last executing test programs:

19m10.031273881s ago: executing program 32 (id=1479):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x7, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x7, 0xffffffff}, 0xd0, 0x9}})

19m1.440647888s ago: executing program 33 (id=1533):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @broadcast}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x48, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, 'vlan0\x00'})
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x8, {0x2, 0x0, @multicast2}, 'lo\x00'})

18m46.52040741s ago: executing program 34 (id=1653):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0)

18m5.750876178s ago: executing program 35 (id=2100):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x72}, 0x8)

14m25.856652314s ago: executing program 36 (id=4752):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0)

13m23.484949806s ago: executing program 37 (id=5447):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c4"], 0x30}}, 0x0)

12m53.224264442s ago: executing program 38 (id=5700):
pipe(&(0x7f00000002c0))
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x13dd, 0xc01)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

12m42.41230193s ago: executing program 7 (id=5818):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)

12m40.434974295s ago: executing program 7 (id=5839):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x45, &(0x7f0000000200)={0x0, 0x0}, 0x10)

12m38.964255706s ago: executing program 7 (id=5856):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

12m38.62626157s ago: executing program 7 (id=5860):
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x200005c, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'cp866'}}]}, 0x1, 0x152b, &(0x7f0000002780)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

12m38.2724966s ago: executing program 7 (id=5865):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x66a5, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}], 0x1, 0x931766f6319ead44)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x3, 0x2}, 0x10)

12m37.833071756s ago: executing program 7 (id=5868):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd2c, 0xffffffff, {0xa, 0x0, 0xa1, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x403}]}, 0x34}}, 0x0)

12m37.267204743s ago: executing program 39 (id=5868):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd2c, 0xffffffff, {0xa, 0x0, 0xa1, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x403}]}, 0x34}}, 0x0)

4m50.79125617s ago: executing program 2 (id=10706):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast2}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x7}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x1}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24045091}, 0x0)

4m50.46843052s ago: executing program 2 (id=10711):
r0 = semget$private(0x0, 0x5, 0x0)
semop(r0, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1)
semop(r0, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1)
semop(r0, &(0x7f0000000080)=[{0x3, 0x6}], 0x1)

4m49.386720137s ago: executing program 2 (id=10731):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x4000, 0x10, 0x8, 0xfffffcd2, 0x0}}, 0x10)

4m49.233905298s ago: executing program 2 (id=10733):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x45f, &(0x7f0000000ec0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0)

4m48.22736271s ago: executing program 2 (id=10748):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xa, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94)

4m47.082577563s ago: executing program 2 (id=10757):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x1, &(0x7f0000000400)=@raw=[@exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m46.542559991s ago: executing program 40 (id=10757):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x1, &(0x7f0000000400)=@raw=[@exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m1.791811077s ago: executing program 5 (id=11622):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

3m1.600674781s ago: executing program 5 (id=11625):
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = timerfd_create(0x1, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r0, 0x0)

3m1.308387939s ago: executing program 5 (id=11631):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)

3m0.984631216s ago: executing program 5 (id=11638):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$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")
creat(&(0x7f00000004c0)='./bus\x00', 0x14c)
mount(&(0x7f0000000c00)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x991480, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x44c40, 0xe898d2275f586997)
preadv2(r0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000c40)=""/4103, 0x1007}], 0x2, 0x8000, 0x9, 0x9)

3m0.336224851s ago: executing program 5 (id=11649):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='dctcp-reno', 0xa)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})

2m59.83556071s ago: executing program 5 (id=11654):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x4, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xb}, 0xe)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
recvfrom$packet(r0, 0x0, 0x0, 0x40, 0x0, 0x0)

2m59.327777046s ago: executing program 41 (id=11654):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x4, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xb}, 0xe)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
recvfrom$packet(r0, 0x0, 0x0, 0x40, 0x0, 0x0)

2m15.071515221s ago: executing program 1 (id=12094):
unshare(0x20000480)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
r2 = dup3(r0, r1, 0x80000)
poll(&(0x7f0000000180)=[{r2, 0x4000}], 0x1, 0x200)

2m14.211813988s ago: executing program 1 (id=12102):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)

2m13.923315655s ago: executing program 1 (id=12106):
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fd, 0x0, 0x1, 0x7, 0x3, 0x2}, 0x20)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)

2m12.126504943s ago: executing program 1 (id=12120):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)

2m11.859549216s ago: executing program 1 (id=12123):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x2, 0x9})

2m11.143830489s ago: executing program 1 (id=12132):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0049364, &(0x7f00000001c0))

2m10.674933072s ago: executing program 42 (id=12132):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0049364, &(0x7f00000001c0))

6.447174674s ago: executing program 6 (id=13505):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000480)=0x7, 0x4)

5.65542059s ago: executing program 0 (id=13512):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r0, r1, 0x0, 0x2000fb)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

5.40003943s ago: executing program 6 (id=13516):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd)
recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5.067251344s ago: executing program 6 (id=13521):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a)
close(r0)
socket$tipc(0x1e, 0x5, 0x0)
unshare(0x20000600)
preadv(r0, 0x0, 0x0, 0x101, 0x3f2f07da)

5.04156568s ago: executing program 0 (id=13522):
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file1\x00', 0x1008010, &(0x7f0000000440)={[{@nodots}, {@fat=@umask={'umask', 0x3d, 0x5}}, {@fat=@check_strict}, {@dots}, {@nodots}, {@nodots}]}, 0x1, 0x11b2, &(0x7f0000002440)="$eJzs201rY1UYB/DHvpia2hffrRsPutHNxXbhyk2RFqQBpW2EVhBuaaohMQm5WSTiouDOlZ9DXLoTxC/gJymC6KYrr7SRdjp0hpkObWDm99vkgX8OnIcLF87lPCcf/fhN66jIjvJBTD03GzO9iHSaIsVUTMfYcbz//eY/P+zs7W+t12ob2yltru+ufphSWnz7ty+++/md3wfzn/+y+Gsl/lj+8uSvtbMlKyf/7n7dLFKzSJ3uIOXpoNsd5AftRjpsFq0spc/ajbxopGanaPSv5Eftbq83SnnncKHa6zeKIuWdUWo1RmnQTYP+KOVf5c1OyrIsLVSDJ1H/6bQsy4iynI3noyzL8oWoxny8GAuxGEtRiYiX45V4NV6L1+ONeDNWzv816X0DAAAAAAAAAAAAAAAAAADA0+Xh8//L8ZL5fwAAAAAAAAAAAAAAAAAAALh15v8BAAAAAAAAAAAAAAAAAABg8sz/AwAAAAAAAAAAAAAAAAAAwOTt7O1vrddqG9spzUX8eTysD+vj33G++Ult44N0bvly1d/DYX36Il8d5+lqXonq//natflcvPfuOD/LPv60dl/+VhzefvsAAADwTMjShWvP91n2oHxc3fN94Or5fSkiZu6sDW6oGH3bytvtRl+hUCguikm/mbgLlw990jsBAAAAAAAAAADgcTzifcBKRNz4OuGkewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+I8dOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABXBQAA///GWZIG")
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf251500000008000300", @ANYRES32=r2, @ANYBLOB="28002b801c00038006000300feff000006000100039658fadc00020002000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x2000c894}, 0x4010084)

4.756304763s ago: executing program 6 (id=13524):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32)

4.283294316s ago: executing program 0 (id=13527):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004a7"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[])
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

4.184662467s ago: executing program 6 (id=13529):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x40000000)
write$char_usb(r1, 0x0, 0x1f)

2.904332501s ago: executing program 4 (id=13539):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xa, 0x8, "ff000000000000000000000000000200"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000340)={0xfffd, 0x1, 0x2, 0xaf, 0x11, "0100001900"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x1)

2.835668694s ago: executing program 8 (id=13540):
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth0\x00'})

2.81945682s ago: executing program 4 (id=13542):
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x1000001d})
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100)

2.661177654s ago: executing program 8 (id=13543):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0))
close(0x3)

2.650234155s ago: executing program 4 (id=13544):
r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x2, 0x0, 0xe, 0x1, 0x1, 0x3, 0x7, 0x1040, 0x6, 0xffff, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

2.547733539s ago: executing program 8 (id=13545):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4810, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpquota}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@errors_remount}, {@init_itable}, {@noauto_da_alloc}]}, 0x0, 0x4ec, &(0x7f0000000c40)="$eJzs3ElvHMUeAPB/j5fEL8mzX957QBbIQEBYIOLYWQ8cCAIpFyQkEApHYztRiJOg2EhJZBGzKEgcQPkEAW5IfAJOcEGAOIC4EsERIUXIBxw4oEE10zOMPTPe4iWxfz9pnKru6q6q7q64lmkHsGEV048sYmtE/BgR3ZXozATFyj+3piaG/piaGMqiVHrht6ycbnpq4sNq0upxW/JIbyGi8E4Wu5rkO3bp8pnB0dGRC5Xo2zfGC/mes4OnRk6NnBs4evTgga4jhwcOLUs9U5mmd75xfveO4y9fe27oxLVXvv40lbeU75+emhiaeUTPInNoa9hSjOLMa1nnkUWe/U63rS6ctaefhbUrDAuWntp0uzrK7b872sqxiu549q1aImDdKZVKpU0NW2sNfrJUL8sqBwDrRKZJwwa0ve43/vRUGqlODDWOg9e3m8eiPAJK9b6Vfyp72ssj2GJPZWzUsUL5/y8iTkz+eT19ouk8BADA8vr8WETp5987Ur+j+qnsKcQ9den+na8N9UTEfyIi9R3/m/df/h9RTntvRNxXd0zqUW6eJ//irHhj/+f7rjyQuqxLrmcrqf/3ZL62NbP/V1u/6GnLY9vK9e/ITp4eHdmfX5Pe6NiU4v2Np65Nq33xzA8ftMq/WNf/S5+Uf7UvmJfj1/ZZE3TDg+ODt1vvqptvli/slcb6Z9GeVUMROyJi5xLOn67Z6cc+2d1qf63+bXH9RKpnQ/3fb33y9iUUaJbSRxGPVu7/ZMyqf9KZh/rGz77WN3bp8hOn69cn+48cHjjUtzlGR/b3VZ+KRt98d/X5PNgwjJj//q+sdP//1fT5r61c9mT167Vji8/j6o13W45plvr8d2YvlsOd+baLg+PjF/ojOrPJxu0D/xx7cbBrRvpU/969zdv/9oi/qovbuyIiPcT3R8QDEbEnL/uDEfFQROydo/5fPf3wq62GkHfC/R9e1P1vFXjq24jmu9rOfPlZQ8bvFRdY/3T/D5ZDvfmW4cHx+X6txFwlrQ/c9gUEAACAu8CeiNgaWWFfPse5NQqFffsittRmUMbGHz95/vVzw5V3BHqio1Cd6equmw/tz+eGUzwdNVAXT/sPlOeNS6VSqSvF0/h9dNvaVh02vC0t2n/yi+/9w/q3qHW0Vm+0AXelpa+jL/8XMoDVtQzfowHuUto/bFwLbv8r9RYcsGaatf8rEbfWoCjAKmvW/l9ag3IAq8/4HzYu7R82Lu0fNqQFvSS/hMD247O31OWVta9Mpq0DhZj7rwD0RFS3VL/gOPcJfypELE8J25a1pl0z7mmhaZrNsRx5RWHeNO2L+EMMqxso3BnFqAQ2RcQ8T2/tYbtSDVxe6YKVG8HHa/u/EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO37OwAA//8GPdEz")
creat(&(0x7f0000000200)='./bus\x00', 0x268)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r0, &(0x7f0000000200)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20)

2.306444329s ago: executing program 8 (id=13546):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x794, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1000000000000000, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4cf, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

2.124021376s ago: executing program 8 (id=13548):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10, 0x40, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0)

2.006516195s ago: executing program 4 (id=13550):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="c021", 0x2}], 0x1)

1.838470584s ago: executing program 9 (id=13553):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000108000140000000010900010073797a300000000014000000110001"], 0xe0}}, 0x0)

1.795890751s ago: executing program 4 (id=13554):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc}]}, 0x28}}, 0x810)

1.67135992s ago: executing program 9 (id=13555):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c)

1.669325256s ago: executing program 3 (id=13556):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000600)={[{@grpquota}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpjquota}]}, 0x3, 0x79b, &(0x7f0000001200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xb, 0x4, 0x4, 0xfffffff9})

1.548587873s ago: executing program 4 (id=13557):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ppoll(&(0x7f0000000040)=[{r1, 0x5001}, {r1, 0x300}], 0x2, 0x0, 0x0, 0x0)

1.523746897s ago: executing program 9 (id=13558):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
write$cgroup_devices(r0, 0x0, 0xffdd)

1.391309293s ago: executing program 3 (id=13559):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.206491935s ago: executing program 3 (id=13560):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002)
r0 = socket$inet6(0xa, 0x3, 0x3)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010102, @in=@empty, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x32}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x6, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x1, 0xb}, 0xfffffffa, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xfff}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0)

1.052207659s ago: executing program 9 (id=13561):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x70bd25, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random="b2"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4)

959.236938ms ago: executing program 3 (id=13562):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000100)={[{@stripe={'stripe', 0x3d, 0x9}}, {@prjquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@bh}, {@noblock_validity}]}, 0xfa, 0x4df, &(0x7f0000000280)="$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")
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

918.773514ms ago: executing program 6 (id=13563):
syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000640)={[{@quota}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5e}}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@smackfshat={'smackfshat', 0x3d, '\xa0+'}}, {@smackfsdef}, {@permit_directio}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, '$#+'}}]}, 0x0, 0x50a, &(0x7f0000001f40)="$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")
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r0, r0, 0x0, 0x800000009)
openat(0xffffffffffffff9c, 0x0, 0x183341, 0x41)

856.571729ms ago: executing program 0 (id=13564):
r0 = fanotify_init(0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r0, 0x101, 0x8000031, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x83f)

760.480963ms ago: executing program 9 (id=13565):
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

635.028461ms ago: executing program 0 (id=13566):
timer_create(0x0, &(0x7f0000000540)={0x0, 0x1021, 0x2}, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil)
r0 = io_uring_setup(0x7a58, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a)

412.28281ms ago: executing program 3 (id=13567):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x2, 0x0, 'queue1\x00'})
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x91f8a0d13a97bc3e, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b})

365.943084ms ago: executing program 9 (id=13568):
r0 = socket(0x2, 0x1, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_CLEAR_SOCK(r1, 0xab04)

232.026927ms ago: executing program 0 (id=13569):
syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004927002c00670000fc0290780000b2030001830739ac1e00018307efac1414bb0000150490780a010101"], 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000b00)}], 0x3}, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50)

64.589787ms ago: executing program 3 (id=13570):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = eventfd2(0x0, 0x0)
io_setup(0x81, &(0x7f0000000400)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x30, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}])

0s ago: executing program 8 (id=13571):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt+bH/ved+a93TcznQmgbQ2kf5KIbRHxe0T0ZdnbFxjI3ubnZsZuzs2MJbGw8PbfSWW5G3MzY8WixXpb88yhUkTpsySOJ0vLnbp46cxouTxxPs8PTZ/9cGjq4qXnTp8dPTVxauLcyLFjR48Mv/jCyPNrEmca1429H0/u2/P6u1ffHDtx9b2fvk2rtXt/Nr86jju6WSegOgbSrfbPQkXtvCebqPu9YHtVOulsYUVoSkdEpLurq9L/+6IjFndeX7z2aUsrB6yr9LdpS+PZswvAJpZEq2sAtEbxQ58e/xavDRp6/C9cfzmiO0/Pz82Mzd+KvzNK+fSudSx/ICJOzP77VfqKZs9DAACsQmVs82y98V8pdlfes2sdO/JrKP0RcX9E7IyIByJiV0Q8GFFZ9qGIeDhbeaFvheUP1OSXjn9K1+rWeY2k47+XqsZ+81Xx52/9HXlueyX+ruTk6fLE4XybHIquLWl+eJkyvn/1ty8azase/6WvtPxiLJhX4FpnzQm68dHp0bXaCNcvR+ztrBd/cutKQNoC9kTE3uY+ekeROP30N/saLXTn+JexBteZFr6OeCrb/7NRE38hWf765FBPlCcODxWtYqmff73yVqPy7yr+NXD9wCNZYnH/1yxR1dDK5YnzU82XceWPzxse06y2/Xcn71T65C/vZ9MujE5Pnx+O6E7eqOSLY7rK9JHFdS+MTvem+WL5tP0fOli//+/M10n3f7qV0ka8PyIejYjH8ro/HhEHIuLgMvH/+MoTHywTfxJJtG7/X44Yr/v9d6v99yfV1+tXkeg488N3ja6Yr2z/H43ZyndtpvL9dwcrreBdbj4AAAC4J5QiYlskpcEsPbAtSqXBwex/+HfFfaXy5NT0MycnPzo3nt0j0B9dpeJMV1/V+dDhZDb/xCw/kp8rLuYfyc8bf9nRW8kPjk2Wx1scO7S7rbf3/yj6f+qvjlbXDlh37teC9lXb/0stqgew8Vby++9YADan2/t/T/qnt1V1ATaW439oX/X6/yc1eeN/2JyW9v8/6zyyDtiMjP+hfen/0L70f2hLzdzOH8cbzeqJiGYeC1DcLLD6pwr0rPgO/3ZJFE+8WM+yeuPSme58SpRaFGlHk41tUyTSHrOxhS4+QwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBe9l8AAAD//3ow3kU=")
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x4)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
syz_clone(0x6000, 0x0, 0xffffffffffffffa7, 0x0, 0x0, 0x0)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000}])

kernel console output (not intermixed with test programs):

5 subj=unconfined pid=3248 comm="syz.0.11560" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa35079ce59 code=0x0
[ 1183.370286][  T449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1183.568201][ T3255] Invalid argument reading file caps for ./file0
[ 1184.410235][  T449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1184.729166][  T449] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1185.449619][ T2105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1185.783889][  T437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1185.868417][  T449] usb 6-1: Using ep0 maxpacket: 16
[ 1185.877807][  T449] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 1185.887381][  T449] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1185.895541][  T449] usb 6-1: Product: syz
[ 1185.899838][  T449] usb 6-1: Manufacturer: syz
[ 1185.904453][  T449] usb 6-1: SerialNumber: syz
[ 1186.398753][  T449] usb 6-1: config 0 descriptor??
[ 1186.429078][  T449] visor 6-1:0.0: Sony Clie 3.5 converter detected
[ 1186.615968][  T449] usb 6-1: clie_3_5_startup: get config number failed: -71
[ 1186.634667][  T449] visor 6-1:0.0: probe with driver visor failed with error -71
[ 1186.686168][  T449] usb 6-1: USB disconnect, device number 28
[ 1186.693027][ T3307] loop9: detected capacity change from 0 to 512
[ 1186.790822][ T3307] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1186.812936][  T437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1186.830176][ T3307] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1187.056175][  T659] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1187.138472][  T449] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1187.318462][  T449] usb 6-1: Using ep0 maxpacket: 16
[ 1187.341096][  T449] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 1187.380687][  T449] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1187.426611][  T449] usb 6-1: Product: syz
[ 1187.433995][  T449] usb 6-1: Manufacturer: syz
[ 1187.444388][  T449] usb 6-1: SerialNumber: syz
[ 1187.465897][  T449] usb 6-1: config 0 descriptor??
[ 1187.495996][  T449] visor 6-1:0.0: Sony Clie 3.5 converter detected
[ 1187.849108][  T437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1187.906143][  T449] usb 6-1: Sony Clie 3.5 converter now attached to ttyUSB0
[ 1188.010316][ T1651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1188.020167][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1188.051682][  T449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1188.102410][  T449] usb 6-1: USB disconnect, device number 29
[ 1188.141895][  T449] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0
[ 1188.185766][  T449] visor 6-1:0.0: device disconnected
[ 1188.489394][T22460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1188.650195][T22460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1188.880914][ T3354] loop5: detected capacity change from 0 to 256
[ 1188.934608][ T3354] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[ 1189.132023][  T449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1189.217251][ T3358] loop9: detected capacity change from 0 to 4096
[ 1189.351885][ T3358] ntfs3(loop9): ino=19, mi_enum_attr
[ 1189.379554][ T3358] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[ 1189.480033][   T30] audit: type=1800 audit(2000000886.861:675): pid=3358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.11602" name="file1" dev="loop9" ino=30 res=0 errno=0
[ 1189.652789][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1189.952073][ T3381] netlink: 256 bytes leftover after parsing attributes in process `syz.1.11614'.
[ 1190.846023][ T3414] devpts: Invalid uid '0x00000000ffffffff'
[ 1191.209659][  T435] net_ratelimit: 2 callbacks suppressed
[ 1191.209679][  T435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1191.361460][ T3437] loop5: detected capacity change from 0 to 256
[ 1191.390066][ T3439] loop9: detected capacity change from 0 to 128
[ 1191.477130][ T3437] FAT-fs (loop5): Directory bread(block 64) failed
[ 1191.486282][ T3443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11641'.
[ 1191.497292][ T3437] FAT-fs (loop5): Directory bread(block 65) failed
[ 1191.507525][ T3437] FAT-fs (loop5): Directory bread(block 66) failed
[ 1191.518968][ T3437] FAT-fs (loop5): Directory bread(block 67) failed
[ 1191.525966][ T3437] FAT-fs (loop5): Directory bread(block 68) failed
[ 1191.533166][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1191.561298][ T3437] FAT-fs (loop5): Directory bread(block 69) failed
[ 1191.567945][ T3437] FAT-fs (loop5): Directory bread(block 70) failed
[ 1191.582639][ T3437] FAT-fs (loop5): Directory bread(block 71) failed
[ 1191.591116][ T3437] FAT-fs (loop5): Directory bread(block 72) failed
[ 1191.597692][ T3437] FAT-fs (loop5): Directory bread(block 73) failed
[ 1191.648056][ T3441] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[ 1191.852076][T22460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1191.913345][T29785] FAT-fs (loop5): error, corrupted directory (invalid entries)
[ 1191.944973][T29785] FAT-fs (loop5): Filesystem has been set read-only
[ 1192.251372][  T449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1192.286063][ T3459] lo speed is unknown, defaulting to 1000
[ 1192.312352][ T3459] »»»»»» speed is unknown, defaulting to 1000
[ 1192.420530][  T435] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1192.619941][  T435] usb 10-1: Using ep0 maxpacket: 32
[ 1192.630333][  T435] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1192.654989][  T435] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1192.691188][  T435] usb 10-1: config 0 descriptor??
[ 1192.710945][  T435] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1192.712581][ T1646] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1192.955349][ T1646] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1193.130259][ T1651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1193.140058][  T437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1193.149652][  T449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1193.165241][ T1646] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1193.170381][ T3476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11658'.
[ 1193.282668][T22451] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1193.310103][T22451] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1193.320630][T22451] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1193.329909][T22451] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1193.337605][T22451] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1193.415612][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1193.424185][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1193.432628][ T1646] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1193.455588][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1193.468322][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1193.478310][ T3485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11660'.
[ 1193.490953][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1193.526637][  T435] gspca_sunplus: reg_w_riv err -71
[ 1193.532052][  T435] sunplus 10-1:0.0: probe with driver sunplus failed with error -71
[ 1193.557453][  T435] usb 10-1: USB disconnect, device number 16
[ 1194.035634][ T3502] xt_hashlimit: size too large, truncated to 1048576
[ 1194.086330][ T1646] bridge_slave_1: left allmulticast mode
[ 1194.111651][ T1646] bridge_slave_1: left promiscuous mode
[ 1194.137861][ T1646] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1194.186253][ T1646] bridge_slave_0: left allmulticast mode
[ 1194.207433][ T1646] bridge_slave_0: left promiscuous mode
[ 1194.221963][ T1646] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1194.324581][ T3511] loop9: detected capacity change from 0 to 256
[ 1194.347107][ T3511] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[ 1194.379775][   T30] audit: type=1800 audit(2000000891.771:676): pid=3511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.11667" name="file2" dev="loop9" ino=1049135 res=0 errno=0
[ 1194.765014][ T3522] loop9: detected capacity change from 0 to 1024
[ 1194.865297][ T3522] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1195.404590][ T1646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1195.487776][ T1646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1195.530983][ T5631] Bluetooth: hci2: command tx timeout
[ 1195.592912][ T1646] bond0 (unregistering): Released all slaves
[ 1195.857030][ T3530] netlink: 192 bytes leftover after parsing attributes in process `syz.3.11677'.
[ 1196.024217][  T437] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1196.259617][  T437] usb 10-1: Using ep0 maxpacket: 32
[ 1196.307458][  T437] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[ 1196.338716][  T437] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1196.370052][  T437] usb 10-1: Product: syz
[ 1196.394132][  T437] usb 10-1: Manufacturer: syz
[ 1196.420654][  T437] usb 10-1: SerialNumber: syz
[ 1196.466537][  T437] usb 10-1: config 0 descriptor??
[ 1196.791906][ T3477] lo speed is unknown, defaulting to 1000
[ 1196.918893][  T437] airspy 10-1:0.0: Board ID: 00
[ 1196.942123][  T437] airspy 10-1:0.0: Firmware version: 
[ 1196.985652][ T1646] veth1_macvtap: left promiscuous mode
[ 1197.013905][ T1646] veth0_macvtap: left promiscuous mode
[ 1197.528879][  T437] airspy 10-1:0.0: usb_control_msg() failed -71 request 12
[ 1197.584945][  T437] airspy 10-1:0.0: Registered as swradio24
[ 1197.603140][  T437] airspy 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[ 1197.616020][ T5631] Bluetooth: hci2: command tx timeout
[ 1197.633076][  T437] usb 10-1: USB disconnect, device number 17
[ 1198.017269][ T1646] team0 (unregistering): Port device team_slave_1 removed
[ 1198.082820][ T1646] team0 (unregistering): Port device team_slave_0 removed
[ 1198.133054][ T3617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11707'.
[ 1198.377527][ T3477] »»»»»» speed is unknown, defaulting to 1000
[ 1198.396344][ T5290] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1199.689892][ T5631] Bluetooth: hci2: command tx timeout
[ 1199.978057][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1200.047481][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1200.077544][ T3477] bridge_slave_0: entered allmulticast mode
[ 1200.106642][ T3477] bridge_slave_0: entered promiscuous mode
[ 1200.159178][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1200.171613][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1200.188285][ T3477] bridge_slave_1: entered allmulticast mode
[ 1200.207468][ T3477] bridge_slave_1: entered promiscuous mode
[ 1200.365146][ T3477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1200.401156][ T3477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1200.647094][ T3477] team0: Port device team_slave_0 added
[ 1200.685101][ T3477] team0: Port device team_slave_1 added
[ 1201.198775][  T437] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1201.283883][ T3477] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1201.299519][ T3477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1201.361920][ T3477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1201.397444][ T3477] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1201.405734][ T3477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1201.436354][ T3477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1201.513510][ T3477] hsr_slave_0: entered promiscuous mode
[ 1201.521681][ T3477] hsr_slave_1: entered promiscuous mode
[ 1201.528109][ T3477] debugfs: 'hsr0' already exists in 'hsr'
[ 1201.535762][ T3477] Cannot create hsr debugfs directory
[ 1201.782628][ T5631] Bluetooth: hci2: command tx timeout
[ 1201.820169][ T5290] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1202.100587][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1202.148405][  T437] usb 2-1: Using ep0 maxpacket: 8
[ 1202.155165][  T437] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[ 1202.163431][  T437] usb 2-1: config 0 has no interface number 0
[ 1202.170427][  T437] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1202.181328][  T437] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1203.153281][  T437] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1203.178766][  T437] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1203.287359][  T437] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1203.297040][  T437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1203.322123][ T3727] loop9: detected capacity change from 0 to 128
[ 1203.349730][  T437] usb 2-1: config 0 descriptor??
[ 1203.380175][  T437] usb 2-1: can't set config #0, error -71
[ 1203.442736][ T3727] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1203.455314][  T437] usb 2-1: USB disconnect, device number 45
[ 1203.510907][ T3727] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1203.757460][  T659] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1204.362476][ T3755] loop9: detected capacity change from 0 to 256
[ 1204.473851][ T3755] FAT-fs (loop9): Directory bread(block 64) failed
[ 1204.513141][ T3755] FAT-fs (loop9): Directory bread(block 65) failed
[ 1204.549679][ T3755] FAT-fs (loop9): Directory bread(block 66) failed
[ 1204.597984][ T3755] FAT-fs (loop9): Directory bread(block 67) failed
[ 1204.631570][ T3755] FAT-fs (loop9): Directory bread(block 68) failed
[ 1204.651846][ T3755] FAT-fs (loop9): Directory bread(block 69) failed
[ 1204.682881][ T3755] FAT-fs (loop9): Directory bread(block 70) failed
[ 1204.707444][ T3755] FAT-fs (loop9): Directory bread(block 71) failed
[ 1204.734735][ T3755] FAT-fs (loop9): Directory bread(block 72) failed
[ 1204.759436][ T3755] FAT-fs (loop9): Directory bread(block 73) failed
[ 1205.519582][ T5290] 8021q: adding VLAN 0 to HW filter on device eth15
[ 1205.535911][ T3778] loop9: detected capacity change from 0 to 32768
[ 1205.544411][ T3778] btrfs: Deprecated parameter 'usebackuproot'
[ 1205.551133][ T3778] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1205.562210][ T3778] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.11761 (3778)
[ 1205.586688][ T3778] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1205.597495][ T3778] BTRFS info (device loop9): using crc32c checksum algorithm
[ 1205.730962][ T1649] BTRFS warning (device loop9): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[ 1205.751534][ T3477] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1205.871456][ T3778] BTRFS error (device loop9): failed to load root extent
[ 1205.879263][ T3778] BTRFS warning (device loop9): try to load backup roots slot 1
[ 1205.887184][  T441] BTRFS warning (device loop9): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[ 1205.894763][ T3477] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1205.934452][ T3778] BTRFS warning (device loop9): couldn't read tree root
[ 1205.942169][ T3778] BTRFS warning (device loop9): try to load backup roots slot 2
[ 1205.950859][  T447] BTRFS error (device loop9): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1205.969313][ T3477] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1205.986409][ T3778] BTRFS warning (device loop9): couldn't read tree root
[ 1205.994488][ T3778] BTRFS warning (device loop9): try to load backup roots slot 3
[ 1206.023645][ T3778] BTRFS info (device loop9): rebuilding free space tree
[ 1206.061386][ T3778] BTRFS info (device loop9): checking UUID tree
[ 1206.070077][ T3778] BTRFS info (device loop9): enabling ssd optimizations
[ 1206.077035][ T3778] BTRFS info (device loop9): turning on sync discard
[ 1206.085070][ T3778] BTRFS info (device loop9): enabling free space tree
[ 1206.092617][ T3778] BTRFS info (device loop9): force clearing of disk cache
[ 1206.102864][ T3778] BTRFS info (device loop9): trying to use backup root at mount time
[ 1206.112099][ T3778] BTRFS info (device loop9): use zstd compression, level 3
[ 1206.129574][ T3477] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1206.147483][ T3477] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1206.203237][ T3477] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1206.259357][ T3477] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1206.324449][ T3477] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1206.471370][  T659] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1206.822571][ T3477] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1206.943606][ T3477] 8021q: adding VLAN 0 to HW filter on device team0
[ 1206.999443][ T1649] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1207.006649][ T1649] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1207.115686][ T1649] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1207.122868][ T1649] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1207.910903][  T437] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1207.998947][ T5290] 8021q: adding VLAN 0 to HW filter on device eth16
[ 1208.100086][  T437] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1208.145640][  T437] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1208.192835][  T437] usb 10-1: Product: syz
[ 1208.220125][  T437] usb 10-1: Manufacturer: syz
[ 1208.245846][  T437] usb 10-1: SerialNumber: syz
[ 1209.179407][   T24] usb 2-1: new low-speed USB device number 46 using dummy_hcd
[ 1209.242036][ T3907] netlink: 'syz.4.11792': attribute type 9 has an invalid length.
[ 1209.275618][ T3907] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.11792'.
[ 1209.288270][ T3477] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1209.323148][  T437] cdc_ncm 10-1:1.0: bind() failure
[ 1209.349712][  T437] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found
[ 1209.350749][   T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1209.373823][  T437] cdc_ncm 10-1:1.1: bind() failure
[ 1209.400514][   T24] usb 2-1: config 0 has no interface number 0
[ 1209.407629][  T437] usb 10-1: USB disconnect, device number 18
[ 1209.437026][   T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1209.475216][   T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1209.520339][   T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1209.550327][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1209.576303][   T24] usb 2-1: config 0 descriptor??
[ 1209.597977][ T3898] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1209.650603][   T24] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1209.847810][ T3925] netlink: 'syz.3.11796': attribute type 29 has an invalid length.
[ 1209.900587][ T3927] netlink: 'syz.3.11796': attribute type 29 has an invalid length.
[ 1209.951133][ T3925] netlink: 508 bytes leftover after parsing attributes in process `syz.3.11796'.
[ 1210.009606][  T437] usb 2-1: USB disconnect, device number 46
[ 1210.303684][ T3939] batadv_slave_1: entered promiscuous mode
[ 1210.332200][ T3938] batadv_slave_1: left promiscuous mode
[ 1210.423669][ T3477] veth0_vlan: entered promiscuous mode
[ 1210.480106][ T3477] veth1_vlan: entered promiscuous mode
[ 1210.613644][ T3477] veth0_macvtap: entered promiscuous mode
[ 1210.664786][ T3477] veth1_macvtap: entered promiscuous mode
[ 1210.758051][ T3477] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1210.827868][ T3477] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1210.881212][ T1649] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1210.936670][ T1649] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1210.966519][ T1649] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1211.004057][ T1649] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1211.366598][  T441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1211.401211][  T441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1211.531590][ T1637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1211.578111][ T1637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1212.388173][ T4003] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1212.522563][ T4003] overlayfs: conflicting lowerdir path
[ 1212.600555][   T24] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[ 1212.781554][   T24] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[ 1212.826223][   T24] usb 2-1: config 0 has no interface number 0
[ 1212.849583][   T24] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1212.871825][   T24] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1212.906140][   T24] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[ 1212.918266][   T24] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[ 1212.937687][   T24] usb 2-1: Manufacturer: syz
[ 1212.952781][   T24] usb 2-1: SerialNumber: syz
[ 1212.986948][   T24] usb 2-1: config 0 descriptor??
[ 1213.635327][   T24] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input54
[ 1213.973648][   T24] usb 2-1: USB disconnect, device number 47
[ 1214.692039][ T4060] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[ 1214.698581][ T4060] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1214.776607][ T4060] vhci_hcd vhci_hcd.0: Device attached
[ 1214.838016][ T4068] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9)
[ 1214.844530][ T4068] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1214.871089][ T4067] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6)
[ 1214.877597][ T4067] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1214.968296][ T4068] vhci_hcd vhci_hcd.0: Device attached
[ 1214.991407][ T4028] loop9: detected capacity change from 0 to 32768
[ 1214.997558][ T4080] sch_tbf: burst 2 is lower than device netdevsim1 mtu (1514) !
[ 1215.014025][ T4067] vhci_hcd vhci_hcd.0: Device attached
[ 1215.018310][ T4028] 
[ 1215.018310][ T4028]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1215.018310][ T4028] 
[ 1215.038427][  T435] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[ 1215.063534][ T4060] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(5)
[ 1215.070043][ T4060] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1215.103849][ T4060] vhci_hcd vhci_hcd.0: Device attached
[ 1215.131584][ T4028] ERROR: (device loop9): diWrite: ixpxd invalid
[ 1215.131584][ T4028] 
[ 1215.160557][ T4067] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(8)
[ 1215.167064][ T4067] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1215.176523][ T4028] ERROR: (device loop9): txCommit: 
[ 1215.176523][ T4028] 
[ 1215.201221][ T4067] vhci_hcd vhci_hcd.0: Device attached
[ 1215.228303][ T4081] vhci_hcd: connection closed
[ 1215.229285][ T4070] vhci_hcd: connection closed
[ 1215.235639][  T447] vhci_hcd vhci_hcd.0: stop threads
[ 1215.251455][ T4069] vhci_hcd: connection closed
[ 1215.253336][ T4061] vhci_hcd: connection reset by peer
[ 1215.255456][ T4083] vhci_hcd: connection closed
[ 1215.267099][ T4028] ERROR: (device loop9): diWrite: ixpxd invalid
[ 1215.267099][ T4028] 
[ 1215.283862][  T447] vhci_hcd vhci_hcd.0: release socket
[ 1215.320578][  T447] vhci_hcd vhci_hcd.0: disconnect device
[ 1215.337221][ T4028] ERROR: (device loop9): txCommit: 
[ 1215.337221][ T4028] 
[ 1215.351364][  T447] vhci_hcd vhci_hcd.0: stop threads
[ 1215.362672][  T447] vhci_hcd vhci_hcd.0: release socket
[ 1215.383783][ T4089] jfs_mkdir: dtSearch returned -17
[ 1215.390380][  T447] vhci_hcd vhci_hcd.0: disconnect device
[ 1215.423500][  T447] vhci_hcd vhci_hcd.0: stop threads
[ 1215.443123][  T447] vhci_hcd vhci_hcd.0: release socket
[ 1215.471906][  T447] vhci_hcd vhci_hcd.0: disconnect device
[ 1215.508926][  T447] vhci_hcd vhci_hcd.0: stop threads
[ 1215.545366][  T447] vhci_hcd vhci_hcd.0: release socket
[ 1215.566564][  T447] vhci_hcd vhci_hcd.0: disconnect device
[ 1215.583251][  T447] vhci_hcd vhci_hcd.0: stop threads
[ 1215.619569][  T447] vhci_hcd vhci_hcd.0: release socket
[ 1215.632004][  T659] 
[ 1215.632004][  T659]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1215.632004][  T659] 
[ 1215.659653][  T447] vhci_hcd vhci_hcd.0: disconnect device
[ 1215.683184][  T659] 
[ 1215.683184][  T659]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1215.683184][  T659] 
[ 1215.762496][ T4096] loop8: detected capacity change from 0 to 512
[ 1215.790459][ T4096] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1215.873272][ T4096] EXT4-fs (loop8): 1 truncate cleaned up
[ 1215.950366][ T4096] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1215.952391][ T4102] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11851'.
[ 1216.170831][ T4096] EXT4-fs (loop8): shut down requested (2)
[ 1216.306438][ T3477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1216.562956][ T4114] process '/newroot/2151/file0' started with executable stack
[ 1217.193299][ T4123] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1217.268878][ T4143] loop9: detected capacity change from 0 to 1024
[ 1217.307319][ T4143] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[ 1217.410168][ T4143] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[ 1217.491430][ T4143] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1217.744437][ T4158] netlink: 'syz.8.11867': attribute type 22 has an invalid length.
[ 1217.786365][ T4158] netlink: 'syz.8.11867': attribute type 22 has an invalid length.
[ 1217.822350][ T4158] netlink: 44 bytes leftover after parsing attributes in process `syz.8.11867'.
[ 1217.906443][  T659] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1218.220082][ T4174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11871'.
[ 1218.283948][ T4174] netlink: 67 bytes leftover after parsing attributes in process `syz.0.11871'.
[ 1218.537410][ T4177] lo speed is unknown, defaulting to 1000
[ 1218.601531][ T4177] »»»»»» speed is unknown, defaulting to 1000
[ 1219.328921][  T436] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 1219.509461][  T436] usb 9-1: Using ep0 maxpacket: 8
[ 1219.533025][  T436] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 15
[ 1219.561265][  T436] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1219.609797][  T436] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1219.642350][  T436] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1219.673594][  T436] usb 9-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[ 1219.694624][  T436] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1219.706313][ T4212] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1219.715071][  T436] usb 9-1: Product: syz
[ 1219.726678][  T436] usb 9-1: Manufacturer: syz
[ 1219.738426][  T436] usb 9-1: SerialNumber: syz
[ 1219.780098][  T436] usb 9-1: config 0 descriptor??
[ 1219.816812][ T4205] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1220.158013][  T436] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[ 1220.238560][  T435] vhci_hcd vhci_hcd.0: vhci_device speed not set
[ 1220.324171][  T436] input: Griffin SoundKnob as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input55
[ 1220.392179][    C0] powermate: config urb returned -71
[ 1220.397647][    C0] powermate: config urb returned -71
[ 1220.403222][    C0] powermate: config urb returned -71
[ 1220.409927][    C0] powermate: config urb returned -71
[ 1220.446690][  T436] usb 9-1: USB disconnect, device number 13
[ 1220.453061][    C0] powermate 9-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[ 1221.319037][   T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1221.429348][T22460] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1221.499156][   T24] usb 2-1: Using ep0 maxpacket: 8
[ 1221.517774][   T24] usb 2-1: config 0 has an invalid interface number: 122 but max is 0
[ 1221.535548][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1221.567479][   T24] usb 2-1: config 0 has no interface number 0
[ 1221.592541][   T24] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[ 1221.605990][T22460] usb 9-1: Using ep0 maxpacket: 8
[ 1221.615861][T22460] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1221.627693][   T24] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8
[ 1221.663018][T22460] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1221.677706][   T24] usb 2-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8
[ 1221.702789][T22460] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1221.725769][   T24] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[ 1221.755026][T22460] usb 9-1: config 0 descriptor??
[ 1221.762704][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1221.782878][T22460] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 1221.799860][   T24] usb 2-1: Product: syz
[ 1221.804225][   T24] usb 2-1: Manufacturer: syz
[ 1221.825136][   T24] usb 2-1: SerialNumber: syz
[ 1221.868176][   T24] usb 2-1: config 0 descriptor??
[ 1221.895678][ T4253] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1222.142057][ T4253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11898'.
[ 1222.214466][   T24] usb 2-1: NFC: intf ffff888089d94000 id ffffffff8f3e8660
[ 1222.281811][   T24] usb 2-1: USB disconnect, device number 48
[ 1222.692562][ T4307] lo speed is unknown, defaulting to 1000
[ 1222.702322][ T4307] »»»»»» speed is unknown, defaulting to 1000
[ 1222.705657][ T4310] fuse: Bad value for 'fd'
[ 1222.741052][ T4310] overlayfs: overlapping lowerdir path
[ 1222.807600][T22460] gspca_vc032x: reg_r err -71
[ 1222.828600][T22460] vc032x 9-1:0.0: probe with driver vc032x failed with error -71
[ 1222.859692][T22460] usb 9-1: USB disconnect, device number 14
[ 1224.292417][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1224.301103][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1224.675159][ T4372] overlayfs: failed to clone lowerpath
[ 1226.757291][ T4449] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.11964'.
[ 1227.209096][  T437] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1227.411473][  T437] usb 2-1: Using ep0 maxpacket: 16
[ 1227.456632][  T437] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 1227.512038][  T437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1227.552976][  T437] usb 2-1: Product: syz
[ 1227.571090][  T437] usb 2-1: Manufacturer: syz
[ 1227.602747][  T437] usb 2-1: SerialNumber: syz
[ 1227.616108][ T4479] netlink: 49 bytes leftover after parsing attributes in process `syz.8.11975'.
[ 1227.635572][  T437] usb 2-1: config 0 descriptor??
[ 1227.666755][ T4479] netlink: 140 bytes leftover after parsing attributes in process `syz.8.11975'.
[ 1227.706462][ T4479] netlink: 49 bytes leftover after parsing attributes in process `syz.8.11975'.
[ 1228.090785][  T437] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 1228.134588][  T437] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1228.169716][  T437] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 1228.199652][  T437] usb 2-1: media controller created
[ 1228.291706][ T4458] dtv5100: wlen = 0, aborting.
[ 1228.299493][  T437] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1228.407032][  T437] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1228.443047][  T437] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 1228.472527][  T437] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 1228.522758][  T437] usb 2-1: USB disconnect, device number 49
[ 1228.729400][  T437] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[ 1229.437992][ T4540] overlayfs: workdir and upperdir must reside under the same mount
[ 1229.772692][ T4552] loop9: detected capacity change from 0 to 2048
[ 1229.941545][ T4552] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1229.999393][ T4503] loop8: detected capacity change from 0 to 32768
[ 1230.091130][ T4552] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1230.162694][ T4503] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1230.284203][ T4503] XFS (loop8): Ending clean mount
[ 1230.607004][ T3477] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1231.495193][ T4615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12011'.
[ 1231.660722][ T4620] loop9: detected capacity change from 0 to 1024
[ 1232.702057][ T4659] tmpfs: Too small a size for current use
[ 1233.130167][ T4680] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12035'.
[ 1233.146496][ T4678] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12034'.
[ 1233.441944][ T4691] syzkaller1: entered promiscuous mode
[ 1233.463702][ T4691] syzkaller1: entered allmulticast mode
[ 1233.713335][ T4704] netem: change failed
[ 1234.711487][ T4741] ªªªªªª: renamed from vlan0 (while UP)
[ 1235.013252][ T4755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12067'.
[ 1236.135514][ T4795] loop9: detected capacity change from 0 to 512
[ 1236.224035][ T4795] ext4: Bad value for 'stripe'
[ 1236.447428][ T4803] netlink: 'syz.1.12084': attribute type 2 has an invalid length.
[ 1236.497537][  T436] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1236.682338][  T436] usb 10-1: Using ep0 maxpacket: 8
[ 1236.701505][  T436] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1236.730253][  T436] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1236.756585][  T436] usb 10-1: Product: syz
[ 1236.774631][  T436] usb 10-1: Manufacturer: syz
[ 1236.788817][  T436] usb 10-1: SerialNumber: syz
[ 1236.811531][  T436] usb 10-1: config 0 descriptor??
[ 1236.844598][  T436] gspca_main: se401-2.14.0 probing 047d:5003
[ 1237.260157][  T436] gspca_se401: ExtraFeatures: 105
[ 1237.296844][  T436] gspca_se401: Too many frame sizes
[ 1237.512674][  T437] usb 10-1: USB disconnect, device number 19
[ 1237.789801][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12098'.
[ 1237.869941][ T4834] netlink: 'syz.8.12097': attribute type 1 has an invalid length.
[ 1238.278482][ T4849] loop9: detected capacity change from 0 to 512
[ 1238.309386][ T4849] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1238.396364][ T4849] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.12104: corrupted in-inode xattr: e_value size too large
[ 1238.515480][ T4849] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1238.517449][ T4849] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.12104: couldn't read orphan inode 15 (err -117)
[ 1238.526635][    C1] EXT4-fs (loop9): error count since last fsck: 1
[ 1238.526653][    C1] EXT4-fs (loop9): initial error at time 2000001703: ext4_iget_extra_inode:5128: inode 15
[ 1238.526683][    C1] EXT4-fs (loop9): last error at time 2000001703: ext4_iget_extra_inode:5128: inode 15
[ 1238.591837][ T4849] loop9: lost filesystem error report for type 5 error -117
[ 1238.631388][ T4849] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1238.778592][ T4849] EXT4-fs error (device loop9): ext4_check_dx_root:2201: inode #2: comm syz.9.12104: Corrupt dir, invalid name for '..', running e2fsck is recommended
[ 1238.814750][  T436] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1239.009014][  T436] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1239.042225][  T659] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1239.053846][  T436] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1239.076642][  T436] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1239.120651][  T436] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1239.147085][  T436] usb 2-1: SerialNumber: syz
[ 1239.341834][   T30] audit: type=1326 audit(2000001704.707:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4873 comm="syz.8.12113" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb752f9ce59 code=0x0
[ 1239.444036][  T436] usb 2-1: 0:2 : does not exist
[ 1239.455639][  T436] usb 2-1: unit 3 not found!
[ 1239.590648][ T2098] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1239.634128][  T436] usb 2-1: USB disconnect, device number 50
[ 1239.752160][ T2098] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1239.767266][ T6785] udevd[6785]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1239.809351][ T2098] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1239.859419][ T2098] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1239.919702][ T2098] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1239.950952][ T2098] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1240.002305][ T2098] usb 10-1: config 0 descriptor??
[ 1240.277032][   T30] audit: type=1800 audit(2000001705.633:678): pid=4897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12118" name="file1" dev="tmpfs" ino=5765 res=0 errno=0
[ 1240.353678][ T4903] netlink: 27 bytes leftover after parsing attributes in process `syz.3.12122'.
[ 1240.480710][ T2098] plantronics 0003:047F:FFFF.0047: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1240.771752][ T2098] usb 10-1: USB disconnect, device number 20
[ 1241.745490][ T4949] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[ 1241.904668][T22451] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1241.922770][T22451] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1241.932369][T22451] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1241.945761][T22451] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1241.956625][T22451] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1242.577252][ T4958] lo speed is unknown, defaulting to 1000
[ 1242.595064][ T4958] »»»»»» speed is unknown, defaulting to 1000
[ 1243.418651][ T4958] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1243.441251][ T4958] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1243.461959][ T4958] bridge_slave_0: entered allmulticast mode
[ 1243.492652][ T4958] bridge_slave_0: entered promiscuous mode
[ 1243.532087][ T4958] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1243.557564][ T4958] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1243.578091][ T4958] bridge_slave_1: entered allmulticast mode
[ 1243.600505][ T4958] bridge_slave_1: entered promiscuous mode
[ 1243.748254][ T4958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1243.786463][ T5016] IPVS: Scheduler module ip_vs_sip not found
[ 1243.823883][ T4958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1244.000813][ T4958] team0: Port device team_slave_0 added
[ 1244.048751][ T4958] team0: Port device team_slave_1 added
[ 1244.055437][ T5631] Bluetooth: hci5: command tx timeout
[ 1244.112494][ T4958] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1244.138031][ T4958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1244.195164][ T4958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1244.261141][ T4958] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1244.284146][ T4958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1244.414477][ T4958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1244.494111][ T5039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12165'.
[ 1244.721099][ T4958] hsr_slave_0: entered promiscuous mode
[ 1244.745148][ T4958] hsr_slave_1: entered promiscuous mode
[ 1244.771940][ T4958] debugfs: 'hsr0' already exists in 'hsr'
[ 1244.797736][ T4958] Cannot create hsr debugfs directory
[ 1246.153114][ T5631] Bluetooth: hci5: command tx timeout
[ 1246.158362][ T4958] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1246.757093][ T4958] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1246.770841][ T5095] fuse: Bad value for 'fd'
[ 1247.123997][ T4958] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1247.401824][ T4958] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1248.004862][ T5119] gtp0: entered promiscuous mode
[ 1248.012053][ T5119] gtp0: entered allmulticast mode
[ 1248.034692][ T5119] team0: Device gtp0 is of different type
[ 1248.230304][ T5631] Bluetooth: hci5: command tx timeout
[ 1248.800715][ T4958] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1248.840705][ T4958] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1248.870683][ T4958] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1248.921631][ T4958] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1248.939953][ T4958] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1248.979942][ T4958] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1249.013798][ T4958] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1249.056720][ T4958] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1249.088686][ T5149] evm: overlay not supported
[ 1249.119914][   T24] kernel read not supported for file [fscontext] (pid: 24 comm: kworker/1:0)
[ 1249.373962][ T4958] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1249.482135][ T5129] loop9: detected capacity change from 0 to 40427
[ 1249.532626][ T5129] F2FS-fs (loop9): invalid crc value
[ 1249.838964][ T5129] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1249.934177][ T5129] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 1250.137033][  T659] syz-executor: attempt to access beyond end of device
[ 1250.137033][  T659] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1250.161409][ T4958] 8021q: adding VLAN 0 to HW filter on device team0
[ 1250.170500][  T659] CPU: 0 UID: 0 PID: 659 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1250.170534][  T659] Tainted: [L]=SOFTLOCKUP
[ 1250.170544][  T659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1250.170558][  T659] Call Trace:
[ 1250.170568][  T659]  <TASK>
[ 1250.170579][  T659]  dump_stack_lvl+0xe8/0x150
[ 1250.170611][  T659]  f2fs_stop_checkpoint+0x3c7/0x590
[ 1250.170653][  T659]  f2fs_write_end_io+0x1274/0x1740
[ 1250.170717][  T659]  __submit_merged_bio+0x256/0x6a0
[ 1250.170757][  T659]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1250.170805][  T659]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1250.170854][  T659]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1250.170895][  T659]  f2fs_write_data_pages+0x287e/0x34f0
[ 1250.170930][  T659]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1250.171004][  T659]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1250.171037][  T659]  ? is_bpf_text_address+0x26/0x2b0
[ 1250.171079][  T659]  ? arch_stack_walk+0xfb/0x150
[ 1250.171145][  T659]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1250.171174][  T659]  ? add_lock_to_list+0xc7/0x100
[ 1250.171209][  T659]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1250.171239][  T659]  ? __lock_acquire+0x146e/0x2cf0
[ 1250.171298][  T659]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1250.171328][  T659]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1250.171380][  T659]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1250.171420][  T659]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1250.171455][  T659]  ? do_raw_spin_unlock+0xf5/0x210
[ 1250.171500][  T659]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1250.171541][  T659]  do_writepages+0x32e/0x550
[ 1250.171572][  T659]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1250.171602][  T659]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1250.171633][  T659]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1250.171659][  T659]  ? do_raw_spin_unlock+0xf5/0x210
[ 1250.171699][  T659]  filemap_fdatawrite+0x1e9/0x2f0
[ 1250.171730][  T659]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1250.171804][  T659]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1250.171834][  T659]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1250.171866][  T659]  ? do_raw_spin_unlock+0xf5/0x210
[ 1250.171905][  T659]  f2fs_sync_dirty_inodes+0x30e/0x830
[ 1250.171958][  T659]  f2fs_write_checkpoint+0x9df/0x26a0
[ 1250.171991][  T659]  ? __lock_acquire+0x6b5/0x2cf0
[ 1250.172051][  T659]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1250.172089][  T659]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1250.172177][  T659]  kill_f2fs_super+0x314/0x730
[ 1250.172219][  T659]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1250.172269][  T659]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1250.172296][  T659]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1250.172320][  T659]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1250.172363][  T659]  deactivate_locked_super+0xbc/0x130
[ 1250.172398][  T659]  cleanup_mnt+0x437/0x4d0
[ 1250.172431][  T659]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1250.172472][  T659]  task_work_run+0x1d9/0x270
[ 1250.172510][  T659]  ? __pfx_task_work_run+0x10/0x10
[ 1250.172555][  T659]  exit_to_user_mode_loop+0x193/0x680
[ 1250.172578][  T659]  ? rcu_is_watching+0x15/0xb0
[ 1250.172609][  T659]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1250.172635][  T659]  do_syscall_64+0x353/0x580
[ 1250.172658][  T659]  ? trace_irq_disable+0x3b/0x140
[ 1250.172701][  T659]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1250.172725][  T659] RIP: 0033:0x7fb0dab9e097
[ 1250.172745][  T659] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1250.172764][  T659] RSP: 002b:00007ffc66d200c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1250.172786][  T659] RAX: 0000000000000000 RBX: 00007fb0dac321ca RCX: 00007fb0dab9e097
[ 1250.172808][  T659] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc66d20180
[ 1250.172822][  T659] RBP: 00007ffc66d20180 R08: 00007ffc66d21180 R09: 00000000ffffffff
[ 1250.172841][  T659] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc66d21210
[ 1250.172858][  T659] R13: 00007fb0dac321ca R14: 00000000001312c0 R15: 00007ffc66d21250
[ 1250.172903][  T659]  </TASK>
[ 1250.174952][  T659] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[ 1250.290341][  T447] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1250.339373][ T5631] Bluetooth: hci5: command tx timeout
[ 1250.345063][  T447] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1250.611400][  T447] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1250.618581][  T447] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1251.205954][   T30] audit: type=1326 audit(2000001716.525:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.12218" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa839ce59 code=0x7ffc0000
[ 1251.267305][   T30] audit: type=1326 audit(2000001716.555:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.12218" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa839ce59 code=0x7ffc0000
[ 1251.292091][ T4958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1251.405438][   T30] audit: type=1326 audit(2000001716.555:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.12218" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa839ce59 code=0x7ffc0000
[ 1251.434998][   T30] audit: type=1326 audit(2000001716.555:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.12218" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa839ce59 code=0x7ffc0000
[ 1251.484912][   T30] audit: type=1326 audit(2000001716.555:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.12218" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1fa839ce59 code=0x7ffc0000
[ 1251.561841][   T30] audit: type=1326 audit(2000001716.555:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.12218" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa839ce59 code=0x7ffc0000
[ 1251.629455][   T30] audit: type=1326 audit(2000001716.555:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.12218" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa839ce59 code=0x7ffc0000
[ 1251.734085][   T30] audit: type=1326 audit(2000001716.555:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.12218" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa839ce59 code=0x7ffc0000
[ 1251.806802][   T30] audit: type=1326 audit(2000001716.565:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.12218" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1fa839ce59 code=0x7ffc0000
[ 1251.903360][   T30] audit: type=1326 audit(2000001716.565:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.12218" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa839ce59 code=0x7ffc0000
[ 1252.533463][ T4958] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1253.104572][ T4958] veth0_vlan: entered promiscuous mode
[ 1253.122762][ T4958] veth1_vlan: entered promiscuous mode
[ 1253.278310][ T4958] veth0_macvtap: entered promiscuous mode
[ 1253.314812][ T4958] veth1_macvtap: entered promiscuous mode
[ 1253.379449][ T4958] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1253.452098][ T4958] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1253.513365][  T445] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1253.555858][  T445] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1253.586387][  T445] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1253.615897][  T445] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1253.835893][   T24] IPVS: starting estimator thread 0...
[ 1253.891444][ T8467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1253.923854][ T8467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1253.940120][ T5296] IPVS: using max 30 ests per chain, 72000 per kthread
[ 1254.056446][ T8467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1254.074917][ T8467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1254.567835][ T5312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12259'.
[ 1254.798671][ T5284] lo speed is unknown, defaulting to 1000
[ 1254.847044][ T5284] »»»»»» speed is unknown, defaulting to 1000
[ 1255.382267][ T5315] loop6: detected capacity change from 0 to 32768
[ 1255.482320][ T5315] XFS (loop6): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[ 1255.514764][ T5343] xt_hashlimit: size too large, truncated to 1048576
[ 1255.646989][ T5315] XFS (loop6): Ending clean mount
[ 1255.842116][ T5352] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1255.904214][ T4958] XFS (loop6): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[ 1256.933739][ T5386] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12275'.
[ 1256.993040][ T5386] netlink: 'syz.6.12275': attribute type 7 has an invalid length.
[ 1257.024654][ T5386] netlink: 'syz.6.12275': attribute type 8 has an invalid length.
[ 1257.054068][ T5386] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12275'.
[ 1257.107863][ T5386] erspan0: entered promiscuous mode
[ 1257.115376][ T5386] gretap0: entered promiscuous mode
[ 1257.126903][ T5386] erspan0: left promiscuous mode
[ 1257.144529][ T5386] gretap0: left promiscuous mode
[ 1258.183426][ T5631] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1258.197416][ T5631] Bluetooth: hci2: Injecting HCI hardware error event
[ 1258.207712][ T5631] Bluetooth: hci2: hardware error 0x00
[ 1258.707186][ T5429] 9p: Bad value for 'rfdno'
[ 1258.836681][ T5426] Process accounting resumed
[ 1260.108468][ T5466] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[ 1260.408956][ T5631] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1261.505060][ T5496] netlink: 182 bytes leftover after parsing attributes in process `syz.8.12332'.
[ 1262.123024][T22451] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1262.383470][ T5508] fuse: Bad value for 'fd'
[ 1262.942539][ T5517] loop9: detected capacity change from 0 to 1024
[ 1263.018229][ T5517] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1263.106537][ T5517] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1263.165249][ T5529] input: syz0 as /devices/virtual/input/input58
[ 1263.177424][ T5517] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.12342: bg 0: block 112: padding at end of block bitmap is not set
[ 1263.202323][ T5517] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 131 with max blocks 1 with error 28
[ 1263.234693][ T5517] EXT4-fs (loop9): This should not happen!! Data will be lost
[ 1263.234693][ T5517] 
[ 1263.273750][ T5517] EXT4-fs (loop9): Total free blocks count 0
[ 1263.292376][ T5517] EXT4-fs (loop9): Free/Dirty block details
[ 1263.315719][ T5517] EXT4-fs (loop9): free_blocks=0
[ 1263.341834][ T5517] EXT4-fs (loop9): dirty_blocks=16
[ 1263.361395][ T5517] EXT4-fs (loop9): Block reservation details
[ 1263.395588][ T5517] EXT4-fs (loop9): i_reserved_data_blocks=1
[ 1263.450218][ T5539] fuse: Bad value for 'fd'
[ 1263.572251][  T659] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[ 1263.607423][  T659] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1264.257055][ T5572] netlink: 758 bytes leftover after parsing attributes in process `syz.8.12364'.
[ 1264.281276][ T5576] loop9: detected capacity change from 0 to 256
[ 1264.323192][ T5576] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1264.366410][ T5576] FAT-fs (loop9): Directory bread(block 64) failed
[ 1264.407264][ T5576] FAT-fs (loop9): Directory bread(block 65) failed
[ 1264.474935][ T5576] FAT-fs (loop9): Directory bread(block 66) failed
[ 1264.505758][ T5576] FAT-fs (loop9): Directory bread(block 67) failed
[ 1264.527178][ T5576] FAT-fs (loop9): Directory bread(block 68) failed
[ 1264.573413][ T5576] FAT-fs (loop9): Directory bread(block 69) failed
[ 1264.608246][ T5576] FAT-fs (loop9): Directory bread(block 70) failed
[ 1264.635148][ T5576] FAT-fs (loop9): Directory bread(block 71) failed
[ 1264.666826][ T5576] FAT-fs (loop9): Directory bread(block 72) failed
[ 1264.710968][ T5576] FAT-fs (loop9): Directory bread(block 73) failed
[ 1265.079365][ T5605] loop9: detected capacity change from 0 to 16
[ 1265.119547][ T5605] erofs (device loop9): mounted with root inode @ nid 36.
[ 1265.207171][ T5603] loop6: detected capacity change from 0 to 4096
[ 1265.242135][ T5603] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[ 1265.374381][ T5603] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[ 1265.495035][   T30] kauditd_printk_skb: 10 callbacks suppressed
[ 1265.539738][   T30] audit: type=1800 audit(2000001730.760:699): pid=5603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.12380" name="file1" dev="loop6" ino=30 res=0 errno=0
[ 1267.343569][ T5642] loop6: detected capacity change from 0 to 131072
[ 1267.356922][ T5642] F2FS-fs (loop6): invalid crc value
[ 1267.465900][ T5642] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1267.497028][ T5642] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[ 1268.466109][   T24] kernel read not supported for file /vcs (pid: 24 comm: kworker/1:0)
[ 1268.750061][ T5691] pim6reg: entered allmulticast mode
[ 1268.783727][ T5691] pim6reg: left allmulticast mode
[ 1269.721729][ T5723] 9pnet: p9_errstr2errno: server reported unknown error 0x000
[ 1269.744417][ T5719] lo speed is unknown, defaulting to 1000
[ 1269.795841][ T5719] »»»»»» speed is unknown, defaulting to 1000
[ 1269.989196][ T5733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12432'.
[ 1270.070822][ T5733] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12432'.
[ 1271.525532][ T5759] loop6: detected capacity change from 0 to 131072
[ 1271.550067][ T5759] F2FS-fs (loop6): invalid crc value
[ 1271.707728][ T5759] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1271.720912][ T5759] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[ 1272.577824][ T5828] loop9: detected capacity change from 0 to 128
[ 1272.918505][ T5832] lo speed is unknown, defaulting to 1000
[ 1273.023270][ T5832] »»»»»» speed is unknown, defaulting to 1000
[ 1273.449420][ T2098] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1273.642954][ T2098] usb 10-1: config 0 has an invalid interface number: 50 but max is 0
[ 1273.675614][ T2098] usb 10-1: config 0 has no interface number 0
[ 1273.703915][ T2098] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1273.756676][ T2098] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1273.780313][ T2098] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1273.808753][ T2098] usb 10-1: Product: syz
[ 1273.818199][ T2098] usb 10-1: Manufacturer: syz
[ 1273.836159][ T2098] usb 10-1: SerialNumber: syz
[ 1273.867980][ T2098] usb 10-1: config 0 descriptor??
[ 1273.926487][ T2098] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0
[ 1274.146616][ T2098] usb 10-1: USB disconnect, device number 21
[ 1274.186361][ T2098] yurex 10-1:0.50: USB YUREX #0 now disconnected
[ 1274.830011][ T5874] loop6: detected capacity change from 0 to 1024
[ 1274.886698][ T5874] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1274.983856][ T4958] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1275.338996][ T5890] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12484'.
[ 1276.183939][ T5914] overlayfs: failed to clone upperpath
[ 1277.378155][ T5922] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.12496'.
[ 1277.512079][ T5916] loop9: detected capacity change from 0 to 131072
[ 1277.527606][ T5916] xfs: Deprecated parameter 'ikeep'
[ 1277.535236][ T5916] XFS: ikeep mount option is deprecated.
[ 1277.566148][ T5916] XFS (loop9): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[ 1277.729420][ T5916] XFS (loop9): Starting recovery (logdev: internal)
[ 1277.846129][ T5916] XFS (loop9): Ending recovery (logdev: internal)
[ 1277.900476][ T5945] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1277.943522][ T5945] tipc: Enabled bearer <udp:s>, priority 10
[ 1278.017377][  T659] XFS (loop9): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[ 1278.031664][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1278.171492][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1278.311837][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1278.462589][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1278.602978][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1278.743012][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1278.883665][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1278.928685][ T5975] netlink: 7 bytes leftover after parsing attributes in process `syz.8.12515'.
[ 1278.940733][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12516'.
[ 1279.024883][  T437] tipc: Node number set to 4278255617
[ 1279.163966][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1279.433989][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1279.968690][ T6000] loop6: detected capacity change from 0 to 4096
[ 1280.022342][ T6000] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[ 1280.109384][ T6000] ntfs3(loop6): ino=19, mi_enum_attr
[ 1280.139672][ T6000] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[ 1280.389193][ T6000] ntfs3(loop6): ino=21, "file1" failed to extend initialized size to 8000c61.
[ 1281.211016][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12537'.
[ 1281.226382][ T6007] loop9: detected capacity change from 0 to 40427
[ 1281.235035][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12537'.
[ 1281.247299][ T6007] F2FS-fs (loop9): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[ 1281.275656][ T6007] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 1281.306828][ T6007] F2FS-fs (loop9): invalid crc value
[ 1281.600256][ T6007] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1281.671817][ T6007] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[ 1281.686544][ T6007] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[ 1281.976358][ T6045] macvtap1: entered promiscuous mode
[ 1281.981676][ T6045] batadv0: entered promiscuous mode
[ 1281.988532][ T6045] 8021q: adding VLAN 0 to HW filter on device macvtap1
[ 1282.045553][ T6045] batadv0: left promiscuous mode
[ 1282.062814][ T6051] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12544'.
[ 1282.661425][ T6064] bridge: RTM_NEWNEIGH with invalid ether address
[ 1282.685086][ T6064] bridge: RTM_NEWNEIGH with invalid ether address
[ 1282.729678][ T6066] fuse: fd is not a fuse device
[ 1283.124511][    C0] net_ratelimit: 3 callbacks suppressed
[ 1283.124532][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1283.572141][ T6094] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12563'.
[ 1283.624673][ T6095] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12563'.
[ 1284.175805][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1284.184441][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1284.898367][ T6130] netlink: 'syz.3.12579': attribute type 3 has an invalid length.
[ 1284.918423][ T6130] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12579'.
[ 1285.203960][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1285.795072][  T437] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1285.996528][  T437] usb 10-1: Using ep0 maxpacket: 32
[ 1286.016558][ T6158] lo speed is unknown, defaulting to 1000
[ 1286.023064][  T437] usb 10-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1286.049297][  T437] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1286.062809][  T437] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1286.077095][ T6158] »»»»»» speed is unknown, defaulting to 1000
[ 1286.082978][  T437] usb 10-1: config 1 has no interface number 0
[ 1286.118421][  T437] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1286.137889][ T6166] loop6: detected capacity change from 0 to 256
[ 1286.160001][ T6166] exfat: Deprecated parameter 'utf8'
[ 1286.172189][  T437] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1286.233287][  T437] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1286.243939][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1286.270026][ T6166] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d)
[ 1286.292655][  T437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1286.364972][  T437] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found
[ 1286.592626][  T437] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached
[ 1287.000454][T22460] usb 10-1: USB disconnect, device number 22
[ 1287.033230][T22460] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected
[ 1287.293949][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1287.318526][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12607'.
[ 1287.338582][ T6197] netlink: 'syz.6.12607': attribute type 30 has an invalid length.
[ 1287.381109][T22495] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1287.390552][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12607'.
[ 1287.404136][T22495] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1287.412961][ T6197] netlink: 'syz.6.12607': attribute type 30 has an invalid length.
[ 1287.424889][T22495] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1287.443973][T22495] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1288.323940][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1288.612206][ T6246] netlink: 84 bytes leftover after parsing attributes in process `syz.9.12625'.
[ 1288.964026][  T437] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1289.207053][  T437] usb 10-1: Using ep0 maxpacket: 16
[ 1289.244147][ T6272] netlink: 204 bytes leftover after parsing attributes in process `syz.3.12629'.
[ 1289.348382][  T437] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1289.363965][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1289.473634][  T437] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1289.522650][  T437] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1289.573523][  T437] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1289.593388][  T437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1289.613339][  T437] usb 10-1: config 0 descriptor??
[ 1290.115732][  T437] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0048/input/input59
[ 1290.178715][  T437] microsoft 0003:045E:07DA.0048: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0
[ 1290.320050][  T437] usb 10-1: USB disconnect, device number 23
[ 1290.404081][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1290.490939][ T6299] fido_id[6299]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1291.280609][ T6333] Invalid argument reading file caps for ./file0
[ 1291.444006][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1291.513018][ T6342] veth0: entered promiscuous mode
[ 1291.522182][ T6340] loop9: detected capacity change from 0 to 2048
[ 1291.522928][ T6342] veth0: left promiscuous mode
[ 1291.562408][ T6340] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1292.263292][ T6369] loop9: detected capacity change from 0 to 2048
[ 1292.299124][ T6369] hpfs: hpfs_map_sector(): read error
[ 1292.494027][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1292.728525][ T6381] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12678'.
[ 1292.819588][ T6384] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12678'.
[ 1293.081328][ T6397] overlayfs: failed to clone upperpath
[ 1293.395977][ T6400] loop6: detected capacity change from 0 to 4096
[ 1293.514693][T22460] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 1293.524011][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1293.704630][T22460] usb 10-1: Using ep0 maxpacket: 32
[ 1293.719564][T22460] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1293.735642][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12692'.
[ 1293.746568][T22460] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1293.767456][T22460] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1293.782990][T22460] usb 10-1: Product: syz
[ 1293.809316][T22460] usb 10-1: Manufacturer: syz
[ 1293.826832][T22460] usb 10-1: SerialNumber: syz
[ 1293.855861][T22460] usb 10-1: config 0 descriptor??
[ 1293.885305][ T6402] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1293.920207][T22460] hub 10-1:0.0: bad descriptor, ignoring hub
[ 1293.949003][T22460] hub 10-1:0.0: probe with driver hub failed with error -5
[ 1294.079765][ T6423] erspan0: entered promiscuous mode
[ 1294.284533][ T6432] syzkaller1: entered promiscuous mode
[ 1294.309800][ T6432] syzkaller1: entered allmulticast mode
[ 1294.564130][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1294.663368][ T6402] usb 10-1: reset high-speed USB device number 24 using dummy_hcd
[ 1294.910235][ T6402] usb 10-1: device firmware changed
[ 1294.930889][T22460] usb 10-1: USB disconnect, device number 24
[ 1295.104724][T22460] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1295.284831][T22460] usb 10-1: Using ep0 maxpacket: 32
[ 1295.296628][T22460] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1295.330396][T22460] usb 10-1: string descriptor 0 read error: -22
[ 1295.349821][T22460] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1295.363848][T22460] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1295.411040][T22460] usb 10-1: config 0 descriptor??
[ 1295.430353][ T6428] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1295.459446][T22460] hub 10-1:0.0: bad descriptor, ignoring hub
[ 1295.476652][T22460] hub 10-1:0.0: probe with driver hub failed with error -5
[ 1295.604043][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1295.775907][T22460] usb 10-1: USB disconnect, device number 25
[ 1296.644004][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1296.655556][ T6500] loop9: detected capacity change from 0 to 512
[ 1296.677533][ T6500] EXT4-fs: inline encryption not supported
[ 1296.717766][ T6500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1296.753642][ T6500] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1296.930649][ T6500] Quota error (device loop9): do_insert_tree: Free block already used in tree: block 1
[ 1296.940692][ T6500] Quota error (device loop9): qtree_write_dquot: Error -5 occurred while creating quota
[ 1296.951406][ T6500] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.12729: Failed to acquire dquot type 1
[ 1296.964524][ T6500] loop9: lost filesystem error report for type 5 error -5
[ 1296.968714][ T6500] EXT4-fs (loop9): Remounting filesystem read-only
[ 1296.975925][    C0] EXT4-fs (loop9): error count since last fsck: 1
[ 1296.975946][    C0] EXT4-fs (loop9): initial error at time 2000001762: ext4_acquire_dquot:7034
[ 1296.975974][    C0] EXT4-fs (loop9): last error at time 2000001762: ext4_acquire_dquot:7034
[ 1297.123412][ T6500] EXT4-fs (loop9): 1 truncate cleaned up
[ 1297.163797][ T6500] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1297.319911][  T659] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1297.684010][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1298.026336][ T6560] syzkaller1: entered promiscuous mode
[ 1298.043029][ T6560] syzkaller1: entered allmulticast mode
[ 1298.339044][ T6569] netlink: 48 bytes leftover after parsing attributes in process `syz.8.12756'.
[ 1298.609572][ T6586] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1298.631881][ T6586] team0: Port device batadv0 added
[ 1298.663809][ T6586] bridge0: port 1(team0) entered blocking state
[ 1298.671501][ T6586] bridge0: port 1(team0) entered disabled state
[ 1298.679018][ T6586] team0: entered allmulticast mode
[ 1298.684675][ T6586] team_slave_0: entered allmulticast mode
[ 1298.701224][ T6586] team_slave_1: entered allmulticast mode
[ 1298.707858][ T6586] batadv0: entered allmulticast mode
[ 1298.724021][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1298.753489][ T6586] team0: entered promiscuous mode
[ 1298.774784][ T6586] team_slave_0: entered promiscuous mode
[ 1298.786235][ T6586] team_slave_1: entered promiscuous mode
[ 1298.802163][ T6586] batadv0: entered promiscuous mode
[ 1299.116101][ T8467] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1299.127386][ T8467] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1299.764007][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1300.134705][  T423] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 1300.314691][  T423] usb 10-1: Using ep0 maxpacket: 8
[ 1300.322826][  T423] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[ 1300.340944][  T423] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1300.363084][  T423] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1300.381144][  T423] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1300.392673][  T423] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1300.447386][  T423] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1300.466779][  T423] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1300.705136][  T423] usb 10-1: usb_control_msg returned -32
[ 1300.723694][  T423] usbtmc 10-1:16.0: can't read capabilities
[ 1300.814079][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1300.851341][ T6652] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12792'.
[ 1300.920348][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12793'.
[ 1301.079007][ T6661] usbtmc 10-1:16.0: control status returned 0
[ 1301.133069][ T6663] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12796'.
[ 1301.239197][ T6667] overlayfs: failed to clone upperpath
[ 1301.281585][  T436] usb 10-1: USB disconnect, device number 26
[ 1301.844008][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1302.039152][ T6688] fuse: fd is not a fuse device
[ 1302.884006][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1303.924017][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1304.963978][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1305.094896][ T6762] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1305.158118][ T6764] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.12843'.
[ 1305.219918][ T6767] netlink: 'syz.4.12842': attribute type 9 has an invalid length.
[ 1305.259021][ T6767] netlink: 'syz.4.12842': attribute type 11 has an invalid length.
[ 1305.305175][ T6767] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.12842'.
[ 1306.004007][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1306.285348][ T6790] block device autoloading is deprecated and will be removed.
[ 1306.771349][ T6813] netlink: 16 bytes leftover after parsing attributes in process `syz.8.12862'.
[ 1306.812356][ T6813] netlink: 64 bytes leftover after parsing attributes in process `syz.8.12862'.
[ 1306.835286][ T6813] netlink: 16 bytes leftover after parsing attributes in process `syz.8.12862'.
[ 1307.044003][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1307.056594][ T6817] loop0: detected capacity change from 0 to 2048
[ 1307.168068][ T6817] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1307.414932][ T6831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1307.862643][ T6843] loop9: detected capacity change from 0 to 4096
[ 1307.878545][ T6843] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1307.887544][ T6843] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1307.902481][ T6843] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a002c098, mo2=0002]
[ 1307.941376][ T6843] System zones: 0-5
[ 1308.036968][ T6843] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1308.084017][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1308.211113][  T659] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1309.031747][ T6854] loop0: detected capacity change from 0 to 32768
[ 1309.124409][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1309.130352][ T6879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12893'.
[ 1309.238298][ T6879] bond0: ARP target 170.170.170.170 is already present
[ 1309.260279][ T6884] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12894'.
[ 1309.284904][ T6879] bond0: option arp_ip_target: invalid value (2863311530)
[ 1309.771036][ T6902] tipc: Started in network mode
[ 1309.781461][ T6902] tipc: Node identity 7f000001, cluster identity 4711
[ 1309.801582][ T6902] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1310.164376][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1310.346576][ T6912] lo speed is unknown, defaulting to 1000
[ 1310.430249][ T6912] »»»»»» speed is unknown, defaulting to 1000
[ 1310.578911][ T6925] loop9: detected capacity change from 0 to 4096
[ 1310.638163][ T6925] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1310.786580][  T659] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1311.204005][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1311.561587][ T6957] fuse: fd is not a fuse device
[ 1311.624397][ T6959] input: syz0 as /devices/virtual/input/input60
[ 1312.182169][ T6979] loop9: detected capacity change from 0 to 512
[ 1312.244105][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1312.253198][ T6979] EXT4-fs error (device loop9): __ext4_fill_super:5596: inode #2: comm syz.9.12936: casefold flag without casefold feature
[ 1312.255995][ T6982] netlink: 'syz.0.12938': attribute type 12 has an invalid length.
[ 1312.275828][ T6982] netlink: 'syz.0.12938': attribute type 29 has an invalid length.
[ 1312.287314][ T6982] netlink: 148 bytes leftover after parsing attributes in process `syz.0.12938'.
[ 1312.298137][ T6982] netlink: 'syz.0.12938': attribute type 1 has an invalid length.
[ 1312.306523][ T6982] netlink: 'syz.0.12938': attribute type 2 has an invalid length.
[ 1312.358600][ T6979] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[ 1312.363876][    C0] EXT4-fs (loop9): error count since last fsck: 1
[ 1312.379363][    C0] EXT4-fs (loop9): last error at time 2000001777: __ext4_fill_super:5596: inode 2
[ 1312.395015][ T6979] EXT4-fs (loop9): get root inode failed
[ 1312.400717][ T6979] EXT4-fs (loop9): mount failed
[ 1313.074292][  T435] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[ 1313.259620][  T435] usb 10-1: Using ep0 maxpacket: 8
[ 1313.273218][  T435] usb 10-1: config 0 has an invalid descriptor of length 247, skipping remainder of the config
[ 1313.284263][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1313.323288][  T435] usb 10-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[ 1313.332719][  T435] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1313.345072][  T435] usb 10-1: config 0 descriptor??
[ 1313.354868][  T435] rndis_host 10-1:0.0: missing cdc header descriptor
[ 1313.362764][  T435] cdc_acm 10-1:0.0: Control and data interfaces are not separated!
[ 1313.371837][  T435] cdc_acm 10-1:0.0: This needs exactly 3 endpoints
[ 1313.379090][  T435] cdc_acm 10-1:0.0: probe with driver cdc_acm failed with error -22
[ 1313.569427][  T435] usb 10-1: USB disconnect, device number 27
[ 1314.323987][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1314.963557][ T7052] loop9: detected capacity change from 0 to 512
[ 1315.175317][   T30] audit: type=1326 audit(2000001780.408:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.4.12971" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1fa839ce59 code=0x0
[ 1315.374010][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1315.430397][ T7067] fuse: fd is not a fuse device
[ 1316.100668][ T7063] loop9: detected capacity change from 0 to 32768
[ 1316.291955][ T7063] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[ 1316.404013][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1316.829211][ T7073] loop6: detected capacity change from 0 to 131072
[ 1316.852246][ T7073] F2FS-fs (loop6): Invalid log sectorsize (67108873)
[ 1316.890434][ T7073] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1316.905009][ T7073] F2FS-fs (loop6): invalid crc value
[ 1316.990755][ T7073] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1317.012947][ T7073] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[ 1317.021449][ T7073] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[ 1317.429995][  T659] ocfs2: Unmounting device (7,9) on (node local)
[ 1317.443997][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1318.450069][ T7105] loop0: detected capacity change from 0 to 131072
[ 1318.470808][ T7105] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[ 1318.478180][ T7105] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1318.494242][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1318.495932][ T7105] F2FS-fs (loop0): invalid crc value
[ 1318.615919][ T7105] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1318.638490][ T7105] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 1318.646301][ T7105] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[ 1319.524037][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1319.802493][   T30] audit: type=1326 audit(2000001785.028:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.8.13004" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb752f9ce59 code=0x0
[ 1319.900628][ T7127] loop9: detected capacity change from 0 to 40427
[ 1319.919249][ T7147] 9p: Bad value for 'rfdno'
[ 1319.938847][ T7127] F2FS-fs (loop9): build fault injection rate: 14
[ 1319.979967][ T7127] F2FS-fs (loop9): build fault injection type: 0x0
[ 1320.025917][ T7127] F2FS-fs (loop9): invalid crc value
[ 1320.260027][ T7127] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1320.316109][ T7127] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 1320.376593][ T7127] F2FS-fs (loop9): Stopped filesystem due to reason: 0
[ 1320.564004][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1321.290003][ T7181] loop8: detected capacity change from 0 to 7
[ 1321.327609][ T7181] Dev loop8: unable to read RDB block 7
[ 1321.355293][ T7181]  loop8: AHDI p1 p2 p3
[ 1321.365697][ T7181] loop8: partition table partially beyond EOD, truncated
[ 1321.404805][ T7181] loop8: p1 size 150995456 extends beyond EOD, truncated
[ 1321.435150][ T7181] loop8: p2 size 150995200 extends beyond EOD, truncated
[ 1321.603998][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1321.874853][ T5760] udevd[5760]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory
[ 1321.880604][ T6785] udevd[6785]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[ 1322.304868][ T7202] netlink: 'syz.4.13027': attribute type 11 has an invalid length.
[ 1322.643926][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1323.502778][ T7229] loop6: detected capacity change from 0 to 40427
[ 1323.519281][ T7229] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[ 1323.528119][ T7229] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1323.540560][ T7229] F2FS-fs (loop6): invalid crc value
[ 1323.634752][ T7229] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1323.651470][ T7229] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[ 1323.659259][ T7229] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1323.693927][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1324.286864][ T7252] overlayfs: failed to clone lowerpath
[ 1324.405948][ T7229] F2FS-fs (loop6): Start checkpoint disabled!
[ 1324.428777][ T7229] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[ 1324.460115][ T7258] 9p: Unknown uid 00000000004294967295
[ 1324.702330][ T7259] loop0: detected capacity change from 0 to 4096
[ 1324.723936][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1324.913467][   T30] audit: type=1800 audit(2000001790.148:702): pid=7259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13051" name="file1" dev="loop0" ino=33 res=0 errno=0
[ 1325.201678][ T7276] bridge_slave_0: left allmulticast mode
[ 1325.240920][ T7276] bridge_slave_0: left promiscuous mode
[ 1325.262370][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1325.690037][ T7276] bridge_slave_1: left allmulticast mode
[ 1325.725621][ T7276] bridge_slave_1: left promiscuous mode
[ 1325.754748][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1325.764129][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1325.801667][ T7276] bond0: (slave bond_slave_0): Releasing backup interface
[ 1325.853297][ T7276] bond0: (slave bond_slave_1): Releasing backup interface
[ 1325.908357][ T7276] team0: Port device team_slave_0 removed
[ 1325.944032][ T7276] team0: Port device team_slave_1 removed
[ 1325.965808][ T7276] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1325.996336][ T7276] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1326.038897][ T7276] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1326.098811][ T7276] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1326.128433][ T7276] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1326.498045][ T7314] dvmrp6: entered allmulticast mode
[ 1326.546934][ T7313] dvmrp6: left allmulticast mode
[ 1326.804166][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1326.827815][ T7318] syzkaller1: entered promiscuous mode
[ 1326.846928][ T7318] syzkaller1: entered allmulticast mode
[ 1327.236203][ T7327] team0 (unregistering): Port device team_slave_0 removed
[ 1327.270694][ T7312] loop0: detected capacity change from 0 to 32768
[ 1327.282537][ T7327] team0 (unregistering): Port device team_slave_1 removed
[ 1327.357512][ T7312] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1327.440527][ T7312] XFS (loop0): Ending clean mount
[ 1327.456377][ T7312] XFS (loop0): Quotacheck needed: Please wait.
[ 1327.709255][ T7312] XFS (loop0): Quotacheck: Done.
[ 1327.844742][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1327.999537][ T7351] loop9: detected capacity change from 0 to 32768
[ 1328.007504][ T7351] btrfs: Deprecated parameter 'usebackuproot'
[ 1328.013568][ T7351] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1328.025597][ T7351] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.13087 (7351)
[ 1328.053061][ T7351] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1328.064924][ T7351] BTRFS info (device loop9): using crc32c checksum algorithm
[ 1328.079182][T17860] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1328.133196][ T1646] BTRFS warning (device loop9): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[ 1328.148753][ T7351] BTRFS error (device loop9): failed to load root extent
[ 1328.156688][ T7351] BTRFS warning (device loop9): try to load backup roots slot 1
[ 1328.167386][ T1649] BTRFS warning (device loop9): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[ 1328.201879][ T7351] BTRFS warning (device loop9): couldn't read tree root
[ 1328.209483][ T7351] BTRFS warning (device loop9): try to load backup roots slot 2
[ 1328.218397][  T447] BTRFS error (device loop9): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1328.249662][ T7351] BTRFS warning (device loop9): couldn't read tree root
[ 1328.257586][ T7351] BTRFS warning (device loop9): try to load backup roots slot 3
[ 1328.298166][ T7351] BTRFS info (device loop9): rebuilding free space tree
[ 1328.335292][ T7351] BTRFS info (device loop9): checking UUID tree
[ 1328.352251][ T7351] BTRFS info (device loop9): enabling ssd optimizations
[ 1328.360041][ T7351] BTRFS info (device loop9): turning on async discard
[ 1328.367800][ T7351] BTRFS info (device loop9): enabling free space tree
[ 1328.375209][ T7351] BTRFS info (device loop9): force clearing of disk cache
[ 1328.382315][ T7351] BTRFS info (device loop9): enabling auto defrag
[ 1328.389495][ T7351] BTRFS info (device loop9): trying to use backup root at mount time
[ 1328.398932][ T7351] BTRFS info (device loop9): use zstd compression, level 3
[ 1328.861822][ T7351] BTRFS critical (device loop9 state E): emergency shutdown
[ 1328.884061][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1328.914989][  T659] BTRFS info (device loop9 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1329.090865][ T7387] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13096'.
[ 1329.444714][T22460] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[ 1329.624922][T22460] usb 10-1: Using ep0 maxpacket: 8
[ 1329.664614][T22460] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1329.683038][T22460] usb 10-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[ 1329.707648][ T7403] fuse: Bad value for 'fd'
[ 1329.753179][T22460] usb 10-1: New USB device found, idVendor=03f0, idProduct=070c, bcdDevice= 0.00
[ 1329.792561][T22460] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1329.828856][T22460] usb 10-1: Product: syz
[ 1329.840915][T22460] usb 10-1: Manufacturer: syz
[ 1329.854738][T22460] usb 10-1: SerialNumber: syz
[ 1329.886803][ T7413] loop8: detected capacity change from 0 to 128
[ 1329.924113][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1329.987253][ T7413]  loop8: AHDI p4
[ 1330.093662][T22460] usb-storage 10-1:5.0: USB Mass Storage device detected
[ 1330.139921][T22460] usb-storage 10-1:5.0: Quirks match for vid 03f0 pid 070c: 8000
[ 1330.341964][T22460] usb 10-1: USB disconnect, device number 28
[ 1330.974047][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1331.575183][ T7451] loop9: detected capacity change from 0 to 2048
[ 1331.598997][ T7451] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1331.630425][ T7449] loop0: detected capacity change from 0 to 4096
[ 1331.700534][ T7449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1331.867046][T17860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1331.999161][  T418] IPVS: starting estimator thread 0...
[ 1332.004906][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1332.143981][ T7462] IPVS: using max 26 ests per chain, 62400 per kthread
[ 1332.907816][ T7494] netlink: 132 bytes leftover after parsing attributes in process `syz.8.13138'.
[ 1333.053930][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1333.089101][ T7499] loop6: detected capacity change from 0 to 512
[ 1333.122370][ T7503] loop9: detected capacity change from 0 to 1024
[ 1333.153083][ T7499] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.13141: corrupted inode contents
[ 1333.304440][ T7499] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1333.306714][ T7499] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[ 1333.315924][    C0] EXT4-fs (loop6): error count since last fsck: 1
[ 1333.315944][    C0] EXT4-fs (loop6): initial error at time 2000001798: ext4_do_update_inode:5690: inode 15
[ 1333.315978][    C0] EXT4-fs (loop6): last error at time 2000001798: ext4_do_update_inode:5690: inode 15
[ 1333.446064][ T7499] loop6: lost filesystem error report for type 5 error -117
[ 1333.446440][ T7499] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.13141: corrupted inode contents
[ 1333.514464][ T7499] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1333.515350][ T7499] EXT4-fs error (device loop6): ext4_evict_inode:315: inode #15: comm syz.6.13141: mark_inode_dirty error
[ 1333.573802][ T7499] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1333.599732][ T7499] EXT4-fs (loop6): 1 orphan inode deleted
[ 1333.686826][ T7499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1333.991998][ T4958] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1334.084125][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1334.470323][ T7524] loop9: detected capacity change from 0 to 4096
[ 1334.504166][ T7524] EXT4-fs: inline encryption not supported
[ 1334.541063][ T7526] lo speed is unknown, defaulting to 1000
[ 1334.550890][ T7524] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1334.567306][ T7526] »»»»»» speed is unknown, defaulting to 1000
[ 1334.598151][ T7524] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1334.643068][ T7524] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1334.945367][T22460] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[ 1335.123999][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1335.134909][T22460] usb 10-1: Using ep0 maxpacket: 32
[ 1335.148280][T22460] usb 10-1: config 0 has an invalid interface number: 2 but max is 0
[ 1335.180612][T22460] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1335.246096][T22460] usb 10-1: config 0 has no interface number 0
[ 1335.252965][T22460] usb 10-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1335.317505][T22460] usb 10-1: config 0 interface 2 has no altsetting 0
[ 1335.350566][T22460] usb 10-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[ 1335.399477][T22460] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1335.441756][T22460] usb 10-1: Product: syz
[ 1335.460252][T22460] usb 10-1: Manufacturer: syz
[ 1335.474970][T22460] usb 10-1: SerialNumber: syz
[ 1335.501179][T22460] usb 10-1: config 0 descriptor??
[ 1335.520542][ T7551] loop0: detected capacity change from 0 to 1024
[ 1335.541842][T22460] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[ 1335.597653][ T7551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1335.667382][ T7551] ext4 filesystem being mounted at /1241/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1335.701293][ T7551] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.13162: bg 0: block 112: padding at end of block bitmap is not set
[ 1335.738053][ T7551] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[ 1335.794044][ T7551] EXT4-fs (loop0): This should not happen!! Data will be lost
[ 1335.794044][ T7551] 
[ 1335.833095][ T7551] EXT4-fs (loop0): Total free blocks count 0
[ 1335.859145][ T7551] EXT4-fs (loop0): Free/Dirty block details
[ 1335.870855][ T7551] EXT4-fs (loop0): free_blocks=0
[ 1335.884928][ T7551] EXT4-fs (loop0): dirty_blocks=16
[ 1335.899930][ T7551] EXT4-fs (loop0): Block reservation details
[ 1335.910770][ T7551] EXT4-fs (loop0): i_reserved_data_blocks=1
[ 1336.001513][T17860] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[ 1336.058069][T17860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1336.078340][T22460] usb 10-1: invalid MIDI in EP 0
[ 1336.091457][ T7565] overlayfs: missing 'lowerdir'
[ 1336.163967][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1336.877109][T22460] snd-usb-audio 10-1:0.2: probe with driver snd-usb-audio failed with error -22
[ 1337.203943][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1337.241026][T31431] udevd[31431]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1337.375506][T22460] usb 10-1: USB disconnect, device number 29
[ 1337.460396][  T659] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1338.243933][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1338.280813][ T7597] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.13182'.
[ 1339.284367][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1340.324464][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1340.391515][ T7673] loop0: detected capacity change from 0 to 512
[ 1340.440151][ T7673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1340.486476][ T7673] ext4 filesystem being mounted at /1255/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1340.698685][T17860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1341.011873][ T7686] loop0: detected capacity change from 0 to 1024
[ 1341.373924][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1341.692046][ T7705] lo speed is unknown, defaulting to 1000
[ 1341.729560][ T7705] »»»»»» speed is unknown, defaulting to 1000
[ 1342.404469][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1342.572342][ T7682] loop9: detected capacity change from 0 to 32768
[ 1342.810066][ T7715] lo speed is unknown, defaulting to 1000
[ 1342.914732][ T7710] loop0: detected capacity change from 0 to 131072
[ 1342.938860][ T7715] »»»»»» speed is unknown, defaulting to 1000
[ 1342.947615][ T7682] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1342.963010][ T7710] F2FS-fs (loop0): invalid crc value
[ 1343.091529][ T7710] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1343.110758][ T7710] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[ 1343.182494][ T7682] XFS (loop9): Ending clean mount
[ 1343.321610][ T7682] XFS (loop9): User initiated shutdown received.
[ 1343.405169][ T7682] XFS (loop9): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:462).  Shutting down filesystem.
[ 1343.453922][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1343.571822][ T7682] XFS (loop9): Please unmount the filesystem and rectify the problem(s)
[ 1343.898547][  T659] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1344.068580][ T7744] input: syz1 as /devices/virtual/input/input61
[ 1344.484297][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1345.362177][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13253'.
[ 1345.409836][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13253'.
[ 1345.524185][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1346.222412][ T7758] loop6: detected capacity change from 0 to 40427
[ 1346.282592][ T7758] F2FS-fs (loop6): invalid crc value
[ 1346.306181][ T7795] syzkaller1: entered promiscuous mode
[ 1346.330197][ T7795] syzkaller1: entered allmulticast mode
[ 1346.525872][ T7799] sctp: [Deprecated]: syz.3.13263 (pid 7799) Use of int in max_burst socket option.
[ 1346.525872][ T7799] Use struct sctp_assoc_value instead
[ 1346.564439][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1346.607134][ T7758] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1346.681053][ T7758] F2FS-fs (loop6): Start checkpoint disabled!
[ 1346.820692][ T7758] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[ 1346.840999][ T7758] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[ 1346.919931][ T7810] loop0: detected capacity change from 0 to 512
[ 1347.042502][ T7758] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=81000000, run fsck to fix.
[ 1347.603943][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1348.313032][ T7845] pim6reg: entered allmulticast mode
[ 1348.357436][ T7847] team0: entered allmulticast mode
[ 1348.439705][ T7845] team0: left allmulticast mode
[ 1348.473520][ T7845] pim6reg: left allmulticast mode
[ 1348.646458][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1348.696406][   T30] audit: type=1326 audit(2000001813.938:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.9.13286" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0dab9ce59 code=0x7ffc0000
[ 1348.834988][   T30] audit: type=1326 audit(2000001813.938:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.9.13286" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0dab9ce59 code=0x7ffc0000
[ 1348.888844][ T7862] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.13288'.
[ 1348.927546][ T7867] loop6: detected capacity change from 0 to 512
[ 1348.945932][   T30] audit: type=1326 audit(2000001813.998:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.9.13286" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0dab9ce59 code=0x7ffc0000
[ 1348.985187][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13290'.
[ 1349.057037][   T30] audit: type=1326 audit(2000001814.008:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.9.13286" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0dab9ce59 code=0x7ffc0000
[ 1349.082877][   T30] audit: type=1326 audit(2000001814.008:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.9.13286" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb0dab9ce59 code=0x7ffc0000
[ 1349.096878][ T7867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1349.109198][   T30] audit: type=1326 audit(2000001814.008:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.9.13286" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0dab9ce59 code=0x7ffc0000
[ 1349.147027][   T30] audit: type=1326 audit(2000001814.018:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.9.13286" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0dab9ce59 code=0x7ffc0000
[ 1349.171987][   T30] audit: type=1326 audit(2000001814.028:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.9.13286" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0dab9ce59 code=0x7ffc0000
[ 1349.200252][   T30] audit: type=1326 audit(2000001814.028:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.9.13286" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0dab9ce59 code=0x7ffc0000
[ 1349.234484][ T7867] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1349.323524][   T30] audit: type=1326 audit(2000001814.028:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.9.13286" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb0dab9ce59 code=0x7ffc0000
[ 1349.375373][ T7867] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 1349.499134][ T4958] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1349.527702][ T7880] tun0: tun_chr_ioctl cmd 1074025675
[ 1349.535460][ T7880] tun0: persist enabled
[ 1349.540478][ T7880] tun0: tun_chr_ioctl cmd 1074025675
[ 1349.545903][ T7880] tun0: persist disabled
[ 1349.684030][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1350.221955][ T7903] loop0: detected capacity change from 0 to 1764
[ 1350.476898][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13310'.
[ 1350.725925][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1350.820838][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13316'.
[ 1350.866497][ T7923] team1: entered promiscuous mode
[ 1350.871699][ T7923] team1: entered allmulticast mode
[ 1350.877467][ T7923] 8021q: adding VLAN 0 to HW filter on device team1
[ 1351.072770][ T7932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13321'.
[ 1351.159266][ T7933] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1351.174820][ T7933] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1351.193207][ T7933] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1351.642379][ T7952] macvtap1: entered allmulticast mode
[ 1351.734341][  T418] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[ 1351.763997][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1351.936183][  T418] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1351.959304][  T418] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1351.982132][  T418] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1352.007356][  T418] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1352.037511][  T418] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1352.058142][  T418] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1352.080779][  T418] usb 10-1: Manufacturer: syz
[ 1352.141099][  T418] usb 10-1: config 0 descriptor??
[ 1352.576665][  T418] appleir 0003:05AC:8243.0049: unknown main item tag 0x0
[ 1352.618406][  T418] appleir 0003:05AC:8243.0049: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0
[ 1352.803920][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1352.879836][  T418] usb 10-1: USB disconnect, device number 30
[ 1353.206682][T22451] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1353.843917][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1354.390587][ T8035] xt_hashlimit: size too large, truncated to 1048576
[ 1354.883913][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1355.165429][  T437] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[ 1355.284789][T22451] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1355.334072][  T437] usb 10-1: Using ep0 maxpacket: 32
[ 1355.348071][  T437] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1355.367879][  T437] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1355.379496][  T437] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1355.402512][  T437] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 1355.429579][  T437] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 1355.450365][  T437] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1355.460852][  T437] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1355.484450][  T437] usb 10-1: Product: syz
[ 1355.491814][  T437] usb 10-1: Manufacturer: syz
[ 1355.500227][  T437] usb 10-1: SerialNumber: syz
[ 1355.518100][  T437] usb 10-1: config 0 descriptor??
[ 1355.586395][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13382'.
[ 1355.740984][ T8073] 9p: Bad value for 'wfdno'
[ 1355.752922][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1355.777447][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1355.798722][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1355.819446][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1355.843080][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1355.868101][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1355.884372][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1355.890850][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1355.898554][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1355.905171][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1355.911712][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1355.923553][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1355.929747][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1355.938194][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1355.945224][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1355.951697][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1355.964377][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1355.973777][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1355.994336][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1356.000880][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1356.013050][  T437] iforce 10-1:0.0: usb_submit_urb failed: -71
[ 1356.027880][  T437] input input62: Timeout waiting for response from device.
[ 1356.069420][  T437] usb 10-1: USB disconnect, device number 31
[ 1356.200376][ T8086] lo speed is unknown, defaulting to 1000
[ 1356.229910][ T8086] »»»»»» speed is unknown, defaulting to 1000
[ 1356.311558][ T8093] netlink: 240 bytes leftover after parsing attributes in process `syz.8.13393'.
[ 1356.745955][  T437] usb 10-1: new low-speed USB device number 32 using dummy_hcd
[ 1356.919729][  T437] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1356.933984][  T437] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8
[ 1356.963917][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1356.997539][  T437] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[ 1357.061249][  T437] usb 10-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[ 1357.101458][  T437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1357.135352][  T437] usb 10-1: config 0 descriptor??
[ 1357.148818][ T8097] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[ 1357.366972][T22451] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1357.612149][  T437] uclogic 0003:5543:0004.004A: ignoring exceeding usage max
[ 1357.640079][  T437] uclogic 0003:5543:0004.004A: unknown main item tag 0x0
[ 1357.655575][  T437] uclogic 0003:5543:0004.004A: unknown main item tag 0x0
[ 1357.672829][  T437] uclogic 0003:5543:0004.004A: unknown main item tag 0x0
[ 1357.685329][  T437] uclogic 0003:5543:0004.004A: unknown main item tag 0x0
[ 1357.702627][  T437] uclogic 0003:5543:0004.004A: unknown main item tag 0x0
[ 1357.712725][  T437] uclogic 0003:5543:0004.004A: unknown main item tag 0x0
[ 1357.730084][  T437] uclogic 0003:5543:0004.004A: unknown main item tag 0x0
[ 1357.737822][  T437] uclogic 0003:5543:0004.004A: unknown main item tag 0x0
[ 1357.757599][  T437] uclogic 0003:5543:0004.004A: hidraw0: USB HID v0.08 Device [HID 5543:0004] on usb-dummy_hcd.9-1/input0
[ 1357.827450][  T437] usb 10-1: USB disconnect, device number 32
[ 1358.002599][ T8137] fido_id[8137]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1358.023920][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1358.336528][ T8151] sctp: [Deprecated]: syz.8.13418 (pid 8151) Use of int in max_burst socket option deprecated.
[ 1358.336528][ T8151] Use struct sctp_assoc_value instead
[ 1358.429491][T22451] Bluetooth: hci5: SCO packet for unknown connection handle 0
[ 1359.001950][ T8174] netlink: 14 bytes leftover after parsing attributes in process `syz.6.13427'.
[ 1359.044410][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1359.602433][ T8189] input: syz1 as /devices/virtual/input/input64
[ 1359.620904][ T8189] input: failed to attach handler leds to device input64, error: -6
[ 1359.717880][ T8164] loop9: detected capacity change from 0 to 32768
[ 1359.818011][ T8164] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1359.957052][ T8164] XFS (loop9): Ending clean mount
[ 1360.093913][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1360.201944][  T659] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1360.977156][ T8243] veth3: entered allmulticast mode
[ 1361.124039][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1361.292700][ T8253] sctp: [Deprecated]: syz.8.13458 (pid 8253) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1361.292700][ T8253] Use struct sctp_sack_info instead
[ 1361.868245][ T8272] loop6: detected capacity change from 0 to 512
[ 1361.902080][ T8272] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1361.939149][ T8272] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[ 1362.024774][ T8272] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[ 1362.041378][ T8272] System zones: 0-2, 18-18, 34-35
[ 1362.073931][ T8272] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1362.119841][ T8272] fscrypt (loop6, inode 12): Error -61 getting encryption context
[ 1362.163966][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1362.211507][ T8279] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set
[ 1362.340658][ T4958] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1363.203933][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1363.337167][ T8322] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1363.497546][ T8321] loop9: detected capacity change from 0 to 8192
[ 1364.243916][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1365.283947][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1365.428716][   T30] kauditd_printk_skb: 117 callbacks suppressed
[ 1365.428736][   T30] audit: type=1326 audit(2000001830.668:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.6.13501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82eb39ce59 code=0x7ffc0000
[ 1365.470940][ T8355] loop0: detected capacity change from 0 to 1024
[ 1365.501127][ T8355] EXT4-fs: Ignoring removed orlov option
[ 1365.545208][   T30] audit: type=1326 audit(2000001830.698:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.6.13501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82eb39ce59 code=0x7ffc0000
[ 1365.608042][   T30] audit: type=1326 audit(2000001830.718:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.6.13501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f82eb39ce59 code=0x7ffc0000
[ 1365.638287][ T8355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1365.701927][ T8355] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz.0.13500: unexpected EA_INODE flag
[ 1365.706872][   T30] audit: type=1326 audit(2000001830.718:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.6.13501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82eb39ce59 code=0x7ffc0000
[ 1365.752347][   T30] audit: type=1326 audit(2000001830.718:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.6.13501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82eb39ce59 code=0x7ffc0000
[ 1365.781020][   T30] audit: type=1326 audit(2000001830.718:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.6.13501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f82eb39ce59 code=0x7ffc0000
[ 1365.835012][   T30] audit: type=1326 audit(2000001830.718:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.6.13501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82eb39ce59 code=0x7ffc0000
[ 1365.863636][   T30] audit: type=1326 audit(2000001830.728:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.6.13501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82eb39ce59 code=0x7ffc0000
[ 1366.019586][   T30] audit: type=1326 audit(2000001830.728:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.6.13501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82eb39ce59 code=0x7ffc0000
[ 1366.122054][   T30] audit: type=1326 audit(2000001830.728:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.6.13501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f82eb39ce59 code=0x7ffc0000
[ 1366.175060][T17860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1366.323909][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1367.184760][  T423] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[ 1367.239772][ T8397] netlink: 'syz.3.13518': attribute type 6 has an invalid length.
[ 1367.276692][ T8397] netlink: 'syz.3.13518': attribute type 6 has an invalid length.
[ 1367.356031][  T423] usb 10-1: Using ep0 maxpacket: 32
[ 1367.363951][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1367.393127][  T423] usb 10-1: config 0 has an invalid interface number: 119 but max is 0
[ 1367.422628][  T423] usb 10-1: config 0 has no interface number 0
[ 1367.453547][  T423] usb 10-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1367.501371][  T423] usb 10-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1367.553739][  T423] usb 10-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27
[ 1367.605754][  T423] usb 10-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1367.649912][ T8406] loop0: detected capacity change from 0 to 8192
[ 1367.667144][  T423] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1367.682025][  T423] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1367.743804][  T423] usb 10-1: Product: syz
[ 1367.782258][  T423] usb 10-1: Manufacturer: syz
[ 1367.799423][  T423] usb 10-1: SerialNumber: syz
[ 1367.880842][  T423] usb 10-1: config 0 descriptor??
[ 1367.907488][ T8389] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1367.961532][  T423] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.119/input/input65
[ 1368.007128][ T4980] usb 10-1: BOGUS urb xfer, pipe 1 != type 3
[ 1368.117813][    C1] bcm5974 10-1:0.119: trackpad urb failed: -1
[ 1368.403970][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1368.553448][  T436] usb 10-1: USB disconnect, device number 33
[ 1369.023043][ T8440] team0: Port device syz_tun added
[ 1369.046318][ T8440] team0: Port device syz_tun removed
[ 1369.065528][ T8440] bridge_slave_0: left allmulticast mode
[ 1369.077357][ T8440] bridge_slave_0: left promiscuous mode
[ 1369.091045][ T8440] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1369.112140][ T8440] bridge_slave_1: left allmulticast mode
[ 1369.132615][ T8440] bridge_slave_1: left promiscuous mode
[ 1369.139445][ T8440] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1369.175453][ T8440] bond0: (slave bond_slave_0): Releasing backup interface
[ 1369.193009][ T8440] bond0: (slave bond_slave_1): Releasing backup interface
[ 1369.210379][ T8440] team0: Port device team_slave_0 removed
[ 1369.228561][ T8440] team0: Port device team_slave_1 removed
[ 1369.238605][ T8440] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1369.247120][ T8440] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1369.256205][ T8440] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1369.278653][ T8450] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[ 1369.368318][ T8447] lo speed is unknown, defaulting to 1000
[ 1369.421477][ T8444] lo speed is unknown, defaulting to 1000
[ 1369.433285][ T8447] »»»»»» speed is unknown, defaulting to 1000
[ 1369.443985][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1369.478363][ T8444] »»»»»» speed is unknown, defaulting to 1000
[ 1369.696949][ T8457] loop9: detected capacity change from 0 to 4096
[ 1370.000131][ T1651] ntfs3(loop9): ino=5, mi_enum_attr
[ 1370.302055][ T8478] lo speed is unknown, defaulting to 1000
[ 1370.351206][ T8478] »»»»»» speed is unknown, defaulting to 1000
[ 1370.483985][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1371.433623][ T8513] loop6: detected capacity change from 0 to 512
[ 1371.505899][ T8513] journal_path: Lookup failure for './bus'
[ 1371.523945][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1371.538785][ T8513] EXT4-fs: error: could not find journal device path
[ 1371.542017][ T8514] 9p: Bad value for 'rfdno'
[ 1371.828319][ T8513] loop6: detected capacity change from 0 to 4096
[ 1371.971527][ T8522] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1372.121297][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 1372.121316][   T30] audit: type=1800 audit(2000001837.358:842): pid=8513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.13563" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 1372.220051][ T8524] block nbd9: shutting down sockets
[ 1372.242853][ T8526] 
[ 1372.245177][ T8526] ======================================================
[ 1372.252173][ T8526] WARNING: possible circular locking dependency detected
[ 1372.259175][ T8526] syzkaller #0 Tainted: G             L     
[ 1372.265129][ T8526] ------------------------------------------------------
[ 1372.272124][ T8526] syz.9.13568/8526 is trying to acquire lock:
[ 1372.278169][ T8526] ffff88801bafd210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4ed/0x5c0
[ 1372.288618][ T8526] 
[ 1372.288618][ T8526] but task is already holding lock:
[ 1372.295959][ T8526] ffff88801bafd180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[ 1372.305361][ T8526] 
[ 1372.305361][ T8526] which lock already depends on the new lock.
[ 1372.305361][ T8526] 
[ 1372.315738][ T8526] 
[ 1372.315738][ T8526] the existing dependency chain (in reverse order) is:
[ 1372.324729][ T8526] 
[ 1372.324729][ T8526] -> #10 (&root->kernfs_rwsem){++++}-{4:4}:
[ 1372.332810][ T8526]        down_write+0x96/0x200
[ 1372.337566][ T8526]        kernfs_add_one+0x41/0x5c0
[ 1372.342669][ T8526]        kernfs_create_dir_ns+0xde/0x130
[ 1372.348294][ T8526]        internal_create_group+0x425/0x1190
[ 1372.354175][ T8526]        cpuhp_invoke_callback+0x445/0x860
[ 1372.359975][ T8526]        cpuhp_issue_call+0x430/0x7a0
[ 1372.365329][ T8526]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[ 1372.371906][ T8526]        __cpuhp_setup_state+0x3f/0x60
[ 1372.377360][ T8526]        do_one_initcall+0x250/0x870
[ 1372.382632][ T8526]        do_initcall_level+0x104/0x190
[ 1372.388086][ T8526]        do_initcalls+0x59/0xa0
[ 1372.392923][ T8526]        kernel_init_freeable+0x2a6/0x3e0
[ 1372.398626][ T8526]        kernel_init+0x1d/0x1d0
[ 1372.403464][ T8526]        ret_from_fork+0x514/0xb70
[ 1372.408557][ T8526]        ret_from_fork_asm+0x1a/0x30
[ 1372.413827][ T8526] 
[ 1372.413827][ T8526] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}:
[ 1372.421644][ T8526] 
[ 1372.421644][ T8526] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[ 1372.429364][ T8526]        cpus_read_lock+0x42/0x160
[ 1372.434469][ T8526]        static_key_disable+0x12/0x20
[ 1372.439828][ T8526]        __inet_hash_connect+0x25bb/0x25c0
[ 1372.445627][ T8526]        tcp_v4_connect+0xd5f/0x19b0
[ 1372.450900][ T8526]        __inet_stream_connect+0x25a/0xdd0
[ 1372.456688][ T8526]        inet_stream_connect+0x66/0xa0
[ 1372.462126][ T8526]        __sys_connect+0x312/0x450
[ 1372.467226][ T8526]        __x64_sys_connect+0x7a/0x90
[ 1372.472503][ T8526]        do_syscall_64+0x174/0x580
[ 1372.477606][ T8526]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.484008][ T8526] 
[ 1372.484008][ T8526] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}:
[ 1372.492186][ T8526]        lock_sock_nested+0x41/0x100
[ 1372.497476][ T8526]        inet_shutdown+0x6a/0x390
[ 1372.502490][ T8526]        nbd_mark_nsock_dead+0x2e9/0x560
[ 1372.508134][ T8526]        sock_shutdown+0x15e/0x260
[ 1372.513253][ T8526]        nbd_clear_sock+0x24/0x170
[ 1372.518348][ T8526]        nbd_ioctl+0x337/0xe40
[ 1372.523092][ T8526]        blkdev_ioctl+0x5e3/0x740
[ 1372.528108][ T8526]        __se_sys_ioctl+0xfc/0x170
[ 1372.533214][ T8526]        do_syscall_64+0x174/0x580
[ 1372.538308][ T8526]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.544705][ T8526] 
[ 1372.544705][ T8526] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1372.552345][ T8526]        __mutex_lock+0x1a3/0x1550
[ 1372.557438][ T8526]        nbd_queue_rq+0x37b/0x1100
[ 1372.562547][ T8526]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1372.568618][ T8526]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1372.575468][ T8526]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1372.581962][ T8526]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1372.587601][ T8526]        blk_mq_dispatch_list+0xd16/0xe10
[ 1372.593307][ T8526]        blk_mq_flush_plug_list+0x48d/0x570
[ 1372.599189][ T8526]        __blk_flush_plug+0x3ed/0x4d0
[ 1372.604549][ T8526]        __submit_bio+0x28d/0x580
[ 1372.609565][ T8526]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1372.615706][ T8526]        block_read_full_folio+0x599/0x830
[ 1372.621501][ T8526]        filemap_read_folio+0x137/0x3b0
[ 1372.627042][ T8526]        do_read_cache_folio+0x358/0x590
[ 1372.632673][ T8526]        read_part_sector+0xb6/0x2b0
[ 1372.637947][ T8526]        adfspart_check_ICS+0xb1/0x960
[ 1372.643397][ T8526]        bdev_disk_changed+0x817/0x1770
[ 1372.648929][ T8526]        blkdev_get_whole+0x380/0x510
[ 1372.654292][ T8526]        bdev_open+0x31e/0xd30
[ 1372.659048][ T8526]        blkdev_open+0x470/0x610
[ 1372.663980][ T8526]        do_dentry_open+0x822/0x13a0
[ 1372.669255][ T8526]        vfs_open+0x3b/0x340
[ 1372.673837][ T8526]        path_openat+0x2e08/0x3860
[ 1372.678953][ T8526]        do_file_open+0x23e/0x4a0
[ 1372.683972][ T8526]        do_sys_openat2+0x113/0x200
[ 1372.689167][ T8526]        __x64_sys_openat+0x138/0x170
[ 1372.694529][ T8526]        do_syscall_64+0x174/0x580
[ 1372.699624][ T8526]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.706021][ T8526] 
[ 1372.706021][ T8526] -> #5 (&cmd->lock){+.+.}-{4:4}:
[ 1372.713226][ T8526]        __mutex_lock+0x1a3/0x1550
[ 1372.718323][ T8526]        nbd_queue_rq+0xc6/0x1100
[ 1372.723344][ T8526]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1372.729399][ T8526]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1372.736241][ T8526]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1372.742739][ T8526]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1372.748358][ T8526]        blk_mq_dispatch_list+0xd16/0xe10
[ 1372.754068][ T8526]        blk_mq_flush_plug_list+0x48d/0x570
[ 1372.759959][ T8526]        __blk_flush_plug+0x3ed/0x4d0
[ 1372.765324][ T8526]        __submit_bio+0x28d/0x580
[ 1372.770338][ T8526]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1372.776481][ T8526]        block_read_full_folio+0x599/0x830
[ 1372.782275][ T8526]        filemap_read_folio+0x137/0x3b0
[ 1372.787825][ T8526]        do_read_cache_folio+0x358/0x590
[ 1372.793454][ T8526]        read_part_sector+0xb6/0x2b0
[ 1372.798728][ T8526]        adfspart_check_ICS+0xb1/0x960
[ 1372.804180][ T8526]        bdev_disk_changed+0x817/0x1770
[ 1372.809722][ T8526]        blkdev_get_whole+0x380/0x510
[ 1372.815079][ T8526]        bdev_open+0x31e/0xd30
[ 1372.819829][ T8526]        blkdev_open+0x470/0x610
[ 1372.824753][ T8526]        do_dentry_open+0x822/0x13a0
[ 1372.830029][ T8526]        vfs_open+0x3b/0x340
[ 1372.834604][ T8526]        path_openat+0x2e08/0x3860
[ 1372.839712][ T8526]        do_file_open+0x23e/0x4a0
[ 1372.844732][ T8526]        do_sys_openat2+0x113/0x200
[ 1372.849930][ T8526]        __x64_sys_openat+0x138/0x170
[ 1372.855296][ T8526]        do_syscall_64+0x174/0x580
[ 1372.860388][ T8526]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.866782][ T8526] 
[ 1372.866782][ T8526] -> #4 (set->srcu){.+.+}-{0:0}:
[ 1372.873898][ T8526]        __synchronize_srcu+0xca/0x300
[ 1372.879345][ T8526]        elevator_switch+0x1e8/0x7a0
[ 1372.884617][ T8526]        elevator_change+0x2cc/0x450
[ 1372.889897][ T8526]        elevator_set_default+0x36c/0x430
[ 1372.895603][ T8526]        blk_register_queue+0x3e9/0x4e0
[ 1372.901140][ T8526]        __add_disk+0x677/0xd50
[ 1372.905982][ T8526]        add_disk_fwnode+0xfb/0x480
[ 1372.911171][ T8526]        nbd_dev_add+0x72c/0xb50
[ 1372.916099][ T8526]        nbd_init+0x168/0x1f0
[ 1372.920769][ T8526]        do_one_initcall+0x250/0x870
[ 1372.926038][ T8526]        do_initcall_level+0x104/0x190
[ 1372.931481][ T8526]        do_initcalls+0x59/0xa0
[ 1372.936316][ T8526]        kernel_init_freeable+0x2a6/0x3e0
[ 1372.942020][ T8526]        kernel_init+0x1d/0x1d0
[ 1372.946857][ T8526]        ret_from_fork+0x514/0xb70
[ 1372.951953][ T8526]        ret_from_fork_asm+0x1a/0x30
[ 1372.957221][ T8526] 
[ 1372.957221][ T8526] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[ 1372.965037][ T8526]        __mutex_lock+0x1a3/0x1550
[ 1372.970136][ T8526]        elevator_change+0x1b3/0x450
[ 1372.975409][ T8526]        elevator_set_none+0xb5/0x140
[ 1372.980766][ T8526]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[ 1372.987086][ T8526]        nbd_start_device+0x17f/0xb10
[ 1372.992451][ T8526]        nbd_genl_connect+0x165b/0x1cf0
[ 1372.998000][ T8526]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1373.004057][ T8526]        genl_rcv_msg+0x61c/0x7a0
[ 1373.009072][ T8526]        netlink_rcv_skb+0x232/0x4b0
[ 1373.014354][ T8526]        genl_rcv+0x28/0x40
[ 1373.018850][ T8526]        netlink_unicast+0x75c/0x8e0
[ 1373.024127][ T8526]        netlink_sendmsg+0x813/0xb40
[ 1373.029413][ T8526]        ____sys_sendmsg+0x972/0x9f0
[ 1373.034679][ T8526]        ___sys_sendmsg+0x2a5/0x360
[ 1373.039860][ T8526]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1373.045389][ T8526]        do_syscall_64+0x174/0x580
[ 1373.050492][ T8526]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1373.056900][ T8526] 
[ 1373.056900][ T8526] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[ 1373.065516][ T8526]        blk_alloc_queue+0x546/0x680
[ 1373.070791][ T8526]        __blk_mq_alloc_disk+0x197/0x390
[ 1373.076415][ T8526]        nbd_dev_add+0x499/0xb50
[ 1373.081349][ T8526]        nbd_init+0x168/0x1f0
[ 1373.086019][ T8526]        do_one_initcall+0x250/0x870
[ 1373.091297][ T8526]        do_initcall_level+0x104/0x190
[ 1373.096745][ T8526]        do_initcalls+0x59/0xa0
[ 1373.101585][ T8526]        kernel_init_freeable+0x2a6/0x3e0
[ 1373.107294][ T8526]        kernel_init+0x1d/0x1d0
[ 1373.112141][ T8526]        ret_from_fork+0x514/0xb70
[ 1373.117237][ T8526]        ret_from_fork_asm+0x1a/0x30
[ 1373.122514][ T8526] 
[ 1373.122514][ T8526] -> #1 (fs_reclaim){+.+.}-{0:0}:
[ 1373.129718][ T8526]        fs_reclaim_acquire+0x71/0x100
[ 1373.135175][ T8526]        kmem_cache_alloc_noprof+0x40/0x650
[ 1373.141062][ T8526]        __kernfs_iattrs+0xdf/0x320
[ 1373.146250][ T8526]        kernfs_iop_setattr+0xea/0x3f0
[ 1373.151705][ T8526]        notify_change+0xc1a/0xf40
[ 1373.156803][ T8526]        do_truncate+0x1c2/0x250
[ 1373.161737][ T8526]        path_openat+0x2f89/0x3860
[ 1373.166843][ T8526]        do_file_open+0x23e/0x4a0
[ 1373.171862][ T8526]        do_sys_openat2+0x113/0x200
[ 1373.177048][ T8526]        __x64_sys_openat+0x138/0x170
[ 1373.182402][ T8526]        do_syscall_64+0x174/0x580
[ 1373.187498][ T8526]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1373.193895][ T8526] 
[ 1373.193895][ T8526] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[ 1373.202409][ T8526]        __lock_acquire+0x15a5/0x2cf0
[ 1373.207770][ T8526]        lock_acquire+0x106/0x350
[ 1373.212779][ T8526]        down_write+0x96/0x200
[ 1373.217529][ T8526]        kernfs_link_sibling+0x4ed/0x5c0
[ 1373.223151][ T8526]        kernfs_add_one+0x1ca/0x5c0
[ 1373.228342][ T8526]        __kernfs_create_file+0x22b/0x2e0
[ 1373.234044][ T8526]        sysfs_add_file_mode_ns+0x238/0x300
[ 1373.239932][ T8526]        sysfs_create_file_ns+0x12b/0x1b0
[ 1373.245643][ T8526]        nbd_start_device+0x2b1/0xb10
[ 1373.251009][ T8526]        nbd_ioctl+0x579/0xe40
[ 1373.255753][ T8526]        blkdev_ioctl+0x5e3/0x740
[ 1373.260772][ T8526]        __se_sys_ioctl+0xfc/0x170
[ 1373.265875][ T8526]        do_syscall_64+0x174/0x580
[ 1373.270973][ T8526]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1373.277374][ T8526] 
[ 1373.277374][ T8526] other info that might help us debug this:
[ 1373.277374][ T8526] 
[ 1373.287578][ T8526] Chain exists of:
[ 1373.287578][ T8526]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[ 1373.287578][ T8526] 
[ 1373.302005][ T8526]  Possible unsafe locking scenario:
[ 1373.302005][ T8526] 
[ 1373.309431][ T8526]        CPU0                    CPU1
[ 1373.314776][ T8526]        ----                    ----
[ 1373.320121][ T8526]   lock(&root->kernfs_rwsem);
[ 1373.324874][ T8526]                                lock(cpuhp_state_mutex);
[ 1373.331971][ T8526]                                lock(&root->kernfs_rwsem);
[ 1373.339240][ T8526]   lock(&root->kernfs_iattr_rwsem);
[ 1373.344518][ T8526] 
[ 1373.344518][ T8526]  *** DEADLOCK ***
[ 1373.344518][ T8526] 
[ 1373.352642][ T8526] 2 locks held by syz.9.13568/8526:
[ 1373.357818][ T8526]  #0: ffff8880267b7a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_start_device+0x189/0xb10
[ 1373.367753][ T8526]  #1: ffff88801bafd180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[ 1373.377596][ T8526] 
[ 1373.377596][ T8526] stack backtrace:
[ 1373.383470][ T8526] CPU: 0 UID: 0 PID: 8526 Comm: syz.9.13568 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1373.383499][ T8526] Tainted: [L]=SOFTLOCKUP
[ 1373.383507][ T8526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1373.383521][ T8526] Call Trace:
[ 1373.383529][ T8526]  <TASK>
[ 1373.383538][ T8526]  dump_stack_lvl+0xe8/0x150
[ 1373.383563][ T8526]  print_circular_bug+0x2e1/0x300
[ 1373.383596][ T8526]  check_noncircular+0x12e/0x150
[ 1373.383630][ T8526]  __lock_acquire+0x15a5/0x2cf0
[ 1373.383658][ T8526]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1373.383684][ T8526]  ? __lock_acquire+0x6b5/0x2cf0
[ 1373.383716][ T8526]  ? kernfs_link_sibling+0x4ed/0x5c0
[ 1373.383747][ T8526]  lock_acquire+0x106/0x350
[ 1373.383769][ T8526]  ? kernfs_link_sibling+0x4ed/0x5c0
[ 1373.383804][ T8526]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1373.383839][ T8526]  down_write+0x96/0x200
[ 1373.383873][ T8526]  ? kernfs_link_sibling+0x4ed/0x5c0
[ 1373.383916][ T8526]  ? __pfx_down_write+0x10/0x10
[ 1373.383950][ T8526]  ? kernfs_root+0x1c/0x230
[ 1373.383988][ T8526]  ? kernfs_root+0x1c/0x230
[ 1373.384026][ T8526]  ? kernfs_root+0x1c/0x230
[ 1373.384063][ T8526]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1373.384095][ T8526]  ? kernfs_root+0x1ea/0x230
[ 1373.384127][ T8526]  kernfs_link_sibling+0x4ed/0x5c0
[ 1373.384168][ T8526]  kernfs_add_one+0x1ca/0x5c0
[ 1373.384204][ T8526]  __kernfs_create_file+0x22b/0x2e0
[ 1373.384231][ T8526]  sysfs_add_file_mode_ns+0x238/0x300
[ 1373.384263][ T8526]  sysfs_create_file_ns+0x12b/0x1b0
[ 1373.384295][ T8526]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[ 1373.384324][ T8526]  ? __pfx___mutex_lock+0x10/0x10
[ 1373.384349][ T8526]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1373.384377][ T8526]  ? device_create_file+0xf4/0x1b0
[ 1373.384416][ T8526]  nbd_start_device+0x2b1/0xb10
[ 1373.384460][ T8526]  nbd_ioctl+0x579/0xe40
[ 1373.384481][ T8526]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1373.384513][ T8526]  ? __pfx_nbd_ioctl+0x10/0x10
[ 1373.384539][ T8526]  ? __pfx_nbd_ioctl+0x10/0x10
[ 1373.384558][ T8526]  blkdev_ioctl+0x5e3/0x740
[ 1373.384590][ T8526]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1373.384617][ T8526]  ? __fget_files+0x2a/0x420
[ 1373.384645][ T8526]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1373.384669][ T8526]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1373.384695][ T8526]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1373.384724][ T8526]  __se_sys_ioctl+0xfc/0x170
[ 1373.384756][ T8526]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1373.384778][ T8526]  do_syscall_64+0x174/0x580
[ 1373.384798][ T8526]  ? trace_irq_disable+0x3b/0x140
[ 1373.384833][ T8526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1373.384854][ T8526] RIP: 0033:0x7fb0dab9ce59
[ 1373.384872][ T8526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1373.384889][ T8526] RSP: 002b:00007fb0dbaf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1373.384909][ T8526] RAX: ffffffffffffffda RBX: 00007fb0dae16090 RCX: 00007fb0dab9ce59
[ 1373.384924][ T8526] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004
[ 1373.384936][ T8526] RBP: 00007fb0dac32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1373.384949][ T8526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1373.384962][ T8526] R13: 00007fb0dae16128 R14: 00007fb0dae16090 R15: 00007ffc66d20e58
[ 1373.384987][ T8526]  </TASK>
[ 1373.708168][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1374.724140][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1375.763901][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1376.804140][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1377.853924][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1378.884179][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1379.923903][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1380.964159][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1382.003920][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available