last executing test programs:

14m46.593411133s ago: executing program 32 (id=327):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x1, 0xfff, 0xd, 0x61ca, 0x3000000000000, 0x0, 0xc, 0x2, 0x926})

14m5.068097102s ago: executing program 33 (id=979):
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff)

13m17.848069508s ago: executing program 34 (id=1637):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff)

12m45.598999319s ago: executing program 35 (id=1855):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="1400000030000103000000000000000001"], 0x114}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0)

11m36.451396301s ago: executing program 36 (id=2940):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendto$inet6(r0, &(0x7f0000000080)="a000000000000000", 0x8, 0x200040d0, &(0x7f0000000000)={0xa, 0x4e22, 0x805, @mcast2}, 0x1c)

10m16.778464445s ago: executing program 37 (id=3863):
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x82)
fchdir(r1)
setresuid(0x0, 0xee01, 0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r2, 0x0, 0xee01)

9m54.090199347s ago: executing program 38 (id=3905):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1000800, &(0x7f0000000280)={[{@zero_size_dir}, {@namecase}, {@zero_size_dir}, {}, {@errors_continue}, {@keep_last_dots}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@keep_last_dots}, {@dmask={'dmask', 0x3d, 0x7}}]}, 0x1, 0x1537, &(0x7f00000007c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000280)=""/59, 0x5e)

9m42.215504165s ago: executing program 39 (id=4128):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0)

7m47.875583296s ago: executing program 40 (id=5662):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x2c, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x3ff, {[@mptcp=@ack={0x1e, 0x18, 0x10, 0x1, "afa332de600b4ceb9757b4000000000000000000"}]}}}}}}}}, 0x0)

6m49.625504469s ago: executing program 41 (id=6440):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c)
setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c)

6m28.159038482s ago: executing program 42 (id=6620):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b35, &(0x7f0000000000)={'wlan1\x00', @remote})

3m17.133426741s ago: executing program 43 (id=9073):
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
close(0x3)
r1 = socket(0x2b, 0x80801, 0x1)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8)

2m52.419451727s ago: executing program 44 (id=9435):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0)

2m27.56606839s ago: executing program 4 (id=9699):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000001c0)={0xa, 0x4e21, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000000004", @ANYRES32=r0], 0x28}, 0x4044804)

2m27.473174866s ago: executing program 4 (id=9701):
r0 = socket(0x11, 0x80a, 0x400)
getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000540)=0x52)

2m27.36450186s ago: executing program 4 (id=9702):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0x43, 0xa0, 0x1b8, 0x98, 0x248, 0x178, 0x178, 0x248, 0x178, 0x49, 0x0, {[{{@ip={@multicast1, @multicast2, 0xff000000, 0xff, 'syz_tun\x00', 'geneve1\x00', {0xff}, {0xff}, 0x88, 0x2, 0x3d}, 0x12a, 0x198, 0x1b8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@cluster={{0x30}, {0x80000, 0x2, 0x6, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x340)

2m27.256405952s ago: executing program 4 (id=9705):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000080)={0x100000008, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]})

2m26.599147429s ago: executing program 4 (id=9713):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

2m26.213476624s ago: executing program 4 (id=9716):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='tcp 2', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, 0x0, 0x0)

2m15.119172299s ago: executing program 45 (id=9841):
setns(0xc9, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x268cc, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), 0x0, &(0x7f0000000140))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108)

2m11.232243859s ago: executing program 46 (id=9716):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='tcp 2', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, 0x0, 0x0)

1m56.063926354s ago: executing program 0 (id=10084):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e1c, 0x7c, @empty, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x1}, 0x800)

1m56.063819615s ago: executing program 0 (id=10085):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

1m55.91616663s ago: executing program 0 (id=10086):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x260d)

1m55.911788793s ago: executing program 0 (id=10087):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x2b, 0x0, &(0x7f0000000280))
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
mkdir(0x0, 0x22)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
r1 = socket(0x10, 0x803, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f00000001c0)={0x0})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}})

1m55.811496059s ago: executing program 0 (id=10088):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)

1m55.810886409s ago: executing program 0 (id=10091):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x8005, 0x103800)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0xfffffffe, 0xbb6, 0x1, 0x0, 0xc, 0xa, 0x2, 0x700}})

1m48.284661539s ago: executing program 7 (id=10171):
mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffff00000000, &(0x7f0000afaf0a)=""/246)

1m48.236185814s ago: executing program 7 (id=10173):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000000000, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@overlay={0x8, 0x5, 0x4, 0x2000, 0x2, {0x77359400}, {0x4, 0xa, 0x0, 0x4, 0x9}, 0x8, 0x3, {}, 0x400})

1m48.236080814s ago: executing program 7 (id=10174):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000007c0)=0x18, 0x4)

1m48.17586549s ago: executing program 7 (id=10176):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x200, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x2, 0x8})

1m48.014925257s ago: executing program 7 (id=10178):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0)
setresuid(0xee01, 0xee00, 0x0)
ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0x5451, 0x7, 0x1})

1m47.944555381s ago: executing program 7 (id=10179):
r0 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0xf)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='mand\x00', 0x0, 0x0)

1m40.521500096s ago: executing program 47 (id=10091):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x8005, 0x103800)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0xfffffffe, 0xbb6, 0x1, 0x0, 0xc, 0xa, 0x2, 0x700}})

1m32.946057173s ago: executing program 48 (id=10179):
r0 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0xf)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='mand\x00', 0x0, 0x0)

1m26.951961176s ago: executing program 2 (id=10334):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r1, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newtaction={0x14, 0x1e, 0x109, 0x70bd2b}, 0x14}, 0x1, 0x2b1e}, 0x0)
r2 = syz_io_uring_setup(0x111, 0x0, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000))
io_uring_enter(r2, 0x66a8, 0x4000, 0xf, 0x0, 0x18)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0)

1m26.739612079s ago: executing program 2 (id=10336):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28)

1m26.635468912s ago: executing program 2 (id=10337):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0xfffe}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x48}}, 0x80)

1m26.635292224s ago: executing program 2 (id=10338):
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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")
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]})
getegid()
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0)

1m26.421076302s ago: executing program 2 (id=10339):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073118900000000008510000002000000850000009a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x204, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r1, 0xc138fd03, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2b, 0x62, 0xa, 0xff00, 0x14}, [@call={0x75}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)

1m26.062199217s ago: executing program 2 (id=10340):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0xb04d, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x0, 0x47524247, 0x2, @discrete={0x8000, 0x43}})

1m25.911605212s ago: executing program 49 (id=10340):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0xb04d, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x0, 0x47524247, 0x2, @discrete={0x8000, 0x43}})

1m25.49402106s ago: executing program 8 (id=10346):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a05125000000000000109022400010000e80b0904000001030002000921fd7f000122e30109058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xe, {[@local=@item_4={0x3, 0x2, 0x2, "00c15100"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

1m23.747327148s ago: executing program 8 (id=10355):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002040)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)

1m23.195520007s ago: executing program 8 (id=10358):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20060094}, 0x0)

1m22.672181947s ago: executing program 8 (id=10360):
syz_mount_image$nilfs2(&(0x7f000000a000), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f000000a380)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106e80, &(0x7f0000000100)={0x1, 0x100000000, 0x9, 0x400000, 0x4000040c, 0x4fe4, 0x2401})

1m22.525409448s ago: executing program 8 (id=10362):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/reply_cache_stats\x00', 0x0, 0x0)

1m22.37145454s ago: executing program 8 (id=10363):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00')
syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000882, &(0x7f0000000600)={[{@rodir}, {@uni_xlateno}, {@rodir}, {@rodir}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@utf8}, {@uni_xlate}, {@uni_xlateno}, {@shortname_win95}, {@utf8no}, {@fat=@fmask={'fmask', 0x3d, 0xce}}, {@fat=@sys_immutable}, {@fat=@discard}]}, 0x81, 0x2d1, &(0x7f0000000b80)="$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")
read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020)

1m7.395023515s ago: executing program 50 (id=10363):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00')
syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000882, &(0x7f0000000600)={[{@rodir}, {@uni_xlateno}, {@rodir}, {@rodir}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@utf8}, {@uni_xlate}, {@uni_xlateno}, {@shortname_win95}, {@utf8no}, {@fat=@fmask={'fmask', 0x3d, 0xce}}, {@fat=@sys_immutable}, {@fat=@discard}]}, 0x81, 0x2d1, &(0x7f0000000b80)="$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")
read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020)

36.192997115s ago: executing program 6 (id=10831):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x60, 0x0, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_NAT={0x38, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040010}, 0xd0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001700090065bd70f201dcdf250600000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)

36.19259253s ago: executing program 6 (id=10832):
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x290, 0x168, 0x10, 0x0, 0xb, 0x290, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x1, 0xb6, 0x0, 0x20}, 0x6000000, 0x228, 0x290, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xffffff00, 0xffffffff, 0xffffffff], @ipv4=@multicast1, [0xffffffff, 0xffff00, 0xffffff00], 0x4d2, 0x0, 0x1, 0x1, 0x0, 0x5}, {@ipv6=@loopback, [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], @ipv4=@local, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 0x4d6, 0x3507, 0x29, 0x1, 0x4, 0x16}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1}, [0xff000000, 0x0, 0xffffffff, 0xffffffff], 0x4d5, 0x3507, 0x0, 0x0, 0x4, 0x4}, {@ipv4=@multicast1, [0xffffffff, 0x0, 0xff, 0xff], @ipv6=@loopback, [0xff000000, 0x0, 0xff000000, 0xffffffff], 0x4d5, 0x3502, 0x21, 0x1, 0x11, 0x14}], 0x1, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x3)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r3, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d"], 0x20)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_setup(0x5ab7, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = msgget$private(0x0, 0x3ac)
msgrcv(r8, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000)
msgrcv(r8, 0x0, 0x0, 0x2, 0x2000)
msgsnd(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000099cb9169c600000000"], 0x8, 0x800)
ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000200)={0x8, 0x7fff, 0xc56})
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x14, 0x8, 0xc1c8, 0x2}})
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000000)={0x8, 0xf6})

34.689256717s ago: executing program 6 (id=10840):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff4100007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

34.58465866s ago: executing program 6 (id=10841):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, 0x0, 0x0, 0xfe}, 0x20)

34.5844268s ago: executing program 6 (id=10842):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e8005"], 0x48}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffd2a, &(0x7f0000000040), 0x3}, 0x0)

34.533671457s ago: executing program 6 (id=10843):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x27, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004)

29.664720492s ago: executing program 3 (id=10865):
syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @random="4aa468739b85", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @private=0xa010100, @random="7792d99bba25", @dev={0xac, 0x14, 0x14, 0xff}}}}}, 0x0)

29.596585358s ago: executing program 3 (id=10866):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

29.59204476s ago: executing program 3 (id=10867):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000040000000400000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev}}}}, 0x0)

29.503603176s ago: executing program 3 (id=10868):
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2020c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0))
rmdir(&(0x7f0000000080)='./bus\x00')

29.324327585s ago: executing program 3 (id=10869):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0)

29.323968954s ago: executing program 3 (id=10870):
socket$inet6_udp(0xa, 0x2, 0x0)
getcwd(&(0x7f0000000000)=""/4096, 0x1000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x1018}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000)
keyctl$set_reqkey_keyring(0xf, 0xfffffffb)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000)
socket(0x10, 0x2, 0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]})
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x400300, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0xdc06d0aa96b5c82f, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x121080, 0x110)

18.814755138s ago: executing program 51 (id=10843):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x27, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004)

13.82943387s ago: executing program 52 (id=10870):
socket$inet6_udp(0xa, 0x2, 0x0)
getcwd(&(0x7f0000000000)=""/4096, 0x1000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x1018}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000)
keyctl$set_reqkey_keyring(0xf, 0xfffffffb)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000)
socket(0x10, 0x2, 0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]})
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x400300, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0xdc06d0aa96b5c82f, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x121080, 0x110)

3.876737034s ago: executing program 1 (id=11036):
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
setgroups(0x0, 0x0)

3.75855353s ago: executing program 1 (id=11038):
setrlimit(0xb, &(0x7f0000000140)={0x1, 0xffffffffffffffff})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0xe80, 0x0)
ioctl$RTC_IRQP_READ(r0, 0x40187014, &(0x7f0000000140))

3.657125548s ago: executing program 1 (id=11039):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001900010028bd7000fbdbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0)

3.524850651s ago: executing program 1 (id=11041):
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x3a08c06, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRES16, @ANYRES8], 0x4, 0x683, &(0x7f0000000c00)="$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")
lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="6f73782e636f6d2e6170706c652e46696e646572496e666f002a7a5a3e47207f3e6f5321c72e7b9551be8b8629359b3365847ce5c3feaa8cb4794cf9b791"], 0x0, 0x30)

2.794911809s ago: executing program 1 (id=11043):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6, @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)

841.925599ms ago: executing program 1 (id=11051):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
listen(r0, 0x2)
accept4(r0, 0x0, 0x0, 0x80800)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0xe)

753.042374ms ago: executing program 9 (id=11053):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r3 = epoll_create1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
close(0x3)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x4})
socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000040)={{0x18}, {0x18}, 0x0, 0x7})

684.933642ms ago: executing program 9 (id=11054):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042"], 0x14}}, 0x44014)
recvmmsg(r0, &(0x7f0000007780)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000980)=""/167, 0xa7}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x2}, 0x4}], 0x1, 0x2, 0x0)

612.684988ms ago: executing program 9 (id=11055):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendto(r0, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000000700058014000180080005000000000008000500640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0)

543.639317ms ago: executing program 9 (id=11057):
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040b02034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, 0xfffffffffffffffe)

465.327084ms ago: executing program 9 (id=11058):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x62, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782ed44b9040200080211000000040000a118000200010000000000000008000f0100810401a80016ea1f000840032e5f54c92011144dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101015ee4bd31445a7ba9599763001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0090000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e5e6d98031b68c76f9cefbbcbee5de6ccd40d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044)

404.238843ms ago: executing program 9 (id=11059):
syz_usb_connect$uac3(0x2, 0xb3, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x1, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x3d, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x25, 0x101, 0x6, 0x2, 0x50, 0x7ff, 0x7, 0x1, 0x1ff}, @source_unit={0xc, 0x24, 0xb, 0x7, 0x1, 0xfffffffc, 0x8, 0x6}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x100, 0x5, 0x7, 0xb, 0x3, 0x6, 0x2, 0x1ff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0xd4, 0x84, {0xa, 0x25, 0x25, 0x0, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfa, 0xa, 0x4, {0xa, 0x25, 0x25, 0x80000000, 0x5, 0x9}}}}}}}}]}}, 0x0)

334.357509ms ago: executing program 5 (id=11060):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000002c0)={0x5, 0x0, 0x27f})

334.108144ms ago: executing program 5 (id=11061):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x80, 0x30, 0xb, 0x5, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x80, 0x0, 0x0, 0x400}}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_LABELS={0x14, 0x7, "342296995c43a54d6822a8f593e35f7a"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x40)

233.934021ms ago: executing program 5 (id=11062):
timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0)
timer_gettime(r0, &(0x7f0000000080))

233.817549ms ago: executing program 5 (id=11063):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a0000000000006111900000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)

154.382202ms ago: executing program 5 (id=11064):
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000000)='7', 0x1)
unshare(0x6a040000)

0s ago: executing program 5 (id=11065):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(r0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c)
sendmmsg$inet6(r2, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc)
setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @broadcast}}], 0x1c)

kernel console output (not intermixed with test programs):

8][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  870.175084][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  870.188944][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  870.193219][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  870.197497][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  870.201757][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  870.644110][T31608] xt_cgroup: xt_cgroup: no path or classid specified
[  870.758394][T29547] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.047582][T29547] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.122956][T31588] bridge0: port 1(bridge_slave_0) entered blocking state
[  871.126026][T31588] bridge0: port 1(bridge_slave_0) entered disabled state
[  871.129037][T31588] bridge_slave_0: entered allmulticast mode
[  871.132324][T31588] bridge_slave_0: entered promiscuous mode
[  871.187078][T29547] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.272582][T31588] bridge0: port 2(bridge_slave_1) entered blocking state
[  871.275512][T31588] bridge0: port 2(bridge_slave_1) entered disabled state
[  871.278161][T31588] bridge_slave_1: entered allmulticast mode
[  871.286541][T31588] bridge_slave_1: entered promiscuous mode
[  871.523871][T29547] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.543207][T31588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  871.551850][T31588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  871.574746][T31588] team0: Port device team_slave_0 added
[  871.580665][T31588] team0: Port device team_slave_1 added
[  871.613324][T31588] batman_adv: batadv0: Adding interface: batadv_slave_0
[  871.615893][T31588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  871.624736][T31588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  871.629168][T31588] batman_adv: batadv0: Adding interface: batadv_slave_1
[  871.631513][T31588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  871.639479][T31588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  871.667223][T31588] hsr_slave_0: entered promiscuous mode
[  871.672056][T31588] hsr_slave_1: entered promiscuous mode
[  871.675949][T31588] debugfs: 'hsr0' already exists in 'hsr'
[  871.679869][T31588] Cannot create hsr debugfs directory
[  871.967304][T29547] bridge_slave_1: left allmulticast mode
[  871.969185][T29547] bridge_slave_1: left promiscuous mode
[  871.971293][T29547] bridge0: port 2(bridge_slave_1) entered disabled state
[  872.125660][T29547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  872.130079][T29547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  872.139902][T29547] bond0 (unregistering): Released all slaves
[  872.146703][T29547] bond1 (unregistering): Released all slaves
[  872.230980][T29547] tipc: Left network mode
[  872.318430][ T5012] Bluetooth: hci4: command tx timeout
[  872.590976][ T5359] 8021q: adding VLAN 0 to HW filter on device eth21
[  873.111754][ T5359] 8021q: adding VLAN 0 to HW filter on device eth22
[  873.244289][T29547] hsr_slave_0: left promiscuous mode
[  873.244728][T29547] hsr_slave_1: left promiscuous mode
[  873.245175][T29547] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  873.245185][T29547] batman_adv: batadv0: Removing interface: batadv_slave_0
[  873.247316][T29547] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  873.247325][T29547] batman_adv: batadv0: Removing interface: batadv_slave_1
[  873.283899][T29547] veth1_macvtap: left promiscuous mode
[  873.283959][T29547] veth0_macvtap: left promiscuous mode
[  873.284033][T29547] veth1_vlan: left promiscuous mode
[  873.284062][T29547] veth0_vlan: left promiscuous mode
[  873.867249][T29547] team0 (unregistering): Port device team_slave_1 removed
[  873.876251][T29547] team0 (unregistering): Port device team_slave_0 removed
[  873.974196][ T5359] 8021q: adding VLAN 0 to HW filter on device eth23
[  874.367946][ T5012] Bluetooth: hci4: command tx timeout
[  874.474502][ T5359] 8021q: adding VLAN 0 to HW filter on device eth24
[  874.657099][T29547] IPVS: stop unused estimator thread 0...
[  874.721679][T31720] x_tables: duplicate entry at hook 1
[  874.819722][T31723] netlink: 'syz.8.10258': attribute type 4 has an invalid length.
[  874.916793][T31588] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  874.928992][T31588] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  874.929490][T31588] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  874.936938][T31588] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  874.937694][T31588] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  874.945461][T31588] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  874.946034][T31588] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  874.953319][T31588] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  875.027826][T31588] 8021q: adding VLAN 0 to HW filter on device bond0
[  875.048576][T31588] 8021q: adding VLAN 0 to HW filter on device team0
[  875.051928][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  875.052010][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  875.065718][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  875.065880][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  875.295459][T31588] 8021q: adding VLAN 0 to HW filter on device batadv0
[  875.319520][T31588] veth0_vlan: entered promiscuous mode
[  875.328296][T31588] veth1_vlan: entered promiscuous mode
[  875.356417][T31588] veth0_macvtap: entered promiscuous mode
[  875.362959][T31588] veth1_macvtap: entered promiscuous mode
[  875.376343][T31588] batman_adv: batadv0: Interface activated: batadv_slave_0
[  875.385031][T31588] batman_adv: batadv0: Interface activated: batadv_slave_1
[  875.451191][ T5652] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  875.451267][ T5652] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  875.492786][T29547] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  875.493088][T29547] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  875.631904][T17090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  875.631951][T17090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  875.769528][T31769] Bluetooth: MGMT ver 1.23
[  875.860084][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  875.860136][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  876.053383][T31785] netlink: 'syz.2.10215': attribute type 5 has an invalid length.
[  876.450532][ T5012] Bluetooth: hci4: command tx timeout
[  876.578566][T31817] loop8: detected capacity change from 0 to 1024
[  876.584098][T31817] EXT4-fs: Ignoring removed bh option
[  876.610004][T31819] loop2: detected capacity change from 0 to 64
[  876.622012][T31817] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  876.745015][T30649] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  876.814565][T31831] loop8: detected capacity change from 0 to 128
[  876.821217][T31831] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  876.821304][T31831] hpfs: filesystem error: improperly stopped
[  876.821354][T31831] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  876.821405][T31831] hpfs: You really don't want any checks? You are crazy...
[  876.821428][T31831] hpfs: Code page index out of array
[  876.821506][T31831] hpfs: code page support is disabled
[  876.826971][T31831] hpfs: hpfs_map_4sectors(): unaligned read
[  876.827005][T31831] hpfs: hpfs_map_4sectors(): unaligned read
[  876.827011][T31831] hpfs: filesystem error: unable to find root dir
[  877.018612][T31840] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  877.155807][T31848] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0001 with DS=0x1
[  877.156356][T31845] loop8: detected capacity change from 0 to 2048
[  877.231416][T31845] Alternate GPT is invalid, using primary GPT.
[  877.231549][T31845]  loop8: p1 p2 p3
[  877.355171][T25978] udevd[25978]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[  877.359521][T28618] udevd[28618]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory
[  877.368445][T25972] udevd[25972]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  877.424542][T25972] udevd[25972]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  877.431468][T28618] udevd[28618]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory
[  877.484673][T31858] loop8: detected capacity change from 0 to 1024
[  877.648513][T31864] loop8: detected capacity change from 0 to 1024
[  877.664478][T31864] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002]
[  877.664569][T31864] System zones: 0-1, 3-12
[  877.665481][T31864] EXT4-fs (loop8): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  877.707573][T31851] loop2: detected capacity change from 0 to 32768
[  877.742198][T30649] EXT4-fs (loop8): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  877.848781][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  877.867810][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  877.869320][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  877.876312][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  877.879543][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  878.058582][T31851] read_mapping_page failed!
[  878.058643][T31851] ialloc: diAlloc returned -5!
[  878.421284][T31897] loop8: detected capacity change from 0 to 32768
[  878.461065][T31897] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  878.503646][T31897] XFS (loop8): Ending clean mount
[  878.520559][ T5012] Bluetooth: hci4: command tx timeout
[  879.064226][T31928] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10305'.
[  879.067788][T31928] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10305'.
[  879.067807][T31928] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10305'.
[  879.071180][T31928] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10305'.
[  879.071195][T31928] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10305'.
[  879.086656][T31928] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10305'.
[  879.086738][T31928] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10305'.
[  879.112613][T31928] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10305'.
[  879.112665][T31928] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10305'.
[  879.153257][T31928] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10305'.
[  879.214547][T31928] bridge0: port 2(bridge_slave_1) entered disabled state
[  879.215119][T31928] bridge0: port 1(bridge_slave_0) entered disabled state
[  879.237160][T30649] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  879.356567][T31928] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  879.362582][T31928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  879.747666][T31870] bridge0: port 1(bridge_slave_0) entered blocking state
[  879.752796][T31870] bridge0: port 1(bridge_slave_0) entered disabled state
[  879.755495][T31870] bridge_slave_0: entered allmulticast mode
[  879.765543][T31870] bridge_slave_0: entered promiscuous mode
[  879.770405][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  879.770526][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  879.770575][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  879.770589][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  879.815698][T31870] bridge0: port 2(bridge_slave_1) entered blocking state
[  879.815788][T31870] bridge0: port 2(bridge_slave_1) entered disabled state
[  879.815895][T31870] bridge_slave_1: entered allmulticast mode
[  879.816642][T31870] bridge_slave_1: entered promiscuous mode
[  879.859037][T31870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  879.868024][T31870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  879.928898][T31870] team0: Port device team_slave_0 added
[  879.938405][T31870] team0: Port device team_slave_1 added
[  879.960781][ T5012] Bluetooth: hci0: command tx timeout
[  879.976531][T31956] loop2: detected capacity change from 0 to 512
[  879.977084][T31956] EXT4-fs: Ignoring removed oldalloc option
[  879.990884][T31956] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.10317: Parent and EA inode have the same ino 15
[  879.990924][T31956] loop2: lost filesystem error report for type 5 error -117
[  879.993911][T31961] netlink: 'syz.8.10318': attribute type 11 has an invalid length.
[  879.993922][T31961] netlink: 'syz.8.10318': attribute type 11 has an invalid length.
[  880.000960][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  880.000975][    C0] EXT4-fs (loop2): initial error at time 245026856: ext4_xattr_inode_iget:433
[  880.000990][    C0] EXT4-fs (loop2): last error at time 245026856: ext4_xattr_inode_iget:433
[  880.010369][T31956] EXT4-fs (loop2): Remounting filesystem read-only
[  880.010431][T31956] EXT4-fs (loop2): 1 orphan inode deleted
[  880.022726][T31956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  880.033915][T31870] batman_adv: batadv0: Adding interface: batadv_slave_0
[  880.036672][T31870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  880.050319][T31870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  880.058785][T31870] batman_adv: batadv0: Adding interface: batadv_slave_1
[  880.061574][T31870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  880.070381][T31870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  880.101211][T31588] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  880.158470][T31870] hsr_slave_0: entered promiscuous mode
[  880.163566][T31870] hsr_slave_1: entered promiscuous mode
[  880.164152][T31870] debugfs: 'hsr0' already exists in 'hsr'
[  880.164191][T31870] Cannot create hsr debugfs directory
[  880.376887][T31971] gtp0: entered promiscuous mode
[  880.376928][T31971] gtp0: entered allmulticast mode
[  880.377941][T31971] team0: Device gtp0 is of different type
[  880.882213][ T5689] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  881.040888][ T5689] usb 9-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  881.047317][ T5689] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  881.047377][ T5689] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  881.056631][ T5689] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.056668][ T5689] usb 9-1: Product: syz
[  881.056721][ T5689] usb 9-1: Manufacturer: syz
[  881.056748][ T5689] usb 9-1: SerialNumber: syz
[  881.322664][ T5689] kaweth 9-1:1.0: Firmware present in device.
[  881.407869][T31989] netlink: 'syz.2.10324': attribute type 5 has an invalid length.
[  881.477333][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  881.477381][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  881.477484][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  881.477516][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  881.510457][ T5689] kaweth 9-1:1.0: Statistics collection: 0
[  881.512747][ T5689] kaweth 9-1:1.0: Multicast filter limit: 0
[  881.515062][ T5689] kaweth 9-1:1.0: MTU: 0
[  881.516456][ T5689] kaweth 9-1:1.0: Read MAC address 00:00:00:00:00:00
[  882.053580][ T5012] Bluetooth: hci0: command tx timeout
[  882.189810][ T5689] kaweth 9-1:1.0: Error setting SOFS wait
[  882.189933][ T5689] kaweth 9-1:1.0: probe with driver kaweth failed with error -5
[  882.206576][ T5689] usb 9-1: USB disconnect, device number 7
[  882.327955][T31870] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  882.334489][T31870] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  882.337213][T31870] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  882.341921][T31870] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  882.342785][T31870] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  882.349605][T31870] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  882.350118][T31870] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  882.406866][T31870] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  882.547194][T31870] 8021q: adding VLAN 0 to HW filter on device bond0
[  882.567525][T31870] 8021q: adding VLAN 0 to HW filter on device team0
[  882.576363][T17097] bridge0: port 1(bridge_slave_0) entered blocking state
[  882.576442][T17097] bridge0: port 1(bridge_slave_0) entered forwarding state
[  882.589295][T17097] bridge0: port 2(bridge_slave_1) entered blocking state
[  882.589376][T17097] bridge0: port 2(bridge_slave_1) entered forwarding state
[  882.993060][T32046] loop8: detected capacity change from 0 to 4096
[  883.025140][T32051] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  883.044605][T31870] 8021q: adding VLAN 0 to HW filter on device batadv0
[  883.091224][T31870] veth0_vlan: entered promiscuous mode
[  883.104780][T31870] veth1_vlan: entered promiscuous mode
[  883.193907][T31870] veth0_macvtap: entered promiscuous mode
[  883.214197][T31870] veth1_macvtap: entered promiscuous mode
[  883.232971][T31870] batman_adv: batadv0: Interface activated: batadv_slave_0
[  883.238354][T31870] batman_adv: batadv0: Interface activated: batadv_slave_1
[  883.277354][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  883.277409][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  883.277449][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  883.277481][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  883.402747][T17097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  883.402792][T17097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  883.431853][ T5689] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  883.477057][  T178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  883.477105][  T178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  883.622166][ T5689] usb 9-1: Using ep0 maxpacket: 32
[  883.624965][ T5689] usb 9-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02
[  883.637133][ T5689] usb 9-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25
[  883.637171][ T5689] usb 9-1: Product: syz
[  883.642681][ T5689] usb 9-1: Manufacturer: syz
[  883.642733][ T5689] usb 9-1: SerialNumber: syz
[  883.663261][ T5689] usb 9-1: config 0 descriptor??
[  883.673793][ T5689] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected
[  883.679389][ T5689] ftdi_sio ttyUSB0: unknown device type: 0x302
[  883.891407][ T5689] usb 9-1: USB disconnect, device number 8
[  883.892243][ T5689] ftdi_sio 9-1:0.0: device disconnected
[  883.897760][T32084] loop2: detected capacity change from 0 to 512
[  883.900179][T32084] EXT4-fs (loop2): Test dummy encryption mode enabled
[  883.901258][T32084] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  883.907069][T32084] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.10338: bad orphan inode 131083
[  883.907357][T32084] loop2: lost filesystem error report for type 5 error -117
[  883.908807][T32084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  884.030396][  T807] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  884.121507][ T5012] Bluetooth: hci0: command tx timeout
[  884.190653][  T807] usb 2-1: Using ep0 maxpacket: 16
[  884.191406][  T807] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  884.192569][  T807] usb 2-1: config 4 has an invalid interface number: 9 but max is 0
[  884.192597][  T807] usb 2-1: config 4 has no interface number 0
[  884.192637][  T807] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  884.192699][  T807] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64
[  884.192730][  T807] usb 2-1: config 4 interface 9 has no altsetting 0
[  884.194691][  T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  884.194723][  T807] usb 2-1: Product: syz
[  884.194752][  T807] usb 2-1: Manufacturer: syz
[  884.194775][  T807] usb 2-1: SerialNumber: syz
[  884.211521][T32076] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  884.211566][T32076] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  884.278131][  T807] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  884.315674][T32089] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  884.437185][  T807] usb 2-1: USB disconnect, device number 21
[  884.443058][   T13] usb 2-1: Failed to submit usb control message: -71
[  884.444299][   T13] usb 2-1: unable to send the bmi data to the device: -71
[  884.444312][   T13] usb 2-1: unable to get target info from device
[  884.444318][   T13] usb 2-1: could not get target info (-71)
[  884.444498][   T13] usb 2-1: could not probe fw (-71)
[  884.723193][T15589] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  884.804999][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  884.819330][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  884.822538][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  884.826854][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  884.830066][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  885.261270][ T5689] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[  885.274694][T32126] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  885.373569][T15589] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  885.440885][ T5689] usb 9-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00
[  885.445296][ T5689] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  885.445363][ T5689] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  885.445406][ T5689] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.463858][ T5689] usb 9-1: config 0 descriptor??
[  885.468517][T32132] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  885.468582][T32132] batman_adv: batadv0: Removing interface: batadv_slave_0
[  885.476799][T32132] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  885.476859][T32132] batman_adv: batadv0: Removing interface: batadv_slave_1
[  885.540051][T15589] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  885.673294][T15589] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  885.913237][ T5689] wacom 0003:056A:5012.0010: unknown main item tag 0x0
[  885.915868][ T5689] wacom 0003:056A:5012.0010: unknown main item tag 0x0
[  885.918494][ T5689] wacom 0003:056A:5012.0010: unknown main item tag 0x0
[  885.921190][ T5689] wacom 0003:056A:5012.0010: unknown main item tag 0x0
[  885.925502][ T5689] wacom 0003:056A:5012.0010: unknown main item tag 0x0
[  885.925565][ T5689] wacom 0003:056A:5012.0010: unknown main item tag 0x0
[  885.925600][ T5689] wacom 0003:056A:5012.0010: unknown main item tag 0x0
[  885.925634][ T5689] wacom 0003:056A:5012.0010: unknown main item tag 0x0
[  885.925691][ T5689] wacom 0003:056A:5012.0010: unknown main item tag 0x0
[  885.925725][ T5689] wacom 0003:056A:5012.0010: unknown main item tag 0x0
[  885.926014][ T5689] wacom 0003:056A:5012.0010: ignoring exceeding usage max
[  885.948092][ T5689] wacom 0003:056A:5012.0010: reserved main item tag 0xd
[  885.956431][ T5689] wacom 0003:056A:5012.0010: Unknown device_type for 'HID 056a:5012'. Ignoring.
[  885.965381][T32106] bridge0: port 1(bridge_slave_0) entered blocking state
[  885.965497][T32106] bridge0: port 1(bridge_slave_0) entered disabled state
[  885.965661][T32106] bridge_slave_0: entered allmulticast mode
[  885.980598][T32106] bridge_slave_0: entered promiscuous mode
[  885.994350][T32106] bridge0: port 2(bridge_slave_1) entered blocking state
[  885.994473][T32106] bridge0: port 2(bridge_slave_1) entered disabled state
[  885.994857][T32106] bridge_slave_1: entered allmulticast mode
[  886.006770][T32106] bridge_slave_1: entered promiscuous mode
[  886.130128][ T5689] usb 9-1: USB disconnect, device number 9
[  886.210526][ T5012] Bluetooth: hci0: command tx timeout
[  886.224825][T32106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  886.461713][T32106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  886.493337][T32149] loop1: detected capacity change from 0 to 64
[  886.563191][T32106] team0: Port device team_slave_0 added
[  886.566035][T15589] bridge_slave_1: left allmulticast mode
[  886.566104][T15589] bridge_slave_1: left promiscuous mode
[  886.566311][T15589] bridge0: port 2(bridge_slave_1) entered disabled state
[  886.569052][T32149] syz.1.10353: attempt to access beyond end of device
[  886.569052][T32149] loop1: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[  886.569075][T32149] Buffer I/O error on dev loop1, logical block 512, async page read
[  886.569236][T32149] syz.1.10353: attempt to access beyond end of device
[  886.569236][T32149] loop1: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  886.569252][T32149] Buffer I/O error on dev loop1, logical block 56576, async page read
[  886.575891][T15589] bridge_slave_0: left allmulticast mode
[  886.575908][T15589] bridge_slave_0: left promiscuous mode
[  886.576055][T15589] bridge0: port 1(bridge_slave_0) entered disabled state
[  886.635724][T32149] Bad inode number on dev loop1: 5 is out of range
[  886.636063][T32149] syz.1.10353: attempt to access beyond end of device
[  886.636063][T32149] loop1: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[  886.636085][T32149] Buffer I/O error on dev loop1, logical block 512, async page read
[  886.636113][T32149] syz.1.10353: attempt to access beyond end of device
[  886.636113][T32149] loop1: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  886.636134][T32149] Buffer I/O error on dev loop1, logical block 56576, async page read
[  886.768197][T32152] ip_tables: iptables: counters copy to user failed while replacing table
[  886.920722][ T5012] Bluetooth: hci4: command tx timeout
[  887.072036][T32156] loop1: detected capacity change from 0 to 1024
[  887.088798][T32156] hfsplus: request for non-existent node 100663296 in B*Tree
[  887.088863][T32156] hfsplus: request for non-existent node 100663296 in B*Tree
[  887.088951][T32156] hfsplus: failed to load root directory
[  887.260462][T32158] loop1: detected capacity change from 0 to 512
[  887.283824][T32158] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.10357: inode has both inline data and extents flags
[  887.283890][T32158] fserror_report: 7 callbacks suppressed
[  887.283945][T32158] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  887.284417][T32158] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.10357: couldn't read orphan inode 15 (err -117)
[  887.284437][T32158] loop1: lost filesystem error report for type 5 error -117
[  887.285935][T32158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  887.336326][T15589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  887.354415][T15589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  887.361192][T15589] bond0 (unregistering): Released all slaves
[  887.380013][T32158] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  887.381954][ T5359] 8021q: adding VLAN 0 to HW filter on device eth1
[  887.387397][T32158] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  887.387470][T32158] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  887.395753][T32106] team0: Port device team_slave_1 added
[  887.405418][T32158] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring
[  887.405487][T32158] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  887.406216][T32158] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  887.479069][T31870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  887.785541][T32106] batman_adv: batadv0: Adding interface: batadv_slave_0
[  887.785598][T32106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  887.785672][T32106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  887.804612][T32168] loop8: detected capacity change from 0 to 4096
[  887.825268][T32170] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  888.014604][T32106] batman_adv: batadv0: Adding interface: batadv_slave_1
[  888.014687][T32106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  888.014705][T32106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  888.179760][T32106] hsr_slave_0: entered promiscuous mode
[  888.184194][T32106] hsr_slave_1: entered promiscuous mode
[  888.184837][T32106] debugfs: 'hsr0' already exists in 'hsr'
[  888.184851][T32106] Cannot create hsr debugfs directory
[  888.301824][T15589] hsr_slave_0: left promiscuous mode
[  888.311323][T15589] hsr_slave_1: left promiscuous mode
[  888.312114][T15589] batman_adv: batadv0: Removing interface: batadv_slave_0
[  888.325124][T15589] batman_adv: batadv0: Removing interface: batadv_slave_1
[  888.517211][T15589] team0 (unregistering): Port device team_slave_1 removed
[  888.537188][T15589] team0 (unregistering): Port device team_slave_0 removed
[  889.010375][ T5012] Bluetooth: hci4: command tx timeout
[  889.101440][   T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  889.281542][   T25] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  889.289328][   T25] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  889.289400][   T25] usb 2-1: Product: syz
[  889.289432][   T25] usb 2-1: SerialNumber: syz
[  889.292030][   T25] usb 2-1: config 0 descriptor??
[  889.347389][ T5359] 8021q: adding VLAN 0 to HW filter on device eth2
[  889.505079][   T25] usb 2-1: USB disconnect, device number 22
[  889.604494][ T5359] 8021q: adding VLAN 0 to HW filter on device eth3
[  890.008200][T32106] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  890.013584][T32106] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  890.016704][T32106] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  890.021101][T32106] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  890.023909][T32106] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  890.030873][T32106] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  890.034341][T32106] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  890.056006][T32106] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  890.104180][T32106] 8021q: adding VLAN 0 to HW filter on device bond0
[  890.113882][T32106] 8021q: adding VLAN 0 to HW filter on device team0
[  890.118828][T22179] bridge0: port 1(bridge_slave_0) entered blocking state
[  890.118901][T22179] bridge0: port 1(bridge_slave_0) entered forwarding state
[  890.127564][T22179] bridge0: port 2(bridge_slave_1) entered blocking state
[  890.127669][T22179] bridge0: port 2(bridge_slave_1) entered forwarding state
[  890.174017][ T5359] 8021q: adding VLAN 0 to HW filter on device eth4
[  890.596619][T32106] 8021q: adding VLAN 0 to HW filter on device batadv0
[  890.676274][T32106] veth0_vlan: entered promiscuous mode
[  890.707495][T32106] veth1_vlan: entered promiscuous mode
[  890.775179][T32106] veth0_macvtap: entered promiscuous mode
[  890.786406][T32106] veth1_macvtap: entered promiscuous mode
[  890.813332][T32106] batman_adv: batadv0: Interface activated: batadv_slave_0
[  890.826509][T32106] batman_adv: batadv0: Interface activated: batadv_slave_1
[  890.852972][T29547] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  890.853061][T29547] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  890.853122][T29547] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  890.853143][T29547] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  891.036352][T32248] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  891.067529][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  891.067574][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  891.090372][ T5012] Bluetooth: hci4: command tx timeout
[  891.258572][T32248] rtrs_client L2095: <s+>: Failed to resolve address, err: -ENODEV
[  891.277535][T17097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  891.277571][T17097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  891.352159][T32248] rtrs_client L2638: <s+>: init_conns() failed: err=-ENODEV path=<invalid address family>@ip:127.0.0.1 [:0]
[  891.740396][ T2015] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  891.893203][ T2015] usb 4-1: Using ep0 maxpacket: 32
[  891.896030][ T2015] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  891.902673][ T2015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  891.911652][ T2015] usb 4-1: config 0 descriptor??
[  891.929635][ T2015] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  892.180363][   T25] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  892.332440][   T25] usb 2-1: Using ep0 maxpacket: 32
[  892.335101][   T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  892.345194][   T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  892.345230][   T25] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  892.345271][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  892.363254][   T25] usb 2-1: config 0 descriptor??
[  892.811388][T32278] loop1: detected capacity change from 0 to 16
[  892.815098][T32278] erofs (device loop1): invalid ishare xattr prefix id 0
[  892.823557][  T807] usb 2-1: USB disconnect, device number 23
[  893.160334][ T5012] Bluetooth: hci4: command tx timeout
[  893.474276][T32317] loop1: detected capacity change from 0 to 1764
[  893.515883][T32317] iso9660: Corrupted directory entry in block 2 of inode 1920
[  893.561711][ T2015] gspca_vc032x: reg_w err -71
[  893.561748][ T2015] gspca_vc032x: I2c Bus Busy Wait 00
[  893.561787][ T2015] gspca_vc032x: I2c Bus Busy Wait 00
[  893.561808][ T2015] gspca_vc032x: I2c Bus Busy Wait 00
[  893.561829][ T2015] gspca_vc032x: I2c Bus Busy Wait 00
[  893.561850][ T2015] gspca_vc032x: I2c Bus Busy Wait 00
[  893.561871][ T2015] gspca_vc032x: I2c Bus Busy Wait 00
[  893.561892][ T2015] gspca_vc032x: I2c Bus Busy Wait 00
[  893.561913][ T2015] gspca_vc032x: I2c Bus Busy Wait 00
[  893.561935][ T2015] gspca_vc032x: I2c Bus Busy Wait 00
[  893.561955][ T2015] gspca_vc032x: I2c Bus Busy Wait 00
[  893.561977][ T2015] gspca_vc032x: I2c Bus Busy Wait 00
[  893.561998][ T2015] gspca_vc032x: I2c Bus Busy Wait 00
[  893.562019][ T2015] gspca_vc032x: I2c Bus Busy Wait 00
[  893.562055][ T2015] gspca_vc032x: I2c Bus Busy Wait 00
[  893.562075][ T2015] gspca_vc032x: I2c Bus Busy Wait 00
[  893.562096][ T2015] gspca_vc032x: I2c Bus Busy Wait 00
[  893.562127][ T2015] gspca_vc032x: I2c Bus Busy Wait 00
[  893.562149][ T2015] gspca_vc032x: I2c Bus Busy Wait 00
[  893.562171][ T2015] gspca_vc032x: Unknown sensor...
[  893.562229][ T2015] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[  893.623068][ T2015] usb 4-1: USB disconnect, device number 18
[  894.481616][T32341] binder: 32340:32341 ioctl c0306201 200000000180 returned -22
[  894.752702][T32353] __nla_validate_parse: 134 callbacks suppressed
[  894.752770][T32353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10387'.
[  895.013659][T32361] loop1: detected capacity change from 0 to 128
[  895.018202][T32361] ubifs: Unexpected value for 'bulk_read'
[  895.168246][T32367] loop1: detected capacity change from 0 to 24
[  895.168967][T32367] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  895.202797][T32367] VFS: Can't find a romfs filesystem on dev loop1.
[  895.202797][T32367] 
[  895.461891][T32376] comedi comedi0: No channels found!
[  895.758510][T32387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10403'.
[  896.147145][   T34] audit: type=1326 audit(245026872.824:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32398 comm="syz.3.10408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752099e159 code=0x7ffc0000
[  896.156900][   T34] audit: type=1326 audit(245026872.824:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32398 comm="syz.3.10408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752099e159 code=0x7ffc0000
[  896.170559][   T34] audit: type=1326 audit(245026872.844:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32398 comm="syz.3.10408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752099e159 code=0x7ffc0000
[  896.178732][   T34] audit: type=1326 audit(245026872.854:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32398 comm="syz.3.10408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752099e159 code=0x7ffc0000
[  896.188824][   T34] audit: type=1326 audit(245026872.874:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32398 comm="syz.3.10408" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f752099e159 code=0x7ffc0000
[  896.217294][   T34] audit: type=1326 audit(245026872.894:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32398 comm="syz.3.10408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752099e159 code=0x7ffc0000
[  896.217750][   T34] audit: type=1326 audit(245026872.894:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32400 comm="syz.3.10408" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f752095e98e code=0x7ffc0000
[  896.225292][   T34] audit: type=1326 audit(245026872.904:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32398 comm="syz.3.10408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752099e159 code=0x7ffc0000
[  896.262728][   T34] audit: type=1326 audit(245026872.944:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32398 comm="syz.3.10408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752099e159 code=0x7ffc0000
[  896.269910][   T34] audit: type=1326 audit(245026872.944:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32398 comm="syz.3.10408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752099e159 code=0x7ffc0000
[  896.395089][T32402] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1
[  896.407930][T32402] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1
[  896.417372][T32402] PKCS7: Unsupported data type 106
[  897.396125][T32431] loop1: detected capacity change from 0 to 128
[  897.404596][T32431] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  897.404675][T32431] System zones: 1-3, 19-19, 35-36
[  897.406116][T32431] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  897.489167][T31870] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  897.620814][T32440] libceph: resolve '1' (ret=-3): failed
[  897.653089][T32443] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  897.956548][T32457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10434'.
[  897.998813][T32455] loop1: detected capacity change from 0 to 40427
[  898.002223][T32455] F2FS-fs (loop1): invalid crc value
[  898.102494][T32455] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  898.115329][T32455] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  898.173444][T31870] syz-executor: attempt to access beyond end of device
[  898.173444][T31870] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  898.177272][T31870] CPU: 0 UID: 0 PID: 31870 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  898.177288][T31870] Tainted: [L]=SOFTLOCKUP
[  898.177291][T31870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  898.177296][T31870] Call Trace:
[  898.177300][T31870]  <TASK>
[  898.177305][T31870]  dump_stack_lvl+0xe8/0x150
[  898.177320][T31870]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  898.177335][T31870]  f2fs_write_end_io+0x1215/0x16f0
[  898.177345][T31870]  ? blkg_put+0x22/0x240
[  898.177362][T31870]  __submit_merged_bio+0x258/0x6a0
[  898.177370][T31870]  ? rcu_is_watching+0x16/0xb0
[  898.177381][T31870]  __submit_merged_write_cond+0x3c9/0x4e0
[  898.177396][T31870]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  898.177415][T31870]  f2fs_write_data_pages+0x2a27/0x36f0
[  898.177423][T31870]  ? is_bpf_text_address+0x292/0x2b0
[  898.177444][T31870]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  898.177468][T31870]  ? __pfx_hlock_conflict+0x10/0x10
[  898.177476][T31870]  ? __bfs+0x153/0x290
[  898.177482][T31870]  ? __pfx_hlock_conflict+0x10/0x10
[  898.177533][T31870]  ? lockdep_unlock+0x5c/0xd0
[  898.177545][T31870]  ? __lock_acquire+0x13e8/0x2cf0
[  898.177562][T31870]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  898.177571][T31870]  do_writepages+0x338/0x560
[  898.177586][T31870]  ? do_raw_spin_unlock+0x4d/0x200
[  898.177597][T31870]  filemap_fdatawrite+0x1e9/0x2f0
[  898.177607][T31870]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  898.177629][T31870]  ? do_raw_spin_unlock+0x4d/0x200
[  898.177640][T31870]  f2fs_sync_dirty_inodes+0x30e/0x830
[  898.177655][T31870]  f2fs_write_checkpoint+0xa3d/0x2710
[  898.177663][T31870]  ? __lock_acquire+0x683/0x2cf0
[  898.177681][T31870]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  898.177703][T31870]  ? try_to_wake_up+0x8b6/0x14d0
[  898.177716][T31870]  kill_f2fs_super+0x2dd/0x700
[  898.177728][T31870]  ? __pfx_kill_f2fs_super+0x10/0x10
[  898.177741][T31870]  ? call_rcu+0x64d/0x8b0
[  898.177749][T31870]  ? lockdep_hardirqs_on+0x7b/0x110
[  898.177763][T31870]  deactivate_locked_super+0xbc/0x110
[  898.177773][T31870]  cleanup_mnt+0x3d3/0x460
[  898.177785][T31870]  task_work_run+0x1d9/0x270
[  898.177795][T31870]  ? __pfx_task_work_run+0x10/0x10
[  898.177806][T31870]  exit_to_user_mode_loop+0x204/0x770
[  898.177814][T31870]  ? rcu_is_watching+0x16/0xb0
[  898.177823][T31870]  do_syscall_64+0x328/0x520
[  898.177831][T31870]  ? trace_irq_disable+0x3b/0x140
[  898.177838][T31870]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  898.177847][T31870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  898.177854][T31870] RIP: 0033:0x7f4a1859f397
[  898.177864][T31870] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  898.177870][T31870] RSP: 002b:00007ffdca483278 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  898.177879][T31870] RAX: 0000000000000000 RBX: 00007f4a186344bb RCX: 00007f4a1859f397
[  898.177885][T31870] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdca483330
[  898.177892][T31870] RBP: 00007ffdca483330 R08: 00007ffdca484330 R09: 00000000ffffffff
[  898.177900][T31870] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdca4843c0
[  898.177907][T31870] R13: 00007f4a186344bb R14: 00000000000db3f1 R15: 00007ffdca484400
[  898.177926][T31870]  </TASK>
[  898.177932][T31870] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  898.295775][T32471] netlink: 'syz.3.10440': attribute type 1 has an invalid length.
[  898.295793][T32471] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  899.180327][T22718] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  899.341544][T22718] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  899.342607][T22718] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  899.342621][T22718] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  899.342631][T22718] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  899.342640][T22718] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  899.342655][T22718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  899.366153][T32505] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  899.366323][T32505] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  899.366365][T32505] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  899.366402][T32505] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  899.434145][T32517] cxacru 2-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2
[  899.434193][T32517] cxacru 2-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin
[  899.795029][T32532] netlink: 'syz.3.10468': attribute type 4 has an invalid length.
[  900.581767][ T5689] usb 2-1: USB disconnect, device number 24
[  900.734097][T32540] netlink: Conntrack attr type has unexpected length (type=0, length=2, expected=0)
[  900.737024][T32540] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  900.819575][T32546] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10474'.
[  901.215232][T32560] netlink: 'syz.3.10479': attribute type 1 has an invalid length.
[  901.418583][T32568] xt_hashlimit: size too large, truncated to 1048576
[  902.020571][ T2015] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  902.095971][T32597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10497'.
[  902.145036][   T34] kauditd_printk_skb: 7 callbacks suppressed
[  902.145088][   T34] audit: type=1326 audit(245026878.824:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32599 comm="syz.1.10498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1859e159 code=0x7ffc0000
[  902.153998][   T34] audit: type=1326 audit(245026878.834:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32599 comm="syz.1.10498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1859e159 code=0x7ffc0000
[  902.164138][   T34] audit: type=1326 audit(245026878.844:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32599 comm="syz.1.10498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1859e159 code=0x7ffc0000
[  902.171208][ T2015] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00
[  902.175493][ T2015] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11
[  902.175670][ T2015] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8410, setting to 1024
[  902.184226][   T34] audit: type=1326 audit(245026878.864:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32599 comm="syz.1.10498" exe="/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f4a1859e159 code=0x7ffc0000
[  902.184341][   T34] audit: type=1326 audit(245026878.864:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32599 comm="syz.1.10498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1859e159 code=0x7ffc0000
[  902.184393][   T34] audit: type=1326 audit(245026878.864:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32599 comm="syz.1.10498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1859e159 code=0x7ffc0000
[  902.207054][ T2015] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.207108][ T2015] usb 4-1: Product: syz
[  902.207141][ T2015] usb 4-1: Manufacturer: syz
[  902.207148][ T2015] usb 4-1: SerialNumber: syz
[  902.216932][   T34] audit: type=1326 audit(245026878.854:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32599 comm="syz.1.10498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1859e159 code=0x7ffc0000
[  902.217021][   T34] audit: type=1326 audit(245026878.894:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32599 comm="syz.1.10498" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4a1859e159 code=0x7ffc0000
[  902.217815][ T2015] symbolserial 4-1:1.0: symbol converter detected
[  902.230525][ T2015] usb 4-1: symbol converter now attached to ttyUSB0
[  902.238118][   T34] audit: type=1326 audit(245026878.894:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32599 comm="syz.1.10498" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4a1859e159 code=0x7ffc0000
[  902.355074][T32604] netlink: 'syz.1.10500': attribute type 2 has an invalid length.
[  902.408302][T32606] loop1: detected capacity change from 0 to 512
[  902.423341][T32606] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  902.423409][T32606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  902.423557][T32606] EXT4-fs (loop1): orphan cleanup on readonly fs
[  902.423990][T32606] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #13: comm syz.1.10501: iget: bad i_size value: 12154761577498
[  902.424004][T32606] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  902.430286][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  902.430301][    C1] EXT4-fs (loop1): initial error at time 245026879: ext4_orphan_get:1403: inode 13
[  902.430319][    C1] EXT4-fs (loop1): last error at time 245026879: ext4_orphan_get:1403: inode 13
[  902.444679][T32606] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.10501: couldn't read orphan inode 13 (err -117)
[  902.444702][T32606] loop1: lost filesystem error report for type 5 error -117
[  902.446156][T32606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  902.493909][T32606] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.10501: dx entry: limit 65535 != root limit 120
[  902.493960][T32606] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.10501: Corrupt directory, running e2fsck is recommended
[  902.509351][  T989] usb 4-1: USB disconnect, device number 19
[  902.537356][T31870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  902.566763][  T989] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[  902.567042][  T989] symbolserial 4-1:1.0: device disconnected
[  902.641792][T32611] loop1: detected capacity change from 0 to 128
[  902.643374][T32611] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  902.646792][T32611] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  902.687486][T31563] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  902.837637][T32613] loop1: detected capacity change from 0 to 32768
[  902.852407][T32613] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #17: i_blkno is 47287796087390225
[  902.852549][T32613] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  902.852556][T32613] OCFS2: File system is now read-only.
[  902.852560][T32613] (syz.1.10504,32613,0):ocfs2_read_locked_inode:633 ERROR: status = -30
[  902.852631][T32613] (syz.1.10504,32613,0):ocfs2_init_global_system_inodes:444 ERROR: status = -30
[  902.852641][T32613] (syz.1.10504,32613,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  902.852649][T32613] (syz.1.10504,32613,0):ocfs2_initialize_super:2194 ERROR: status = -30
[  902.852694][T32613] (syz.1.10504,32613,0):ocfs2_fill_super:1177 ERROR: status = -30
[  903.048381][T32624] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10509'.
[  903.224514][T32636] macsec1: entered promiscuous mode
[  903.292164][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  903.312750][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  903.324251][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  903.337556][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  903.341309][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  903.465111][T32650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10518'.
[  903.557491][T32657] netlink: 'syz.1.10520': attribute type 1 has an invalid length.
[  903.560166][T32657] netlink: 'syz.1.10520': attribute type 1 has an invalid length.
[  903.641692][T32661] loop1: detected capacity change from 0 to 2
[  903.644247][T32661] jffs2: rp_size unrepresentable
[  903.729083][T32663] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  904.344725][T32638] bridge0: port 1(bridge_slave_0) entered blocking state
[  904.347385][T32638] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.356155][T32638] bridge_slave_0: entered allmulticast mode
[  904.356926][T32638] bridge_slave_0: entered promiscuous mode
[  904.364975][T32638] bridge0: port 2(bridge_slave_1) entered blocking state
[  904.367545][T32638] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.367645][T32638] bridge_slave_1: entered allmulticast mode
[  904.375481][T32638] bridge_slave_1: entered promiscuous mode
[  904.459870][T32638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  904.474266][T32638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  904.574470][T32638] team0: Port device team_slave_0 added
[  904.581754][T32638] team0: Port device team_slave_1 added
[  904.634551][T32685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10527'.
[  904.634614][T32685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10527'.
[  904.668815][T32638] batman_adv: batadv0: Adding interface: batadv_slave_0
[  904.673166][T32638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  904.673224][T32638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  904.698981][T32638] batman_adv: batadv0: Adding interface: batadv_slave_1
[  904.699029][T32638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  904.699077][T32638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  904.772738][T32638] hsr_slave_0: entered promiscuous mode
[  904.775204][T32638] hsr_slave_1: entered promiscuous mode
[  904.777989][T32638] debugfs: 'hsr0' already exists in 'hsr'
[  904.782654][T32638] Cannot create hsr debugfs directory
[  905.347506][T32638] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  905.347577][T32638] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.498287][ T5012] Bluetooth: hci5: command tx timeout
[  905.573942][T32638] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  905.573985][T32638] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.722645][T32638] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  905.726567][T32638] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.044952][T32638] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  906.045024][T32638] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.259126][ T5652] batadv0: left allmulticast mode
[  906.259195][ T5652] batadv0: left promiscuous mode
[  906.259340][ T5652] bridge0: port 3(batadv0) entered disabled state
[  906.264535][ T5652] bridge_slave_1: left allmulticast mode
[  906.264549][ T5652] bridge_slave_1: left promiscuous mode
[  906.264650][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.276703][T32734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10541'.
[  906.288864][ T5652] bridge_slave_0: left allmulticast mode
[  906.288927][ T5652] bridge_slave_0: left promiscuous mode
[  906.289098][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state
[  906.305704][ T5652] pimreg3: left allmulticast mode
[  906.732604][ T5652] bond3 (unregistering): (slave geneve2): Releasing active interface
[  906.807646][ T5652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  906.817648][ T5652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  906.825982][ T5652] bond0 (unregistering): Released all slaves
[  906.836882][ T5652] bond1 (unregistering): Released all slaves
[  906.858083][ T5652] bond2 (unregistering): Released all slaves
[  906.877084][ T5652] bond3 (unregistering): Released all slaves
[  906.889287][ T5652] bond4 (unregistering): Released all slaves
[  906.901588][ T5652] bond5 (unregistering): Released all slaves
[  906.939606][T31542] tipc: Resetting bearer <ib:wg2>
[  907.020506][T32740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10544'.
[  907.084117][ T5652] tipc: Disabling bearer <udp:syz0>
[  907.084203][ T5652] tipc: Disabling bearer <ib:wg2>
[  907.092749][ T5652] tipc: Disabling bearer <eth:ipvlan0>
[  907.098121][ T5652] tipc: Left network mode
[  907.238200][T32638] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  907.272091][T32638] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  907.272626][T32638] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  907.280766][T32638] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  907.302253][T32638] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  907.311987][T32638] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  907.315074][T32638] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  907.319158][T32638] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  907.445962][T32638] 8021q: adding VLAN 0 to HW filter on device bond0
[  907.469164][T32638] 8021q: adding VLAN 0 to HW filter on device team0
[  907.477642][T17090] bridge0: port 1(bridge_slave_0) entered blocking state
[  907.477727][T17090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  907.486485][T17090] bridge0: port 2(bridge_slave_1) entered blocking state
[  907.486554][T17090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  907.539901][T32638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  907.568739][ T5012] Bluetooth: hci5: command tx timeout
[  907.784124][T32766] uprobe: syz.3.10551:32766 failed to unregister, leaking uprobe
[  907.876592][T32766] uprobe: syz.3.10551:32766 failed to unregister, leaking uprobe
[  907.905012][T32638] 8021q: adding VLAN 0 to HW filter on device batadv0
[  907.933612][  T306] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10552'.
[  908.405342][ T5652] veth1_macvtap: left promiscuous mode
[  908.407414][ T5652] veth1_vlan: left promiscuous mode
[  908.415755][ T5652] veth0_vlan: left promiscuous mode
[  908.682322][    T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  908.829535][ T5652] team0 (unregistering): Port device team_slave_1 removed
[  908.849416][    T9] usb 4-1: Using ep0 maxpacket: 8
[  908.850527][    T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  908.851453][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  908.854707][    T9] pvrusb2: Hardware description: Terratec Grabster AV400
[  908.854715][    T9] pvrusb2: **********
[  908.854719][    T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  908.854724][    T9] pvrusb2: Important functionality might not be entirely working.
[  908.854727][    T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  908.854732][    T9] pvrusb2: **********
[  908.868328][ T5652] team0 (unregistering): Port device team_slave_0 removed
[  909.130602][ T2429] pvrusb2: Invalid write control endpoint
[  909.282780][T32638] veth0_vlan: entered promiscuous mode
[  909.303838][T32638] veth1_vlan: entered promiscuous mode
[  909.333202][    T9] usb 4-1: USB disconnect, device number 20
[  909.395081][T32638] veth0_macvtap: entered promiscuous mode
[  909.435491][T32638] veth1_macvtap: entered promiscuous mode
[  909.447271][ T2429] pvrusb2: Invalid write control endpoint
[  909.464813][ T2429] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  909.469618][ T2429] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  909.471802][T32638] batman_adv: batadv0: Interface activated: batadv_slave_0
[  909.477775][ T2429] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  909.481492][ T2429] pvrusb2: Device being rendered inoperable
[  909.486649][T32638] batman_adv: batadv0: Interface activated: batadv_slave_1
[  909.518272][ T2429] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  909.529937][ T2429] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  909.542860][T29547] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  909.542909][T29547] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  909.542943][T29547] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  909.552628][ T5652] IPVS: stop unused estimator thread 0...
[  909.561796][T29547] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  909.642866][ T5012] Bluetooth: hci5: command tx timeout
[  909.860555][ T2429] pvrusb2: Attached sub-driver cx25840
[  909.865083][ T2429] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  909.868291][ T2429] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  909.921882][T27943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  909.921929][T27943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  910.055835][T17097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  910.055871][T17097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  910.539031][  T388] IPVS: Scheduler module ip_vs_sip not found
[  910.638340][  T402] loop6: detected capacity change from 0 to 512
[  910.655604][  T402] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.10581: bad orphan inode 15
[  910.655653][  T402] loop6: lost filesystem error report for type 5 error -117
[  910.655917][  T402] ext4_test_bit(bit=14, block=5) = 0
[  910.656674][  T402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  910.662444][  T402] EXT4-fs error (device loop6): __ext4_new_inode:1083: comm syz.6.10581: reserved inode found cleared - inode=1
[  910.662968][  T402] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[  910.679159][  T407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10582'.
[  910.705814][  T407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10582'.
[  910.715424][T32638] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  910.788778][  T411] netlink: 27 bytes leftover after parsing attributes in process `syz.6.10583'.
[  910.838717][  T415] libceph: resolve '1270.1' (ret=-3): failed
[  911.142796][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  911.310459][    T9] usb 4-1: Using ep0 maxpacket: 32
[  911.312266][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  911.312288][    T9] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  911.313188][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  911.313198][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  911.315180][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  911.315195][    T9] usb 4-1: Product: syz
[  911.315204][    T9] usb 4-1: Manufacturer: syz
[  911.315213][    T9] usb 4-1: SerialNumber: syz
[  911.322932][    T9] usb 4-1: selecting invalid altsetting 1
[  911.386044][T25972] udevd[25972]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  911.528936][ T9760] usb 4-1: USB disconnect, device number 21
[  911.720542][ T5612] Bluetooth: hci5: command tx timeout
[  911.732968][  T433] loop6: detected capacity change from 0 to 1024
[  911.735935][  T433] EXT4-fs: Ignoring removed nomblk_io_submit option
[  911.763902][  T433] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  911.779251][   T34] audit: type=1800 audit(245026888.454:1406): pid=433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10588" name="file1" dev="loop6" ino=15 res=0 errno=0
[  911.802658][T32638] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  912.045997][ T5612] Bluetooth: hci4: command 0x0406 tx timeout
[  912.420416][    T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  912.571557][    T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  912.572586][    T9] usb 4-1: config 8 has an invalid interface number: 177 but max is 0
[  912.572597][    T9] usb 4-1: config 8 has no interface number 0
[  912.572615][    T9] usb 4-1: config 8 interface 177 has no altsetting 0
[  912.572628][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  912.579994][    T9] ir_toy 4-1:8.177: required endpoints not found
[  912.785506][    T9] usb 4-1: USB disconnect, device number 22
[  914.031092][  T477] kAFS: bad VL server IP address
[  914.084990][  T479] loop6: detected capacity change from 0 to 4096
[  914.088144][  T479] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[  914.102234][  T479] ntfs3(loop6): Failed to initialize $Extend/$ObjId.
[  914.302772][  T483] loop6: detected capacity change from 0 to 32768
[  914.808785][  T495] loop6: detected capacity change from 0 to 32768
[  914.814642][  T495] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10615 (495)
[  914.823995][  T495] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  914.828407][  T495] BTRFS info (device loop6): using crc32c checksum algorithm
[  914.921700][  T495] BTRFS info (device loop6): enabling ssd optimizations
[  914.924016][  T495] BTRFS info (device loop6): turning on flush-on-commit
[  914.926548][  T495] BTRFS info (device loop6): enabling free space tree
[  914.929929][  T495] BTRFS info (device loop6): enabling auto defrag
[  914.932037][  T495] BTRFS info (device loop6): use lzo compression, level 1
[  914.934373][  T495] BTRFS info (device loop6): max_inline set to 4096
[  915.361912][T32638] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  915.587849][  T522] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  918.088604][  T599] jffs2: notice: (599) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  918.266737][  T608] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  919.154840][  T619] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10664'.
[  919.203827][  T623] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  919.278196][  T627] block nbd3: Cannot add socket to a running device
[  919.995144][  T629] loop6: detected capacity change from 0 to 512
[  920.008967][  T629] EXT4-fs (loop6): Test dummy encryption mode enabled
[  920.017885][  T629] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.10668: bg 0: block 7: invalid block bitmap
[  920.017957][  T629] loop6: lost filesystem error report for type 5 error -117
[  920.018548][  T629] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  920.018564][  T629] loop6: lost filesystem error report for type 5 error -117
[  920.021882][  T629] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2933: inode #11: comm syz.6.10668: corrupted xattr block 95: invalid header
[  920.021905][  T629] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  920.022151][  T629] EXT4-fs warning (device loop6): ext4_evict_inode:288: xattr delete (err -117)
[  920.022190][  T629] EXT4-fs (loop6): 1 orphan inode deleted
[  920.023050][  T629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  920.064885][   T57] block nbd3: Receive control failed (result -32)
[  920.079117][  T625] block nbd3: shutting down sockets
[  920.087140][  T629] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  920.088234][  T629] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  920.115040][T32638] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  920.115444][   T34] audit: type=1326 audit(245026896.784:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=632 comm="syz.1.10669" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a1859e159 code=0x0
[  920.177951][  T637] trusted_key: encrypted_key: hex blob is missing
[  920.304777][  T648] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[  920.308170][  T648] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  920.334912][  T651] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10677'.
[  920.353474][  T652] FAULT_INJECTION: forcing a failure.
[  920.353474][  T652] name fail_futex, interval 1, probability 0, space 0, times 0
[  920.353529][  T652] CPU: 0 UID: 0 PID: 652 Comm: syz.6.10678 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  920.353557][  T652] Tainted: [L]=SOFTLOCKUP
[  920.353561][  T652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  920.353567][  T652] Call Trace:
[  920.353571][  T652]  <TASK>
[  920.353575][  T652]  dump_stack_lvl+0xe8/0x150
[  920.353592][  T652]  should_fail_ex+0x410/0x560
[  920.353606][  T652]  get_futex_key+0x1b4/0x1580
[  920.353620][  T652]  ? __pfx_get_futex_key+0x10/0x10
[  920.353631][  T652]  ? stack_depot_save_flags+0x33/0x7f0
[  920.353641][  T652]  ? __pfx___filename_parentat+0x10/0x10
[  920.353656][  T652]  futex_wake+0x119/0x5f0
[  920.353667][  T652]  ? do_syscall_64+0x166/0x520
[  920.353675][  T652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  920.353685][  T652]  ? __pfx_futex_wake+0x10/0x10
[  920.353700][  T652]  do_futex+0x458/0x4e0
[  920.353712][  T652]  ? __pfx_do_futex+0x10/0x10
[  920.353724][  T652]  __se_sys_futex+0x3a8/0x450
[  920.353736][  T652]  ? kmem_cache_free+0x182/0x650
[  920.353749][  T652]  ? __pfx___se_sys_futex+0x10/0x10
[  920.353761][  T652]  ? do_getname+0x206/0x250
[  920.353773][  T652]  ? __x64_sys_futex+0x21/0xf0
[  920.353784][  T652]  do_syscall_64+0x166/0x520
[  920.353791][  T652]  ? trace_irq_disable+0x3b/0x140
[  920.353801][  T652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  920.353814][  T652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  920.353825][  T652] RIP: 0033:0x7fa2ad39e159
[  920.353836][  T652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  920.353847][  T652] RSP: 002b:00007fa2ae1c30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  920.353861][  T652] RAX: ffffffffffffffda RBX: 00007fa2ad625fa8 RCX: 00007fa2ad39e159
[  920.353870][  T652] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa2ad625fac
[  920.353877][  T652] RBP: 00007fa2ad625fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  920.353883][  T652] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  920.353888][  T652] R13: 00007fa2ad626038 R14: 00007ffdc215bae0 R15: 00007ffdc215bbc8
[  920.353901][  T652]  </TASK>
[  920.538128][  T665] overlayfs: missing 'lowerdir'
[  920.708133][  T671] loop6: detected capacity change from 0 to 512
[  921.064023][  T677] ip_tables: iptables: counters copy to user failed while replacing table
[  922.452328][  T686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10693'.
[  923.079540][  T696] netlink: 'syz.3.10698': attribute type 29 has an invalid length.
[  923.422114][  T706] UDC core: g1: couldn't find an available UDC or it's busy
[  923.450360][ T2015] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  923.603968][ T2015] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  923.608979][ T2015] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  923.609038][ T2015] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  923.609074][ T2015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.626436][ T2015] usb 4-1: config 0 descriptor??
[  923.626763][  T717] loop1: detected capacity change from 0 to 4096
[  923.628993][  T717] ntfs3(loop1): ino=0, mi_enum_attr
[  923.635101][  T703] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  923.641027][  T717] ntfs3(loop1): failed to replay log file. Can't mount rw!
[  923.991638][ T2015] usbhid 4-1:0.0: can't add hid device: -71
[  923.991725][ T2015] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  924.010397][ T2015] usb 4-1: USB disconnect, device number 23
[  924.469481][  T737] netlink: 'syz.6.10714': attribute type 30 has an invalid length.
[  924.715796][  T745] netlink: 58 bytes leftover after parsing attributes in process `syz.3.10718'.
[  924.715848][  T745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10718'.
[  924.715984][  T745] netlink: 58 bytes leftover after parsing attributes in process `syz.3.10718'.
[  924.805044][   T34] audit: type=1326 audit(245026901.484:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=749 comm="syz.1.10720" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a1859e159 code=0x0
[  925.350498][  T778] loop1: detected capacity change from 0 to 32768
[  925.368038][  T778] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  925.423103][  T778] XFS (loop1): Ending clean mount
[  925.476781][T31870] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  925.587161][  T781] loop6: detected capacity change from 0 to 32768
[  925.658673][  T780] Bad index:0 in slot in dtroot
[  925.658673][  T780] 
[  925.658723][  T780] ERROR: (device loop6): copy_from_dinode: Corrupt dtroot
[  925.658723][  T780] 
[  925.665479][  T780] ERROR: (device loop6): remounting filesystem as read-only
[  925.666729][  T780] jfs_lookup: iget failed on inum 32
[  926.120971][  T808] netlink: 'syz.6.10742': attribute type 1 has an invalid length.
[  926.135953][  T808] 8021q: adding VLAN 0 to HW filter on device bond1
[  926.159419][  T808] bond1: (slave gretap1): making interface the new active one
[  926.163636][  T808] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  926.845232][  T824] netlink: 316 bytes leftover after parsing attributes in process `syz.3.10749'.
[  926.845283][  T824] netlink: 316 bytes leftover after parsing attributes in process `syz.3.10749'.
[  927.124798][  T813] ceph: No mds server is up or the cluster is laggy
[  927.896897][   T34] audit: type=1326 audit(245026904.574:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=849 comm="syz.1.10761" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a1859e159 code=0x0
[  928.128251][  T848] loop6: detected capacity change from 0 to 131072
[  928.142098][  T848] F2FS-fs (loop6): invalid crc value
[  928.192321][  T848] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  928.205054][  T848] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  928.639634][  T866] netlink: 'syz.6.10763': attribute type 7 has an invalid length.
[  929.078424][  T890] loop1: detected capacity change from 0 to 2048
[  929.079368][  T890] EXT4-fs: Ignoring removed nobh option
[  929.079406][  T890] EXT4-fs: Ignoring removed i_version option
[  929.079416][  T890] EXT4-fs: Ignoring removed nobh option
[  929.114769][  T890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  929.179745][  T890] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  929.230602][  T890] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 242 with error 28
[  929.260132][  T890] EXT4-fs (loop1): This should not happen!! Data will be lost
[  929.260132][  T890] 
[  929.260516][  T890] EXT4-fs (loop1): Total free blocks count 0
[  929.260557][  T890] EXT4-fs (loop1): Free/Dirty block details
[  929.260612][  T890] EXT4-fs (loop1): free_blocks=2415919104
[  929.260643][  T890] EXT4-fs (loop1): dirty_blocks=256
[  929.260667][  T890] EXT4-fs (loop1): Block reservation details
[  929.260690][  T890] EXT4-fs (loop1): i_reserved_data_blocks=16
[  929.355360][  T899] loop6: detected capacity change from 0 to 4096
[  929.360989][  T899] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  929.363245][  T899] ntfs3(loop6): Failed to load $MFT.
[  929.495535][  T171] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 242 with error 28
[  929.787207][  T909] loop1: detected capacity change from 0 to 512
[  929.794403][  T909] EXT4-fs error (device loop1): __ext4_iget:5592: inode #11: block 1: comm syz.1.10784: invalid block
[  929.794472][  T909] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  929.798326][  T909] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.10784: couldn't read orphan inode 11 (err -117)
[  929.798520][  T909] loop1: lost filesystem error report for type 5 error -117
[  929.799587][  T909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  929.804224][  T909] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.10784: Directory hole found for htree leaf block 0
[  929.854264][T31870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  929.895757][  T901] loop6: detected capacity change from 0 to 32768
[  929.898931][  T913] loop1: detected capacity change from 0 to 512
[  929.899490][  T913] EXT4-fs: Ignoring removed oldalloc option
[  929.900038][  T901] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10780 (901)
[  929.924189][  T913] EXT4-fs (loop1): 1 truncate cleaned up
[  929.924955][  T913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  929.972616][  T901] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  929.972669][  T901] BTRFS info (device loop6): using xxhash64 checksum algorithm
[  930.011860][  T901] BTRFS info (device loop6): setting nodatasum
[  930.011913][  T901] BTRFS info (device loop6): allowing degraded mounts
[  930.011946][  T901] BTRFS info (device loop6): turning on async discard
[  930.011954][  T901] BTRFS info (device loop6): enabling free space tree
[  930.011962][  T901] BTRFS info (device loop6): force zlib compression, level 3
[  930.062899][T31870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  930.088109][T32638] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  930.265784][  T954] netlink: 'syz.3.10790': attribute type 1 has an invalid length.
[  930.265831][  T954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10790'.
[  930.355180][  T962] netlink: 'syz.6.10788': attribute type 1 has an invalid length.
[  930.534318][  T972] loop6: detected capacity change from 0 to 512
[  930.666599][  T972] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  930.666707][  T972] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities
[  931.481793][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  931.481858][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  932.116526][ T1020] bridge0: port 2(bridge_slave_1) entered disabled state
[  933.116470][ T1033] loop1: detected capacity change from 0 to 131072
[  933.117660][ T1033] F2FS-fs (loop1): invalid crc value
[  933.162340][ T1033] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  933.174059][ T1033] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  933.280335][T32252] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  933.441351][T32252] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  933.447361][T32252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  933.447435][T32252] usb 4-1: Product: syz
[  933.447462][T32252] usb 4-1: Manufacturer: syz
[  933.447485][T32252] usb 4-1: SerialNumber: syz
[  933.456845][T32252] usb 4-1: config 0 descriptor??
[  933.676741][T32252] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  933.780019][ T1048] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  933.949187][ T1048] md/raid10:md0: active with 2 out of 2 devices
[  933.955836][ T1048] md0: detected capacity change from 0 to 4096
[  934.203280][   T34] audit: type=1800 audit(245026910.884:1410): pid=1063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10829" name="file1" dev="tmpfs" ino=475 res=0 errno=0
[  934.223466][ T1065] netlink: Unknown conntrack attr (type=72, max=9)
[  934.527310][T32252] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  934.544310][T32252] usb 4-1: USB disconnect, device number 24
[  936.186543][ T1127] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  936.188827][ T1127] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  936.399377][ T1133] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10850'.
[  936.407705][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state
[  936.416127][ T1133] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10850'.
[  937.860427][T32252] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  938.010323][T32252] usb 4-1: Using ep0 maxpacket: 32
[  938.013564][T32252] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  938.021304][T32252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.024624][T32252] usb 4-1: Product: syz
[  938.026752][T32252] usb 4-1: Manufacturer: syz
[  938.028904][T32252] usb 4-1: SerialNumber: syz
[  938.034265][T32252] usb 4-1: config 0 descriptor??
[  938.041650][T32252] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  940.063343][T32252] gspca_ov534_9: reg_r err -71
[  940.270342][T32252] gspca_ov534_9: Unknown sensor 0000
[  940.270481][T32252] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22
[  940.279701][T32252] usb 4-1: USB disconnect, device number 25
[  940.681463][ T1160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10862'.
[  940.694430][ T1160] vlan2: entered promiscuous mode
[  940.696687][ T1160] bond0: entered promiscuous mode
[  940.698876][ T1160] bond_slave_0: entered promiscuous mode
[  940.704687][ T1160] bond_slave_1: entered promiscuous mode
[  941.115718][T27943] IPVS: starting estimator thread 0...
[  941.137106][   T34] audit: type=1326 audit(245026917.814:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1177 comm="syz.3.10870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752099e159 code=0x7ffc0000
[  941.144076][   T34] audit: type=1326 audit(245026917.824:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1177 comm="syz.3.10870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752099e159 code=0x7ffc0000
[  941.157809][   T34] audit: type=1326 audit(245026917.834:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1177 comm="syz.3.10870" exe="/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f752099e159 code=0x7ffc0000
[  941.201357][ T1176] IPVS: using max 86 ests per chain, 206400 per kthread
[  941.887099][ T1183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10872'.
[  941.893905][ T1183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10872'.
[  944.131639][ T1195] serio: Serial port ptm0
[  944.299184][ T1195] serio: Serial port ptm0
[  944.429453][ T1198] input: syz0 as /devices/virtual/input/input50
[  944.556213][ T1200] netlink: 168 bytes leftover after parsing attributes in process `syz.1.10879'.
[  944.737047][ T1206] loop1: detected capacity change from 0 to 512
[  944.743379][ T1206] EXT4-fs: Ignoring removed nomblk_io_submit option
[  944.748692][ T1206] EXT4-fs: Ignoring removed orlov option
[  944.751781][ T1206] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  944.774812][ T1206] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  944.774889][ T1206] System zones: 1-12
[  944.779805][ T1206] EXT4-fs (loop1): 1 truncate cleaned up
[  944.784385][ T1206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  944.796603][ T1206] EXT4-fs warning (device loop1): ext4_group_add:1735: No reserved GDT blocks, can't resize
[  944.809616][T31870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  944.873502][ T1210] loop1: detected capacity change from 0 to 1024
[  944.889846][ T1210] hfsplus: xattr search failed
[  944.903184][ T1210] hfsplus: xattr search failed
[  946.021641][ T1224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10889'.
[  946.236657][ T1236] input: syz0 as /devices/virtual/input/input51
[  946.335536][ T1242] loop1: detected capacity change from 0 to 512
[  946.338310][ T1242] EXT4-fs: Ignoring removed bh option
[  946.346843][ T1242] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.10898: inode #13: comm syz.1.10898: iget: illegal inode #
[  946.346887][ T1242] loop1: lost filesystem error report for type 5 error -117
[  946.351055][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  946.351066][    C0] EXT4-fs (loop1): initial error at time 245027179: ext4_orphan_get:1403
[  946.351076][    C0] EXT4-fs (loop1): last error at time 245027179: ext4_orphan_get:1403
[  946.367683][ T1242] EXT4-fs (loop1): Remounting filesystem read-only
[  946.368624][ T1242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  946.382280][ T1242] EXT4-fs (loop1): shut down requested (2)
[  946.400809][T31870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  950.379542][ T1289] loop1: detected capacity change from 0 to 512
[  950.395261][ T1289] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal
[  951.718286][ T1306] loop1: detected capacity change from 0 to 512
[  951.726564][ T1306] EXT4-fs: Ignoring removed nobh option
[  951.731312][ T1306] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  951.742522][ T1306] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory
[  951.756898][ T1306] loop1: lost filesystem error report for type 5 error -12
[  951.757654][ T1306] EXT4-fs (loop1): 2 truncates cleaned up
[  951.760863][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  951.760878][    C0] EXT4-fs (loop1): initial error at time 245027184: ext4_process_orphan:346
[  951.760894][    C0] EXT4-fs (loop1): last error at time 245027184: ext4_process_orphan:346
[  951.769310][ T1306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  951.805602][T31870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  951.933673][ T5612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  951.955622][ T5612] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  951.959027][ T5612] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  951.965250][ T5612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  951.968535][ T5612] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  952.246814][ T1333] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10930'.
[  952.527705][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state
[  952.535107][ T1311] bridge0: port 1(bridge_slave_0) entered disabled state
[  952.538304][ T1311] bridge_slave_0: entered allmulticast mode
[  952.543822][ T1311] bridge_slave_0: entered promiscuous mode
[  952.548683][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state
[  952.552646][ T1311] bridge0: port 2(bridge_slave_1) entered disabled state
[  952.555762][ T1311] bridge_slave_1: entered allmulticast mode
[  952.559687][ T1311] bridge_slave_1: entered promiscuous mode
[  952.612984][ T1311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  952.615273][ T1311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  952.637721][ T1311] team0: Port device team_slave_0 added
[  952.639931][ T1311] team0: Port device team_slave_1 added
[  952.665591][ T1311] batman_adv: batadv0: Adding interface: batadv_slave_0
[  952.665646][ T1311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  952.666040][ T1311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  952.667874][ T1311] batman_adv: batadv0: Adding interface: batadv_slave_1
[  952.667883][ T1311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  952.667898][ T1311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  952.709389][ T1311] hsr_slave_0: entered promiscuous mode
[  952.713513][ T1311] hsr_slave_1: entered promiscuous mode
[  952.714072][ T1311] debugfs: 'hsr0' already exists in 'hsr'
[  952.714085][ T1311] Cannot create hsr debugfs directory
[  953.677015][ T1369] loop1: detected capacity change from 0 to 32768
[  953.687527][ T1369] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 66: extent list l_count 1811 exceeds max 19
[  953.687582][ T1369] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  953.687610][ T1369] OCFS2: File system is now read-only.
[  953.687632][ T1369] (syz.1.10934,1369,1):ocfs2_read_locked_inode:633 ERROR: status = -30
[  953.687691][ T1369] (syz.1.10934,1369,1):ocfs2_init_global_system_inodes:452 ERROR: status = -30
[  953.687717][ T1369] (syz.1.10934,1369,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  953.687745][ T1369] (syz.1.10934,1369,1):ocfs2_initialize_super:2194 ERROR: status = -30
[  953.687808][ T1369] (syz.1.10934,1369,1):ocfs2_fill_super:1177 ERROR: status = -30
[  953.900328][ T1381] vlan0: entered allmulticast mode
[  953.900378][ T1381] veth0_vlan: entered allmulticast mode
[  953.900740][ T1381] vlan0: entered promiscuous mode
[  953.903299][ T1381] netlink: 148 bytes leftover after parsing attributes in process `syz.1.10936'.
[  953.907762][ T1381] bridge0: port 1(bridge_slave_0) entered disabled state
[  953.920952][ T1381] bridge_slave_0 (unregistering): left allmulticast mode
[  953.923364][ T1381] bridge_slave_0 (unregistering): left promiscuous mode
[  953.925828][ T1381] bridge0: port 1(bridge_slave_0) entered disabled state
[  953.998284][ T1379] vlan0: left promiscuous mode
[  954.010123][ T1379] vlan0: left allmulticast mode
[  954.012429][ T1379] veth0_vlan: left allmulticast mode
[  954.048911][ T5012] Bluetooth: hci6: command tx timeout
[  954.110867][ T1311] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  954.115410][ T1389] loop1: detected capacity change from 0 to 128
[  954.121597][ T1311] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  954.122758][ T1311] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  954.130030][ T1389] ufs: Bad value for 'onerror'
[  954.144184][ T1311] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  954.153326][ T1311] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  954.168857][ T1311] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  954.174029][ T1311] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  954.191639][ T1311] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  954.313344][ T1311] 8021q: adding VLAN 0 to HW filter on device bond0
[  954.324844][ T1311] 8021q: adding VLAN 0 to HW filter on device team0
[  954.332606][T17090] bridge0: port 1(bridge_slave_0) entered blocking state
[  954.332728][T17090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  954.355771][T17090] bridge0: port 2(bridge_slave_1) entered blocking state
[  954.355881][T17090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  954.866166][ T1311] 8021q: adding VLAN 0 to HW filter on device batadv0
[  955.175599][ T1311] veth0_vlan: entered promiscuous mode
[  955.193913][ T1311] veth1_vlan: entered promiscuous mode
[  955.239750][ T1311] veth0_macvtap: entered promiscuous mode
[  955.246621][ T1311] veth1_macvtap: entered promiscuous mode
[  955.261123][ T1311] batman_adv: batadv0: Interface activated: batadv_slave_0
[  955.265363][ T1311] batman_adv: batadv0: Interface activated: batadv_slave_1
[  955.310386][ T5652] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  955.313225][ T5652] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  955.315935][ T5652] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  955.359601][ T5652] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  955.509227][T17090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  955.509290][T17090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  955.576116][T17090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  955.576177][T17090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  955.682009][ T1449] loop9: detected capacity change from 0 to 2048
[  955.683096][ T1449] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=2362, location=2362
[  955.684090][ T1449] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  955.684253][ T1449] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  955.684961][ T1449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  955.688699][   T34] audit: type=1800 audit(245027188.362:1414): pid=1449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10924" name=2E02 dev="loop9" ino=1367 res=0 errno=0
[  956.120406][ T5012] Bluetooth: hci6: command tx timeout
[  956.220420][   T33] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  956.372981][   T33] usb 10-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[  956.378104][   T33] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  956.383157][   T33] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  956.387331][   T33] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 28719, setting to 1024
[  956.393289][   T33] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024
[  956.399827][   T33] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.405850][   T33] usb 10-1: Product: syz
[  956.407911][   T33] usb 10-1: Manufacturer: syz
[  956.409600][   T33] usb 10-1: SerialNumber: syz
[  956.664358][   T33] usb 10-1: 0:2 : does not exist
[  956.710763][   T33] usb 10-1: USB disconnect, device number 5
[  956.728477][ T1467] udevd[1467]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  956.799311][ T5612] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  956.823500][ T5612] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  956.830128][ T5612] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  956.831081][ T5612] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  956.831465][ T5612] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  957.507511][ T1468] bridge0: port 1(bridge_slave_0) entered blocking state
[  957.507630][ T1468] bridge0: port 1(bridge_slave_0) entered disabled state
[  957.507692][ T1468] bridge_slave_0: entered allmulticast mode
[  957.508694][ T1468] bridge_slave_0: entered promiscuous mode
[  957.512294][ T1468] bridge0: port 2(bridge_slave_1) entered blocking state
[  957.512502][ T1468] bridge0: port 2(bridge_slave_1) entered disabled state
[  957.512609][ T1468] bridge_slave_1: entered allmulticast mode
[  957.514230][ T1468] bridge_slave_1: entered promiscuous mode
[  957.559748][ T1468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  957.573098][ T1468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  957.579175][ T1503] loop1: detected capacity change from 0 to 2048
[  957.589948][ T1503] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  957.646490][ T1468] team0: Port device team_slave_0 added
[  957.655826][ T1468] team0: Port device team_slave_1 added
[  957.660547][   T33] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  957.713192][ T1468] batman_adv: batadv0: Adding interface: batadv_slave_0
[  957.713235][ T1468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  957.713270][ T1468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  957.715679][ T1468] batman_adv: batadv0: Adding interface: batadv_slave_1
[  957.715686][ T1468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  957.715696][ T1468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  957.758448][ T1468] hsr_slave_0: entered promiscuous mode
[  957.759248][ T1468] hsr_slave_1: entered promiscuous mode
[  957.759717][ T1468] debugfs: 'hsr0' already exists in 'hsr'
[  957.759731][ T1468] Cannot create hsr debugfs directory
[  957.840310][   T33] usb 10-1: Using ep0 maxpacket: 16
[  957.842979][   T33] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  957.849576][   T33] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  957.852925][   T33] usb 10-1: config 0 has no interface number 0
[  957.858812][   T33] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  957.862261][   T33] usb 10-1: Product: syz
[  957.864088][   T33] usb 10-1: Manufacturer: syz
[  957.866148][   T33] usb 10-1: SerialNumber: syz
[  957.888401][   T33] usb 10-1: config 0 descriptor??
[  957.902813][   T33] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  958.202874][ T5612] Bluetooth: hci6: command tx timeout
[  958.922799][ T5612] Bluetooth: hci7: command tx timeout
[  958.973994][   T33] gspca_spca1528: reg_w err -71
[  958.974065][   T33] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71
[  958.979355][   T33] usb 10-1: USB disconnect, device number 6
[  959.171177][ T5612] Bluetooth: hci2: command 0x0406 tx timeout
[  959.257051][ T1468] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  959.263892][ T1468] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  959.264804][ T1468] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  959.268328][ T1468] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  959.269210][ T1468] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  959.274064][ T1468] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  959.274933][ T1468] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  959.279866][ T1468] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  959.395473][ T1468] 8021q: adding VLAN 0 to HW filter on device bond0
[  959.417424][ T1468] 8021q: adding VLAN 0 to HW filter on device team0
[  959.437646][T17090] bridge0: port 1(bridge_slave_0) entered blocking state
[  959.437726][T17090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  959.447268][T17090] bridge0: port 2(bridge_slave_1) entered blocking state
[  959.447373][T17090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  959.765349][ T1561] loop9: detected capacity change from 0 to 512
[  959.771496][ T1561] EXT4-fs: Ignoring removed oldalloc option
[  959.771562][ T1561] EXT4-fs: Ignoring removed i_version option
[  959.789499][ T1561] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  959.804606][ T1561] EXT4-fs error (device loop9) in ext4_process_orphan:346: Corrupt filesystem
[  959.804659][ T1561] loop9: lost filesystem error report for type 5 error -117
[  959.806385][ T1561] EXT4-fs (loop9): 2 truncates cleaned up
[  959.811816][ T1561] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  959.837157][   T34] audit: type=1800 audit(245027192.512:1415): pid=1561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10963" name="file1" dev="loop9" ino=15 res=0 errno=0
[  959.908791][ T1311] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  959.997717][ T1574] CIFS: bad ip= option (::.)
[  960.021849][ T1468] 8021q: adding VLAN 0 to HW filter on device batadv0
[  960.291997][ T5012] Bluetooth: hci6: command tx timeout
[  960.393333][ T1468] veth0_vlan: entered promiscuous mode
[  960.404138][ T1468] veth1_vlan: entered promiscuous mode
[  960.433340][ T1468] veth0_macvtap: entered promiscuous mode
[  960.437290][ T1468] veth1_macvtap: entered promiscuous mode
[  960.494048][ T1468] batman_adv: batadv0: Interface activated: batadv_slave_0
[  960.505253][ T1468] batman_adv: batadv0: Interface activated: batadv_slave_1
[  960.567501][T29547] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  960.567782][T29547] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  960.568004][T29547] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  960.568043][T29547] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  960.727807][T31542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  960.727873][T31542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  960.764993][T31542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  960.765033][T31542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  961.001252][ T5012] Bluetooth: hci7: command tx timeout
[  961.403303][ T1619] loop5: detected capacity change from 0 to 32768
[  961.429364][ T1619] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  961.444112][ T1619] XFS (loop5): Ending clean mount
[  961.449188][   T34] audit: type=1800 audit(245027194.122:1416): pid=1619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.10974" name="file1" dev="loop5" ino=6150 res=0 errno=0
[  961.475635][ T1468] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  961.510074][ T1629] loop1: detected capacity change from 0 to 32768
[  961.532599][ T1629] (syz.1.10977,1629,0):ocfs2_verify_volume:2299 ERROR: found superblock with bad version: found 2003.0, should be 0.90
[  961.532713][ T1629] (syz.1.10977,1629,0):ocfs2_verify_volume:2327 ERROR: status = -22
[  961.532749][ T1629] (syz.1.10977,1629,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  961.532782][ T1629] (syz.1.10977,1629,0):ocfs2_fill_super:1177 ERROR: status = -22
[  961.684988][ T1649] loop1: detected capacity change from 0 to 1024
[  961.717281][ T9760] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  961.756631][ T1649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  961.900791][ T9760] usb 10-1: Using ep0 maxpacket: 32
[  961.903286][ T9760] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  961.906962][ T9760] usb 10-1: config 0 has no interfaces?
[  961.915418][ T9760] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  961.915454][ T9760] usb 10-1: Product: syz
[  961.915496][ T9760] usb 10-1: Manufacturer: syz
[  961.915520][ T9760] usb 10-1: SerialNumber: syz
[  961.925264][ T9760] usb 10-1: config 0 descriptor??
[  962.008085][ T1649] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  962.143894][ T2015] usb 10-1: USB disconnect, device number 7
[  962.217730][T31870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  962.262346][T32517] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[  962.450117][ T1670] xt_TCPMSS: Only works on TCP SYN packets
[  962.571222][   T34] audit: type=1400 audit(245027195.252:1417): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="test" pid=1675 comm="syz.1.10987" name="test" offset=36
[  962.654165][ T1680] tipc: Failed to remove unknown binding: 66,0,0/0:61905330/61905332
[  962.654232][ T1680] tipc: Failed to remove unknown binding: 66,0,0/0:61905330/61905331
[  962.654723][ T1680] tipc: Failed to remove unknown binding: 66,0,0/0:61905330/61905332
[  962.654740][ T1680] tipc: Failed to remove unknown binding: 66,0,0/0:61905330/61905331
[  962.908676][ T1690] loop9: detected capacity change from 0 to 1024
[  962.954399][ T1689] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  963.036708][   T34] audit: type=1326 audit(245027195.712:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1694 comm="syz.9.10996" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d5079e159 code=0x0
[  963.080714][ T5612] Bluetooth: hci7: command tx timeout
[  963.261901][ T1713] loop9: detected capacity change from 0 to 1024
[  963.549202][ T1725] loop9: detected capacity change from 0 to 512
[  963.565599][ T1725] EXT4-fs error (device loop9): ext4_iget_extra_inode:5210: inode #15: comm syz.9.11010: corrupted in-inode xattr: invalid ea_ino
[  963.576383][ T1725] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  963.576685][ T1725] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.11010: couldn't read orphan inode 15 (err -117)
[  963.576721][ T1725] loop9: lost filesystem error report for type 5 error -117
[  963.580625][    C0] EXT4-fs (loop9): error count since last fsck: 2
[  963.580635][    C0] EXT4-fs (loop9): initial error at time 245027196: ext4_iget_extra_inode:5210: inode 15
[  963.580647][    C0] EXT4-fs (loop9): last error at time 245027196: ext4_orphan_get:1408
[  963.593591][ T1725] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  963.639089][ T1311] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  963.945177][ T1744] loop1: detected capacity change from 0 to 8192
[  963.964336][ T1750] openvswitch: netlink: Message has 5 unknown bytes.
[  963.975557][ T1744]  loop1: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22
[  964.030810][ T1744] loop1: p3 start 1048320 is beyond EOD, truncated
[  964.064680][ T1744] loop1: p5 start 1048320 is beyond EOD, truncated
[  964.070562][ T1744] loop1: p7 start 1048320 is beyond EOD, truncated
[  964.074268][ T1744] loop1: p9 start 1048320 is beyond EOD, truncated
[  964.077647][ T1744] loop1: p11 start 1048320 is beyond EOD, truncated
[  964.081142][ T1744] loop1: p13 start 1048320 is beyond EOD, truncated
[  964.084088][ T1744] loop1: p15 start 1048320 is beyond EOD, truncated
[  964.087368][ T1744] loop1: p17 start 1048320 is beyond EOD, truncated
[  964.090341][ T1744] loop1: p19 start 1048320 is beyond EOD, truncated
[  964.106591][ T1744] loop1: p21 start 1048320 is beyond EOD, truncated
[  964.117736][ T1744] loop1: p23 start 1048320 is beyond EOD, truncated
[  964.133911][ T1744] loop1: p25 start 1048320 is beyond EOD, truncated
[  964.139564][ T1744] loop1: p27 start 1048320 is beyond EOD, truncated
[  964.143920][ T1744] loop1: p29 start 1048320 is beyond EOD, truncated
[  964.148716][ T1744] loop1: p31 start 1048320 is beyond EOD, truncated
[  964.155215][ T1744] loop1: p33 start 1048320 is beyond EOD, truncated
[  964.160454][ T1744] loop1: p35 start 1048320 is beyond EOD, truncated
[  964.164246][ T1744] loop1: p37 start 1048320 is beyond EOD, truncated
[  964.169772][ T1744] loop1: p39 start 1048320 is beyond EOD, truncated
[  964.196386][ T1744] loop1: p41 start 1048320 is beyond EOD, truncated
[  964.207982][ T1744] loop1: p43 start 1048320 is beyond EOD, truncated
[  964.213392][ T1744] loop1: p45 start 1048320 is beyond EOD, truncated
[  964.218468][ T1744] loop1: p47 start 1048320 is beyond EOD, truncated
[  964.222177][ T1744] loop1: p49 start 1048320 is beyond EOD, truncated
[  964.225210][ T1744] loop1: p51 start 1048320 is beyond EOD, truncated
[  964.228928][ T1744] loop1: p53 start 1048320 is beyond EOD, truncated
[  964.233823][ T1744] loop1: p55 start 1048320 is beyond EOD, truncated
[  964.237104][ T1744] loop1: p57 start 1048320 is beyond EOD, truncated
[  964.240061][ T1744] loop1: p59 start 1048320 is beyond EOD, truncated
[  964.243106][ T1744] loop1: p61 start 1048320 is beyond EOD, truncated
[  964.244345][ T1748] loop9: detected capacity change from 0 to 32768
[  964.248318][ T1744] loop1: p63 start 1048320 is beyond EOD, truncated
[  964.251366][ T1744] loop1: p65 start 1048320 is beyond EOD, truncated
[  964.254450][ T1744] loop1: p67 start 1048320 is beyond EOD, truncated
[  964.257601][ T1744] loop1: p69 start 1048320 is beyond EOD, truncated
[  964.261070][ T1744] loop1: p71 start 1048320 is beyond EOD, truncated
[  964.264059][ T1744] loop1: p73 start 1048320 is beyond EOD, truncated
[  964.267421][ T1744] loop1: p75 start 1048320 is beyond EOD, truncated
[  964.271837][ T1744] loop1: p77 start 1048320 is beyond EOD, truncated
[  964.275148][ T1744] loop1: p79 start 1048320 is beyond EOD, truncated
[  964.280566][ T5612] Bluetooth: hci3: command 0x0406 tx timeout
[  964.289858][ T1744] loop1: p81 start 1048320 is beyond EOD, truncated
[  964.301053][ T1744] loop1: p83 start 1048320 is beyond EOD, truncated
[  964.318115][ T1744] loop1: p85 start 1048320 is beyond EOD, truncated
[  964.323662][ T1744] loop1: p87 start 1048320 is beyond EOD, truncated
[  964.328472][ T1744] loop1: p89 start 1048320 is beyond EOD, truncated
[  964.331347][ T2015] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  964.334139][ T1744] loop1: p91 start 1048320 is beyond EOD, truncated
[  964.337196][ T1744] loop1: p93 start 1048320 is beyond EOD, truncated
[  964.345907][ T1744] loop1: p95 start 1048320 is beyond EOD, truncated
[  964.349979][ T1744] loop1: p97 start 1048320 is beyond EOD, truncated
[  964.354388][ T1744] loop1: p99 start 1048320 is beyond EOD, truncated
[  964.358404][ T1744] loop1: p101 start 1048320 is beyond EOD, truncated
[  964.363016][ T1744] loop1: p103 start 1048320 is beyond EOD, truncated
[  964.365876][ T1744] loop1: p105 start 1048320 is beyond EOD, truncated
[  964.370709][ T1744] loop1: p107 start 1048320 is beyond EOD, truncated
[  964.373925][ T1744] loop1: p109 start 1048320 is beyond EOD, truncated
[  964.379490][ T1744] loop1: p111 start 1048320 is beyond EOD, truncated
[  964.382670][ T1744] loop1: p113 start 1048320 is beyond EOD, truncated
[  964.386910][ T1744] loop1: p115 start 1048320 is beyond EOD, truncated
[  964.390022][ T1744] loop1: p117 start 1048320 is beyond EOD, truncated
[  964.396958][ T1744] loop1: p119 start 1048320 is beyond EOD, truncated
[  964.400060][ T1744] loop1: p121 start 1048320 is beyond EOD, truncated
[  964.403307][ T1744] loop1: p123 start 1048320 is beyond EOD, truncated
[  964.406423][ T1744] loop1: p125 start 1048320 is beyond EOD, truncated
[  964.411010][ T1744] loop1: p127 start 1048320 is beyond EOD, truncated
[  964.414149][ T1744] loop1: p129 start 1048320 is beyond EOD, truncated
[  964.418935][ T1744] loop1: p131 start 1048320 is beyond EOD, truncated
[  964.422589][ T1744] loop1: p133 start 1048320 is beyond EOD, truncated
[  964.428032][ T1744] loop1: p135 start 1048320 is beyond EOD, truncated
[  964.432683][ T1744] loop1: p137 start 1048320 is beyond EOD, truncated
[  964.438456][ T1744] loop1: p139 start 1048320 is beyond EOD, truncated
[  964.441408][ T1744] loop1: p141 start 1048320 is beyond EOD, truncated
[  964.446622][ T1744] loop1: p143 start 1048320 is beyond EOD, truncated
[  964.451655][ T1744] loop1: p145 start 1048320 is beyond EOD, truncated
[  964.455676][ T1744] loop1: p147 start 1048320 is beyond EOD, truncated
[  964.463115][ T1744] loop1: p149 start 1048320 is beyond EOD, truncated
[  964.472932][ T1764] ip_tables: iptables: counters copy to user failed while replacing table
[  964.575654][ T2015] usb 2-1: Using ep0 maxpacket: 32
[  964.589907][ T1744] loop1: p151 start 1048320 is beyond EOD, truncated
[  964.600534][ T2015] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  964.608675][ T1744] loop1: p153 start 1048320 is beyond EOD, truncated
[  964.613385][ T1744] loop1: p155 start 1048320 is beyond EOD, truncated
[  964.616550][ T1744] loop1: p157 start 1048320 is beyond EOD, truncated
[  964.619913][ T1744] loop1: p159 start 1048320 is beyond EOD, truncated
[  964.625077][ T2015] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  964.625124][ T2015] usb 2-1: config 0 has no interface number 0
[  964.625172][ T2015] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  964.625214][ T2015] usb 2-1: config 0 interface 85 has no altsetting 0
[  964.640076][ T1744] loop1: p161 start 1048320 is beyond EOD, truncated
[  964.644739][ T1744] loop1: p163 start 1048320 is beyond EOD, truncated
[  964.648255][ T1744] loop1: p165 start 1048320 is beyond EOD, truncated
[  964.653488][ T1744] loop1: p167 start 1048320 is beyond EOD, truncated
[  964.657686][ T1744] loop1: p169 start 1048320 is beyond EOD, truncated
[  964.662717][ T1744] loop1: p171 start 1048320 is beyond EOD, truncated
[  964.666311][ T1744] loop1: p173 start 1048320 is beyond EOD, truncated
[  964.670146][ T1744] loop1: p175 start 1048320 is beyond EOD, truncated
[  964.674839][ T1744] loop1: p177 start 1048320 is beyond EOD, truncated
[  964.678344][ T1744] loop1: p179 start 1048320 is beyond EOD, truncated
[  964.684368][ T1744] loop1: p181 start 1048320 is beyond EOD, truncated
[  964.688487][ T1744] loop1: p183 start 1048320 is beyond EOD, truncated
[  964.693151][ T1744] loop1: p185 start 1048320 is beyond EOD, truncated
[  964.696929][ T1744] loop1: p187 start 1048320 is beyond EOD, truncated
[  964.700440][ T1744] loop1: p189 start 1048320 is beyond EOD, truncated
[  964.703906][ T1744] loop1: p191 start 1048320 is beyond EOD, truncated
[  964.708167][ T1744] loop1: p193 start 1048320 is beyond EOD, truncated
[  964.712438][ T1744] loop1: p195 start 1048320 is beyond EOD, truncated
[  964.716570][ T1744] loop1: p197 start 1048320 is beyond EOD, truncated
[  964.721123][ T1744] loop1: p199 start 1048320 is beyond EOD, truncated
[  964.727562][ T1744] loop1: p201 start 1048320 is beyond EOD, truncated
[  964.728876][ T2015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  964.728888][ T2015] usb 2-1: Product: syz
[  964.728894][ T2015] usb 2-1: Manufacturer: syz
[  964.728900][ T2015] usb 2-1: SerialNumber: syz
[  964.742828][ T1744] loop1: p203 start 1048320 is beyond EOD, truncated
[  964.746490][ T1744] loop1: p205 start 1048320 is beyond EOD, truncated
[  964.749739][ T1744] loop1: p207 start 1048320 is beyond EOD, truncated
[  964.753835][ T1744] loop1: p209 start 1048320 is beyond EOD, truncated
[  964.757918][ T1744] loop1: p211 start 1048320 is beyond EOD, truncated
[  964.765167][ T1744] loop1: p213 start 1048320 is beyond EOD, truncated
[  964.769626][ T1744] loop1: p215 start 1048320 is beyond EOD, truncated
[  964.773737][ T1744] loop1: p217 start 1048320 is beyond EOD, truncated
[  964.777287][ T1744] loop1: p219 start 1048320 is beyond EOD, truncated
[  964.784197][ T1744] loop1: p221 start 1048320 is beyond EOD, truncated
[  964.788102][ T1744] loop1: p223 start 1048320 is beyond EOD, truncated
[  964.792874][ T1744] loop1: p225 start 1048320 is beyond EOD, truncated
[  964.796649][ T1744] loop1: p227 start 1048320 is beyond EOD, truncated
[  964.801017][ T1744] loop1: p229 start 1048320 is beyond EOD, truncated
[  964.801383][ T2015] usb 2-1: config 0 descriptor??
[  964.808303][ T1744] loop1: p231 start 1048320 is beyond EOD, truncated
[  964.811506][ T1744] loop1: p233 start 1048320 is beyond EOD, truncated
[  964.815944][ T1744] loop1: p235 start 1048320 is beyond EOD, truncated
[  964.820513][  T989] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  964.825193][ T1744] loop1: p237 start 1048320 is beyond EOD, truncated
[  964.828754][ T1744] loop1: p239 start 1048320 is beyond EOD, truncated
[  964.833592][ T1744] loop1: p241 start 1048320 is beyond EOD, truncated
[  964.836696][ T1744] loop1: p243 start 1048320 is beyond EOD, truncated
[  964.842739][ T1744] loop1: p245 start 1048320 is beyond EOD, truncated
[  964.846218][ T1744] loop1: p247 start 1048320 is beyond EOD, truncated
[  964.849723][ T1744] loop1: p249 start 1048320 is beyond EOD, truncated
[  964.853744][ T1744] loop1: p251 start 1048320 is beyond EOD, truncated
[  964.857246][ T1744] loop1: p253 start 1048320 is beyond EOD, truncated
[  964.863896][ T1744] loop1: p255 start 1048320 is beyond EOD, truncated
[  964.991328][  T989] usb 6-1: Using ep0 maxpacket: 32
[  964.996833][  T989] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  965.015760][  T989] usb 6-1: config index 0 descriptor too short (expected 19, got 18)
[  965.039739][  T989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  965.039806][  T989] usb 6-1: Product: syz
[  965.039847][  T989] usb 6-1: Manufacturer: syz
[  965.039879][  T989] usb 6-1: SerialNumber: syz
[  965.161581][ T5012] Bluetooth: hci7: command tx timeout
[  965.227392][  T989] usb 6-1: config 0 descriptor??
[  965.482514][  T989] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  965.483000][  T989] dvb-usb: bulk message failed: -22 (2/0)
[  965.513977][  T989] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  965.517447][  T989] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  965.522545][  T989] usb 6-1: media controller created
[  965.555855][  T989] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  965.562509][ T2015] appletouch 2-1:0.85: Geyser mode initialized.
[  965.574075][ T2015] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input52
[  965.614254][  T989] usb 6-1: selecting invalid altsetting 7
[  965.614294][  T989] cxusb: set interface failed
[  965.614328][  T989] dvb-usb: bulk message failed: -22 (1/0)
[  965.795487][  T989] DVB: Unable to find symbol lgdt330x_attach()
[  965.795521][  T989] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  965.907402][  T989] rc_core: IR keymap rc-dvico-portable not found
[  965.907438][  T989] Registered IR keymap rc-empty
[  965.908695][  T989] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  965.988980][  T989] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input53
[  966.005041][  T989] dvb-usb: schedule remote query interval to 100 msecs.
[  966.008189][  T989] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  966.034138][ T2015] usb 2-1: USB disconnect, device number 25
[  966.185739][ T5689] dvb-usb: bulk message failed: -22 (1/0)
[  966.210572][  T989] usb 6-1: USB disconnect, device number 11
[  966.374594][ T2015] appletouch 2-1:0.85: input: appletouch disconnected
[  966.841148][  T989] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  967.528517][ T1772] udevd[1772]: inotify_add_watch(7, /dev/loop1p98, 10) failed: No such file or directory
[  967.533399][ T1775] udevd[1775]: inotify_add_watch(7, /dev/loop1p94, 10) failed: No such file or directory
[  967.542504][ T1771] udevd[1771]: inotify_add_watch(7, /dev/loop1p96, 10) failed: No such file or directory
[  967.549230][ T1770] udevd[1770]: inotify_add_watch(7, /dev/loop1p100, 10) failed: No such file or directory
[  967.553484][ T1774] udevd[1774]: inotify_add_watch(7, /dev/loop1p114, 10) failed: No such file or directory
[  967.562647][ T1467] udevd[1467]: inotify_add_watch(7, /dev/loop1p102, 10) failed: No such file or directory
[  967.566063][ T1777] udevd[1777]: inotify_add_watch(7, /dev/loop1p104, 10) failed: No such file or directory
[  967.570661][ T1399] udevd[1399]: inotify_add_watch(7, /dev/loop1p108, 10) failed: No such file or directory
[  967.571137][ T1776] udevd[1776]: inotify_add_watch(7, /dev/loop1p92, 10) failed: No such file or directory
[  967.580215][ T1831] loop1: detected capacity change from 0 to 1024
[  967.580470][ T1261] udevd[1261]: inotify_add_watch(7, /dev/loop1p106, 10) failed: No such file or directory
[  967.879707][ T1836] loop5: detected capacity change from 0 to 64
[  968.262799][ T1835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11043'.
[  969.802919][ T1856] loop5: detected capacity change from 0 to 32768
[  969.937126][ T1868] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7)
[  969.997909][ T1870] netlink: 'syz.9.11058': attribute type 2 has an invalid length.
[  969.997949][ T1870] netlink: 'syz.9.11058': attribute type 8 has an invalid length.
[  969.997979][ T1870] netlink: 132 bytes leftover after parsing attributes in process `syz.9.11058'.
[  970.281843][ T2015] usb 10-1: new full-speed USB device number 8 using dummy_hcd
[  970.432636][ T2015] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[  970.445177][ T2015] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4
[  970.459329][ T2015] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  970.459382][ T2015] usb 10-1: Product: syz
[  970.459426][ T2015] usb 10-1: Manufacturer: syz
[  970.459457][ T2015] usb 10-1: SerialNumber: syz
[  970.530866][   T35] INFO: task syz.4.9716:30196 blocked for more than 143 seconds.
[  970.530919][   T35]       Tainted: G             L      s
** replaying previous printk message **
[  970.530919][   T35]       Tainted: G             L      syzkaller #0
[  970.530957][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  970.530979][   T35] task:syz.4.9716      state:D stack:27432 pid:30196 tgid:30189 ppid:28418  task_flags:0x400040 flags:0x00080002
[  970.531037][   T35] Call Trace:
[  970.531058][   T35]  <TASK>
[  970.531081][   T35]  __schedule+0x17d4/0x5820
[  970.531105][   T35]  ? __pfx___schedule+0x10/0x10
[  970.531116][   T35]  ? schedule+0x90/0x2b0
[  970.531124][   T35]  schedule+0x164/0x2b0
[  970.531132][   T35]  schedule_preempt_disabled+0x13/0x30
[  970.531140][   T35]  __mutex_lock+0x7c1/0x1550
[  970.531148][   T35]  ? kasan_save_track+0x3e/0x80
[  970.531157][   T35]  ? __mutex_lock+0x5d4/0x1550
[  970.531167][   T35]  ? nfsd_nrthreads+0x4c/0xd0
[  970.531178][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  970.531189][   T35]  ? net_generic+0x1e/0x240
[  970.531199][   T35]  ? net_generic+0x1e/0x240
[  970.531269][   T35]  nfsd_nrthreads+0x4c/0xd0
[  970.531286][   T35]  write_threads+0x216/0x610
[  970.531298][   T35]  ? __might_fault+0xaf/0x130
[  970.531316][   T35]  ? __pfx_write_threads+0x10/0x10
[  970.531330][   T35]  ? _copy_from_user+0x94/0xb0
[  970.531347][   T35]  ? simple_transaction_get+0x12d/0x160
[  970.531364][   T35]  nfsctl_transaction_write+0x10f/0x160
[  970.531379][   T35]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  970.531392][   T35]  vfs_write+0x296/0xba0
[  970.531414][   T35]  ? __pfx_vfs_write+0x10/0x10
[  970.531431][   T35]  ? __fget_files+0x2a/0x420
[  970.531448][   T35]  ? __fget_files+0x3a2/0x420
[  970.531462][   T35]  ? __fget_files+0x2a/0x420
[  970.531482][   T35]  ksys_write+0x150/0x270
[  970.531496][   T35]  ? __pfx_ksys_write+0x10/0x10
[  970.531510][   T35]  do_syscall_64+0x166/0x520
[  970.531517][   T35]  ? trace_irq_disable+0x3b/0x140
[  970.531525][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  970.531535][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  970.531543][   T35] RIP: 0033:0x7f9ea939e159
[  970.531551][   T35] RSP: 002b:00007f9eaa199028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  970.531560][   T35] RAX: ffffffffffffffda RBX: 00007f9ea9626090 RCX: 00007f9ea939e159
[  970.531569][   T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  970.531576][   T35] RBP: 00007f9ea943506b R08: 0000000000000000 R09: 0000000000000000
[  970.531583][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  970.531591][   T35] R13: 00007f9ea9626128 R14: 00007f9ea9626090 R15: 00007ffdc6c129a8
[  970.531611][   T35]  </TASK>
[  970.531668][   T35] 
[  970.531668][   T35] Showing all locks held in the system:
[  970.531676][   T35] locks held by pr/ttyS0/16: 2, last CPU#1:
[  970.531685][   T35]  #0: ffffffff8ec36278 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  970.531747][   T35]  #1: ffffffff9ad270d8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0
[  970.531778][   T35] locks held by khungtaskd/35: 1, last CPU#0:
[  970.531786][   T35]  #0: ffffffff8ed5c6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  970.531818][   T35] locks held by kworker/1:3/2015: 4, on CPU#1:
[  970.531823][   T35]  #0: ffff888161ae4140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  970.531843][   T35]  #1: ffffc900083f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  970.531862][   T35]  #2: ffff88816e5971d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[  970.531882][   T35]  #3: ffff8881be5861d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  970.531913][   T35] locks held by kworker/u8:2/5652: 4, last CPU#1:
[  970.531919][   T35]  #0: ffff8881012d5940 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  970.531938][   T35]  #1: ffffc90004e17c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  970.531957][   T35]  #2: ffffffff9023eda8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[  970.531976][   T35]  #3: ffffffff9024d600 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0
[  970.532001][   T35] locks held by syz.4.9716/30192: 3, on CPU#1:
[  970.532006][   T35]  #0: ffff8881bdf39cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  970.532025][   T35]  #1: ffff8881927b0460 (sb_writers#32){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  970.532046][   T35]  #2: ffffffff8f09ba20 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  970.532064][   T35] locks held by syz.4.9716/30196: 3, on CPU#1:
[  970.532069][   T35]  #0: ffff8881a375eef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  970.532087][   T35]  #1: ffff8881927b0460 (sb_writers#32){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  970.532107][   T35]  #2: ffffffff8f09ba20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nrthreads+0x4c/0xd0
[  970.532131][   T35] locks held by syz-executor/30649: 2, on CPU#0:
[  970.532139][   T35]  #0: ffff888115b5a0e8 (&type->s_umount_key#76){++++}-{4:4}, at: deactivate_super+0xac/0xe0
[  970.532171][   T35]  #1: ffffffff8f09ba20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0
[  970.532201][   T35] locks held by syz.7.10179/31466: 2, on CPU#1:
[  970.532210][   T35]  #0: ffff88819679c0e8 (&type->s_umount_key#76){++++}-{4:4}, at: deactivate_super+0xac/0xe0
[  970.533056][   T35]  #1: ffffffff8f09ba20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0
[  970.533167][   T35] locks held by syz.6.10843/1116: 3, on CPU#1:
[  970.533177][   T35]  #0: ffffffff902be2a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  970.533208][   T35]  #1: ffff88819e13d6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0
[  970.533247][   T35]  #2: ffffffff8f09ba20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560
[  970.533283][   T35] locks held by syz.3.10870/1178: 1, on CPU#0:
[  970.533291][   T35]  #0: ffff88819679c0e8 (&type->s_umount_key#76){++++}-{4:4}, at: super_lock+0x2d6/0x3d0
[  970.533330][   T35] locks held by udevd/1776: 4, on CPU#0:
[  970.533338][   T35]  #0: ffff88801edc6bd8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0
[  970.533366][   T35]  #1: ffff88810d6ca880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420
[  970.533400][   T35]  #2: ffff888175bfdb48 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  970.533433][   T35]  #3: ffff8881be5861d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  970.533466][   T35] 
[  970.533470][   T35] =============================================
[  970.533470][   T35] 
[  970.533476][   T35] NMI backtrace for cpu 0
[  970.533486][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  970.533502][   T35] Tainted: [L]=SOFTLOCKUP
[  970.533506][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  970.533513][   T35] Call Trace:
[  970.533519][   T35]  <TASK>
[  970.533524][   T35]  dump_stack_lvl+0xe8/0x150
[  970.533541][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  970.533559][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  970.533578][   T35]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  970.533595][   T35]  sys_info+0x135/0x170
[  970.533610][   T35]  watchdog+0xfd7/0x1030
[  970.533626][   T35]  ? watchdog+0x1c7/0x1030
[  970.533641][   T35]  kthread+0x38b/0x480
[  970.533653][   T35]  ? __pfx_watchdog+0x10/0x10
[  970.533663][   T35]  ? __pfx_kthread+0x10/0x10
[  970.533675][   T35]  ret_from_fork+0x514/0xb70
[  970.533688][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  970.533700][   T35]  ? __switch_to+0xc89/0x1420
[  970.533747][   T35]  ? __pfx_kthread+0x10/0x10
[  970.533759][   T35]  ret_from_fork_asm+0x1a/0x30
[  970.533786][   T35]  </TASK>
[  970.533791][   T35] Sending NMI from CPU 0 to CPUs 1:
[  970.533857][    C1] NMI backtrace for cpu 1
[  970.533872][    C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  970.533889][    C1] Tainted: [L]=SOFTLOCKUP
[  970.533894][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  970.533900][    C1] RIP: 0010:io_serial_out+0x7c/0xc0
[  970.533915][    C1] Code: 52 57 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4c 05 c7 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1
[  970.533922][    C1] RSP: 0018:ffffc90000157900 EFLAGS: 00000002
[  970.533929][    C1] RAX: 000000000000000a RBX: 000000000000000a RCX: 0000000000000000
[  970.533936][    C1] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020
[  970.533943][    C1] RBP: 00000000000003f8 R08: 0000000000000003 R09: 0000000000000004
[  970.533950][    C1] R10: dffffc0000000000 R11: ffffffff85705b30 R12: dffffc0000000000
[  970.533957][    C1] R13: 000000000000000a R14: ffffffff9ad27100 R15: 0000000000000000
[  970.533964][    C1] FS:  0000000000000000(0000) GS:ffff8882a8ce4000(0000) knlGS:0000000000000000
[  970.533973][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  970.533979][    C1] CR2: 00007f7d507eb840 CR3: 000000016b522000 CR4: 00000000000006f0
[  970.534016][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  970.534024][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  970.534032][    C1] Call Trace:
[  970.534037][    C1]  <TASK>
[  970.534044][    C1]  __serial8250_console_fifo_write+0x1e6/0x3e0
[  970.534067][    C1]  serial8250_console_write+0xaa1/0x1200
[  970.534086][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  970.534100][    C1]  ? rcu_is_watching+0x16/0xb0
[  970.534111][    C1]  nbcon_emit_next_record+0xef5/0x1a90
[  970.534123][    C1]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  970.534131][    C1]  ? nbcon_context_try_acquire+0x819/0xbd0
[  970.534141][    C1]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  970.534154][    C1]  nbcon_kthread_func+0x679/0x880
[  970.534162][    C1]  ? nbcon_kthread_func+0x163/0x880
[  970.534168][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  970.534176][    C1]  ? __kthread_parkme+0x71/0x1f0
[  970.534187][    C1]  ? __kthread_parkme+0x199/0x1f0
[  970.534196][    C1]  kthread+0x38b/0x480
[  970.534205][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  970.534211][    C1]  ? __pfx_kthread+0x10/0x10
[  970.534218][    C1]  ret_from_fork+0x514/0xb70
[  970.534226][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  970.534233][    C1]  ? __switch_to+0xc89/0x1420
[  970.534243][    C1]  ? __pfx_kthread+0x10/0x10
[  970.534250][    C1]  ret_from_fork_asm+0x1a/0x30
[  970.534297][    C1]  </TASK>
[  970.536426][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  970.863014][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  970.866546][   T35] Tainted: [L]=SOFTLOCKUP
[  970.868205][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  970.871997][   T35] Call Trace:
[  970.873172][   T35]  <TASK>
[  970.874266][   T35]  vpanic+0x56d/0xa60
[  970.875553][   T35]  ? __pfx___schedule+0x10/0x10
[  970.877043][   T35]  ? __pfx_vpanic+0x10/0x10
[  970.878446][   T35]  panic+0xc5/0xd0
[  970.879630][   T35]  ? __pfx_panic+0x10/0x10
[  970.881010][   T35]  ? preempt_schedule_common+0x7f/0xd0
[  970.882908][   T35]  ? preempt_schedule_thunk+0x16/0x40
[  970.884873][   T35]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  970.886834][   T35]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  970.888776][   T35]  watchdog+0x1030/0x1030
[  970.890293][   T35]  ? watchdog+0x1c7/0x1030
[  970.891849][   T35]  kthread+0x38b/0x480
[  970.893342][   T35]  ? __pfx_watchdog+0x10/0x10
[  970.894810][   T35]  ? __pfx_kthread+0x10/0x10
[  970.896212][   T35]  ret_from_fork+0x514/0xb70
[  970.897607][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  970.899223][   T35]  ? __switch_to+0xc89/0x1420
[  970.900729][   T35]  ? __pfx_kthread+0x10/0x10
[  970.902193][   T35]  ret_from_fork_asm+0x1a/0x30
[  970.903749][   T35]  </TASK>
[  970.905440][   T35] Kernel Offset: disabled
[  970.906822][   T35] Rebooting in 86400 seconds..
