last executing test programs:

2m5.685823591s ago: executing program 1 (id=1098):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/108, 0x6c}, {0x0}], 0x2)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, 0x0)

2m2.739406497s ago: executing program 1 (id=1104):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x10000a0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40880, 0x20)
getdents(r1, &(0x7f0000000000)=""/45, 0x2d)
unshare(0x60000600)

1m59.516624467s ago: executing program 1 (id=1115):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010106, 0x4e22, 0x3, 'lc\x00', 0x6, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)

1m58.252505334s ago: executing program 1 (id=1121):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==")
symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00')
creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0)

1m55.568121195s ago: executing program 1 (id=1127):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x22000, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x1, 0x0, 0x0, 'queue0\x00'})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x2, 0x4, 0x1, 0xb})

1m54.408136904s ago: executing program 1 (id=1133):
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x151842, 0x1c2)
openat(0xffffffffffffffff, &(0x7f0000000580)='./file1/../file0\x00', 0x803, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
set_mempolicy(0x4005, 0x0, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d2", 0x3, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})

1m53.46141997s ago: executing program 32 (id=1133):
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x151842, 0x1c2)
openat(0xffffffffffffffff, &(0x7f0000000580)='./file1/../file0\x00', 0x803, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
set_mempolicy(0x4005, 0x0, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d2", 0x3, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})

1m47.496283074s ago: executing program 5 (id=1153):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
rename(0x0, 0x0)
syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3200041, &(0x7f00000004c0)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00bee5b9b80cb49c807c85709393a247066e0dbd1d4cc9b14919f9175b3d1ecfca63ba2dfbad53f056c689b3dd30d15dd68dc24fc6ff3f7447a2faf38d23e21b786f25f51f852073754deab2983e8ef71f0f41831db21390b85628876f9cd55cde11c878333a57d8a68ed062dbc69f88ec16a78580", @ANYRES64], 0x1, 0x9e23, &(0x7f0000013e80)="$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")

1m46.815342361s ago: executing program 5 (id=1155):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_procfs(0x0, 0x0)
writev(r1, &(0x7f0000000100), 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00')
pivot_root(&(0x7f0000000340)='.\x00', 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x14})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
getpid()
prctl$PR_MCE_KILL(0x4e, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140))
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)

1m45.742441485s ago: executing program 5 (id=1159):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x400, &(0x7f0000000480)={[{@shortname_win95}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_win95}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@uni_xlate}, {@fat=@discard}, {@shortname_mixed}, {@shortname_lower}]}, 0x1, 0x21a, &(0x7f0000000180)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
ioctl$BLKDISCARD(r0, 0x1277, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)

1m45.39195877s ago: executing program 5 (id=1160):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$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")
symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00')
creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0)

1m44.133207965s ago: executing program 5 (id=1163):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_procfs(0x0, 0x0)
writev(r1, &(0x7f0000000100), 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00')
pivot_root(&(0x7f0000000340)='.\x00', 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x14})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
getpid()
prctl$PR_MCE_KILL(0x4e, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140))
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)

1m42.103115386s ago: executing program 5 (id=1166):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f00000001c0)='squashfs\x00', 0x1)
close(r1)
r2 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c)
splice(r1, 0x0, r0, 0x0, 0x10000008ebe, 0x2)

1m40.474830409s ago: executing program 33 (id=1166):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f00000001c0)='squashfs\x00', 0x1)
close(r1)
r2 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c)
splice(r1, 0x0, r0, 0x0, 0x10000008ebe, 0x2)

14.205663997s ago: executing program 0 (id=1439):
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00', 0x0, 0x0)
setns(r3, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)

13.452670034s ago: executing program 0 (id=1442):
r0 = socket(0x10, 0x80003, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xa797, 0xb, 0x20000000, 0x1000005}, 0x4f, 0x5}, [{0x0, 0x3, 0x9, 0x1, 0xf, 0x9}, {0x9, 0x3ff, 0x8, 0x1, 0xb5c, 0x3}, {0x8, 0x3ff, 0x7, 0x800, 0xe07, 0x4}, {0xffff93ee, 0x5dfd, 0x1, 0x2, 0xfffffffe, 0x39}, {0xd71, 0xff, 0x80000, 0x81, 0x3}, {0x4, 0x7, 0x7, 0xb, 0x8001, 0x8}, {0x9, 0x0, 0x7fff, 0x6, 0x7ff, 0xa1}, {0x6, 0x8, 0x4, 0x8, 0xc, 0x6}, {0x1, 0x6, 0xfffffffd, 0x9, 0x8, 0x6}, {0x81, 0x1, 0x3, 0x400, 0x7, 0xfffffffa}, {0x8, 0xf5, 0x8, 0x1000, 0x7, 0x9}, {0x5, 0x2, 0x3, 0x7, 0x96, 0x10000}, {0x1ff, 0x9, 0x79, 0x6, 0x5, 0xfffffff8}, {0xffff76f4, 0x1e, 0x3, 0x1, 0x8, 0xc0}, {0x89c, 0x0, 0x101, 0x3, 0xffff, 0xd}, {0x7fff, 0x2, 0xaf, 0x80000001, 0x6, 0x9}, {0x800, 0x7, 0xdfcb, 0x8, 0x7f72, 0x6}, {0x3, 0x6, 0x5, 0x3, 0x8, 0x7}, {0x1, 0xfffffffd, 0x1, 0x800, 0x4, 0x5}, {0xfffffffa, 0x8, 0x9, 0x9, 0x6, 0x1bad}, {0x272, 0x800, 0x7, 0xffffffff, 0x80000000, 0x2}, {0x3, 0x9, 0x8, 0x1, 0x40, 0x7}, {0x6, 0x6, 0x5, 0x2, 0x3, 0x101}, {0x6, 0x8001, 0x8, 0x6, 0xf, 0xfffffffc}, {0x3, 0xfffff1ad, 0xa, 0x101, 0x6, 0xd495}, {0x929, 0x5, 0x1, 0x400000, 0x6, 0x9}, {0x1ff, 0x8, 0x8, 0x1, 0x0, 0x3}, {0x2, 0x3, 0x7, 0x0, 0x2, 0xb}, {0xcd, 0x6, 0xa00000, 0x10001, 0x7, 0x1}, {0xfffffffa, 0x1, 0x2d, 0x3, 0x2, 0x2}, {0xb224, 0x8, 0x7, 0x509, 0x5, 0xfce9}, {0x4080, 0x61a0, 0x8, 0x5a4, 0x200, 0x10}, {0x2, 0x0, 0x4, 0x3, 0x9, 0x800}, {0x427d, 0x8d, 0x908d, 0xffffff9c, 0x3, 0x8}, {0xd6, 0x3ff, 0x2, 0x10001, 0x9, 0x6}, {0x5, 0x5, 0x3, 0x1000, 0x80000001, 0x7}, {0x4fe49d73, 0x3, 0x30000000, 0x101, 0x9130, 0x7}, {0x2, 0xfffffffe, 0xfe, 0x8a69, 0x1, 0xc36}, {0x5c0, 0x6436, 0x8, 0x1, 0x4, 0x5}, {0xe26f, 0x200, 0x3, 0x85a, 0x608, 0xfffffffa}, {0x3, 0x8, 0x1000, 0x1000, 0x9, 0x2}, {0xa, 0x3, 0x40, 0xb0e, 0xc9d3, 0x7fff}, {0x10, 0x0, 0x4, 0x2, 0x8002, 0x3}, {0x8, 0x4, 0x24050b64, 0x84, 0x5, 0x8}, {0x8, 0x5e5, 0x4f0155f4, 0x8, 0x8}, {0xa08, 0x7, 0x2, 0x9, 0xfffffe00}, {0x0, 0x100, 0x2, 0x2, 0x3, 0x5e4}, {0x9, 0x7, 0x6, 0x81, 0x1ff, 0x8}, {0x1, 0xb2bfc89, 0x3, 0x7f, 0x10001, 0x2}, {0x8, 0xea31, 0x81, 0x1, 0x5, 0x18b4}, {0x78b83211, 0x6, 0x36d, 0x1, 0xe1, 0x1}, {0x1400, 0x0, 0x1, 0x800, 0x6, 0x6294}, {0x100, 0x0, 0x6, 0x7d, 0x7fffffff, 0x18}, {0x3, 0x2, 0x5, 0x7, 0x8, 0x4}, {0x0, 0xffff7c05, 0x7, 0xe, 0x9}, {0x3, 0x80, 0x7, 0x5, 0x714, 0x590}, {0x5, 0x8, 0xe, 0x8, 0x49a24dd3}, {0x7, 0x3, 0x4, 0xb3, 0x2, 0xfff}, {0x80000000, 0x7, 0x5, 0x30fd, 0x9, 0x7ff}, {0x8, 0xa, 0x1, 0x2, 0xc7e7, 0x1000}, {0x0, 0xffffffff, 0x4, 0x3, 0x157d, 0x7}, {0x6, 0x2, 0x6, 0x74f, 0x4, 0x4}, {0x20d, 0x6, 0x8, 0x3, 0x6, 0x4}, {0x4, 0xb, 0x3, 0xddd, 0x5, 0x5}, {0xd4f, 0x4, 0xffffffff, 0x7, 0x81, 0x200}, {0x7, 0x1, 0x0, 0x4, 0x80000000, 0xffff}, {0x88, 0x4, 0xe, 0x9, 0x8, 0x457}, {0x9, 0xb, 0x8, 0xff, 0xfffffffa, 0x3}, {0x7, 0x5, 0x9, 0x7, 0xf, 0x2}, {0x6, 0x8900, 0xcc, 0x100, 0xffffffe3, 0xff}, {0x8, 0x0, 0x6, 0x400, 0x80, 0xfffffffe}, {0x0, 0x8, 0x5, 0x1, 0xffffffff, 0x8}, {0xb00, 0x7, 0x3, 0x0, 0x7, 0x7}, {0xffff0001, 0xb1ee, 0x6, 0x5823, 0x5, 0x9d}, {0x1, 0x101, 0x80000001, 0x8, 0x46b45ec5, 0xda2}, {0x1, 0x140, 0x5, 0x6d, 0xe, 0x1000}, {0x6, 0x8, 0xfffffb89, 0xa0a0, 0x3, 0xffff}, {0x0, 0x8, 0x1, 0x6, 0x3, 0x3}, {0x400, 0x8, 0x800000, 0x8, 0x1}, {0x7, 0x80000001, 0x0, 0x7, 0x1, 0x100}, {0x9, 0x1, 0x9a, 0x5, 0x7, 0x6}, {0x6, 0x6, 0x3, 0x4, 0x2}, {0x1, 0x0, 0x800, 0x6, 0x4, 0x9}, {0x41, 0x3, 0x9cb8, 0x0, 0x14, 0x9}, {0x4, 0x6, 0x7, 0x71, 0x0, 0x5}, {0x27f6, 0xfffffff8, 0x80000000, 0x400, 0x9, 0x1000}, {0x5, 0x2, 0x6, 0xffffffba, 0x0, 0x2}, {0x5e70, 0x3, 0x7ff, 0x789, 0x5, 0x2}, {0x3db6, 0x9, 0xc, 0x8, 0x3, 0xdef}, {0xf3, 0x4, 0x4, 0x4, 0x5, 0x6}, {0xb57, 0x5, 0xb95, 0x9, 0xfff, 0x7}, {0x7, 0x200, 0x8, 0xfffeffff, 0x1ffc00, 0x8}, {0xfffffffe, 0xd, 0x8, 0x7, 0xa, 0x7}, {0x3, 0x81, 0x7, 0x4, 0x8, 0xcde5}, {0x572d, 0xb699, 0x5, 0x0, 0x8, 0xe}, {0x4bf, 0x3, 0x7, 0x1, 0x401}, {0x400, 0x0, 0x1, 0x0, 0x6, 0x3ff}, {0x101, 0x7, 0x4, 0x3c, 0x3, 0x1ff}, {0x4, 0x8, 0x4, 0xfff, 0x2, 0x1}, {0x3, 0x1, 0x1, 0x9, 0xffff, 0x7fff}, {0x9, 0x800, 0x40, 0x9, 0xffff, 0xbb9}, {0x7, 0x6, 0x9, 0x9, 0x9, 0xffff}, {0x7fff, 0xd8ac, 0x400000, 0x5, 0xbde}, {0x11, 0x9, 0x2ed6, 0x2, 0x0, 0x81}, {0x27d, 0xf, 0xcde, 0x6, 0x5, 0x114a}, {0x1, 0x8, 0x5, 0x8, 0x4, 0xa}, {0xd9, 0x47, 0x7e, 0x6, 0x401, 0x4}, {0xa, 0x7, 0xb69, 0x1, 0x1f, 0x80000000}, {0x10000, 0x6, 0x4, 0x10000, 0x2, 0xc4}, {0x7ff, 0x80, 0x6, 0xfffffff8, 0x3f7, 0x5}, {0x1198, 0x9, 0x5, 0x5, 0x8, 0x9}, {0x4, 0x6, 0xa, 0x6, 0x0, 0x3}, {0x3, 0xafb, 0x1, 0x7, 0x0, 0x4}, {0x1ff, 0x9, 0x2, 0x5, 0x7f, 0xc}, {0xffffffc0, 0x0, 0xb6, 0x3, 0xf000, 0x7}, {0x0, 0x62b, 0x8, 0x800, 0x0, 0x8}, {0x3, 0x3, 0x6, 0x57d, 0x7, 0xd5}, {0xe800, 0x5, 0x2, 0x211, 0x8, 0x1}, {0x3, 0x6, 0x6, 0x5, 0x8}, {0xffff, 0x7fffffff, 0x4c, 0x785, 0x3}, {0x9, 0x401, 0x5000, 0x0, 0x3, 0x1d7}, {0x3, 0x3, 0xf, 0xfddb, 0x6, 0x5}, {0x5, 0x0, 0x6, 0x9, 0x66, 0x4}, {0x8, 0x7, 0x4, 0x4, 0x2, 0x8}, {0x0, 0x6, 0x1, 0x5, 0x2, 0x9}, {0xe5, 0x43, 0x7ff, 0x2, 0x380, 0x2}, {0x8001, 0x5, 0x3, 0x8, 0xffffffff, 0x5}, {0x10000, 0x3, 0x400, 0xcb77, 0x2, 0xfe2a}], [{0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x833b0195d0c1ead6}, {0x4, 0x1}, {0x2}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x4}, {0x4, 0xb0a1b2cb829f0c58}, {}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x6}, {0x2, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x4}, {0x4, 0x1}, {0x281f5cc8dc2390cd}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x44f390bc39b5fbbd, 0x1}, {0xb3ffe6e0e4e70638, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x5}, {0x4, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1}, {0x3}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x5, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000880), 0xf504, r2}, 0x38)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x3, r2}, 0x38)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x4}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x8001, 0x0, 0x7, 0xd, 0xe, 0x18, 0x1}}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@nodioread_nolock}, {@minixdf}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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")

12.242677251s ago: executing program 0 (id=1447):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x2002)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

11.025773865s ago: executing program 0 (id=1450):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x0)

10.671726428s ago: executing program 6 (id=1454):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x8, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40480d0}, 0x8000)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004)

10.001368964s ago: executing program 6 (id=1458):
sched_setscheduler(0x0, 0x5, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="40149b00000095eb75b2"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)

9.632780686s ago: executing program 0 (id=1462):
socket(0x10, 0x803, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r1 = dup(r0)
r2 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5})
io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba000963040000000000000000000000b1"})
r6 = syz_open_pts(r0, 0x20400)
write$P9_RCREATE(r1, &(0x7f00000001c0)={0x18, 0x73, 0x1, {{0x2, 0x20000002, 0x5}, 0xd}}, 0x18)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x7ffe, 0x1, 0x6, 0xfffffff1, 0xa, "00f20e0000009b148b8000"})
read(r6, &(0x7f0000000280)=""/228, 0xe4)

8.767377638s ago: executing program 0 (id=1463):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_wait(r0, &(0x7f0000000040)=[{}, {}], 0x2, 0x4d0d)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

8.483229331s ago: executing program 7 (id=1467):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
timerfd_create(0x7, 0x80000)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x3)
socket$phonet_pipe(0x23, 0x5, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)

8.376324225s ago: executing program 4 (id=1468):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48603, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup, 0xffffffffffffffff, 0xf, 0x40}, 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@map, 0xffffffffffffffff, 0x9, 0x4}, 0x20)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc"], 0x50)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180))
close(0x3)

7.064027765s ago: executing program 3 (id=1471):
mkdir(&(0x7f0000000400)='./file0\x00', 0x58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83)
mount(&(0x7f0000000400)=@sr0, 0x0, 0x0, 0x2a18005, 0x0)

6.945428731s ago: executing program 7 (id=1472):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r2 = dup(r0)
sendmmsg$inet(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x80000005, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x8, 0xac, 0x7d, 0x4}, 0x9c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@gettaction={0x14, 0x32, 0x20, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xffffffee, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c)

6.906806362s ago: executing program 4 (id=1473):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
write$binfmt_register(0xffffffffffffffff, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xfd, 0x3a, '..', 0x3a, '+', 0x3a, './file0', 0x3a, [0x43, 0x46, 0x0]}, 0x2d)

6.731613897s ago: executing program 2 (id=1474):
r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0x1, 0xc})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000001500)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

6.73129436s ago: executing program 3 (id=1475):
epoll_create1(0x0)
syz_clone3(&(0x7f0000000080)={0x20901400, &(0x7f0000000040), 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000140))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000040), &(0x7f0000000500)=r1}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x26, &(0x7f0000000b80)=ANY=[], 0x0)

6.721129308s ago: executing program 6 (id=1476):
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000100)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000400)=""/226, 0x1040, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0})

6.443083811s ago: executing program 7 (id=1477):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000900000084"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38)

6.326568312s ago: executing program 4 (id=1478):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000240)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000003c0)=[r1], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1})

6.190028167s ago: executing program 2 (id=1479):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
r1 = syz_open_procfs(0x0, 0x0)
writev(r1, &(0x7f0000000100), 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00')
pivot_root(&(0x7f0000000340)='.\x00', 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x14})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
getpid()
prctl$PR_MCE_KILL(0x4e, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140))
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)

4.95888951s ago: executing program 7 (id=1480):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"})
getpid()
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140))
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)

4.84596415s ago: executing program 4 (id=1481):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

4.803760779s ago: executing program 3 (id=1482):
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$full(0xffffff9c, &(0x7f0000000180), 0x40, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd4, 0x7d, 0x0, 0x4, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006}, 0x0, 0x0)

4.725371863s ago: executing program 2 (id=1483):
socket$unix(0x1, 0x2, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x40, 0xe}, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x5, 0x27, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'vlan0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "c332f38642fc6752ff087cf3407660862b9d896bb494b1e535ca0f9e076d0065", "a4f653d51babc8b6418bda58369cbd75efadb04579aed6ea03e7ef43ff4e0e34", "482822f55b594d75bdf6323ba0da13522e9ccbbb9b270f3634c4d02309ede617", "f047be5f76853bd691735699e8908db85ddea493ca33263dcc284bffcfe9e230", "4eb0b01d4c94fbbee4e4dd6861ed4c1c4b61ed83df8938053a01ae7d2c9be542", "3d7a7b4201c30446d5d76789", 0x9, 0x1000056, 0x4, 0xffff, 0x7fff}})
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000300)={0x0, 0x7f, 0x6, &(0x7f00000002c0)={0x10, "dbe59aa96be76f16b24f7fa82127993690ff06d3586655d666db04ee3f6df95bc9"}})

4.698931858s ago: executing program 6 (id=1484):
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4040)
read$msr(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0xa, 0x1, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000e80400"/20, @ANYRES32=r1], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2})
r3 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={<r4=>r3})
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r3})

4.60611498s ago: executing program 7 (id=1485):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x1, r1})
openat$full(0xffffff9c, 0x0, 0x248200, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)

3.52238068s ago: executing program 6 (id=1486):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = getpid()
syz_pidfd_open(r2, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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")
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x42, 0x0, &(0x7f0000000680))
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')

3.522002283s ago: executing program 2 (id=1487):
socket(0xa, 0x5, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2, 0xd}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780))

3.348822668s ago: executing program 4 (id=1488):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x29, 0x80, 0xb, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x7, 0x7fffffff}}]}}}]}, 0x60}}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f0000000680)={0x2, 0x6, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0})
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0xfff}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)

2.532662274s ago: executing program 6 (id=1489):
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, 0x5}, 0x1c)
openat(0xffffffffffffff9c, 0x0, 0x151842, 0x1c2)
openat(0xffffffffffffffff, &(0x7f0000000580)='./file1/../file0\x00', 0x803, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
set_mempolicy(0x4005, 0x0, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd)
r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d2", 0x3, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})

1.845889499s ago: executing program 3 (id=1490):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
write$binfmt_register(0xffffffffffffffff, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xfd, 0x3a, '..', 0x3a, '+', 0x3a, './file0', 0x3a, [0x43, 0x46, 0x0]}, 0x2d)

1.772755345s ago: executing program 2 (id=1491):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
r1 = syz_open_procfs(0x0, 0x0)
writev(r1, &(0x7f0000000100), 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00')
pivot_root(&(0x7f0000000340)='.\x00', 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x14})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
getpid()
prctl$PR_MCE_KILL(0x4e, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140))
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)

1.719564396s ago: executing program 7 (id=1492):
ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2)
pwrite64(r1, &(0x7f0000000080)="cc", 0x1, 0x200980)
write$tun(r0, &(0x7f0000000440)={@void, @void, @llc={@snap={0x2, 0xaa, "c3", "b9a7b9", 0x1c}}}, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80)
pwritev2(r2, &(0x7f0000002580)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x5, 0x0)
r3 = open(&(0x7f0000000300)='./file1\x00', 0x18e97e, 0x136)
sendfile(r3, r3, 0x0, 0x10000006)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

1.237281198s ago: executing program 3 (id=1493):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000)

6.083219ms ago: executing program 2 (id=1494):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c4}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

1.096488ms ago: executing program 3 (id=1495):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, &(0x7f0000000180))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@map, 0x24, 0x1, 0x80, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800141, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x40047440, &(0x7f0000001200))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x29, 0x0, 0x1}, 0x28)

0s ago: executing program 4 (id=1496):
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x183, &(0x7f0000000500)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000000), 0xff, 0x49b, &(0x7f0000001040)="$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")
quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x2e124f4850d9296e)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

kernel console output (not intermixed with test programs):

3][ T9014]  kobject_add+0x16a/0x1e0
[  387.399047][ T9014]  ? __pfx_kobject_add+0x10/0x10
[  387.399106][ T9014]  ? get_device_parent+0x1b3/0x4c0
[  387.399152][ T9014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.399208][ T9014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.399254][ T9014]  ? kobject_put+0xb9/0x640
[  387.399318][ T9014]  device_add+0x294/0x1970
[  387.399375][ T9014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.399421][ T9014]  ? lockdep_init_map_type+0x5c/0x250
[  387.399463][ T9014]  ? __pfx_device_add+0x10/0x10
[  387.399512][ T9014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.399556][ T9014]  ? lockdep_init_map_type+0x5c/0x250
[  387.399596][ T9014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.399640][ T9014]  ? __init_waitqueue_head+0xca/0x150
[  387.399684][ T9014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.399733][ T9014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.399788][ T9014]  tty_register_device_attr+0x388/0x7f0
[  387.399838][ T9014]  ? lockdep_init_map_type+0x5c/0x250
[  387.399878][ T9014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.399926][ T9014]  ? __pfx_tty_register_device_attr+0x10/0x10
[  387.399985][ T9014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.400032][ T9014]  ? tty_port_init+0x156/0x1c0
[  387.400079][ T9014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.400138][ T9014]  gsm_activate_mux+0x155/0x2a0
[  387.400197][ T9014]  gsmld_ioctl+0xbbc/0x15c0
[  387.400267][ T9014]  ? __pfx_gsmld_ioctl+0x10/0x10
[  387.400330][ T9014]  ? __ldsem_down_read_nested+0xf3/0x890
[  387.400386][ T9014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.400445][ T9014]  ? __pfx___ldsem_down_read_nested+0x10/0x10
[  387.400517][ T9014]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  387.400585][ T9014]  ? __pfx_pty_unix98_ioctl+0x10/0x10
[  387.400656][ T9014]  ? __pfx_gsmld_ioctl+0x10/0x10
[  387.400712][ T9014]  tty_ioctl+0x11b4/0x1640
[  387.400761][ T9014]  ? __pfx_tty_ioctl+0x10/0x10
[  387.400822][ T9014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.400867][ T9014]  ? find_held_lock+0x2b/0x80
[  387.400919][ T9014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.400964][ T9014]  ? hook_file_ioctl_common+0x140/0x440
[  387.401021][ T9014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.401067][ T9014]  ? __fget_files+0x21f/0x3d0
[  387.401128][ T9014]  ? __pfx_tty_ioctl+0x10/0x10
[  387.401177][ T9014]  __x64_sys_ioctl+0x18e/0x210
[  387.401229][ T9014]  do_syscall_64+0x115/0x870
[  387.401277][ T9014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.401317][ T9014] RIP: 0033:0x7f786159de99
[  387.401347][ T9014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  387.401384][ T9014] RSP: 002b:00007f7862521028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  387.401421][ T9014] RAX: ffffffffffffffda RBX: 00007f7861826090 RCX: 00007f786159de99
[  387.401447][ T9014] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003
[  387.401472][ T9014] RBP: 00007f7861633eaf R08: 0000000000000000 R09: 0000000000000000
[  387.401495][ T9014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  387.401519][ T9014] R13: 00007f7861826128 R14: 00007f7861826090 R15: 00007ffc87d321b8
[  387.401569][ T9014]  </TASK>
[  387.891283][ T9014] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  389.963817][ T9035] loop4: detected capacity change from 0 to 4096
[  389.991328][ T9035] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  390.542459][ T5765] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  390.742296][ T5765] usb 4-1: Using ep0 maxpacket: 8
[  390.771363][ T5765] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  390.813852][ T5765] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  390.865246][ T5765] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  390.909267][ T5765] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  391.196464][ T5765] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  391.210261][ T5765] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  391.219487][ T5765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.068413][ T5765] usb 4-1: GET_CAPABILITIES returned 0
[  392.092891][ T5765] usbtmc 4-1:16.0: can't read capabilities
[  392.145873][ T5765] usb 4-1: USB disconnect, device number 17
[  392.181591][  T185] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  392.229242][ T9064] loop4: detected capacity change from 0 to 128
[  392.372608][  T185] usb 2-1: Using ep0 maxpacket: 32
[  392.393377][  T185] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.430253][  T185] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  392.476601][  T185] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  392.512679][  T803] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  392.531451][  T185] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  392.569867][  T185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.620956][  T185] usb 2-1: config 0 descriptor??
[  392.692582][  T803] usb 6-1: Using ep0 maxpacket: 32
[  392.704042][ T9055] loop0: detected capacity change from 0 to 32768
[  392.719266][  T803] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  392.750796][  T803] usb 6-1: config 0 has no interface number 0
[  392.776094][  T803] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  392.795177][  T803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.832589][  T803] usb 6-1: Product: syz
[  392.846666][  T803] usb 6-1: Manufacturer: syz
[  392.862814][  T803] usb 6-1: SerialNumber: syz
[  392.882870][ T5765] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  392.922776][  T803] usb 6-1: config 0 descriptor??
[  393.061246][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  393.251260][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  393.391245][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  393.411247][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  393.692919][ T5765] usb 4-1: Using ep0 maxpacket: 32
[  393.705720][ T1123] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  393.732273][ T5765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  393.902727][ T9070] loop4: detected capacity change from 0 to 131072
[  393.910221][ T9070] xfs: Deprecated parameter 'ikeep'
[  393.915477][ T9070] XFS: ikeep mount option is deprecated.
[  393.928006][  T185] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0011/input/input17
[  394.029913][ T5765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  394.042205][ T9070] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  394.055589][ T5765] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  394.068895][ T5765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.112840][ T5765] usb 4-1: config 0 descriptor??
[  394.145793][ T9070] XFS (loop4): Starting recovery (logdev: internal)
[  394.188135][ T9070] XFS (loop4): Ending recovery (logdev: internal)
[  394.309885][ T6393] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  394.330044][  T185] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0011/input/input18
[  394.571533][  T803] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  394.648312][  T803] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  394.775407][  T803] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  394.823834][  T803] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[  394.871309][ T5355] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  394.884122][ T5765] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  395.034460][ T5765] usb 4-1: USB disconnect, device number 18
[  395.059305][  T185] kye 0003:0458:5011.0011: input,hiddev1,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0
[  395.078526][ T5355] usb 1-1: config index 0 descriptor too short (expected 45, got 36)
[  395.109219][  T803] usb 6-1: USB disconnect, device number 16
[  395.158852][ T5355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  395.228405][ T5355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  395.304638][ T5355] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  395.416378][ T5355] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  395.426492][ T5745] usb 2-1: reset high-speed USB device number 14 using dummy_hcd
[  395.510999][ T5355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.617132][ T5355] usb 1-1: config 0 descriptor??
[  396.549741][  T185] usb 2-1: USB disconnect, device number 14
[  396.552065][ T9089] fido_id[9089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  396.666660][ T9097] loop3: detected capacity change from 0 to 256
[  396.803799][ T5355] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd
[  397.313336][ T9097] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  397.486799][ T9090] fido_id[9090]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  397.577355][ T5355] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  397.713980][ T5355] usb 1-1: USB disconnect, device number 14
[  397.779961][ T9097] xfrm0 speed is unknown, defaulting to 1000
[  398.018162][ T9099] fido_id[9099]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  398.854132][   T10] IPVS: starting estimator thread 0...
[  398.908095][ T9116] loop5: detected capacity change from 0 to 2048
[  398.953261][ T9115] IPVS: using max 22 ests per chain, 52800 per kthread
[  398.959113][ T9116] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  399.052112][   T30] audit: type=1800 audit(1784688482.510:48): pid=9116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1030" name="file2" dev="loop5" ino=1347 res=0 errno=0
[  399.456635][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'.
[  400.159530][  T803] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  400.168195][  T803] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  400.177615][  T803] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  400.185634][  T803] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  400.194805][  T803] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  400.205320][  T803] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  400.229033][  T803] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  400.250839][  T803] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  400.510913][  T803] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  400.520146][  T803] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  400.533656][  T803] hid-generic 0006:0004:0009.0014: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  400.817343][ T9139] fido_id[9139]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  400.991299][   T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  401.981304][   T10] usb 6-1: Using ep0 maxpacket: 32
[  401.990737][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  402.009505][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  402.031456][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  402.058034][   T10] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  402.082904][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.119194][   T10] usb 6-1: Product: syz
[  402.133973][   T10] usb 6-1: Manufacturer: syz
[  402.148254][   T10] usb 6-1: SerialNumber: syz
[  402.813313][   T10] usb 6-1: unit 4 not found!
[  402.817970][   T10] usb 6-1: unit 0 not found!
[  403.122180][ T9140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  403.183915][ T9140] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  404.480258][   T10] usb 6-1: USB disconnect, device number 17
[  404.705857][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  405.073009][ T9147] loop0: detected capacity change from 0 to 32768
[  406.325177][ T9180] loop1: detected capacity change from 0 to 4096
[  406.490943][ T9186] loop4: detected capacity change from 0 to 8
[  406.540667][ T9180] ntfs3(loop1): ino=21, "file1" failed to extend initialized size to 8000c61.
[  406.549236][ T9183] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  406.585516][ T9188] loop5: detected capacity change from 0 to 128
[  407.441746][  T185] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  408.273792][  T185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  408.326966][  T185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  408.351353][  T185] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  408.409863][  T185] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  408.448950][  T185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.493172][  T185] usb 5-1: config 0 descriptor??
[  409.170262][  T185] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  409.651593][    C1] plantronics 0003:047F:FFFF.0015: hid_field_extract() called with n (132) > 32! (udevd)
[  409.765108][ T9217] loop1: detected capacity change from 0 to 256
[  409.812777][ T9217] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  409.905579][  T185] usb 5-1: USB disconnect, device number 9
[  410.547811][ T9201] loop5: detected capacity change from 0 to 32768
[  410.575576][ T9201] btrfs: Deprecated parameter 'usebackuproot'
[  410.591872][ T9201] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  410.624950][ T9201] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1060 (9201)
[  410.702357][  T185] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  410.745091][ T9201] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  410.792333][ T9229] loop4: detected capacity change from 0 to 256
[  410.798758][ T9201] BTRFS info (device loop5): using crc32c checksum algorithm
[  410.822273][ T9229] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  410.891355][  T185] usb 2-1: Using ep0 maxpacket: 32
[  410.904538][  T185] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  410.938465][  T185] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  410.958787][ T1096] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  411.000524][  T185] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  411.000617][ T9243] input: syz0 as /devices/virtual/input/input20
[  411.022007][ T9229] xfrm0 speed is unknown, defaulting to 1000
[  411.046030][  T185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.057175][ T9201] BTRFS error (device loop5): failed to load root extent
[  411.074551][ T9201] BTRFS warning (device loop5): try to load backup roots slot 1
[  411.099522][   T13] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  411.126326][  T185] usb 2-1: config 0 descriptor??
[  411.154255][ T9201] BTRFS warning (device loop5): couldn't read tree root
[  411.170996][ T9201] BTRFS warning (device loop5): try to load backup roots slot 2
[  411.367629][ T3284] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  411.437046][ T9201] BTRFS warning (device loop5): couldn't read tree root
[  411.473257][ T9201] BTRFS warning (device loop5): try to load backup roots slot 3
[  412.325721][  T185] savu 0003:1E7D:2D5A.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  413.226688][ T9201] BTRFS error (device loop5): open_ctree failed: -4
[  413.293224][  T185] usb 2-1: USB disconnect, device number 15
[  413.348503][ T9256] loop3: detected capacity change from 0 to 2048
[  413.407587][ T9256] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  414.148909][ T9264] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input21
[  414.680204][ T9266] fido_id[9266]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  414.864734][ T9278] loop0: detected capacity change from 0 to 256
[  414.971432][  T185] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  415.103338][ T9278] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  415.355136][  T185] usb 4-1: Using ep0 maxpacket: 8
[  415.391546][ T9287] loop1: detected capacity change from 0 to 512
[  415.410549][ T9287] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  415.425988][ T9287] EXT4-fs (loop1): 1 truncate cleaned up
[  415.434487][ T9287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  415.488223][  T185] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  415.509092][  T185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.533869][  T185] usb 4-1: Product: syz
[  415.556977][  T185] usb 4-1: Manufacturer: syz
[  415.595085][  T185] usb 4-1: SerialNumber: syz
[  415.675959][  T185] usb 4-1: config 0 descriptor??
[  415.774522][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.901509][ T5355] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  415.915995][  T185] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  416.045537][ T9301] loop0: detected capacity change from 0 to 256
[  416.081282][ T5355] usb 3-1: Using ep0 maxpacket: 8
[  416.124995][ T9301] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  416.333454][ T5355] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  416.351302][ T5355] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  416.366903][ T9301] xfrm0 speed is unknown, defaulting to 1000
[  416.371310][ T5355] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  416.391324][ T5355] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  417.110630][ T5355] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  417.123826][ T5355] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  417.136231][ T5355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.161354][  T803] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  417.315560][  T803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  417.351355][  T803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  417.375487][  T803] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  417.424070][ T5355] usb 3-1: usb_control_msg returned -32
[  417.435132][  T803] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  417.446457][ T5355] usbtmc 3-1:16.0: can't read capabilities
[  417.462425][  T803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.509095][  T803] usb 6-1: config 0 descriptor??
[  417.602110][  T185] usb write operation failed. (-71)
[  417.658557][  T185] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  417.661864][ T5745] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  417.670868][  T185] dvbdev: DVB: registering new adapter (Terratec H7)
[  418.285964][ T5745] usb 1-1: Using ep0 maxpacket: 32
[  418.342912][ T5745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  418.382086][  T185] usb 4-1: media controller created
[  418.388440][  T185] usb read operation failed. (-71)
[  418.394733][  T185] usb write operation failed. (-71)
[  418.410585][  T185] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  418.429327][  T185] usb 4-1: USB disconnect, device number 19
[  418.446497][ T5745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  418.461535][ T5745] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  418.482292][  T803] plantronics 0003:047F:FFFF.0017: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  418.533204][ T5745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.718469][ T5745] usb 1-1: config 0 descriptor??
[  419.815827][ T5805] usb 3-1: USB disconnect, device number 10
[  419.920442][  T185] usb 6-1: USB disconnect, device number 18
[  419.984748][ T5745] savu 0003:1E7D:2D5A.0018: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  420.284247][ T9326] fido_id[9326]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  420.311522][ T5745] usb 1-1: USB disconnect, device number 15
[  420.413554][  T803] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  420.599669][  T803] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  420.668046][  T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.747738][  T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  420.790514][  T803] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  420.850161][  T803] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  420.951138][  T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.034287][  T803] usb 5-1: config 0 descriptor??
[  421.072525][ T9341] fido_id[9341]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  421.243506][  T185] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  421.413957][  T185] usb 2-1: Using ep0 maxpacket: 8
[  421.430584][  T185] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  421.442379][ T7526] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  421.475968][  T185] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  421.508018][  T185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.565283][  T185] usb 2-1: config 0 descriptor??
[  421.634858][ T7526] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  421.638237][  T803] plantronics 0003:047F:FFFF.0019: reserved main item tag 0xd
[  421.688313][  T803] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  421.694322][ T7526] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  422.184912][ T7526] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  422.258549][ T7526] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  422.314104][  T185] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1
[  422.340834][ T7526] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.412558][  T803] usb 5-1: USB disconnect, device number 10
[  422.438438][ T7526] usb 3-1: config 0 descriptor??
[  422.489122][  T185] usb 2-1: USB disconnect, device number 16
[  422.874100][ T9352] fido_id[9352]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  422.978864][ T9356] loop0: detected capacity change from 0 to 4096
[  423.035423][ T7526] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  423.059301][ T9356] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  423.243677][ T9356] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  423.326319][ T9362] loop1: detected capacity change from 0 to 256
[  423.348155][ T9356] ntfs3(loop0): Failed to load $Extend (-22).
[  423.376381][ T9356] ntfs3(loop0): Failed to initialize $Extend.
[  423.754269][ T9362] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  423.949142][  T185] usb 3-1: USB disconnect, device number 11
[  424.153914][ T9366] fido_id[9366]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  424.221704][ T9362] xfrm0 speed is unknown, defaulting to 1000
[  424.331329][ T5745] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  424.595945][ T5745] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[  424.733412][ T5745] usb 4-1: config 0 has no interface number 0
[  424.866965][ T5745] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  424.989844][ T1123] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  425.218308][ T5745] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  425.329804][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.406911][ T5745] usb 4-1: Product: syz
[  425.443011][ T5745] usb 4-1: Manufacturer: syz
[  425.480827][ T5745] usb 4-1: SerialNumber: syz
[  425.553995][ T5745] usb 4-1: config 0 descriptor??
[  425.588275][ T5745] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[  425.909047][    C1] usb 4-1: yurex_control_callback - control failed: -2
[  425.929833][ T5766] usb 4-1: USB disconnect, device number 20
[  425.939946][ T7526] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  425.991599][ T5766] yurex 4-1:0.50: USB YUREX #0 now disconnected
[  426.141446][ T7526] usb 5-1: Using ep0 maxpacket: 32
[  426.155518][ T7526] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  426.175520][ T7526] usb 5-1: config 0 has no interface number 0
[  426.198852][ T7526] usb 5-1: config 0 interface 184 has no altsetting 0
[  426.223058][ T7526] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  426.246024][ T7526] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.256570][ T7526] usb 5-1: Product: syz
[  426.260856][ T7526] usb 5-1: Manufacturer: syz
[  426.266193][ T7526] usb 5-1: SerialNumber: syz
[  426.316798][ T7526] usb 5-1: config 0 descriptor??
[  426.714259][ T5766] IPVS: starting estimator thread 0...
[  427.525507][ T9397] IPVS: using max 22 ests per chain, 52800 per kthread
[  428.419620][ T7526] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  428.431351][ T7526] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  428.441024][ T7526] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  428.457716][ T7526] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  428.475355][ T7526] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  428.486175][ T7526] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  428.496194][ T7526] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  428.511690][ T9409] loop1: detected capacity change from 0 to 512
[  428.517378][ T7526] usb 5-1: USB disconnect, device number 11
[  428.628696][ T9409] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  428.751603][ T9409] EXT4-fs (loop1): 1 truncate cleaned up
[  428.864361][ T9409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  429.009595][ T9410] loop0: detected capacity change from 0 to 4096
[  429.092686][ T9410] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  429.175109][ T9410] ntfs3(loop0): Failed to load $Extend (-22).
[  429.203962][ T9410] ntfs3(loop0): Failed to initialize $Extend.
[  429.213317][    C0] blk_print_req_error: 5 callbacks suppressed
[  429.213343][    C0] I/O error, dev loop1, sector 70 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2
[  429.247096][ T9409] loop1: detected capacity change from 512 to 0
[  429.501360][  T803] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  429.511173][ T9410] loop0: detected capacity change from 4096 to 0
[  430.330833][ T5637] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -EIO reading directory block
[  430.372603][ T9426] ntfs3(loop0): failed to read block 468
[  430.414464][ T5637] EXT4-fs error (device loop1): ext4_get_inode_loc:5023: inode #2: block 5: comm syz-executor: unable to read itable block
[  430.529409][ T5637] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  430.537931][  T803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  430.540747][ T9433] loop5: detected capacity change from 0 to 2048
[  430.591165][  T803] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  430.594395][ T9433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  430.612938][  T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.621310][ T5637] EXT4-fs (loop1): I/O error while writing superblock
[  430.621377][ T5637] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: IO failure
[  430.621491][ T5637] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  430.621519][ T5637] EXT4-fs (loop1): I/O error while writing superblock
[  430.621543][ T5637] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error
[  430.621627][ T5637] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  430.621653][ T5637] EXT4-fs (loop1): I/O error while writing superblock
[  430.693390][  T803] usb 3-1: config 0 descriptor??
[  430.870501][ T9433] EXT4-fs (loop5): shut down requested (1)
[  430.884066][ T3284] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:5008: inode #2: block 5: comm kworker/u8:10: unable to read itable block
[  430.934439][ T3284] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  430.969794][ T3284] EXT4-fs (loop1): I/O error while writing superblock
[  430.994326][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.032864][ T5637] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  431.043382][ T5637] EXT4-fs (loop1): I/O error while writing superblock
[  431.063216][  T803] usbhid 3-1:0.0: can't add hid device: -71
[  431.070957][  T803] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  431.087624][ T5647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.102176][  T803] usb 3-1: USB disconnect, device number 12
[  431.162888][ T7526] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  431.502175][  T803] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  431.573262][ T7526] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  431.581824][ T7526] usb 1-1: config 0 has no interface number 0
[  431.591935][ T7526] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  431.618103][ T7526] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  431.631487][ T7526] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.653568][ T9447] loop3: detected capacity change from 0 to 512
[  431.657588][ T7526] usb 1-1: Product: syz
[  431.676753][  T803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  431.681989][ T7526] usb 1-1: Manufacturer: syz
[  431.701900][ T9447] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal
[  431.720606][  T803] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  431.738644][ T7526] usb 1-1: SerialNumber: syz
[  431.753337][  T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.775482][ T7526] usb 1-1: config 0 descriptor??
[  431.803317][ T7526] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0
[  431.828313][  T803] usb 3-1: config 0 descriptor??
[  432.127793][ T6216] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.140547][    C0] usb 1-1: yurex_control_callback - control failed: -2
[  432.257728][ T5805] usb 1-1: USB disconnect, device number 16
[  432.284133][ T5805] yurex 1-1:0.50: USB YUREX #0 now disconnected
[  432.675295][  T803] aiptek 3-1:0.0: Aiptek using 400 ms programming speed
[  432.871908][ T5805] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  433.080859][ T6216] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.316491][  T803] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23
[  433.551504][ T5805] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  433.570656][ T5805] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  433.650608][ T5805] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  433.692012][ T5805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  433.746851][ T5805] usb 6-1: SerialNumber: syz
[  433.874310][  T803] usb 3-1: USB disconnect, device number 13
[  433.880313][    C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  434.063699][ T9458] loop0: detected capacity change from 0 to 256
[  434.081661][ T6216] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.097179][ T5805] usb 6-1: 0:2 : does not exist
[  434.135197][ T9458] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  434.209851][ T7092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  434.280721][ T9462] loop3: detected capacity change from 0 to 64
[  434.294612][ T7092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  434.322360][ T7092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  434.360819][ T7092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  434.372573][ T7092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  434.576441][ T9462] MINIX-fs: bad superblock or unable to read bitmaps
[  435.046654][ T5805] usb 6-1: USB disconnect, device number 19
[  435.283974][ T6216] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.396319][ T9475] loop0: detected capacity change from 0 to 512
[  435.404670][ T9475] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  435.549912][ T9470] loop3: detected capacity change from 0 to 512
[  435.559637][ T9475] EXT4-fs (loop0): 1 truncate cleaned up
[  435.592405][ T9475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  435.652642][ T9470] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.1142: Directory hole found for htree index block 0
[  435.666487][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  435.697184][ T9473] loop5: detected capacity change from 0 to 32768
[  435.704986][ T9473] btrfs: Deprecated parameter 'usebackuproot'
[  435.711092][ T9473] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  435.722179][ T9473] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1143 (9473)
[  435.738150][ T9470] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  435.742393][ T9470] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  435.751656][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  435.751693][    C1] EXT4-fs (loop3): initial error at time 1784688519: dx_probe:791: inode 2
[  435.751753][    C1] EXT4-fs (loop3): last error at time 1784688519: dx_probe:791: inode 2
[  435.784049][ T9473] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  435.794326][ T9473] BTRFS info (device loop5): using crc32c checksum algorithm
[  435.802912][ T9473] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  435.891614][ T9475] loop0: detected capacity change from 512 to 0
[  435.907626][ T9470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  435.927551][ T9483] EXT4-fs error (device loop0): ext4_get_inode_loc:5023: inode #18: block 9: comm syz.0.1141: unable to read itable block
[  436.090952][ T1123] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  436.126174][ T9483] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  436.149045][ T9483] EXT4-fs (loop0): I/O error while writing superblock
[  436.232970][ T9473] BTRFS error (device loop5): failed to load root extent
[  436.241079][ T9473] BTRFS warning (device loop5): try to load backup roots slot 1
[  436.251730][ T1106] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  436.273780][ T9483] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: IO failure
[  436.333547][ T9473] BTRFS warning (device loop5): couldn't read tree root
[  436.340608][ T9473] BTRFS warning (device loop5): try to load backup roots slot 2
[  436.349529][ T9483] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  436.349584][ T9483] EXT4-fs (loop0): I/O error while writing superblock
[  436.349609][ T9483] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #18: comm syz.0.1141: mark_inode_dirty error
[  436.350600][ T9483] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  436.350631][ T9483] EXT4-fs (loop0): I/O error while writing superblock
[  436.404694][   T60] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  436.473046][ T9473] BTRFS warning (device loop5): couldn't read tree root
[  436.480096][ T9473] BTRFS warning (device loop5): try to load backup roots slot 3
[  436.511171][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.536019][ T6216] bridge_slave_1: left promiscuous mode
[  436.554106][ T9473] BTRFS info (device loop5): rebuilding free space tree
[  436.584440][ T9473] BTRFS info (device loop5): disabling free space tree
[  436.591481][ T9473] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  436.601152][ T9473] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  436.623467][ T9473] BTRFS info (device loop5): checking UUID tree
[  436.630592][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.648349][ T5629] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -EIO reading directory block
[  436.663511][ T9473] BTRFS info (device loop5): enabling ssd optimizations
[  436.670937][ T9473] BTRFS info (device loop5): turning on async discard
[  436.677815][ T9473] BTRFS info (device loop5): enabling disk space caching
[  436.681584][ T5629] EXT4-fs error (device loop0): ext4_get_inode_loc:5023: inode #2: block 5: comm syz-executor: unable to read itable block
[  436.686987][ T9473] BTRFS info (device loop5): force clearing of disk cache
[  436.687021][ T9473] BTRFS info (device loop5): enabling auto defrag
[  436.687050][ T9473] BTRFS info (device loop5): trying to use backup root at mount time
[  436.687080][ T9473] BTRFS info (device loop5): use zstd compression, level 3
[  436.732233][ T7092] Bluetooth: hci2: command tx timeout
[  436.754576][ T6216] bridge_slave_0: left allmulticast mode
[  436.775336][ T6216] bridge_slave_0: left promiscuous mode
[  436.802162][ T5629] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  436.810771][ T5629] EXT4-fs (loop0): I/O error while writing superblock
[  436.813510][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.821407][ T5629] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: IO failure
[  436.833892][ T5629] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  436.849403][ T5629] EXT4-fs (loop0): I/O error while writing superblock
[  436.858320][ T5629] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error
[  436.916569][ T5629] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  436.964933][ T5629] EXT4-fs (loop0): I/O error while writing superblock
[  437.150874][ T1106] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:5008: inode #18: block 9: comm kworker/u8:8: unable to read itable block
[  437.164487][ T5647] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  437.427005][ T9512] loop4: detected capacity change from 0 to 2048
[  437.490346][ T9512] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[  437.617097][ T9512] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  437.631452][ T1106] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  437.642491][ T1106] EXT4-fs (loop0): I/O error while writing superblock
[  437.649454][ T1106] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:5008: inode #2: block 5: comm kworker/u8:8: unable to read itable block
[  437.667739][ T9510] loop3: detected capacity change from 0 to 32768
[  437.699514][ T9510] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  437.707865][ T9510] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  437.750834][ T1106] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  437.765359][ T1106] EXT4-fs (loop0): I/O error while writing superblock
[  437.794612][ T9510] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  437.804624][ T5805] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  437.814353][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.824515][ T5805] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  437.832956][ T5629] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  437.955660][ T5805] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 131ms
[  438.002725][ T5805] gfs2: fsid=syz:syz.0: jid=0: Done
[  438.017120][ T9510] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  438.228622][ T9510] gfs2: fsid=syz:syz.0: found 1 quota changes
[  438.471171][ T9510] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402
[  438.485700][ T9510] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  438.495059][ T9510] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:9510 [syz.3.1148] gfs2_quota_sync+0x322/0x570
[  438.506329][ T9510] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  438.514597][ T9510] CPU: 1 UID: 0 PID: 9510 Comm: syz.3.1148 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  438.514653][ T9510] Tainted: [L]=SOFTLOCKUP
[  438.514667][ T9510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  438.514690][ T9510] Call Trace:
[  438.514702][ T9510]  <TASK>
[  438.514715][ T9510]  dump_stack_lvl+0x100/0x190
[  438.514762][ T9510]  gfs2_withdraw.cold+0xa/0xed
[  438.514809][ T9510]  inode_go_instantiate+0xd56/0x1560
[  438.514870][ T9510]  ? __pfx_bit_wait+0x10/0x10
[  438.514915][ T9510]  ? __pfx_inode_go_instantiate+0x10/0x10
[  438.514987][ T9510]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  438.515051][ T9510]  gfs2_instantiate+0x16c/0x250
[  438.515111][ T9510]  gfs2_glock_wait+0x214/0x330
[  438.515167][ T9510]  ? __pfx_gfs2_glock_wait+0x10/0x10
[  438.515220][ T9510]  ? srso_alias_return_thunk+0x5/0xfbef5
[  438.515271][ T9510]  gfs2_glock_nq+0xa03/0x14f0
[  438.515334][ T9510]  ? srso_alias_return_thunk+0x5/0xfbef5
[  438.515384][ T9510]  do_sync+0x705/0xd60
[  438.515427][ T9510]  ? srso_alias_return_thunk+0x5/0xfbef5
[  438.515485][ T9510]  ? __pfx_do_sync+0x10/0x10
[  438.515528][ T9510]  ? __pfx_bh_get+0x10/0x10
[  438.515572][ T9510]  ? qd_grab_sync+0x415/0x560
[  438.515622][ T9510]  ? gfs2_quota_sync+0x322/0x570
[  438.515668][ T9510]  ? gfs2_quota_sync+0x278/0x570
[  438.515714][ T9510]  ? gfs2_quota_sync+0x278/0x570
[  438.515758][ T9510]  ? srso_alias_return_thunk+0x5/0xfbef5
[  438.515813][ T9510]  gfs2_quota_sync+0x322/0x570
[  438.515873][ T9510]  gfs2_sync_fs+0x44/0xb0
[  438.515907][ T9510]  ? __pfx_gfs2_sync_fs+0x10/0x10
[  438.515942][ T9510]  sync_filesystem+0x111/0x290
[  438.516002][ T9510]  gfs2_reconfigure+0xca/0xf00
[  438.516034][ T9510]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[  438.516095][ T9510]  ? srso_alias_return_thunk+0x5/0xfbef5
[  438.516150][ T9510]  reconfigure_super+0x52d/0xb30
[  438.516191][ T9510]  ? __pfx_gfs2_reconfigure+0x10/0x10
[  438.516232][ T9510]  path_mount+0x19fc/0x23d0
[  438.516303][ T9510]  ? __pfx_path_mount+0x10/0x10
[  438.516355][ T9510]  ? lockdep_hardirqs_on+0x78/0x100
[  438.516390][ T9510]  ? srso_alias_return_thunk+0x5/0xfbef5
[  438.516435][ T9510]  ? srso_alias_return_thunk+0x5/0xfbef5
[  438.516478][ T9510]  ? kmem_cache_free+0x127/0x6b0
[  438.516539][ T9510]  ? __x64_sys_mount+0x293/0x310
[  438.516593][ T9510]  __x64_sys_mount+0x293/0x310
[  438.516649][ T9510]  ? __pfx___x64_sys_mount+0x10/0x10
[  438.516708][ T9510]  ? srso_alias_return_thunk+0x5/0xfbef5
[  438.516757][ T9510]  do_syscall_64+0x115/0x870
[  438.516800][ T9510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.516835][ T9510] RIP: 0033:0x7f1154b9f10a
[  438.516862][ T9510] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  438.516897][ T9510] RSP: 002b:00007f1155a21e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  438.516930][ T9510] RAX: ffffffffffffffda RBX: 00007f1155a21ee0 RCX: 00007f1154b9f10a
[  438.516954][ T9510] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 0000000000000000
[  438.516977][ T9510] RBP: 0000200000000180 R08: 00007f1155a21ee0 R09: 00000000018920f4
[  438.517000][ T9510] R10: 00000000018920f4 R11: 0000000000000246 R12: 0000200000000040
[  438.517023][ T9510] R13: 00007f1155a21ea0 R14: 0000000000000000 R15: 00002000000001c0
[  438.517069][ T9510]  </TASK>
[  438.517082][ T9510] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  438.726867][ T9533] loop4: detected capacity change from 0 to 512
[  438.801381][ T7092] Bluetooth: hci2: command tx timeout
[  439.005827][ T6216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  439.079412][ T6216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  439.100325][ T9533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.154718][ T6216] bond0 (unregistering): Released all slaves
[  439.346201][   T30] audit: type=1800 audit(1784688522.810:49): pid=9533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1152" name="file1" dev="loop4" ino=15 res=0 errno=0
[  439.388052][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  439.394507][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  440.048884][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.180283][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1
[  440.205350][ T6216] tipc: Left network mode
[  440.216062][ T9554] loop5: detected capacity change from 0 to 256
[  440.571362][  T185] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  440.700762][ T9563] loop5: detected capacity change from 0 to 512
[  440.734313][ T9563] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  440.751838][  T185] usb 5-1: Using ep0 maxpacket: 32
[  440.767414][ T9460] xfrm0 speed is unknown, defaulting to 1000
[  440.785185][  T185] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  440.807691][ T9563] EXT4-fs (loop5): 1 truncate cleaned up
[  440.807841][  T185] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  440.852216][  T185] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  440.857549][ T9563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  440.873391][  T185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  440.873440][  T185] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  440.873483][  T185] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  440.873553][  T185] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  440.915910][  T185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.957826][ T7092] Bluetooth: hci2: command tx timeout
[  440.965882][  T185] usb 5-1: config 0 descriptor??
[  441.185534][ T6216] hsr_slave_0: left promiscuous mode
[  441.206558][    C0] I/O error, dev loop5, sector 10 op 0x0:(READ) flags 0x880700 phys_seg 4 prio class 2
[  441.208076][ T9563] loop5: detected capacity change from 512 to 0
[  441.216507][    C0] I/O error, dev loop5, sector 18 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2
[  441.232500][ T9569] EXT4-fs error (device loop5): ext4_get_inode_loc:5023: inode #18: block 9: comm syz.5.1160: unable to read itable block
[  441.237384][ T6216] hsr_slave_1: left promiscuous mode
[  441.259021][  T185] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  441.269186][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  441.288173][ T9569] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  441.308704][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_0
[  441.331399][ T9569] EXT4-fs (loop5): I/O error while writing superblock
[  441.339397][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  441.364435][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_1
[  441.382182][ T9569] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: IO failure
[  441.417895][ T9574] netlink: 'syz.2.1162': attribute type 1 has an invalid length.
[  441.434378][ T9569] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  441.448166][ T6216] veth1_macvtap: left promiscuous mode
[  441.465821][ T6216] veth0_macvtap: left promiscuous mode
[  441.485872][ T6216] veth1_vlan: left promiscuous mode
[  441.494391][ T9569] EXT4-fs (loop5): I/O error while writing superblock
[  441.526260][ T6216] veth0_vlan: left promiscuous mode
[  441.539597][    C0] usblp0: nonzero read bulk status received: -71
[  441.543752][ T9569] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #18: comm syz.5.1160: mark_inode_dirty error
[  441.550810][  T185] usb 5-1: USB disconnect, device number 12
[  441.590392][ T9569] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  441.621413][ T9569] EXT4-fs (loop5): I/O error while writing superblock
[  441.717350][ T5647] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -EIO reading directory block
[  441.760197][ T5653] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  441.771163][ T5653] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  441.781676][ T9557] usblp0: removed
[  441.796085][ T5653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  441.801049][ T5647] EXT4-fs error (device loop5): ext4_get_inode_loc:5023: inode #2: block 5: comm syz-executor: unable to read itable block
[  441.823176][ T5647] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  441.843948][ T5647] EXT4-fs (loop5): I/O error while writing superblock
[  441.856659][ T5653] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  441.870218][ T5647] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: IO failure
[  441.885105][ T5653] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  441.895383][ T5647] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  441.905147][ T5647] EXT4-fs (loop5): I/O error while writing superblock
[  441.931729][ T5647] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error
[  441.951838][ T5647] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  441.963753][ T5647] EXT4-fs (loop5): I/O error while writing superblock
[  442.055167][ T3284] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:5008: inode #18: block 9: comm kworker/u8:10: unable to read itable block
[  442.091771][ T3284] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  442.110255][ T3284] EXT4-fs (loop5): I/O error while writing superblock
[  442.128129][ T3284] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:5008: inode #2: block 5: comm kworker/u8:10: unable to read itable block
[  442.150750][ T3284] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  442.160040][ T3284] EXT4-fs (loop5): I/O error while writing superblock
[  442.176635][ T5647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.218656][ T5647] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  442.314084][ T6216] team0 (unregistering): Port device team_slave_1 removed
[  442.334400][ T6216] team0 (unregistering): Port device team_slave_0 removed
[  442.448503][ T9587] loop4: detected capacity change from 0 to 2048
[  442.468443][ T9587] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  442.489911][ T9587] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  442.636245][ T9574] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  443.031493][ T5653] Bluetooth: hci2: command tx timeout
[  443.662416][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2
[  443.752851][ T5805] gfs2: fsid=syz:syz.0: file system withdrawn
[  443.991644][ T5653] Bluetooth: hci0: command tx timeout
[  444.588009][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.667508][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.739808][ T9460] bridge_slave_0: entered allmulticast mode
[  444.779200][ T9460] bridge_slave_0: entered promiscuous mode
[  444.808084][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.815440][ T9460] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.823082][ T9460] bridge_slave_1: entered allmulticast mode
[  444.831186][ T9460] bridge_slave_1: entered promiscuous mode
[  444.900115][ T9460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  444.913559][ T9460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  444.958507][ T9460] team0: Port device team_slave_0 added
[  444.987041][ T9460] team0: Port device team_slave_1 added
[  445.095745][ T6216] IPVS: stop unused estimator thread 0...
[  445.131441][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_0
[  445.153688][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  445.225285][ T9460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  445.250171][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_1
[  445.270950][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  445.345813][ T9460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  445.527882][ T9622] loop2: detected capacity change from 0 to 256
[  445.530418][ T9460] hsr_slave_0: entered promiscuous mode
[  445.541875][ T7526] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  445.585026][ T9460] hsr_slave_1: entered promiscuous mode
[  445.594396][ T9622] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  445.617079][ T9460] debugfs: 'hsr0' already exists in 'hsr'
[  445.635227][ T9460] Cannot create hsr debugfs directory
[  445.721317][ T7526] usb 4-1: Using ep0 maxpacket: 32
[  445.743255][ T7526] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  445.772859][ T7526] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.810265][ T7526] usb 4-1: config 0 descriptor??
[  445.845037][ T7526] gspca_main: nw80x-2.14.0 probing 055f:d001
[  445.850592][ T6216] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.900122][ T7092] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  445.915515][ T7092] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  445.927386][ T7092] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  445.942066][ T7092] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  445.954142][ T7092] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  446.063089][ T7092] Bluetooth: hci0: command tx timeout
[  446.375903][ T6216] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.406253][ T9578] xfrm0 speed is unknown, defaulting to 1000
[  446.428608][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3
[  446.448162][ T9622] xfrm0 speed is unknown, defaulting to 1000
[  446.544261][ T6216] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.800653][ T6216] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.285493][ T7526] usb 4-1: USB disconnect, device number 21
[  447.993233][ T7092] Bluetooth: hci5: command tx timeout
[  448.141758][ T7092] Bluetooth: hci0: command tx timeout
[  448.373955][ T9668] loop2: detected capacity change from 0 to 256
[  448.487972][ T9627] xfrm0 speed is unknown, defaulting to 1000
[  448.771180][ T9460] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  448.835048][ T9460] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  448.930034][ T9460] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  449.066994][ T9679] loop2: detected capacity change from 0 to 64
[  449.314825][ T9679] MINIX-fs: bad superblock or unable to read bitmaps
[  449.936662][ T9460] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  449.945181][ T9460] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  449.965090][ T9460] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  449.974179][ T9460] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  449.994203][ T9460] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  450.062161][ T7092] Bluetooth: hci5: command tx timeout
[  450.221857][ T7092] Bluetooth: hci0: command tx timeout
[  451.038344][ T6216] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.225377][ T5284] 8021q: adding VLAN 0 to HW filter on device eth4
[  451.904248][ T6216] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.141375][ T7092] Bluetooth: hci5: command tx timeout
[  452.479165][ T9712] loop2: detected capacity change from 0 to 4096
[  452.519172][ T9578] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.525552][ T9712] ntfs3(loop2): ino=9, mi_enum_attr
[  452.544222][ T9712] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  452.561606][ T9712] ntfs3(loop2): ino=9, mi_enum_attr
[  452.566980][ T9712] ntfs3(loop2): ino=b, mi_enum_attr
[  452.577104][ T9712] ntfs3(loop2): Failed to load $Extend (-22).
[  452.591277][ T9712] ntfs3(loop2): Failed to initialize $Extend.
[  452.610540][ T9578] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.626193][ T9578] bridge_slave_0: entered allmulticast mode
[  452.658883][ T9578] bridge_slave_0: entered promiscuous mode
[  452.698888][ T9712] ntfs3(loop2): ino=5, "/" mi_enum_attr
[  452.752721][ T6216] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.887698][ T9704] xfrm0 speed is unknown, defaulting to 1000
[  452.889722][ T9578] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.943682][ T9578] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.979040][ T9578] bridge_slave_1: entered allmulticast mode
[  453.009229][ T9578] bridge_slave_1: entered promiscuous mode
[  453.104551][ T6216] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.198113][ T9578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.271589][ T5765] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  453.368199][ T9578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  453.545423][ T5765] usb 4-1: Using ep0 maxpacket: 16
[  453.565852][ T5765] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  453.581410][ T5765] usb 4-1: config 0 has no interface number 0
[  453.592323][ T5765] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  453.621011][ T5765] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  453.634682][ T9578] team0: Port device team_slave_0 added
[  453.671689][ T9578] team0: Port device team_slave_1 added
[  453.683447][ T5765] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  453.718059][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.751129][ T5765] usb 4-1: Product: syz
[  453.769474][ T5765] usb 4-1: Manufacturer: syz
[  453.789349][ T5765] usb 4-1: SerialNumber: syz
[  453.803824][ T5765] usb 4-1: config 0 descriptor??
[  453.823341][ T9715] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  453.855124][ T9715] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  454.108016][ T9715] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  454.143519][ T9715] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  454.241877][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_0
[  454.249250][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  454.289407][ T7092] Bluetooth: hci5: command tx timeout
[  454.316450][ T9578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  454.389870][ T5765] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  454.417598][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_1
[  454.433763][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  454.476253][ T9578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  455.033357][ T9578] hsr_slave_0: entered promiscuous mode
[  455.042684][ T9578] hsr_slave_1: entered promiscuous mode
[  455.049343][ T9578] debugfs: 'hsr0' already exists in 'hsr'
[  455.061390][ T9578] Cannot create hsr debugfs directory
[  455.205834][ T5765] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  455.220934][ T5765] asix 4-1:0.34: probe with driver asix failed with error -71
[  455.249642][ T5765] usb 4-1: USB disconnect, device number 22
[  455.691302][ T9749] loop4: detected capacity change from 0 to 40427
[  455.699725][ T9749] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  455.708065][ T9749] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  455.718098][ T6216] bridge_slave_1: left allmulticast mode
[  455.751082][ T6216] bridge_slave_1: left promiscuous mode
[  455.781883][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.812469][ T9749] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  455.827683][ T9749] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  455.832381][ T6216] bridge_slave_0: left allmulticast mode
[  455.834874][ T9749] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  455.873146][ T6216] bridge_slave_0: left promiscuous mode
[  455.905916][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.001456][   T30] audit: type=1804 audit(1784688539.460:50): pid=9749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1190" name="/newroot/148/file0/bus" dev="loop4" ino=10 res=1 errno=0
[  456.066571][ T6216] bridge_slave_1: left allmulticast mode
[  456.081015][ T6216] bridge_slave_1: left promiscuous mode
[  456.122148][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.175114][ T6216] bridge_slave_0: left allmulticast mode
[  456.191010][ T6216] bridge_slave_0: left promiscuous mode
[  456.206069][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.215948][ T1106] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  456.695498][ T6216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  456.739738][ T6216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  456.763094][ T6216] bond0 (unregistering): Released all slaves
[  457.326859][ T6765] smbdirect: ib_dev[syz1] removed
[  458.009418][ T6216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  458.099093][ T6216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  458.167960][ T6216] bond0 (unregistering): Released all slaves
[  458.237636][ T9767] loop6: detected capacity change from 0 to 2640
[  458.274267][ T9767] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.347824][ T9767] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.371645][ T5284] 8021q: adding VLAN 0 to HW filter on device eth5
[  458.391386][ T9767] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.422618][ T9767] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.486091][ T9767] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.511385][  T185] xfrm0 speed is unknown, defaulting to 1000
[  458.524959][ T9767] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.540558][  T185] infiniband syz1: ib_query_port failed (-19)
[  458.604993][ T9767] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.640176][ T9767] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.689885][ T9767] ldm_validate_partition_table(): Disk read failed.
[  458.722234][ T9767] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.736315][ T9767] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.750077][ T9627] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.753011][ T9767] Dev loop6: unable to read RDB block 0
[  458.764331][ T9767]  loop6: unable to read partition table
[  458.770979][ T9767] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  458.789337][ T9627] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.801655][ T9627] bridge_slave_0: entered allmulticast mode
[  458.813378][ T9627] bridge_slave_0: entered promiscuous mode
[  459.121944][ T9627] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.161602][ T9627] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.191336][ T9627] bridge_slave_1: entered allmulticast mode
[  459.217053][ T9627] bridge_slave_1: entered promiscuous mode
[  459.267947][ T9460] 8021q: adding VLAN 0 to HW filter on device bond0
[  460.133283][ T9627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  460.406890][ T9627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  461.708318][ T9627] team0: Port device team_slave_0 added
[  461.736802][ T9627] team0: Port device team_slave_1 added
[  461.784329][ T9820] loop4: detected capacity change from 0 to 256
[  461.806843][ T9820] exfat: Deprecated parameter 'namecase'
[  461.882033][ T9820] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  462.059011][ T9460] 8021q: adding VLAN 0 to HW filter on device team0
[  462.359313][ T9627] batman_adv: batadv0: Adding interface: batadv_slave_0
[  462.376762][ T9627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.172899][ T9627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.186302][ T9627] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.193934][ T9627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.220505][ T9627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  464.337423][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.344631][ T3284] bridge0: port 1(bridge_slave_0) entered forwarding state
[  464.396831][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.404052][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state
[  464.598506][ T6216] hsr_slave_0: left promiscuous mode
[  464.624319][ T6216] hsr_slave_1: left promiscuous mode
[  464.642233][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.660197][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.675041][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.692421][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_1
[  464.701123][ T9857] loop3: detected capacity change from 0 to 1024
[  464.731369][ T6216] hsr_slave_0: left promiscuous mode
[  464.748746][ T6216] hsr_slave_1: left promiscuous mode
[  464.762685][ T9857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.776596][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.787471][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.819985][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.822233][  T185] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  464.849482][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_1
[  464.871860][ T9856] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  464.920220][ T6216] veth1_macvtap: left promiscuous mode
[  464.934232][ T6216] veth0_macvtap: left promiscuous mode
[  464.940291][ T6216] veth1_vlan: left promiscuous mode
[  464.954692][ T6216] veth0_vlan: left promiscuous mode
[  464.965612][ T6216] veth1_macvtap: left promiscuous mode
[  464.982311][ T6216] veth0_macvtap: left promiscuous mode
[  464.989510][ T6216] veth1_vlan: left promiscuous mode
[  464.993469][  T185] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  465.006121][ T6216] veth0_vlan: left promiscuous mode
[  465.012880][  T185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.038512][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.049516][  T185] usb 5-1: config 0 descriptor??
[  465.066116][  T185] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  466.588415][ T9867] loop3: detected capacity change from 0 to 40427
[  466.628972][ T9867] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  466.636831][ T9867] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  466.670617][ T6216] team0 (unregistering): Port device vlan2 removed
[  466.758122][ T9867] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  466.774121][ T9867] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  466.781173][ T9867] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  466.860370][  T185] usb 5-1: USB disconnect, device number 13
[  467.228475][ T6216] team0 (unregistering): Port device team_slave_1 removed
[  467.267852][ T6216] team0 (unregistering): Port device team_slave_0 removed
[  468.849186][ T9890] loop4: detected capacity change from 0 to 128
[  468.880565][ T9890] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  468.901289][ T9890] hpfs: filesystem error: improperly stopped
[  468.914061][ T9890] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  468.933934][ T9890] hpfs: You really don't want any checks? You are crazy...
[  468.948275][ T9890] hpfs: Code page index out of array
[  468.953933][ T9890] hpfs: code page support is disabled
[  468.959776][ T9890] hpfs: hpfs_map_4sectors(): unaligned read
[  468.966180][ T9890] hpfs: hpfs_map_4sectors(): unaligned read
[  468.973620][ T9890] hpfs: filesystem error: unable to find root dir
[  469.054939][ T6216] team0 (unregistering): Port device team_slave_1 removed
[  469.151361][ T9888] loop3: detected capacity change from 0 to 40427
[  469.159423][ T9888] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  469.167303][ T9888] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  469.182127][ T9888] F2FS-fs (loop3): invalid crc value
[  469.273380][ T9888] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  469.287331][ T9888] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  469.294436][ T9888] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  469.783792][ T5284] 8021q: adding VLAN 0 to HW filter on device eth6
[  470.019744][ T9627] hsr_slave_0: entered promiscuous mode
[  470.055733][ T9627] hsr_slave_1: entered promiscuous mode
[  470.085276][ T9627] debugfs: 'hsr0' already exists in 'hsr'
[  470.104647][ T9627] Cannot create hsr debugfs directory
[  470.224174][ T9904] netlink: 'syz.2.1226': attribute type 8 has an invalid length.
[  470.256539][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'.
[  470.343740][ T9904] bond0: entered promiscuous mode
[  470.349246][ T9904] bond_slave_0: entered promiscuous mode
[  470.372261][ T9904] bond_slave_1: entered promiscuous mode
[  470.397849][ T9904] gretap0: entered promiscuous mode
[  470.405572][ T9904] bond0: left promiscuous mode
[  470.421345][ T9904] bond_slave_0: left promiscuous mode
[  470.426975][ T9904] bond_slave_1: left promiscuous mode
[  470.449913][ T9904] gretap0: left promiscuous mode
[  471.863229][ T9578] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  471.911924][ T9578] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  472.051749][ T9578] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  472.072872][ T6216] IPVS: stop unused estimator thread 0...
[  473.015668][ T9578] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  473.102629][ T9578] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  473.237718][ T9923] loop2: detected capacity change from 0 to 40427
[  473.274415][ T9923] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  473.282208][ T9923] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  473.308932][ T9578] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  473.415088][ T9923] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  473.431994][ T9923] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  473.439350][ T9923] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  473.485928][ T9578] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  473.528908][ T9578] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  473.720584][ T9935] loop3: detected capacity change from 0 to 256
[  473.738190][ T9935] exfat: Deprecated parameter 'namecase'
[  473.761434][ T9935] exfat: Deprecated parameter 'namecase'
[  473.797014][ T9935] exfat: Deprecated parameter 'namecase'
[  473.834144][ T9935] exfat: Deprecated parameter 'utf8'
[  473.906496][ T9935] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[  474.314569][ T9627] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  474.356104][ T9627] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  474.458964][ T9952] loop4: detected capacity change from 0 to 64
[  474.706845][ T9952] MINIX-fs: bad superblock or unable to read bitmaps
[  474.976515][ T9627] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  475.400372][ T9627] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  475.463455][ T9578] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.503410][ T9627] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  475.562916][ T9627] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  475.609033][ T9627] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  475.945429][ T9955] loop3: detected capacity change from 0 to 32768
[  475.953671][ T9955] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1233 (9955)
[  475.974058][ T9955] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  475.982664][ T9627] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  475.985011][ T9955] BTRFS info (device loop3): using sha256 checksum algorithm
[  475.998585][ T9955] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  476.026457][ T5284] 8021q: adding VLAN 0 to HW filter on device eth7
[  476.049323][ T9578] 8021q: adding VLAN 0 to HW filter on device team0
[  476.095874][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.103061][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state
[  476.148812][ T9955] BTRFS info (device loop3): rebuilding free space tree
[  476.149133][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.162975][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state
[  476.183479][ T9955] BTRFS info (device loop3): disabling free space tree
[  476.190430][ T9955] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  476.200168][ T9955] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  476.215401][ T9955] BTRFS info (device loop3): enabling ssd optimizations
[  476.222540][ T9955] BTRFS info (device loop3): turning on async discard
[  476.229319][ T9955] BTRFS info (device loop3): enabling disk space caching
[  476.237042][ T9955] BTRFS info (device loop3): force clearing of disk cache
[  476.340410][   T30] audit: type=1800 audit(1784688559.800:51): pid=9955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1233" name="file1" dev="loop3" ino=260 res=0 errno=0
[  476.344132][ T9955] BTRFS error (device loop3): balance: invalid convert system profile raid0
[  476.469922][ T9460] 8021q: adding VLAN 0 to HW filter on device batadv0
[  476.556277][ T5632] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  476.833087][ T9627] 8021q: adding VLAN 0 to HW filter on device bond0
[  476.912777][ T9627] 8021q: adding VLAN 0 to HW filter on device team0
[  476.976363][ T6765] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.983564][ T6765] bridge0: port 1(bridge_slave_0) entered forwarding state
[  477.058323][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.065506][ T6766] bridge0: port 2(bridge_slave_1) entered forwarding state
[  477.834109][ T9627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  477.985723][T10015] loop2: detected capacity change from 0 to 128
[  478.107148][T10015] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  478.232735][T10015] hpfs: filesystem error: improperly stopped
[  478.270997][T10015] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  478.367170][T10015] hpfs: You really don't want any checks? You are crazy...
[  478.424786][T10015] hpfs: Code page index out of array
[  478.455578][T10015] hpfs: code page support is disabled
[  478.512590][T10015] hpfs: hpfs_map_4sectors(): unaligned read
[  478.564166][T10015] hpfs: hpfs_map_4sectors(): unaligned read
[  478.611159][T10015] hpfs: filesystem error: unable to find root dir
[  479.411646][ T9460] veth0_vlan: entered promiscuous mode
[  479.425929][ T9460] veth1_vlan: entered promiscuous mode
[  479.591782][ T5284] 8021q: adding VLAN 0 to HW filter on device eth8
[  479.631554][ T9460] veth0_macvtap: entered promiscuous mode
[  479.654482][ T9460] veth1_macvtap: entered promiscuous mode
[  479.839455][ T9460] batman_adv: batadv0: Interface activated: batadv_slave_0
[  479.896328][ T9460] batman_adv: batadv0: Interface activated: batadv_slave_1
[  480.068203][ T9578] 8021q: adding VLAN 0 to HW filter on device batadv0
[  480.120933][ T3284] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  480.151869][ T3284] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  480.195784][ T3284] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  480.237451][ T3284] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  480.289752][T10037] loop3: detected capacity change from 0 to 40427
[  480.299594][T10037] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  480.308150][T10037] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  480.427600][T10037] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  480.441891][T10037] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  480.448961][T10037] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  480.559275][   T30] audit: type=1804 audit(1784688564.010:52): pid=10037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1242" name="/newroot/227/file0/bus" dev="loop3" ino=10 res=1 errno=0
[  480.758024][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.795496][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.876595][ T9627] 8021q: adding VLAN 0 to HW filter on device batadv0
[  480.985227][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.985792][ T9578] veth0_vlan: entered promiscuous mode
[  481.019459][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.028550][ T9578] veth1_vlan: entered promiscuous mode
[  481.189112][ T9578] veth0_macvtap: entered promiscuous mode
[  481.226702][ T9578] veth1_macvtap: entered promiscuous mode
[  481.297849][ T9578] batman_adv: batadv0: Interface activated: batadv_slave_0
[  481.336406][ T9578] batman_adv: batadv0: Interface activated: batadv_slave_1
[  481.418094][ T6216] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  481.475648][ T6216] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  481.549964][ T6216] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  481.561720][T10060] loop4: detected capacity change from 0 to 1024
[  481.589257][ T1123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  481.598032][T10060] EXT4-fs: Ignoring removed orlov option
[  481.687606][T10060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  481.925567][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.988856][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.015554][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.216580][ T3284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.241469][ T3284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.393612][ T5805] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  482.438056][ T9627] veth0_vlan: entered promiscuous mode
[  482.477789][ T9627] veth1_vlan: entered promiscuous mode
[  482.567503][ T5805] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  482.619605][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  482.660986][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  482.671155][ T9627] veth0_macvtap: entered promiscuous mode
[  482.696349][ T5805] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  482.723726][ T9627] veth1_macvtap: entered promiscuous mode
[  482.737482][ T5805] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  482.773248][ T5805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.809027][ T9627] batman_adv: batadv0: Interface activated: batadv_slave_0
[  482.828128][ T5805] usb 4-1: config 0 descriptor??
[  482.866997][ T9627] batman_adv: batadv0: Interface activated: batadv_slave_1
[  482.901984][ T6216] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  482.951044][ T6216] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  482.975888][ T6216] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  483.015979][ T6216] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  483.320037][ T5805] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  483.400137][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  483.428160][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.644833][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  483.691916][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  484.129527][T10117] loop6: detected capacity change from 0 to 128
[  484.144803][T10115] loop7: detected capacity change from 0 to 512
[  484.182091][   T29] usb 4-1: USB disconnect, device number 23
[  484.197960][T10117] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  484.234969][T10117] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  484.242577][T10115] EXT4-fs error (device loop7): dx_probe:791: inode #2: comm syz.7.1167: Directory hole found for htree index block 0
[  484.286451][T10115] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  484.286773][T10115] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  484.295859][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  484.295891][    C0] EXT4-fs (loop7): initial error at time 1784688567: dx_probe:791: inode 2
[  484.295945][    C0] EXT4-fs (loop7): last error at time 1784688567: dx_probe:791: inode 2
[  484.331435][T10115] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  484.482955][T10124] loop0: detected capacity change from 0 to 128
[  484.608002][T10124] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  484.648438][ T9627] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.662694][T10124] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  485.234129][ T9460] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  485.571405][T10124] fscrypt (loop0, inode 12): Error allocating 'adiantum(xchacha12,aes)' transform: -4
[  486.001098][ T9578] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  486.283324][T10153] overlayfs: failed lookup in lower (newroot/230, name='file0', err=-40): overlapping layers
[  486.332000][T10153] overlayfs: failed lookup in lower (newroot/230, name='file0', err=-40): overlapping layers
[  486.383424][T10159] syz_tun: entered allmulticast mode
[  486.527070][T10159] syz_tun (unregistering): left allmulticast mode
[  487.111538][T10172] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.1270'.
[  488.662993][   T29] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  488.891359][   T29] usb 4-1: Using ep0 maxpacket: 32
[  488.901502][   T29] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  488.911170][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.979465][   T29] usb 4-1: Product: syz
[  488.989299][   T29] usb 4-1: Manufacturer: syz
[  489.013998][   T29] usb 4-1: SerialNumber: syz
[  489.081032][   T29] usb 4-1: config 0 descriptor??
[  489.178958][   T29] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  489.471307][T10080] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  489.667457][T10080] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  489.725545][T10080] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  489.760647][T10080] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  489.792270][T10217] overlayfs: failed to resolve './bus': -2
[  489.814675][T10080] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  489.854646][T10080] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  489.907521][T10080] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  489.938063][T10080] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  489.974950][T10080] usb 5-1: Product: syz
[  489.988739][T10080] usb 5-1: Manufacturer: syz
[  490.011548][T10080] usb 5-1: SerialNumber: syz
[  490.036420][T10080] usb 5-1: config 0 descriptor??
[  490.279823][T10080] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  490.321114][T10080] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  490.476945][T10080] radio-si470x 5-1:0.0: software version 0, hardware version 0
[  490.504175][T10080] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  490.559437][T10080] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  490.625342][   T29] gspca_topro: Sensor cx0342
[  490.680524][ T5805] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  491.850912][T10080] radio-si470x 5-1:0.0: submitting int urb failed (-90)
[  491.866563][   T29] usb 4-1: USB disconnect, device number 24
[  492.011630][ T5805] usb 3-1: Using ep0 maxpacket: 8
[  492.019065][ T5805] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  492.027904][ T5805] usb 3-1: config 0 has no interface number 0
[  492.034619][ T5805] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  492.046127][ T5805] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  492.088390][ T5805] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  492.099917][ T5805] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  492.149764][ T5805] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  492.173267][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.295593][ T5805] usb 3-1: config 0 descriptor??
[  492.343445][ T5805] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  492.679885][ T5738] usb 3-1: USB disconnect, device number 14
[  492.680171][    C1] ldusb 3-1:0.55: usb_submit_urb failed (-19)
[  492.741452][T10080] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71
[  492.783256][T10080] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71
[  492.803361][ T5738] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  492.984845][T10080] usb 5-1: USB disconnect, device number 14
[  494.519311][T10287] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1300'.
[  495.082570][ T5738] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  495.263496][ T5738] usb 3-1: Using ep0 maxpacket: 32
[  495.288142][ T5738] usb 3-1: unable to get BOS descriptor or descriptor too short
[  495.346828][ T5738] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[  495.384817][ T5738] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[  495.416570][ T5738] usb 3-1: config 14 has no interface number 0
[  495.445938][ T5738] usb 3-1: config 14 has no interface number 1
[  495.471962][ T5738] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  495.513687][ T5738] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  495.559651][ T5738] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  495.619069][ T5738] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  495.730450][ T5738] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  495.787507][ T5738] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  495.833608][ T5738] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  495.867941][ T5738] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  495.909189][ T5738] usb 3-1: config 14 interface 57 has no altsetting 0
[  495.935209][ T5738] usb 3-1: config 14 interface 228 has no altsetting 0
[  495.975274][ T5738] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  496.029711][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.061480][ T5738] usb 3-1: Product: syz
[  496.073695][ T5738] usb 3-1: Manufacturer: syz
[  496.089519][ T5738] usb 3-1: SerialNumber: syz
[  496.173576][T10315] fuse: Bad value for 'group_id'
[  496.201171][T10315] fuse: Bad value for 'group_id'
[  496.556483][ T5738] legousbtower 3-1:14.57: interrupt endpoints not found
[  496.957492][   T30] audit: type=1326 audit(1784688580.390:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.0.1307" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0c539de99 code=0x0
[  497.313328][   T30] audit: type=1326 audit(1784688580.570:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.0.1307" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c539de99 code=0x7ffc0000
[  497.631563][ T5738] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40490
[  497.659473][   T30] audit: type=1326 audit(1784688580.590:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.0.1307" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c539de99 code=0x7ffc0000
[  497.711708][ T5738] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  497.802714][   T30] audit: type=1326 audit(1784688580.590:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.0.1307" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c539de99 code=0x7ffc0000
[  497.965555][   T30] audit: type=1326 audit(1784688580.590:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.0.1307" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa0c539de99 code=0x7ffc0000
[  498.076943][   T30] audit: type=1326 audit(1784688580.610:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.0.1307" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c539de99 code=0x7ffc0000
[  498.176541][   T30] audit: type=1326 audit(1784688580.670:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.0.1307" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa0c535e6ce code=0x7ffc0000
[  498.423940][   T30] audit: type=1326 audit(1784688580.680:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.0.1307" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa0c535e6ce code=0x7ffc0000
[  498.449879][   T30] audit: type=1326 audit(1784688580.690:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.0.1307" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa0c535e6ce code=0x7ffc0000
[  498.503370][   T30] audit: type=1326 audit(1784688580.700:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.0.1307" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa0c535e6ce code=0x7ffc0000
[  499.494885][ T5738] usb 3-1: USB disconnect, device number 15
[  499.632099][ T5738] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected
[  499.721574][T10350] loop4: detected capacity change from 0 to 512
[  499.758813][T10080] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  499.829048][T10350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  499.896459][T10355] loop7: detected capacity change from 0 to 4096
[  499.904935][T10350] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  499.915571][T10355] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  499.941446][T10080] usb 4-1: Using ep0 maxpacket: 32
[  499.953656][T10080] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  499.982448][T10080] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  500.059886][T10080] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  500.117911][T10080] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  500.176276][T10080] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  500.214758][T10080] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.255744][T10080] usb 4-1: Product: syz
[  500.277139][T10080] usb 4-1: Manufacturer: syz
[  500.299514][T10080] usb 4-1: SerialNumber: syz
[  500.338149][T10353] loop2: detected capacity change from 0 to 512
[  500.447108][    C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  500.514957][T10353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  500.564594][T10366] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz.4.1318: invalid size
[  500.602305][T10366] EXT4-fs (loop4): Remounting filesystem read-only
[  500.618487][T10353] EXT4-fs warning (device loop2): verify_group_input:136: Cannot add at group 5 (only 1 groups)
[  500.642332][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1321'.
[  500.686274][T10080] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input25
[  500.785854][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  500.794027][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  500.845939][T10080] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  500.870640][ T3284] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  500.878051][T10080]  (id 0x00)
[  500.887185][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  500.948019][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.182419][T10080] rc_core: IR keymap rc-imon-pad not found
[  501.216483][T10080] Registered IR keymap rc-empty
[  501.486710][T10387] netlink: 'syz.6.1325': attribute type 8 has an invalid length.
[  501.497154][T10080] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  501.521289][T10080] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  501.542725][T10080] imon:send_packet: packet tx failed (-71)
[  501.545628][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1325'.
[  502.112872][T10387] bond0: entered promiscuous mode
[  502.148287][T10387] bond_slave_0: entered promiscuous mode
[  502.183896][T10387] bond_slave_1: entered promiscuous mode
[  502.241316][T10387] gretap0: entered promiscuous mode
[  502.310043][T10080] imon 4-1:155.0: remote input dev register failed
[  502.319201][T10080] imon 4-1:155.0: imon_init_intf0: rc device setup failed
[  502.347839][T10387] bond0: left promiscuous mode
[  502.355674][T10387] bond_slave_0: left promiscuous mode
[  502.361364][T10387] bond_slave_1: left promiscuous mode
[  502.387596][T10387] gretap0: left promiscuous mode
[  502.467635][T10080] imon 4-1:155.0: unable to initialize intf0, err 0
[  502.477187][T10080] imon:imon_probe: failed to initialize context!
[  502.486885][T10080] imon 4-1:155.0: unable to register, err -19
[  502.509064][T10080] usb 4-1: USB disconnect, device number 25
[  504.490771][T10410] loop7: detected capacity change from 0 to 131072
[  505.394915][T10410] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  505.418179][T10410] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  505.445233][T10410] F2FS-fs (loop7): Stopped filesystem due to reason: 0
[  505.461094][T10410] F2FS-fs (loop7): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix
[  508.436690][T10450] loop2: detected capacity change from 0 to 4096
[  508.451865][T10457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1341'.
[  508.531143][T10450] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  509.251892][T10465] netlink: 'syz.3.1342': attribute type 8 has an invalid length.
[  509.346272][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1342'.
[  509.399710][T10457] 8021q: adding VLAN 0 to HW filter on device bond1
[  509.634992][T10463] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  509.762446][T10465] bond0: entered promiscuous mode
[  509.786377][T10465] bond_slave_0: entered promiscuous mode
[  509.802681][T10465] bond_slave_1: entered promiscuous mode
[  509.831649][T10465] gretap0: entered promiscuous mode
[  509.881856][T10465] bond0: left promiscuous mode
[  509.911297][T10465] bond_slave_0: left promiscuous mode
[  509.929285][T10465] bond_slave_1: left promiscuous mode
[  509.964199][T10465] gretap0: left promiscuous mode
[  514.895123][T10519] overlayfs: failed to resolve './bus': -2
[  514.916720][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1368'.
[  516.645291][ T5738] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  516.826267][ T5738] usb 5-1: config 0 interface 0 has no altsetting 0
[  516.833123][ T5738] usb 5-1: New USB device found, idVendor=05ac, idProduct=0320, bcdDevice= 0.00
[  516.861441][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.896412][ T5738] usb 5-1: config 0 descriptor??
[  516.981376][   T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  517.151254][   T10] usb 8-1: Using ep0 maxpacket: 16
[  517.167329][   T10] usb 8-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[  517.200005][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.264566][   T10] usb 8-1: config 0 descriptor??
[  517.333155][ T5738] usbhid 5-1:0.0: can't add hid device: -71
[  517.363557][ T5738] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  517.432120][ T5738] usb 5-1: USB disconnect, device number 15
[  520.231674][   T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  520.412597][   T24] usb 1-1: Using ep0 maxpacket: 32
[  520.458466][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  520.574324][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  520.824663][   T10] usbhid 8-1:0.0: can't add hid device: -71
[  521.022543][   T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  521.090445][   T10] usb 8-1: USB disconnect, device number 2
[  521.143926][   T24] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  521.198304][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  521.271652][T10585] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1376'.
[  521.299691][   T24] usb 1-1: config 0 descriptor??
[  521.802182][T10597] loop4: detected capacity change from 0 to 512
[  521.854436][T10597] EXT4-fs: Ignoring removed nobh option
[  521.880819][   T24] hid_parser_main: 7 callbacks suppressed
[  521.880846][   T24] ft260 0003:0403:6030.001C: unknown main item tag 0x0
[  521.930668][   T24] ft260 0003:0403:6030.001C: unknown main item tag 0x0
[  521.992329][T10597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  522.015235][   T24] ft260 0003:0403:6030.001C: chip code: 0000 0000
[  522.032812][T10597] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  522.224454][   T24] ft260 0003:0403:6030.001C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0
[  522.281679][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.448113][   T24] ft260 0003:0403:6030.001C: failed to retrieve status: -32, no wakeup
[  522.591260][   T24] ft260 0003:0403:6030.001C: failed to retrieve status: -32
[  523.086854][T10568] ft260 0003:0403:6030.001C: ft260_i2c_read: failed with -38
[  523.240053][T10622] syzkaller0: entered promiscuous mode
[  523.270016][T10622] syzkaller0: entered allmulticast mode
[  523.279767][T10080] usb 1-1: reset high-speed USB device number 17 using dummy_hcd
[  523.358503][T10622] tipc: Started in network mode
[  523.378125][T10622] tipc: Node identity c26f03dc1774, cluster identity 4711
[  523.406875][T10622] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  523.426922][T10623] tipc: Resetting bearer <eth:syzkaller0>
[  523.492251][T10623] tipc: Disabling bearer <eth:syzkaller0>
[  523.517393][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1389'.
[  523.533964][T10636] loop7: detected capacity change from 0 to 8
[  524.158079][   T24] usb 1-1: USB disconnect, device number 17
[  524.431320][   T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  524.597330][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  524.650461][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  524.676375][   T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  524.708443][   T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  524.747194][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.791851][   T10] usb 8-1: config 0 descriptor??
[  525.235375][   T10] plantronics 0003:047F:FFFF.001D: report_id 0 is invalid
[  525.258311][   T10] plantronics 0003:047F:FFFF.001D: item 0 1 1 8 parsing failed
[  525.281446][ T7092] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  525.291405][ T7092] CPU: 1 UID: 0 PID: 7092 Comm: kworker/u9:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  525.291460][ T7092] Tainted: [L]=SOFTLOCKUP
[  525.291473][ T7092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  525.291498][ T7092] Workqueue: hci2 hci_rx_work
[  525.291535][ T7092] Call Trace:
[  525.291547][ T7092]  <TASK>
[  525.291561][ T7092]  dump_stack_lvl+0x100/0x190
[  525.291606][ T7092]  sysfs_warn_dup.cold+0x1c/0x28
[  525.291664][ T7092]  sysfs_create_dir_ns+0x24b/0x2b0
[  525.291713][ T7092]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  525.291759][ T7092]  ? find_held_lock+0x2b/0x80
[  525.291812][ T7092]  ? kobject_add_internal+0x25f/0x930
[  525.291867][ T7092]  ? kobject_add_internal+0x25f/0x930
[  525.291925][ T7092]  ? srso_alias_return_thunk+0x5/0xfbef5
[  525.291971][ T7092]  ? do_raw_spin_unlock+0x145/0x1e0
[  525.291989][   T10] plantronics 0003:047F:FFFF.001D: parse failed
[  525.292025][ T7092]  kobject_add_internal+0x2c8/0x930
[  525.292097][ T7092]  kobject_add+0x16a/0x1e0
[  525.292151][ T7092]  ? __pfx_kobject_add+0x10/0x10
[  525.292201][ T7092]  ? class_to_subsys+0x10f/0x150
[  525.292262][ T7092]  ? srso_alias_return_thunk+0x5/0xfbef5
[  525.292315][ T7092]  ? srso_alias_return_thunk+0x5/0xfbef5
[  525.292359][ T7092]  ? kobject_put+0xb9/0x640
[  525.292406][ T7092]  ? _raw_spin_unlock+0x28/0x50
[  525.292477][ T7092]  device_add+0x294/0x1970
[  525.292532][ T7092]  ? __pfx_dev_set_name+0x10/0x10
[  525.292594][ T7092]  ? __pfx_device_add+0x10/0x10
[  525.292648][ T7092]  ? srso_alias_return_thunk+0x5/0xfbef5
[  525.292692][ T7092]  ? mgmt_send_event_skb+0x2fb/0x460
[  525.292746][ T7092]  hci_conn_add_sysfs+0x1a3/0x260
[  525.292794][ T7092]  le_conn_complete_evt+0x11eb/0x1f60
[  525.292850][ T7092]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  525.292887][ T7092]  ? hci_event_packet+0x186/0xcd0
[  525.292921][ T7092]  ? srso_alias_return_thunk+0x5/0xfbef5
[  525.292980][ T7092]  hci_le_conn_complete_evt+0x23c/0x3a0
[  525.293021][ T7092]  ? skb_pull_data+0x15f/0x1e0
[  525.293102][ T7092]  hci_le_meta_evt+0x34a/0x5f0
[  525.293144][ T7092]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  525.293195][ T7092]  hci_event_packet+0x51c/0xcd0
[  525.293234][ T7092]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  525.293281][ T7092]  ? __pfx_hci_event_packet+0x10/0x10
[  525.293328][ T7092]  ? srso_alias_return_thunk+0x5/0xfbef5
[  525.293377][ T7092]  ? kcov_remote_start+0x384/0x670
[  525.293415][ T7092]  ? lockdep_hardirqs_on+0x78/0x100
[  525.293454][ T7092]  ? srso_alias_return_thunk+0x5/0xfbef5
[  525.293511][ T7092]  hci_rx_work+0x451/0xfc0
[  525.293557][ T7092]  process_one_work+0xa23/0x1940
[  525.293638][ T7092]  ? __pfx_process_one_work+0x10/0x10
[  525.293696][ T7092]  ? srso_alias_return_thunk+0x5/0xfbef5
[  525.293758][ T7092]  ? srso_alias_return_thunk+0x5/0xfbef5
[  525.293811][ T7092]  worker_thread+0x5ef/0xe50
[  525.293883][ T7092]  ? __pfx_worker_thread+0x10/0x10
[  525.293946][ T7092]  ? kthread+0x13a/0x450
[  525.293998][ T7092]  ? __pfx_worker_thread+0x10/0x10
[  525.294065][ T7092]  kthread+0x370/0x450
[  525.294119][ T7092]  ? __pfx_kthread+0x10/0x10
[  525.294177][ T7092]  ret_from_fork+0x72b/0xd50
[  525.294227][ T7092]  ? __pfx_ret_from_fork+0x10/0x10
[  525.294275][ T7092]  ? srso_alias_return_thunk+0x5/0xfbef5
[  525.294327][ T7092]  ? __switch_to+0x800/0x10f0
[  525.294382][ T7092]  ? __switch_to_asm+0x39/0x70
[  525.294434][ T7092]  ? __pfx_kthread+0x10/0x10
[  525.294495][ T7092]  ret_from_fork_asm+0x1a/0x30
[  525.294572][ T7092]  </TASK>
[  525.294631][ T7092] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  525.647014][ T7092] Bluetooth: hci2: failed to register connection device
[  525.723016][   T10] plantronics 0003:047F:FFFF.001D: probe with driver plantronics failed with error -22
[  525.771610][   T10] usb 8-1: USB disconnect, device number 3
[  526.121419][T10694] binder: 10693:10694 unknown command 0
[  526.138688][T10694] binder: 10693:10694 ioctl c0306201 2000000001c0 returned -22
[  531.057562][T10764] loop6: detected capacity change from 0 to 256
[  531.177123][T10764] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  531.221804][ T5773] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  531.393548][ T5773] usb 5-1: Using ep0 maxpacket: 32
[  531.434291][ T5773] usb 5-1: unable to get BOS descriptor or descriptor too short
[  531.465756][ T5773] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[  531.487858][ T5773] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[  531.514560][ T5773] usb 5-1: config 14 has no interface number 0
[  531.535064][ T5773] usb 5-1: config 14 has no interface number 1
[  531.558402][ T5773] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  531.597773][ T5773] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  531.598089][T10781] xt_hashlimit: size too large, truncated to 1048576
[  531.635896][ T5773] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  531.667423][ T5773] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  531.696923][ T5773] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  531.702275][T10783] xt_connbytes: Forcing CT accounting to be enabled
[  531.720885][ T5773] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  531.757822][ T5773] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  531.808987][ T5773] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  531.835562][ T7092] Bluetooth: hci2: command 0x0406 tx timeout
[  531.846147][ T5773] usb 5-1: config 14 interface 57 has no altsetting 0
[  531.853247][ T5773] usb 5-1: config 14 interface 228 has no altsetting 0
[  531.863225][ T5773] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  531.881467][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.900039][ T5773] usb 5-1: Product: syz
[  531.904423][ T5773] usb 5-1: Manufacturer: syz
[  531.909025][ T5773] usb 5-1: SerialNumber: syz
[  532.177228][T10785] fuse: Bad value for 'fd'
[  533.178701][ T5773] legousbtower 5-1:14.57: interrupt endpoints not found
[  533.199642][ T5773] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40490
[  533.215917][ T5773] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  533.547692][T10809] Bluetooth: (null): Invalid header checksum
[  533.567185][ T1106] Bluetooth: (null): Invalid header checksum
[  535.743445][T10801] usb 5-1: LEGO USB Tower reset control request failed
[  535.870273][   T24] usb 5-1: USB disconnect, device number 16
[  535.965854][   T24] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected
[  538.711112][T10885] binder: 10884:10885 ioctl c0306201 200000004a40 returned -22
[  538.782705][ T7092] Bluetooth: hci3: command 0x0406 tx timeout
[  538.892449][T10889] fuse: fd is not a fuse device
[  539.591767][T10901] binder: 10899:10901 ioctl c0306201 200000000080 returned -14
[  539.605201][T10901] binder: BINDER_SET_CONTEXT_MGR already set
[  539.619802][T10901] binder: 10899:10901 ioctl 4018620d 200000000040 returned -16
[  539.660668][T10901] binder: 10899:10901 ioctl c0306201 2000000003c0 returned -14
[  543.006890][T10931] loop6: detected capacity change from 0 to 40427
[  543.026277][T10931] F2FS-fs (loop6): Wrong SSA boundary, start(3584) end(4096) blocks(3072)
[  543.034871][T10931] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  543.043505][T10931] F2FS-fs (loop6): build fault injection rate: 771
[  543.052940][T10931] F2FS-fs (loop6): invalid crc value
[  543.123895][T10931] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  543.149136][T10931] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  543.159564][T10931] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  543.319961][ T9460] syz-executor: attempt to access beyond end of device
[  543.319961][ T9460] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  543.389174][ T9460] CPU: 1 UID: 0 PID: 9460 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  543.389234][ T9460] Tainted: [L]=SOFTLOCKUP
[  543.389248][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  543.389272][ T9460] Call Trace:
[  543.389284][ T9460]  <TASK>
[  543.389298][ T9460]  dump_stack_lvl+0x100/0x190
[  543.389352][ T9460]  f2fs_stop_checkpoint+0x5e6/0xb30
[  543.389415][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.389463][ T9460]  ? errseq_set+0xe3/0x150
[  543.389519][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.389574][ T9460]  f2fs_write_end_bio+0xf53/0x1340
[  543.389644][ T9460]  ? __pfx_f2fs_write_end_bio+0x10/0x10
[  543.389715][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.389773][ T9460]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  543.389844][ T9460]  bio_endio+0x778/0x8e0
[  543.389887][ T9460]  submit_bio_noacct+0x64c/0x1ff0
[  543.389955][ T9460]  f2fs_submit_write_bio+0x133/0x330
[  543.390016][ T9460]  __submit_merged_bio+0x330/0x7b0
[  543.390079][ T9460]  ? rcu_is_watching+0x12/0xc0
[  543.390139][ T9460]  __submit_merged_write_cond+0x3fe/0x510
[  543.390216][ T9460]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  543.390293][ T9460]  ? __pfx___might_resched+0x10/0x10
[  543.390332][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.390380][ T9460]  ? folio_clear_dirty_for_io+0x178/0x960
[  543.390446][ T9460]  f2fs_write_cache_pages+0x20e9/0x2630
[  543.390514][ T9460]  ? __bfs+0xef/0x2a0
[  543.390570][ T9460]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  543.390613][ T9460]  ? is_bpf_text_address+0x8a/0x1a0
[  543.390653][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.390699][ T9460]  ? __kasan_check_byte+0x13/0x50
[  543.390765][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.390820][ T9460]  ? unwind_next_frame+0x3be/0x2090
[  543.390880][ T9460]  ? rcu_is_watching+0x12/0xc0
[  543.390932][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.390982][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.391029][ T9460]  ? __kasan_check_byte+0x13/0x50
[  543.391093][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.391158][ T9460]  ? is_bpf_text_address+0x94/0x1a0
[  543.391195][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.391243][ T9460]  ? kernel_text_address+0x8d/0x100
[  543.391370][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.391421][ T9460]  ? check_prev_add+0x354/0xe60
[  543.391458][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.391504][ T9460]  ? rcu_is_watching+0x12/0xc0
[  543.391561][ T9460]  f2fs_write_data_pages+0x799/0x16d0
[  543.391619][ T9460]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  543.391672][ T9460]  ? do_writepages+0x4b5/0x600
[  543.391729][ T9460]  ? do_writepages+0x4b5/0x600
[  543.391784][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.391841][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.391887][ T9460]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  543.391935][ T9460]  do_writepages+0x278/0x600
[  543.391999][ T9460]  ? __pfx_do_writepages+0x10/0x10
[  543.392055][ T9460]  ? do_raw_spin_unlock+0x145/0x1e0
[  543.392103][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.392149][ T9460]  ? _raw_spin_unlock+0x28/0x50
[  543.392215][ T9460]  filemap_writeback+0x22d/0x2e0
[  543.392279][ T9460]  ? __pfx_filemap_writeback+0x10/0x10
[  543.392338][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.392437][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.392484][ T9460]  ? find_held_lock+0x2b/0x80
[  543.392536][ T9460]  ? f2fs_sync_dirty_inodes+0x3a7/0x970
[  543.392582][ T9460]  ? f2fs_sync_dirty_inodes+0x3a7/0x970
[  543.392626][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.392685][ T9460]  f2fs_sync_dirty_inodes+0x46a/0x970
[  543.392750][ T9460]  block_operations+0x2a6/0xfc0
[  543.392806][ T9460]  ? __pfx_block_operations+0x10/0x10
[  543.392911][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.392962][ T9460]  ? ktime_get+0x22c/0x320
[  543.393000][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.393046][ T9460]  ? rcu_is_watching+0x12/0xc0
[  543.393117][ T9460]  f2fs_write_checkpoint+0x58b/0x53d0
[  543.393185][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.393238][ T9460]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  543.393284][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.393338][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.393384][ T9460]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  543.393462][ T9460]  kill_f2fs_super+0x3f1/0x4a0
[  543.393509][ T9460]  ? __pfx_kill_f2fs_super+0x10/0x10
[  543.393576][ T9460]  ? lockdep_hardirqs_on+0x78/0x100
[  543.393616][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.393665][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.393727][ T9460]  deactivate_locked_super+0xc1/0x1b0
[  543.393773][ T9460]  deactivate_super+0xe7/0x110
[  543.393827][ T9460]  cleanup_mnt+0x21f/0x450
[  543.393883][ T9460]  task_work_run+0x150/0x240
[  543.393948][ T9460]  ? __pfx_task_work_run+0x10/0x10
[  543.394015][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.394071][ T9460]  exit_to_user_mode_loop+0x1d8/0x6f0
[  543.394114][ T9460]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.394160][ T9460]  ? rcu_is_watching+0x12/0xc0
[  543.394215][ T9460]  do_syscall_64+0x666/0x870
[  543.394263][ T9460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  543.394303][ T9460] RIP: 0033:0x7fabaa59f0d7
[  543.394334][ T9460] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  543.394372][ T9460] RSP: 002b:00007ffde77f7118 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  543.394409][ T9460] RAX: 0000000000000000 RBX: 00007fabaa63330a RCX: 00007fabaa59f0d7
[  543.394435][ T9460] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde77f71d0
[  543.394458][ T9460] RBP: 00007ffde77f71d0 R08: 00007ffde77f81d0 R09: 00000000ffffffff
[  543.394485][ T9460] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde77f8260
[  543.394509][ T9460] R13: 00007fabaa63330a R14: 00000000000849e0 R15: 00007ffde77f82a0
[  543.394561][ T9460]  </TASK>
[  544.054395][ T9460] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  544.506932][T10946] loop7: detected capacity change from 0 to 128
[  544.660552][T10946] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  544.733515][T10946] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  546.092420][T10953] 
[  546.094781][T10953] ======================================================
[  546.095138][T10959] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  546.101790][T10953] WARNING: possible circular locking dependency detected
[  546.101812][T10953] syzkaller #0 Tainted: G             L     
[  546.101832][T10953] ------------------------------------------------------
[  546.101847][T10953] syz.7.1492/10953 is trying to acquire lock:
[  546.101866][T10953] ffff888032a44640 (sb_internal){++++}-{0:0}, at: evict+0x3c2/0xad0
[  546.143153][T10953] 
[  546.143153][T10953] but task is already holding lock:
[  546.150495][T10953] ffff88801e72ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x3bf/0x2000
[  546.160691][T10953] 
[  546.160691][T10953] which lock already depends on the new lock.
[  546.160691][T10953] 
[  546.171070][T10953] 
[  546.171070][T10953] the existing dependency chain (in reverse order) is:
[  546.180059][T10953] 
[  546.180059][T10953] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  546.188487][T10953]        lock_acquire+0x1b9/0x370
[  546.193503][T10953]        ext4_writepages+0x21d/0x750
[  546.198801][T10953]        do_writepages+0x278/0x600
[  546.203919][T10953]        __writeback_single_inode+0x164/0x1300
[  546.210071][T10953]        writeback_single_inode+0x51c/0xfc0
[  546.215959][T10953]        write_inode_now+0x174/0x1f0
[  546.221247][T10953]        iput.part.0+0x62a/0x1050
[  546.226276][T10953]        iput+0x35/0x40
[  546.230419][T10953]        ext4_xattr_block_set+0x6f7/0x3660
[  546.236210][T10953]        ext4_expand_extra_isize_ea+0x17c6/0x1d70
[  546.242612][T10953]        __ext4_expand_extra_isize+0x346/0x480
[  546.248770][T10953]        __ext4_mark_inode_dirty+0x668/0x880
[  546.254757][T10953]        ext4_evict_inode+0x835/0x1960
[  546.260214][T10953]        evict+0x3c2/0xad0
[  546.264626][T10953]        iput.part.0+0x989/0x1050
[  546.269637][T10953]        iput+0x35/0x40
[  546.273776][T10953]        ext4_orphan_cleanup+0x71e/0x11e0
[  546.279497][T10953]        ext4_fill_super+0x917f/0xb470
[  546.284961][T10953]        get_tree_bdev_flags+0x38c/0x620
[  546.290587][T10953]        vfs_get_tree+0x92/0x320
[  546.295513][T10953]        path_mount+0x7d0/0x23d0
[  546.300458][T10953]        __x64_sys_mount+0x293/0x310
[  546.305747][T10953]        do_syscall_64+0x115/0x870
[  546.310849][T10953]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.317253][T10953] 
[  546.317253][T10953] -> #0 (sb_internal){++++}-{0:0}:
[  546.324554][T10953]        check_prev_add+0xeb/0xe60
[  546.329657][T10953]        __lock_acquire+0x136c/0x1a40
[  546.335020][T10953]        lock_acquire+0x1b9/0x370
[  546.340035][T10953]        ext4_evict_inode+0xf1b/0x1960
[  546.345491][T10953]        evict+0x3c2/0xad0
[  546.349892][T10953]        iput.part.0+0x989/0x1050
[  546.354902][T10953]        iput+0x35/0x40
[  546.359044][T10953]        ext4_ext_migrate+0xd5b/0x2000
[  546.364496][T10953]        __ext4_ioctl+0xd32/0x4200
[  546.369608][T10953]        __x64_sys_ioctl+0x18e/0x210
[  546.374883][T10953]        do_syscall_64+0x115/0x870
[  546.379985][T10953]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.386391][T10953] 
[  546.386391][T10953] other info that might help us debug this:
[  546.386391][T10953] 
[  546.396598][T10953]  Possible unsafe locking scenario:
[  546.396598][T10953] 
[  546.404025][T10953]        CPU0                    CPU1
[  546.409371][T10953]        ----                    ----
[  546.414718][T10953]   lock(&sbi->s_writepages_rwsem);
[  546.419906][T10953]                                lock(sb_internal);
[  546.426486][T10953]                                lock(&sbi->s_writepages_rwsem);
[  546.434197][T10953]   rlock(sb_internal);
[  546.438347][T10953] 
[  546.438347][T10953]  *** DEADLOCK ***
[  546.438347][T10953] 
[  546.446468][T10953] 3 locks held by syz.7.1492/10953:
[  546.451647][T10953]  #0: ffff888032a44450 (sb_writers#4){++++}-{0:0}, at: __ext4_ioctl+0xd02/0x4200
[  546.460924][T10953]  #1: ffff8880563b4e80 (&sb->s_type->i_mutex_key#11){++++}-{4:4}, at: __ext4_ioctl+0xd2a/0x4200
[  546.471490][T10953]  #2: ffff88801e72ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x3bf/0x2000
[  546.482127][T10953] 
[  546.482127][T10953] stack backtrace:
[  546.487997][T10953] CPU: 1 UID: 0 PID: 10953 Comm: syz.7.1492 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  546.488037][T10953] Tainted: [L]=SOFTLOCKUP
[  546.488047][T10953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  546.488064][T10953] Call Trace:
[  546.488073][T10953]  <TASK>
[  546.488083][T10953]  dump_stack_lvl+0x100/0x190
[  546.488114][T10953]  print_circular_bug.cold+0x178/0x1c7
[  546.488161][T10953]  check_noncircular+0x146/0x160
[  546.488212][T10953]  check_prev_add+0xeb/0xe60
[  546.488241][T10953]  __lock_acquire+0x136c/0x1a40
[  546.488277][T10953]  lock_acquire+0x1b9/0x370
[  546.488303][T10953]  ? evict+0x3c2/0xad0
[  546.488331][T10953]  ? __pfx___might_resched+0x10/0x10
[  546.488360][T10953]  ? srso_alias_return_thunk+0x5/0xfbef5
[  546.488397][T10953]  ext4_evict_inode+0xf1b/0x1960
[  546.488432][T10953]  ? evict+0x3c2/0xad0
[  546.488454][T10953]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  546.488493][T10953]  ? srso_alias_return_thunk+0x5/0xfbef5
[  546.488530][T10953]  ? __pfx_ext4_evict_inode+0x10/0x10
[  546.488569][T10953]  ? evict+0x37e/0xad0
[  546.488591][T10953]  ? evict+0x37e/0xad0
[  546.488613][T10953]  ? srso_alias_return_thunk+0x5/0xfbef5
[  546.488650][T10953]  ? __pfx_ext4_evict_inode+0x10/0x10
[  546.488687][T10953]  evict+0x3c2/0xad0
[  546.488712][T10953]  ? __pfx_evict+0x10/0x10
[  546.488735][T10953]  ? srso_alias_return_thunk+0x5/0xfbef5
[  546.488773][T10953]  ? iput.part.0+0x981/0x1050
[  546.488796][T10953]  ? srso_alias_return_thunk+0x5/0xfbef5
[  546.488835][T10953]  iput.part.0+0x989/0x1050
[  546.488864][T10953]  iput+0x35/0x40
[  546.488887][T10953]  ext4_ext_migrate+0xd5b/0x2000
[  546.488926][T10953]  ? __pfx_ext4_ext_migrate+0x10/0x10
[  546.488962][T10953]  ? srso_alias_return_thunk+0x5/0xfbef5
[  546.488996][T10953]  ? down_write+0x146/0x1f0
[  546.489028][T10953]  ? __pfx_down_write+0x10/0x10
[  546.489062][T10953]  ? srso_alias_return_thunk+0x5/0xfbef5
[  546.489095][T10953]  ? rcu_read_lock_any_held+0x6a/0xa0
[  546.489139][T10953]  __ext4_ioctl+0xd32/0x4200
[  546.489181][T10953]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  546.489215][T10953]  ? __pfx___ext4_ioctl+0x10/0x10
[  546.489259][T10953]  ? srso_alias_return_thunk+0x5/0xfbef5
[  546.489293][T10953]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  546.489345][T10953]  ? srso_alias_return_thunk+0x5/0xfbef5
[  546.489379][T10953]  ? do_vfs_ioctl+0x226/0x13e0
[  546.489408][T10953]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  546.489442][T10953]  ? srso_alias_return_thunk+0x5/0xfbef5
[  546.489476][T10953]  ? find_held_lock+0x2b/0x80
[  546.489514][T10953]  ? srso_alias_return_thunk+0x5/0xfbef5
[  546.489547][T10953]  ? hook_file_ioctl_common+0x140/0x440
[  546.489584][T10953]  ? srso_alias_return_thunk+0x5/0xfbef5
[  546.489618][T10953]  ? __fget_files+0x21f/0x3d0
[  546.489657][T10953]  ? __pfx_ext4_ioctl+0x10/0x10
[  546.489697][T10953]  __x64_sys_ioctl+0x18e/0x210
[  546.489728][T10953]  do_syscall_64+0x115/0x870
[  546.489760][T10953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.489789][T10953] RIP: 0033:0x7f73aa79de99
[  546.489810][T10953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  546.489837][T10953] RSP: 002b:00007f73ab63f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  546.489863][T10953] RAX: ffffffffffffffda RBX: 00007f73aaa26090 RCX: 00007f73aa79de99
[  546.489882][T10953] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004
[  546.489900][T10953] RBP: 00007f73aa833eaf R08: 0000000000000000 R09: 0000000000000000
[  546.489917][T10953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  546.489934][T10953] R13: 00007f73aaa26128 R14: 00007f73aaa26090 R15: 00007ffe0ad15c98
[  546.489963][T10953]  </TASK>
[  547.001775][T10963] loop4: detected capacity change from 0 to 8
[  547.043982][ T9627] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.