last executing test programs:

9m0.423950414s ago: executing program 32 (id=382):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)

8m37.236574635s ago: executing program 33 (id=621):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
bind$vsock_stream(r1, 0x0, 0x0)
listen(r1, 0xfffffffe)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1, 0x6, 0x4, 0xe, 0x2, 0x7bf})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$binfmt_misc(r5, &(0x7f0000000000), 0xd)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
recvfrom$unix(r3, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
close(r6)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)

7m48.757216387s ago: executing program 3 (id=1093):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200002, &(0x7f0000000040)={[{@i_version}, {@norecovery}, {@grpjquota}]}, 0x9, 0x63a, &(0x7f0000000100)="$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")

7m48.657489936s ago: executing program 3 (id=1094):
r0 = add_key$keyring(&(0x7f0000002c40), &(0x7f0000002c80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000002b40)='cifs.idmap\x00', &(0x7f0000002b80)={'syz', 0x0}, &(0x7f0000002bc0)="c0d161588b1866d921eb5d6926d1eb24741c1c244d1cc65e024e712087510ac9bf", 0x21, r0)

7m48.605405261s ago: executing program 3 (id=1095):
mlockall(0x7)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
lseek(r0, 0x1000000, 0x0)

7m48.527863383s ago: executing program 3 (id=1096):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x400a8, 0x0, 0x1, 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0)
open_tree(r1, &(0x7f0000000640)='\x00', 0x89901)

7m48.462992168s ago: executing program 3 (id=1097):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000180)={0x4000}, 0x0)

7m48.236888983s ago: executing program 3 (id=1098):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

7m48.116218545s ago: executing program 34 (id=1098):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

6m21.396771877s ago: executing program 5 (id=2057):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

6m19.60293479s ago: executing program 5 (id=2076):
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @period={0x5d, 0xa370, 0x0, 0x7f, 0x2, {0x1, 0x3, 0x4, 0x2}, 0x0, 0x0}})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, <r2=>0x0})
prlimit64(r2, 0x8, &(0x7f0000000140)={0x3, 0x216}, &(0x7f0000000180))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x4800, 0x0)
getrlimit(0x8, &(0x7f0000000240))
umount2(&(0x7f0000000580)='./file0\x00', 0x3)
ioprio_get$uid(0x3, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x1b, 0x5, 0x418, 0x0, 0x230, 0xffffffff, 0x300, 0x300, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ip={@empty, @broadcast, 0xff000000, 0x0, 'tunl0\x00', 'dummy0\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x52}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x7, 0x4, 0xc, 0x0, 0x4], 0x3, 0x7}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @rand_addr=0x64010101, @multicast1, @icmp_id=0x66, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x0, 0x2}}, @common=@ttl={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x7f, 0xc, [0xe, 0x22, 0x3e, 0x11, 0x1b, 0x7, 0x15, 0x31, 0x12, 0xe, 0x27, 0x18, 0x26, 0x38, 0x2a, 0x33], 0x0, 0x7fffffff, 0x81}}}, {{@ip={@loopback, @local, 0xffffffff, 0x0, 'caif0\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @multicast2, @loopback, @icmp_id=0x64, @gre_key=0xfffe}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x78195242f88d37ad, @rand_addr=0x64010100, @broadcast, @icmp_id=0x67, @gre_key=0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8)

6m19.477008441s ago: executing program 5 (id=2079):
r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0xe705, 0x7, 0x3, 0x0, 0x80})

6m19.476664005s ago: executing program 5 (id=2081):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x557, &(0x7f0000000280)="$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")
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x20)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

6m19.352051233s ago: executing program 5 (id=2082):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
accept$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000180)=0x6e)

6m18.885852539s ago: executing program 5 (id=2083):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x4b)
unshare(0x28000600)

6m18.76570016s ago: executing program 35 (id=2083):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x4b)
unshare(0x28000600)

6m1.656320015s ago: executing program 4 (id=2287):
r0 = socket(0x1e, 0x4, 0x0)
ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xee00})

6m1.575431038s ago: executing program 4 (id=2288):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x4000)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000380)=@raw=[@tail_call], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
add_key$fscrypt_provisioning(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0)
r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1, 0x0, r0})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6m1.5744547s ago: executing program 4 (id=2290):
r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0)
setrlimit(0x7, &(0x7f0000000400))
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0xf)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

6m1.487014319s ago: executing program 4 (id=2291):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a3200"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xfffffffffffffffd)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB="726f6469722c756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c636865636b3d72656c617865642c73686f72746e616d653d77696e6e742c6e6f636173652c73686f72746e616d653d6c6f7765722c747a3d5554432c756e695f786c6174653d312c73686f77657865632c6e6f6e756d7461696c00002c007d88658bba9f86c7bbf19329c9a2a1c1511e3af2126ad5803a0f4e3d8521dd3f1b515a0673be6fb14db7c6534edf0e5e1d29e4f05d5c82fd3e0372c644e7ba7ccec22efc923b0beac1490e"], 0x0, 0x29f, &(0x7f0000000580)="$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")
r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020)
socket$nl_route(0x10, 0x3, 0x0)

6m1.482785255s ago: executing program 4 (id=2293):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})

6m0.895192838s ago: executing program 4 (id=2298):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0x58, 0x8f, 0x8, 0x4e7, 0x6651, 0x23ea, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x1, 0x2, 0x2, 0xff, 0x0, [], [{{0x9, 0x5, 0xa, 0x1c, 0x3ff, 0x1, 0xac, 0x8}}]}}]}}]}}, 0x0)

6m0.771257384s ago: executing program 36 (id=2298):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb6, 0x58, 0x8f, 0x8, 0x4e7, 0x6651, 0x23ea, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x1, 0x2, 0x2, 0xff, 0x0, [], [{{0x9, 0x5, 0xa, 0x1c, 0x3ff, 0x1, 0xac, 0x8}}]}}]}}]}}, 0x0)

4m59.10809768s ago: executing program 7 (id=3105):
prctl$PR_GET_TIMERSLACK(0x1e)

4m59.055777162s ago: executing program 7 (id=3106):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$xdp(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000009c0)="22613fdba0da05ae867cac56aab11ac819a18aa6c99d7fdee052ea631826c069d9fb7bfb1240a1b5f513daa7ab849014b47dea4039bc6b7006dc77e7d301078cd285f43e95002dab5758ce7e643c117ec7f7f7de04bd2940d7ee88f32c19d3fc098c6338fc038ff837a00b9dd4174284a1408ba88cb80fdb68c80e92dea7e1ab", 0x80}], 0x1, 0x0, 0x0, 0x20000010}, 0x840)
recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/135, 0x87}], 0x1}, 0x10000}], 0x1, 0x28101, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1401, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x8005}, 0x400c4)

4m58.155452718s ago: executing program 7 (id=3113):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x2, @empty, 0xe884}}, 0x0, 0x0, 0x50, 0x0, "a27eeb1839106138172ad1ed7d1d9bfbaeed4520662584241c0e774a4cad546325b89dfb9d33f6fb7f45545dc77c8dcbab7120d7aa88e3f6d21c20b0f00807c80cb089d6c97b63f247377bbfad8c40a1"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)

4m58.108151543s ago: executing program 7 (id=3114):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000400)={[{@utf8}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@discard}, {@discard}, {}, {@errors_remount}, {@errors_remount}, {@time_offset={'time_offset', 0x3d, 0x78}}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000001f80)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)

4m58.025915334s ago: executing program 7 (id=3115):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f0000000540)='./file1\x00', &(0x7f00000007c0)='./file0\x00')
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x101000, 0x0)
r2 = fanotify_init(0x200, 0x0)
fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x122)

4m57.76547613s ago: executing program 7 (id=3118):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000000140000000000000000000000070000009403"], 0x38}, 0x0)

4m57.634309288s ago: executing program 37 (id=3118):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000000140000000000000000000000070000009403"], 0x38}, 0x0)

3m35.442952393s ago: executing program 6 (id=4130):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x18}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94)

3m35.442682s ago: executing program 6 (id=4131):
r0 = socket$kcm(0x21, 0x2, 0x2)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
writev(r1, &(0x7f00000003c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x10120, 0x0, 0x0)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
close(r4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)

3m33.79083956s ago: executing program 6 (id=4148):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1, 0x228, &(0x7f0000000300)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1)
epoll_create1(0x0)

3m33.577647819s ago: executing program 6 (id=4151):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9b301a, 0x0)
mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f00000003c0)='./file0\x00', 0xa)

3m33.576866387s ago: executing program 6 (id=4152):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
sendmsg$nl_generic(r1, 0x0, 0xc000)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_genetlink_get_family_id$batadv(0x0, r0)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000019200)={0x0, 0x0, &(0x7f00000191c0)={0x0}, 0x1, 0x0, 0x0, 0x4054}, 0x2000c0c0)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
getsockname$tipc(r7, &(0x7f0000000040), &(0x7f00000190c0)=0x10)

3m33.122031446s ago: executing program 6 (id=4153):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0xfe, 0xf24, &(0x7f00000020c0)="$eJzs3U9sHNUZAPA3a6//xCZeAwUDJaTQikDBDkmkprcgUI+IS++gkNAIQ1FDD0RATA+IqogiIU4VByoulEopUpFAlSrUU9tTq956Qr1QqUqloB7aSLGr2O+td8c77Hpsz653fz/p8/ObNzvfN2tnMzOefRuAkVVb/3rixEIWwjufvv3oy09lH19fdldzjcPrX7PYa4QQ6i39LLe9z+OCa1deOt2pzcKx9a+pHx673HzsTAhhJRwOn4VG+HBp+csP3n3kyEevTd3y5oVnXtmj3W/K7wcAAAyjS39e/vt9//zTA/NXLx06FSaby9PxeSP2Z+Jx/9F4oJyOl2uhvZ+1RKuJ3HpjMWq59cZy643n8owX5KvntlMvWG+iS76xlmWd9hMAAAD2o3Re2whZbbGtX6stLm6c91/3+dxEtvjcueWz5/tUKAAAAFDafy6u33Qr+hbxjoS+1yFGJKYHoAYhhBBCCCHEXke2ddnaXL+vQAAAAACjJj9f2BYruztTV3Nrjd7yX3641vnxsAuq/v3/6vxTfc7fwYjnf/9VrzgAAJQ3rEeTab/ScXSaxyA/j+BY7nHbPf6v5bYzvs06i+YV3C/zDRbVmX9eB1VR/dv9OfZLUf35+TAHVVH9+Xk6B1VR/ZMV11FWUf0drvwMpKL6pyuuo6yi+g9UXEdZRfXPVFxHWUX1z1ZcR1lF9d9QcR1lFdV/sOI6yiqqf7/cVltUf6PiOsoqqn++4jrKKqr/xorrKKuo/psqrqOsovpvrriOfrkztul5OFSw3kyHc7r9co4HAAAAo+5/5v8TQoh9HvFqbN/rGJqY8nwKIYQQomP8bABq2EFc7O/lBwAAAGAApPcFpHe9r0VpfKzL+Hjr+NTmCmm83uXxE13GJ7uMAwAAACH87vWzt72Vbc53t9P58NK8UdPh49VQYh6j/HyE282/03nPdpp/v8xbBgAAwGjJvvfZ6v2PvvfC/NVLh061nP2uxvPdNA/oeLw28Ensp/sCZnP9LJ1Dn2rPUytYL3994Iai7T2+wx0FAACAEZbO3xshqy22nHc3Qq22uLh5Pr4Q6tnZc8tnjsZ++nyWP87VJ68vf6jiugEAAIDebZ7vdz7/T5/juxAmssXnzi2fPb/Rn20ur9darwvMbS7PWq8LNHLLjxUsPx776fM7fzA3vb588fQPl5/a7Z0HAACAEXH+xQvPPLm8fOZHvvGNb3zT/Kbfr0wAAMBu++KLt+s/Pj77+433/2/Of7cavzkc+404t99f4vJ0n0B6H8CW9+s/0Z5nrmi959vXa+TWG4sxmat7qmU7YX2+wfbHzRfla7RvZ6Ig30wu32wuX36egvHc+lmHuQRDh/kJ03pzueX5eRjHczmyXP67O+QCAACAZOmFZ59fOv/ihQfPPfvk02eePvPc8WMnv3vy5NGHvvPQ0vp9/Uutd/cDAAAA+9HmTb/9rgQAAAAAAAAAAAAAAAAAAABGVxUfJ9bvfQQAAIBR9++LIYQVIQoifcBgv+sQgxxrk/2vYbgj+HcohNh+jHvtEEK0xvCd92UDUMO+i7W1/CfNAwAAAOyta1deOt3abrGS7Wq+5tYaG81qzJva2Qf/Nn890mqXH26/XnJgV6th1FX9+y//oOaf7Dj+/qu7m38qbL72hZ5e/2rtGzjV1pvuNe+9S79aaOYPIdw+3mP+/P4/3mvGdkdy+e8NveVfey+X/4m2Xq3X/Pfl8h/oMf+W/X++14zt7o/5F2L/yD295m/fxfRbmvaj11+Ab+f2/6nQa/7c/jd6TJjzQMwPAKOo+b/52sX+FrLL0lFCOp6eif20v+meuPzdD9s9/q/ltjO+48rbt5uOg26N/almHe15k+3Wn56X2djeULLOvP1yV0lR/bv1c9xrRfXXK66jrKL6Jyquo6yi+jufvQ+eovqnKq6jrKL6e74Q0WdF9e+X68pF9c9UXEdZRfXPVlxHWUX1b/f/8X4pqv9gxXWUVVT/XMV1lFVUf8nLapUrqn++4jrKKqr/xorrKKuo/psqrqOsovpvrriOfrkjtkXnw+n8cy6OpX4j15/s8Fz2/McQAAAAYE/9ayDngWi5ctD3WoQQQgghhBj++O/ahn7XIYTYu1hb6+fVB/ptb9/NDMCg8vo/2vz8R5uf/2jz8+erpL/EZ7l+MtZlfLzLeL3L+ERuPP/7Otll/KbcdtfSdc3o5i7jX4t7UDR+sMvjb+0yvtBl/LYu47d3Gb+jyzgAAACj4ZbYOj8EAACA4fXyrz9547f3PnFl/uqlQ6fCxJZ554/G/mT82/rrsZ+f9z6px7/5/yT2fxnbP8T2H7n13X8CAAAAey99Toy//wMAAMDwSp9T6vwfAAAAhtd8bJ3/AwAAwPC6MbbO/wEAAGCIZVOdF8c2XRe4O7a9zusHAAy+r8f2ztgeiu1dsf1GbNNxwD2x/WZF9QEAu+cX3//pybeyzfn+j+fGr8Xlqd1iZeNKQVZrn8l/OrYHYvutHuvJfx5Ar/mTgz3m2av8czvMDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMj9r61xMnFrIQ3vn07Ud/PvHGX68vu6u5xuH1r1nsNUII9ebj0uhm/zdxxWtXXjrd2q7GNgvHQhay5vLw2OVmppkQwko4HD4LjfDh0vKXH7z7yJGPXpu65c0Lz7yyh09B2/4BAADAMPp/AAAA//9V8B6R")
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$sock_TIOCINQ(r0, 0x40106e80, 0x0)

3m32.996131138s ago: executing program 38 (id=4153):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0xfe, 0xf24, &(0x7f00000020c0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$sock_TIOCINQ(r0, 0x40106e80, 0x0)

2m12.078267078s ago: executing program 9 (id=5115):
keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000c40)='asymmetric\x00', &(0x7f0000000c80)='/dev/snd/midiC#D#\x00')

2m11.979587372s ago: executing program 9 (id=5116):
sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}], 0x2}, 0x4000000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='/'], 0x20)

2m11.978857948s ago: executing program 9 (id=5119):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5)
r1 = dup(r0)
ioctl$SIOCSIFHWADDR(r1, 0x8926, 0x0)

2m11.80467118s ago: executing program 9 (id=5125):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000c00)='./bus\x00', 0xa00400, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m11.712498493s ago: executing program 9 (id=5127):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x83}}, 0x14}, 0x1, 0x0, 0x0, 0x40008c1}, 0x800)

2m11.435175804s ago: executing program 9 (id=5128):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2m11.254804726s ago: executing program 39 (id=5128):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)

20.395459196s ago: executing program 8 (id=6463):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743d170ddbbba28854f76e642c756d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d63703934392c6572726f72733d72656d6f756e742d726f2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000003,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,discard,errors=continue,\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$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")
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'})
mount$nfs4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x5000, 0x0)

20.336766705s ago: executing program 8 (id=6464):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x8, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x3, 0x1, 0x8, 0x6, 0x9, 0x7, 0x9, 0x4, 0x5, 0x1, 0x5, 0x4, 0x3, 0x4, 0xa, 0x8, 0x3, 0x8, 0xffffff80, 0x2, 0xffff, 0x6, 0x939, 0x5, 0x9, 0x2, 0x4f, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x3, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x22], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x6, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1ff, 0x2a0, 0x5, 0x6, 0x8, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x9, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x1, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x3, 0x9, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x3, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10005, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000bd8000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)

20.336418157s ago: executing program 8 (id=6465):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x1004, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)

20.240282694s ago: executing program 8 (id=6466):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800010, &(0x7f0000000f00)={[{@uid_forget}, {@unhide}, {@volume={'volume', 0x3d, 0x4}}, {@session}, {@gid}, {@rootdir={'rootdir', 0x3d, 0x5}}, {@adinicb}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@session={'session', 0x3d, 0x10001}}, {@longad}, {@uid_ignore}]}, 0x1, 0xc43, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xrl46nTaZsOhh9AYAOCBuDz21VNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+9ILQ+e7eak98wH199pn4rWxKxcbL8/enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvn5r8vr1hcaZ589u2nx74P3+J44PXBh69uQz3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORornvvfT1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnzn2Fq6mt/6UZ2HL1YDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/iji1Ujxs3dOxLV8n6nuNV+IeLXMH0S8VeZLEan8YpyLeG+b7xGPploU8efl9b+wliar+0H3vnLpa42vzFyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcSnI8Ur//ZH1bjiqMalH7sw9PsDv9w7ZvzpD9lPWfb5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vvWwGwMAAAAAAAAAAAAAAAAAAPCxVsRPIsWL755Iy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaERPRyZX+h906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDUn4r4fqRo/EHzzrpaRKTq344T5S/nonm4zE9Gc6jMl6J5MWerylrzWw+h/exOXyrix5Giv/72nQuer39f59Odr0G89c2NT5+pdfJQd+PA+/1PHD92YWjkc0/vtJy2a8DgpfbMrduN8eGRkbGe1bV89E/2rBvIxy32putExMIbb77emp6emr//hfIrsIvqj9BCqn1cemqhWojagWjGw+n7JvWHdYNiX5XP//cixW+/++/dB37n+V+PX+p8uvOEj5//ycbz/8WtO7rH539ta738/C+f6ds9/5/sWfdi/t1IXy2ivnhzru94RH3hjTdPtm+2bkzdmJo5d+rUl4eGvnz2VN/hiPr19vRUz9KenC4AAAAAAAAAAAAAAACABycV8buRovXjtdSIiNvVeK2BC0PPnnzmUByqxlttGrf92tiVi42XZ2/OzU8tLExNNsZn2tdmJ6fu9XD1arjX+PDIvnTmQx3Z5/Yfqb88O/fGfPvGHy5uu/1o/eLVhcX51rXtN8eRKCKavWsGqwaPD49UjZ5ut2aqqqPbDqb/6PpSEf8RKa6da6TP53V5/P/WEf6bxv8vbd3RHo7//9zRjfF/n+gpWh4zpSJ+Hil+6y+ejs9X7Twad52zXO5vIsXg+c/mcnG4LNdtQ+e9Ap2RgWXZ/4kU//CLzWW74yGf3Ch7+iOd3EdAef2PRYrv/9l349fzus3vf9j++h/duqN9ev/DUz3rjm56X8Guu06+/icjxUtPvh2/Ua35vw98/0f33RsnOoU33s+xT9f/V3vWDeTj/uZedR4AAAAAAAAAAOAR1peK+NtI8cORWnohr7uXv/83uXVH+/T3vz7Vs25yb+Yr+tCFXZ9UAAAAADgg+lIRP4kUNxbfvjOGevP4757xn7+zMf5zOG3ZWv05369U7w3Yyz//6zWQjzux+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dQnqvH8kzvOp74SKV75r+dyuXS8LNedB36g+rV+eXbm5MXp6dl6LLauTk81xuZa16bKuk9FirW//myuW1Tzq3fnm+/M8b4xF/t8pBj5u27Zzlzs3bnJn9ooe7os+4lI8Z9/v7lsnpo6zx1dlT1Tlv2rSPH1f9q+7PGNsmfLst+NFD/6eqNb9mhZtvt+1E9tlH3+2myxD1cFAAAAAAAAAAAAAAAAAACAj5u+VMSfRor/vrl8Zyx/nv+/r+dj5a1v9sz3v8Xtap7/gWr+/52W72f+/+q9Aks7HRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4M1LMXV5LK/3l5476pfbMrdvjwyPbVzuSqpqHqvLlT/30mbPnvvTC0PlufnD9vfbpeG3sysXGy7M35+anFhamJhvjM+1rs5NT97yH3dbfarA6AY2br9+avH59oXHm+bObNt8eeL//ieMDF4aePflMt+z48MjIWE+ZWt99H/0uaYf1h6OIv4wUz33vp+mH/RFF7P5cfMh3Z78dqToxWHVifHik6sh0uzWzWG4c7Z6IIqLRU6nZPUcP4FrsSjNiqWx+2eDBsntjc6351tXpqcZoa36xvdienRlNndaW/WlEEedTxHJErPbfvbu+KOL1SPGdY2vpn/sjDnXPwxcvj3311Jmd21HsYx/vQdnORl/EcvEIXLMDrD+K+MdI8bN3TsS/9EfUovMTX4h4tcwfRLwVneudyi/GuYj3tvke8WiqRRH/W17/C2vpnf7yftC9r1z6WuMrM9dne8p27yuP/PPhQTrg96Z6FPGj6o6/lv7Vf9cAAAAAAAAAAAAAAAAAB0gRvxYpXnz3RKrGB98ZU9yeudG40ro63RnW1x371x0zvb6+vt5InWzmnMi5lHM550rO1ZxR5Po5m2XW19cn8uelnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ2DwAAAAAAAAAAAAAAAAAAeLwU1T8pvv2NtbTe35lfeiI6uWI+0Mfe/wcAAP//dsP5HA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x10, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b732673618000000fffff2ff0000000000edcce000", [0x1]})
pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0xb762)

20.066221712s ago: executing program 8 (id=6467):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x33}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

19.811199788s ago: executing program 8 (id=6468):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1e, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = getpid()
io_uring_setup(0x30a7, 0x0)
syz_pidfd_open(r3, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4078, 0xfee}], 0x1}, 0x0)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e901b1bdbdaf6", 0x11}], 0x1, 0x0, 0x0, 0x40010}, 0x0)

19.613804294s ago: executing program 40 (id=6468):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1e, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = getpid()
io_uring_setup(0x30a7, 0x0)
syz_pidfd_open(r3, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4078, 0xfee}], 0x1}, 0x0)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e901b1bdbdaf6", 0x11}], 0x1, 0x0, 0x0, 0x40010}, 0x0)

3.807427115s ago: executing program 2 (id=6648):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000280)=ANY=[@ANYBLOB="e1", @ANYRES16, @ANYBLOB="4940e6769db5ad3fade3f880e67135c4fd23e9646d9c3782f60265fbd0fc49f8d1b185bd435f4da7d11470a8c80b4f82b9e0b6385b4a9480384507ac61ed2cae31e4555a05c6930f1252156d7d75603addd60c9b4df8f8be6df72060972f26acfb79dc4927fa22c23f44d4d60faefca17e85fb36d817af545d27b6b99fcac92c1cb7927ded4b41d8699d2ae459222775de98", @ANYBLOB="2c6e1fed7cc59cf7d24eeee1f4ad1d234b34983aab713e742a58fd9bed85fac1924e67dc375738c86868cd474aea790336f73aa3b4691b46db1e03f31a61073918c5e31aa88480f93997953e40cb025ed6040dc08c9d4ea622ff5d5b02d7872523ed01ff0924d3d3fc330c040ccad5019a909b58364c7fd1e64e2a8fa8e20c0cc5fe1b87bfb5dcb6b449373a08625839ad084b38688ccd0395fb0e14b34706e5658efdab9b7f5bd0ce8de1b6475e96cfa3aba0a60dd72452b5869f778809bd06bf913b7b361f9b3bcd292fc93a37209df0fb235d44ac706024e608593d66d4c8"], 0xfd, 0x5a7a, &(0x7f0000006680)="$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")
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

2.993526833s ago: executing program 2 (id=6655):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
setreuid(0x0, 0xee00)
ioctl$PIO_CMAP(r0, 0x4b71, 0x0)

1.86191664s ago: executing program 0 (id=6660):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000180)=0x8)

1.788150038s ago: executing program 0 (id=6661):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f00002727f3f0"], 0x30)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

1.685712693s ago: executing program 0 (id=6662):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)
ptrace(0x420e, r0)

1.040154799s ago: executing program 2 (id=6667):
syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x121488b, &(0x7f0000001f80)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"/286, @ANYRES16, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8ec44bbc8f22ca2298ce346671617bb371da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc7881f843f1574502ce415c27f3cec8893fe5950104e7d7b43440fd107294cf00fe8000000000000", @ANYRESOCT], 0x1, 0x65b, &(0x7f00000007c0)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x40000)

941.141622ms ago: executing program 2 (id=6669):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000400)={'bond0\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}})

939.461015ms ago: executing program 2 (id=6671):
r0 = socket(0x10, 0x3, 0x0)
setitimer(0x1, &(0x7f0000000580)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x20008050)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)

759.784984ms ago: executing program 0 (id=6674):
r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}})

700.93423ms ago: executing program 1 (id=6675):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)

700.760888ms ago: executing program 0 (id=6676):
syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000008fc0)={[{@dax}, {@cache_strategy_readahead}, {@cache_strategy_readahead}, {@cache_strategy_readahead}, {@cache_strategy_disabled}, {@cache_strategy_disabled}, {@noacl}]}, 0x1, 0x181, &(0x7f0000000500)="$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")
listxattr(&(0x7f0000000380)='./file1\x00', 0x0, 0x0)

644.523656ms ago: executing program 0 (id=6677):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000600), 0x0}, 0x20)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0)

644.277557ms ago: executing program 1 (id=6678):
r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc0405668, &(0x7f0000000000)={0x0, 0x0, 0xa, {0x0, 0xffffffff}})

580.356635ms ago: executing program 1 (id=6679):
openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r0 = creat(0x0, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379, 0x0, r0}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0xa7ff)
openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)

108.500223ms ago: executing program 1 (id=6680):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x7, @win={{0x0, 0xb, 0x9, 0x8001}, 0x2, 0x5, 0x0, 0xfffc, 0x0, 0xe1}})

108.287439ms ago: executing program 1 (id=6681):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0)
recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0)

34.949509ms ago: executing program 1 (id=6682):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0)

0s ago: executing program 2 (id=6683):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0x4f27, 0x1f, 0x2, 0x401, 0x1, 0x81, 0xfff, 0x7, 0x5, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x1ff, 0x80000089, 0xfffffffd, 0x4, 0x20001e56, 0xfffffffc, 0x3, 0xfffffff1, 0x8, 0x4, 0x8000003, 0xdffffffa]})

kernel console output (not intermixed with test programs):

barriers
[  511.502420][T19190] BTRFS info (device loop8): turning on flush-on-commit
[  511.504312][T19226] Invalid ELF header magic: != ELF
[  511.504785][T19190] BTRFS info (device loop8): enabling disk space caching
[  511.519420][T19190] BTRFS info (device loop8): force clearing of disk cache
[  511.521931][T19190] BTRFS info (device loop8): doing ref verification
[  511.524092][T19190] BTRFS info (device loop8): max_inline set to 8
[  511.575863][T13954] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  511.635669][T19232] loop1: detected capacity change from 0 to 1164
[  511.639847][T19234] openvswitch: netlink: EtherType 0 is less than min 600
[  511.668864][T19236] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.673810][T19236] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.745157][T19238] loop1: detected capacity change from 0 to 512
[  511.788436][T19238] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  511.811383][T19238] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5272: invalid indirect mapped block 2683928664 (level 1)
[  511.816398][T19238] EXT4-fs (loop1): Remounting filesystem read-only
[  511.818990][T19238] EXT4-fs (loop1): 1 truncate cleaned up
[  511.830872][T19238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  511.875929][T19243] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.5268'.
[  511.878072][T18820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.547405][   T33] audit: type=1326 audit(505.075:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19275 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cad8ec29 code=0x7ffc0000
[  512.555920][   T33] audit: type=1326 audit(505.085:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19275 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cad8ec29 code=0x7ffc0000
[  512.579285][   T33] audit: type=1326 audit(505.085:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19275 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92cad90b47 code=0x7ffc0000
[  512.586525][   T33] audit: type=1326 audit(505.085:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19275 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f92cad90abc code=0x7ffc0000
[  512.597524][   T33] audit: type=1326 audit(505.085:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19275 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f92cad909f4 code=0x7ffc0000
[  512.613322][   T33] audit: type=1326 audit(505.085:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19275 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f92cad909f4 code=0x7ffc0000
[  512.629779][   T33] audit: type=1326 audit(505.085:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19275 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f92cad8d88a code=0x7ffc0000
[  512.639544][   T33] audit: type=1326 audit(505.085:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19275 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cad8ec29 code=0x7ffc0000
[  512.651758][   T33] audit: type=1326 audit(505.085:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19275 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cad8ec29 code=0x7ffc0000
[  512.871712][T19283] netlink: 'syz.1.5291': attribute type 6 has an invalid length.
[  513.664323][T19296] loop8: detected capacity change from 0 to 256
[  513.680992][T19296] exFAT-fs (loop8): failed to load upcase table (idx : 0x000103df, chksum : 0xf3211d0a, utbl_chksum : 0xe619d30d)
[  513.768959][T19308] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5301'.
[  515.055798][T19351] loop8: detected capacity change from 0 to 1024
[  515.227852][T19355] hfsplus: request for non-existent node 62977 in B*Tree
[  515.238568][T19355] hfsplus: request for non-existent node 62977 in B*Tree
[  515.258766][T18286] hfsplus: b-tree write err: -5, ino 3
[  515.366238][T19365] loop8: detected capacity change from 0 to 4096
[  515.371302][T19365] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  515.620173][T19376] loop8: detected capacity change from 0 to 128
[  515.623416][T19376] EXT4-fs (loop8): Test dummy encryption mode enabled
[  515.631199][T19376] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  515.712001][T13954] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  516.267978][T19404] loop8: detected capacity change from 0 to 32768
[  516.270686][T19404] XFS: ikeep mount option is deprecated.
[  516.272670][T19404] XFS (loop8): sunit and swidth must be specified together
[  516.285353][T19414] netlink: 'syz.1.5348': attribute type 1 has an invalid length.
[  516.518013][T19419] loop1: detected capacity change from 0 to 32768
[  516.523971][T19419] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  516.535679][T19419] XFS (loop1): Ending clean mount
[  516.541931][T19419] XFS (loop1): Quotacheck needed: Please wait.
[  516.593913][T19419] XFS (loop1): Quotacheck: Done.
[  516.624020][T18820] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  516.646980][T19440] loop8: detected capacity change from 0 to 2048
[  516.653208][T19440] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  516.699896][T19442] loop8: detected capacity change from 0 to 512
[  516.703119][T19442] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  516.746570][T19442] EXT4-fs (loop8): 1 truncate cleaned up
[  516.771517][T19442] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  516.899882][T13954] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.992066][T19445] loop1: detected capacity change from 0 to 4096
[  517.009366][T19445] EXT4-fs (loop1): Test dummy encryption mode enabled
[  517.012340][T19445] EXT4-fs (loop1): unsupported descriptor size 255
[  517.418910][T19472] loop8: detected capacity change from 0 to 4096
[  517.431458][T19473] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  517.454340][T19472] NILFS error (device loop8): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[  517.479566][T19472] Remounting filesystem read-only
[  517.481662][T19472] NILFS error (device loop8): nilfs_readdir: bad page in #2
[  517.634150][T19487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5377'.
[  517.923253][T19501] loop1: detected capacity change from 0 to 256
[  517.930779][T19501] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 1)
[  517.933840][T19501] exFAT-fs (loop1): failed to load alloc-bitmap
[  517.936706][T19501] exFAT-fs (loop1): failed to recognize exfat type
[  518.306477][T19498] loop8: detected capacity change from 0 to 32768
[  518.310263][T19498] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5382 (19498)
[  518.322112][T19498] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  518.326052][T19498] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm
[  518.403193][T19498] BTRFS info (device loop8): enabling ssd optimizations
[  518.405906][T19498] BTRFS info (device loop8): enabling free space tree
[  518.408758][T19498] BTRFS info (device loop8): use zstd compression, level 3
[  518.501986][T19513] gfs2: gfs2 mount does not exist
[  518.593085][T13954] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  518.987149][T19552] loop8: detected capacity change from 0 to 256
[  519.007032][T19552] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  519.241212][T19564] loop1: detected capacity change from 0 to 8192
[  519.688038][   T10] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  519.872257][   T10] usb 9-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  519.877033][   T10] usb 9-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81
[  519.885429][   T10] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  519.894825][   T10] usb 9-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  519.922999][   T10] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  519.929008][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.164257][   T10] ath6kl: Failed to submit usb control message: -71
[  520.168111][   T10] ath6kl: unable to send the bmi data to the device: -71
[  520.180853][   T10] ath6kl: Unable to send get target info: -71
[  520.199494][   T10] ath6kl: Failed to init ath6kl core: -71
[  520.202860][   T10] ath6kl_usb 9-1:4.0: probe with driver ath6kl_usb failed with error -71
[  520.224102][   T10] usb 9-1: USB disconnect, device number 33
[  520.391531][T19599] loop1: detected capacity change from 0 to 256
[  520.406883][T19599] FAT-fs (loop1): Directory bread(block 64) failed
[  520.409532][T19599] FAT-fs (loop1): Directory bread(block 65) failed
[  520.412294][T19599] FAT-fs (loop1): Directory bread(block 66) failed
[  520.417266][T19599] FAT-fs (loop1): Directory bread(block 67) failed
[  520.419745][T19599] FAT-fs (loop1): Directory bread(block 68) failed
[  520.421974][T19599] FAT-fs (loop1): Directory bread(block 69) failed
[  520.424446][T19599] FAT-fs (loop1): Directory bread(block 70) failed
[  520.428151][T19599] FAT-fs (loop1): Directory bread(block 71) failed
[  520.430945][T19599] FAT-fs (loop1): Directory bread(block 72) failed
[  520.433970][T19599] FAT-fs (loop1): Directory bread(block 73) failed
[  521.355525][ T6525] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[  521.520627][ T6525] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  521.524107][ T6525] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  521.533147][ T6525] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  521.536692][ T6525] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  521.545019][ T6525] usb 9-1: SerialNumber: syz
[  521.841618][ T6525] usb 9-1: 0:2 : does not exist
[  521.902819][ T6525] usb 9-1: USB disconnect, device number 34
[  522.089288][T19628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5433'.
[  522.468470][T19648] netlink: 'syz.8.5442': attribute type 1 has an invalid length.
[  522.471325][T19648] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5442'.
[  522.474314][T19648] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.477002][T19648] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.479845][T19648] bridge0: port 2(bridge_slave_1) entered forwarding state
[  522.567127][T19658] loop1: detected capacity change from 0 to 2048
[  522.589047][T19658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  522.631990][T18820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.635396][T19665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  523.151722][T19689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5455'.
[  523.427753][T19678] loop8: detected capacity change from 0 to 32768
[  523.458548][T19678] ocfs2: Slot 0 on device (7,8) was already allocated to this node!
[  523.467874][T19678] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  523.575690][T13954] ocfs2: Unmounting device (7,8) on (node local)
[  523.953470][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  524.065136][T19708] autofs: Bad value for 'fd'
[  524.135095][    T9] usb 2-1: Using ep0 maxpacket: 32
[  524.140810][    T9] usb 2-1: config 8 has an invalid interface number: 215 but max is 1
[  524.148166][    T9] usb 2-1: config 8 has no interface number 1
[  524.154492][    T9] usb 2-1: config 8 interface 0 has no altsetting 0
[  524.160553][    T9] usb 2-1: config 8 interface 215 has no altsetting 0
[  524.166779][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.1d
[  524.176675][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.183742][    T9] usb 2-1: Product: syz
[  524.187947][    T9] usb 2-1: Manufacturer: syz
[  524.192388][    T9] usb 2-1: SerialNumber: syz
[  524.231243][T19712] openvswitch: netlink: Invalid VLAN frame
[  526.003665][    T9] gspca_main: vc032x-2.14.0 probing 046d:0896
[  526.007737][    T9] gspca_vc032x: reg_r err -71
[  526.010209][    T9] vc032x 2-1:8.0: probe with driver vc032x failed with error -71
[  526.031928][    T9] usb 2-1: USB disconnect, device number 6
[  526.412345][T19736] Bluetooth: MGMT ver 1.23
[  526.680061][T19740] loop1: detected capacity change from 0 to 32768
[  526.713522][T19740] JBD2: Ignoring recovery information on journal
[  526.741893][T19740] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  526.799664][T18820] ocfs2: Unmounting device (7,1) on (node local)
[  527.227767][T19767] pim6reg: entered allmulticast mode
[  527.288893][ T5892] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  527.450534][ T5892] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30
[  527.454235][ T5892] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2
[  527.458405][ T5892] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91
[  527.463597][ T5892] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79
[  527.469112][ T5892] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  527.473140][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.485006][T19763] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  527.643595][T19771] loop8: detected capacity change from 0 to 128
[  527.651781][T19771] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  527.658163][T19771] hpfs: filesystem error: improperly stopped
[  527.660492][T19771] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  527.665977][T19771] hpfs: You really don't want any checks? You are crazy...
[  527.669223][T19771] hpfs: hpfs_map_sector(): read error
[  527.671465][T19771] hpfs: code page support is disabled
[  527.676172][T19771] hpfs: hpfs_map_4sectors(): unaligned read
[  527.678626][T19771] hpfs: hpfs_map_4sectors(): unaligned read
[  527.682108][T19771] hpfs: filesystem error: unable to find root dir
[  527.705056][ T5892] ath6kl: Failed to submit usb control message: -71
[  527.708230][ T5892] ath6kl: unable to send the bmi data to the device: -71
[  527.710752][ T5892] ath6kl: Unable to send get target info: -71
[  527.714071][ T5892] ath6kl: Failed to init ath6kl core: -71
[  527.717571][ T5892] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71
[  527.724115][ T5892] usb 2-1: USB disconnect, device number 7
[  527.781508][    C1] vkms_vblank_simulate: vblank timer overrun
[  528.083008][T19780] loop8: detected capacity change from 0 to 32768
[  528.480454][T19780] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  528.480478][T19780]   allowing incompatible features above 0.0: (unknown version)
[  528.480489][T19780]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  528.499206][T19780] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  528.502737][T19780] bcachefs (loop8): initializing new filesystem
[  528.512635][T19780] bcachefs (loop8): going read-write
[  528.523982][T19780] bcachefs (loop8): marking superblocks
[  528.533329][T19780] bcachefs (loop8): initializing freespace
[  528.538464][T19780] bcachefs (loop8): done initializing freespace
[  528.543178][T19780] bcachefs (loop8): reading snapshots table
[  528.545635][T19780] bcachefs (loop8): reading snapshots done
[  528.636210][T19780] bcachefs (loop8): done starting filesystem
[  528.803360][T19803] loop1: detected capacity change from 0 to 4096
[  528.817235][T19803] NILFS (loop1): invalid segment: Checksum error in segment payload
[  528.828552][T19803] NILFS (loop1): trying rollback from an earlier position
[  528.848560][T19803] NILFS (loop1): recovery complete
[  528.883422][T19805] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5503'.
[  528.889603][T19805] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.892726][T19805] bridge0: port 2(bridge_slave_1) entered forwarding state
[  528.893478][T19808] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  529.318422][T13954] bcachefs (loop8): shutting down
[  529.326660][T13954] bcachefs (loop8): going read-only
[  529.329021][T13954] bcachefs (loop8): finished waiting for writes to stop
[  529.334066][T13954] bcachefs (loop8): flushing journal and stopping allocators, journal seq 2
[  529.391791][T13954] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 3
[  529.402238][T13954] bcachefs (loop8): clean shutdown complete, journal seq 4
[  529.408721][T13954] bcachefs (loop8): marking filesystem clean
[  529.440415][T13954] bcachefs (loop8): shutdown complete
[  529.690906][T19824] loop1: detected capacity change from 0 to 32768
[  529.699687][T19824] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  529.710661][T19824] XFS (loop1): Ending clean mount
[  529.717759][T19824] XFS (loop1): Quotacheck needed: Please wait.
[  529.756065][T19824] XFS (loop1): Quotacheck: Done.
[  529.776700][T18820] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  530.001563][T19836] loop1: detected capacity change from 0 to 1024
[  530.029781][   T52] hfsplus: b-tree write err: -5, ino 4
[  530.500118][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  530.669316][    T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  530.673065][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.703598][    T9] usb 2-1: config 0 descriptor??
[  530.707253][    T9] cp210x 2-1:0.0: cp210x converter detected
[  530.839135][T19877] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5525'.
[  530.843813][T19877] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5525'.
[  531.032725][T19884] loop8: detected capacity change from 0 to 4096
[  531.036830][T19884] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  531.059787][T19884] ntfs3(loop8): Failed to load $Extend (-22).
[  531.065439][T19884] ntfs3(loop8): Failed to initialize $Extend.
[  531.144948][    T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  531.150896][    T9] usb 2-1: cp210x converter now attached to ttyUSB0
[  531.868346][T19890] loop8: detected capacity change from 0 to 131072
[  531.872028][T19890] F2FS-fs (loop8): Invalid log sectors per block(570425347) log sectorsize(9)
[  531.875078][T19890] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock
[  531.878918][T19890] F2FS-fs (loop8): invalid crc value
[  531.892721][    T9] usb 2-1: USB disconnect, device number 8
[  531.909410][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  531.913534][    T9] cp210x 2-1:0.0: device disconnected
[  531.958972][T19890] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix.
[  531.967224][T19890] F2FS-fs (loop8): Bad quota inode 2:50331648
[  531.969782][T19890] F2FS-fs (loop8): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix.
[  531.975065][T19890] F2FS-fs (loop8): Cannot turn on quotas: error -22
[  531.977922][T19890] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  531.985403][T19890] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0
[  531.988094][T19890] F2FS-fs (loop8): Mounted with checkpoint version = 753bd00b
[  532.499909][T19900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5533'.
[  532.503013][T19900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5533'.
[  532.859136][T19927] netlink: 'syz.1.5546': attribute type 27 has an invalid length.
[  532.894311][    T9] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[  532.932768][T19927] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.936335][T19927] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.051003][    T9] usb 9-1: Using ep0 maxpacket: 32
[  533.056021][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  533.060438][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  533.065157][    T9] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  533.068865][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.074816][    T9] usb 9-1: config 0 descriptor??
[  533.097927][T19927] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  533.120969][T19927] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  533.292125][T19929] 8021q: adding VLAN 0 to HW filter on device bond0
[  533.299018][T19929] 8021q: adding VLAN 0 to HW filter on device team0
[  533.309878][T19929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  533.319383][ T5856] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  533.322672][ T5856] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  533.326797][ T5856] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  533.331077][ T5856] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  533.518972][    T9] savu 0003:1E7D:2D5A.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0
[  533.793808][ T6525] usb 9-1: USB disconnect, device number 35
[  534.000376][T19950] loop1: detected capacity change from 0 to 512
[  534.006111][T19950] EXT4-fs: Ignoring removed bh option
[  534.020702][T19950] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  534.031193][T19950] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  534.044196][T19950] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  534.051920][T19950] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  534.062500][T19950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  534.103539][T19950] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5556: bg 0: block 353: padding at end of block bitmap is not set
[  534.151496][T18820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  534.537141][ T6525] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  534.741980][ T6525] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  534.745562][ T6525] usb 2-1: config 1 has no interface number 0
[  534.748720][ T6525] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  534.764851][ T6525] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  534.768641][ T6525] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  534.812711][ T6525] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  534.858012][ T6525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.869771][ T6525] usb 2-1: Product: syz
[  534.871163][ T6525] usb 2-1: Manufacturer: syz
[  534.872918][ T6525] usb 2-1: SerialNumber: syz
[  534.880356][T19962] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  535.129475][T19962] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  535.365811][ T6525] usb 2-1: Incompatible driver and firmware versions
[  535.381900][ T6525] usb 2-1: USB disconnect, device number 9
[  535.547321][T19987] netlink: 168 bytes leftover after parsing attributes in process `syz.8.5570'.
[  535.551253][T19987] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  535.775606][T20009] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5581'.
[  535.786692][T20009] netlink: zone id is out of range
[  535.794323][T20009] netlink: get zone limit has 8 unknown bytes
[  535.840042][T20014] openvswitch: netlink: Missing key (keys=40, expected=80)
[  536.258252][ T6525] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  536.422155][ T6525] usb 9-1: config 0 has an invalid interface number: 168 but max is 0
[  536.425573][ T6525] usb 9-1: config 0 has no interface number 0
[  536.428197][ T6525] usb 9-1: config 0 interface 168 has no altsetting 0
[  536.434515][ T6525] usb 9-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=95.e2
[  536.438479][ T6525] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.443652][ T6525] usb 9-1: Product: syz
[  536.446034][ T6525] usb 9-1: Manufacturer: syz
[  536.448061][ T6525] usb 9-1: SerialNumber: syz
[  536.452961][ T6525] usb 9-1: config 0 descriptor??
[  536.687246][ T6525] quatech2 9-1:0.168: Quatech 2nd gen USB to Serial Driver converter detected
[  536.694286][ T6525] usb 9-1: qt2_attach - failed to power on unit: -71
[  536.700052][ T6525] quatech2 9-1:0.168: probe with driver quatech2 failed with error -71
[  536.709538][ T6525] usb 9-1: USB disconnect, device number 36
[  537.735047][T20062] mmap: syz.0.5603 (20062) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  537.805265][T20066] loop8: detected capacity change from 0 to 8192
[  537.942960][T20078] loop8: detected capacity change from 0 to 512
[  537.958545][T20078] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  537.973818][T20078] EXT4-fs (loop8): orphan cleanup on readonly fs
[  538.007593][T20078] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5610: bg 0: block 248: padding at end of block bitmap is not set
[  538.025742][T20078] Quota error (device loop8): write_blk: dquota write failed
[  538.029021][T20078] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  538.033658][T20078] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.5610: Failed to acquire dquot type 1
[  538.039649][T20078] EXT4-fs (loop8): 1 truncate cleaned up
[  538.045376][T20078] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  538.049992][T20084] xt_l2tp: invalid flags combination: 8
[  538.170897][T20078] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000.
[  538.206476][T13954] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  538.417770][T11544] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  538.583354][T11544] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  538.587433][T11544] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83
[  538.609673][T11544] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  538.614847][T11544] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  538.628056][T11544] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  538.633625][T11544] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.638294][T11544] usb 2-1: Product: syz
[  538.640085][T11544] usb 2-1: Manufacturer: syz
[  538.648589][T11544] usb 2-1: SerialNumber: syz
[  538.653368][T11544] usb 2-1: config 0 descriptor??
[  538.658873][T11544] radioshark2 2-1:0.0: Invalid radioSHARK2 device
[  538.661554][T11544] radioshark2 2-1:0.0: probe with driver radioshark2 failed with error -22
[  538.879034][T11544] usb 2-1: USB disconnect, device number 10
[  538.888083][ T5913] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[  539.048522][ T5913] usb 9-1: Using ep0 maxpacket: 8
[  539.057651][ T5913] usb 9-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  539.062056][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.065339][ T5913] usb 9-1: Product: syz
[  539.067139][ T5913] usb 9-1: Manufacturer: syz
[  539.069206][ T5913] usb 9-1: SerialNumber: syz
[  539.076440][ T5913] usb 9-1: config 0 descriptor??
[  539.080757][ T5913] radio-usb-si4713 9-1:0.0: Si4713 development board discovered: (10C4:8244)
[  539.613894][T20112] overlayfs: failed to resolve './file1': -2
[  539.618420][T20112] overlayfs: failed to resolve './file1': -2
[  539.774520][T20110] loop1: detected capacity change from 0 to 32768
[  539.791010][T20110] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5626 (20110)
[  539.960145][T20110] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  539.965129][T20110] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  540.020494][T20110] BTRFS info (device loop1): enabling ssd optimizations
[  540.024955][T20110] BTRFS info (device loop1): enabling free space tree
[  540.042560][ T5913] radio-usb-si4713 9-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  540.046483][ T5913] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  540.049883][ T5913] usb 9-1: USB disconnect, device number 37
[  540.077833][T18820] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  540.363024][T20133] loop1: detected capacity change from 0 to 256
[  540.376421][T20133] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e3e, chksum : 0x38c882e6, utbl_chksum : 0xe619d30d)
[  540.825935][T20142] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5631'.
[  541.621245][T20156] loop8: detected capacity change from 0 to 128
[  541.630187][T20156] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback.
[  541.646480][T11544] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  541.663031][T13954] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  541.812387][T11544] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  541.816188][T11544] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  541.820291][T11544] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  541.826412][T11544] usb 2-1: config 220 has no interface number 2
[  541.830777][T11544] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  541.840773][T11544] usb 2-1: config 220 interface 0 has no altsetting 0
[  541.847243][T11544] usb 2-1: config 220 interface 76 has no altsetting 0
[  541.850442][T11544] usb 2-1: config 220 interface 1 has no altsetting 0
[  541.856198][T11544] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  541.859539][T11544] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.863711][T11544] usb 2-1: Product: syz
[  541.865341][T11544] usb 2-1: Manufacturer: syz
[  541.867745][T11544] usb 2-1: SerialNumber: syz
[  542.055185][T20172] loop8: detected capacity change from 0 to 4096
[  542.059525][T20172] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  542.077083][T20172] ntfs3(loop8): ino=19, mi_enum_attr
[  542.079448][T20172] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  542.099013][T20172] ntfs3(loop8): failed to convert name for inode 20.
[  542.099391][T11544] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  542.105575][T11544] usb 2-1: No valid video chain found.
[  542.108584][T11544] usb 2-1: selecting invalid altsetting 0
[  542.141968][T11544] usb 2-1: selecting invalid altsetting 0
[  542.145104][T11544] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  542.172105][T11544] usb 2-1: USB disconnect, device number 11
[  543.801994][T20208] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  544.083721][ T6525] usb 9-1: new full-speed USB device number 38 using dummy_hcd
[  544.247040][ T6525] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  544.251571][ T6525] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  544.256394][ T6525] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[  544.260932][ T6525] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  544.268534][ T6525] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  544.272629][ T6525] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  544.276997][ T6525] usb 9-1: Manufacturer: syz
[  544.281525][ T6525] usb 9-1: config 0 descriptor??
[  544.554104][ T6525] rc_core: IR keymap rc-hauppauge not found
[  544.556794][ T6525] Registered IR keymap rc-empty
[  544.559691][ T6525] mceusb 9-1:0.0: Error: mce write urb status = -71
[  544.580155][ T6525] mceusb 9-1:0.0: Error: mce write urb status = -71
[  544.597762][ T6525] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  544.604423][ T6525] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input25
[  544.613641][ T6525] mceusb 9-1:0.0: Error: mce write urb status = -71
[  544.630517][ T6525] mceusb 9-1:0.0: Error: mce write urb status = -71
[  544.650847][ T6525] mceusb 9-1:0.0: Error: mce write urb status = -71
[  544.672019][ T6525] mceusb 9-1:0.0: Error: mce write urb status = -71
[  544.693536][ T6525] mceusb 9-1:0.0: Error: mce write urb status = -71
[  544.715640][ T6525] mceusb 9-1:0.0: Error: mce write urb status = -71
[  544.736160][ T6525] mceusb 9-1:0.0: Error: mce write urb status = -71
[  544.760010][ T6525] mceusb 9-1:0.0: Error: mce write urb status = -71
[  544.779045][ T6525] mceusb 9-1:0.0: Error: mce write urb status = -71
[  544.807653][ T6525] mceusb 9-1:0.0: Error: mce write urb status = -71
[  544.824161][ T6525] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  544.828033][ T6525] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  545.003985][ T5913] usb 9-1: USB disconnect, device number 38
[  545.115651][T20239] netlink: 424 bytes leftover after parsing attributes in process `syz.0.5675'.
[  545.119346][T20239] netlink: 'syz.0.5675': attribute type 1 has an invalid length.
[  547.717128][T20300] loop8: detected capacity change from 0 to 2048
[  547.738018][T20300] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  547.753075][   T33] audit: type=1800 audit(538.001:228): pid=20300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5703" name="file1" dev="loop8" ino=1367 res=0 errno=0
[  548.408486][T20323] loop8: detected capacity change from 0 to 512
[  548.412209][T20323] EXT4-fs (loop8): Test dummy encryption mode enabled
[  548.416557][T20323] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 not in group (block 0)!
[  548.420440][T20323] EXT4-fs (loop8): group descriptors corrupted!
[  548.469592][T20326] loop8: detected capacity change from 0 to 4096
[  548.501418][T20327] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  548.529839][T20326] NILFS error (device loop8): nilfs_dotdot: directory #12 missing '.'
[  548.548251][T20326] Remounting filesystem read-only
[  548.580348][T13954] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer
[  548.702449][T20337] loop1: detected capacity change from 0 to 512
[  548.705915][T20337] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  548.733145][T20337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  548.748018][T20337] EXT4-fs (loop1): shut down requested (2)
[  548.767110][T20342] loop8: detected capacity change from 0 to 64
[  548.833738][T20344] loop8: detected capacity change from 0 to 512
[  548.858954][T20344] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  548.870775][T20344] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.5722: corrupted inode contents
[  548.880013][T20344] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #2: comm syz.8.5722: mark_inode_dirty error
[  548.885947][T20344] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.5722: corrupted inode contents
[  548.890936][T20344] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.5722: mark_inode_dirty error
[  548.925837][T13954] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.660028][T18820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.796569][   T33] audit: type=1400 audit(539.928:229): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=20359 comm="syz.1.5728"
[  550.009400][   T33] audit: type=1326 audit(539.994:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20354 comm="syz.0.5726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc422f8ec29 code=0x7ffc0000
[  550.018971][   T33] audit: type=1326 audit(539.994:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20354 comm="syz.0.5726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc422f8ec29 code=0x7ffc0000
[  550.027340][   T33] audit: type=1326 audit(539.994:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20354 comm="syz.0.5726" exe="/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fc422f8ec29 code=0x7ffc0000
[  550.035019][   T33] audit: type=1326 audit(539.994:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20354 comm="syz.0.5726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc422f8ec29 code=0x7ffc0000
[  550.042886][   T33] audit: type=1326 audit(539.994:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20354 comm="syz.0.5726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc422f8ec29 code=0x7ffc0000
[  550.060202][   T33] audit: type=1326 audit(540.003:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20354 comm="syz.0.5726" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc422f8ec29 code=0x7ffc0000
[  550.067485][   T33] audit: type=1326 audit(540.003:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20354 comm="syz.0.5726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc422f8ec29 code=0x7ffc0000
[  550.075271][   T33] audit: type=1326 audit(540.003:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20354 comm="syz.0.5726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc422f8ec29 code=0x7ffc0000
[  550.276524][T20365] loop8: detected capacity change from 0 to 32768
[  550.282800][T20365] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  550.293756][T20365] XFS (loop8): Ending clean mount
[  550.300941][T20365] XFS (loop8): Quotacheck needed: Please wait.
[  550.364784][T20365] XFS (loop8): Quotacheck: Done.
[  550.412008][T13954] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  550.635331][ T5892] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  550.678765][T20389] virtiofs: Unknown parameter 'always'
[  550.698676][T20391] loop8: detected capacity change from 0 to 1024
[  550.799025][ T5892] usb 2-1: config 3 has an invalid interface number: 56 but max is 0
[  550.802039][ T5892] usb 2-1: config 3 has no interface number 0
[  550.813831][ T5892] usb 2-1: config 3 interface 56 has no altsetting 0
[  550.821195][ T5892] usb 2-1: New USB device found, idVendor=03f0, idProduct=2101, bcdDevice=80.cc
[  550.825106][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.829697][ T5892] usb 2-1: Product: syz
[  550.839533][ T5892] usb 2-1: Manufacturer: syz
[  550.842864][ T5892] usb 2-1: SerialNumber: syz
[  551.079157][ T5892] safe_serial 2-1:3.56: safe_serial converter detected
[  551.081895][ T5892] safe_serial 2-1:3.56: probe with driver safe_serial failed with error -22
[  551.090787][ T5892] usb 2-1: USB disconnect, device number 12
[  551.165032][T20405] loop8: detected capacity change from 0 to 40427
[  551.168427][T20405] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  551.171626][T20405] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  551.177951][T20405] F2FS-fs (loop8): invalid crc value
[  551.213709][T20405] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  551.219253][T20405] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  551.222065][T20405] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  551.580997][T20416] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5748'.
[  551.584729][T20416] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5748'.
[  551.873917][T20422] loop1: detected capacity change from 0 to 2048
[  551.890529][T20422] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  551.903508][T20422] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  552.497648][ T5892] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  552.698329][ T5892] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice= 5.76
[  552.708252][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.721104][ T5892] usb 2-1: config 0 descriptor??
[  552.742385][ T5892] usb_8dev 2-1:0.0 can0: sending command message failed
[  552.747987][ T5892] usb_8dev 2-1:0.0 can0: can't get firmware version
[  552.808569][ T5892] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22
[  552.916766][T20444] loop8: detected capacity change from 0 to 4096
[  552.957765][  T793] usb 2-1: USB disconnect, device number 13
[  553.093683][T20444] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  553.123530][T13954] ntfs3(loop8): ino=9, ntfs_sync_fs failed, -22.
[  553.868853][T20480] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  554.834533][T20491] block nbd1: Attempted send on invalid socket
[  554.842567][T20491] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  554.849511][T20491] ADFS-fs (nbd1): error: unable to read block 3, try 0
[  555.389688][   T33] kauditd_printk_skb: 171 callbacks suppressed
[  555.389761][   T33] audit: type=1800 audit(545.120:409): pid=20503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5788" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  556.284453][T20510] loop1: detected capacity change from 0 to 40427
[  556.287774][T20510] F2FS-fs (loop1): Image doesn't support compression
[  556.292133][T20510] F2FS-fs (loop1): invalid crc value
[  556.327632][T20510] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  556.331697][T20510] F2FS-fs (loop1): Start checkpoint disabled!
[  556.344917][T20510] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  556.352371][T20510] F2FS-fs (loop1): disabling checkpoint not compatible with read-only
[  556.463642][    T9] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[  556.629027][    T9] usb 9-1: Using ep0 maxpacket: 8
[  556.634137][    T9] usb 9-1: unable to get BOS descriptor or descriptor too short
[  556.639315][    T9] usb 9-1: config 7 has an invalid interface number: 6 but max is 0
[  556.642436][    T9] usb 9-1: config 7 has no interface number 0
[  556.653077][    T9] usb 9-1: No eUSB2 isoc ep 15 companion for config 7 interface 6 altsetting 254
[  556.656422][    T9] usb 9-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  556.660954][    T9] usb 9-1: config 7 interface 6 has no altsetting 0
[  556.670312][    T9] usb 9-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e
[  556.674071][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.688409][    T9] usb 9-1: Product: syz
[  556.690238][    T9] usb 9-1: Manufacturer: syz
[  556.692062][    T9] usb 9-1: SerialNumber: syz
[  556.820300][T20524] loop1: detected capacity change from 0 to 32768
[  556.824950][T20524] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5797 (20524)
[  556.838725][T20524] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  556.842927][T20524] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  556.892694][T18293] BTRFS warning (device loop1): checksum verify failed on logical 5292032 mirror 1 wanted 0xd5bc16bf7502c3940107ef92895f3d2e7f4c766f4585e38c0ad39b0a5d2e0772 found 0xe411c7a0efa54fabafc8c0ad0545277d3e683b146ef1a47775d9ca9aa10535d4 level 0
[  556.905097][T20524] BTRFS warning (device loop1): failed to read root (objectid=9): -5
[  556.964131][    T9] option 9-1:7.6: GSM modem (1-port) converter detected
[  556.970488][    T9] usb 9-1: USB disconnect, device number 39
[  556.973926][    T9] option 9-1:7.6: device disconnected
[  557.032115][T20524] BTRFS error (device loop1): open_ctree failed: -5
[  557.381251][T20551] loop1: detected capacity change from 0 to 8192
[  557.497532][T20559] loop1: detected capacity change from 0 to 16
[  557.500878][T20559] cramfs: Unknown parameter ''
[  558.492991][T20558] ALSA: mixer_oss: invalid OSS volume ''
[  559.468404][T20603] kernel read not supported for file / lhOb~h3JyxvL=QRnFGrqςû~QV7"qHd0%NnyD (pid: 20603 comm: syz.8.5827)
[  559.477969][   T33] audit: type=1800 audit(548.974:410): pid=20603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5827" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B746477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E11197C964309DFA86F888B989FD254E6E79B503831CDD4402 dev="mqueue" ino=56450 res=0 errno=0
[  559.533445][T20607] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  559.785660][T20620] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5835'.
[  560.023790][   T33] audit: type=1326 audit(549.348:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20610 comm="syz.0.5832" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc422f8ec29 code=0x0
[  560.163810][T20612] loop1: detected capacity change from 0 to 32768
[  560.167890][T20612] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5828 (20612)
[  560.191686][T20612] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  560.198307][T20612] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  560.266866][T20612] BTRFS info (device loop1): setting nodatasum
[  560.268136][T20641] loop8: detected capacity change from 0 to 512
[  560.270899][T20612] BTRFS info (device loop1): enabling ssd optimizations
[  560.275225][T20612] BTRFS info (device loop1): enabling free space tree
[  560.275360][T20641] EXT4-fs: Ignoring removed nomblk_io_submit option
[  560.278192][T20612] BTRFS info (device loop1): enabling auto defrag
[  560.281416][T20641] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  560.284235][T20612] BTRFS info (device loop1): max_inline set to 0
[  560.293582][T20641] EXT4-fs (loop8): 1 truncate cleaned up
[  560.297123][T20641] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  560.364485][T13954] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  560.416991][T20647] io-wq is not configured for unbound workers
[  560.556767][T18820] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  561.060732][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  561.081757][ T5892] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[  561.242132][    T9] usb 2-1: Using ep0 maxpacket: 32
[  561.248492][    T9] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  561.252056][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.254919][    T9] usb 2-1: Product: syz
[  561.256610][    T9] usb 2-1: Manufacturer: syz
[  561.258451][    T9] usb 2-1: SerialNumber: syz
[  561.274456][ T5892] usb 9-1: Using ep0 maxpacket: 16
[  561.279869][ T5892] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  561.282653][ T5892] usb 9-1: config 0 has no interface number 0
[  561.286149][ T5892] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  561.289834][ T5892] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  561.293209][ T5892] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  561.296865][ T5892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.302531][ T5892] usb 9-1: config 0 descriptor??
[  561.489992][    T9] usb 2-1: palm_os_4_probe - error -71 getting connection info
[  561.493095][    T9] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[  561.509753][    T9] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  561.517506][    T9] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  561.527351][    T9] usb 2-1: USB disconnect, device number 14
[  561.534322][    T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  561.543034][    T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  561.547798][    T9] visor 2-1:1.0: device disconnected
[  561.967623][ T5892] input: HID 28bd:0071 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.001C/input/input27
[  562.061987][ T5892] input: HID 28bd:0071 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.001C/input/input28
[  562.070527][ T5892] uclogic 0003:28BD:0071.001C: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.8-1/input1
[  562.107630][   T33] audit: type=1326 audit(551.434:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20699 comm="syz.1.5865" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cad8ec29 code=0x7ffc0000
[  562.115961][   T33] audit: type=1326 audit(551.443:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20699 comm="syz.1.5865" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cad8ec29 code=0x7ffc0000
[  562.132027][   T33] audit: type=1326 audit(551.452:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20699 comm="syz.1.5865" exe="/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f92cad8ec29 code=0x7ffc0000
[  562.143480][   T33] audit: type=1326 audit(551.452:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20699 comm="syz.1.5865" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cad8ec29 code=0x7ffc0000
[  562.155248][   T33] audit: type=1326 audit(551.452:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20699 comm="syz.1.5865" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cad8ec29 code=0x7ffc0000
[  562.203166][  T793] usb 9-1: USB disconnect, device number 40
[  562.822053][T20733] netlink: 'syz.8.5882': attribute type 1 has an invalid length.
[  562.825880][T20733] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5882'.
[  563.085890][T20750] loop8: detected capacity change from 0 to 256
[  563.086038][T20751] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5890'.
[  563.098051][T20750] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  563.200160][T20755] loop8: detected capacity change from 0 to 4096
[  563.203707][T20755] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  563.221437][T20755] ntfs3(loop8): $Secure::$SII is corrupted.
[  563.223705][T20755] ntfs3(loop8): Failed to initialize $Secure (-22).
[  563.530220][ T5892] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[  563.626185][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  563.715056][ T5892] usb 9-1: config 1 has an invalid interface number: 7 but max is 0
[  563.717791][ T5892] usb 9-1: config 1 has no interface number 0
[  563.720152][ T5892] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  563.725248][ T5892] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  563.729440][ T5892] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  563.736553][ T5892] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  563.740264][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.743706][ T5892] usb 9-1: Product: syz
[  563.745498][ T5892] usb 9-1: Manufacturer: syz
[  563.747692][ T5892] usb 9-1: SerialNumber: syz
[  563.753105][T20759] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  563.808134][    T9] usb 2-1: Using ep0 maxpacket: 16
[  563.812516][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  563.817303][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  563.822991][    T9] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  563.827688][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.843523][    T9] usb 2-1: config 0 descriptor??
[  563.975036][T20759] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  564.211510][ T5892] sierra_net 9-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.8-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07
[  564.440666][    T9] hid (null): report_id 0 is invalid
[  564.552709][    T9] usb 2-1: string descriptor 0 read error: -71
[  564.578943][    T9] usb 2-1: Max retries (5) exceeded reading string descriptor 200
[  564.582478][    T9] letsketch 0003:6161:4D15.001D: probe with driver letsketch failed with error -32
[  564.591521][    T9] usb 2-1: USB disconnect, device number 15
[  564.920012][ T6525] usb 9-1: USB disconnect, device number 41
[  564.925701][ T6525] sierra_net 9-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.8-1, Sierra Wireless USB-to-WWAN Modem
[  565.043583][ T6525] sierra_net 9-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  565.791098][T20801] loop8: detected capacity change from 0 to 32768
[  565.794560][T20801] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[  565.953046][T20807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5917'.
[  566.167059][T20827] netlink: 'syz.1.5927': attribute type 2 has an invalid length.
[  566.181329][T20827] netlink: 'syz.1.5927': attribute type 1 has an invalid length.
[  566.356949][T20823] loop8: detected capacity change from 0 to 32768
[  566.357579][T20823] XFS: ikeep mount option is deprecated.
[  566.357600][T20823] XFS: noikeep mount option is deprecated.
[  566.388420][T20823] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  566.402774][T20823] XFS (loop8): Ending clean mount
[  566.404262][T20823] XFS (loop8): Quotacheck needed: Please wait.
[  566.454890][T20823] XFS (loop8): Quotacheck: Done.
[  566.478762][T13954] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  566.644291][T20848] loop8: detected capacity change from 0 to 47
[  566.755403][T20852] loop8: detected capacity change from 0 to 512
[  566.756494][T20852] EXT4-fs (loop8): Test dummy encryption mode enabled
[  566.762990][T20852] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  566.765159][T20852] EXT4-fs (loop8): 1 truncate cleaned up
[  566.773114][T20852] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  566.783745][T20852] EXT4-fs (loop8): Online defrag not supported for encrypted files
[  566.805984][T13954] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  567.594324][    T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  567.753805][    T9] usb 2-1: Using ep0 maxpacket: 8
[  567.759454][    T9] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  567.762923][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  567.768032][    T9] usb 2-1: config 0 has no interfaces?
[  567.770406][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  567.775252][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.781196][    T9] usb 2-1: config 0 descriptor??
[  567.871672][T20862] ceph: No mds server is up or the cluster is laggy
[  568.096246][ T6525] usb 2-1: USB disconnect, device number 16
[  568.840174][T20937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5972'.
[  568.941629][  T793] usb 9-1: new full-speed USB device number 42 using dummy_hcd
[  569.102178][  T793] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  569.106945][  T793] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  569.117587][  T793] usb 9-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00
[  569.123477][  T793] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.130449][  T793] usb 9-1: config 0 descriptor??
[  569.136580][T20935] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  569.579626][  T793] hid (null): report_id 57294 is invalid
[  569.587444][  T793] asus 0003:0B05:18C6.001E: collection stack underflow
[  569.590327][  T793] asus 0003:0B05:18C6.001E: item 0 1 0 12 parsing failed
[  569.594879][  T793] asus 0003:0B05:18C6.001E: Asus hid parse failed: -22
[  569.597791][  T793] asus 0003:0B05:18C6.001E: probe with driver asus failed with error -22
[  569.802570][ T5892] usb 9-1: USB disconnect, device number 42
[  570.471429][T20969] loop8: detected capacity change from 0 to 2048
[  570.482121][T20969] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  570.501638][   T33] audit: type=1800 audit(559.291:417): pid=20969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5987" name="file0" dev="loop8" ino=13 res=0 errno=0
[  570.524806][T13954] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.670205][T20986] netlink: 'syz.0.5994': attribute type 9 has an invalid length.
[  570.700615][T20988] netlink: 'syz.0.5995': attribute type 21 has an invalid length.
[  570.711192][T20988] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5995'.
[  570.722140][T20988] netlink: 'syz.0.5995': attribute type 5 has an invalid length.
[  570.742512][T20988] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5995'.
[  570.945701][T20993] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5997'.
[  572.634586][T21025] program syz.1.6010 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  573.272370][T21040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6017'.
[  573.311857][  T793] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[  573.508474][  T793] usb 9-1: config 0 descriptor has 1 excess byte, ignoring
[  573.511565][  T793] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  573.520054][  T793] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  573.524209][  T793] usb 9-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  573.528589][  T793] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.535354][  T793] usb 9-1: config 0 descriptor??
[  573.660871][T21059] netlink: 'syz.1.6026': attribute type 1 has an invalid length.
[  573.771432][T21069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6031'.
[  573.929807][T21077] overlayfs: failed to resolve './file0': -2
[  573.975075][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  573.983415][  T793] hid (null): invalid report_size 12034
[  573.989690][  T793] razer 0003:1532:010E.001F: invalid report_size 12034
[  573.992730][  T793] razer 0003:1532:010E.001F: item 0 4 1 7 parsing failed
[  573.996809][  T793] razer 0003:1532:010E.001F: probe with driver razer failed with error -22
[  574.136055][    T9] usb 2-1: too many configurations: 37, using maximum allowed: 8
[  574.159320][ T5842] Bluetooth: hci0: adv larger than maximum supported
[  574.159491][ T5842] Bluetooth: hci0: Malformed LE Event: 0x0d
[  574.167071][    T9] usb 2-1: string descriptor 0 read error: -71
[  574.169949][    T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  574.173743][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.183718][    T9] usb 2-1: can't set config #1, error -71
[  574.187406][    T9] usb 2-1: USB disconnect, device number 17
[  574.204531][ T6525] usb 9-1: USB disconnect, device number 43
[  574.757952][T21093] loop1: detected capacity change from 0 to 1024
[  574.759170][T21092] netlink: 51 bytes leftover after parsing attributes in process `syz.0.6043'.
[  574.764973][T21093] hfsplus: failed to load root directory
[  575.540783][T21116] loop8: detected capacity change from 0 to 32768
[  575.544093][T21116] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.6053 (21116)
[  575.550960][T21116] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  575.557721][T21116] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  575.629580][T21116] BTRFS info (device loop8): enabling ssd optimizations
[  575.632236][T21116] BTRFS info (device loop8): using spread ssd allocation scheme
[  575.634971][T21116] BTRFS info (device loop8): enabling free space tree
[  575.637669][T21116] BTRFS info (device loop8): doing ref verification
[  575.640115][T21116] BTRFS info (device loop8): max_inline set to 4096
[  575.669877][T13954] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  575.941013][    C1] vkms_vblank_simulate: vblank timer overrun
[  575.960300][T21154] loop8: detected capacity change from 0 to 512
[  576.009339][T21156] loop1: detected capacity change from 0 to 1024
[  576.054750][T21154] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a802c098, mo2=0002]
[  576.058302][T21154] System zones: 0-2, 18-18, 34-34
[  576.088940][T21154] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  576.134258][T21154] EXT4-fs (loop8): shut down requested (2)
[  576.228877][T13954] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.347608][T21171] netlink: 'syz.8.6069': attribute type 1 has an invalid length.
[  576.357291][T21171] netlink: 'syz.8.6069': attribute type 2 has an invalid length.
[  576.822950][T21197] loop8: detected capacity change from 0 to 32768
[  576.827628][T21197] bcachefs (/dev/loop8): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  576.827628][T21197] clean (size 2912):
[  576.827628][T21197] flags:          0
[  576.827628][T21197] journal_seq:    8
[  576.827628][T21197] prio_ptrs: 
[  576.827628][T21197] usage: type=key_version v=0
[  576.827628][T21197] usage: type=reserved v=0
[  576.827628][T21197] usage: type=reserved v=0
[  576.827628][T21197] usage: type=reserved v=0
[  576.827628][T21197] usage: type=reserved v=0
[  576.827628][T21197] data_usage: btree: 1/1 [0]=2816
[  576.827628][T21197] data_usage: journal: 1/1 [0]=0
[  576.827628][T21197] data_usage: user: 1/1 [0]=32
[  576.827628][T21197] dev_usage: dev=0  
[  576.827628][T21197]   free: buckets=83 sectors=0 fragmented=0
[  576.827628][T21197]   sb: buckets=25 sectors=6152 fragmented=248
[  576.827628][T21197]   journal: buckets=8 sectors=2048 fragmented=0
[  576.827628][T21197]   btree: buckets=11 sectors=2816 fragmented=0
[  576.827628][T21197]   user: buckets=1 sectors=32 fragmented=224
[  576.827628][T21197]   cached: buckets=0 sectors=0 fragmented=0
[  576.827628][T21197]   parity: buckets=0 sectors=0 fragmented=0
[  576.827628][T21197]   stripe: buckets=0 sectors=0 fragmented=0
[  576.827628][T21197]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  576.827628][T21197]   need_discard: buckets=0 sectors=0 fragmented=0
[  576.827628][T21197] clock: read=0
[  576.827628][T21197] clock: write=1288
[  576.827628][T21197] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee3
[  576.829271][T21197] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  577.039560][T21211] Invalid ELF header type: 3 != 1
[  577.533452][T21227] loop8: detected capacity change from 0 to 256
[  577.551943][T21227] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d)
[  577.891307][ T5892] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[  578.058374][ T5892] usb 9-1: Using ep0 maxpacket: 16
[  578.063410][ T5892] usb 9-1: config 252 has an invalid interface number: 15 but max is 0
[  578.067049][ T5892] usb 9-1: config 252 has no interface number 0
[  578.079792][ T5892] usb 9-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  578.087154][ T5892] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  578.091234][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.094505][ T5892] usb 9-1: Product: syz
[  578.099280][ T5892] usb 9-1: Manufacturer: syz
[  578.104057][ T5892] usb 9-1: SerialNumber: syz
[  578.139048][ T5892] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  578.339785][  T793] usb 9-1: USB disconnect, device number 44
[  578.342378][   T13] usb 9-1: Failed to submit usb control message: -71
[  578.348212][   T13] usb 9-1: unable to send the bmi data to the device: -71
[  578.350441][   T13] usb 9-1: unable to get target info from device
[  578.352414][   T13] usb 9-1: could not get target info (-71)
[  578.354586][   T13] usb 9-1: could not probe fw (-71)
[  579.215425][T21279] loop8: detected capacity change from 0 to 2048
[  579.263760][T21279]  loop8: p1 p2 p3 < > p4 < p5 p6 >
[  579.265888][T21279] loop8: partition table partially beyond EOD, truncated
[  579.269438][T21279] loop8: p1 start 458755 is beyond EOD, truncated
[  579.272252][T21279] loop8: p2 start 16908804 is beyond EOD, truncated
[  579.275157][T21279] loop8: p3 start 4284289 is beyond EOD, truncated
[  579.279800][T21279] loop8: p5 start 458755 is beyond EOD, truncated
[  579.282705][T21279] loop8: p6 start 16908804 is beyond EOD, truncated
[  579.737368][    C1] vkms_vblank_simulate: vblank timer overrun
[  579.826171][    C1] vkms_vblank_simulate: vblank timer overrun
[  579.899833][T21293] loop1: detected capacity change from 0 to 4096
[  579.904016][T21297] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6127'.
[  579.909270][T21293] NILFS (loop1): mounting unchecked fs
[  579.913477][T21293] NILFS (loop1): invalid segment: Checksum error in segment payload
[  579.916570][T21293] NILFS (loop1): trying rollback from an earlier position
[  579.925844][T21293] NILFS (loop1): recovery cancelled because norecovery option was specified for a read/write mount
[  580.323278][T21307] loop8: detected capacity change from 0 to 40427
[  580.520345][T21307] F2FS-fs (loop8): invalid crc value
[  580.597488][T21307] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  580.605887][T21307] F2FS-fs (loop8): Start checkpoint disabled!
[  580.610166][T21307] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  580.725178][   T33] audit: type=1800 audit(568.841:418): pid=21313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6131" name="bus" dev="loop8" ino=10 res=0 errno=0
[  580.826647][T21313] syz.8.6131: attempt to access beyond end of device
[  580.826647][T21313] loop8: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  580.854137][T21313] syz.8.6131: attempt to access beyond end of device
[  580.854137][T21313] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  580.879367][T21313] syz.8.6131: attempt to access beyond end of device
[  580.879367][T21313] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  580.932359][T21313] syz.8.6131: attempt to access beyond end of device
[  580.932359][T21313] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  581.035516][T21313] syz.8.6131: attempt to access beyond end of device
[  581.035516][T21313] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  581.065001][T21313] syz.8.6131: attempt to access beyond end of device
[  581.065001][T21313] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  581.129036][T21313] syz.8.6131: attempt to access beyond end of device
[  581.129036][T21313] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  581.189256][T21313] syz.8.6131: attempt to access beyond end of device
[  581.189256][T21313] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  581.224294][T21313] syz.8.6131: attempt to access beyond end of device
[  581.224294][T21313] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  581.231744][T21313] syz.8.6131: attempt to access beyond end of device
[  581.231744][T21313] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  582.187579][T21336] loop1: detected capacity change from 0 to 128
[  582.351446][   T33] audit: type=1800 audit(570.366:419): pid=21339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6141" name="bus" dev="loop1" ino=1048740 res=0 errno=0
[  582.567895][  T608] CPU: 1 UID: 0 PID: 608 Comm: kworker/u10:3 Not tainted syzkaller #0 PREEMPT(full) 
[  582.567922][  T608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  582.567932][  T608] Workqueue: writeback wb_workfn (flush-7:8)
[  582.567962][  T608] Call Trace:
[  582.567967][  T608]  <TASK>
[  582.567975][  T608]  dump_stack_lvl+0x189/0x250
[  582.567998][  T608]  ? __pfx_dump_stack_lvl+0x10/0x10
[  582.568014][  T608]  ? __pfx_queue_work_on+0x10/0x10
[  582.568027][  T608]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  582.568048][  T608]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  582.568074][  T608]  f2fs_handle_critical_error+0x37c/0x540
[  582.568098][  T608]  f2fs_write_end_io+0x886/0xb60
[  582.568125][  T608]  __submit_merged_bio+0x27a/0x6a0
[  582.568147][  T608]  __submit_merged_write_cond+0x255/0x530
[  582.568171][  T608]  f2fs_write_data_pages+0x261d/0x3000
[  582.568207][  T608]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  582.568229][  T608]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  582.568268][  T608]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  582.568296][  T608]  ? trace_f2fs_writepages+0x7f/0x200
[  582.568315][  T608]  ? f2fs_write_node_pages+0x478/0x6e0
[  582.568334][  T608]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  582.568359][  T608]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  582.568373][  T608]  do_writepages+0x32e/0x550
[  582.568394][  T608]  ? reacquire_held_locks+0x127/0x1d0
[  582.568408][  T608]  ? writeback_sb_inodes+0x384/0x1010
[  582.568430][  T608]  __writeback_single_inode+0x145/0xff0
[  582.568446][  T608]  ? do_raw_spin_unlock+0x4d/0x240
[  582.568464][  T608]  writeback_sb_inodes+0x6c7/0x1010
[  582.568498][  T608]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  582.568543][  T608]  ? rcu_is_watching+0x15/0xb0
[  582.568564][  T608]  wb_writeback+0x43b/0xaf0
[  582.568585][  T608]  ? queue_io+0x381/0x590
[  582.568603][  T608]  ? __pfx_wb_writeback+0x10/0x10
[  582.568624][  T608]  ? _raw_spin_unlock_irq+0x23/0x50
[  582.568646][  T608]  wb_workfn+0x409/0xef0
[  582.568670][  T608]  ? __pfx_wb_workfn+0x10/0x10
[  582.568714][  T608]  ? __lock_acquire+0xab9/0xd20
[  582.568741][  T608]  ? process_scheduled_works+0x9ef/0x17b0
[  582.568758][  T608]  ? _raw_spin_unlock_irq+0x23/0x50
[  582.568774][  T608]  ? process_scheduled_works+0x9ef/0x17b0
[  582.568784][  T608]  ? process_scheduled_works+0x9ef/0x17b0
[  582.568798][  T608]  process_scheduled_works+0xae1/0x17b0
[  582.568832][  T608]  ? __pfx_process_scheduled_works+0x10/0x10
[  582.568858][  T608]  worker_thread+0x8a0/0xda0
[  582.568899][  T608]  kthread+0x711/0x8a0
[  582.568918][  T608]  ? __pfx_worker_thread+0x10/0x10
[  582.568931][  T608]  ? __pfx_kthread+0x10/0x10
[  582.568946][  T608]  ? _raw_spin_unlock_irq+0x23/0x50
[  582.568962][  T608]  ? lockdep_hardirqs_on+0x9c/0x150
[  582.568979][  T608]  ? __pfx_kthread+0x10/0x10
[  582.568995][  T608]  ret_from_fork+0x439/0x7d0
[  582.569010][  T608]  ? __pfx_ret_from_fork+0x10/0x10
[  582.569028][  T608]  ? __switch_to_asm+0x39/0x70
[  582.569043][  T608]  ? __switch_to_asm+0x33/0x70
[  582.569057][  T608]  ? __pfx_kthread+0x10/0x10
[  582.569072][  T608]  ret_from_fork_asm+0x1a/0x30
[  582.569100][  T608]  </TASK>
[  582.569107][  T608] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  582.717905][  T608] CPU: 1 UID: 0 PID: 608 Comm: kworker/u10:3 Not tainted syzkaller #0 PREEMPT(full) 
[  582.717929][  T608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  582.717939][  T608] Workqueue: writeback wb_workfn (flush-7:8)
[  582.717965][  T608] Call Trace:
[  582.717972][  T608]  <TASK>
[  582.717979][  T608]  dump_stack_lvl+0x189/0x250
[  582.718002][  T608]  ? __pfx_dump_stack_lvl+0x10/0x10
[  582.718018][  T608]  ? __pfx_queue_work_on+0x10/0x10
[  582.718031][  T608]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  582.718052][  T608]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  582.718081][  T608]  f2fs_handle_critical_error+0x37c/0x540
[  582.718107][  T608]  f2fs_write_end_io+0x886/0xb60
[  582.718134][  T608]  __submit_merged_bio+0x27a/0x6a0
[  582.718158][  T608]  __submit_merged_write_cond+0x255/0x530
[  582.718183][  T608]  f2fs_write_data_pages+0x261d/0x3000
[  582.718226][  T608]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  582.718252][  T608]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  582.718294][  T608]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  582.718323][  T608]  ? trace_f2fs_writepages+0x7f/0x200
[  582.718342][  T608]  ? f2fs_write_node_pages+0x478/0x6e0
[  582.718363][  T608]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  582.718393][  T608]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  582.718406][  T608]  do_writepages+0x32e/0x550
[  582.718428][  T608]  ? reacquire_held_locks+0x127/0x1d0
[  582.718441][  T608]  ? writeback_sb_inodes+0x384/0x1010
[  582.718464][  T608]  __writeback_single_inode+0x145/0xff0
[  582.718481][  T608]  ? do_raw_spin_unlock+0x4d/0x240
[  582.718499][  T608]  writeback_sb_inodes+0x6c7/0x1010
[  582.718537][  T608]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  582.718590][  T608]  ? rcu_is_watching+0x15/0xb0
[  582.718614][  T608]  wb_writeback+0x43b/0xaf0
[  582.718638][  T608]  ? queue_io+0x381/0x590
[  582.718652][  T608]  ? __pfx_wb_writeback+0x10/0x10
[  582.718672][  T608]  ? _raw_spin_unlock_irq+0x23/0x50
[  582.718739][  T608]  wb_workfn+0x409/0xef0
[  582.718765][  T608]  ? __pfx_wb_workfn+0x10/0x10
[  582.718785][  T608]  ? __lock_acquire+0xab9/0xd20
[  582.718814][  T608]  ? process_scheduled_works+0x9ef/0x17b0
[  582.718832][  T608]  ? _raw_spin_unlock_irq+0x23/0x50
[  582.718849][  T608]  ? process_scheduled_works+0x9ef/0x17b0
[  582.718860][  T608]  ? process_scheduled_works+0x9ef/0x17b0
[  582.718880][  T608]  process_scheduled_works+0xae1/0x17b0
[  582.718918][  T608]  ? __pfx_process_scheduled_works+0x10/0x10
[  582.718947][  T608]  worker_thread+0x8a0/0xda0
[  582.718990][  T608]  kthread+0x711/0x8a0
[  582.719010][  T608]  ? __pfx_worker_thread+0x10/0x10
[  582.719023][  T608]  ? __pfx_kthread+0x10/0x10
[  582.719040][  T608]  ? _raw_spin_unlock_irq+0x23/0x50
[  582.719057][  T608]  ? lockdep_hardirqs_on+0x9c/0x150
[  582.719070][  T608]  ? __pfx_kthread+0x10/0x10
[  582.719086][  T608]  ret_from_fork+0x439/0x7d0
[  582.719104][  T608]  ? __pfx_ret_from_fork+0x10/0x10
[  582.719121][  T608]  ? __switch_to_asm+0x39/0x70
[  582.719136][  T608]  ? __switch_to_asm+0x33/0x70
[  582.719150][  T608]  ? __pfx_kthread+0x10/0x10
[  582.719167][  T608]  ret_from_fork_asm+0x1a/0x30
[  582.719198][  T608]  </TASK>
[  582.719511][  T608] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  583.371739][ T6525] usb 9-1: new full-speed USB device number 45 using dummy_hcd
[  583.535943][ T6525] usb 9-1: unable to get BOS descriptor or descriptor too short
[  583.539792][ T6525] usb 9-1: not running at top speed; connect to a high speed hub
[  583.544911][ T6525] usb 9-1: config 5 has an invalid interface number: 246 but max is 0
[  583.548415][ T6525] usb 9-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  583.552573][ T6525] usb 9-1: config 5 has no interface number 0
[  583.554924][T21364] loop1: detected capacity change from 0 to 1024
[  583.558652][T21364] EXT4-fs: Ignoring removed nobh option
[  583.559946][ T6525] usb 9-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  583.561118][T21364] EXT4-fs: Ignoring removed bh option
[  583.566455][ T6525] usb 9-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  583.573713][ T6525] usb 9-1: config 5 interface 246 has no altsetting 0
[  583.580491][ T6525] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4
[  583.583341][ T6525] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.586502][ T6525] usb 9-1: Product: syz
[  583.588403][ T6525] usb 9-1: Manufacturer: syz
[  583.590287][ T6525] usb 9-1: SerialNumber: syz
[  583.594032][T21364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  583.645478][T18820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  583.826539][   T13] usb 9-1: Failed to submit usb control message: -71
[  583.829251][   T13] usb 9-1: unable to send the bmi data to the device: -71
[  583.833593][ T6525] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  583.839955][   T13] usb 9-1: unable to get target info from device
[  583.843525][ T6525] usb 9-1: USB disconnect, device number 45
[  583.845255][   T13] usb 9-1: could not get target info (-71)
[  583.849952][   T13] usb 9-1: could not probe fw (-71)
[  583.926420][T21378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6157'.
[  584.158352][T21394] loop1: detected capacity change from 0 to 512
[  584.164476][T21394] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  585.153989][T21415] loop1: detected capacity change from 0 to 256
[  585.162078][T21415] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104f4, chksum : 0x5f17efa6, utbl_chksum : 0xe619d30d)
[  585.171975][T21415] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff)
[  585.175215][T21415] exFAT-fs (loop1): valid_size(150994954) is greater than size(10)
[  585.180214][T21417] loop8: detected capacity change from 0 to 1024
[  585.189447][T21417] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  585.193622][T21417] EXT4-fs (loop8): group descriptors corrupted!
[  585.221407][T21417] tmpfs: Bad value for 'mpol'
[  585.527416][T21423] loop8: detected capacity change from 0 to 40427
[  585.531840][T21423] F2FS-fs (loop8): build fault injection rate: 771
[  585.536238][T21423] F2FS-fs (loop8): invalid crc value
[  585.591628][T21423] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  585.597539][T21423] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  585.627864][T13954] CPU: 0 UID: 0 PID: 13954 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  585.627888][T13954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  585.627897][T13954] Call Trace:
[  585.627904][T13954]  <TASK>
[  585.627911][T13954]  dump_stack_lvl+0x189/0x250
[  585.627935][T13954]  ? __pfx_dump_stack_lvl+0x10/0x10
[  585.627949][T13954]  ? __pfx_queue_work_on+0x10/0x10
[  585.627961][T13954]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  585.627978][T13954]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  585.628002][T13954]  f2fs_handle_critical_error+0x37c/0x540
[  585.628025][T13954]  f2fs_write_end_io+0x886/0xb60
[  585.628050][T13954]  __submit_merged_bio+0x27a/0x6a0
[  585.628065][T13954]  __submit_merged_write_cond+0x255/0x530
[  585.628085][T13954]  f2fs_write_data_pages+0x261d/0x3000
[  585.628121][T13954]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  585.628159][T13954]  ? __mod_zone_page_state+0xd7/0x140
[  585.628178][T13954]  ? folios_put_refs+0x560/0x640
[  585.628200][T13954]  ? __lock_acquire+0xab9/0xd20
[  585.628223][T13954]  ? do_raw_spin_lock+0x121/0x290
[  585.628245][T13954]  ? do_raw_spin_unlock+0x4d/0x240
[  585.628261][T13954]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  585.628270][T13954]  do_writepages+0x32e/0x550
[  585.628292][T13954]  ? do_raw_spin_unlock+0x4d/0x240
[  585.628309][T13954]  filemap_fdatawrite+0x199/0x240
[  585.628325][T13954]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  585.628365][T13954]  ? do_raw_spin_unlock+0x4d/0x240
[  585.628381][T13954]  f2fs_sync_dirty_inodes+0x31f/0x830
[  585.628404][T13954]  f2fs_write_checkpoint+0x95a/0x1df0
[  585.628433][T13954]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  585.628467][T13954]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  585.628479][T13954]  ? kfree+0x18e/0x440
[  585.628494][T13954]  ? kill_f2fs_super+0x298/0x6c0
[  585.628511][T13954]  kill_f2fs_super+0x2c3/0x6c0
[  585.628528][T13954]  ? __pfx_kill_f2fs_super+0x10/0x10
[  585.628538][T13954]  ? radix_tree_delete_item+0x2b6/0x400
[  585.628555][T13954]  ? shrinker_free+0x2ce/0x3e0
[  585.628565][T13954]  deactivate_locked_super+0xbc/0x130
[  585.628581][T13954]  cleanup_mnt+0x425/0x4c0
[  585.628593][T13954]  ? lockdep_hardirqs_on+0x9c/0x150
[  585.628605][T13954]  task_work_run+0x1d4/0x260
[  585.628621][T13954]  ? __pfx_task_work_run+0x10/0x10
[  585.628633][T13954]  ? __x64_sys_umount+0x122/0x160
[  585.628693][T13954]  ? exit_to_user_mode_loop+0x40/0x110
[  585.628713][T13954]  exit_to_user_mode_loop+0xec/0x110
[  585.628729][T13954]  do_syscall_64+0x2bd/0x3b0
[  585.628742][T13954]  ? lockdep_hardirqs_on+0x9c/0x150
[  585.628753][T13954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.628765][T13954]  ? exc_page_fault+0x9f/0xf0
[  585.628779][T13954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.628790][T13954] RIP: 0033:0x7f0b1698ff57
[  585.628809][T13954] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  585.628817][T13954] RSP: 002b:00007ffd63930148 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  585.628831][T13954] RAX: 0000000000000000 RBX: 00007f0b16a11c2d RCX: 00007f0b1698ff57
[  585.628839][T13954] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd63930200
[  585.628847][T13954] RBP: 00007ffd63930200 R08: 0000000000000000 R09: 0000000000000000
[  585.628854][T13954] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd63931290
[  585.628861][T13954] R13: 00007f0b16a11c2d R14: 000000000008bfed R15: 00007ffd639312d0
[  585.628883][T13954]  </TASK>
[  585.628889][T13954] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  585.668622][T21421] loop1: detected capacity change from 0 to 40427
[  585.778173][T21421] F2FS-fs (loop1): invalid crc value
[  585.825908][T21421] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  585.830185][T21421] F2FS-fs (loop1): Start checkpoint disabled!
[  585.836680][T21421] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  585.874595][   T64] CPU: 1 UID: 0 PID: 64 Comm: kworker/u10:2 Not tainted syzkaller #0 PREEMPT(full) 
[  585.874617][   T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  585.874625][   T64] Workqueue: writeback wb_workfn (flush-7:1)
[  585.874676][   T64] Call Trace:
[  585.874683][   T64]  <TASK>
[  585.874698][   T64]  dump_stack_lvl+0x189/0x250
[  585.874720][   T64]  ? __pfx_dump_stack_lvl+0x10/0x10
[  585.874732][   T64]  ? __pfx_queue_work_on+0x10/0x10
[  585.874744][   T64]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  585.874761][   T64]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  585.874786][   T64]  f2fs_handle_critical_error+0x37c/0x540
[  585.874809][   T64]  f2fs_write_end_io+0x886/0xb60
[  585.874836][   T64]  __submit_merged_bio+0x27a/0x6a0
[  585.874858][   T64]  __submit_merged_write_cond+0x255/0x530
[  585.874877][   T64]  f2fs_write_data_pages+0x261d/0x3000
[  585.874918][   T64]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  585.874940][   T64]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  585.874982][   T64]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  585.875000][   T64]  ? look_up_lock_class+0x74/0x170
[  585.875022][   T64]  ? trace_f2fs_writepages+0x7f/0x200
[  585.875041][   T64]  ? f2fs_write_node_pages+0x478/0x6e0
[  585.875062][   T64]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  585.875089][   T64]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  585.875102][   T64]  do_writepages+0x32e/0x550
[  585.875123][   T64]  ? reacquire_held_locks+0x127/0x1d0
[  585.875135][   T64]  ? writeback_sb_inodes+0x384/0x1010
[  585.875157][   T64]  __writeback_single_inode+0x145/0xff0
[  585.875172][   T64]  ? do_raw_spin_unlock+0x4d/0x240
[  585.875190][   T64]  writeback_sb_inodes+0x6c7/0x1010
[  585.875224][   T64]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  585.875269][   T64]  ? rcu_is_watching+0x15/0xb0
[  585.875289][   T64]  wb_writeback+0x43b/0xaf0
[  585.875310][   T64]  ? queue_io+0x381/0x590
[  585.875326][   T64]  ? __pfx_wb_writeback+0x10/0x10
[  585.875346][   T64]  ? _raw_spin_unlock_irq+0x23/0x50
[  585.875366][   T64]  wb_workfn+0x409/0xef0
[  585.875392][   T64]  ? __pfx_wb_workfn+0x10/0x10
[  585.875411][   T64]  ? __lock_acquire+0xab9/0xd20
[  585.875438][   T64]  ? process_scheduled_works+0x9ef/0x17b0
[  585.875456][   T64]  ? _raw_spin_unlock_irq+0x23/0x50
[  585.875472][   T64]  ? process_scheduled_works+0x9ef/0x17b0
[  585.875481][   T64]  ? process_scheduled_works+0x9ef/0x17b0
[  585.875492][   T64]  process_scheduled_works+0xae1/0x17b0
[  585.875524][   T64]  ? __pfx_process_scheduled_works+0x10/0x10
[  585.875549][   T64]  worker_thread+0x8a0/0xda0
[  585.875577][   T64]  kthread+0x711/0x8a0
[  585.875595][   T64]  ? __pfx_worker_thread+0x10/0x10
[  585.875606][   T64]  ? __pfx_kthread+0x10/0x10
[  585.875622][   T64]  ? _raw_spin_unlock_irq+0x23/0x50
[  585.875639][   T64]  ? lockdep_hardirqs_on+0x9c/0x150
[  585.875678][   T64]  ? __pfx_kthread+0x10/0x10
[  585.875700][   T64]  ret_from_fork+0x439/0x7d0
[  585.875717][   T64]  ? __pfx_ret_from_fork+0x10/0x10
[  585.875735][   T64]  ? __switch_to_asm+0x39/0x70
[  585.875749][   T64]  ? __switch_to_asm+0x33/0x70
[  585.875761][   T64]  ? __pfx_kthread+0x10/0x10
[  585.875776][   T64]  ret_from_fork_asm+0x1a/0x30
[  585.875803][   T64]  </TASK>
[  585.875809][   T64] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  586.100549][T21440] loop8: detected capacity change from 0 to 1024
[  586.123151][T21440] hfsplus: bad catalog entry type
[  586.164788][ T1229] hfsplus: b-tree write err: -5, ino 4
[  586.364517][T21455] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  586.379431][T21455] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.387946][T21455] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.717901][T11544] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  586.779182][T21465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6195'.
[  587.081853][ T6525] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[  587.168851][T11544] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 959, setting to 64
[  587.173585][T11544] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  587.177560][T11544] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.182980][T11544] usb 2-1: config 0 descriptor??
[  587.185687][T21459] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  587.242055][ T6525] usb 9-1: Using ep0 maxpacket: 16
[  587.246995][ T6525] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  587.251659][ T6525] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  587.255863][ T6525] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  587.259416][ T6525] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.265857][ T6525] usb 9-1: config 0 descriptor??
[  587.627672][T11544] elecom 0003:056E:00FC.0020: unknown main item tag 0x0
[  587.630311][T11544] elecom 0003:056E:00FC.0020: unknown global tag 0xe
[  587.632866][T11544] elecom 0003:056E:00FC.0020: item 0 0 1 14 parsing failed
[  587.636978][T11544] elecom 0003:056E:00FC.0020: probe with driver elecom failed with error -22
[  587.706550][ T6525] mcp2221 0003:04D8:00DD.0021: item fetching failed at offset 2/5
[  587.710455][ T6525] mcp2221 0003:04D8:00DD.0021: can't parse reports
[  587.716451][ T6525] mcp2221 0003:04D8:00DD.0021: probe with driver mcp2221 failed with error -22
[  587.846557][ T5892] usb 2-1: USB disconnect, device number 18
[  587.923038][ T5913] usb 9-1: USB disconnect, device number 46
[  588.753581][T21495] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  588.756832][T21495] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  588.804778][T21482] loop8: detected capacity change from 0 to 32768
[  588.834678][ T5913] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  589.005869][ T5913] usb 2-1: Using ep0 maxpacket: 16
[  589.010399][ T5913] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  589.014432][ T5913] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  589.017878][ T5913] usb 2-1: config 0 interface 0 has no altsetting 0
[  589.020362][ T5913] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  589.023523][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.027381][ T5913] usb 2-1: config 0 descriptor??
[  589.645976][T21519] loop8: detected capacity change from 0 to 32768
[  589.655129][ T5913] hid (null): report_id 3323596431 is invalid
[  589.657942][ T5913] hid (null): unknown global tag 0xe
[  589.661090][ T5913] hid (null): unknown global tag 0xe
[  589.663471][ T5913] hid (null): unknown global tag 0xe
[  589.665872][ T5913] hid (null): unknown global tag 0x63
[  589.668239][ T5913] hid (null): unknown global tag 0xd
[  589.778330][T21519] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  589.778353][T21519]   allowing incompatible features above 0.0: (unknown version)
[  589.778362][T21519]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  589.788255][ T6525] usb 2-1: USB disconnect, device number 19
[  589.788516][T21519] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  589.799146][T21519] bcachefs (loop8): initializing new filesystem
[  589.805434][T21519] bcachefs (loop8): going read-write
[  589.810030][T21519] bcachefs (loop8): marking superblocks
[  589.815879][T21519] bcachefs (loop8): initializing freespace
[  589.822048][T21519] bcachefs (loop8): done initializing freespace
[  589.825081][T21519] bcachefs (loop8): reading snapshots table
[  589.827100][T21519] bcachefs (loop8): reading snapshots done
[  589.888482][T21519] bcachefs (loop8): done starting filesystem
[  589.936216][T13954] bcachefs (loop8): shutting down
[  589.938432][T13954] bcachefs (loop8): going read-only
[  589.940959][T13954] bcachefs (loop8): finished waiting for writes to stop
[  589.944395][T13954] bcachefs (loop8): flushing journal and stopping allocators, journal seq 3
[  590.027704][T13954] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 3
[  590.092149][T13954] bcachefs (loop8): clean shutdown complete, journal seq 4
[  590.119428][T13954] bcachefs (loop8): marking filesystem clean
[  590.260309][T13954] bcachefs (loop8): shutdown complete
[  590.550868][T21555] loop1: detected capacity change from 0 to 16
[  590.555127][T21555] erofs (device loop1): mounted with root inode @ nid 36.
[  591.766390][    T9] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[  591.959045][    T9] usb 9-1: Using ep0 maxpacket: 8
[  591.965339][    T9] usb 9-1: unable to get BOS descriptor or descriptor too short
[  591.969899][    T9] usb 9-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0
[  591.973746][    T9] usb 9-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0
[  591.980643][    T9] usb 9-1: config 8 interface 0 has no altsetting 0
[  591.985774][    T9] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  591.991719][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.995118][    T9] usb 9-1: Product: syz
[  591.996806][    T9] usb 9-1: Manufacturer: syz
[  591.999723][    T9] usb 9-1: SerialNumber: syz
[  592.203003][ T6525] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  592.237624][    T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  592.243672][    T9] usb 9-1: selecting invalid altsetting 0
[  592.283148][    T9] snd-usb-audio 9-1:8.0: probe with driver snd-usb-audio failed with error -12
[  592.301924][    T9] usb 9-1: USB disconnect, device number 47
[  592.374953][ T6525] usb 2-1: Using ep0 maxpacket: 8
[  592.385998][ T6525] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 11008, setting to 64
[  592.403437][ T6525] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  592.429784][ T6525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.433157][ T6525] usb 2-1: Product: syz
[  592.438271][ T6525] usb 2-1: Manufacturer: syz
[  592.449280][ T6525] usb 2-1: SerialNumber: syz
[  592.453526][ T6525] usb 2-1: config 0 descriptor??
[  592.473218][ T6525] streamzap 2-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200
[  592.683541][    T9] usb 2-1: USB disconnect, device number 20
[  592.920502][T21611] loop8: detected capacity change from 0 to 128
[  592.923337][T21611] EXT4-fs: Ignoring removed nobh option
[  592.925870][T21611] EXT4-fs (loop8): Invalid log block size: 4294967295
[  593.053230][T21621] loop8: detected capacity change from 0 to 256
[  593.064976][T21621] FAT-fs (loop8): Directory bread(block 64) failed
[  593.067233][T21621] FAT-fs (loop8): Directory bread(block 65) failed
[  593.071250][T21621] FAT-fs (loop8): Directory bread(block 66) failed
[  593.073593][T21621] FAT-fs (loop8): Directory bread(block 67) failed
[  593.076225][T21621] FAT-fs (loop8): Directory bread(block 68) failed
[  593.078517][T21621] FAT-fs (loop8): Directory bread(block 69) failed
[  593.080870][T21621] FAT-fs (loop8): Directory bread(block 70) failed
[  593.083094][T21621] FAT-fs (loop8): Directory bread(block 71) failed
[  593.085927][T21621] FAT-fs (loop8): Directory bread(block 72) failed
[  593.088270][T21621] FAT-fs (loop8): Directory bread(block 73) failed
[  593.180524][T21625] loop8: detected capacity change from 0 to 128
[  593.188699][T21625] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  593.230503][T13954] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  593.339352][T21636] netdevsim netdevsim0: Firmware load for '/../file0' refused, path contains '..' component
[  593.374260][T21634] loop8: detected capacity change from 0 to 1024
[  593.395830][T21634] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  593.431095][T13954] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.605978][    T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  593.735323][T21666] loop8: detected capacity change from 0 to 2048
[  593.745356][T21668] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  593.856781][    T9] usb 2-1: Using ep0 maxpacket: 8
[  593.861459][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  593.865271][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  593.868836][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.874823][    T9] usb 2-1: config 0 descriptor??
[  593.878514][    T9] gspca_main: vc032x-2.14.0 probing 046d:0892
[  594.022245][T21674] NILFS (loop8): error -2 truncating bmap (ino=16)
[  594.637453][T21668] NILFS (loop8): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3)
[  594.643285][T21668] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=16)
[  594.657456][T21668] Remounting filesystem read-only
[  594.659772][T13954] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer
[  594.762436][T21693] netlink: 'syz.8.6292': attribute type 62 has an invalid length.
[  595.033781][    T9] gspca_vc032x: reg_r err -71
[  595.036707][    T9] vc032x 2-1:0.0: probe with driver vc032x failed with error -71
[  595.041124][    T9] usb 2-1: USB disconnect, device number 21
[  596.213944][T21724] loop8: detected capacity change from 0 to 2048
[  596.234347][T21727] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  596.273610][T21729] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6307'.
[  596.286212][T21727] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  596.291451][T21727] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4)
[  596.298166][T21727] Remounting filesystem read-only
[  596.300759][T13954] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer
[  596.516143][T21733] loop8: detected capacity change from 0 to 32768
[  596.519071][T21733] XFS (loop8): sunit and swidth options incompatible with the noalign option
[  597.967122][T21783] loop8: detected capacity change from 0 to 24
[  598.296126][T11544] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  598.460417][T11544] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  598.463942][T11544] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  598.468572][T11544] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  598.472819][T11544] usb 2-1: config 220 has no interface number 2
[  598.475776][T11544] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  598.485944][T11544] usb 2-1: config 220 interface 0 has no altsetting 0
[  598.489678][T11544] usb 2-1: config 220 interface 76 has no altsetting 0
[  598.492738][T11544] usb 2-1: config 220 interface 1 has no altsetting 0
[  598.499872][T11544] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  598.503671][T11544] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.507239][T11544] usb 2-1: Product: syz
[  598.509324][T11544] usb 2-1: Manufacturer: syz
[  598.515329][T11544] usb 2-1: SerialNumber: syz
[  598.760147][T11544] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  598.763307][T11544] usb 2-1: No valid video chain found.
[  598.765897][T11544] usb 2-1: selecting invalid altsetting 0
[  598.822678][T11544] usb 2-1: selecting invalid altsetting 0
[  598.824967][T11544] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  598.834119][T11544] usb 2-1: USB disconnect, device number 22
[  599.995747][ T5892] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  600.166683][ T5892] usb 2-1: Using ep0 maxpacket: 16
[  600.174142][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  600.177734][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  600.181345][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  600.186359][ T5892] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  600.191145][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  600.195928][T21832] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  600.196359][ T5892] usb 2-1: config 0 descriptor??
[  600.770155][ T5892] microsoft 0003:045E:07DA.0023: unbalanced delimiter at end of report description
[  600.774634][ T5892] microsoft 0003:045E:07DA.0023: parse failed
[  600.777369][ T5892] microsoft 0003:045E:07DA.0023: probe with driver microsoft failed with error -22
[  600.855268][   T51] usb 2-1: USB disconnect, device number 23
[  600.976310][T21860] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6365'.
[  601.437417][T21870] loop8: detected capacity change from 0 to 4096
[  602.752908][T21903] pim6reg: left allmulticast mode
[  603.003384][T21915] loop1: detected capacity change from 0 to 4096
[  603.335122][T21922] loop1: detected capacity change from 0 to 32768
[  603.341167][T21922] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  603.351787][T21922] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  603.360123][T21922] XFS (loop1): Starting recovery (logdev: internal)
[  603.368637][T21936] overlayfs: failed to clone upperpath
[  603.368861][T21922] XFS (loop1): Ending recovery (logdev: internal)
[  603.412931][T18820] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  603.924317][T21962] loop8: detected capacity change from 0 to 4096
[  603.941700][T21962] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  603.955998][   T33] audit: type=1800 audit(590.589:420): pid=21962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6409" name="bus" dev="loop8" ino=18 res=0 errno=0
[  603.968113][T21970] loop1: detected capacity change from 0 to 64
[  603.978494][T13954] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.330152][T21990] loop1: detected capacity change from 0 to 32768
[  604.333260][T21990] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section disk_groups: disk 0 has invalid label 15 (have 0)
[  604.333260][T21990] disk_groups (size 40):
[  604.333260][T21990] 
[  604.341240][T21990] bcachefs: bch2_fs_get_tree() error: invalid_sb_disk_groups
[  604.414350][T21996] loop1: detected capacity change from 0 to 512
[  604.430461][T21996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  604.460042][T18820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.589174][T22001] netlink: 'syz.1.6425': attribute type 16 has an invalid length.
[  604.592124][T22001] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.6425'.
[  605.635678][T22017] loop1: detected capacity change from 0 to 4096
[  605.639675][T22017] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  605.831332][T22024] loop1: detected capacity change from 0 to 2048
[  605.836584][T22024] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  605.841287][T22024] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  605.846851][T22024] UDF-fs: Scanning with blocksize 512 failed
[  605.852460][T22024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  605.957812][T22030] loop1: detected capacity change from 0 to 512
[  605.987581][T22030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  606.006303][T18820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  606.183147][T22044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6445'.
[  607.157891][T22051] loop8: detected capacity change from 0 to 4096
[  607.163787][T22053] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6449'.
[  607.167691][T22051] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  607.236803][T22051] ntfs3(loop8): ino=19, mi_enum_attr
[  607.238701][T22051] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  608.228688][T22072] loop8: detected capacity change from 0 to 128
[  608.419865][   T51] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  608.584357][T22085] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  608.584379][   T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  608.596439][   T51] usb 2-1: config 0 has no interfaces?
[  608.598787][   T51] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  608.624830][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.630075][   T51] usb 2-1: config 0 descriptor??
[  608.734907][T22101] loop8: detected capacity change from 0 to 256
[  608.742241][T22101] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  608.896077][T22113] loop8: detected capacity change from 0 to 2048
[  608.900107][T22113] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=27743, location=27743
[  608.914464][T22113] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  608.967360][T22113] loop8: detected capacity change from 2048 to 0
[  608.981699][    C0] I/O error, dev loop8, sector 1346 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  608.985803][    C0] Buffer I/O error on dev loop8, logical block 1346, lost sync page write
[  608.989969][T22113] UDF-fs: warning (device loop8): udf_update_inode: IO error syncing udf inode [00000542]
[  608.997444][    C1] I/O error, dev loop8, sector 1318 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  609.001552][    C1] Buffer I/O error on dev loop8, logical block 1318, lost async page write
[  609.037405][    C1] I/O error, dev loop8, sector 1408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  609.042113][    C1] I/O error, dev loop8, sector 1408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  609.089313][    C1] I/O error, dev loop8, sector 128 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  609.093516][    C1] Buffer I/O error on dev loop8, logical block 128, lost sync page write
[  609.418123][ T5856] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  609.639808][ T5856] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  609.749591][ T5856] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  609.832080][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  609.840544][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  609.846178][ T5856] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  609.847110][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  609.860133][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  609.863325][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  609.870801][T22169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6477'.
[  610.038528][T22164] chnl_net:caif_netlink_parms(): no params data found
[  610.081287][ T5856] bridge_slave_1: left allmulticast mode
[  610.083494][ T5856] bridge_slave_1: left promiscuous mode
[  610.085527][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[  610.093453][ T5856] bridge_slave_0: left allmulticast mode
[  610.095780][ T5856] bridge_slave_0: left promiscuous mode
[  610.097897][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[  610.511770][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  610.518072][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  610.524005][ T5856] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  610.531995][ T5856] bond0 (unregistering): Released all slaves
[  610.639617][ T5856] tipc: Left network mode
[  610.695054][T22164] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.699271][T22164] bridge0: port 1(bridge_slave_0) entered disabled state
[  610.702596][T22164] bridge_slave_0: entered allmulticast mode
[  610.706629][T22164] bridge_slave_0: entered promiscuous mode
[  610.714576][T22164] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.717771][T22164] bridge0: port 2(bridge_slave_1) entered disabled state
[  610.721815][T22164] bridge_slave_1: entered allmulticast mode
[  610.725436][T22164] bridge_slave_1: entered promiscuous mode
[  610.789971][T22164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  610.797557][T22164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  610.819723][T22164] team0: Port device team_slave_0 added
[  610.823479][T22164] team0: Port device team_slave_1 added
[  610.861973][ T5856] hsr_slave_0: left promiscuous mode
[  610.864829][ T5856] hsr_slave_1: left promiscuous mode
[  610.867544][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  610.872101][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_0
[  610.875467][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  610.878287][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_1
[  610.887842][ T5856] veth1_macvtap: left promiscuous mode
[  610.890481][ T5856] veth0_macvtap: left promiscuous mode
[  610.892856][ T5856] veth1_vlan: left promiscuous mode
[  610.894740][ T5856] veth0_vlan: left promiscuous mode
[  610.936634][   T51] usb 2-1: USB disconnect, device number 24
[  611.720494][ T5856] team0 (unregistering): Port device team_slave_1 removed
[  611.793653][ T5856] team0 (unregistering): Port device team_slave_0 removed
[  612.024634][ T5846] Bluetooth: hci1: command tx timeout
[  612.577240][T22164] batman_adv: batadv0: Adding interface: batadv_slave_0
[  612.585387][T22164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  612.594485][T22164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  612.603961][T22209] bridge1: entered promiscuous mode
[  612.619269][T22164] batman_adv: batadv0: Adding interface: batadv_slave_1
[  612.622052][T22164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  612.643580][T22164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  612.678002][T22164] hsr_slave_0: entered promiscuous mode
[  612.680409][T22164] hsr_slave_1: entered promiscuous mode
[  612.682716][T22164] debugfs: 'hsr0' already exists in 'hsr'
[  612.685035][T22164] Cannot create hsr debugfs directory
[  614.136183][T22164] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  614.151503][T22164] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  614.159535][T22164] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  614.168067][T22164] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  614.259010][ T5846] Bluetooth: hci1: command tx timeout
[  614.282976][T22164] 8021q: adding VLAN 0 to HW filter on device bond0
[  614.311488][T22164] 8021q: adding VLAN 0 to HW filter on device team0
[  614.344241][T15931] bridge0: port 1(bridge_slave_0) entered blocking state
[  614.346683][T15931] bridge0: port 1(bridge_slave_0) entered forwarding state
[  614.371208][T15931] bridge0: port 2(bridge_slave_1) entered blocking state
[  614.373964][T15931] bridge0: port 2(bridge_slave_1) entered forwarding state
[  614.403103][T22164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  614.498846][T22164] 8021q: adding VLAN 0 to HW filter on device batadv0
[  614.532801][T22164] veth0_vlan: entered promiscuous mode
[  614.544386][T22164] veth1_vlan: entered promiscuous mode
[  614.563226][T22164] veth0_macvtap: entered promiscuous mode
[  614.569757][T22164] veth1_macvtap: entered promiscuous mode
[  614.581789][T22164] batman_adv: batadv0: Interface activated: batadv_slave_0
[  614.592700][T22164] batman_adv: batadv0: Interface activated: batadv_slave_1
[  614.602888][ T5871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  614.612205][ T5871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  614.616543][ T5871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  614.625522][ T5871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  614.685156][ T5856] IPVS: stop unused estimator thread 0...
[  614.762992][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.769274][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.791899][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.795655][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  615.157046][   T33] audit: type=1326 audit(601.047:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.2.6512" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a338ec29 code=0x7ffc0000
[  615.231418][T22319] new mount options do not match the existing superblock, will be ignored
[  615.264523][   T33] audit: type=1326 audit(601.047:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.2.6512" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a338ec29 code=0x7ffc0000
[  615.324893][   T33] audit: type=1326 audit(601.057:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.2.6512" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f39a338ec29 code=0x7ffc0000
[  615.409545][   T33] audit: type=1326 audit(601.290:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.2.6512" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a338ec29 code=0x7ffc0000
[  615.448114][   T33] audit: type=1326 audit(601.290:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.2.6512" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a338ec29 code=0x7ffc0000
[  616.383717][T22368] loop2: detected capacity change from 0 to 32768
[  616.397711][T22368] 
[  616.397711][T22368]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  616.397711][T22368] 
[  616.428606][T22368] 
[  616.428606][T22368]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  616.428606][T22368] 
[  616.440074][T22368] 
[  616.440074][T22368]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  616.440074][T22368] 
[  616.451824][T22368] 
[  616.451824][T22368]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  616.451824][T22368] 
[  616.461031][T22368] 
[  616.461031][T22368]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  616.461031][T22368] 
[  616.469913][ T5846] Bluetooth: hci1: command tx timeout
[  616.494747][  T115] 
[  616.494747][  T115]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  616.494747][  T115] 
[  616.499950][T22374] 
[  616.499950][T22374]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  616.499950][T22374] 
[  616.505823][T22374] 
[  616.505823][T22374]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  616.505823][T22374] 
[  616.510191][T22374] 
[  616.510191][T22374]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  616.510191][T22374] 
[  616.516676][T22374] 
[  616.516676][T22374]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  616.516676][T22374] 
[  616.521004][T22374] 
[  616.521004][T22374]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  616.521004][T22374] 
[  616.525086][T22377] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.6530'.
[  616.549014][  T116] 
[  616.549014][  T116]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  616.549014][  T116] 
[  616.580334][T22164] 
[  616.580334][T22164]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  616.580334][T22164] 
[  616.585617][T22164] 
[  616.585617][T22164]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  616.585617][T22164] 
[  616.615838][T22382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6533'.
[  616.620671][T22382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6533'.
[  616.726478][T22388] netlink: 'syz.2.6532': attribute type 4 has an invalid length.
[  617.174142][T22412] loop2: detected capacity change from 0 to 1024
[  617.179109][T22412] EXT4-fs: Ignoring removed orlov option
[  617.181245][T22412] EXT4-fs: Ignoring removed oldalloc option
[  617.183792][T22412] EXT4-fs: Ignoring removed bh option
[  617.187335][T22412] EXT4-fs (loop2): inodes count not valid: 262176 vs 32
[  617.972059][T22424] loop1: detected capacity change from 0 to 32768
[  617.999429][T22424] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  618.147439][T18820] ocfs2: Unmounting device (7,1) on (node local)
[  618.401043][T22448] IPv6: Can't replace route, no match found
[  618.714801][ T5846] Bluetooth: hci1: command tx timeout
[  619.316874][T22463] loop2: detected capacity change from 0 to 131072
[  619.433050][T22463] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  619.435953][T22463] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  619.439923][T22463] F2FS-fs (loop2): invalid crc value
[  619.472821][T22463] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  619.481240][T22463] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  619.484028][T22463] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  619.520693][T22442] loop1: detected capacity change from 0 to 262144
[  619.596898][T22442] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  619.608050][T22442] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  619.815444][T22488] erspan0: entered promiscuous mode
[  620.022080][T22496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6581'.
[  620.179467][  T793] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  620.340005][  T793] usb 3-1: Using ep0 maxpacket: 16
[  620.348070][  T793] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  620.357402][  T793] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  620.360616][  T793] usb 3-1: config 0 has no interface number 0
[  620.370917][  T793] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  620.376026][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.379348][  T793] usb 3-1: Product: syz
[  620.380976][  T793] usb 3-1: Manufacturer: syz
[  620.384914][  T793] usb 3-1: SerialNumber: syz
[  620.388466][  T793] usb 3-1: config 0 descriptor??
[  620.392646][  T793] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[  620.397213][  T793] usb 3-1: No valid video chain found.
[  620.499300][T22512] 9pnet_fd: p9_fd_create_tcp (22512): problem connecting socket to 127.0.0.1
[  620.505131][T22514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6588'.
[  620.634708][  T793] usb 3-1: USB disconnect, device number 9
[  620.817133][   T33] audit: type=1400 audit(606.323:426): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_sw/" pid=22517 comm="syz.1.6590"
[  621.248214][T22536] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  621.254447][T22536] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  621.259011][T22536] overlayfs: fs on '.' does not support file handles, falling back to xino=off.
[  621.786839][T22564] 9pnet_fd: p9_fd_create_unix (22564): problem connecting socket: ./file0: -111
[  622.350449][T22591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6621'.
[  623.746922][T22605] loop1: detected capacity change from 0 to 32768
[  623.781001][T22605] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  623.893288][T18820] ocfs2: Unmounting device (7,1) on (node local)
[  624.260657][T22632] loop1: detected capacity change from 0 to 1024
[  624.267251][T22632] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  624.271752][T22632] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  624.284196][T22632] JBD2: no valid journal superblock found
[  624.286935][T22632] EXT4-fs (loop1): Could not load journal inode
[  624.635615][T22648] overlayfs: failed to clone upperpath
[  625.354089][T22652] delete_channel: no stack
[  625.357645][T22651] delete_channel: no stack
[  625.569824][T22655] loop2: detected capacity change from 0 to 32768
[  625.690292][T22655] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  625.690316][T22655]   allowing incompatible features above 0.0: (unknown version)
[  625.690323][T22655]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  625.711698][T22655] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  625.715042][T22655] bcachefs (loop2): initializing new filesystem
[  625.724152][T22655] bcachefs (loop2): going read-write
[  625.754828][T22655] bcachefs (loop2): marking superblocks
[  625.760723][T22655] bcachefs (loop2): initializing freespace
[  625.764287][T22655] bcachefs (loop2): done initializing freespace
[  625.767275][T22655] bcachefs (loop2): reading snapshots table
[  625.769584][T22655] bcachefs (loop2): reading snapshots done
[  625.820801][T22655] bcachefs (loop2): done starting filesystem
[  625.962108][T22655] overlayfs: invalid origin (0000)
[  626.246409][T22683] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6656'.
[  626.258251][T22164] bcachefs (loop2): shutting down
[  626.260410][T22164] bcachefs (loop2): going read-only
[  626.264967][T22164] bcachefs (loop2): finished waiting for writes to stop
[  626.268717][T22164] bcachefs (loop2): flushing journal and stopping allocators, journal seq 4
[  626.347152][T22164] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 5
[  626.354324][T22164] bcachefs (loop2): clean shutdown complete, journal seq 6
[  626.358099][T22164] bcachefs (loop2): marking filesystem clean
[  626.377724][T22164] bcachefs (loop2): shutdown complete
[  626.786510][    T9] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  626.951281][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  626.954520][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  626.958772][    T9] usb 2-1: config 4 has an invalid interface number: 32 but max is 0
[  626.962029][    T9] usb 2-1: config 4 has no interface number 0
[  626.966779][    T9] usb 2-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50
[  626.971325][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.973967][    T9] usb 2-1: Product: syz
[  626.975348][    T9] usb 2-1: Manufacturer: syz
[  626.976896][    T9] usb 2-1: SerialNumber: syz
[  627.241961][    T9] usb 2-1: Found UVC 0.02 device syz (17dc:0202)
[  627.244555][    T9] usb 2-1: No valid video chain found.
[  627.249681][    T9] usb 2-1: USB disconnect, device number 25
[  627.458962][   T33] audit: type=1326 audit(612.562:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22698 comm="syz.0.6662" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc422f8ec29 code=0x0
[  628.107113][T22715] loop2: detected capacity change from 0 to 164
[  628.113711][T22715] rock: directory entry would overflow storage
[  628.116528][T22715] rock: sig=0x66, size=4, remaining=3
[  628.243599][T22725] netlink: 'syz.1.6672': attribute type 1 has an invalid length.
[  628.317271][T22728] loop1: detected capacity change from 0 to 4096
[  628.337726][T22728] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  628.357804][T22728] ntfs3(loop1): Failed to load $Extend (-22).
[  628.360419][T22728] ntfs3(loop1): Failed to initialize $Extend.
[  628.374309][T22728] ntfs3(loop1): ino=1b, "file0" ntfs_readdir
[  629.180579][T22753] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[  629.185783][T22753] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  629.190189][T22753] CPU: 0 UID: 0 PID: 22753 Comm: syz.2.6683 Not tainted syzkaller #0 PREEMPT(full) 
[  629.194532][T22753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  629.198868][T22753] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  629.201339][T22753] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 69 9b 35 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 48 9b 35 f9 4d 8b 24 24 48 83 c3
[  629.209361][T22753] RSP: 0018:ffffc90007e47a60 EFLAGS: 00010206
[  629.211918][T22753] RAX: 0000000000000005 RBX: ffff8881006b7880 RCX: 0000000000080000
[  629.215208][T22753] RDX: ffffc9000f5da000 RSI: 00000000000003bc RDI: 00000000000003bd
[  629.218565][T22753] RBP: 0000000000000001 R08: ffff88810860492f R09: 1ffff110210c0925
[  629.221930][T22753] R10: dffffc0000000000 R11: ffffffff88ed6a00 R12: 0000000000000028
[  629.225331][T22753] R13: dffffc0000000000 R14: ffff888108604800 R15: dffffc0000000000
[  629.228671][T22753] FS:  00007f39a41346c0(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  629.232335][T22753] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  629.235046][T22753] CR2: 0000001b2d823ffc CR3: 000000003a500000 CR4: 00000000000006f0
[  629.238384][T22753] Call Trace:
[  629.239915][T22753]  <TASK>
[  629.241216][T22753]  pcl818_detach+0x66/0xd0
[  629.243189][T22753]  comedi_device_detach_locked+0x178/0x750
[  629.245759][T22753]  comedi_unlocked_ioctl+0xcde/0x1020
[  629.247963][T22753]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  629.250427][T22753]  ? __lock_acquire+0xab9/0xd20
[  629.252421][T22753]  ? __fget_files+0x2a/0x420
[  629.254352][T22753]  ? __fget_files+0x2a/0x420
[  629.256325][T22753]  ? __fget_files+0x3a0/0x420
[  629.258447][T22753]  ? __fget_files+0x2a/0x420
[  629.260718][T22753]  ? bpf_lsm_file_ioctl+0x9/0x20
[  629.262838][T22753]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  629.265394][T22753]  __se_sys_ioctl+0xfc/0x170
[  629.267437][T22753]  do_syscall_64+0xfa/0x3b0
[  629.269315][T22753]  ? lockdep_hardirqs_on+0x9c/0x150
[  629.271487][T22753]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.274029][T22753]  ? exc_page_fault+0x9f/0xf0
[  629.275994][T22753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.278437][T22753] RIP: 0033:0x7f39a338ec29
[  629.280256][T22753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  629.288025][T22753] RSP: 002b:00007f39a4134038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  629.291425][T22753] RAX: ffffffffffffffda RBX: 00007f39a35d5fa0 RCX: 00007f39a338ec29
[  629.294865][T22753] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003
[  629.298214][T22753] RBP: 00007f39a3411e41 R08: 0000000000000000 R09: 0000000000000000
[  629.301592][T22753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  629.304960][T22753] R13: 00007f39a35d6038 R14: 00007f39a35d5fa0 R15: 00007ffda39a8aa8
[  629.308291][T22753]  </TASK>
[  629.309645][T22753] Modules linked in:
[  629.312116][T22753] ---[ end trace 0000000000000000 ]---
[  629.322648][T22753] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  629.325194][T22753] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 69 9b 35 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 48 9b 35 f9 4d 8b 24 24 48 83 c3
[  629.334108][T22753] RSP: 0018:ffffc90007e47a60 EFLAGS: 00010206
[  629.336970][T22753] RAX: 0000000000000005 RBX: ffff8881006b7880 RCX: 0000000000080000
[  629.340353][T22753] RDX: ffffc9000f5da000 RSI: 00000000000003bc RDI: 00000000000003bd
[  629.343690][T22753] RBP: 0000000000000001 R08: ffff88810860492f R09: 1ffff110210c0925
[  629.346915][T22753] R10: dffffc0000000000 R11: ffffffff88ed6a00 R12: 0000000000000028
[  629.350258][T22753] R13: dffffc0000000000 R14: ffff888108604800 R15: dffffc0000000000
[  629.355082][T22753] FS:  00007f39a41346c0(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  629.358795][T22753] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  629.361573][T22753] CR2: 00007ffd9fc57d98 CR3: 000000003a500000 CR4: 00000000000006f0
[  629.365030][T22753] Kernel panic - not syncing: Fatal exception
[  629.368423][T22753] Kernel Offset: disabled
[  629.370381][T22753] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:26:20  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000100f RDI=0000000000001010 RBP=00000000000003f8 RSP=ffffc90007e47290
R8 =ffff88801fb28237 R9 =1ffff11003f65046 R10=dffffc0000000000 R11=ffffffff854fad60
R12=dffffc0000000000 R13=ffffffff99b02919 R14=ffffffff99df7460 R15=0000000000000000
RIP=ffffffff854faddc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f39a41346c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d823ffc CR3=000000003a500000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f39a35a7498 00007f39a35a7470 XMM03=00007f39a35a74a8 00007f39a35a74a0
XMM04=00007f39a410d100 00007f39a35a7460 XMM05=00007f39a35a7478 00007f39a35a74c0
XMM06=00007f39a35a74b8 00007f39a35a74b0 XMM07=00007f39a35a74a8 00007f39a35a74a0
XMM08=0000000000000000 00007f39a3412f0f XMM09=0000000000000000 00007f39a3412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc900077c0000 RBX=1ffff1102139925a RCX=ffff88803c0bd640 RDX=0000000000010000
RSI=ffff888109cc8000 RDI=0000000000000017 RBP=0000000000000080 RSP=ffffc900001e0dc0
R8 =ffffffff8fa3a837 R9 =1ffffffff1f47506 R10=dffffc0000000000 R11=ffffffff869a55a0
R12=dffffc0000000000 R13=ffff888109cc92d0 R14=ffff888109cc8000 R15=dffffc0000000000
RIP=ffffffff869a55e8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556c965500 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b33920000 CR3=00000001236a6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f92cae12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
