last executing test programs:

8m35.280898758s ago: executing program 1 (id=1441):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
lstat(0x0, 0x0)
write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x1, 0x8000000000002, 0x1000, 0x0, 0x9, 0x5ebc, {0x3, 0x2f8, 0x57e, 0x2, 0x6, 0x7, 0x7ff, 0xdd, 0x400, 0x1d000, 0x2, 0x0, 0x0, 0x10000002, 0x5}}}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3})
setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000), 0x4)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
chdir(&(0x7f0000000000)='./file0\x00')
r5 = getpid()
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee0, 0x13, 0xffffffffffffffff, 0xe6a98000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)

8m31.928595038s ago: executing program 1 (id=1445):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300)
ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f00000000c0)={0x2, 0x0, [0x80000000, 0x9, 0x8, 0x3, 0x5, 0xb, 0xfffffe01, 0x7]})
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040))
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000001c0)=0x1)
r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r6, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0x1f3, @time={0x6, 0x3}, 0xf, {0x0, 0x6}, 0x8, 0x0, 0x1})
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[], 0x0)
setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000080)={0x77359400}, 0x10)
write$proc_mixer(r5, &(0x7f0000000380)=ANY=[@ANYBLOB='OGAIN \'C'], 0x4000)
close(r5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}}, 0x0)

8m23.426658189s ago: executing program 1 (id=1450):
write(0xffffffffffffffff, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b, 0x0, 0xee00}, {0x0, 0x7}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@loopback, 0x3506, 0x4, 0x1, 0x0, 0x81, 0x0, 0x20000}}, 0xe8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x161182)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @empty, 0x40003ff}, 0x1b)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000240)={'ni_at_a2150\x00', [0xb013, 0x7, 0x3, 0xdd6, 0x88d7, 0x8f, 0xffffffff, 0x8012, 0x1006, 0xffffffff, 0x40008, 0x7, 0x1000000b, 0x3, 0x0, 0xfffffffd, 0x8, 0x6, 0x9, 0x57, 0x4, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0x800, 0x20004, 0x400002, 0x22]})
socket$inet_udp(0x2, 0x2, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)

8m21.836372191s ago: executing program 1 (id=1454):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)='%pB    \x00'}, 0x20)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x51e8f000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f00000000c0), 0x4)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000500)=@security={'security\x00', 0x64, 0x4, 0x318, 0x100000c, 0x0, 0x1c0, 0xc0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "a2f3"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r7 = fcntl$dupfd(r5, 0x0, r5)
sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "00f9ffffff00", "3176927120162c9891c2feb670bbea88", '\x00', "a8d1546c00"}, 0x28)
write$binfmt_elf64(r7, &(0x7f0000000740)=ANY=[], 0x4a2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)

8m16.819856086s ago: executing program 1 (id=1457):
openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402c1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'veth0_to_batadv\x00', &(0x7f0000000240)=@ethtool_link_settings={0x4d, 0x9, 0x5, 0x10, 0x36, 0x8, 0x8b, 0xad, 0x7f, 0xf4, [0x9, 0x1, 0x40, 0x0, 0x1ff, 0x81, 0xfffffffd, 0x1]}})
poll(0x0, 0x0, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r0, &(0x7f000000d080)=""/102397, 0x19008)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f0000000080), 0x1004)
ioctl$TCSETS(0xffffffffffffffff, 0x4b72, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000300)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "140080", 0x44, 0x2f, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x104, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x7, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x4, 0x9}, 0x2, {0x8, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
userfaultfd(0x80001)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x412002, 0x0)
ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000000c0)={0xc})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001200)={0x0, 0x0})
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42400)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x533c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x4080)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0xb, @dev={0xfe, 0x80, '\x00', 0x14}, 0xe226, 0x1}, 0x20)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, 0x0, 0x0)

8m13.393926459s ago: executing program 1 (id=1463):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000128, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840)
ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000})
ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000140)={0x28, 0x4, 0x0, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)})
socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0)
r5 = socket(0x2b, 0x6, 0x3a)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x4e22, 0xfffffffd, @local}, 0x0, {[0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x9]}}, 0x5c)
r6 = socket$inet6(0xa, 0x400000000001, 0x7fffffff)
sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xffffffffffffff18)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]})
fsopen(0x0, 0x1)
close_range(r7, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x3, 0x400182})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
r8 = syz_open_dev$cec(&(0x7f00000029c0), 0x0, 0x20b41)
ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000002a00)={"8ae484be", 0x3, 0x5, 0x3, 0x3, 0x2, "3446c9426366e6dd08ca51320aa57b", 'ng].', "2baa0d1a", "7895169a", ["efa3f1a1691f20cdf2dca736", "b862fe2ddf691f3de8c3a97d", "324b9b52e04bd98dc0047012", "c99790e23a4e91a9a8e22bcf"]})

7m56.149463397s ago: executing program 32 (id=1463):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000128, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840)
ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000})
ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000140)={0x28, 0x4, 0x0, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)})
socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0)
r5 = socket(0x2b, 0x6, 0x3a)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x4e22, 0xfffffffd, @local}, 0x0, {[0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x9]}}, 0x5c)
r6 = socket$inet6(0xa, 0x400000000001, 0x7fffffff)
sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xffffffffffffff18)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]})
fsopen(0x0, 0x1)
close_range(r7, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x3, 0x400182})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
r8 = syz_open_dev$cec(&(0x7f00000029c0), 0x0, 0x20b41)
ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000002a00)={"8ae484be", 0x3, 0x5, 0x3, 0x3, 0x2, "3446c9426366e6dd08ca51320aa57b", 'ng].', "2baa0d1a", "7895169a", ["efa3f1a1691f20cdf2dca736", "b862fe2ddf691f3de8c3a97d", "324b9b52e04bd98dc0047012", "c99790e23a4e91a9a8e22bcf"]})

7m29.581290003s ago: executing program 2 (id=1494):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
epoll_create(0x7)
request_key(0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04060306c900502dc24b2113b33392b07bdfa888"], 0x6)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00')
read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0x2020)
preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, 0x7, 0x7)
getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, 0x0, &(0x7f0000000100))
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40408d4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'})
r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000bc0)={0x1, @sdr={0x41416770, 0x66c2}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x890}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

7m26.851823853s ago: executing program 2 (id=1497):
socket$alg(0x26, 0x5, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
pwritev(r3, &(0x7f00000029c0)=[{&(0x7f0000001680)="58f14caa75167f", 0x7}], 0x1, 0x9, 0x5)
write$binfmt_misc(r3, &(0x7f0000000040)="704dd1993290823b4c4fbae124a475ef12e60295226c6d12405328b458ab99edace2e983a89753a091184600eb83515fbd2bd6d8f74984", 0x37)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00')
syz_mount_image$fuse(0x0, &(0x7f000000a1c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
fstat(r4, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4500, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fchown(r5, r6, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000003c00), &(0x7f0000003c40)=0xc)
ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000003c80)={0x3, 0x7f, {r0}, {0xffffffffffffffff}, 0x8000, 0x8001})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
socket(0x10, 0x3, 0x0)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22002, 0x0)
ioctl$FBIOBLANK(r7, 0x4611, 0x3)

7m22.087312989s ago: executing program 2 (id=1501):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
read$dsp(r3, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r4)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x30, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}}, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
unshare(0x2c020400)
r7 = msgget$private(0x0, 0x244)
msgsnd(r7, &(0x7f0000000340)=ANY=[], 0x2000, 0x0)
r8 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff)
write$binfmt_script(r9, &(0x7f0000000080)={'#! ', './file1'}, 0xb)
close(r9)
execveat$binfmt(0xffffffffffffff9c, r8, 0x0, 0x0, 0x0)
setrlimit(0x1, 0x0)
truncate(0x0, 0x20fffbfffc)

7m20.757917473s ago: executing program 2 (id=1504):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0x5ffd, 0x0, 0x0, 0x0, &(0x7f0000000000))
ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x83, &(0x7f0000001000)={r8}, 0x8)
r9 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
poll(&(0x7f0000000440)=[{r7, 0x200}, {0xffffffffffffffff, 0x80}, {r1, 0x80}, {r3, 0x4110}, {r9, 0x4}, {r10, 0x4002}], 0x6, 0x4)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000280)={r8, 0x97, "0aa5e73eba2ff6ef8755ce9d2a1d82101fa4e112e5356fc096395013912a7edce20c132631948fdab448737b6ae33a6b90cd5a5256476facdc7bdf6bf9bf26bd3151337f80d5af086ab6b295b43360197532f0ed037499f17413edb45e5ec06adb3905e397b43f534a2608c0abf0c750ca9804b386e85d2267ba18f9e43dcb443e1d6aaa809a957317584235a04cd192ee4e0d2d472531"}, &(0x7f0000000380)=0x9f)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r12, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast1, 0x7}, 0x1c)
connect$pppl2tp(r11, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r12, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003b00)="4757bcf1")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)

7m18.018478484s ago: executing program 2 (id=1506):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_emit_ethernet(0x70, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d688a8380081002f0008004510005a03000000006c907800000000ac1e00010420880b00000000000208000002000086dd080088be00000000100000000100000004000000080022ebcb0a0000000000000200000000000000df0000000800655800000000"], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x490c02, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000500)={0x80, 0x0, 0xfffffffffffff83a})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0x170001, 0x10a000})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80e40, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$sndmidi(&(0x7f0000000080), 0x8, 0x1000)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000080)=0x20)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000040))
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x2}, 'syz1\x00', 0x1a})
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000d80), 0x36f, 0x20102, 0x0)
ioctl$UI_DEV_DESTROY(r2, 0x5502)

7m16.401486137s ago: executing program 2 (id=1508):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2a900, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioperm(0x5, 0x6, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x680, 0x0)
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
read$FUSE(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r0, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="10000000"], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40016)
r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x1, 0x9, 0x1, 0x0, 0x4})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x24000080)

6m59.373974668s ago: executing program 33 (id=1508):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2a900, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioperm(0x5, 0x6, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x680, 0x0)
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
read$FUSE(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r0, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="10000000"], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40016)
r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x1, 0x9, 0x1, 0x0, 0x4})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x24000080)

3m3.581088504s ago: executing program 4 (id=1869):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, 0x0, 0x24008004)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x3})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x4)
clock_gettime(0x17, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b33, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
keyctl$join(0x1, 0x0)
keyctl$session_to_parent(0x12)
r5 = dup(0xffffffffffffffff)
write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7, 0x6661, 0x6d, @loopback, @mcast1, 0x20, 0x7800, 0x2, 0x81}})
sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r6, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x1}}], 0x1, 0x0, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000012000173"], 0x3c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)

3m1.725632543s ago: executing program 4 (id=1872):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x14, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "1fbabdae0000000000"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0)

3m1.476836201s ago: executing program 4 (id=1873):
syz_mount_image$nilfs2(&(0x7f0000008540), &(0x7f0000008580)='./file0\x00', 0x0, &(0x7f00000085c0), 0x1, 0x8527, &(0x7f0000008600)="$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")

2m56.764154301s ago: executing program 4 (id=1887):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000480)={[{@utf8}, {}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x6c}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@umask={'umask', 0x3d, 0x10001}}]}, 0x1, 0x152b, &(0x7f0000001dc0)="$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")
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0)

2m56.327628605s ago: executing program 4 (id=1888):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000040)={@desc={0x1, 0x0, @desc3}})

2m55.568744939s ago: executing program 4 (id=1889):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80)

2m55.078043075s ago: executing program 34 (id=1889):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80)

49.367349831s ago: executing program 0 (id=2301):
write(0xffffffffffffffff, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b, 0x0, 0xee00}, {0x0, 0x7}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@loopback, 0x3506, 0x4, 0x1, 0x0, 0x81, 0x0, 0x20000}}, 0xe8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x161182)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a000006090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}}, 0x4084)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

47.021409175s ago: executing program 0 (id=2306):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000001080))

46.53683002s ago: executing program 0 (id=2310):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x8981, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000000)={0x2198, &(0x7f0000000040)})

45.348047878s ago: executing program 0 (id=2314):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@bsdgroups}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000280)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

43.764747569s ago: executing program 0 (id=2318):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x31, 0x31, &(0x7f0000000500)="b9ff0300600d698cb89e14f086dd1f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f00000001c0)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x0, 0x0, 0xaac}, 0x48)

41.792741112s ago: executing program 0 (id=2325):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000140)={0xdb, 0x0, 0x7870})

41.428834643s ago: executing program 35 (id=2325):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000140)={0xdb, 0x0, 0x7870})

5.67124641s ago: executing program 3 (id=2436):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0b020000000000000000020000000900020073797a300000000008000440000000000900010073797a30000000000800034000000009"], 0x64}}, 0xc0030)

5.235896304s ago: executing program 6 (id=2439):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x24, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

5.143233077s ago: executing program 3 (id=2440):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x3c, r1, 0x629, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000104}, 0x40)

5.05711507s ago: executing program 6 (id=2441):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x100, 0x9, 0x7, 0x2, 0x1, 0x100, 0x3, 0x20000000, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x6, 0x10000, 0x200000, 0xa, 0xfe9, 0x401, 0x7, 0x8000002, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7, 0x8]})

4.986326522s ago: executing program 3 (id=2443):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf)

4.876522915s ago: executing program 6 (id=2444):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc)
read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020)

4.624279003s ago: executing program 6 (id=2445):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000005640), 0x1, 0x559d, &(0x7f0000005680)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x408)

4.386027591s ago: executing program 5 (id=2447):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3c, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x101, 0x7, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xa, 0xcd}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)={0x0, 0x30, 0x29, {0x29, 0x31, "f70ba3810300f4b6996fdff9451e4fdca0560fb32554f300009180000000006fc94fe84e3a443d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

4.011813892s ago: executing program 7 (id=2448):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc)

3.742549561s ago: executing program 7 (id=2449):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
mmap(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x2, 0x13, r1, 0x0)

3.512711799s ago: executing program 7 (id=2450):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000600)="71e67a15cdf0311cfc9dfb3a6ca7586bd1", 0x11)

3.188905459s ago: executing program 6 (id=2451):
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001d00), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
getpid()
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)="06e805e6395a6c66a6996be0265cd970a5158a659cf2852fad57cf022e57839880a1250ad46810f49a3c91ff7f000000000000883fe20a85b685c5228b03dc7d02fa9635737721d3cb860235aa911818452364db46a67005f839eeb7db6bdf0901de2fe74002896fc2a0fbb859a3654f467c669dd9bd3f858a577517079548ae867ed3a08e285e5ca909abd85b1e1e4c7f183f4f3bf0613032e8a8a4dba29c4ebbd5e2a1610f33096e9c319ba23103fe5f07", 0x48}]}, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
writev(r4, &(0x7f0000000040), 0x2)
read$FUSE(r0, 0x0, 0x0)

3.047393494s ago: executing program 3 (id=2452):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000440))

2.792804412s ago: executing program 7 (id=2453):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x7)

2.19564763s ago: executing program 7 (id=2454):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
r0 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, &(0x7f0000000040))

2.066748114s ago: executing program 3 (id=2455):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000380)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@prjquota}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@auto_da_alloc}]}, 0x1, 0x46d, &(0x7f0000000bc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0)
open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)

1.952678768s ago: executing program 7 (id=2456):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5508, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6)
fsync(r0)

1.865870901s ago: executing program 5 (id=2457):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c055}, 0x0)

1.57610868s ago: executing program 5 (id=2458):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
read$dsp(r3, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r4)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x30, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}}, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
unshare(0x2c020400)
r7 = msgget$private(0x0, 0x244)
msgsnd(r7, &(0x7f0000000340)=ANY=[], 0x2000, 0x0)
r8 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff)
write$binfmt_script(r9, &(0x7f0000000080)={'#! ', './file1'}, 0xb)
close(r9)
execveat$binfmt(0xffffffffffffff9c, r8, 0x0, 0x0, 0x0)
setrlimit(0x1, 0x0)
truncate(0x0, 0x20fffbfffc)

350.094709ms ago: executing program 5 (id=2459):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x0, 0x0, {0x0, 0x300, 0xe7, 0x80000300}})

144.598375ms ago: executing program 5 (id=2460):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0)

76.456637ms ago: executing program 6 (id=2461):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd845}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c00028008000240000000020800030000000d0008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)

74.754508ms ago: executing program 3 (id=2462):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
bind$packet(r0, &(0x7f0000000100)={0x11, 0x1a, 0x0, 0x1, 0x4, 0x6, @local}, 0x14)

0s ago: executing program 5 (id=2463):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socket$inet(0x2, 0x2, 0x1)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x3})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x4)
clock_gettime(0x17, 0x0)
ioctl$KDGKBTYPE(r3, 0x4b33, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
keyctl$join(0x1, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b32323b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdc69c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d9560ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f733b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7, 0x6661, 0x6d, @loopback, @mcast1, 0x20, 0x7800, 0x2, 0x81}})
sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r6, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x1}}], 0x1, 0x0, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000012000173"], 0x3c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)

kernel console output (not intermixed with test programs):

LFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9
[ 1703.141683][T14711] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1703.185200][T14711] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9
[ 1703.222068][T14711] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1703.275861][T14711] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9
[ 1703.292383][T14711] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1703.323937][T14711] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9
[ 1703.349618][T14711] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1703.365094][T14711] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9
[ 1703.375910][T14711] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1703.396974][   T28] audit: type=1800 audit(1598.689:258): pid=14711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1825" name="file3" dev="loop5" ino=16 res=0 errno=0
[ 1704.011103][T14752] netlink: 'syz.5.1837': attribute type 10 has an invalid length.
[ 1704.080374][T14752] team0: Device hsr_slave_0 failed to register rx_handler
[ 1704.532079][T14770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1844'.
[ 1706.022397][ T8455] Bluetooth: hci0: unexpected event for opcode 0x200b
[ 1707.160302][T14789] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1846'.
[ 1708.444813][T14815] loop0: detected capacity change from 0 to 8
[ 1708.541790][T14815] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1708.549922][T14815] SQUASHFS error: Failed to read block 0x91: -5
[ 1708.556363][T14815] SQUASHFS error: Unable to read metadata cache entry [8f]
[ 1708.563857][T14815] SQUASHFS error: Unable to read inode 0x11f
[ 1708.729435][ T8455] Bluetooth: hci4: unexpected event for opcode 0x200b
[ 1708.844415][T14817] loop4: detected capacity change from 0 to 64
[ 1708.880230][T14808] loop5: detected capacity change from 0 to 8192
[ 1708.968260][T14808] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1709.071380][T14808] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[ 1709.121508][T14808] REISERFS (device loop5): using ordered data mode
[ 1709.128589][T14808] reiserfs: using flush barriers
[ 1709.356464][T14808] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1709.433766][T14808] REISERFS (device loop5): checking transaction log (loop5)
[ 1709.572666][T14808] REISERFS warning (device loop5):  reiserfs_fill_super: corrupt root inode, run fsck
[ 1710.183578][T14836] loop4: detected capacity change from 0 to 256
[ 1710.319302][T14836] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[ 1710.440134][T14836] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008)
[ 1710.452087][T14836] exFAT-fs (loop4): Filesystem has been set read-only
[ 1711.275923][ T8455] Bluetooth: hci4: unexpected event for opcode 0x200b
[ 1711.713433][T14866] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1868'.
[ 1713.620762][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1713.627770][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1713.650374][T14881] loop5: detected capacity change from 0 to 16
[ 1713.685723][T14881] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1713.725625][T14881] erofs: (device loop5): z_erofs_readahead: readahead error at folio 3 @ nid 89
[ 1713.777345][T14881] erofs: (device loop5): z_erofs_readahead: readahead error at folio 2 @ nid 89
[ 1713.815923][T14881] erofs: (device loop5): z_erofs_readahead: readahead error at folio 1 @ nid 89
[ 1713.901480][T14881] erofs: (device loop5): z_erofs_readahead: readahead error at folio 0 @ nid 89
[ 1713.922173][T14881] erofs: (device loop5): z_erofs_read_folio: read error -22 @ 0 of nid 89
[ 1713.936925][T14877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1867'.
[ 1713.946377][T14877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1867'.
[ 1713.973289][   T28] audit: type=1400 audit(1608.428:259): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=14871 comm="syz.0.1867"
[ 1713.992974][   T28] audit: type=1800 audit(1608.484:260): pid=14881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1870" name="file2" dev="loop5" ino=89 res=0 errno=0
[ 1716.031269][ T8455] Bluetooth: hci0: unexpected event for opcode 0x200b
[ 1716.780986][T14920] loop3: detected capacity change from 0 to 64
[ 1717.003220][T14925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1882'.
[ 1717.058038][T14920] Trying to free block not in datazone
[ 1717.139385][T14920] Trying to free block not in datazone
[ 1717.174142][T14920] Trying to free block not in datazone
[ 1717.584859][ T8455] Bluetooth: hci0: unexpected event for opcode 0x200b
[ 1718.615267][T14943] loop4: detected capacity change from 0 to 256
[ 1718.652939][T14943] exfat: Deprecated parameter 'utf8'
[ 1718.707451][T14943] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d)
[ 1718.739886][T14947] loop3: detected capacity change from 0 to 256
[ 1718.918554][T14947] FAT-fs (loop3): Directory bread(block 64) failed
[ 1718.969676][T14947] FAT-fs (loop3): Directory bread(block 65) failed
[ 1718.976428][T14947] FAT-fs (loop3): Directory bread(block 66) failed
[ 1719.006737][T14947] FAT-fs (loop3): Directory bread(block 67) failed
[ 1719.013834][T14947] FAT-fs (loop3): Directory bread(block 68) failed
[ 1719.021612][T14947] FAT-fs (loop3): Directory bread(block 69) failed
[ 1719.028496][T14947] FAT-fs (loop3): Directory bread(block 70) failed
[ 1719.037310][T14947] FAT-fs (loop3): Directory bread(block 71) failed
[ 1719.044480][T14947] FAT-fs (loop3): Directory bread(block 72) failed
[ 1719.051201][T14947] FAT-fs (loop3): Directory bread(block 73) failed
[ 1719.317218][T14937] loop5: detected capacity change from 0 to 32768
[ 1719.422462][T14937] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1719.701047][T14937] XFS (loop5): Ending clean mount
[ 1719.746090][T10063] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1719.870071][T13085] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1719.990748][T10063] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1720.154039][T10063] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1720.399751][T10063] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1720.436510][T14970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1720.457041][T14970] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1720.870874][T14944] loop0: detected capacity change from 0 to 32768
[ 1720.946073][T12791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1720.962674][T12791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1720.981330][T12791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1720.991674][T12791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1721.001150][T12791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1721.001970][T14944] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1885 (14944)
[ 1721.025397][T12791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1721.210455][T14944] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1721.356080][T14990] loop5: detected capacity change from 0 to 64
[ 1721.388779][T14944] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[ 1721.436037][T14944] BTRFS info (device loop0): using free space tree
[ 1722.229622][T14944] BTRFS error (device loop0): open_ctree failed: -4
[ 1722.568880][T15021] loop5: detected capacity change from 0 to 4096
[ 1722.671265][T15021] ntfs3: loop5: Failed to initialize $Extend/$ObjId.
[ 1723.143086][T15008] loop3: detected capacity change from 0 to 32768
[ 1723.320730][T12791] Bluetooth: hci3: command tx timeout
[ 1723.406596][T15008] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1723.502243][T14977] chnl_net:caif_netlink_parms(): no params data found
[ 1723.658908][T15008] XFS (loop3): Ending clean mount
[ 1724.614344][ T5778] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1725.473763][T15054] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1902'.
[ 1725.596954][T12791] Bluetooth: hci3: command tx timeout
[ 1725.716831][T14977] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1725.724215][T14977] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1725.736047][T14977] bridge_slave_0: entered allmulticast mode
[ 1725.743582][T14977] bridge_slave_0: entered promiscuous mode
[ 1725.797406][T15061] loop5: detected capacity change from 0 to 64
[ 1725.965356][T14977] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1725.998673][T14977] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1726.089557][T14977] bridge_slave_1: entered allmulticast mode
[ 1726.210365][T14977] bridge_slave_1: entered promiscuous mode
[ 1726.490560][T15064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1903'.
[ 1726.828980][T15067] loop0: detected capacity change from 0 to 512
[ 1726.861617][T10063] hsr_slave_0: left promiscuous mode
[ 1726.927650][T10063] hsr_slave_1: left promiscuous mode
[ 1726.956986][T15067] EXT4-fs: Ignoring removed oldalloc option
[ 1726.964860][T10063] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1726.975240][T10063] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1727.015343][T15067] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1727.047711][T10063] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1727.074601][T10063] batman_adv: batadv0: Interface deactivated: ipvlan2
[ 1727.099264][T15067] EXT4-fs (loop0): revision level too high, forcing read-only mode
[ 1727.111729][T10063] batman_adv: batadv0: Removing interface: ipvlan2
[ 1727.133432][T15067] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[ 1727.141922][T15067] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1727.148595][T15067] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[ 1727.157855][T10063] bridge_slave_1: left allmulticast mode
[ 1727.158016][T10063] bridge_slave_1: left promiscuous mode
[ 1727.158215][T10063] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1727.178062][T15067] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1727.192919][T15067] EXT4-fs (loop0): Cannot turn on quotas: error -22
[ 1727.204328][T15067] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1905: bg 0: block 40: padding at end of block bitmap is not set
[ 1727.220297][T15067] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[ 1727.240142][T15067] EXT4-fs (loop0): 1 truncate cleaned up
[ 1727.257722][T10063] bridge_slave_0: left allmulticast mode
[ 1727.272361][T15067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1727.277034][T10063] bridge_slave_0: left promiscuous mode
[ 1727.291081][T10063] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1727.409118][T15067] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.1905: bad symlink.
[ 1727.488241][T10063] veth1_macvtap: left promiscuous mode
[ 1727.493992][T10063] veth0_macvtap: left promiscuous mode
[ 1727.499793][T10063] veth1_vlan: left promiscuous mode
[ 1727.517446][T10063] veth0_vlan: left promiscuous mode
[ 1727.592574][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1727.619808][T15084] loop3: detected capacity change from 0 to 736
[ 1727.827126][T12791] Bluetooth: hci3: command tx timeout
[ 1727.964985][T15084] rock: directory entry would overflow storage
[ 1727.977529][T15084] rock: sig=0x3b10, size=4, remaining=3
[ 1730.106496][T12791] Bluetooth: hci3: command tx timeout
[ 1730.647895][T10063] team0 (unregistering): Port device team_slave_1 removed
[ 1730.722894][T10063] team0 (unregistering): Port device team_slave_0 removed
[ 1730.803002][T10063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1730.886369][T10063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1731.525387][T10063] bond0 (unregistering): Released all slaves
[ 1731.681890][T15072] netlink: 'syz.5.1906': attribute type 2 has an invalid length.
[ 1731.741413][T15103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1912'.
[ 1731.760754][T14977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1731.783575][T14977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1731.838649][T14977] team0: Port device team_slave_0 added
[ 1731.903785][T14977] team0: Port device team_slave_1 added
[ 1732.027487][T14977] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1732.049963][T14977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1732.087925][T14977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1732.134405][T14977] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1732.144736][T14977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1732.195480][T14977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1732.220077][T15113] loop5: detected capacity change from 0 to 2048
[ 1732.282072][T15113] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1732.738819][T15118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1914'.
[ 1732.994031][T15121] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1733.346589][T14977] hsr_slave_0: entered promiscuous mode
[ 1733.363597][T14977] hsr_slave_1: entered promiscuous mode
[ 1733.370291][T14977] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1733.447039][T14977] Cannot create hsr debugfs directory
[ 1733.583764][T15127] loop5: detected capacity change from 0 to 256
[ 1733.660760][T15129] loop3: detected capacity change from 0 to 64
[ 1733.680901][T15127] FAT-fs (loop5): Directory bread(block 64) failed
[ 1733.694694][T10063] IPVS: stop unused estimator thread 0...
[ 1733.697914][T15127] FAT-fs (loop5): Directory bread(block 65) failed
[ 1733.723155][T15127] FAT-fs (loop5): Directory bread(block 66) failed
[ 1733.740248][T15127] FAT-fs (loop5): Directory bread(block 67) failed
[ 1733.778460][T15127] FAT-fs (loop5): Directory bread(block 68) failed
[ 1733.799996][T15127] FAT-fs (loop5): Directory bread(block 69) failed
[ 1733.814263][T15127] FAT-fs (loop5): Directory bread(block 70) failed
[ 1733.842666][T15127] FAT-fs (loop5): Directory bread(block 71) failed
[ 1733.866152][T15127] FAT-fs (loop5): Directory bread(block 72) failed
[ 1733.892316][T15127] FAT-fs (loop5): Directory bread(block 73) failed
[ 1733.956897][T15129] Trying to free block not in datazone
[ 1734.213567][T15134] loop5: detected capacity change from 0 to 256
[ 1734.233383][T14977] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1734.251011][T15134] exfat: Deprecated parameter 'namecase'
[ 1734.272977][T15134] exfat: Deprecated parameter 'namecase'
[ 1734.293522][T14977] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1734.323164][T14977] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1734.351794][T15134] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[ 1734.360094][T14977] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1734.620580][T14977] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1734.669716][T14977] 8021q: adding VLAN 0 to HW filter on device team0
[ 1734.684285][T13000] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1734.691576][T13000] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1734.747860][T13000] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1734.755199][T13000] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1734.777221][T15117] loop0: detected capacity change from 0 to 32768
[ 1735.714781][T14977] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1735.827344][T14977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1736.260851][T15149] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1922'.
[ 1736.862954][T15161] netlink: 'syz.5.1925': attribute type 5 has an invalid length.
[ 1736.898311][T15161] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1736.907297][T15161] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1736.916145][T15161] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1736.924909][T15161] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1736.986884][T15161] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1736.996401][T15161] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1737.005518][T15161] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1737.014642][T15161] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1737.726749][T15159] loop0: detected capacity change from 0 to 1024
[ 1737.929071][T15159] hfsplus: keylen 65060 too large
[ 1738.000139][T15159] hfsplus: xattr searching failed
[ 1738.099902][T15159] hfsplus: keylen 65060 too large
[ 1738.187392][T15159] hfsplus: xattr searching failed
[ 1738.284775][T14977] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1738.456224][T15178] loop5: detected capacity change from 0 to 2048
[ 1738.524787][T15178] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[ 1738.563281][T15178] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1738.815669][T15189] SET target dimension over the limit!
[ 1739.121773][T15200] loop3: detected capacity change from 0 to 128
[ 1739.169234][T15200] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[ 1739.328164][T15203] netlink: 'syz.5.1935': attribute type 5 has an invalid length.
[ 1739.375436][T15203] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1739.384853][T15203] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1739.393786][T15203] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1739.403255][T15203] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1739.445397][T15203] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1739.455003][T15203] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1739.465219][T15203] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1739.474610][T15203] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1739.878969][T15200] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[ 1740.195430][T15208] loop0: detected capacity change from 0 to 64
[ 1740.224096][T14977] veth0_vlan: entered promiscuous mode
[ 1740.228332][T15200] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (30846!=65535)
[ 1740.338785][T14977] veth1_vlan: entered promiscuous mode
[ 1740.357714][T15210] loop5: detected capacity change from 0 to 512
[ 1740.474634][T14977] veth0_macvtap: entered promiscuous mode
[ 1740.492185][T14977] veth1_macvtap: entered promiscuous mode
[ 1740.537872][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1740.559974][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1740.585256][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1740.607141][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1740.625126][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1740.637304][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1740.649908][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1740.666760][T14977] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1740.698674][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1740.719370][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1740.729918][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1740.741564][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1740.775022][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[ 1740.811906][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1740.846797][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1740.884256][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1740.900592][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[ 1740.921718][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1740.944498][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[ 1740.976113][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1740.997765][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3
[ 1741.020102][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1741.046755][T14977] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1741.074810][T15213] loop5: detected capacity change from 0 to 8192
[ 1741.090502][T14977] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1741.104519][T14977] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1741.123434][T14977] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1741.133138][T14977] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1741.348659][T15213] FAT-fs (loop5): error, corrupted directory (invalid entries)
[ 1741.414846][T10065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1741.431925][T10065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1741.495327][T10065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1741.505145][T10065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1741.570624][T15220] loop3: detected capacity change from 0 to 64
[ 1741.728474][T15220] Trying to free block not in datazone
[ 1741.787807][T15220] Trying to free block not in datazone
[ 1741.794241][T15220] Trying to free block not in datazone
[ 1741.813611][T15220] Trying to free block not in datazone
[ 1741.830607][T15220] Trying to free block not in datazone
[ 1741.843539][T15220] Trying to free block not in datazone
[ 1741.929205][T15220] Trying to free block not in datazone
[ 1741.985950][T15220] Trying to free block not in datazone
[ 1742.043362][T15220] Trying to free block not in datazone
[ 1742.658238][T15220] Trying to free block not in datazone
[ 1742.773498][T15220] Trying to free block not in datazone
[ 1742.800921][T15220] Trying to free block not in datazone
[ 1742.806665][T15220] minix_free_block (loop3:6): bit already cleared
[ 1742.814582][T15220] Trying to free block not in datazone
[ 1742.820505][T15220] Trying to free block not in datazone
[ 1742.826017][T15220] Trying to free block not in datazone
[ 1742.832222][T15220] minix_free_block (loop3:7): bit already cleared
[ 1742.838732][T15220] Trying to free block not in datazone
[ 1742.985863][T15220] Trying to free block not in datazone
[ 1743.023523][T15220] Trying to free block not in datazone
[ 1743.066909][T15220] Trying to free block not in datazone
[ 1743.110197][T15220] Trying to free block not in datazone
[ 1743.115874][T15220] minix_free_block (loop3:6): bit already cleared
[ 1743.178758][T15236] loop6: detected capacity change from 0 to 4096
[ 1743.219078][T15236] ntfs3: loop6: Different NTFS sector size (2048) and media sector size (512).
[ 1743.322104][T15236] ntfs3: loop6: Failed to initialize $Extend/$ObjId.
[ 1743.594853][T15228] loop5: detected capacity change from 0 to 32768
[ 1743.647254][T15215] loop0: detected capacity change from 0 to 32768
[ 1743.782089][T15228] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1743.804127][T15215] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1744.014382][T15260] netlink: 'syz.6.1946': attribute type 5 has an invalid length.
[ 1744.053691][T15260] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1744.062585][T15260] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1744.072389][T15260] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1744.081496][T15260] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1744.121854][T15260] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1744.131972][T15260] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1744.141106][T15260] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1744.150192][T15260] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1744.319550][T15215] XFS (loop0): AIL initialisation failed: error -12
[ 1745.001520][T15268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1947'.
[ 1745.021289][T15228] XFS (loop5): Ending clean mount
[ 1745.807757][T15215] XFS (loop0): log mount failed
[ 1745.852387][T13085] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1745.969608][T15272] netlink: 'syz.6.1948': attribute type 5 has an invalid length.
[ 1746.013256][T15272] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1746.022096][T15272] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1746.031262][T15272] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1746.040194][T15272] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1746.418213][T15272] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1746.427533][T15272] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1746.436661][T15272] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1746.445776][T15272] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1747.050324][T15274] loop5: detected capacity change from 0 to 256
[ 1747.426079][T15278] loop3: detected capacity change from 0 to 1024
[ 1747.944657][T12791] Bluetooth: hci0: unexpected event for opcode 0x200b
[ 1748.569301][T15292] loop0: detected capacity change from 0 to 1764
[ 1748.775387][T15292] iso9660: Corrupted directory entry in block 14 of inode 1920
[ 1749.031883][T15303] loop3: detected capacity change from 0 to 512
[ 1749.312301][T15303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback.
[ 1749.489346][T15303] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[ 1749.506433][T15295] loop5: detected capacity change from 0 to 32768
[ 1749.557405][T15296] loop6: detected capacity change from 0 to 32768
[ 1749.568489][T15313] loop0: detected capacity change from 0 to 16
[ 1749.619843][T15303] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 64512
[ 1749.654801][T15296] (syz.6.1955,15296,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1749.663649][T15313] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1749.748152][T15296] (syz.6.1955,15296,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1749.759867][T15303] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1957: Failed to acquire dquot type 0
[ 1749.991006][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0007-000000000000.
[ 1750.039575][T15296] JBD2: Ignoring recovery information on journal
[ 1750.286664][T15296] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1750.511714][T15323] loop0: detected capacity change from 0 to 128
[ 1750.550842][T15327] loop5: detected capacity change from 0 to 8
[ 1750.609576][T15325] loop3: detected capacity change from 0 to 8
[ 1750.683594][T15323] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1750.760593][T15325] SQUASHFS error: Unknown inode type 257 in squashfs_iget!
[ 1751.042251][T14977] ocfs2: Unmounting device (7,6) on (node local)
[ 1751.078085][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1753.403184][T15367] loop5: detected capacity change from 0 to 4096
[ 1753.481559][T15367] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[ 1753.758695][T15363] loop6: detected capacity change from 0 to 32768
[ 1753.871579][T15363] JBD2: Ignoring recovery information on journal
[ 1753.914041][T15363] jbd2_journal_bmap: journal block not found at offset 32 on loop6-75
[ 1753.964571][T15363] JBD2: bad block at offset 32
[ 1754.054520][T15363] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1754.090754][T15347] loop3: detected capacity change from 0 to 32768
[ 1754.188565][T15363] OCFS2: ERROR (device loop6): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total
[ 1754.210685][T15347] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1754.217018][T15363] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1754.230193][T15363] OCFS2: File system is now read-only.
[ 1754.240656][T15363] (syz.6.1971,15363,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[ 1754.255783][T15363] (syz.6.1971,15363,1):__ocfs2_claim_clusters:2365 ERROR: status = -30
[ 1754.266466][T15363] (syz.6.1971,15363,1):__ocfs2_claim_clusters:2373 ERROR: status = -30
[ 1754.276266][T15363] (syz.6.1971,15363,1):ocfs2_block_group_alloc_contig:433 ERROR: status = -30
[ 1754.286487][T15363] (syz.6.1971,15363,1):ocfs2_block_group_alloc:705 ERROR: status = -30
[ 1754.295939][T15363] (syz.6.1971,15363,1):ocfs2_block_group_alloc:758 ERROR: status = -30
[ 1754.316958][T15363] (syz.6.1971,15363,0):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30
[ 1754.330554][T15363] (syz.6.1971,15363,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30
[ 1754.361212][T15363] (syz.6.1971,15363,0):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30
[ 1754.381548][T15363] (syz.6.1971,15363,0):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30
[ 1754.411090][T15363] (syz.6.1971,15363,0):ocfs2_expand_inline_dir:2841 ERROR: status = -30
[ 1754.463292][T15363] (syz.6.1971,15363,0):ocfs2_extend_dir:3205 ERROR: status = -30
[ 1754.472004][T15363] (syz.6.1971,15363,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30
[ 1754.525705][T15363] (syz.6.1971,15363,0):ocfs2_mknod:298 ERROR: status = -30
[ 1754.581432][T15363] (syz.6.1971,15363,0):ocfs2_mknod:502 ERROR: status = -30
[ 1754.606339][T15363] (syz.6.1971,15363,0):ocfs2_mkdir:659 ERROR: status = -30
[ 1754.641519][T15347] XFS (loop3): Ending clean mount
[ 1754.750268][ T7974] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 
[ 1754.780186][ T7974] XFS (loop3): Unmount and run xfs_repair
[ 1754.819106][ T7974] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[ 1754.906181][ T7974] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[ 1754.915303][ T7974] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[ 1754.932113][ T7974] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[ 1754.943089][ T7974] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37  ..............@7
[ 1754.954141][ T7974] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[ 1754.971999][ T7974] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1754.995266][T14977] ocfs2: Unmounting device (7,6) on (node local)
[ 1755.002158][ T7974] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00  ................
[ 1755.025634][ T7974] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1755.073976][T15347] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74
[ 1755.113586][T15370] loop0: detected capacity change from 0 to 32768
[ 1755.226686][T15347] XFS (loop3): Failed to initialize disk quotas.
[ 1755.556086][ T5778] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1755.667122][T12791] Bluetooth: hci0: unexpected event for opcode 0x200b
[ 1756.493421][T15414] loop0: detected capacity change from 0 to 16
[ 1756.573146][T15414] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1757.552317][T15414] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89
[ 1757.655957][T15414] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89
[ 1757.678591][T15414] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89
[ 1757.755149][T15414] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89
[ 1757.807270][   T28] audit: type=1800 audit(1648.920:261): pid=15414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1983" name="file3" dev="loop0" ino=89 res=0 errno=0
[ 1758.170570][T15434] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1986'.
[ 1758.289072][T12791] Bluetooth: hci0: unexpected event for opcode 0x200b
[ 1759.073844][T15444] loop6: detected capacity change from 0 to 256
[ 1759.110325][T15444] exfat: Deprecated parameter 'utf8'
[ 1759.115891][T15444] exfat: Deprecated parameter 'namecase'
[ 1759.140448][T15444] exfat: Deprecated parameter 'namecase'
[ 1759.244342][T15444] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[ 1760.268803][T15454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1760.313390][T15455] loop0: detected capacity change from 0 to 16
[ 1760.365623][T15454] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1760.421267][T15455] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1760.506219][T15461] loop5: detected capacity change from 0 to 256
[ 1760.511749][T15455] erofs: (device loop0): z_erofs_readahead: readahead error at folio 3 @ nid 89
[ 1760.556660][T15455] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89
[ 1760.566716][T15455] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89
[ 1760.576382][T15455] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89
[ 1760.586082][T15455] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89
[ 1760.596387][   T28] audit: type=1800 audit(1651.505:262): pid=15455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1991" name="file3" dev="loop0" ino=89 res=0 errno=0
[ 1761.106974][T15461] FAT-fs (loop5): Directory bread(block 64) failed
[ 1761.163689][T15461] FAT-fs (loop5): Directory bread(block 65) failed
[ 1761.270750][T15461] FAT-fs (loop5): Directory bread(block 66) failed
[ 1761.462625][T15461] FAT-fs (loop5): Directory bread(block 67) failed
[ 1761.517500][T15461] FAT-fs (loop5): Directory bread(block 68) failed
[ 1761.524130][T15461] FAT-fs (loop5): Directory bread(block 69) failed
[ 1761.594770][T15461] FAT-fs (loop5): Directory bread(block 70) failed
[ 1761.616949][T15461] FAT-fs (loop5): Directory bread(block 71) failed
[ 1761.649179][T15461] FAT-fs (loop5): Directory bread(block 72) failed
[ 1761.665707][T15461] FAT-fs (loop5): Directory bread(block 73) failed
[ 1761.682298][T15466] loop6: detected capacity change from 0 to 2048
[ 1761.711980][T15466] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1761.821684][T15468] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1762.287655][T15483] loop6: detected capacity change from 0 to 736
[ 1762.301202][T15485] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1762.437102][T15489] capability: warning: `syz.3.2005' uses 32-bit capabilities (legacy support in use)
[ 1762.548501][T15491] loop5: detected capacity change from 0 to 256
[ 1762.661233][T15491] FAT-fs (loop5): Directory bread(block 64) failed
[ 1762.695462][T15491] FAT-fs (loop5): Directory bread(block 65) failed
[ 1762.727162][T15491] FAT-fs (loop5): Directory bread(block 66) failed
[ 1762.744253][T15491] FAT-fs (loop5): Directory bread(block 67) failed
[ 1762.756662][T15491] FAT-fs (loop5): Directory bread(block 68) failed
[ 1762.764229][T15491] FAT-fs (loop5): Directory bread(block 69) failed
[ 1762.772093][T15491] FAT-fs (loop5): Directory bread(block 70) failed
[ 1762.778906][T15491] FAT-fs (loop5): Directory bread(block 71) failed
[ 1762.802773][T15491] FAT-fs (loop5): Directory bread(block 72) failed
[ 1762.813530][T15491] FAT-fs (loop5): Directory bread(block 73) failed
[ 1762.862488][T15495] loop3: detected capacity change from 0 to 2048
[ 1762.976009][   T28] audit: type=1800 audit(1653.693:263): pid=15491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2007" name="file1" dev="loop5" ino=1048674 res=0 errno=0
[ 1763.042987][T15495] Alternate GPT is invalid, using primary GPT.
[ 1763.085278][T15495]  loop3: p1 p2 p3
[ 1763.113365][T15502] tipc: Can't bind to reserved service type 1
[ 1764.298277][T15521] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2018'.
[ 1764.956564][T13891] udevd[13891]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[ 1764.969415][T13993] udevd[13993]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[ 1768.347355][T15579] loop6: detected capacity change from 0 to 512
[ 1768.384801][T15579] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1768.439672][T15579] EXT4-fs error (device loop6): ext4_orphan_get:1430: comm syz.6.2035: bad orphan inode 131083
[ 1768.479347][T15579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1768.500334][   T23] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[ 1768.634491][T15586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2034'.
[ 1768.749088][   T23] usb 6-1: not running at top speed; connect to a high speed hub
[ 1768.836798][   T23] usb 6-1: config 45 has an invalid interface number: 2 but max is 0
[ 1768.866232][   T23] usb 6-1: config 45 has no interface number 0
[ 1768.946934][T14977] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1768.960133][   T23] usb 6-1: config 45 interface 2 has no altsetting 0
[ 1769.031512][   T23] usb 6-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb
[ 1769.136677][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1769.303739][   T23] usb 6-1: Product: syz
[ 1769.390296][   T23] usb 6-1: Manufacturer: syz
[ 1769.424506][   T23] usb 6-1: SerialNumber: syz
[ 1769.726138][T15597] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[ 1769.791006][   T23] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state.
[ 1769.824038][   T23] dvb-usb: bulk message failed: -22 (3/0)
[ 1769.901628][   T23] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1769.926401][   T23] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2)
[ 1769.963351][   T23] usb 6-1: media controller created
[ 1769.968734][   T23] dvb-usb: bulk message failed: -22 (5/0)
[ 1769.984170][   T23] dvb-usb: MAC address reading failed.
[ 1770.001131][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1770.084156][   T23] dvb-usb: bulk message failed: -22 (6/0)
[ 1770.091086][   T23] dvb-usb: bulk message failed: -22 (6/0)
[ 1770.111083][   T23] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2'
[ 1770.132378][   T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input35
[ 1770.133409][T15604] loop6: detected capacity change from 0 to 1024
[ 1770.178545][   T23] dvb-usb: schedule remote query interval to 100 msecs.
[ 1770.219685][   T23] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected.
[ 1770.252612][   T23] usb 6-1: USB disconnect, device number 5
[ 1770.420016][   T23] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected.
[ 1770.534335][T15611] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[ 1770.543945][T15611] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1771.072179][T15623] netlink: 'syz.6.2047': attribute type 5 has an invalid length.
[ 1771.114778][T15623] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1771.123686][T15623] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1771.132686][T15623] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1771.141539][T15623] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1771.234383][T15623] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1771.243874][T15623] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1771.252984][T15623] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1771.261926][T15623] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1771.805557][T15626] loop5: detected capacity change from 0 to 64
[ 1771.905661][T15589] loop3: detected capacity change from 0 to 32768
[ 1772.000538][T15589] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2039 (15589)
[ 1772.361125][T15589] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1772.536010][T15589] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[ 1772.606229][T15589] BTRFS info (device loop3): using free space tree
[ 1772.705081][T15589] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[ 1772.720449][T15589] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[ 1772.730546][T15589] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[ 1772.740971][T15589] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[ 1772.751001][T15589] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[ 1772.761182][T15589] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[ 1772.772038][T15589] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[ 1772.782411][T15589] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[ 1772.793099][T15589] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[ 1772.811570][T15589] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[ 1772.927543][T15589] BTRFS error (device loop3): open_ctree failed: -12
[ 1773.409269][T13993] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (13993)
[ 1774.033340][T15644] loop5: detected capacity change from 0 to 32768
[ 1774.340915][T15644] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1774.468600][T15644] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[ 1774.477359][T15644] BTRFS info (device loop5): using free space tree
[ 1774.604089][T15682] loop6: detected capacity change from 0 to 256
[ 1774.721279][T15682] FAT-fs (loop6): Directory bread(block 64) failed
[ 1774.727934][T15682] FAT-fs (loop6): Directory bread(block 65) failed
[ 1774.788404][T15644] BTRFS info (device loop5): enabling ssd optimizations
[ 1774.816634][T15682] FAT-fs (loop6): Directory bread(block 66) failed
[ 1774.823820][T15644] BTRFS info (device loop5): auto enabling async discard
[ 1774.847795][T15682] FAT-fs (loop6): Directory bread(block 67) failed
[ 1774.858264][T15703] loop0: detected capacity change from 0 to 8
[ 1774.906635][T15682] FAT-fs (loop6): Directory bread(block 68) failed
[ 1774.934858][T15682] FAT-fs (loop6): Directory bread(block 69) failed
[ 1774.972143][T15703] MTD: Attempt to mount non-MTD device "/dev/loop0"
[ 1774.986470][T15682] FAT-fs (loop6): Directory bread(block 70) failed
[ 1775.032123][T15682] FAT-fs (loop6): Directory bread(block 71) failed
[ 1775.048090][T15682] FAT-fs (loop6): Directory bread(block 72) failed
[ 1775.075083][T15682] FAT-fs (loop6): Directory bread(block 73) failed
[ 1775.910614][T13085] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1776.227829][T15712] erspan0: entered allmulticast mode
[ 1776.385458][T13891] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop5 scanned by udevd (13891)
[ 1776.822057][T15724] loop3: detected capacity change from 0 to 4096
[ 1777.741190][T15736] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1777.886232][T15724] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[ 1777.909366][T15741] netlink: 640 bytes leftover after parsing attributes in process `syz.6.2070'.
[ 1777.955422][T15724] Remounting filesystem read-only
[ 1779.341610][T15728] loop5: detected capacity change from 0 to 32768
[ 1779.397136][T15728] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1779.399587][T15755] loop3: detected capacity change from 0 to 1024
[ 1779.545302][T15755] hfsplus: hfsplus: Invalid key length: 30819
[ 1779.598635][T15728] XFS (loop5): Ending clean mount
[ 1779.622420][ T8760] XFS (loop5): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 
[ 1779.677775][ T8760] XFS (loop5): Unmount and run xfs_repair
[ 1780.188852][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1780.195819][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1780.467570][ T8760] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[ 1780.475633][ T8760] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[ 1780.484842][ T8760] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[ 1780.493819][ T8760] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[ 1780.503037][ T8760] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37  ..............@7
[ 1780.512039][ T8760] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[ 1780.540463][ T8760] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1780.566895][ T8760] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00  ................
[ 1780.594123][ T8760] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1780.619257][T15728] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74
[ 1780.638544][T15728] XFS (loop5): Failed to initialize disk quotas.
[ 1780.671220][T15773] loop6: detected capacity change from 0 to 8
[ 1780.695650][T13085] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1780.998572][T15780] loop6: detected capacity change from 0 to 256
[ 1781.104185][T15780] FAT-fs (loop6): Directory bread(block 64) failed
[ 1781.143506][T15780] FAT-fs (loop6): Directory bread(block 65) failed
[ 1781.150223][T15780] FAT-fs (loop6): Directory bread(block 66) failed
[ 1781.202458][T15780] FAT-fs (loop6): Directory bread(block 67) failed
[ 1781.225073][T15780] FAT-fs (loop6): Directory bread(block 68) failed
[ 1781.246369][T15780] FAT-fs (loop6): Directory bread(block 69) failed
[ 1781.258055][T15780] FAT-fs (loop6): Directory bread(block 70) failed
[ 1781.269312][T15780] FAT-fs (loop6): Directory bread(block 71) failed
[ 1781.304129][T15780] FAT-fs (loop6): Directory bread(block 72) failed
[ 1781.311087][T15780] FAT-fs (loop6): Directory bread(block 73) failed
[ 1781.634810][T15791] loop6: detected capacity change from 0 to 64
[ 1781.696645][T15791] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 1782.124496][T15784] loop5: detected capacity change from 0 to 32768
[ 1782.215825][T15784] jfs_strtoUCS: char2uni returned -22.
[ 1782.240753][T15784] charset = cp864, char = 0x9f
[ 1784.741467][T15819] loop5: detected capacity change from 0 to 16
[ 1784.781212][T15819] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1785.087908][T15800] loop6: detected capacity change from 0 to 32768
[ 1785.162713][T15800] (syz.6.2083,15800,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1785.239831][T15800] (syz.6.2083,15800,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1785.333125][T15800] JBD2: Ignoring recovery information on journal
[ 1785.472054][T15800] JBD2: journal reset failed
[ 1785.478932][T15800] (syz.6.2083,15800,1):ocfs2_journal_load:1167 ERROR: Failed to load journal!
[ 1785.542314][T15800] (syz.6.2083,15800,1):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4
[ 1785.881867][T15838] loop3: detected capacity change from 0 to 4096
[ 1785.956808][T15838] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[ 1786.149140][T15838] ntfs3: loop3: Failed to initialize $Extend/$ObjId.
[ 1786.448557][T15853] loop6: detected capacity change from 0 to 64
[ 1787.954590][T15869] loop6: detected capacity change from 0 to 2048
[ 1787.999793][T15869] NILFS (loop6): invalid segment: Inconsistency found
[ 1788.026778][T15869] NILFS (loop6): trying rollback from an earlier position
[ 1788.105639][T15869] NILFS (loop6): recovery complete
[ 1788.115802][T15872] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1789.274510][T15877] loop3: detected capacity change from 0 to 4096
[ 1789.462672][T15877] ntfs: volume version 3.1.
[ 1789.517048][T15889] loop5: detected capacity change from 0 to 4096
[ 1789.572933][T15889] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[ 1789.586363][T15895] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2102'.
[ 1789.762184][T15889] ntfs3: loop5: failed to convert "c46c" to iso8859-9
[ 1789.899361][T15877] ntfs: (device loop3): ntfs_truncate(): Inode 0x43 has unknown attribute type 0x80.  Aborting truncate.
[ 1790.171787][T15904] loop6: detected capacity change from 0 to 2048
[ 1790.241214][T15904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1790.470359][T14977] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1791.896845][T15931] loop6: detected capacity change from 0 to 512
[ 1791.966807][T15931] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1792.131290][T15931] EXT4-fs error (device loop6): ext4_get_inode_usage:888: inode #12: comm syz.6.2111: corrupted xattr block 6: invalid header
[ 1792.171785][T15931] EXT4-fs (loop6): Remounting filesystem read-only
[ 1792.213428][ T2942] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[ 1792.258331][ T2942] Quota error (device loop6): write_blk: dquota write failed
[ 1792.302798][ T2942] Quota error (device loop6): free_dqentry: Can't write quota data block 5
[ 1792.383739][T14977] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1792.405761][T15917] loop5: detected capacity change from 0 to 32768
[ 1792.416447][   T59] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[ 1792.477622][   T59] Quota error (device loop6): write_blk: dquota write failed
[ 1792.514530][   T59] Quota error (device loop6): free_dqentry: Can't write quota data block 5
[ 1793.482164][T15944] loop6: detected capacity change from 0 to 8
[ 1793.749481][T15944] SQUASHFS error: Unable to read directory block [26067d:ffff]
[ 1793.998414][T15951] loop3: detected capacity change from 0 to 256
[ 1794.116181][T15955] loop0: detected capacity change from 0 to 512
[ 1794.346818][T15958] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2117'.
[ 1794.404804][T12791] Bluetooth: hci0: unexpected event for opcode 0x200b
[ 1795.024029][T15955] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[ 1795.275195][T15955] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2118: iget: bogus i_mode (2)
[ 1795.326488][T15955] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2118: couldn't read orphan inode 15 (err -117)
[ 1795.385799][T15955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1796.408603][T15974] loop5: detected capacity change from 0 to 256
[ 1796.412867][T15955] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 13: comm syz.0.2118: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1
[ 1796.459002][T15960] loop6: detected capacity change from 0 to 32768
[ 1796.505407][T15974] FAT-fs (loop5): Directory bread(block 64) failed
[ 1796.519089][T15960] JBD2: Ignoring recovery information on journal
[ 1796.533115][T15955] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz.0.2118: directory missing '.'
[ 1796.560187][T15974] FAT-fs (loop5): Directory bread(block 65) failed
[ 1796.597435][T15974] FAT-fs (loop5): Directory bread(block 66) failed
[ 1796.611514][T15974] FAT-fs (loop5): Directory bread(block 67) failed
[ 1796.653688][T15974] FAT-fs (loop5): Directory bread(block 68) failed
[ 1796.660309][T15974] FAT-fs (loop5): Directory bread(block 69) failed
[ 1796.684596][T15960] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1796.710591][T15974] FAT-fs (loop5): Directory bread(block 70) failed
[ 1796.739102][T15974] FAT-fs (loop5): Directory bread(block 71) failed
[ 1796.757342][T15974] FAT-fs (loop5): Directory bread(block 72) failed
[ 1796.770485][T15974] FAT-fs (loop5): Directory bread(block 73) failed
[ 1796.819799][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1797.492952][T15981] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1797.502641][T15981] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1797.511807][T15981] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1797.520873][T15981] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1797.599090][T14977] ocfs2: Unmounting device (7,6) on (node local)
[ 1797.649638][T15981] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1797.658849][T15981] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1797.668151][T15981] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1797.677180][T15981] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1798.465225][T15988] loop6: detected capacity change from 0 to 256
[ 1798.499072][T15988] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[ 1798.584766][T15990] loop5: detected capacity change from 0 to 2048
[ 1798.630275][T15991] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1798.955209][T15997] loop3: detected capacity change from 0 to 256
[ 1799.261130][T16003] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2131'.
[ 1799.519803][T15997] FAT-fs (loop3): Directory bread(block 64) failed
[ 1799.783065][T15997] FAT-fs (loop3): Directory bread(block 65) failed
[ 1799.789847][T15997] FAT-fs (loop3): Directory bread(block 66) failed
[ 1799.979982][T15997] FAT-fs (loop3): Directory bread(block 67) failed
[ 1799.995265][T15997] FAT-fs (loop3): Directory bread(block 68) failed
[ 1800.008709][T15997] FAT-fs (loop3): Directory bread(block 69) failed
[ 1800.037775][T15997] FAT-fs (loop3): Directory bread(block 70) failed
[ 1800.059513][T15997] FAT-fs (loop3): Directory bread(block 71) failed
[ 1800.081450][T15997] FAT-fs (loop3): Directory bread(block 72) failed
[ 1800.106986][T15997] FAT-fs (loop3): Directory bread(block 73) failed
[ 1800.252429][T16012] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.2136'.
[ 1801.846410][T16022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1801.858656][T16022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1803.038243][T16032] loop6: detected capacity change from 0 to 32768
[ 1803.322833][T16038] loop3: detected capacity change from 0 to 2048
[ 1803.403697][T16042] loop5: detected capacity change from 0 to 64
[ 1803.610977][T16038] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1803.707111][T16044] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.2150'.
[ 1804.364754][T16045] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1804.527874][T16038] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=35184372097012, rec_len=8192, name_len=0
[ 1804.655593][T16038] Remounting filesystem read-only
[ 1804.668691][T16038] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=35184372097012, rec_len=8192, name_len=0
[ 1805.023292][T16056] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2157'.
[ 1805.568446][T16048] loop6: detected capacity change from 0 to 32768
[ 1805.919512][T16048] ERROR: (device loop6): dbAlloc: the hint is outside the map
[ 1805.919512][T16048] 
[ 1805.983545][T16048] ialloc: diAlloc returned -5!
[ 1806.968821][T16067] loop0: detected capacity change from 0 to 64
[ 1807.283050][T16067] MINIX-fs: deleted inode referenced: 6
[ 1807.355458][T16076] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2161'.
[ 1807.848876][T16067] MINIX-fs: deleted inode referenced: 6
[ 1808.145274][T16080] loop3: detected capacity change from 0 to 8192
[ 1808.158407][T16080] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1808.176290][T16080] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[ 1808.185776][T16080] REISERFS (device loop3): using ordered data mode
[ 1808.193480][T16080] reiserfs: using flush barriers
[ 1808.208711][T16080] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1808.226291][T16080] REISERFS (device loop3): checking transaction log (loop3)
[ 1808.543185][T16080] REISERFS (device loop3): Using tea hash to sort names
[ 1808.603141][T16080] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[ 1808.673758][T16080] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[ 1808.927417][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2168'.
[ 1808.969573][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2168'.
[ 1809.015895][T16083] loop6: detected capacity change from 0 to 32768
[ 1809.071025][T16083] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1809.420035][T16083] XFS (loop6): Ending clean mount
[ 1809.576854][T16113] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2173'.
[ 1810.085863][T16083] syz.6.2164: attempt to access beyond end of device
[ 1810.085863][T16083] loop6: rw=4096, sector=18446744073709551587, nr_sectors = 1 limit=32768
[ 1810.228861][T14977] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1810.279079][T16112] loop0: detected capacity change from 0 to 2048
[ 1810.716065][T16120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1810.755743][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1810.756105][T16120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1810.821901][T16122] syz.6.2175 (16122): drop_caches: 2
[ 1810.996357][    T9] usb 6-1: Using ep0 maxpacket: 16
[ 1811.017306][    T9] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[ 1811.025774][    T9] usb 6-1: config 1 has no interface number 0
[ 1811.058912][    T9] usb 6-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1811.069044][    T9] usb 6-1: config 1 interface 105 has no altsetting 0
[ 1811.117044][    T9] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 1811.130670][    T9] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1811.139974][    T9] usb 6-1: Product: syz
[ 1811.144203][    T9] usb 6-1: Manufacturer: syz
[ 1811.149467][    T9] usb 6-1: SerialNumber: syz
[ 1811.433318][    T9] aqc111: probe of 6-1:1.105 failed with error -22
[ 1811.697380][   T23] usb 6-1: USB disconnect, device number 6
[ 1811.997344][T16145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1812.036018][T16145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1812.321480][T16153] loop6: detected capacity change from 0 to 8192
[ 1812.330789][T16153] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1812.344599][T16153] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[ 1812.354808][T16153] REISERFS (device loop6): using ordered data mode
[ 1812.361826][T16153] reiserfs: using flush barriers
[ 1812.372993][T16153] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1812.391667][T16153] REISERFS (device loop6): checking transaction log (loop6)
[ 1812.435788][T16153] REISERFS (device loop6): Using r5 hash to sort names
[ 1812.477460][T16153] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[ 1812.532051][T16156] syz.0.2189 (16156): drop_caches: 2
[ 1812.602033][T16158] loop5: detected capacity change from 0 to 2048
[ 1812.672558][T16159] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1813.043596][T16159] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[ 1813.081895][T16159] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[ 1813.201363][T16168] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1813.210201][T16168] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1813.219052][T16168] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1813.227845][T16168] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1813.244743][T16159] Remounting filesystem read-only
[ 1813.299063][T12784] NILFS (loop5): discard dirty page: offset=0, ino=6
[ 1813.307511][T16168] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1813.317124][T16168] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1813.326243][T16168] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1813.335208][T16168] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1813.381365][T12784] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1813.467856][T12784] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1813.543451][T12784] NILFS (loop5): discard dirty block: blocknr=37, size=1024
[ 1813.606186][T12784] NILFS (loop5): discard dirty block: blocknr=38, size=1024
[ 1813.704038][T12784] NILFS (loop5): discard dirty page: offset=0, ino=12
[ 1813.744673][T12784] NILFS (loop5): discard dirty block: blocknr=17, size=1024
[ 1813.797773][T12784] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1813.852841][T12784] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1813.905580][T12784] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1814.012671][T13085] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[ 1814.021793][T13085] NILFS (loop5): discard dirty page: offset=0, ino=2
[ 1814.028932][T13085] NILFS (loop5): discard dirty block: blocknr=18, size=1024
[ 1814.036549][T13085] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1814.045633][T13085] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1814.054804][T13085] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1814.066101][T13085] NILFS (loop5): discard dirty page: offset=0, ino=5
[ 1814.073022][T13085] NILFS (loop5): discard dirty block: blocknr=41, size=1024
[ 1814.081462][T13085] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1814.090925][T13085] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1814.099942][T13085] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1814.109851][T13085] NILFS (loop5): discard dirty page: offset=0, ino=4
[ 1814.116892][T13085] NILFS (loop5): discard dirty block: blocknr=40, size=1024
[ 1814.124463][T13085] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1814.133537][T13085] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1814.142812][T13085] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1814.173155][T13085] NILFS (loop5): discard dirty page: offset=0, ino=3
[ 1814.197561][T13085] NILFS (loop5): discard dirty block: blocknr=42, size=1024
[ 1814.220481][T13085] NILFS (loop5): discard dirty block: blocknr=43, size=1024
[ 1814.249834][T13085] NILFS (loop5): discard dirty block: blocknr=44, size=1024
[ 1814.262399][T13085] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1814.301724][T13085] NILFS (loop5): discard dirty page: offset=131072, ino=3
[ 1814.311415][T13085] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1814.325100][T13085] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1814.335417][T13085] NILFS (loop5): discard dirty block: blocknr=46, size=1024
[ 1814.347527][T13085] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1814.480489][T16178] loop5: detected capacity change from 0 to 2048
[ 1814.540378][T16178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1814.691177][T13085] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1814.720020][ T8760] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1814.833562][T16185] syz.3.2201 (16185): drop_caches: 2
[ 1814.846014][T16187] loop5: detected capacity change from 0 to 128
[ 1814.900004][T16187] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1814.913370][T16187] hpfs: filesystem error: improperly stopped
[ 1814.925963][ T8760] usb 7-1: Using ep0 maxpacket: 8
[ 1814.933540][ T8760] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1814.947330][T16187] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1814.955238][T16187] hpfs: You really don't want any checks? You are crazy...
[ 1814.963888][ T8760] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1814.977033][T16187] hpfs: Code page index out of array
[ 1814.995572][ T8760] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1815.013534][T16187] hpfs: code page support is disabled
[ 1815.019306][T16187] hpfs: hpfs_map_4sectors(): unaligned read
[ 1815.036512][T16187] hpfs: hpfs_map_4sectors(): unaligned read
[ 1815.036702][ T8760] usb 7-1: New USB device found, idVendor=056a, idProduct=8928, bcdDevice=16.90
[ 1815.055129][T16187] hpfs: filesystem error: unable to find root dir
[ 1815.072443][ T8760] usb 7-1: New USB device strings: Mfr=61, Product=0, SerialNumber=0
[ 1815.094435][ T8760] usb 7-1: Manufacturer: syz
[ 1815.122577][ T8760] usb 7-1: config 0 descriptor??
[ 1815.291916][T16191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2202'.
[ 1815.397800][T16192] vlan1: entered allmulticast mode
[ 1815.430275][T16192] veth0_vlan: entered allmulticast mode
[ 1816.140327][ T8760] wacom 0003:056A:8928.0005: unknown main item tag 0x0
[ 1816.147397][ T8760] wacom 0003:056A:8928.0005: unknown main item tag 0x0
[ 1816.154550][ T8760] wacom 0003:056A:8928.0005: unknown main item tag 0x4
[ 1816.162382][ T8760] wacom 0003:056A:8928.0005: unknown main item tag 0x0
[ 1816.169337][ T8760] wacom 0003:056A:8928.0005: unknown main item tag 0x0
[ 1816.178489][ T8760] wacom 0003:056A:8928.0005: unknown main item tag 0x0
[ 1816.186126][ T8760] wacom 0003:056A:8928.0005: unknown main item tag 0x0
[ 1816.193218][ T8760] wacom 0003:056A:8928.0005: unknown main item tag 0x0
[ 1816.200154][ T8760] wacom 0003:056A:8928.0005: unknown main item tag 0x0
[ 1816.207234][ T8760] wacom 0003:056A:8928.0005: unknown main item tag 0x0
[ 1816.214185][ T8760] wacom 0003:056A:8928.0005: unknown main item tag 0x0
[ 1816.221920][ T8760] wacom 0003:056A:8928.0005: unknown main item tag 0x0
[ 1816.229009][ T8760] wacom 0003:056A:8928.0005: unknown main item tag 0x0
[ 1816.239813][ T8760] wacom 0003:056A:8928.0005: Unknown device_type for 'syz'. Ignoring.
[ 1816.271227][ T8760] usb 7-1: USB disconnect, device number 2
[ 1816.647903][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1817.548907][    T9] usb 6-1: Using ep0 maxpacket: 16
[ 1817.556424][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1817.568644][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1817.596002][    T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1817.605674][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1817.616450][    T9] usb 6-1: Product: syz
[ 1817.620686][    T9] usb 6-1: Manufacturer: syz
[ 1818.464320][    T9] usb 6-1: SerialNumber: syz
[ 1818.668264][T16212] loop3: detected capacity change from 0 to 64
[ 1818.680486][T16210] loop0: detected capacity change from 0 to 512
[ 1818.701570][T16210] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1818.759978][T16210] EXT4-fs error (device loop0): __ext4_iget:5078: inode #11: block 1: comm syz.0.2209: invalid block
[ 1818.773172][T16210] EXT4-fs (loop0): Remounting filesystem read-only
[ 1818.781167][T16210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1818.823256][    T9] usb 6-1: 0:2 : does not exist
[ 1818.835563][    T9] usb 6-1: unit 9 not found!
[ 1818.877664][    T9] usb 6-1: 4:0: cannot get min/max values for control 1 (id 4)
[ 1818.908546][    T9] usb 6-1: 4:0: cannot get min/max values for control 2 (id 4)
[ 1819.030701][T16206] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.2208'.
[ 1819.278978][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1819.544747][    T9] usb 6-1: 4:0: cannot get min/max values for control 4 (id 4)
[ 1819.566753][    T9] usb 6-1: 4:0: cannot get min/max values for control 5 (id 4)
[ 1819.602913][    T9] usb 6-1: 4:0: cannot get min/max values for control 6 (id 4)
[ 1819.670551][    T9] usb 6-1: USB disconnect, device number 7
[ 1820.701001][T12791] Bluetooth: hci0: unexpected event for opcode 0x200b
[ 1820.800552][T16227] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1820.809995][T16227] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1820.819004][T16227] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1820.827896][T16227] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1821.117295][T16230] loop5: detected capacity change from 0 to 4096
[ 1821.130295][T16227] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1821.139974][T16227] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1821.149892][T16227] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1821.160397][T16227] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1821.202548][T16236] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1821.270409][T16230] NILFS (loop5): cannot delete checkpoints: invalid range [0, 2147483649)
[ 1821.288315][T16230] NILFS (loop5): error -22 preparing GC: cannot delete checkpoints
[ 1821.921985][T16238] loop5: detected capacity change from 0 to 32768
[ 1823.214653][ T9845] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[ 1823.563948][ T9845] usb 7-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1823.666374][ T9845] usb 7-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1823.772197][ T9845] usb 7-1: config 2 interface 0 has no altsetting 0
[ 1823.831478][ T9845] usb 7-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[ 1823.851137][ T9845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1824.029627][T16257] loop3: detected capacity change from 0 to 2048
[ 1824.050277][T16257] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[ 1824.104585][T16257] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1824.700675][ T9845] elo 0003:04E7:0009.0006: hidraw1: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.6-1/input0
[ 1825.067612][ T9845] usb 7-1: USB disconnect, device number 3
[ 1825.296799][T16263] fido_id[16263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1825.374000][T16267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2227'.
[ 1825.519305][ T8760] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1826.233935][T16271] loop0: detected capacity change from 0 to 1024
[ 1826.323014][ T8760] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1826.353299][ T8760] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1826.381805][ T8760] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1826.400544][ T8760] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1826.416431][ T8760] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1826.428914][ T8760] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1826.446195][ T8760] usb 6-1: Manufacturer: syz
[ 1826.468899][ T8760] usb 6-1: config 0 descriptor??
[ 1827.512545][   T27] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1828.083248][ T8760] appleir 0003:05AC:8243.0007: item fetching failed at offset 0/1
[ 1828.092922][ T8760] appleir 0003:05AC:8243.0007: parse failed
[ 1828.099248][ T8760] appleir: probe of 0003:05AC:8243.0007 failed with error -22
[ 1828.145530][   T27] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1828.155081][   T27] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1828.163329][ T8760] usb 6-1: USB disconnect, device number 8
[ 1828.183822][   T27] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1828.198555][   T27] usb 7-1: string descriptor 0 read error: -22
[ 1828.205272][   T27] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[ 1828.225655][   T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1828.266650][T16291] loop0: detected capacity change from 0 to 256
[ 1828.274980][T16291] exfat: Deprecated parameter 'utf8'
[ 1828.302529][T16291] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x27df4e07, utbl_chksum : 0xe619d30d)
[ 1828.869202][   T27] snd-usb-audio: probe of 7-1:1.0 failed with error -71
[ 1828.967791][   T27] usb 7-1: USB disconnect, device number 4
[ 1829.278870][T16295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1829.288384][T16295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1829.423991][T16300] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2240'.
[ 1830.482220][T16305] loop6: detected capacity change from 0 to 256
[ 1830.519895][T16305] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1830.678686][T16307] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2243'.
[ 1830.849153][T16309] loop5: detected capacity change from 0 to 1024
[ 1830.868427][T16309] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1830.895553][T16309] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c801e018, mo2=0000]
[ 1830.936503][T16309] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 2: comm syz.5.2244: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1830.951273][T16313] loop6: detected capacity change from 0 to 64
[ 1830.965656][T16309] Quota error (device loop5): qtree_write_dquot: dquota write failed
[ 1830.993658][T16299] loop0: detected capacity change from 0 to 32768
[ 1830.997732][T16309] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 48: comm syz.5.2244: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1831.024465][T16309] Quota error (device loop5): v2_write_file_info: Can't write info structure
[ 1831.054436][T16309] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.2244: Failed to acquire dquot type 0
[ 1831.090494][T16313] hfs: request for non-existent node 131072 in B*Tree
[ 1831.109115][T16309] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5939: Corrupt filesystem
[ 1831.125307][T16313] hfs: request for non-existent node 131072 in B*Tree
[ 1831.153912][T16299] JBD2: Ignoring recovery information on journal
[ 1831.172526][T16309] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2244: mark_inode_dirty error
[ 1831.229904][T16309] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[ 1831.247880][T16309] EXT4-fs (loop5): 1 orphan inode deleted
[ 1831.261791][T13150] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1831.276294][T16309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1831.406257][T13150] Quota error (device loop5): remove_tree: Can't read quota data block 1
[ 1831.467548][T13150] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0
[ 1831.545357][T16299] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 1831.575176][T13085] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1831.579559][T16320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1831.593493][T16320] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1831.640616][T13150] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1831.676963][T13150] Quota error (device loop5): remove_tree: Can't read quota data block 1
[ 1831.698531][T13150] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0
[ 1831.724147][T13085] EXT4-fs error (device loop5): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1831.782129][T13085] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5939: Corrupt filesystem
[ 1831.812798][T13085] EXT4-fs error (device loop5): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error
[ 1831.996937][ T5775] ocfs2: Unmounting device (7,0) on (node local)
[ 1832.399671][T16331] loop6: detected capacity change from 0 to 1024
[ 1832.452328][ T5821] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1832.621649][T16335] loop3: detected capacity change from 0 to 2048
[ 1832.629780][T16335] UDF-fs: bad mount option "novrc" or missing value
[ 1832.668266][ T5821] usb 6-1: Using ep0 maxpacket: 32
[ 1832.675769][ T5821] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1832.695933][T13891] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1832.707300][ T5821] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1832.722521][ T5821] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1832.747382][ T5821] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[ 1832.756749][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[ 1832.772198][ T5821] usb 6-1: Product: syz
[ 1832.779369][ T5821] usb 6-1: Manufacturer: syz
[ 1832.779708][T16335] ÿÿÿÿÿÿ000000000: renamed from lo (while UP)
[ 1832.784142][ T5821] usb 6-1: SerialNumber: syz
[ 1832.826135][ T5821] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input39
[ 1832.906788][   T27] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1832.946267][T16339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2256'.
[ 1833.092492][    T9] usb 6-1: USB disconnect, device number 9
[ 1833.124787][   T27] usb 7-1: Using ep0 maxpacket: 16
[ 1833.140107][   T27] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 1833.154878][    T9] appletouch 6-1:1.0: input: appletouch disconnected
[ 1833.167768][   T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1833.183910][   T27] usb 7-1: Product: syz
[ 1833.202695][   T27] usb 7-1: Manufacturer: syz
[ 1833.207472][   T27] usb 7-1: SerialNumber: syz
[ 1833.217035][   T27] usb 7-1: config 0 descriptor??
[ 1833.227052][   T27] visor 7-1:0.0: Sony Clie 3.5 converter detected
[ 1833.403558][T16347] loop3: detected capacity change from 0 to 1024
[ 1833.499696][   T28] audit: type=1800 audit(1718.806:264): pid=16347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2260" name="file1" dev="loop3" ino=20 res=0 errno=0
[ 1833.679061][   T27] usb 7-1: clie_3_5_startup: get interface number bad return length: 0
[ 1833.710457][   T27] visor: probe of 7-1:0.0 failed with error -5
[ 1834.585169][ T8760] usb 7-1: USB disconnect, device number 5
[ 1835.062504][T16366] usb usb8: usbfs: process 16366 (syz.5.2266) did not claim interface 0 before use
[ 1835.230002][T16370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1835.258680][T16370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1835.369981][T16375] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2269'.
[ 1836.422180][T16382] loop6: detected capacity change from 0 to 4096
[ 1836.439388][T16382] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512).
[ 1836.481102][T16382] ntfs3: loop6: Failed to initialize $Extend/$Reparse.
[ 1836.743718][T14977] ntfs3: loop6: ino=1a, ntfs_sync_fs failed, -22.
[ 1837.077056][ T7974] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1837.462575][ T7974] usb 6-1: Using ep0 maxpacket: 32
[ 1837.480593][ T7974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1837.526300][T16392] loop6: detected capacity change from 0 to 1024
[ 1837.542690][ T7974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1837.575304][T16392] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1837.595018][ T7974] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1837.632715][T16392] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c801e018, mo2=0000]
[ 1837.641413][ T7974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1837.671399][T16392] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 2: comm syz.6.2276: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1837.719211][ T7974] usb 6-1: config 0 descriptor??
[ 1837.720127][T16392] Quota error (device loop6): qtree_write_dquot: dquota write failed
[ 1837.770158][T16392] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 48: comm syz.6.2276: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1837.818275][T16392] Quota error (device loop6): v2_write_file_info: Can't write info structure
[ 1837.833677][T16392] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.2276: Failed to acquire dquot type 0
[ 1837.850642][T16392] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5939: Corrupt filesystem
[ 1837.867094][T16399] autofs4:pid:16399:autofs_fill_super: called with bogus options
[ 1837.886249][T16392] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.2276: mark_inode_dirty error
[ 1837.902664][T16392] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[ 1837.921799][T16392] EXT4-fs (loop6): 1 orphan inode deleted
[ 1837.929380][T16392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1837.954720][   T11] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1837.993516][   T11] Quota error (device loop6): remove_tree: Can't read quota data block 1
[ 1838.012424][   T11] EXT4-fs error (device loop6): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 0
[ 1838.127840][T14977] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1838.145770][ T1131] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1838.174521][ T1131] Quota error (device loop6): remove_tree: Can't read quota data block 1
[ 1838.194782][ T1131] EXT4-fs error (device loop6): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 0
[ 1838.211253][T14977] EXT4-fs error (device loop6): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1838.230226][ T7974] ft260 0003:0403:6030.0008: item fetching failed at offset 0/2
[ 1838.242120][T14977] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5939: Corrupt filesystem
[ 1838.252666][ T7974] ft260 0003:0403:6030.0008: failed to parse HID
[ 1838.260232][T14977] EXT4-fs error (device loop6): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error
[ 1838.272925][ T7974] ft260: probe of 0003:0403:6030.0008 failed with error -22
[ 1838.438020][ T7974] usb 6-1: USB disconnect, device number 10
[ 1838.742614][T16411] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2281'.
[ 1839.992790][T16397] loop0: detected capacity change from 0 to 32768
[ 1840.737632][T16430] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2288'.
[ 1840.806861][T16430] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2288'.
[ 1840.867345][T16431] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2288'.
[ 1841.239025][T16440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2289'.
[ 1841.355531][    T8] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[ 1841.714560][    T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1841.891236][    T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1842.015014][    T8] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1842.097763][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1842.168018][    T8] usb 6-1: config 0 descriptor??
[ 1842.181992][    T8] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1842.189240][    T8] dvb-usb: bulk message failed: -22 (3/0)
[ 1842.293526][    T8] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1842.338303][    T8] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1842.357400][    T8] usb 6-1: media controller created
[ 1842.365500][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1842.423229][    T8] dvb-usb: bulk message failed: -22 (6/0)
[ 1842.448440][T16450] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2294'.
[ 1842.511075][    T8] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1842.684743][    T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input40
[ 1842.854034][    T8] dvb-usb: schedule remote query interval to 150 msecs.
[ 1842.914793][    T8] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1843.120031][    T8] usb 6-1: USB disconnect, device number 11
[ 1843.331641][    T8] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1843.628851][T16448] loop3: detected capacity change from 0 to 32768
[ 1843.653189][T16448] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2293 (16448)
[ 1843.827098][T16448] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1843.853941][T12791] Bluetooth: hci0: unexpected event for opcode 0x200b
[ 1843.892945][T16448] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[ 1843.938199][T16448] BTRFS warning (device loop3): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 1843.992914][T16448] BTRFS info (device loop3): enabling auto defrag
[ 1844.020130][T16448] BTRFS info (device loop3): use no compression
[ 1844.026640][T16448] BTRFS info (device loop3): max_inline at 0
[ 1844.074220][T16448] BTRFS info (device loop3): using free space tree
[ 1844.204012][T16454] loop6: detected capacity change from 0 to 32768
[ 1844.209108][T16448] BTRFS info (device loop3): enabling ssd optimizations
[ 1844.218491][T16448] BTRFS info (device loop3): auto enabling async discard
[ 1844.255178][T16454] JBD2: Ignoring recovery information on journal
[ 1844.370444][T16454] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1844.507680][ T5778] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1844.526519][T16454] OCFS2: ERROR (device loop6): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[ 1844.557711][T16454] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1844.610067][T16454] OCFS2: File system is now read-only.
[ 1844.615656][T16454] (syz.6.2296,16454,0):ocfs2_find_entry_dx:1029 ERROR: status = -30
[ 1844.900724][T14977] ocfs2: Unmounting device (7,6) on (node local)
[ 1846.245778][T16487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2301'.
[ 1846.734842][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1846.782607][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1847.195571][T16491] loop6: detected capacity change from 0 to 4096
[ 1847.228915][T16494] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2304'.
[ 1847.623653][T16495] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1848.182284][T16480] loop3: detected capacity change from 0 to 32768
[ 1848.467571][T16480] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[ 1848.768491][T12791] Bluetooth: hci0: unexpected event for opcode 0x200b
[ 1848.794186][T16480] XFS (loop3): Ending clean mount
[ 1849.063886][ T5778] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[ 1850.123703][T16529] loop0: detected capacity change from 0 to 512
[ 1850.219682][T16529] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1850.363721][T16534] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2315'.
[ 1850.448897][T16529] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.2314: bad orphan inode 131083
[ 1850.955870][T16529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1851.244547][T16536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1851.253570][T16536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1851.383462][T16540] loop5: detected capacity change from 0 to 164
[ 1851.390875][T16529] overlayfs: upper fs needs to support d_type.
[ 1851.444522][T16540] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[ 1851.463343][T16540] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[ 1851.525501][ T5775] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /524/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 1851.643891][T16524] loop6: detected capacity change from 0 to 32768
[ 1851.825584][T10205] bridge0: port 3(syz_tun) entered disabled state
[ 1851.902582][T16543] overlayfs: upper fs needs to support d_type.
[ 1852.095737][T16543] overlayfs: upper fs does not support tmpfile.
[ 1852.153440][T16543] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1852.215828][T16543] ERROR: (device loop6): dbAlloc: the hint is outside the map
[ 1852.215828][T16543] 
[ 1852.927484][T16543] ERROR: (device loop6): remounting filesystem as read-only
[ 1852.947538][T16543] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null.
[ 1853.191087][T10205] syz_tun (unregistering): left allmulticast mode
[ 1853.197641][T10205] syz_tun (unregistering): left promiscuous mode
[ 1853.204093][T10205] bridge0: port 3(syz_tun) entered disabled state
[ 1853.366582][T10205] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1853.527903][T10056] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1853.543598][T10056] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1853.680788][T10056] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1853.692146][T10056] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1853.758451][    T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[ 1853.830863][T10056] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1853.841583][T10056] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1854.063219][    T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1854.071369][    T9] usb 6-1: config 0 has no interface number 0
[ 1854.089539][T10056] netdevsim netdevsim0 ªªªªª» (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1854.104010][    T9] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[ 1854.124552][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1854.144895][T10056] netdevsim netdevsim0 ªªªªª» (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1854.146632][    T9] usb 6-1: Product: syz
[ 1854.181336][    T9] usb 6-1: Manufacturer: syz
[ 1854.191370][    T9] usb 6-1: SerialNumber: syz
[ 1854.201867][    T9] usb 6-1: config 0 descriptor??
[ 1854.222576][    T9] usb 6-1: selecting invalid altsetting 1
[ 1854.254533][    T9] dvb_ttusb_budget: ttusb_init_controller: error
[ 1854.267005][    T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1854.395062][T16561] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2324'.
[ 1855.265984][T16565] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[ 1855.287900][    T9] DVB: Unable to find symbol stv0299_attach()
[ 1855.391502][T16568] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1855.411771][T16568] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1855.423362][T16568] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1855.455641][T16568] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1855.463627][T16568] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1855.464523][    T9] DVB: Unable to find symbol tda8083_attach()
[ 1855.491905][T16568] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1855.512856][ T9845] usb 7-1: new low-speed USB device number 6 using dummy_hcd
[ 1855.559722][    T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[ 1855.571646][    T9] usb 6-1: USB disconnect, device number 12
[ 1855.588172][T10056] tipc: Left network mode
[ 1855.742654][ T9845] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1855.750762][ T9845] usb 7-1: config 0 has no interface number 0
[ 1855.795192][ T9845] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1855.839244][ T9845] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1855.860193][ T9845] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1855.891935][ T9845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1855.916870][ T9845] usb 7-1: config 0 descriptor??
[ 1855.925067][T16564] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1855.957215][ T9845] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1856.859910][T16581] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2332'.
[ 1857.257587][    C1] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1
[ 1857.277341][    T8] usb 7-1: USB disconnect, device number 6
[ 1857.745980][T12791] Bluetooth: hci1: command tx timeout
[ 1858.378352][T16606] loop3: detected capacity change from 0 to 512
[ 1858.408538][T16602] tipc: Started in network mode
[ 1858.413974][T16602] tipc: Node identity 41, cluster identity 5
[ 1858.429068][T16602] tipc: Node number set to 65
[ 1858.431277][T16606] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1858.448522][T16602] tipc: Cannot configure node identity twice
[ 1858.618485][T16606] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[ 1858.670877][T16567] chnl_net:caif_netlink_parms(): no params data found
[ 1858.881912][T16606] EXT4-fs (loop3): 1 truncate cleaned up
[ 1858.925162][T16606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1858.987444][T16607] loop6: detected capacity change from 0 to 32768
[ 1859.008597][T16607] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.2336 (16607)
[ 1859.069815][T16607] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1859.082261][T16607] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[ 1859.131310][T16607] BTRFS info (device loop6): using free space tree
[ 1859.400429][T16607] BTRFS info (device loop6): enabling ssd optimizations
[ 1859.431759][T16607] BTRFS info (device loop6): auto enabling async discard
[ 1859.575899][T10056] IPVS: stopping backup sync thread 12538 ...
[ 1859.601577][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1859.614291][   T28] audit: type=1800 audit(1742.902:265): pid=16607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2336" name="file2" dev="loop6" ino=261 res=0 errno=0
[ 1859.713495][T16567] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1859.743006][T16567] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1859.794122][T16567] bridge_slave_0: entered allmulticast mode
[ 1859.801775][T16567] bridge_slave_0: entered promiscuous mode
[ 1859.883700][T16567] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1859.933281][T16567] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1859.940616][T16567] bridge_slave_1: entered allmulticast mode
[ 1859.978917][T12791] Bluetooth: hci1: command tx timeout
[ 1860.027300][T16567] bridge_slave_1: entered promiscuous mode
[ 1860.088617][T14977] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1860.396373][T16567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1860.475971][T16567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1861.551239][T16659] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2345'.
[ 1861.663945][T16567] team0: Port device team_slave_0 added
[ 1861.732662][T16567] team0: Port device team_slave_1 added
[ 1862.230501][T12791] Bluetooth: hci1: command tx timeout
[ 1862.331411][T16567] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1862.445886][T16567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1862.744361][T16567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1862.909695][T16682] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2351'.
[ 1863.132925][T10056] hsr_slave_0: left promiscuous mode
[ 1863.166841][T10056] hsr_slave_1: left promiscuous mode
[ 1863.216750][T10056] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1863.233389][T16673] loop3: detected capacity change from 0 to 4096
[ 1863.271405][T10056] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1863.290024][T16673] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1863.365378][T12791] Bluetooth: hci0: unexpected event for opcode 0x200b
[ 1863.450204][T10056] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1863.503694][T10056] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1863.552772][T16673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1863.577048][T10056] batman_adv: batadv0: Interface deactivated: ipvlan2
[ 1863.622923][T10056] batman_adv: batadv0: Removing interface: ipvlan2
[ 1863.674726][T10056] bridge_slave_0: left allmulticast mode
[ 1863.722182][T10056] bridge_slave_0: left promiscuous mode
[ 1863.728150][T10056] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1863.788804][T10056] veth1_macvtap: left promiscuous mode
[ 1863.794607][T10056] veth0_macvtap: left promiscuous mode
[ 1863.801667][T10056] veth1_vlan: left promiscuous mode
[ 1863.815268][T10056] veth0_vlan: left promiscuous mode
[ 1863.914659][   T28] audit: type=1800 audit(1746.881:266): pid=16673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2347" name="file1" dev="loop3" ino=15 res=0 errno=0
[ 1864.042615][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1864.481838][T12791] Bluetooth: hci1: command tx timeout
[ 1866.602965][T10056] team0 (unregistering): Port device team_slave_1 removed
[ 1866.672227][T10056] team0 (unregistering): Port device team_slave_0 removed
[ 1866.754988][T10056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1866.839611][T10056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1866.927530][T10056] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 1867.464599][T10056] bond0 (unregistering): (slave dummy0): Releasing backup interface
[ 1867.553065][T10056] bond0 (unregistering): Released all slaves
[ 1867.710631][T16567] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1867.717794][T16567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1867.744880][T16567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1867.784955][T16696] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2355'.
[ 1868.095711][T16567] hsr_slave_0: entered promiscuous mode
[ 1868.120049][T16707] loop5: detected capacity change from 0 to 4096
[ 1868.129371][T16567] hsr_slave_1: entered promiscuous mode
[ 1868.182414][T16711] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1869.422732][T10056] IPVS: stop unused estimator thread 0...
[ 1869.662225][T16723] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2360'.
[ 1870.878900][T16567] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1870.983326][T16567] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1871.081267][T16567] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1871.164220][T16567] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1871.593499][T16567] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1871.648141][T16567] 8021q: adding VLAN 0 to HW filter on device team0
[ 1871.702615][T10063] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1871.709903][T10063] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1871.755887][T10063] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1871.763152][T10063] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1871.925068][T16567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1872.056647][T16741] loop5: detected capacity change from 0 to 32768
[ 1872.179426][T16726] loop6: detected capacity change from 0 to 40427
[ 1872.285128][T16741] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[ 1872.318157][T16726] F2FS-fs (loop6): invalid crc value
[ 1872.366861][T16726] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 1872.421772][T16741] JBD2: Ignoring recovery information on journal
[ 1872.586156][T16741] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 1872.681031][T16726] F2FS-fs (loop6): Start checkpoint disabled!
[ 1872.739923][T16567] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1872.848199][T16726] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[ 1873.013644][T13085] ocfs2: Unmounting device (7,5) on (node local)
[ 1874.223248][ T1131] kworker/u4:6: attempt to access beyond end of device
[ 1874.223248][ T1131] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1874.295208][ T1131] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[ 1874.410470][T16567] veth0_vlan: entered promiscuous mode
[ 1874.444557][T16567] veth1_vlan: entered promiscuous mode
[ 1874.551943][T16567] veth0_macvtap: entered promiscuous mode
[ 1874.572218][T16567] veth1_macvtap: entered promiscuous mode
[ 1874.634781][T16567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1874.669716][T16567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1874.699406][T16567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1874.723271][T16567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1874.743370][T16567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1874.764366][T16567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1874.786678][T16567] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1874.851990][T16567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1874.892124][T16567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1874.927202][T16567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[ 1874.951925][T16567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1874.971617][T16567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1874.983875][T16567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1874.997671][T16567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[ 1875.009348][T16567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1875.024389][T16796] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2374'.
[ 1875.054174][T16567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3
[ 1875.079104][T16567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1875.127252][T16567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1875.174586][T16567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1875.217765][T16567] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1875.329595][T16567] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1875.361196][T16567] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1875.386420][T16567] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1875.396598][T16378] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1875.428975][T16567] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1875.586864][T16798] loop6: detected capacity change from 0 to 4096
[ 1875.639898][T16798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1875.663395][T16378] usb 6-1: Using ep0 maxpacket: 32
[ 1875.693822][T16378] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[ 1875.731651][T16378] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1875.785200][T16378] usb 6-1: Product: syz
[ 1875.796601][T16378] usb 6-1: Manufacturer: syz
[ 1875.816922][T16378] usb 6-1: SerialNumber: syz
[ 1875.840785][T16378] usb 6-1: config 0 descriptor??
[ 1875.880108][T10056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1875.894690][T16378] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[ 1875.938759][T10056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1875.957008][T14977] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1875.959410][T16378] dvb-usb: bulk message failed: -22 (4/0)
[ 1875.973527][T16378] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1875.987949][T16378] dvb-usb: bulk message failed: -22 (5/0)
[ 1875.993754][T16378] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1876.055780][T16378] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1876.087285][T10063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1876.103490][T10063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1876.114541][T16378] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[ 1876.148724][T16378] usb 6-1: media controller created
[ 1876.164528][T16795] dvb-usb: bulk message failed: -22 (7/0)
[ 1876.196440][T16795] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[ 1876.242571][T16795] ttusb2: i2c transfer failed.
[ 1876.265678][T16378] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1876.339155][T16378] usb 6-1: selecting invalid altsetting 3
[ 1876.360585][T16378] ttusb2: set interface to alts=3 failed
[ 1876.454514][T16813] loop7: detected capacity change from 0 to 512
[ 1876.523129][T16813] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1876.567265][T16378] DVB: Unable to find symbol tda10086_attach()
[ 1876.576975][T16813] EXT4-fs (loop7): orphan cleanup on readonly fs
[ 1876.607844][T16378] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[ 1876.636513][T16378] dvb-usb: bulk message failed: -22 (4/0)
[ 1876.642384][T16378] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1876.681950][T16378] dvb-usb: bulk message failed: -22 (5/0)
[ 1876.687959][T16378] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1876.705440][T16813] EXT4-fs error (device loop7): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[ 1876.738983][T16813] EXT4-fs error (device loop7): ext4_do_update_inode:5255: inode #12: comm syz.7.2326: corrupted inode contents
[ 1876.752051][T16378] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[ 1876.770686][T16378] usb 6-1: USB disconnect, device number 13
[ 1876.791361][T16813] EXT4-fs error (device loop7): ext4_dirty_inode:6143: inode #12: comm syz.7.2326: mark_inode_dirty error
[ 1876.836313][T16813] EXT4-fs error (device loop7): ext4_do_update_inode:5255: inode #12: comm syz.7.2326: corrupted inode contents
[ 1876.892707][T16813] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.2326: mark_inode_dirty error
[ 1876.939524][T16378] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[ 1876.966001][T16813] EXT4-fs error (device loop7): ext4_do_update_inode:5255: inode #12: comm syz.7.2326: corrupted inode contents
[ 1877.022022][T16813] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[ 1877.070301][T16813] EXT4-fs error (device loop7): ext4_do_update_inode:5255: inode #12: comm syz.7.2326: corrupted inode contents
[ 1877.110624][T16813] EXT4-fs error (device loop7): ext4_truncate:4301: inode #12: comm syz.7.2326: mark_inode_dirty error
[ 1877.169229][T16813] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem
[ 1877.220158][T16813] EXT4-fs (loop7): 1 truncate cleaned up
[ 1877.253954][T13000] Quota error (device loop7): remove_tree: Cycle in quota tree detected: block 3 index 0
[ 1877.290807][T13000] EXT4-fs error (device loop7): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 1
[ 1877.327968][T16813] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1877.504699][T16832] loop5: detected capacity change from 0 to 4096
[ 1877.587272][T16567] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1877.848053][T16378] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1878.078808][T16378] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1878.101502][T16378] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1878.124958][T16378] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1878.183219][T16378] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1878.227104][T16378] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1878.253196][T16378] usb 7-1: Quirk or no altest; falling back to MIDI 1.0
[ 1878.274158][T16378] usb 7-1: invalid MIDI out EP 0
[ 1878.600783][T16378] snd-usb-audio: probe of 7-1:27.0 failed with error -22
[ 1878.658227][T16378] usb 7-1: USB disconnect, device number 7
[ 1879.145401][T16880] netlink: 'syz.3.2395': attribute type 2 has an invalid length.
[ 1879.158298][T16880] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2395'.
[ 1879.278472][T16882] loop5: detected capacity change from 0 to 2048
[ 1879.316089][T16882] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1879.329971][T16882] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[ 1879.370575][T16882] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1879.481505][T16867] loop7: detected capacity change from 0 to 32768
[ 1879.534827][T16867] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop7 scanned by syz.7.2393 (16867)
[ 1879.598738][T16867] BTRFS info (device loop7): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 1879.638336][T16867] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[ 1879.680789][T16867] BTRFS info (device loop7): enabling ssd optimizations
[ 1879.697991][T16867] BTRFS info (device loop7): not using ssd optimizations
[ 1879.715340][T16867] BTRFS info (device loop7): turning off barriers
[ 1879.723897][T16880] team0: Port device dummy0 removed
[ 1879.729897][T16867] BTRFS info (device loop7): using free space tree
[ 1880.874029][T16567] BTRFS info (device loop7): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 1881.497448][T16930] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2406'.
[ 1881.677699][T16932] netlink: 'syz.7.2404': attribute type 2 has an invalid length.
[ 1881.692928][T13993] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 10 /dev/loop7 scanned by udevd (13993)
[ 1882.260339][T16938] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2408'.
[ 1882.971349][T16966] loop7: detected capacity change from 0 to 16
[ 1883.017403][T16966] erofs: (device loop7): mounted with root inode @ nid 36.
[ 1883.078247][T16966] syz.7.2416: attempt to access beyond end of device
[ 1883.078247][T16966] loop7: rw=524288, sector=34359736328, nr_sectors = 16 limit=16
[ 1883.182475][T16966] erofs: (device loop7): z_erofs_readahead: readahead error at folio 4 @ nid 89
[ 1883.213197][T16966] syz.7.2416: attempt to access beyond end of device
[ 1883.213197][T16966] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16
[ 1883.247747][T16966] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -4084 in[4096, 0] out[8192]
[ 1883.274469][   T28] audit: type=1800 audit(1764.754:267): pid=16966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2416" name="file2" dev="loop7" ino=89 res=0 errno=0
[ 1884.289919][T16988] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2421'.
[ 1885.356846][T16971] loop7: detected capacity change from 0 to 32768
[ 1885.526653][T16971] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[ 1885.656633][T16978] loop3: detected capacity change from 0 to 32768
[ 1885.896874][T16567] ocfs2: Unmounting device (7,7) on (node local)
[ 1886.029216][T16978] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1886.781289][T17019] loop6: detected capacity change from 0 to 2048
[ 1886.823922][T17020] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1886.886384][T17001] loop5: detected capacity change from 0 to 32768
[ 1886.910585][   T28] audit: type=1800 audit(1768.114:268): pid=17019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2426" name="file2" dev="loop6" ino=16 res=0 errno=0
[ 1886.949254][T17001] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.2423 (17001)
[ 1887.049826][ T5778] ocfs2: Unmounting device (7,3) on (node local)
[ 1887.059857][T17001] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1887.102734][T17001] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[ 1887.176684][T17001] BTRFS info (device loop5): using free space tree
[ 1887.655318][T17001] BTRFS info (device loop5): enabling ssd optimizations
[ 1887.699855][T17001] BTRFS info (device loop5): auto enabling async discard
[ 1887.711267][T17048] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.2428'.
[ 1887.849139][   T28] audit: type=1800 audit(1768.982:269): pid=17001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2423" name="file2" dev="loop5" ino=261 res=0 errno=0
[ 1888.075903][T17053] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2430'.
[ 1888.992082][T13085] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1889.608062][T17065] loop6: detected capacity change from 0 to 512
[ 1889.647911][T17065] FAT-fs (loop6): Directory bread(block 199916) failed
[ 1889.658866][T17065] FAT-fs (loop6): Directory bread(block 199917) failed
[ 1889.681788][T17065] FAT-fs (loop6): Directory bread(block 199918) failed
[ 1889.720705][T17065] FAT-fs (loop6): Directory bread(block 199919) failed
[ 1889.727709][T17065] FAT-fs (loop6): Directory bread(block 199920) failed
[ 1889.736138][T17065] FAT-fs (loop6): Directory bread(block 199921) failed
[ 1889.744122][T17065] FAT-fs (loop6): Directory bread(block 199922) failed
[ 1889.751065][T17065] FAT-fs (loop6): Directory bread(block 199923) failed
[ 1889.934368][T17070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2436'.
[ 1890.393287][T17085] loop7: detected capacity change from 0 to 512
[ 1890.426690][T17085] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1890.545807][T17085] EXT4-fs error (device loop7): ext4_get_verity_descriptor_location:335: inode #15: comm syz.7.2442: verity file corrupted; can't find descriptor
[ 1890.623522][T17085] fs-verity (loop7, inode 15): Error -117 getting verity descriptor size
[ 1890.734402][T16567] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1890.906831][T17095] loop7: detected capacity change from 0 to 256
[ 1890.980031][T17095] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d)
[ 1891.312482][T16378] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1891.369810][T17100] syz.7.2448[17100] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1891.376850][T17100] syz.7.2448[17100] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1891.478288][T17093] loop6: detected capacity change from 0 to 32768
[ 1891.528790][T17093] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.2445 (17093)
[ 1891.529610][T16378] usb 6-1: Using ep0 maxpacket: 32
[ 1891.563202][T17093] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1891.581135][T17093] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[ 1891.583316][T16378] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1891.591461][T17093] BTRFS info (device loop6): using free space tree
[ 1891.647988][T16378] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1891.678014][T16378] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1891.713513][T16378] usb 6-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00
[ 1891.722661][T16378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1891.809157][T17093] BTRFS info (device loop6): enabling ssd optimizations
[ 1891.824928][T17093] BTRFS info (device loop6): auto enabling async discard
[ 1891.845319][T16378] usb 6-1: config 0 descriptor??
[ 1892.162422][T14977] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1892.313059][T16378] hid (null): unknown global tag 0xa3
[ 1892.334730][T16378] lg-g15 0003:046D:0A07.0009: unexpected long global item
[ 1892.363134][T16378] lg-g15: probe of 0003:046D:0A07.0009 failed with error -22
[ 1892.692587][ T5780] usb 6-1: USB disconnect, device number 14
[ 1892.889844][T17145] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.2451'.
[ 1893.565822][T17154] loop3: detected capacity change from 0 to 512
[ 1893.834658][T17154] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.2455: ea_inode file size=16777216 entry size=6
[ 1893.945256][T17154] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 1894.052507][T17154] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.2455: iget: bad extra_isize 90 (inode size 256)
[ 1894.070243][T17154] EXT4-fs (loop3): Remounting filesystem read-only
[ 1894.077490][T17154] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -5)
[ 1894.086668][T17154] EXT4-fs (loop3): 1 orphan inode deleted
[ 1894.093800][T17154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1895.185927][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1895.221315][T17151] loop7: detected capacity change from 0 to 40427
[ 1895.252770][T17151] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288)
[ 1895.270111][T17151] F2FS-fs (loop7): invalid crc value
[ 1895.315649][T17171] 
[ 1895.318055][T17171] ======================================================
[ 1895.325111][T17171] WARNING: possible circular locking dependency detected
[ 1895.332183][T17171] syzkaller #0 Not tainted
[ 1895.336724][T17171] ------------------------------------------------------
[ 1895.343781][T17171] syz.6.2461/17171 is trying to acquire lock:
[ 1895.349891][T17171] ffffffff976a3458 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x67/0x230
[ 1895.360126][T17171] 
[ 1895.360126][T17171] but task is already holding lock:
[ 1895.367634][T17171] ffff88802da8c0b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x3b/0x100
[ 1895.378149][T17171] 
[ 1895.378149][T17171] which lock already depends on the new lock.
[ 1895.378149][T17171] 
[ 1895.388651][T17171] 
[ 1895.388651][T17171] the existing dependency chain (in reverse order) is:
[ 1895.397703][T17171] 
[ 1895.397703][T17171] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}:
[ 1895.405993][T17171]        __mutex_lock+0x136/0xcc0
[ 1895.411173][T17171]        nf_tables_dumpreset_obj+0x72/0xa0
[ 1895.417010][T17171]        netlink_dump+0x747/0xe50
[ 1895.422138][T17171]        __netlink_dump_start+0x5f1/0x810
[ 1895.427885][T17171]        nft_netlink_dump_start_rcu+0xdb/0x1a0
[ 1895.434070][T17171]        nf_tables_getobj_reset+0x1e1/0x630
[ 1895.439989][T17171]        nfnetlink_rcv_msg+0x8a4/0x12b0
[ 1895.445671][T17171]        netlink_rcv_skb+0x241/0x4d0
[ 1895.451157][T17171]        nfnetlink_rcv+0x2c9/0x24a0
[ 1895.456391][T17171]        netlink_unicast+0x751/0x8d0
[ 1895.461706][T17171]        netlink_sendmsg+0x8d0/0xbf0
[ 1895.467017][T17171]        ____sys_sendmsg+0x5ba/0x960
[ 1895.472334][T17171]        ___sys_sendmsg+0x2a6/0x360
[ 1895.477560][T17171]        __se_sys_sendmsg+0x1c2/0x2b0
[ 1895.482969][T17171]        do_syscall_64+0x55/0xb0
[ 1895.487947][T17171]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1895.494407][T17171] 
[ 1895.494407][T17171] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}:
[ 1895.502697][T17171]        __mutex_lock+0x136/0xcc0
[ 1895.507762][T17171]        __netlink_dump_start+0xf4/0x810
[ 1895.513426][T17171]        ip_set_dump+0x15c/0x1f0
[ 1895.518407][T17171]        nfnetlink_rcv_msg+0xbf0/0x12b0
[ 1895.524002][T17171]        netlink_rcv_skb+0x241/0x4d0
[ 1895.529319][T17171]        nfnetlink_rcv+0x2c9/0x24a0
[ 1895.534545][T17171]        netlink_unicast+0x751/0x8d0
[ 1895.539956][T17171]        netlink_sendmsg+0x8d0/0xbf0
[ 1895.545282][T17171]        ____sys_sendmsg+0x5ba/0x960
[ 1895.550595][T17171]        ___sys_sendmsg+0x2a6/0x360
[ 1895.555995][T17171]        __se_sys_sendmsg+0x1c2/0x2b0
[ 1895.561400][T17171]        do_syscall_64+0x55/0xb0
[ 1895.566378][T17171]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1895.572827][T17171] 
[ 1895.572827][T17171] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}:
[ 1895.580679][T17171]        __lock_acquire+0x2df1/0x7d40
[ 1895.586082][T17171]        lock_acquire+0x19e/0x420
[ 1895.591139][T17171]        __mutex_lock+0x136/0xcc0
[ 1895.596287][T17171]        ip_set_nfnl_get_byindex+0x67/0x230
[ 1895.602302][T17171]        set_match_v1_checkentry+0x71/0x230
[ 1895.608233][T17171]        xt_check_match+0x4ea/0xc50
[ 1895.613529][T17171]        __nft_match_init+0x67a/0x8d0
[ 1895.618973][T17171]        nf_tables_newrule+0x176c/0x2880
[ 1895.624722][T17171]        nfnetlink_rcv+0x113e/0x24a0
[ 1895.630034][T17171]        netlink_unicast+0x751/0x8d0
[ 1895.635366][T17171]        netlink_sendmsg+0x8d0/0xbf0
[ 1895.640692][T17171]        ____sys_sendmsg+0x5ba/0x960
[ 1895.646013][T17171]        ___sys_sendmsg+0x2a6/0x360
[ 1895.651245][T17171]        __se_sys_sendmsg+0x1c2/0x2b0
[ 1895.656659][T17171]        do_syscall_64+0x55/0xb0
[ 1895.661716][T17171]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1895.668171][T17171] 
[ 1895.668171][T17171] other info that might help us debug this:
[ 1895.668171][T17171] 
[ 1895.678422][T17171] Chain exists of:
[ 1895.678422][T17171]   nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex
[ 1895.678422][T17171] 
[ 1895.693057][T17171]  Possible unsafe locking scenario:
[ 1895.693057][T17171] 
[ 1895.700557][T17171]        CPU0                    CPU1
[ 1895.705953][T17171]        ----                    ----
[ 1895.711520][T17171]   lock(&nft_net->commit_mutex);
[ 1895.716574][T17171]                                lock(nlk_cb_mutex-NETFILTER);
[ 1895.724141][T17171]                                lock(&nft_net->commit_mutex);
[ 1895.731709][T17171]   lock(nfnl_subsys_ipset);
[ 1895.736336][T17171] 
[ 1895.736336][T17171]  *** DEADLOCK ***
[ 1895.736336][T17171] 
[ 1895.744911][T17171] 1 lock held by syz.6.2461/17171:
[ 1895.750142][T17171]  #0: ffff88802da8c0b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x3b/0x100
[ 1895.761014][T17171] 
[ 1895.761014][T17171] stack backtrace:
[ 1895.766948][T17171] CPU: 1 PID: 17171 Comm: syz.6.2461 Not tainted syzkaller #0
[ 1895.774707][T17171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1895.784909][T17171] Call Trace:
[ 1895.788310][T17171]  <TASK>
[ 1895.791282][T17171]  dump_stack_lvl+0x18c/0x250
[ 1895.796012][T17171]  ? load_image+0x420/0x420
[ 1895.800552][T17171]  ? show_regs_print_info+0x20/0x20
[ 1895.805838][T17171]  ? print_circular_bug+0x12b/0x1a0
[ 1895.811273][T17171]  check_noncircular+0x2fc/0x400
[ 1895.816359][T17171]  ? print_deadlock_bug+0x5d0/0x5d0
[ 1895.821598][T17171]  ? lockdep_lock+0xf5/0x230
[ 1895.826255][T17171]  ? _find_first_zero_bit+0xd3/0x100
[ 1895.831627][T17171]  __lock_acquire+0x2df1/0x7d40
[ 1895.836517][T17171]  ? mark_lock+0x94/0x320
[ 1895.840884][T17171]  ? verify_lock_unused+0x140/0x140
[ 1895.846133][T17171]  ? __lock_acquire+0x1273/0x7d40
[ 1895.851196][T17171]  lock_acquire+0x19e/0x420
[ 1895.855731][T17171]  ? ip_set_nfnl_get_byindex+0x67/0x230
[ 1895.861314][T17171]  ? __might_sleep+0xe0/0xe0
[ 1895.865977][T17171]  ? read_lock_is_recursive+0x20/0x20
[ 1895.871394][T17171]  __mutex_lock+0x136/0xcc0
[ 1895.875941][T17171]  ? ip_set_nfnl_get_byindex+0x67/0x230
[ 1895.881536][T17171]  ? ip_set_nfnl_get_byindex+0x67/0x230
[ 1895.887117][T17171]  ? ip_set_pernet+0x23/0x230
[ 1895.891824][T17171]  ? mutex_lock_nested+0x20/0x20
[ 1895.896810][T17171]  ? ip_set_pernet+0x23/0x230
[ 1895.901520][T17171]  ? ip_set_pernet+0x23/0x230
[ 1895.906232][T17171]  ip_set_nfnl_get_byindex+0x67/0x230
[ 1895.911653][T17171]  set_match_v1_checkentry+0x71/0x230
[ 1895.917056][T17171]  xt_check_match+0x4ea/0xc50
[ 1895.921770][T17171]  ? xt_check_proc_name+0x270/0x270
[ 1895.927008][T17171]  ? __stack_depot_save+0x1f/0x630
[ 1895.932178][T17171]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1895.938209][T17171]  __nft_match_init+0x67a/0x8d0
[ 1895.943358][T17171]  ? ___sys_sendmsg+0x2a6/0x360
[ 1895.948251][T17171]  ? nft_match_large_dump+0x50/0x50
[ 1895.953503][T17171]  ? nf_tables_newrule+0x150e/0x2880
[ 1895.958816][T17171]  ? rcu_is_watching+0x15/0xb0
[ 1895.963617][T17171]  ? nf_tables_newrule+0x150e/0x2880
[ 1895.968931][T17171]  ? __kmalloc+0xe2/0x230
[ 1895.973311][T17171]  nf_tables_newrule+0x176c/0x2880
[ 1895.978454][T17171]  ? nf_tables_delchain+0x1060/0x1060
[ 1895.983871][T17171]  ? __lock_acquire+0x7d40/0x7d40
[ 1895.988936][T17171]  ? mutex_unlock+0x10/0x10
[ 1895.993477][T17171]  ? __nla_parse+0x40/0x50
[ 1895.997926][T17171]  nfnetlink_rcv+0x113e/0x24a0
[ 1896.002820][T17171]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[ 1896.008414][T17171]  ? __lock_acquire+0x7d40/0x7d40
[ 1896.013474][T17171]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1896.018702][T17171]  netlink_unicast+0x751/0x8d0
[ 1896.023502][T17171]  netlink_sendmsg+0x8d0/0xbf0
[ 1896.028317][T17171]  ? netlink_getsockopt+0x590/0x590
[ 1896.033541][T17171]  ? aa_sock_msg_perm+0x94/0x150
[ 1896.038520][T17171]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1896.043844][T17171]  ? security_socket_sendmsg+0x80/0xa0
[ 1896.049513][T17171]  ? netlink_getsockopt+0x590/0x590
[ 1896.054750][T17171]  ____sys_sendmsg+0x5ba/0x960
[ 1896.059552][T17171]  ? __asan_memset+0x22/0x40
[ 1896.064267][T17171]  ? __sys_sendmsg_sock+0x30/0x30
[ 1896.069432][T17171]  ? __import_iovec+0x5f2/0x850
[ 1896.074334][T17171]  ? import_iovec+0x73/0xa0
[ 1896.078884][T17171]  ___sys_sendmsg+0x2a6/0x360
[ 1896.083702][T17171]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1896.088601][T17171]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1896.093490][T17171]  ? __x64_sys_sendmsg+0x80/0x80
[ 1896.098466][T17171]  ? lockdep_hardirqs_on+0x98/0x150
[ 1896.103709][T17171]  do_syscall_64+0x55/0xb0
[ 1896.108158][T17171]  ? clear_bhb_loop+0x40/0x90
[ 1896.112860][T17171]  ? clear_bhb_loop+0x40/0x90
[ 1896.117572][T17171]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1896.123501][T17171] RIP: 0033:0x7f50b239ce59
[ 1896.127949][T17171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1896.147718][T17171] RSP: 002b:00007f50b31e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1896.156171][T17171] RAX: ffffffffffffffda RBX: 00007f50b2615fa0 RCX: 00007f50b239ce59
[ 1896.164185][T17171] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000003
[ 1896.172202][T17171] RBP: 00007f50b2432d6f R08: 0000000000000000 R09: 0000000000000000
[ 1896.180479][T17171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1896.188479][T17171] R13: 00007f50b2616038 R14: 00007f50b2615fa0 R15: 00007ffdf34b7368
[ 1896.196580][T17171]  </TASK>
[ 1896.222854][T17151] F2FS-fs (loop7): Found nat_bits in checkpoint
[ 1896.305403][T17171] set match dimension is over the limit!
[ 1896.787119][T17151] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5