_slave_0
[  609.200924][T25233] batman_adv: batadv0: Interface activated: batadv_slave_1
[  609.229886][ T5655] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  609.240279][ T5655] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  609.320775][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  609.339140][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  609.513971][T10481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  609.520841][T10481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  609.569704][T10481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  609.572442][T10481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  609.698346][ T9133] usb 5-1: new low-speed USB device number 59 using dummy_hcd
[  609.701599][ T5415] tipc: Node number set to 2886997007
[  609.885192][ T9133] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  609.890655][ T9133] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  609.895679][ T9133] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  609.900115][ T9133] usb 5-1: config 0 interface 0 has no altsetting 0
[  609.903061][ T9133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.911103][ T9133] usb 5-1: config 0 descriptor??
[  609.915751][T25422] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  610.470778][ T9133] prodikeys 0003:041E:2801.001D: unknown main item tag 0x0
[  610.496579][ T9133] prodikeys 0003:041E:2801.001D: unknown main item tag 0x0
[  610.515200][ T9133] prodikeys 0003:041E:2801.001D: unknown main item tag 0x0
[  610.525166][ T9133] prodikeys 0003:041E:2801.001D: unknown main item tag 0x0
[  610.555735][ T9133] prodikeys 0003:041E:2801.001D: unknown main item tag 0x0
[  610.569823][ T9133] prodikeys 0003:041E:2801.001D: unknown main item tag 0x0
[  610.585823][ T9133] prodikeys 0003:041E:2801.001D: unknown main item tag 0x0
[  610.593126][ T9133] prodikeys 0003:041E:2801.001D: unknown main item tag 0x0
[  610.602009][ T9133] prodikeys 0003:041E:2801.001D: unknown main item tag 0x0
[  610.607675][ T9133] prodikeys 0003:041E:2801.001D: unknown main item tag 0x0
[  610.638085][ T9133] prodikeys 0003:041E:2801.001D: hidraw0: USB HID v0.05 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input0
[  610.677965][ T9133] usb 5-1: USB disconnect, device number 59
[  610.807458][ T4988] Bluetooth: hci3: command tx timeout
[  610.834877][T25438] loop5: detected capacity change from 0 to 32768
[  610.847933][T25438] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.8256 (25438)
[  610.858169][T25438] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  610.868984][T25438] BTRFS info (device loop5): using blake2b checksum algorithm
[  610.882070][T25445] netdevsim netdevsim6: Firmware load for './file0/file0/..' refused, path contains '..' component
[  610.949556][T25438] BTRFS info (device loop5): enabling ssd optimizations
[  610.957192][T25438] BTRFS info (device loop5): turning on async discard
[  610.964287][T25438] BTRFS info (device loop5): enabling free space tree
[  610.972624][T25438] BTRFS info (device loop5): use zstd compression, level 3
[  611.003498][   T34] audit: type=1800 audit(2000000116.481:425): pid=25438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8256" name="file1" dev="loop5" ino=260 res=0 errno=0
[  611.549904][T20179] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  611.865473][ T5415] usb 5-1: new full-speed USB device number 60 using dummy_hcd
[  612.041885][ T5415] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  612.047668][ T5415] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config
[  612.059214][ T5415] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  612.071250][ T5415] usb 5-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  612.092007][ T5415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  612.094677][ T5415] usb 5-1: SerialNumber: syz
[  612.356638][ T5415] rndis_host 5-1:253.0: skipping garbage
[  612.358537][ T5415] rndis_host 5-1:253.0: rndis: master #0/ffff8881bd2a7000 slave #1/0000000000000000
[  612.380022][ T5415] usb 5-1: USB disconnect, device number 60
[  612.514857][T25497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  612.521924][T25497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  612.531830][T25497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  612.862748][T25501] loop5: detected capacity change from 0 to 16
[  612.867610][T25501] erofs (device loop5): mounted with root inode @ nid 36.
[  612.986054][T25510] loop4: detected capacity change from 0 to 1024
[  613.002827][T25510] EXT4-fs: Ignoring removed bh option
[  613.053818][T25510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  613.059556][ T4988] Bluetooth: hci3: command tx timeout
[  613.070553][T25510] ext4 filesystem being mounted at /1800/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  613.290766][T11440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  613.450553][T25534] loop4: detected capacity change from 0 to 128
[  613.461506][T25534] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  613.479015][T25534] hpfs: filesystem error: improperly stopped
[  613.486762][T25534] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  613.494041][T25534] hpfs: You really don't want any checks? You are crazy...
[  613.498415][T25534] hpfs: Code page index out of array
[  613.500223][T25534] hpfs: code page support is disabled
[  613.509605][T25534] hpfs: hpfs_map_4sectors(): unaligned read
[  613.511857][T25534] hpfs: hpfs_map_4sectors(): unaligned read
[  613.520606][T25534] hpfs: filesystem error: unable to find root dir
[  613.545295][ T9133] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  613.566993][ T9132] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  614.051184][ T9132] usb 7-1: Using ep0 maxpacket: 16
[  614.052965][ T9133] usb 6-1: Using ep0 maxpacket: 16
[  614.056605][ T9132] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  614.060204][ T9133] usb 6-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00
[  614.063695][ T9132] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  614.067487][ T9132] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  614.072461][ T9133] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  614.076387][ T9133] usb 6-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  614.080573][ T9133] usb 6-1: config 0 interface 0 has no altsetting 0
[  614.084201][ T9133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.092106][ T9132] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.094739][ T9132] usb 7-1: Product: syz
[  614.096272][ T9132] usb 7-1: Manufacturer: syz
[  614.098955][ T9133] usb 6-1: config 0 descriptor??
[  614.107995][ T9132] usb 7-1: SerialNumber: syz
[  614.125151][ T9132] usb 7-1: config 0 descriptor??
[  614.142165][ T9132] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  614.147188][ T9132] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  614.578872][T25544] loop4: detected capacity change from 0 to 512
[  614.590475][T25544] EXT4-fs: Invalid want_extra_isize 1969
[  614.764738][ T9133] usb 6-1: string descriptor 0 read error: -71
[  614.773985][ T9133] uclogic 0003:5543:0047.001E: failed retrieving string descriptor #200: -71
[  614.783069][ T9133] uclogic 0003:5543:0047.001E: failed retrieving pen parameters: -71
[  614.790504][ T9133] uclogic 0003:5543:0047.001E: failed probing pen v2 parameters: -71
[  614.797472][T25546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8294'.
[  614.800944][ T9133] uclogic 0003:5543:0047.001E: failed probing parameters: -71
[  614.812555][ T9133] uclogic 0003:5543:0047.001E: probe with driver uclogic failed with error -71
[  614.843236][ T9133] usb 6-1: USB disconnect, device number 30
[  614.851251][ T9132] em28xx 7-1:0.0: chip ID is em2874
[  614.951185][T25550] nftables ruleset with unbound set
[  615.053966][ T9132] usb 7-1: USB disconnect, device number 2
[  615.060571][ T9132] em28xx 7-1:0.0: Disconnecting em28xx
[  615.195588][ T9132] em28xx 7-1:0.0: Freeing device
[  615.424210][T25557] loop5: detected capacity change from 0 to 64
[  615.434280][T25557] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  616.178060][T25583] loop5: detected capacity change from 0 to 4096
[  616.253640][T25583] NILFS (loop5): invalid segment: Checksum error in segment payload
[  616.268463][T25583] NILFS (loop5): trying rollback from an earlier position
[  616.301100][T25583] NILFS (loop5): recovery complete
[  616.319941][ T9132] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  616.335633][T25586] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  616.499494][ T9132] usb 7-1: Using ep0 maxpacket: 32
[  616.508164][ T9132] usb 7-1: New USB device found, idVendor=06a3, idProduct=f921, bcdDevice=89.69
[  616.539631][ T9132] usb 7-1: config 9 has an invalid interface number: 178 but max is 0
[  616.550124][ T9132] usb 7-1: config 9 has no interface number 0
[  616.557511][ T9132] usb 7-1: config 9 interface 178 has no altsetting 0
[  616.593992][ T9132] usb 7-1: language id specifier not provided by device, defaulting to English
[  616.624432][ T9132] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.628954][ T9132] usb 7-1: Product: syz
[  616.630301][ T9132] usb 7-1: Manufacturer: 磌⨶럯셳検봗☹簑ޱ뢨좛陊㹠ࠅ취䴮ᢍਏ鬱﶐攍钃텈퉨௨혼螰攎
[  616.648227][ T9132] usb 7-1: SerialNumber: syz
[  616.910344][ T9132] usb 7-1: USB disconnect, device number 3
[  617.213480][T25610] bond1: (slave bond_slave_1): Device is not our slave
[  617.216439][T25610] bond1: option active_slave: invalid value (bond_slave_1)
[  617.219255][ T9133] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  617.231838][T25610] bond1 (unregistering): Released all slaves
[  617.396276][ T9133] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  617.401527][ T9133] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  617.409941][ T9133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.413471][ T9133] usb 5-1: Product: syz
[  617.424129][ T9133] usb 5-1: Manufacturer: syz
[  617.435700][ T9133] usb 5-1: SerialNumber: syz
[  617.446417][ T9133] usb 5-1: config 0 descriptor??
[  617.460246][ T9133] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  617.569169][T25620] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8330'.
[  617.681883][ T9132] usb 5-1: USB disconnect, device number 61
[  617.755842][T25632] loop6: detected capacity change from 0 to 256
[  617.794903][T25632] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  617.814068][T25633] NILFS (nbd5): device size too small
[  618.606478][T25665] loop4: detected capacity change from 0 to 512
[  618.654231][T25665] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0022]
[  618.665242][T25665] System zones: 1-12
[  618.671742][T25665] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.8349: Directory hole found for htree index block 0
[  618.711049][T25665] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  618.711399][T25665] EXT4-fs (loop4): Remounting filesystem read-only
[  618.715129][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  618.715141][    C0] EXT4-fs (loop4): initial error at time 2000000123: dx_probe:791: inode 2
[  618.715154][    C0] EXT4-fs (loop4): last error at time 2000000123: dx_probe:791: inode 2
[  618.777566][T25665] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117
[  618.786463][T25665] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  618.830942][T25665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  618.898521][T25673] loop5: detected capacity change from 0 to 8
[  618.936934][T11440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.968363][T25673] SQUASHFS error: Unable to read inode 0xa7
[  619.111240][T25671] loop6: detected capacity change from 0 to 32768
[  619.119266][T25671] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.8351 (25671)
[  619.197967][T25671] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  619.216957][T25671] BTRFS info (device loop6): using sha256 checksum algorithm
[  619.322016][T25671] BTRFS info (device loop6): rebuilding free space tree
[  619.415465][T25671] BTRFS info (device loop6): setting nodatasum
[  619.418242][T25671] BTRFS info (device loop6): setting nodatacow
[  619.423721][T25671] BTRFS info (device loop6): turning off barriers
[  619.430136][T25671] BTRFS info (device loop6): turning on sync discard
[  619.440948][T25671] BTRFS info (device loop6): enabling free space tree
[  619.443255][T25671] BTRFS info (device loop6): force clearing of disk cache
[  619.490972][T25233] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  619.809546][   T34] audit: type=1800 audit(2000000124.601:426): pid=25715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8365" name="name" dev="configfs" ino=70399 res=0 errno=0
[  620.006707][T25722] loop4: detected capacity change from 0 to 4096
[  620.023760][T25722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  620.114305][T25722] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  620.120947][T25722] EXT4-fs: Cannot change journaled quota options when quota turned on
[  620.195555][T11440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.077520][ T5415] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  621.264304][ T5415] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  621.273413][ T5415] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  621.280276][ T5415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.285484][ T5415] usb 7-1: Product: syz
[  621.287112][ T5415] usb 7-1: Manufacturer: syz
[  621.294147][ T5415] usb 7-1: SerialNumber: syz
[  621.337181][ T5415] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  621.530594][T25743] loop5: detected capacity change from 0 to 32768
[  621.551015][T25743] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  621.598723][T25743] XFS (loop5): Ending clean mount
[  621.623873][T20179] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  621.705070][T25767] sg_write: data in/out 439260/178 bytes for SCSI command 0x0-- guessing data in;
[  621.705070][T25767]    program syz.4.8383 not setting count and/or reply_len properly
[  621.897327][ T5415] usb 7-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  622.151971][ T5415] usb 7-1: USB disconnect, device number 4
[  622.323906][ T9132] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  622.359404][T25783] loop6: detected capacity change from 0 to 736
[  622.497285][ T9132] usb 5-1: Using ep0 maxpacket: 16
[  622.505171][ T9132] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  622.529534][ T9132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.538972][ T9132] usb 5-1: Product: syz
[  622.544579][ T9132] usb 5-1: Manufacturer: syz
[  622.551006][ T9132] usb 5-1: SerialNumber: syz
[  622.557863][ T9132] usb 5-1: config 0 descriptor??
[  622.721534][T25798] loop5: detected capacity change from 0 to 512
[  622.761053][T25798] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  622.771922][T25798] EXT4-fs (loop5): Remounting filesystem read-only
[  622.779163][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  622.781755][    C1] EXT4-fs (loop5): initial error at time 2000000127: ext4_mb_generate_buddy:1317
[  622.785330][    C1] EXT4-fs (loop5): last error at time 2000000127: ext4_mb_generate_buddy:1317
[  622.794194][ T9132] speedtch 5-1:0.0: speedtch_bind: data interface not found!
[  622.794347][T25798] EXT4-fs (loop5): 1 truncate cleaned up
[  622.798873][ T9132] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[  622.799024][T25798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  622.814093][   T82] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  622.822351][T25798] ext4 filesystem being mounted at /683/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  622.825899][   T82] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  622.833156][   T82] Quota error (device loop5): write_blk: dquota write failed
[  622.844076][   T82] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries
[  622.848907][   T82] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  622.856321][   T82] Quota error (device loop5): write_blk: dquota write failed
[  622.863019][   T82] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list
[  622.885623][   T82] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started
[  622.892513][   T82] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  622.907644][   T82] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  622.917489][T20179] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.930939][   T82] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  623.012651][ T9132] usb 5-1: USB disconnect, device number 62
[  623.279377][T25810] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8402'.
[  623.376853][ T5602] Bluetooth: hci3: command 0x0405 tx timeout
[  623.429845][ T3153] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  623.500657][T25816] loop6: detected capacity change from 0 to 32768
[  623.522513][T25816] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  623.599000][T25816] XFS (loop6): Ending clean mount
[  623.603148][ T3153] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  623.607401][ T3153] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  623.610716][ T3153] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  623.614178][ T3153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.628161][ T3153] usb 6-1: config 0 descriptor??
[  623.685574][T25233] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  624.159634][T25831] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  624.321643][ T3153] usb 6-1: language id specifier not provided by device, defaulting to English
[  624.758141][ T3153] uclogic 0003:256C:006D.001F: interface is invalid, ignoring
[  624.947331][T25837] loop6: detected capacity change from 0 to 32768
[  624.953018][T25837] XFS (loop6): invalid log iosize: 2 [not 12-30]
[  624.955956][T25841] loop4: detected capacity change from 0 to 32768
[  624.977076][T25808] fuse: Bad value for 'fd'
[  624.984077][T20339] usb 6-1: USB disconnect, device number 31
[  625.014569][T25841]  loop4: p1 p3 < p5 p6 >
[  625.373056][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  625.384269][ T8363] udevd[8363]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  625.394540][ T5610] udevd[5610]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  625.421816][ T5611] udevd[5611]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory
[  625.679674][T25859] netlink: 'syz.5.8420': attribute type 13 has an invalid length.
[  625.727888][T25861] loop5: detected capacity change from 0 to 2048
[  625.782300][T25861]  loop5: p1 < > p4
[  625.782300][T25861]  p4: <solaris: [s0] p5 [s1] p6 [s2] p7 >
[  625.791908][T25861] loop5: p4 size 722688 extends beyond EOD, truncated
[  625.808858][T25865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8424'.
[  625.811880][T25861] loop5: p6 start 262464109 is beyond EOD, truncated
[  625.812148][T25865] bond0: ARP target 0.0.0.2 is already present
[  625.817245][T25861] loop5: p7 size 2304 extends beyond EOD, truncated
[  625.820318][T25865] bond0: option arp_ip_target: invalid value (33554432)
[  625.920276][ T5610] udevd[5610]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  625.930108][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  625.931113][ T8363] udevd[8363]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[  625.941908][ T5611] udevd[5611]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory
[  625.985043][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  625.986345][ T8363] udevd[8363]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[  626.082176][T25873] loop5: detected capacity change from 0 to 2048
[  626.108457][T25873] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  626.275325][T25878] xt_HMARK: proto mask must be zero with L3 mode
[  626.554833][T25890] loop4: detected capacity change from 0 to 1024
[  626.651369][   T34] audit: type=1800 audit(2000000130.921:427): pid=25890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8435" name="file1" dev="loop4" ino=20 res=0 errno=0
[  626.898061][ T9132] usb 6-1: new low-speed USB device number 32 using dummy_hcd
[  627.067661][ T9132] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  627.083366][ T9132] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  627.094988][ T9132] usb 6-1: config 0 has no interface number 0
[  627.104879][ T9132] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  627.109458][ T9132] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  627.113902][ T9132] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  627.127700][ T9132] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  627.132301][ T9132] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  627.137186][ T9132] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  627.142674][ T9132] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.154564][ T9132] usb 6-1: config 0 descriptor??
[  627.160757][T25893] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  627.229031][ T9132] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  627.419525][T25893] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90
[  627.444136][T20339] usb 6-1: USB disconnect, device number 32
[  627.529169][T20339] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  627.874009][T25911] loop6: detected capacity change from 0 to 32768
[  627.877150][T25911] xfs: Unknown parameter 'smackfstransmute'
[  628.401717][T25917] IPv6: NLM_F_CREATE should be specified when creating new route
[  628.656380][T25916] loop5: detected capacity change from 0 to 32768
[  628.659471][T25916] btrfs: Deprecated parameter 'usebackuproot'
[  628.668159][T25916] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  629.243923][T25927] loop5: detected capacity change from 0 to 4096
[  629.255026][T25927] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  629.261346][T25927] EXT4-fs (loop5): Test dummy encryption mode enabled
[  629.268208][T25927] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  629.279479][T25927] System zones: 0-5
[  629.285456][T25927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  629.360778][T20179] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.482358][T25940] loop4: detected capacity change from 0 to 64
[  629.720208][T25948] loop5: detected capacity change from 0 to 16
[  629.733096][T25948] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  630.366970][T25972] netlink: 19 bytes leftover after parsing attributes in process `syz.6.8470'.
[  630.371754][T25972] netlink: 19 bytes leftover after parsing attributes in process `syz.6.8470'.
[  630.766611][T25982] jffs2: notice: (25982) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  631.012282][T25990] loop6: detected capacity change from 0 to 512
[  631.026818][T25990] EXT4-fs (loop6): Test dummy encryption mode enabled
[  631.047229][T25990] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e064e0ad, mo2=0002]
[  631.060936][T25990] System zones: 1-12
[  631.079342][T25990] EXT4-fs (loop6): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  631.109977][T25990] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8478'.
[  631.143600][T25985] loop4: detected capacity change from 0 to 32768
[  631.160176][T25985] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8477 (25985)
[  631.163034][T25233] EXT4-fs (loop6): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  631.212582][T25985] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  631.221978][T25985] BTRFS info (device loop4): using crc32c checksum algorithm
[  631.307984][T25985] BTRFS info (device loop4): enabling ssd optimizations
[  631.317678][T25985] BTRFS info (device loop4): turning on async discard
[  631.326641][T25985] BTRFS info (device loop4): enabling free space tree
[  631.345408][T25985] BTRFS info (device loop4 state M): use zstd compression, level 15
[  631.510406][T25994] loop5: detected capacity change from 0 to 32768
[  631.513302][T11440] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  631.535103][   T34] audit: type=1800 audit(2000000135.424:428): pid=25994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8480" name="file1" dev="loop5" ino=4 res=0 errno=0
[  631.589404][T16298] read_mapping_page failed!
[  631.592682][T16298] ERROR: (device loop5): txCommit: 
[  631.592682][T16298] 
[  631.628419][T16298] jfs_write_inode: jfs_commit_inode failed!
[  631.710946][ T5656] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  631.771433][T26017] netlink: 'syz.5.8484': attribute type 1 has an invalid length.
[  631.775379][T26017] netlink: 'syz.5.8484': attribute type 1 has an invalid length.
[  631.893606][ T5656] usb 7-1: Using ep0 maxpacket: 16
[  631.896330][ T5656] usb 7-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9
[  631.908247][ T5656] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.913885][ T5656] usb 7-1: Product: syz
[  631.921456][ T5656] usb 7-1: Manufacturer: syz
[  631.923738][T26025] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  631.930541][ T5656] usb 7-1: SerialNumber: syz
[  631.939151][ T5656] usb 7-1: config 0 descriptor??
[  631.946953][ T5656] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected.
[  632.121206][T20339] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  632.167971][ T5656] pwc: send_video_command error -71
[  632.173516][ T5656] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  632.177070][ T5656] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71
[  632.185307][ T5656] usb 7-1: USB disconnect, device number 5
[  632.285466][T20339] usb 6-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e
[  632.289966][T20339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.298667][T20339] pwc: Logitech/Cisco VT Camera webcam detected.
[  632.418740][T26041] loop4: detected capacity change from 0 to 128
[  632.466499][T26043] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8495'.
[  632.733456][T20339] pwc: send_video_command error -71
[  632.735691][T20339] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  632.863455][T20339] Philips webcam 6-1:127.0: probe with driver Philips webcam failed with error -71
[  632.875249][T20339] usb 6-1: USB disconnect, device number 33
[  632.960868][T26056] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8501'.
[  632.976770][T26056] netlink: 'syz.6.8501': attribute type 20 has an invalid length.
[  632.986115][T26056] netlink: 'syz.6.8501': attribute type 21 has an invalid length.
[  633.703549][ T9132] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  633.870663][ T9132] usb 7-1: Using ep0 maxpacket: 8
[  633.876401][ T9132] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  633.890287][ T9132] usb 7-1: config index 0 descriptor too short (expected 74, got 45)
[  633.898572][ T9132] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  633.913723][ T9132] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  633.926025][ T9132] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  633.938545][ T9132] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  633.945299][ T9132] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  633.951470][ T9132] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.202625][ T9132] usb 7-1: GET_CAPABILITIES returned 0
[  634.209171][ T9132] usbtmc 7-1:16.0: can't read capabilities
[  634.426388][ T9132] usb 7-1: USB disconnect, device number 6
[  634.475635][T26109] pim6reg1: entered promiscuous mode
[  634.477825][T26109] pim6reg1: entered allmulticast mode
[  634.880921][T26113] loop5: detected capacity change from 0 to 32768
[  634.889234][T26117] loop4: detected capacity change from 0 to 2048
[  634.903212][T26113] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  634.932379][T26117]  loop4: p1 p2 p3
[  634.932379][T26117]  p1: <netbsd: >
[  634.935231][T26117] loop4: p1 size 16779263 extends beyond EOD, truncated
[  634.936611][T26113] XFS (loop5): Ending clean mount
[  634.941454][T26117] loop4: p2 size 458752 extends beyond EOD, truncated
[  634.954620][T26117] loop4: p3 start 3036676096 is beyond EOD, truncated
[  634.988178][T20179] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  635.192704][ T5610] udevd[5610]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  635.196711][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  635.250576][ T5610] udevd[5610]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  635.252188][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  635.343591][T26137] syz_tun: entered allmulticast mode
[  635.360038][T26136] syz_tun: left allmulticast mode
[  635.521907][T26146] loop5: detected capacity change from 0 to 2048
[  635.546471][T26146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  635.703930][T20179] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.166821][T26177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8553'.
[  636.178861][T26177] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8553'.
[  636.235542][T25432] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  636.244428][T25432] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  636.259833][T25432] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  636.273281][T25432] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  636.342308][T26184] loop6: detected capacity change from 0 to 512
[  636.400491][T26184] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  636.576980][T26184] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.8556: bg 0: block 104: invalid block bitmap
[  636.618111][T26184] loop6: lost filesystem error report for type 5 error -117
[  636.621536][    C0] EXT4-fs (loop6): initial error at time 2000000140: ext4_validate_block_bitmap:432
[  636.628401][    C0] EXT4-fs (loop6): last error at time 2000000140: ext4_validate_block_bitmap:432
[  636.647695][T26184] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  636.670894][T26184] loop6: lost filesystem error report for type 5 error -117
[  636.671985][T26184] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.8556: invalid indirect mapped block 1 (level 1)
[  636.701975][T26184] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  636.756404][T26184] EXT4-fs (loop6): 1 truncate cleaned up
[  636.788682][T26184] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  636.841545][T26184] EXT4-fs (loop6): shut down requested (2)
[  637.009972][T26184] overlayfs: failed to get redirect (-5)
[  637.095448][T25233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.206142][ T5602] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  637.344834][T26220] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8571'.
[  637.400833][T26226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8574'.
[  637.408076][T26226] netlink: 'syz.6.8574': attribute type 5 has an invalid length.
[  637.425863][T26226] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8574'.
[  637.440215][T26226] geneve2: entered promiscuous mode
[  637.445835][T26226] geneve2: entered allmulticast mode
[  637.455558][ T5655] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 40317 - 0
[  637.464338][ T5655] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 40317 - 0
[  637.472650][ T5655] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 40317 - 0
[  637.495981][ T5655] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 40317 - 0
[  637.648781][ T9132] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  637.825173][ T9132] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  637.838420][ T9132] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24361, setting to 64
[  637.860576][ T9132] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  637.887809][ T9132] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  637.894575][ T9132] usb 6-1: SerialNumber: syz
[  637.911277][ T9132] cdc_acm 6-1:1.0: skipping garbage
[  637.918907][T26248] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8585'.
[  637.924052][ T9132] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12
[  638.091074][ T9132] hid_parser_main: 31 callbacks suppressed
[  638.091086][ T9132] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  638.114405][T26252] loop6: detected capacity change from 0 to 4096
[  638.116740][ T9132] hid-generic 0000:0000:0000.0020: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  638.128511][T26252] ext4: Unknown parameter 'seclabel'
[  638.776164][T26268] loop5: detected capacity change from 0 to 8
[  638.973246][T20339] usb 6-1: USB disconnect, device number 34
[  639.795659][T26279] CIFS: Attempting to mount //127.0.0.1/share
[  639.799153][T26279] CIFS: VFS: Error connecting to socket. Aborting operation.
[  639.802211][T26279] CIFS: VFS: cifs_mount failed w/return code = -22
[  640.561956][T26292] loop4: detected capacity change from 0 to 512
[  640.567053][T26273] loop5: detected capacity change from 0 to 256
[  640.595497][T26292] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  640.614997][T26273] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204323ec, utbl_chksum : 0xe619d30d)
[  640.622046][T26292] EXT4-fs (loop4): 1 truncate cleaned up
[  640.631207][T26292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  640.685557][T26292] EXT4-fs error (device loop4): __ext4_expand_extra_isize:6455: inode #12: comm syz.4.8604: bad extra_isize 62 (inode size 256)
[  640.775978][T26292] EXT4-fs (loop4): Remounting filesystem read-only
[  640.834753][ T5656] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  641.986492][T11440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.996183][ T5656] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  642.016442][ T5656] usb 7-1: config 0 has an invalid interface number: 69 but max is 0
[  642.023210][ T5656] usb 7-1: config 0 has no interface number 0
[  642.028557][ T5656] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  642.053412][ T5656] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  642.082700][ T5656] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.093986][ T5656] usb 7-1: Product: syz
[  642.095409][ T5656] usb 7-1: Manufacturer: syz
[  642.110613][ T5656] usb 7-1: SerialNumber: syz
[  642.128108][ T5656] usb 7-1: config 0 descriptor??
[  642.144371][T26278] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  642.155388][ T5656] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  642.190519][ T5656] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  642.204113][T26302] loop5: detected capacity change from 0 to 128
[  643.776685][ T5415] usb 7-1: USB disconnect, device number 7
[  643.979890][T26302] syz.5.8607: attempt to access beyond end of device
[  643.979890][T26302] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128
[  644.046299][ T5415] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  644.063175][ T5415] cyberjack 7-1:0.69: device disconnected
[  645.482985][T26331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8620'.
[  645.502806][T26329] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8619'.
[  645.530375][T26332] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  645.705670][T26341] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[  645.710756][T26341] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[  645.768493][T26346] loop4: detected capacity change from 0 to 512
[  645.797159][T26346] EXT4-fs (loop4): Test dummy encryption mode enabled
[  645.817626][T26346] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  645.827974][T26346] EXT4-fs (loop4): 1 truncate cleaned up
[  645.836152][T26346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  646.290727][T26364] loop5: detected capacity change from 0 to 256
[  647.018988][T11440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  647.438441][ T5655] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  647.868573][ T4988] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  647.887198][ T4988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  647.893109][ T4988] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  647.896213][ T4988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  647.899086][ T4988] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  648.769207][ T5655] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.847350][T26396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8645'.
[  648.944706][ T5655] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.000327][T26396] netlink: 'syz.4.8645': attribute type 10 has an invalid length.
[  649.008930][T26396] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8645'.
[  649.172547][ T5655] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.269139][T26410] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8651'.
[  649.470821][T26417] netlink: 'syz.6.8654': attribute type 1 has an invalid length.
[  649.577094][T26420] wg0: entered allmulticast mode
[  649.750383][T26420] wg0: left allmulticast mode
[  649.822050][T26430] loop4: detected capacity change from 0 to 512
[  649.834211][T26430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  649.839569][T26430] ext4 filesystem being mounted at /1939/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  649.901852][T11440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  650.064369][ T5655] gretap1: left allmulticast mode
[  650.066988][ T5655] gretap1: left promiscuous mode
[  650.074846][ T5655] bridge0: port 3(gretap1) entered disabled state
[  650.252960][ T5602] Bluetooth: hci0: command tx timeout
[  651.220039][ T5655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  651.225371][ T5655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  651.232513][ T5655] bond0 (unregistering): Released all slaves
[  651.271319][T26381] bridge0: port 1(bridge_slave_0) entered blocking state
[  651.282744][T26381] bridge0: port 1(bridge_slave_0) entered disabled state
[  651.312563][T26381] bridge_slave_0: entered allmulticast mode
[  651.317962][T26381] bridge_slave_0: entered promiscuous mode
[  651.336222][T25432] netdevsim netdevsim5 eth14: set [0, 0] type 1 family 0 port 8472 - 0
[  651.358770][T25432] netdevsim netdevsim5 eth14: set [1, 0] type 2 family 0 port 6081 - 0
[  651.408651][T26381] bridge0: port 2(bridge_slave_1) entered blocking state
[  651.419677][T26381] bridge0: port 2(bridge_slave_1) entered disabled state
[  651.426245][T26381] bridge_slave_1: entered allmulticast mode
[  651.445291][T26381] bridge_slave_1: entered promiscuous mode
[  651.450850][ T5655] tipc: Disabling bearer <udp:syz2>
[  651.476355][T26445] binder: BINDER_SET_CONTEXT_MGR already set
[  651.496517][T26445] binder: 26444:26445 ioctl 4018620d 200000004a80 returned -16
[  651.534460][T26447] Format for adding new device is "id port_count num_queues" (uint uint uint).
[  651.593180][T26449] netlink: 'syz.6.8664': attribute type 5 has an invalid length.
[  651.618855][ T5655] tipc: Left network mode
[  651.721470][T25432] netdevsim netdevsim5 eth16: set [0, 0] type 1 family 0 port 8472 - 0
[  651.730339][T25432] netdevsim netdevsim5 eth16: set [1, 0] type 2 family 0 port 6081 - 0
[  651.764851][T25434] netdevsim netdevsim5 eth15: set [0, 0] type 1 family 0 port 8472 - 0
[  651.773284][T25434] netdevsim netdevsim5 eth15: set [1, 0] type 2 family 0 port 6081 - 0
[  651.795879][T26381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  651.844390][T26381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  651.876158][ T5655] IPVS: stopping master sync thread 26332 ...
[  651.937105][T26453] loop6: detected capacity change from 0 to 2048
[  651.942603][T26381] team0: Port device team_slave_0 added
[  651.951642][T26453] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  652.033598][T26454] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  652.037892][T26381] team0: Port device team_slave_1 added
[  652.043770][T26453] syz.6.8666: attempt to access beyond end of device
[  652.043770][T26453] loop6: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[  652.062648][ T3153] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  652.080358][T26453] syz.6.8666: attempt to access beyond end of device
[  652.080358][T26453] loop6: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048
[  652.108859][T26453] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=3)
[  652.118570][T13047] netdevsim netdevsim5 eth13: set [0, 0] type 1 family 0 port 8472 - 0
[  652.121322][T13047] netdevsim netdevsim5 eth13: set [1, 0] type 2 family 0 port 6081 - 0
[  652.173422][T26381] batman_adv: batadv0: Adding interface: batadv_slave_0
[  652.176265][T26381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  652.208660][T26381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  652.259340][ T3153] usb 5-1: unable to get BOS descriptor or descriptor too short
[  652.262924][ T3153] usb 5-1: New USB device found, idVendor=1b80, idProduct=e755, bcdDevice=36.5b
[  652.275352][ T3153] usb 5-1: config 146 has an invalid interface number: 234 but max is 0
[  652.279551][ T3153] usb 5-1: config 146 has no interface number 0
[  652.286202][ T3153] usb 5-1: config 146 interface 234 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  652.295485][ T3153] usb 5-1: config 146 interface 234 altsetting 11 bulk endpoint 0x8F has invalid maxpacket 64
[  652.299603][ T3153] usb 5-1: config 146 interface 234 has no altsetting 0
[  652.319692][ T3153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.324627][ T3153] usb 5-1: Product: syz
[  652.327606][ T3153] usb 5-1: Manufacturer: syz
[  652.337956][ T3153] usb 5-1: SerialNumber: syz
[  652.362893][T26451] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  652.363125][T26381] batman_adv: batadv0: Adding interface: batadv_slave_1
[  652.375869][T26381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  652.401230][T26381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  652.411175][T26462] loop6: detected capacity change from 0 to 512
[  652.431934][T26462] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  652.441510][ T5343] 8021q: adding VLAN 0 to HW filter on device eth13
[  652.495091][T26462] EXT4-fs (loop6): 1 truncate cleaned up
[  652.506591][T26462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  652.522464][ T5602] Bluetooth: hci0: command tx timeout
[  652.531600][T26462] EXT4-fs error (device loop6): ext4_empty_dir:3125: inode #2: block 13: comm syz.6.8667: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  652.539326][ T5655] hsr_slave_0: left promiscuous mode
[  652.543563][ T5655] hsr_slave_1: left promiscuous mode
[  652.546214][ T5655] batman_adv: batadv0: Interface deactivated: dummy0
[  652.546580][T26462] EXT4-fs (loop6): Remounting filesystem read-only
[  652.548613][ T5655] batman_adv: batadv0: Removing interface: dummy0
[  652.596974][T25233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  652.643321][ T3153] usb 5-1: USB disconnect, device number 63
[  652.659042][ T5655] veth1_macvtap: left promiscuous mode
[  652.664013][ T5655] veth0_macvtap: left promiscuous mode
[  653.238013][T26474] x_tables: unsorted entry at hook 2
[  653.597729][ T5655] team0 (unregistering): Port device team_slave_1 removed
[  653.626818][ T5655] team0 (unregistering): Port device team_slave_0 removed
[  653.769020][T26381] hsr_slave_0: entered promiscuous mode
[  653.771387][T26381] hsr_slave_1: entered promiscuous mode
[  653.773661][T26381] debugfs: 'hsr0' already exists in 'hsr'
[  653.778975][T26381] Cannot create hsr debugfs directory
[  654.124641][T26492] netlink: 'syz.6.8678': attribute type 2 has an invalid length.
[  654.133578][T26492] netlink: 'syz.6.8678': attribute type 1 has an invalid length.
[  654.378498][ T5343] 8021q: adding VLAN 0 to HW filter on device eth14
[  654.588274][T26501] loop4: detected capacity change from 0 to 512
[  654.625258][T26501] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  654.668579][T26501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  654.689997][T26501] ext4 filesystem being mounted at /1948/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  654.719888][ T5655] IPVS: stop unused estimator thread 0...
[  654.765131][ T5602] Bluetooth: hci0: command tx timeout
[  654.858101][T11440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  654.880026][T26503] loop6: detected capacity change from 0 to 32768
[  654.906629][T26503] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.8683 (26503)
[  654.956400][T26503] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  654.972495][T26503] BTRFS info (device loop6): using crc32c checksum algorithm
[  655.188687][T26531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8686'.
[  655.238413][T26503] BTRFS info (device loop6): enabling ssd optimizations
[  655.245623][T26381] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  655.260882][T26503] BTRFS info (device loop6): turning on flush-on-commit
[  655.274862][T26503] BTRFS info (device loop6): enabling free space tree
[  655.298129][T26503] BTRFS info (device loop6): enabling auto defrag
[  655.312233][T26503] BTRFS info (device loop6): use lzo compression, level 1
[  655.322558][T26503] BTRFS info (device loop6): max_inline set to 4096
[  655.359843][T26381] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  655.409056][ T5343] 8021q: adding VLAN 0 to HW filter on device eth15
[  655.431124][T26381] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  655.461675][T26381] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  655.488191][T26381] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  655.511216][T26381] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  655.536379][T26381] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  655.639672][T26381] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  655.830644][T25233] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  655.940599][T26381] 8021q: adding VLAN 0 to HW filter on device bond0
[  655.984417][T26381] 8021q: adding VLAN 0 to HW filter on device team0
[  656.002754][T10481] bridge0: port 1(bridge_slave_0) entered blocking state
[  656.005059][T10481] bridge0: port 1(bridge_slave_0) entered forwarding state
[  656.028188][T10481] bridge0: port 2(bridge_slave_1) entered blocking state
[  656.034747][T10481] bridge0: port 2(bridge_slave_1) entered forwarding state
[  656.152553][ T5343] 8021q: adding VLAN 0 to HW filter on device eth16
[  656.328523][T26551] loop4: detected capacity change from 0 to 32768
[  656.344600][T26551] (syz.4.8691,26551,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  656.359614][T26551] (syz.4.8691,26551,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  656.410219][T26551] (syz.4.8691,26551,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC.
[  656.493990][T26551] JBD2: Ignoring recovery information on journal
[  656.654544][T26551] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  656.844078][T26551] (syz.4.8691,26551,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x4e60244d, computed 0x7fe56331. Applying ECC.
[  656.878995][T26551] (syz.4.8691,26551,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x4e60244d, computed 0x55f1ae3f
[  656.898160][T26551] (syz.4.8691,26551,0):ocfs2_trim_mainbm:7640 ERROR: status = -5
[  656.912603][T26576] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8694'.
[  657.032809][ T5602] Bluetooth: hci0: command tx timeout
[  657.090433][T11440] ocfs2: Unmounting device (7,4) on (node local)
[  657.106130][T26381] 8021q: adding VLAN 0 to HW filter on device batadv0
[  657.373166][T26593] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8699'.
[  657.394488][T26593] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8699'.
[  657.498199][T26597] netlink: 168 bytes leftover after parsing attributes in process `syz.6.8700'.
[  657.514537][T26381] veth0_vlan: entered promiscuous mode
[  657.542716][T26381] veth1_vlan: entered promiscuous mode
[  657.665477][T26381] veth0_macvtap: entered promiscuous mode
[  657.675501][T26381] veth1_macvtap: entered promiscuous mode
[  657.685808][T26381] batman_adv: batadv0: Interface activated: batadv_slave_0
[  657.700024][T26381] batman_adv: batadv0: Interface activated: batadv_slave_1
[  657.768078][ T5655] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  657.784263][ T5655] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  657.808544][ T5655] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  657.817114][ T5655] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  657.884766][ T5656] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  657.920419][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  657.923249][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  658.002487][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  658.005298][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  658.056268][ T5656] usb 7-1: Using ep0 maxpacket: 16
[  658.059103][ T5656] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  658.070034][ T5656] usb 7-1: config index 0 descriptor too short (expected 65, got 36)
[  658.076537][ T5656] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  658.084152][ T5656] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  658.096322][ T5656] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.112256][ T5656] usb 7-1: config 0 descriptor??
[  658.130610][ T5656] pxrc 7-1:0.0: Could not find endpoint
[  658.139564][ T5656] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  658.311854][T26616] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  658.339488][ T5656] usb 7-1: USB disconnect, device number 8
[  658.408078][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  658.410610][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  659.015091][T26644] loop6: detected capacity change from 0 to 512
[  659.146909][T26644] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.6.8721: corrupted xattr block 95: invalid header
[  659.155961][T26649] loop7: detected capacity change from 0 to 2048
[  659.176695][T26644] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  659.178187][T26644] EXT4-fs (loop6): Remounting filesystem read-only
[  659.184547][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  659.184558][    C0] EXT4-fs (loop6): initial error at time 2000000160: ext4_expand_extra_isize_ea:2810: inode 11
[  659.184571][    C0] EXT4-fs (loop6): last error at time 2000000160: ext4_expand_extra_isize_ea:2810: inode 11
[  659.249029][T26644] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  659.279480][T26644] EXT4-fs (loop6): 1 orphan inode deleted
[  659.300552][T26649]  loop7: p2 < > p3 p4
[  659.302193][T26644] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  659.312179][T26649] loop7: p3 start 65535 is beyond EOD, truncated
[  659.319134][T26649] loop7: p4 size 8192 extends beyond EOD, truncated
[  659.413154][T25233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  659.504638][ T5655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  659.601310][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  659.604308][ T5610] udevd[5610]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  659.817363][ T4988] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  659.841602][ T4988] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  659.851406][ T4988] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  659.856944][ T4988] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  659.864105][ T4988] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  660.089689][T26670] loop6: detected capacity change from 0 to 4096
[  660.102876][ T5655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.108057][T26670] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  660.111027][T26670] ntfs3(loop6): Failed to load $MFT.
[  661.397345][T26676] loop6: detected capacity change from 0 to 262144
[  661.454959][T26676] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  661.466558][T26676] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  661.645261][ T5655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.830999][ T5655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.131286][   T12] netdevsim netdevsim4 eth18: set [0, 0] type 1 family 0 port 8472 - 0
[  662.134624][   T12] netdevsim netdevsim4 eth18: set [1, 0] type 2 family 0 port 6081 - 0
[  662.145139][ T4988] Bluetooth: hci1: command tx timeout
[  662.170145][ T5655] erspan0: left allmulticast mode
[  662.171795][ T5655] erspan0: left promiscuous mode
[  662.173686][ T5655] bridge2: port 1(erspan0) entered disabled state
[  662.323039][ T5655] team0: Port device xfrm0 removed
[  662.461816][ T5655] bond0 (unregistering): Released all slaves
[  662.466430][ T5655] bond1 (unregistering): Released all slaves
[  662.509552][T26657] bridge0: port 1(bridge_slave_0) entered blocking state
[  662.512558][T26657] bridge0: port 1(bridge_slave_0) entered disabled state
[  662.515185][T26657] bridge_slave_0: entered allmulticast mode
[  662.518216][T26657] bridge_slave_0: entered promiscuous mode
[  662.529700][T26657] bridge0: port 2(bridge_slave_1) entered blocking state
[  662.547269][T26657] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.549726][T26657] bridge_slave_1: entered allmulticast mode
[  662.552460][T26657] bridge_slave_1: entered promiscuous mode
[  662.590244][ T5655] ovs-system: left promiscuous mode
[  662.824145][ T5343] 8021q: adding VLAN 0 to HW filter on device eth17
[  662.835144][T26657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  662.874705][T26657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  662.901849][ T5655] tipc: Left network mode
[  662.968572][T26657] team0: Port device team_slave_0 added
[  662.992033][T26657] team0: Port device team_slave_1 added
[  663.166267][T26657] batman_adv: batadv0: Adding interface: batadv_slave_0
[  663.192966][T26657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  663.240398][T26657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  663.283510][T26702] netlink: 'syz.6.8734': attribute type 2 has an invalid length.
[  663.298729][T26657] batman_adv: batadv0: Adding interface: batadv_slave_1
[  663.319090][T26657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  663.393156][T26657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  664.385249][ T4988] Bluetooth: hci1: command tx timeout
[  664.678112][T13047] netdevsim netdevsim4 eth19: set [0, 0] type 1 family 0 port 8472 - 0
[  664.687479][T13047] netdevsim netdevsim4 eth19: set [1, 0] type 2 family 0 port 6081 - 0
[  664.764126][T26657] hsr_slave_0: entered promiscuous mode
[  664.773701][T26657] hsr_slave_1: entered promiscuous mode
[  664.784225][T26657] debugfs: 'hsr0' already exists in 'hsr'
[  664.800372][T26657] Cannot create hsr debugfs directory
[  664.829253][T26718] loop7: detected capacity change from 0 to 1024
[  664.832575][ T3153] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  664.905574][T25430] netdevsim netdevsim4 eth17: set [0, 0] type 1 family 0 port 8472 - 0
[  664.925423][T25430] netdevsim netdevsim4 eth17: set [1, 0] type 2 family 0 port 6081 - 0
[  664.955765][T25430] netdevsim netdevsim4 eth20: set [0, 0] type 1 family 0 port 8472 - 0
[  664.979025][T25430] netdevsim netdevsim4 eth20: set [1, 0] type 2 family 0 port 6081 - 0
[  665.012149][ T3153] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  665.025615][ T3153] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  665.078999][ T3153] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  665.086403][ T3153] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.097131][T26718] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  665.127642][ T3153] spcp8x5 7-1:1.0: SPCP8x5 converter detected
[  665.139937][T26718] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  665.249639][T26718] EXT4-fs warning (device loop7): ext4_empty_dir:3104: inode #12: comm syz.7.8740: directory missing '..'
[  665.278083][ T3153] usb 7-1: SPCP8x5 converter now attached to ttyUSB0
[  665.305973][ T5655] hsr_slave_0: left promiscuous mode
[  665.392308][ T5655] hsr_slave_1: left promiscuous mode
[  665.429524][T26381] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  665.434151][ T5655] veth1_macvtap: left promiscuous mode
[  665.451650][ T5655] veth0_macvtap: left promiscuous mode
[  665.466205][ T5655] veth1_vlan: left promiscuous mode
[  665.519412][ T5655] veth0_vlan: left promiscuous mode
[  665.582718][ T9132] usb 7-1: USB disconnect, device number 9
[  665.596702][ T9132] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  665.621945][ T9132] spcp8x5 7-1:1.0: device disconnected
[  665.932247][T26726] loop7: detected capacity change from 0 to 32768
[  665.970271][T26726] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  665.986852][T26726] XFS (loop7): Ending clean mount
[  665.999682][T26726] XFS (loop7): Quotacheck needed: Please wait.
[  666.063609][T26726] XFS (loop7): Quotacheck: Done.
[  666.107758][T26381] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  666.639457][ T4988] Bluetooth: hci1: command tx timeout
[  666.711353][ T5343] 8021q: adding VLAN 0 to HW filter on device eth18
[  666.743379][T26738] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.748747][T26738] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.149599][ T3153] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  667.195868][ T5655] IPVS: stop unused estimator thread 0...
[  667.276389][T26760] netlink: 25 bytes leftover after parsing attributes in process `syz.7.8749'.
[  667.316121][T26657] netdevsim netdevsim4 eth20 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  667.341114][T26657] netdevsim netdevsim4 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.341439][ T3153] usb 7-1: Using ep0 maxpacket: 16
[  667.353172][ T3153] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  667.358126][ T3153] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  667.368002][ T3153] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  667.374650][ T3153] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  667.384493][ T3153] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.403948][ T5343] 8021q: adding VLAN 0 to HW filter on device eth19
[  667.404338][ T3153] usb 7-1: config 0 descriptor??
[  667.565400][T26657] netdevsim netdevsim4 eth19 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  667.569408][T26657] netdevsim netdevsim4 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.616614][   T34] audit: type=1326 audit(2000000168.715:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26770 comm="syz.7.8753" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0679e0d9 code=0x7ffc0000
[  667.628596][   T34] audit: type=1326 audit(2000000168.715:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26770 comm="syz.7.8753" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0679e0d9 code=0x7ffc0000
[  667.646509][   T34] audit: type=1326 audit(2000000168.715:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26770 comm="syz.7.8753" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdd0679e0d9 code=0x7ffc0000
[  667.662537][   T34] audit: type=1326 audit(2000000168.715:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26770 comm="syz.7.8753" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdd0679e0d9 code=0x7ffc0000
[  667.729853][T26657] netdevsim netdevsim4 eth18 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  667.734560][T26657] netdevsim netdevsim4 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.865937][T26657] netdevsim netdevsim4 eth17 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  667.872540][T26657] netdevsim netdevsim4 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.891218][ T3153] microsoft 0003:045E:07DA.0021: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  667.901324][ T3153] microsoft 0003:045E:07DA.0021: no inputs found
[  667.905713][ T3153] microsoft 0003:045E:07DA.0021: could not initialize ff, continuing anyway
[  668.150688][T26747] loop6: detected capacity change from 0 to 1024
[  668.163187][T26747] EXT4-fs (loop6): orphan cleanup on readonly fs
[  668.221271][T26747] EXT4-fs (loop6): 1 truncate cleaned up
[  668.224751][T26747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  668.465615][T26657] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  668.486428][T26657] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  668.493839][T26657] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  668.502199][T26657] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  668.506950][T26657] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  668.512293][T26657] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  668.521946][T26657] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  668.539448][T26657] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  668.645267][T26824] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  668.653173][T26824] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  668.792106][ T9132] usb 7-1: USB disconnect, device number 10
[  668.818966][T25233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  668.891226][T26657] 8021q: adding VLAN 0 to HW filter on device bond0
[  668.894153][ T4988] Bluetooth: hci1: command tx timeout
[  668.914602][T26657] 8021q: adding VLAN 0 to HW filter on device team0
[  668.922282][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.924583][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  668.931208][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.933489][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  668.948009][   T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  668.951205][   T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  668.954120][T26837] loop7: detected capacity change from 0 to 128
[  668.991577][   T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  668.997560][T26837] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  669.001739][T26837] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  669.002826][   T12] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  669.008017][T26837] EXT4-fs warning (device loop7): __ext4_ioctl:1564: Setting inode version is not supported with metadata_csum enabled.
[  669.031847][T26381] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  669.150297][T26657] 8021q: adding VLAN 0 to HW filter on device batadv0
[  669.260899][T26657] veth0_vlan: entered promiscuous mode
[  669.273653][T26657] veth1_vlan: entered promiscuous mode
[  669.291177][T26657] veth0_macvtap: entered promiscuous mode
[  669.295731][T26657] veth1_macvtap: entered promiscuous mode
[  669.304351][T26657] batman_adv: batadv0: Interface activated: batadv_slave_0
[  669.311093][T26657] batman_adv: batadv0: Interface activated: batadv_slave_1
[  669.351796][T25434] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  669.367451][T25434] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  669.416048][T25430] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  669.420111][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  669.421108][T25430] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  669.434163][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.515670][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  669.518932][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.668828][T26862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8775'.
[  669.856764][T26864] loop4: detected capacity change from 0 to 32768
[  669.862283][T26864] ERROR: (device loop4): xtSearch: stack overrun!
[  669.862283][T26864] 
[  669.870118][T26864] ERROR: (device loop4): remounting filesystem as read-only
[  669.876282][T26864] xtLookup: xtSearch returned -5
[  669.880045][T26864] read_mapping_page failed!
[  669.885290][T26864] jfs_mount: diMount(ipaimap) failed w/rc = -5
[  669.890056][T26864] Mount JFS Failure: -5
[  669.893088][T26864] jfs_mount failed w/return code = -5
[  669.964328][T26870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8779'.
[  670.095499][T26880] loop6: detected capacity change from 0 to 128
[  670.113835][T26880] ufs: ufs_fill_super(): bad magic number
[  670.373139][T26896] netlink: 120 bytes leftover after parsing attributes in process `syz.6.8791'.
[  670.376192][T26896] netlink: 120 bytes leftover after parsing attributes in process `syz.6.8791'.
[  670.462654][T26900] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8793'.
[  670.481435][T26902] overlayfs: missing 'lowerdir'
[  670.592800][T26912] Bluetooth: MGMT ver 1.23
[  670.643762][T26915] overlayfs: conflicting options: nfs_export=on,index=off
[  670.656199][T26916] kAFS: Can only specify source 'none' with -o dyn
[  670.721408][T26918] bridge0: port 2(bridge_slave_1) entered disabled state
[  670.724924][T26918] bridge0: port 1(bridge_slave_0) entered disabled state
[  670.766992][T26918] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  670.775471][T26918] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  670.866209][   T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  670.872754][   T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  670.881088][   T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  670.891756][   T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  670.939708][T26923] loop6: detected capacity change from 0 to 1024
[  670.943411][T26923] EXT4-fs: Ignoring removed bh option
[  670.956681][T26923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  670.961654][T26923] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  671.161668][T26929] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8804: bg 0: block 112: padding at end of block bitmap is not set
[  671.174468][T26929] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  671.179865][T26929] EXT4-fs (loop6): This should not happen!! Data will be lost
[  671.179865][T26929] 
[  671.184146][T26929] EXT4-fs (loop6): Total free blocks count 0
[  671.186208][T26929] EXT4-fs (loop6): Free/Dirty block details
[  671.188323][T26929] EXT4-fs (loop6): free_blocks=0
[  671.189900][T26929] EXT4-fs (loop6): dirty_blocks=64
[  671.192595][T26929] EXT4-fs (loop6): Block reservation details
[  671.205401][T26929] EXT4-fs (loop6): i_reserved_data_blocks=4
[  671.862865][T25233] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #16: comm syz-executor: data will be lost
[  671.879338][T25233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  671.958691][T26940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8810'.
[  672.015989][   T34] audit: type=1326 audit(2000000172.766:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26943 comm="syz.6.8812" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed119e0d9 code=0x7ffc0000
[  672.035803][   T34] audit: type=1326 audit(2000000172.784:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26943 comm="syz.6.8812" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed119e0d9 code=0x7ffc0000
[  672.064929][   T34] audit: type=1326 audit(2000000172.794:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26943 comm="syz.6.8812" exe="/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f4ed119e0d9 code=0x7ffc0000
[  672.079624][   T34] audit: type=1326 audit(2000000172.794:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26943 comm="syz.6.8812" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed119e0d9 code=0x7ffc0000
[  672.102358][   T34] audit: type=1326 audit(2000000172.794:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26943 comm="syz.6.8812" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed119e0d9 code=0x7ffc0000
[  672.117546][   T34] audit: type=1326 audit(2000000172.794:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26943 comm="syz.6.8812" exe="/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f4ed119e0d9 code=0x7ffc0000
[  672.369100][T26967] loop9: detected capacity change from 0 to 7
[  672.386664][T26967] Dev loop9: unable to read RDB block 7
[  672.394108][T26967]  loop9: unable to read partition table
[  672.399663][T26967] loop9: partition table beyond EOD, truncated
[  672.407879][T26960] loop6: detected capacity change from 0 to 32768
[  672.409459][T26967] loop_reread_partitions: partition scan of loop9 (3xC) failed (rc=-5)
[  672.437848][T26960]  loop6: p1 p3 < >
[  672.440231][T26967] Dev loop9: unable to read RDB block 7
[  672.447216][T26967]  loop9: unable to read partition table
[  672.452648][T26967] loop9: partition table beyond EOD, truncated
[  672.460016][T26967] loop_reread_partitions: partition scan of loop9 (3xC) failed (rc=-5)
[  672.491205][T26973] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  673.025057][T27008] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 27008 comm: syz.7.8827)
[  673.073590][T27007] loop4: detected capacity change from 0 to 4096
[  673.077756][T27007] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  673.114300][T27007] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  673.247028][T27018] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8833'.
[  673.342025][T27026] netlink: 'syz.4.8837': attribute type 1 has an invalid length.
[  673.346911][T27026] nbd: illegal input index 393222
[  673.442433][T27020] loop7: detected capacity change from 0 to 40427
[  673.448644][T27020] F2FS-fs (loop7): invalid crc value
[  673.454963][T27032] loop4: detected capacity change from 0 to 512
[  673.468521][T27032] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  673.485105][T27032] EXT4-fs (loop4): 1 truncate cleaned up
[  673.487648][T27032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  673.535712][T26657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  673.537099][T27020] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  673.577059][T27020] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  673.774401][T27052] overlayfs: invalid redirect (./file0/file1)
[  673.868029][T27056] loop6: detected capacity change from 0 to 256
[  673.896588][T27056] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  673.911572][T27056] FAT-fs (loop6): Filesystem has been set read-only
[  673.915627][T27056] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  673.919153][T27056] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  673.926414][T27056] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  673.931047][T27056] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  673.938891][T27056] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  673.942854][T27056] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  673.949716][T27056] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  673.957023][   T34] kauditd_printk_skb: 3 callbacks suppressed
[  673.957031][   T34] audit: type=1800 audit(2000000174.565:442): pid=27056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.8850" name="file2" dev="loop6" ino=1048738 res=0 errno=0
[  674.220081][T27070] loop4: detected capacity change from 0 to 32768
[  674.234207][T27070] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8856 (27070)
[  674.265441][T27070] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  674.272239][T27070] BTRFS info (device loop4): using sha256 checksum algorithm
[  674.321143][T27070] BTRFS info (device loop4): rebuilding free space tree
[  674.348804][T27070] BTRFS info (device loop4): enabling ssd optimizations
[  674.368329][T27070] BTRFS info (device loop4): turning on async discard
[  674.372856][T27070] BTRFS info (device loop4): enabling free space tree
[  674.385435][T27070] BTRFS info (device loop4): force clearing of disk cache
[  674.397495][T27070] BTRFS info (device loop4): enabling auto defrag
[  674.404474][T27070] BTRFS info (device loop4): trying to use backup root at mount time
[  674.445574][T26657] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  674.562853][T27105] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8866'.
[  674.614313][T27107] loop6: detected capacity change from 0 to 2048
[  674.621509][T27107] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  674.627441][T27107] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  674.631854][T27107] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  674.710562][T27109] loop4: detected capacity change from 0 to 256
[  674.715296][T27109] exfat: Invalid uid '0x00000000ffffffff'
[  674.811273][T27111] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  674.976854][T27122] Trying to free block not in datazone
[  675.127890][T27136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  675.206624][T27140] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8882'.
[  675.267858][T27146] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  675.282299][T27146] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  675.753947][ T5664] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  675.919240][ T5664] usb 5-1: unable to get BOS descriptor or descriptor too short
[  675.922533][ T5664] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  675.927970][ T5664] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  675.932050][ T5664] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  675.935805][ T5664] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  675.939650][ T5664] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  675.943715][ T5664] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  675.947114][ T5664] usb 5-1: config 1 interface 1 has no altsetting 0
[  675.953162][ T5664] usb 5-1: string descriptor 0 read error: -22
[  675.955859][ T5664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.333686][T27176] set_capacity_and_notify: 3 callbacks suppressed
[  677.333695][T27176] loop6: detected capacity change from 0 to 16
[  677.341677][T27176] erofs (device loop6): dirblkbits 6 isn't supported
[  677.361295][T27176] netlink: 'syz.6.8899': attribute type 4 has an invalid length.
[  677.559014][ T5664] usb 5-1: USB disconnect, device number 64
[  677.654131][T27182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8902'.
[  677.865531][T27209] loop6: detected capacity change from 0 to 512
[  677.870443][T27209] EXT4-fs: Ignoring removed i_version option
[  677.897885][T27209] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  677.902014][T27209] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  677.915540][T27214] program syz.7.8915 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  677.922466][T25233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  678.010992][T27220] loop7: detected capacity change from 0 to 512
[  678.013398][T27220] EXT4-fs: Ignoring removed nomblk_io_submit option
[  678.032905][T27220] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  678.039313][T27220] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102]
[  678.044858][T27220] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80)
[  678.049354][T27220] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features
[  678.053625][T27220] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  678.063892][T27220] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.8918: dx entry: limit 65535 != root limit 120
[  678.071248][T27220] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.8918: Corrupt directory, running e2fsck is recommended
[  678.081048][T27220] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.8918: dx entry: limit 65535 != root limit 120
[  678.087657][T27220] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.8918: Corrupt directory, running e2fsck is recommended
[  678.101168][T27229] ata1.00: invalid cdb length 6
[  678.104158][T27220] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.8918: dx entry: limit 65535 != root limit 120
[  678.109732][T27220] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.8918: Corrupt directory, running e2fsck is recommended
[  678.115733][T27220] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.8918: dx entry: limit 65535 != root limit 120
[  678.120530][T27220] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.8918: Corrupt directory, running e2fsck is recommended
[  678.127988][T27220] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.8918: dx entry: limit 65535 != root limit 120
[  678.132639][T27220] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.8918: Corrupt directory, running e2fsck is recommended
[  678.183003][T26381] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  678.355107][   T34] audit: type=1326 audit(2000000178.597:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27238 comm="syz.7.8926" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0679e0d9 code=0x7ffc0000
[  678.371563][   T34] audit: type=1326 audit(2000000178.597:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27238 comm="syz.7.8926" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0679e0d9 code=0x7ffc0000
[  678.387641][   T34] audit: type=1326 audit(2000000178.597:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27238 comm="syz.7.8926" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0679e0d9 code=0x7ffc0000
[  678.409022][   T34] audit: type=1326 audit(2000000178.597:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27238 comm="syz.7.8926" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0679e0d9 code=0x7ffc0000
[  678.422828][   T34] audit: type=1326 audit(2000000178.597:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27238 comm="syz.7.8926" exe="/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fdd0679e0d9 code=0x7ffc0000
[  678.430548][T27243] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8928'.
[  678.433877][T27243] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8928'.
[  678.439151][   T34] audit: type=1326 audit(2000000178.597:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27238 comm="syz.7.8926" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0679e0d9 code=0x7ffc0000
[  678.452559][   T34] audit: type=1326 audit(2000000178.597:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27238 comm="syz.7.8926" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0679e0d9 code=0x7ffc0000
[  678.479307][   T34] audit: type=1326 audit(2000000178.597:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27238 comm="syz.7.8926" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdd0679e0d9 code=0x7ffc0000
[  678.491471][   T34] audit: type=1326 audit(2000000178.597:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27238 comm="syz.7.8926" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdd0679e0d9 code=0x7ffc0000
[  679.106333][T27254] loop7: detected capacity change from 0 to 1024
[  679.110239][T27254] EXT4-fs: Ignoring removed nobh option
[  679.149099][T27254] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  679.220545][T27251] EXT4-fs error (device loop7): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.7.8931: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[  679.230672][T27251] EXT4-fs (loop7): Remounting filesystem read-only
[  679.411197][T27265] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8936'.
[  679.414354][T27265] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8936'.
[  679.897962][T27278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8942'.
[  679.906958][T26381] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  680.259890][T27292] loop7: detected capacity change from 0 to 512
[  680.269490][T27292] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  680.282584][T27292] EXT4-fs (loop7): orphan cleanup on readonly fs
[  680.290300][T27292] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.8948: bad orphan inode 15
[  680.295280][T27292] loop7: lost filesystem error report for type 5 error -117
[  680.295558][T27292] ext4_test_bit(bit=14, block=18) = 1
[  680.299930][T27292] is_bad_inode(inode)=0
[  680.301304][T27292] NEXT_ORPHAN(inode)=1023
[  680.302704][T27292] max_ino=32
[  680.303841][T27292] i_nlink=0
[  680.307901][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  680.309962][    C1] EXT4-fs (loop7): initial error at time 2000000180: ext4_orphan_get:1425
[  680.312591][    C1] EXT4-fs (loop7): last error at time 2000000180: ext4_orphan_get:1425
[  680.335413][T27292] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2972: inode #15: comm syz.7.8948: corrupted xattr block 19: e_value size too large
[  680.340323][T27292] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  680.350702][T27292] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -117)
[  680.443506][T27295] 8021q: adding VLAN 0 to HW filter on device bond0
[  680.449623][T27295] 8021q: adding VLAN 0 to HW filter on device team0
[  680.467748][T27295] 8021q: adding VLAN 0 to HW filter on device batadv0
[  680.485982][T27292] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  680.516401][T27295] batman_adv: batadv0: Interface activated: batadv_slave_0
[  680.519682][T27295] batman_adv: batadv0: Interface activated: batadv_slave_1
[  680.526289][T27295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  680.526625][T27277] udc dummy_udc.0: failed to start g1: -19
[  680.529528][T27295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  680.532079][T27295] veth1_vlan: left promiscuous mode
[  680.537146][T27295] veth0_vlan: left promiscuous mode
[  680.539492][T27295] veth0_vlan: entered promiscuous mode
[  680.542335][T27295] veth1_vlan: entered promiscuous mode
[  680.549019][T27295] veth1_macvtap: left promiscuous mode
[  680.551221][T27295] veth0_macvtap: left promiscuous mode
[  680.553364][T27295] veth0_macvtap: entered promiscuous mode
[  680.555164][T27292] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz.7.8948: deleted inode referenced: 15
[  680.559213][T27295] veth1_macvtap: entered promiscuous mode
[  680.560677][T27277] UDC core: g1: couldn't find an available UDC or it's busy
[  680.563511][T27295] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  680.567184][T27295] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  680.569937][T27295] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  680.572564][T27295] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  680.578731][T25430] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  680.595794][ T8717] bridge0: port 1(bridge_slave_0) entered blocking state
[  680.598738][ T8717] bridge0: port 1(bridge_slave_0) entered forwarding state
[  680.615045][ T8717] bridge0: port 2(bridge_slave_1) entered blocking state
[  680.617303][ T8717] bridge0: port 2(bridge_slave_1) entered forwarding state
[  680.646001][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  680.659724][T26381] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  680.663866][T25430] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  680.685172][T25430] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  680.806144][T27307] netlink: 164 bytes leftover after parsing attributes in process `syz.7.8956'.
[  680.876083][T27314] loop7: detected capacity change from 0 to 128
[  680.879556][T27314] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  681.335538][T20339] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  681.490109][T27358] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8980'.
[  681.520666][T20339] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  681.528029][T20339] usb 7-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  681.536163][T20339] usb 7-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  681.544457][T20339] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.550433][T20339] pl2303 7-1:1.0: required endpoints missing
[  681.557386][T20339] pl2303 7-1:1.1: pl2303 converter detected
[  681.560895][T27362] xt_l2tp: unknown flags: 10
[  681.566224][T20339] usb 7-1: pl2303 converter now attached to ttyUSB0
[  681.599118][T27364] ip_tables: iptables: counters copy to user failed while replacing table
[  681.782620][ T9132] usb 7-1: USB disconnect, device number 11
[  681.792260][ T9132] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  681.796213][ T9132] pl2303 7-1:1.1: device disconnected
[  682.527029][T27367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  683.253378][T27400] IPv6: Can't replace route, no match found
[  683.305849][T27404] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  683.435039][T27416] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9001'.
[  683.491185][T27418] kAFS: unable to lookup cell '('
[  683.572302][T27425] loop7: detected capacity change from 0 to 8
[  683.795661][ T9132] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  683.958215][ T9132] usb 7-1: Using ep0 maxpacket: 16
[  683.960858][ T9132] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  683.967277][ T9132] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.970070][ T9132] usb 7-1: Product: syz
[  683.971675][ T9132] usb 7-1: Manufacturer: syz
[  683.973229][ T9132] usb 7-1: SerialNumber: syz
[  683.976614][ T9132] usb 7-1: config 0 descriptor??
[  683.981686][ T9132] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  684.914911][T27437] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9012'.
[  684.919646][T27437] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9012'.
[  685.232656][T27453] loop4: detected capacity change from 0 to 256
[  685.293928][ T9132] ssu100 7-1:0.0: probe with driver ssu100 failed with error -71
[  685.302746][ T9132] usb 7-1: USB disconnect, device number 12
[  685.356579][T27459] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9023'.
[  685.431923][T27465] program syz.4.9026 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  685.949108][T27486] loop6: detected capacity change from 0 to 128
[  685.995513][ T4988] Bluetooth: hci3: unexpected event for opcode 0x0c23
[  686.571289][   T34] audit: type=1326 audit(2000000186.210:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27478 comm="syz.4.9032" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640d79e0d9 code=0x7fc00000
[  686.883417][T27500] loop7: detected capacity change from 0 to 512
[  686.891914][T27500] EXT4-fs: Ignoring removed i_version option
[  686.897181][T27500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  686.907142][ T9132] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  687.019340][T27500] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  687.024511][T27500] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  687.072347][ T9132] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  687.078060][T26381] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  687.109885][ T9132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.119080][ T9132] usb 5-1: Product: syz
[  687.120473][ T9132] usb 5-1: Manufacturer: syz
[  687.126544][ T9132] usb 5-1: SerialNumber: syz
[  687.143908][T27510] usb usb8: usbfs: process 27510 (syz.7.9043) did not claim interface 0 before use

syzkaller
syzkaller login: [  687.222315][T27516] CIFS: Attempting to mount //127.0.0.1/share
[  687.225560][ T3153] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  687.679436][T20339] usb 5-1: USB disconnect, device number 65
[  687.756411][T27530] openvswitch: netlink: Key type 29 is not supported
[  688.129565][T27516] CIFS: VFS: Error connecting to socket. Aborting operation.
[  688.132900][T27516] CIFS: VFS: cifs_mount failed w/return code = -4
[  688.177249][T27550] loop7: detected capacity change from 0 to 512
[  688.188839][T27550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  688.193377][T27550] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  688.220360][T26381] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  688.404442][ T3153] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  688.419007][ T3153] ath9k_htc: Failed to initialize the device
[  688.425547][T20339] usb 5-1: ath9k_htc: USB layer deinitialized
[  688.460925][T27569] loop4: detected capacity change from 0 to 512
[  688.470240][T27569] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.9068: Directory hole found for htree index block 0
[  688.476098][T27568] loop7: detected capacity change from 0 to 2048
[  688.480838][T27569] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  688.481102][T27569] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  688.488559][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  688.491136][    C1] EXT4-fs (loop4): initial error at time 2000000187: dx_probe:791: inode 2
[  688.494582][    C1] EXT4-fs (loop4): last error at time 2000000187: dx_probe:791: inode 2
[  688.502123][T27569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  688.504206][T27568] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  688.530748][T27568] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24)
[  688.537922][T26657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  688.740153][T27584] loop4: detected capacity change from 0 to 512
[  688.745546][T27584] EXT4-fs: Ignoring removed nomblk_io_submit option
[  688.751701][T27584] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  688.760695][T27584] EXT4-fs (loop4): 1 truncate cleaned up
[  688.766527][T27584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  688.812497][   T34] audit: type=1800 audit(2000000188.267:453): pid=27584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9076" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=20 res=0 errno=0
[  688.851701][T26657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  689.723870][   T33] usb 5-1: new full-speed USB device number 66 using dummy_hcd
[  689.888564][   T33] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  689.893806][   T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  689.898370][   T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 16727, setting to 64
[  689.905595][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.909505][   T33] usb 5-1: Product: syz
[  689.911388][   T33] usb 5-1: Manufacturer: syz
[  689.913401][   T33] usb 5-1: SerialNumber: syz
[  689.923448][   T33] usb 5-1: config 0 descriptor??
[  689.928306][T27623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  689.936167][   T33] ums-isd200 5-1:0.0: USB Mass Storage device detected
[  690.165678][   T33] scsi host6: usb-storage 5-1:0.0
[  690.178575][   T33] usb 5-1: USB disconnect, device number 66
[  691.628674][T27637] netlink: 'syz.7.9097': attribute type 9 has an invalid length.
[  691.666387][T27641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  691.872820][T27656] rdma_op ffff8881bf3931f0 conn xmit_rdma 0000000000000000
[  691.918809][T27661] ieee802154 phy0 wpan0: encryption failed: -90
[  691.962142][T27664] Context (ID=0x0) not attached to queue pair (handle=0x4df:0x0)
[  692.042631][T27673] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9115'.
[  692.046264][T27673] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9115'.
[  692.130234][T27677] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9117'.
[  692.192926][T27679] netlink: 52 bytes leftover after parsing attributes in process `syz.7.9118'.
[  692.428048][T27692] loop7: detected capacity change from 0 to 128
[  692.443965][T27692] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  692.449443][T27692] hpfs: filesystem error: improperly stopped
[  692.452003][T27692] hpfs: You really don't want any checks? You are crazy...
[  692.457050][T27692] hpfs: hpfs_map_sector(): read error
[  692.459275][T27692] hpfs: code page support is disabled
[  692.461682][T27692] hpfs: hpfs_map_4sectors(): unaligned read
[  692.464202][T27692] hpfs: hpfs_map_4sectors(): unaligned read
[  692.466890][T27692] hpfs: filesystem error: unable to find root dir
[  692.921680][T27708] netlink: 'syz.7.9125': attribute type 5 has an invalid length.
[  693.099812][T27725] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9139'.
[  693.113942][T27719] loop4: detected capacity change from 0 to 4096
[  693.117288][ T9132] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  693.127150][T27719] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  693.135344][T27719] ntfs3(loop4): Failed to load $BadClus (-22).
[  693.255085][T27736] loop4: detected capacity change from 0 to 512
[  693.260037][T27736] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  693.266794][T27736] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.9144: bad orphan inode 131083
[  693.271382][T27736] loop4: lost filesystem error report for type 5 error -117
[  693.272614][T27736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  693.290397][ T9132] usb 7-1: Using ep0 maxpacket: 8
[  693.295041][ T9132] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  693.296692][T26657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  693.298849][ T9132] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  693.304230][ T9132] usb 7-1: config 0 has no interface number 0
[  693.306600][ T9132] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  693.310206][ T9132] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  693.314528][ T9132] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  693.318163][ T9132] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  693.324958][ T9132] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.336406][ T9132] usb 7-1: config 0 descriptor??
[  693.358525][ T9132] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  693.482347][T27754] loop4: detected capacity change from 0 to 256
[  693.487314][T27754] FAT-fs (loop4): bogus number of FAT sectors
[  693.495163][T27754] FAT-fs (loop4): Can't find a valid FAT filesystem
[  693.563310][T27758] futex_wake_op: syz.4.9154 tries to shift op by 144; fix this program
[  693.570698][T27758] futex_wake_op: syz.4.9154 tries to shift op by 144; fix this program
[  693.574210][ T9132] usb 7-1: USB disconnect, device number 13
[  693.589858][ T9132] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  693.617403][T27760] loop4: detected capacity change from 0 to 1024
[  693.836897][T27768] loop4: detected capacity change from 0 to 2048
[  693.847378][T27768] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  693.928454][T27770] loop4: detected capacity change from 0 to 1024
[  694.507862][T27782] xt_hashlimit: size too large, truncated to 1048576
[  694.510617][T27782] xt_hashlimit: max too large, truncated to 1048576
[  694.513619][T27782] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  694.549222][ T4988] Bluetooth: hci3: unexpected event for opcode 0x0428
[  694.582329][   T34] audit: type=1326 audit(657.636:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27785 comm="syz.6.9167" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ed119e0d9 code=0x0
[  695.674397][T27801] loop6: detected capacity change from 0 to 512
[  695.702480][T27801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  695.907506][T25233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  696.046686][T27809] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9176'.
[  696.404660][T27832] loop4: detected capacity change from 0 to 512
[  696.415529][T27832] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.9187: inode has both inline data and extents flags
[  696.429127][T27832] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  696.429814][T27832] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.9187: couldn't read orphan inode 15 (err -117)
[  696.432964][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  696.432975][    C1] EXT4-fs (loop4): initial error at time 659: ext4_orphan_get:1399: inode 15
[  696.432988][    C1] EXT4-fs (loop4): last error at time 659: ext4_orphan_get:1399: inode 15
[  696.451959][T27832] loop4: lost filesystem error report for type 5 error -117
[  696.453245][T27832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  696.556702][T26657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  696.604537][T27837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9189'.
[  696.722918][T27841] loop7: detected capacity change from 0 to 2048
[  696.734075][T27841] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  696.929655][T27843] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  696.941132][T27843] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  697.473500][   T33] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  697.646258][   T33] usb 7-1: Using ep0 maxpacket: 32
[  697.653177][   T33] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  697.663312][   T33] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  697.672610][   T33] usb 7-1: config 0 has no interface number 0
[  697.687128][   T33] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.694523][   T33] usb 7-1: Product: syz
[  697.700077][   T33] usb 7-1: Manufacturer: syz
[  697.706910][   T33] usb 7-1: SerialNumber: syz
[  697.721073][   T33] usb 7-1: config 0 descriptor??
[  697.733590][   T33] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  697.760819][T27865] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.9202 (27865)
[  697.773364][T27865] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  697.779665][T27865] BTRFS info (device loop4): using sha256 checksum algorithm
[  697.815292][T27865] BTRFS info (device loop4): enabling ssd optimizations
[  697.823021][T27865] BTRFS info (device loop4): turning on async discard
[  697.826858][T27865] BTRFS info (device loop4): enabling free space tree
[  697.862074][T26657] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  697.974605][   T34] audit: type=1326 audit(660.764:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27847 comm="syz.6.9194" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed119e0d9 code=0x7ffc0000
[  697.995097][   T34] audit: type=1326 audit(660.764:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27847 comm="syz.6.9194" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed119e0d9 code=0x7ffc0000
[  698.008570][   T34] audit: type=1326 audit(660.764:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27847 comm="syz.6.9194" exe="/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f4ed119e0d9 code=0x7ffc0000
[  698.030086][   T34] audit: type=1326 audit(660.782:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27847 comm="syz.6.9194" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed119e0d9 code=0x7ffc0000
[  698.043119][   T33] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  698.054346][   T34] audit: type=1326 audit(660.782:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27847 comm="syz.6.9194" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed119e0d9 code=0x7ffc0000
[  698.075350][   T34] audit: type=1326 audit(660.791:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27847 comm="syz.6.9194" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ed119e0d9 code=0x7ffc0000
[  698.103104][   T34] audit: type=1326 audit(660.791:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27847 comm="syz.6.9194" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed119e0d9 code=0x7ffc0000
[  698.116300][   T33] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  698.140436][   T34] audit: type=1326 audit(660.791:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27847 comm="syz.6.9194" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed119e0d9 code=0x7ffc0000
[  698.177888][   T34] audit: type=1326 audit(660.791:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27847 comm="syz.6.9194" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ed119e0d9 code=0x7ffc0000
[  698.278602][T27897] set_capacity_and_notify: 3 callbacks suppressed
[  698.278611][T27897] loop7: detected capacity change from 0 to 128
[  698.459911][T27904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9214'.
[  698.528394][    C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  698.531232][   T33] usb 7-1: USB disconnect, device number 14
[  698.581311][   T33] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  698.595806][   T33] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  698.609699][   T33] quatech2 7-1:0.51: device disconnected
[  698.853224][T27926] block2mtd: device name too long
[  699.128902][T27940] loop7: detected capacity change from 0 to 2048
[  699.259889][T27948] loop6: detected capacity change from 0 to 4096
[  699.300301][T27948] ntfs3(loop6): Failed to initialize $Extend/$Reparse.
[  699.387483][T27957] overlay: Bad value for 'workdir'
[  699.396102][T27959] loop6: detected capacity change from 0 to 164
[  699.811308][T27974] loop7: detected capacity change from 0 to 256
[  699.816862][T27974] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d)
[  699.899664][T27982] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9250'.
[  700.070530][T27988] loop7: detected capacity change from 0 to 32768
[  700.090735][T27988] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  700.105717][T27988] XFS (loop7): Ending clean mount
[  700.147488][T26381] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  700.174508][ T9132] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  700.235039][T27998] loop7: detected capacity change from 0 to 256
[  700.358084][ T9132] usb 5-1: Using ep0 maxpacket: 16
[  700.359884][T28004] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.9257'.
[  700.362293][ T9132] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  700.376155][ T9132] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  700.384428][ T9132] usb 5-1: config 0 has no interface number 0
[  700.449553][ T9132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.455503][ T9132] usb 5-1: Product: syz
[  700.456865][ T9132] usb 5-1: Manufacturer: syz
[  700.461802][ T9132] usb 5-1: SerialNumber: syz
[  700.470702][ T9132] usb 5-1: config 0 descriptor??
[  700.474503][ T9132] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  700.559318][T28012] netlink: 'syz.6.9261': attribute type 83 has an invalid length.
[  700.607945][   T33] IPVS: starting estimator thread 0...
[  700.702219][ T9132] gspca_spca1528: reg_w err -71
[  700.724586][ T9132] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71
[  700.730062][ T9132] usb 5-1: USB disconnect, device number 67
[  700.735215][T28015] IPVS: using max 94 ests per chain, 225600 per kthread
[  700.802366][T28022] MTRR 2 not used
[  700.928395][T28030] loop6: detected capacity change from 0 to 16
[  700.938601][T28030] erofs (device loop6): mounted with root inode @ nid 36.
[  700.954451][T28030] erofs (device loop6): invalid fast symlink size 39 @ nid 83
[  701.072473][T28034] gadgetfs: bound to dummy_udc driver
[  701.428653][T28053] loop4: detected capacity change from 0 to 1024
[  701.486527][T28056] loop6: detected capacity change from 0 to 512
[  701.491629][T28056] EXT4-fs: Ignoring removed bh option
[  701.538113][T28056] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.9281: corrupted in-inode xattr: e_value size too large
[  701.542536][T28056] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  701.542815][T28056] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.9281: couldn't read orphan inode 15 (err -117)
[  701.549445][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  701.549455][    C1] EXT4-fs (loop6): initial error at time 664: ext4_iget_extra_inode:5180: inode 15
[  701.549467][    C1] EXT4-fs (loop6): last error at time 664: ext4_iget_extra_inode:5180: inode 15
[  701.557973][T28056] loop6: lost filesystem error report for type 5 error -117
[  701.559341][T28056] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  701.588804][T25233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  702.428391][T28070] netlink: 'syz.4.9287': attribute type 3 has an invalid length.
[  702.449038][T28073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9288'.
[  702.468805][T28073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9288'.
[  702.494972][ T5655] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  702.502578][ T5655] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  702.507547][ T5655] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  702.520187][ T5655] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  702.533324][T28081] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  702.539715][T28081] EXT4-fs (loop4): 1 truncate cleaned up
[  702.542695][T28081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  702.554904][T28081] EXT4-fs error (device loop4): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.4.9292: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  702.564989][T28081] EXT4-fs error (device loop4) in ext4_delete_entry:2744: Corrupt filesystem
[  702.584986][T26657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  702.772534][   T33] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  702.946927][   T33] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  702.952098][   T33] usb 7-1: config 0 has an invalid interface number: 117 but max is 0
[  702.955659][   T33] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  702.960542][   T33] usb 7-1: config 0 has no interface number 0
[  702.963435][   T33] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[  702.968437][   T33] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  702.972677][   T33] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  702.982132][   T33] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.985209][   T33] usb 7-1: Product: syz
[  702.986690][   T33] usb 7-1: Manufacturer: syz
[  702.988356][   T33] usb 7-1: SerialNumber: syz
[  702.993455][   T33] usb 7-1: config 0 descriptor??
[  703.436919][   T33] usbtouchscreen 7-1:0.117: probe with driver usbtouchscreen failed with error -71
[  703.460000][   T33] usb 7-1: USB disconnect, device number 15
[  703.762922][T28095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9297'.
[  703.841346][T28096] set_capacity_and_notify: 1 callbacks suppressed
[  703.841404][T28096] loop4: detected capacity change from 0 to 256
[  703.850581][T28096] exfat: Unknown parameter 'uinue'
[  704.665057][T28105] netlink: 'syz.6.9301': attribute type 2 has an invalid length.
[  704.681211][T28105] netlink: 'syz.6.9301': attribute type 2 has an invalid length.
[  704.692547][T28105] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.9301'.
[  705.192455][T28142] loop7: detected capacity change from 0 to 512
[  705.196818][T28142] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  705.206434][T28142] EXT4-fs (loop7): 1 truncate cleaned up
[  705.210105][T28142] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  705.265181][ T5656] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  705.403959][T26381] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  705.430675][ T5656] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  705.435502][ T5656] usb 7-1: config 0 has an invalid interface number: 11 but max is 0
[  705.457914][ T5656] usb 7-1: config 0 has no interface number 0
[  705.465149][ T5656] usb 7-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 129, changing to 11
[  705.475907][ T5656] usb 7-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  705.487558][ T5656] usb 7-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 34719, setting to 1024
[  705.498453][ T5656] usb 7-1: config 0 interface 11 has no altsetting 0
[  705.503029][ T5656] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.516721][ T5656] usb 7-1: config 0 descriptor??
[  705.523798][T28130] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  705.531135][ T5656] keyspan 7-1:0.11: Keyspan 2 port adapter converter detected
[  705.540443][ T5656] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 81
[  705.557074][ T5656] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 82
[  705.565049][ T5656] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 1
[  705.566962][T28153] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9322'.
[  705.574818][ T5656] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 2
[  705.577267][T28153] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9322'.
[  705.580631][ T5656] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 85
[  705.584781][ T5656] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 5
[  705.591623][ T5656] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  705.607624][ T5656] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 83
[  705.620060][ T5656] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 84
[  705.632503][ T5656] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 3
[  705.643926][ T5656] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 4
[  705.651475][ T5656] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 86
[  705.654867][ T5656] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 6
[  705.669969][ T5656] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  705.756010][ T5656] usb 7-1: USB disconnect, device number 16
[  705.787103][ T5656] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  705.810252][ T5656] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  705.817369][ T5656] keyspan 7-1:0.11: device disconnected
[  706.203393][T28162] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  706.502902][T28179] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9334'.
[  706.525414][T28181] loop6: detected capacity change from 0 to 512
[  706.547249][T28181] 
[  706.548047][T28181] ======================================================
[  706.550665][T28181] WARNING: possible circular locking dependency detected
[  706.553385][T28181] syzkaller #0 Tainted: G             L     
[  706.555865][T28181] ------------------------------------------------------
[  706.558865][T28181] syz.6.9335/28181 is trying to acquire lock:
[  706.561313][T28181] ffff888021506c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  706.565323][T28181] 
[  706.565323][T28181] but task is already holding lock:
[  706.568139][T28181] ffff888111cc5520 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3d0/0x700
[  706.571722][T28181] 
[  706.571722][T28181] which lock already depends on the new lock.
[  706.571722][T28181] 
[  706.575706][T28181] 
[  706.575706][T28181] the existing dependency chain (in reverse order) is:
[  706.579190][T28181] 
[  706.579190][T28181] -> #1 (&ei->xattr_sem){++++}-{4:4}:
[  706.582137][T28181]        down_write+0x96/0x200
[  706.584060][T28181]        ext4_destroy_inline_data+0x28/0xe0
[  706.586423][T28181]        ext4_do_writepages+0x573/0x47a0
[  706.588702][T28181]        ext4_writepages+0x241/0x3b0
[  706.590865][T28181]        do_writepages+0x338/0x560
[  706.592837][T28181]        file_write_and_wait_range+0x36e/0x440
[  706.595280][T28181]        mmb_fsync_noflush+0x73/0x1d0
[  706.597246][T28181]        ext4_sync_file+0x41a/0xd00
[  706.599280][T28181]        ext4_buffered_write_iter+0x2c7/0x370
[  706.601693][T28181]        ext4_file_write_iter+0x947/0x1c70
[  706.604048][T28181]        vfs_write+0x612/0xba0
[  706.605990][T28181]        __x64_sys_pwrite64+0x196/0x220
[  706.608162][T28181]        do_syscall_64+0x174/0x580
[  706.610188][T28181]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.612658][T28181] 
[  706.612658][T28181] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  706.615708][T28181]        __lock_acquire+0x1520/0x2cf0
[  706.617858][T28181]        lock_acquire+0x106/0x350
[  706.619884][T28181]        percpu_down_read_internal+0x48/0x1c0
[  706.622219][T28181]        ext4_writepages+0x205/0x3b0
[  706.624340][T28181]        do_writepages+0x338/0x560
[  706.626369][T28181]        __writeback_single_inode+0x12e/0xf90
[  706.628788][T28181]        writeback_single_inode+0x4ef/0xe70
[  706.631101][T28181]        write_inode_now+0x1c2/0x290
[  706.633173][T28181]        iput+0x98b/0xf00
[  706.635289][T28181]        ext4_xattr_block_set+0x1b0c/0x2a80
[  706.637547][T28181]        ext4_expand_extra_isize_ea+0x1342/0x1e70
[  706.639883][T28181]        __ext4_expand_extra_isize+0x30d/0x400
[  706.642127][T28181]        __ext4_mark_inode_dirty+0x455/0x700
[  706.644241][T28181]        ext4_evict_inode+0x976/0x10c0
[  706.646410][T28181]        evict+0x624/0xb50
[  706.648236][T28181]        ext4_orphan_cleanup+0xc7a/0x14c0
[  706.650487][T28181]        ext4_fill_super+0x5cb4/0x65c0
[  706.652674][T28181]        get_tree_bdev_flags+0x430/0x4f0
[  706.654974][T28181]        vfs_get_tree+0x92/0x2a0
[  706.656946][T28181]        do_new_mount+0x319/0xdc0
[  706.658943][T28181]        __se_sys_mount+0x31d/0x420
[  706.661017][T28181]        do_syscall_64+0x174/0x580
[  706.663099][T28181]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.665691][T28181] 
[  706.665691][T28181] other info that might help us debug this:
[  706.665691][T28181] 
[  706.669487][T28181]  Possible unsafe locking scenario:
[  706.669487][T28181] 
[  706.672349][T28181]        CPU0                    CPU1
[  706.674491][T28181]        ----                    ----
[  706.676626][T28181]   lock(&ei->xattr_sem);
[  706.678325][T28181]                                lock(&sbi->s_writepages_rwsem);
[  706.681319][T28181]                                lock(&ei->xattr_sem);
[  706.683991][T28181]   rlock(&sbi->s_writepages_rwsem);
[  706.686036][T28181] 
[  706.686036][T28181]  *** DEADLOCK ***
[  706.686036][T28181] 
[  706.689194][T28181] 3 locks held by syz.6.9335/28181:
[  706.691306][T28181]  #0: ffff88811078a0d8 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: sget_fc+0x938/0x1900
[  706.695289][T28181]  #1: ffff88811078a640 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x426/0x10c0
[  706.699140][T28181]  #2: ffff888111cc5520 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3d0/0x700
[  706.703141][T28181] 
[  706.703141][T28181] stack backtrace:
[  706.705374][T28181] CPU: 0 UID: 0 PID: 28181 Comm: syz.6.9335 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  706.705395][T28181] Tainted: [L]=SOFTLOCKUP
[  706.705399][T28181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  706.705409][T28181] Call Trace:
[  706.705418][T28181]  <TASK>
[  706.705424][T28181]  dump_stack_lvl+0xe8/0x150
[  706.705452][T28181]  print_circular_bug+0x2e1/0x300
[  706.705474][T28181]  check_noncircular+0x12e/0x150
[  706.705495][T28181]  __lock_acquire+0x1520/0x2cf0
[  706.705516][T28181]  ? __lock_acquire+0x683/0x2cf0
[  706.705534][T28181]  ? ext4_writepages+0x205/0x3b0
[  706.705547][T28181]  lock_acquire+0x106/0x350
[  706.705562][T28181]  ? ext4_writepages+0x205/0x3b0
[  706.705579][T28181]  percpu_down_read_internal+0x48/0x1c0
[  706.705593][T28181]  ? ext4_writepages+0x205/0x3b0
[  706.705606][T28181]  ext4_writepages+0x205/0x3b0
[  706.705622][T28181]  ? __pfx_ext4_writepages+0x10/0x10
[  706.705640][T28181]  ? do_raw_spin_unlock+0x4d/0x210
[  706.705653][T28181]  ? __pfx_ext4_writepages+0x10/0x10
[  706.705667][T28181]  do_writepages+0x338/0x560
[  706.705685][T28181]  ? do_raw_spin_lock+0x12b/0x2f0
[  706.705698][T28181]  __writeback_single_inode+0x12e/0xf90
[  706.705716][T28181]  writeback_single_inode+0x4ef/0xe70
[  706.705729][T28181]  write_inode_now+0x1c2/0x290
[  706.705743][T28181]  ? __pfx_write_inode_now+0x10/0x10
[  706.705790][T28181]  ? do_raw_spin_unlock+0x4d/0x210
[  706.705805][T28181]  iput+0x98b/0xf00
[  706.705823][T28181]  ext4_xattr_block_set+0x1b0c/0x2a80
[  706.705847][T28181]  ? __pfx_check_xattrs+0x10/0x10
[  706.705860][T28181]  ? xattr_find_entry+0x126/0x280
[  706.705875][T28181]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  706.705888][T28181]  ? ext4_xattr_block_find+0x2a1/0x320
[  706.705903][T28181]  ext4_expand_extra_isize_ea+0x1342/0x1e70
[  706.705926][T28181]  __ext4_expand_extra_isize+0x30d/0x400
[  706.705943][T28181]  __ext4_mark_inode_dirty+0x455/0x700
[  706.705962][T28181]  ext4_evict_inode+0x976/0x10c0
[  706.705981][T28181]  ? __pfx_ext4_evict_inode+0x10/0x10
[  706.705998][T28181]  ? do_raw_spin_unlock+0x4d/0x210
[  706.706010][T28181]  ? __pfx_ext4_evict_inode+0x10/0x10
[  706.706024][T28181]  evict+0x624/0xb50
[  706.706038][T28181]  ? __pfx_evict+0x10/0x10
[  706.706049][T28181]  ? do_raw_spin_unlock+0x4d/0x210
[  706.706062][T28181]  ? _raw_spin_unlock+0x28/0x50
[  706.706074][T28181]  ? iput+0xb84/0xf00
[  706.706087][T28181]  ext4_orphan_cleanup+0xc7a/0x14c0
[  706.706098][T28181]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  706.706119][T28181]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[  706.706132][T28181]  ? ext4_register_li_request+0x259/0x720
[  706.706152][T28181]  ? errseq_check_and_advance+0x66/0x120
[  706.706172][T28181]  ext4_fill_super+0x5cb4/0x65c0
[  706.706192][T28181]  ? __pfx_ext4_fill_super+0x10/0x10
[  706.706206][T28181]  ? snprintf+0xe8/0x140
[  706.706220][T28181]  ? __pfx_snprintf+0x10/0x10
[  706.706231][T28181]  ? set_blocksize+0x1c9/0x440
[  706.706245][T28181]  ? sb_set_blocksize+0x155/0x240
[  706.706259][T28181]  ? setup_bdev_super+0x4c1/0x5b0
[  706.706277][T28181]  get_tree_bdev_flags+0x430/0x4f0
[  706.706293][T28181]  ? __pfx_ext4_fill_super+0x10/0x10
[  706.706307][T28181]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  706.706327][T28181]  vfs_get_tree+0x92/0x2a0
[  706.706344][T28181]  do_new_mount+0x319/0xdc0
[  706.706359][T28181]  ? __pfx_do_new_mount+0x10/0x10
[  706.706373][T28181]  ? ns_capable+0x89/0xe0
[  706.706387][T28181]  ? path_mount+0x647/0x1040
[  706.706400][T28181]  ? user_path_at+0xd4/0x160
[  706.706416][T28181]  __se_sys_mount+0x31d/0x420
[  706.706430][T28181]  ? __pfx___se_sys_mount+0x10/0x10
[  706.706453][T28181]  ? __x64_sys_mount+0x20/0xc0
[  706.706468][T28181]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.706480][T28181]  do_syscall_64+0x174/0x580
[  706.706497][T28181]  ? trace_irq_disable+0x3b/0x140
[  706.706514][T28181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.706529][T28181] RIP: 0033:0x7f4ed119f34a
[  706.706542][T28181] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  706.706555][T28181] RSP: 002b:00007f4ed2135e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  706.706568][T28181] RAX: ffffffffffffffda RBX: 00007f4ed2135ee0 RCX: 00007f4ed119f34a
[  706.706578][T28181] RDX: 0000200000000240 RSI: 0000200000000000 RDI: 00007f4ed2135ea0
[  706.706585][T28181] RBP: 0000200000000240 R08: 00007f4ed2135ee0 R09: 0000000000000000
[  706.706593][T28181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  706.706602][T28181] R13: 00007f4ed2135ea0 R14: 000000000000047a R15: 000000000000002c
[  706.706614][T28181]  </TASK>
[  706.899532][T28181] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.9335: iget: bad extra_isize 90 (inode size 256)
[  706.904914][T28181] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  706.905131][T28181] EXT4-fs (loop6): Remounting filesystem read-only
[  706.911296][T28181] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  706.915268][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  706.915280][    C0] EXT4-fs (loop6): initial error at time 669: ext4_xattr_inode_iget:441: inode 11
[  706.915296][    C0] EXT4-fs (loop6): last error at time 669: ext4_xattr_inode_iget:441: inode 11
[  706.925305][T28181] EXT4-fs (loop6): 1 orphan inode deleted
[  706.928074][T28181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  706.956536][T25233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
