last executing test programs:

17m9.894373861s ago: executing program 1 (id=1014):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)

17m9.671115466s ago: executing program 1 (id=1016):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xff}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x40003)
r3 = openat$rtc(0xffffff9c, &(0x7f0000001ec0), 0x0, 0x0)
ioctl$RTC_AIE_ON(r3, 0x7001)
ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000001f00)={0x26, 0x0, 0x12, 0xd, 0x2, 0x4090, 0x6, 0x4c, 0xffffffffffffffff})
syz_open_dev$loop(&(0x7f0000000040), 0x200000b1, 0x8a681)

17m6.5560803s ago: executing program 1 (id=1019):
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2b, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10119, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x9d)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50)
epoll_create1(0x0)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]})
creat(&(0x7f0000000080)='./file0/file1\x00', 0x0)
mbind(&(0x7f0000c9c000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x100000000000002, 0x9, 0x0)
openat$dir(0xffffff9c, &(0x7f0000000340)='./file0/file1\x00', 0x40, 0x2e)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000002280)=0x6)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x2ac65)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0)

17m1.213212278s ago: executing program 1 (id=1022):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/isp1760/new_id\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1234 1111 ffffffff ffffffff 0 0\n\x00', 0x20)

17m0.789753318s ago: executing program 1 (id=1025):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
r1 = memfd_create(0x0, 0x2)
fcntl$addseals(r1, 0x409, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = syz_open_dev$usbfs(0x0, 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, 0x0)
sched_setaffinity(r4, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0)
sendmsg$802154_dgram(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x200088c4}, 0x20000004)

16m57.813628448s ago: executing program 1 (id=1026):
r0 = socket(0x10, 0x80002, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1000"], 0x10}}, 0x0)
r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = dup(r4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1, 0x0, 0x0, 0x8000000}, 0x48043)
sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000020)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23"], 0x1c}}, 0x0)

16m41.84707173s ago: executing program 32 (id=1026):
r0 = socket(0x10, 0x80002, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1000"], 0x10}}, 0x0)
r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = dup(r4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1, 0x0, 0x0, 0x8000000}, 0x48043)
sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000020)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23"], 0x1c}}, 0x0)

9m59.659356287s ago: executing program 3 (id=1662):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)

9m59.250608426s ago: executing program 3 (id=1664):
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2b, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10119, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="c6c4be5b563a9330a8f66bbcfee882e27f71cf35a00cff3ee0fe7b8a395121bc353a7e2e32b001067150e1", @ANYRES32=r1], 0x9d)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50)
epoll_create1(0x0)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]})
creat(&(0x7f0000000080)='./file0/file1\x00', 0x0)
openat$dir(0xffffff9c, &(0x7f0000000340)='./file0/file1\x00', 0x40, 0x2e)
r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000002280)=0x6)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x2ac65)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)

9m56.884404303s ago: executing program 3 (id=1666):
prlimit64(0x0, 0xe, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20080522}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x4000844)
openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa000, 0x25, 0x1a}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
modify_ldt$read(0x0, 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x82, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
socket$inet6_mptcp(0xa, 0x1, 0x106)

9m56.133149051s ago: executing program 3 (id=1668):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=','])
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

9m55.911347966s ago: executing program 3 (id=1670):
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2b, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10119, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="c6c4be5b563a9330a8f66bbcfee882e27f71cf35a00cff3ee0fe7b8a395121bc353a7e2e32b001067150e1", @ANYRES32=r1], 0x9d)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50)
epoll_create1(0x0)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]})
creat(&(0x7f0000000080)='./file0/file1\x00', 0x0)
mbind(&(0x7f0000c9c000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x100000000000002, 0x9, 0x0)
openat$dir(0xffffff9c, &(0x7f0000000340)='./file0/file1\x00', 0x40, 0x2e)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000002280)=0x6)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x2ac65)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0)

9m54.276363886s ago: executing program 3 (id=1672):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000004b680)=""/102400, 0x19000)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x81, 0x28}, 0x50)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000000ffffff7f000a90000000060a010400000000000000000a0004050900010073797a310000000064000480600001800a000100696e6e65720000005000028008000440000000172c0005800c0001007061796c6f6164001c00028008000340000000920800024000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000)
getdents(0xffffffffffffffff, &(0x7f0000001000)=""/4085, 0xff5)
r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0x1000f1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x0, 0x8, 0x400b, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]})
ioctl$COMEDI_DEVINFO(r5, 0x80b06401, &(0x7f0000000000))
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, <r7=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247, 0x3f})
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x600, 0x1000000})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000ac0)={'#! ', '', [{0x20, 'H|\x8fK\x1e(\xf3U\x8a+#\xf4\xa4\xd69\xb7\x9c\xffz\x81;\xe7!\xb1i\t\xfe\x1br \x87\xe3\x94\xf5\xd6O(\xfd\xdb\xb0n\x92\x96\x9c\xba\x82\n\xbe\xb1;M\xb4T$UMo\xcf+6\x19xl\x8e\xea\xc1\x92}\x9a\xc95\x9cb[Z\xde%\xe0\x86\x81z\xeaU\xf7_\x96\x06%\xd6~-\x8e\xeb;7\xc3e&u\xa5\x8d?\xfc\x18\x144\x9a\xe6w\xa0\xe18\xd9\a\fS\xd8S\x89F\xb8\xe2\xe7\xfc2\xae<\xbb\xc7\x9bB\xbe\x96Z\xd4`_\xc6\x02\xadh\xfa\xaf\xbf\x99FD\xa363\x7fR\xc5\xf6[\xe0\xa6w\x90\xf3\xc1\x0eM\xd6f\xf9'}, {0x20, '$!'}, {0x20, '/dev/ptmx\x00d\xc1\x80\x9e\xc1\v\x17\xc7K\x12\x9fI\x03Q\xba9\xb9\x97J\xda\xf4\x946{\"y\x9e\xda\x93\x84\x00p\x87\xbb\n\xaa&\x9a\v\xf7\xfa\xdd|1\xc7YI2_J\x8b\xd2\x9b\x889\xbe_\xc4\x1c\xcc\xec{\x7f\xcc\x8f\xdd\x03~\x9fZ\x1er\xeb\x1f]\xe3:\x04\xf0S^q\xf3\x9cV>\xefR\x9d\xf4#QW\x1aW+\x1b1:OE\xbc\x96\xbb~\xb3;$U\v\xf6:\xf7\x94\x1b\x8c\x97z\x14\xc0\r;\x94D\xf0KY\x1a\xa3\xcc~!:z\xf9\xd9\x8b\xee\xbc.!Y\xe0\x02\xf7\xe8wO\xea\x16\x89\x1f`\x17\xb5\x82\x95\xaeE\xaa\xd2X^\xec\xe78\xd2;v\xdegn\x7f\x91\xb6\x1d\xc4G\'\xdd\xbe\xd0\x92\xd6\xf0I\xc2D^[\x91v\xed\xf0\xe5%\x8b\xa1\xdc\xd4\xe4F^{t\xca0X\xc7\xc8\xcf\x1d*\x00\x00\x00\x00\x00\x00'}, {0x20, ')}:'}], 0xa, "8bb8325f24f6890dac867c595f5eb30d90f68ad8a75c0278a9145497e6c208a6968a160cd42d57d93f913ee2c82aa5d2301dd0a65101af527f206f678df9384b2ccc28586c7a00003fd996"}, 0x1e3)

9m52.182400035s ago: executing program 33 (id=1672):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000004b680)=""/102400, 0x19000)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x81, 0x28}, 0x50)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000000ffffff7f000a90000000060a010400000000000000000a0004050900010073797a310000000064000480600001800a000100696e6e65720000005000028008000440000000172c0005800c0001007061796c6f6164001c00028008000340000000920800024000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000)
getdents(0xffffffffffffffff, &(0x7f0000001000)=""/4085, 0xff5)
r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0x1000f1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x0, 0x8, 0x400b, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]})
ioctl$COMEDI_DEVINFO(r5, 0x80b06401, &(0x7f0000000000))
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, <r7=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247, 0x3f})
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x600, 0x1000000})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000ac0)={'#! ', '', [{0x20, 'H|\x8fK\x1e(\xf3U\x8a+#\xf4\xa4\xd69\xb7\x9c\xffz\x81;\xe7!\xb1i\t\xfe\x1br \x87\xe3\x94\xf5\xd6O(\xfd\xdb\xb0n\x92\x96\x9c\xba\x82\n\xbe\xb1;M\xb4T$UMo\xcf+6\x19xl\x8e\xea\xc1\x92}\x9a\xc95\x9cb[Z\xde%\xe0\x86\x81z\xeaU\xf7_\x96\x06%\xd6~-\x8e\xeb;7\xc3e&u\xa5\x8d?\xfc\x18\x144\x9a\xe6w\xa0\xe18\xd9\a\fS\xd8S\x89F\xb8\xe2\xe7\xfc2\xae<\xbb\xc7\x9bB\xbe\x96Z\xd4`_\xc6\x02\xadh\xfa\xaf\xbf\x99FD\xa363\x7fR\xc5\xf6[\xe0\xa6w\x90\xf3\xc1\x0eM\xd6f\xf9'}, {0x20, '$!'}, {0x20, '/dev/ptmx\x00d\xc1\x80\x9e\xc1\v\x17\xc7K\x12\x9fI\x03Q\xba9\xb9\x97J\xda\xf4\x946{\"y\x9e\xda\x93\x84\x00p\x87\xbb\n\xaa&\x9a\v\xf7\xfa\xdd|1\xc7YI2_J\x8b\xd2\x9b\x889\xbe_\xc4\x1c\xcc\xec{\x7f\xcc\x8f\xdd\x03~\x9fZ\x1er\xeb\x1f]\xe3:\x04\xf0S^q\xf3\x9cV>\xefR\x9d\xf4#QW\x1aW+\x1b1:OE\xbc\x96\xbb~\xb3;$U\v\xf6:\xf7\x94\x1b\x8c\x97z\x14\xc0\r;\x94D\xf0KY\x1a\xa3\xcc~!:z\xf9\xd9\x8b\xee\xbc.!Y\xe0\x02\xf7\xe8wO\xea\x16\x89\x1f`\x17\xb5\x82\x95\xaeE\xaa\xd2X^\xec\xe78\xd2;v\xdegn\x7f\x91\xb6\x1d\xc4G\'\xdd\xbe\xd0\x92\xd6\xf0I\xc2D^[\x91v\xed\xf0\xe5%\x8b\xa1\xdc\xd4\xe4F^{t\xca0X\xc7\xc8\xcf\x1d*\x00\x00\x00\x00\x00\x00'}, {0x20, ')}:'}], 0xa, "8bb8325f24f6890dac867c595f5eb30d90f68ad8a75c0278a9145497e6c208a6968a160cd42d57d93f913ee2c82aa5d2301dd0a65101af527f206f678df9384b2ccc28586c7a00003fd996"}, 0x1e3)

6m59.656555173s ago: executing program 4 (id=2011):
creat(0x0, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, 0x0, 0x0, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe)
shutdown(r1, 0x1)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4)
recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xd, 0x1a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)

6m58.404454093s ago: executing program 4 (id=2012):
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2b, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10119, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="c6c4be5b563a9330a8f66bbcfee882e27f71cf35a00cff3ee0fe7b8a395121bc353a7e2e32b001067150e1", @ANYRES32=r1], 0x9d)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50)
epoll_create1(0x0)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]})
creat(&(0x7f0000000080)='./file0/file1\x00', 0x0)
mbind(&(0x7f0000c9c000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x100000000000002, 0x9, 0x0)
openat$dir(0xffffff9c, &(0x7f0000000340)='./file0/file1\x00', 0x40, 0x2e)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000002280)=0x6)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x2ac65)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0)

6m56.263072134s ago: executing program 4 (id=2014):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r1 = socket$inet(0x2, 0x6000000000000001, 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0xa401000000000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x59, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff00184000630677fbac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b69", 0x0, 0xfe, 0x60000000, 0x0, 0x3f, 0x0, &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29", 0x0, 0x3}, 0x50)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[], 0x20}}, 0x4c015)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd46)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x74040017}, 0x80)

6m54.201880603s ago: executing program 4 (id=2019):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x19, 0x5, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]})
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x100fbff}])

6m50.194998749s ago: executing program 4 (id=2024):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000000)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x7ff}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x10}, 0x200440d1)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x358, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18}, './file0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x2000000001, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8)
prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0)
timer_create(0x7, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
timer_settime(0x0, 0x7f4abcbfb96e002c, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000d80000"], 0x50)
r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x20000, 0x9, 0x1, 0x0, 0x2}})
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000003, 0x1, 0x3})
setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
r7 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x10000004})
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x8, 0x4)

6m49.164321564s ago: executing program 4 (id=2028):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r1 = socket$inet(0x2, 0x6000000000000001, 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0xa401000000000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x59, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff00184000630677fbac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b69", 0x0, 0xfe, 0x60000000, 0x0, 0x3f, 0x0, &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29", 0x0, 0x3}, 0x50)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[], 0x20}}, 0x4c015)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd46)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x74040017}, 0x80)

6m48.47698222s ago: executing program 34 (id=2028):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r1 = socket$inet(0x2, 0x6000000000000001, 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0xa401000000000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x59, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff00184000630677fbac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b69", 0x0, 0xfe, 0x60000000, 0x0, 0x3f, 0x0, &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29", 0x0, 0x3}, 0x50)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[], 0x20}}, 0x4c015)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd46)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x74040017}, 0x80)

58.896968214s ago: executing program 2 (id=2957):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf25020000000800", @ANYRES32=r3], 0x1c}}, 0x4008054)
r4 = socket(0x1e, 0x4, 0x0)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14)

58.524826393s ago: executing program 2 (id=2962):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='tcpci 0x50\n\x00', 0xb)
write(r0, &(0x7f0000000600), 0x0)

58.364353837s ago: executing program 2 (id=2964):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x3d, 0x4c, 0x67, 0x0, 0x9, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4, "180f8f", 0x1, "fffb45"}, "9ff8916bec2274ffac64cbef3fd72ab09dc7e84ed556a5e7502bf433d67a96a211f558fcbdb2ab8f"}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

58.196250831s ago: executing program 2 (id=2967):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x6a)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0xfffffffffffffccf, &(0x7f0000000b80)="0000000000000000bbd9c2acaa75c49cf77c1f0fc62ef4ce2251783d8df1e3ef15deb66976c19ee347a401f423e56843b6cd56828f7504d7961ad2aa1862ee0c51217eef6053fc9d72b6a60a172709bbfda46f518ef6e2b785d01a000fcb10b027f94e3e34cbc0d51769757ff40505edf479b8a8ff4853505c25a7987aff4d6b62eda4e65f649a6689195a81dd1a16b133127d92476ebea1ef542b2267c46bc6263031fc4c458b464abfe16b28f9a73ee9958a2edce846a4f5fbe32e3c8738c0739b171c128f6dc84a30c6b65915635d6c09cacf5bb42c4715c7a28ae841a53cbe02da1f5b197aeb23ef6de8d5b4b10b05ba0e148d2a34f9fd27321396e3189f339392d586630b55a26ad8089133e5ab79bee853c7a1d44e573575ca995660905fb207efb1dd47b5c78200b687397541cc2fe875ef9a40b7e8b277567a9c56f8a502c72731e40d4bb3f2289aabb54db221b97339e21da250ab802b97d17c9c647bda5c36ea17640a6d120566", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

56.265785796s ago: executing program 2 (id=2969):
r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2840)
ioctl$FE_GET_PROPERTY(r0, 0x541b, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xc7c0}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

55.861102016s ago: executing program 2 (id=2972):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000074c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x17}, 0x80, &(0x7f00000000c0)}, 0x4000880)

40.772163126s ago: executing program 35 (id=2972):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000074c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x17}, 0x80, &(0x7f00000000c0)}, 0x4000880)

15.644777556s ago: executing program 5 (id=3039):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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")
r0 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0)
syz_open_dev$loop(0x0, 0x81, 0x6a83)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x4)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff)
sendfile(r0, r0, 0x0, 0x800000020)

15.177499247s ago: executing program 5 (id=3040):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/partitions\x00', 0x0, 0x0)
pread64(r0, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35)
read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020)

14.864065645s ago: executing program 5 (id=3042):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x6a)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0xfffffffffffffccf, &(0x7f0000000b80)="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", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

14.560139722s ago: executing program 5 (id=3044):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, 0x0)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x100fbff}])

13.710583952s ago: executing program 5 (id=3046):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
r4 = socket(0x1e, 0x4, 0x0)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14)

9.440374954s ago: executing program 5 (id=3052):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r0, 0x3c9d)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000)

9.440233514s ago: executing program 6 (id=3053):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)

8.931998117s ago: executing program 36 (id=3052):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r0, 0x3c9d)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000)

8.916346007s ago: executing program 6 (id=3055):
syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1, 0x5dae, &(0x7f0000005d80)="$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")
truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc)
fdatasync(0xffffffffffffffff)

7.54488421s ago: executing program 6 (id=3056):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
close(0xffffffffffffffff)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
capset(&(0x7f0000000180)={0x20071026, r0}, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
socket$l2tp(0x2, 0x2, 0x73)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
prlimit64(r0, 0xc, 0x0, &(0x7f0000000f80))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
io_uring_setup(0x178e, &(0x7f0000001000)={0x0, 0x52c1, 0x8, 0x1, 0xc})
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000780)={r6, 0x0, 0x4, 0x0, 0x1, [], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x2, 0xfffffffc], [0x1, 0x0, 0x7]})

7.312267055s ago: executing program 0 (id=3057):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
shmctl$IPC_RMID(0x0, 0x0)

5.603942386s ago: executing program 0 (id=3058):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/partitions\x00', 0x0, 0x0)
pread64(r0, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35)
read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020)

3.113500665s ago: executing program 0 (id=3059):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
r4 = socket(0x1e, 0x4, 0x0)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14)

2.873692011s ago: executing program 0 (id=3060):
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x61f3d75, 0xd)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)

2.855120711s ago: executing program 6 (id=3061):
socket$inet6(0xa, 0x2, 0x3a)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x1, 0x569, 0x6, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffff7fb, r0}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x1000, r0, 0x0, 0x11000000}, 0x38)

2.260954576s ago: executing program 6 (id=3062):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==")
setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000000)=ANY=[], 0x700, 0x1)
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
fallocate(r0, 0x0, 0x1, 0x2000402)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

1.863137195s ago: executing program 6 (id=3063):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='./my_dbroot', 0xb)
close(r0)
mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff)
mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff)
mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff)
mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000001000)='rd_pages=8', 0xa)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000001200)='1', 0x1)
close(r1)
mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff)
symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0)
write(r2, &(0x7f0000001700)='1', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0)
write(r3, &(0x7f0000001900)='1', 0x1)
close(r3)

1.734499728s ago: executing program 0 (id=3064):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
shmctl$IPC_RMID(0x0, 0x0)

0s ago: executing program 0 (id=3065):
r0 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @broadcast}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x0, 0x8ffff)
sendfile(r0, r0, 0x0, 0x800000020)

kernel console output (not intermixed with test programs):

ting filesystem 00000000-0000-0000-0000-000000000000.
[ 1407.355505][T14173] veth0_vlan: entered promiscuous mode
[ 1407.439598][T14173] veth1_vlan: entered promiscuous mode
[ 1407.561234][T14414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2073'.
[ 1407.598457][T14173] veth0_macvtap: entered promiscuous mode
[ 1407.629883][T14173] veth1_macvtap: entered promiscuous mode
[ 1407.708356][T14173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1407.729248][T14173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1407.761012][T14173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1407.792007][T14173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1407.827279][T14173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1407.841938][T14173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1407.862590][T14173] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1407.898358][T14173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1407.924226][T14173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1407.937196][T14173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1407.948625][T14173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1407.979876][T14173] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1407.999491][T14421] Need at least one configuration in g_uac2.
[ 1408.002506][T14173] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1408.030876][T14421] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1408.037774][T14421] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1408.042231][T14173] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1408.071315][T14421] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1408.090335][T14173] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1408.111704][T14173] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1408.341555][ T5971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1408.361547][ T5971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1408.461087][ T5986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1408.470136][ T5986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1408.608163][T14430] xt_cgroup: invalid path, errno=-2
[ 1408.629511][T14430] netlink: 'syz.5.2077': attribute type 14 has an invalid length.
[ 1408.970068][T14430] loop5: detected capacity change from 0 to 32768
[ 1409.558940][T14430] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[ 1409.743160][T14448] loop6: detected capacity change from 0 to 512
[ 1409.815267][T14448] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1409.829021][T14430] XFS (loop5): Starting recovery (logdev: internal)
[ 1409.872765][T14430] XFS (loop5): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xd0, xfs_refcountbt block 0x8 
[ 1409.885991][T14430] XFS (loop5): Unmount and run xfs_repair
[ 1409.892268][T14430] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[ 1409.900300][T14430] 00000000: 52 33 46 43 00 00 00 03 ff ff ff ff ff ff ff ff  R3FC............
[ 1409.909145][T14448] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1409.924406][T14430] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[ 1409.933719][T14430] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[ 1409.944442][T14430] 00000030: 00 00 00 00 ea d5 90 f3 00 00 00 07 00 00 00 01  ................
[ 1409.955075][T14430] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[ 1409.964528][T14430] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1409.975279][T14430] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1409.984573][T14430] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1409.997238][T14430] XFS (loop5): Filesystem has been shut down due to log error (0x2).
[ 1410.006211][T14430] XFS (loop5): Please unmount the filesystem and rectify the problem(s).
[ 1410.015144][T14430] XFS (loop5): log mount/recovery failed: error -74
[ 1410.045541][T14430] XFS (loop5): log mount failed
[ 1410.791309][T14173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1413.736310][T14479] Need at least one configuration in g_uac2.
[ 1413.789757][T14479] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1413.799864][T14479] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1413.826703][T14479] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1415.224046][T14492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2087'.
[ 1415.590333][    T9] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[ 1415.813506][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1415.852363][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1415.901307][    T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1415.939057][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1415.954474][    T9] usb 3-1: config 0 descriptor??
[ 1415.979335][    T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1415.988130][    T9] dvb-usb: bulk message failed: -22 (3/0)
[ 1416.007089][    T9] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1416.017015][    T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1416.026492][    T9] usb 3-1: media controller created
[ 1416.035134][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1416.054067][    T9] dvb-usb: bulk message failed: -22 (6/0)
[ 1416.078239][    T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1416.094452][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input53
[ 1416.121679][    T9] dvb-usb: schedule remote query interval to 150 msecs.
[ 1416.139689][    T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1416.239645][T13003] usb 3-1: USB disconnect, device number 31
[ 1416.498094][T13003] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1420.049911][T14538] loop2: detected capacity change from 0 to 512
[ 1420.262505][T14538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1420.294187][T14538] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1422.497633][T11282] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[ 1422.560953][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1422.787132][T11282] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1422.892203][T11282] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1423.130324][T11282] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1423.228518][T11282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1423.300838][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.307490][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.422327][T11282] usb 6-1: config 0 descriptor??
[ 1423.630551][T11282] usb 6-1: can't set config #0, error -71
[ 1423.671624][T11282] usb 6-1: USB disconnect, device number 11
[ 1425.670423][T14589] xt_cgroup: invalid path, errno=-2
[ 1425.691605][T14589] netlink: 'syz.2.2108': attribute type 14 has an invalid length.
[ 1426.143531][T14589] loop2: detected capacity change from 0 to 32768
[ 1426.233424][T14589] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[ 1426.388896][T14589] XFS (loop2): Starting recovery (logdev: internal)
[ 1426.543510][T14589] XFS (loop2): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xd0, xfs_refcountbt block 0x8 
[ 1426.555428][T14589] XFS (loop2): Unmount and run xfs_repair
[ 1426.562194][T14589] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[ 1426.570615][T14589] 00000000: 52 33 46 43 00 00 00 03 ff ff ff ff ff ff ff ff  R3FC............
[ 1426.582043][T14589] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[ 1426.592369][T14589] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[ 1426.602041][T14589] 00000030: 00 00 00 00 ea d5 90 f3 00 00 00 07 00 00 00 01  ................
[ 1426.611434][T14589] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[ 1426.623081][T14589] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1426.632193][T14589] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1426.641902][T14589] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1426.656031][T14589] XFS (loop2): Filesystem has been shut down due to log error (0x2).
[ 1426.664790][T14589] XFS (loop2): Please unmount the filesystem and rectify the problem(s).
[ 1426.677322][T14589] XFS (loop2): log mount/recovery failed: error -74
[ 1426.729116][T14589] XFS (loop2): log mount failed
[ 1436.063085][T14683] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2130'.
[ 1438.002517][T14683] ip6gre1: entered promiscuous mode
[ 1438.008059][T14683] ip6gre1: entered allmulticast mode
[ 1446.353478][   T28] audit: type=1326 audit(1784983965.740:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.2.2143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f714499de99 code=0x0
[ 1446.378754][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1449.641189][T14800] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2151'.
[ 1450.812106][T14824] Need at least one configuration in g_uac2.
[ 1450.840628][T14824] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1450.850673][T14824] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1450.881966][T14824] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1456.706756][T14885] Need at least one configuration in g_uac2.
[ 1456.713342][T14885] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1456.720979][T14885] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1456.757040][T14885] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1456.776001][T11282] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[ 1456.833615][T14889] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2161'.
[ 1457.002714][T11282] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1457.023799][T11282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1457.236135][T11282] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1457.246566][T11282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1458.887539][T11282] usb 3-1: config 0 descriptor??
[ 1459.041169][T11282] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1459.084385][T11282] dvb-usb: bulk message failed: -22 (3/0)
[ 1459.099858][T11282] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1459.112504][T11282] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1459.281347][T11282] usb 3-1: media controller created
[ 1459.397123][T11282] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1459.462193][T11282] dvb-usb: bulk message failed: -22 (6/0)
[ 1459.475428][T11282] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1459.507194][T11282] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input54
[ 1459.582032][T11282] dvb-usb: schedule remote query interval to 150 msecs.
[ 1459.606762][T11282] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1459.635712][T11282] usb 3-1: USB disconnect, device number 32
[ 1459.886109][T11282] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1461.255691][   T28] audit: type=1326 audit(1784983980.640:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14908 comm="syz.6.2170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82f199de99 code=0x0
[ 1461.280019][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1463.334422][T14942] Need at least one configuration in g_uac2.
[ 1463.361079][T14942] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1463.368245][T14942] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1463.440766][T14942] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1464.080398][T13003] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[ 1466.673161][T13003] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1466.713436][T13003] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1466.749034][T13003] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1466.934994][T13003] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1467.148382][T13003] usb 7-1: config 0 descriptor??
[ 1467.176247][T13003] usb 7-1: can't set config #0, error -71
[ 1467.236887][T13003] usb 7-1: USB disconnect, device number 2
[ 1467.470679][T14971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1467.940482][T14981] Need at least one configuration in g_uac2.
[ 1467.946667][T14981] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1467.989602][T14981] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1468.020754][T14981] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1469.779429][   T28] audit: type=1326 audit(1784983989.160:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.2.2183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f714499de99 code=0x0
[ 1472.616081][T15045] Need at least one configuration in g_uac2.
[ 1472.670406][T15045] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1472.677119][T15045] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1472.734336][T15045] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1474.589549][T15032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1474.875056][T15078] xt_cgroup: invalid path, errno=-2
[ 1474.943341][   T28] audit: type=1326 audit(1784983994.330:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.2204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f714499de99 code=0x0
[ 1475.022077][T15078] netlink: 'syz.6.2203': attribute type 14 has an invalid length.
[ 1475.256647][T15082] loop6: detected capacity change from 0 to 32768
[ 1475.509738][T15082] XFS (loop6): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[ 1476.299183][T15082] XFS (loop6): Starting recovery (logdev: internal)
[ 1476.446853][T15082] XFS (loop6): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xd0, xfs_refcountbt block 0x8 
[ 1476.458788][T15082] XFS (loop6): Unmount and run xfs_repair
[ 1476.464813][T15082] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[ 1476.472979][T15082] 00000000: 52 33 46 43 00 00 00 03 ff ff ff ff ff ff ff ff  R3FC............
[ 1476.482075][T15082] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[ 1476.491024][T15082] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[ 1476.500154][T15082] 00000030: 00 00 00 00 ea d5 90 f3 00 00 00 07 00 00 00 01  ................
[ 1476.509378][T15082] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[ 1476.519622][T15082] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1476.528810][T15082] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1476.537805][T15082] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1476.551914][T15082] XFS (loop6): Filesystem has been shut down due to log error (0x2).
[ 1476.560378][T15082] XFS (loop6): Please unmount the filesystem and rectify the problem(s).
[ 1476.569268][T15082] XFS (loop6): log mount/recovery failed: error -74
[ 1476.596514][T15082] XFS (loop6): log mount failed
[ 1477.115403][T15105] Need at least one configuration in g_uac2.
[ 1477.140406][T15105] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1477.160474][T15105] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1477.186699][T15105] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1478.324209][T15114] loop5: detected capacity change from 0 to 32768
[ 1478.338749][T15114] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2213 (15114)
[ 1478.415869][T15114] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1478.426640][T15114] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[ 1478.435886][T15114] BTRFS info (device loop5): turning on sync discard
[ 1478.442941][T15114] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1478.452403][T15114] BTRFS info (device loop5): use zstd compression, level 3
[ 1478.460582][T15114] BTRFS info (device loop5): turning on async discard
[ 1478.467407][T15114] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1478.478388][T15114] BTRFS info (device loop5): trying to use backup root at mount time
[ 1478.486580][T15114] BTRFS info (device loop5): enabling auto defrag
[ 1478.493086][T15114] BTRFS info (device loop5): enabling ssd optimizations
[ 1478.502051][T15114] BTRFS info (device loop5): using free space tree
[ 1479.176851][ T5976] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[ 1479.261109][T15114] BTRFS error (device loop5): failed to load root extent
[ 1479.268503][T15114] BTRFS warning (device loop5): try to load backup roots slot 1
[ 1479.290430][ T5976] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[ 1479.328029][T15114] BTRFS warning (device loop5): couldn't read tree root
[ 1479.336020][T15114] BTRFS warning (device loop5): try to load backup roots slot 2
[ 1479.351378][ T5969] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1479.412742][T15114] BTRFS warning (device loop5): couldn't read tree root
[ 1479.419840][T15114] BTRFS warning (device loop5): try to load backup roots slot 3
[ 1479.452967][T15114] BTRFS info (device loop5): rebuilding free space tree
[ 1479.475537][T15114] BTRFS info (device loop5): checking UUID tree
[ 1479.697632][T12491] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1479.711043][T15147] xt_cgroup: invalid path, errno=-2
[ 1479.721682][T15147] netlink: 'syz.0.2220': attribute type 14 has an invalid length.
[ 1480.112954][T15150] Need at least one configuration in g_uac2.
[ 1480.188941][T15150] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1480.289741][T15150] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1480.589452][T15150] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1482.503692][   T28] audit: type=1326 audit(1784984001.890:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15169 comm="syz.2.2229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f714499de99 code=0x0
[ 1482.859340][T15184] Need at least one configuration in g_uac2.
[ 1482.866525][T15184] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1482.873393][T15184] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1482.886053][T15184] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1482.952670][T15181] xt_cgroup: invalid path, errno=-2
[ 1482.974198][T15181] netlink: 'syz.0.2233': attribute type 14 has an invalid length.
[ 1484.726515][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.733113][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1485.880068][T15210] xt_cgroup: invalid path, errno=-2
[ 1486.103073][T15210] netlink: 'syz.6.2243': attribute type 14 has an invalid length.
[ 1486.448912][T15210] loop6: detected capacity change from 0 to 32768
[ 1486.506797][T15210] XFS (loop6): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[ 1487.280708][T15210] XFS (loop6): Starting recovery (logdev: internal)
[ 1487.307766][T15210] XFS (loop6): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xd0, xfs_refcountbt block 0x8 
[ 1487.319866][T15210] XFS (loop6): Unmount and run xfs_repair
[ 1487.325812][T15210] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[ 1487.333954][T15210] 00000000: 52 33 46 43 00 00 00 03 ff ff ff ff ff ff ff ff  R3FC............
[ 1487.343903][T15210] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[ 1487.353637][T15210] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[ 1487.362772][T15210] 00000030: 00 00 00 00 ea d5 90 f3 00 00 00 07 00 00 00 01  ................
[ 1487.372088][T15210] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[ 1487.381960][T15210] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1487.391413][T15210] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1487.401197][T15210] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1487.411838][T15210] XFS (loop6): Filesystem has been shut down due to log error (0x2).
[ 1487.420774][T15210] XFS (loop6): Please unmount the filesystem and rectify the problem(s).
[ 1487.429504][T15210] XFS (loop6): log mount/recovery failed: error -74
[ 1487.463191][T15210] XFS (loop6): log mount failed
[ 1489.843772][T15251] Need at least one configuration in g_uac2.
[ 1489.850053][T15251] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1489.925339][T15251] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1489.951745][T15251] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1493.553036][T15277] xt_cgroup: invalid path, errno=-2
[ 1493.603362][T15277] netlink: 'syz.5.2262': attribute type 14 has an invalid length.
[ 1494.044704][T15277] loop5: detected capacity change from 0 to 32768
[ 1494.241709][T15277] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[ 1494.302634][T15277] XFS (loop5): Starting recovery (logdev: internal)
[ 1494.319748][T15277] XFS (loop5): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xd0, xfs_refcountbt block 0x8 
[ 1494.332930][T15277] XFS (loop5): Unmount and run xfs_repair
[ 1494.338697][T15277] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[ 1494.346993][T15277] 00000000: 52 33 46 43 00 00 00 03 ff ff ff ff ff ff ff ff  R3FC............
[ 1494.356291][T15277] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[ 1494.365371][T15277] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[ 1494.374414][T15277] 00000030: 00 00 00 00 ea d5 90 f3 00 00 00 07 00 00 00 01  ................
[ 1494.384059][T15277] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[ 1494.393087][T15277] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1494.402129][T15277] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1494.411053][T15277] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1494.421616][T15277] XFS (loop5): Filesystem has been shut down due to log error (0x2).
[ 1494.429821][T15277] XFS (loop5): Please unmount the filesystem and rectify the problem(s).
[ 1494.439429][T15277] XFS (loop5): log mount/recovery failed: error -74
[ 1494.463925][T15277] XFS (loop5): log mount failed
[ 1494.594758][T15295] Mass Storage Function, version: 2009/09/11
[ 1494.621063][T15295] LUN: removable file: (no medium)
[ 1494.689164][T15297] Need at least one configuration in g_uac2.
[ 1494.719232][T15297] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1494.735137][T15297] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1494.773848][T15297] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1497.415307][T15319] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2276'.
[ 1497.436059][T15319] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2276'.
[ 1497.673429][T15327] xt_cgroup: invalid path, errno=-2
[ 1497.684673][T15327] netlink: 'syz.5.2278': attribute type 14 has an invalid length.
[ 1497.809797][T15332] Need at least one configuration in g_uac2.
[ 1497.964999][T15327] loop5: detected capacity change from 0 to 32768
[ 1497.982982][T15332] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1497.989380][T15332] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1497.999927][T15332] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1498.750476][T15327] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[ 1498.916541][T15327] XFS (loop5): Starting recovery (logdev: internal)
[ 1498.963032][T15327] XFS (loop5): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xd0, xfs_refcountbt block 0x8 
[ 1498.974944][T15327] XFS (loop5): Unmount and run xfs_repair
[ 1498.981153][T15327] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[ 1498.988550][T15327] 00000000: 52 33 46 43 00 00 00 03 ff ff ff ff ff ff ff ff  R3FC............
[ 1498.997650][T15327] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[ 1499.006609][T15327] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[ 1499.015569][T15327] 00000030: 00 00 00 00 ea d5 90 f3 00 00 00 07 00 00 00 01  ................
[ 1499.024530][T15327] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[ 1499.033544][T15327] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1499.043649][T15327] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1499.052782][T15327] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1499.063416][T15327] XFS (loop5): Filesystem has been shut down due to log error (0x2).
[ 1499.071606][T15327] XFS (loop5): Please unmount the filesystem and rectify the problem(s).
[ 1499.080331][T15327] XFS (loop5): log mount/recovery failed: error -74
[ 1499.110846][T15327] XFS (loop5): log mount failed
[ 1499.200515][T10141] bio_check_eod: 4 callbacks suppressed
[ 1499.200570][T10141] udevd: attempt to access beyond end of device
[ 1499.200570][T10141] loop5: rw=524288, sector=32640, nr_sectors = 8 limit=0
[ 1501.127537][T15372] Need at least one configuration in g_uac2.
[ 1501.136896][T15372] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1501.157256][T15372] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1501.171498][T15372] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1502.160395][T15359] Bluetooth: hci2: command 0x0406 tx timeout
[ 1502.850417][T15384] xt_cgroup: invalid path, errno=-2
[ 1504.913816][T15404] Need at least one configuration in g_uac2.
[ 1504.920034][T15404] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1505.131305][T15404] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1505.146188][T15404] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1508.104718][T15433] xt_cgroup: invalid path, errno=-2
[ 1509.955514][T15454] Need at least one configuration in g_uac2.
[ 1509.974436][T15454] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1510.005082][T15454] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1510.045520][T15454] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1511.153777][T15463] loop6: detected capacity change from 0 to 512
[ 1511.331776][T15463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1511.393695][T15463] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1511.446811][T15470] xt_cgroup: invalid path, errno=-2
[ 1511.630102][T14173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1512.576855][T15479] loop2: detected capacity change from 0 to 164
[ 1513.738750][T15485] Need at least one configuration in g_uac2.
[ 1513.761815][T15485] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1513.768258][T15485] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1513.917440][T15485] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1514.723936][T15499] loop2: detected capacity change from 0 to 512
[ 1514.839392][T15499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1514.880494][T15499] ext4 filesystem being mounted at /582/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1515.003462][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1515.052669][T15508] netlink: 'syz.5.2331': attribute type 14 has an invalid length.
[ 1515.320079][T15508] loop5: detected capacity change from 0 to 32768
[ 1515.374605][T15508] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[ 1516.053056][T15508] XFS (loop5): Starting recovery (logdev: internal)
[ 1516.090012][T15508] XFS (loop5): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xd0, xfs_refcountbt block 0x8 
[ 1516.102184][T15508] XFS (loop5): Unmount and run xfs_repair
[ 1516.108099][T15508] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[ 1516.115772][T15508] 00000000: 52 33 46 43 00 00 00 03 ff ff ff ff ff ff ff ff  R3FC............
[ 1516.125889][T15508] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[ 1516.134939][T15508] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[ 1516.145205][T15508] 00000030: 00 00 00 00 ea d5 90 f3 00 00 00 07 00 00 00 01  ................
[ 1516.154307][T15508] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[ 1516.163387][T15508] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1516.172479][T15508] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1516.181523][T15508] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1516.193032][T15508] XFS (loop5): Filesystem has been shut down due to log error (0x2).
[ 1516.201207][T15508] XFS (loop5): Please unmount the filesystem and rectify the problem(s).
[ 1516.209933][T15508] XFS (loop5): log mount/recovery failed: error -74
[ 1516.234157][T15508] XFS (loop5): log mount failed
[ 1518.305974][T15546] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2342'.
[ 1518.324237][T15544] loop6: detected capacity change from 0 to 512
[ 1518.358233][T15544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1518.371724][T15544] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1518.435415][T14173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1518.569483][T15553] netlink: 'syz.6.2343': attribute type 14 has an invalid length.
[ 1518.896233][T15553] loop6: detected capacity change from 0 to 32768
[ 1518.910364][T13003] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[ 1519.010350][T15553] XFS (loop6): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[ 1519.135663][T13003] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1519.147636][T13003] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1519.179272][T13003] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1519.272145][T13003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1519.308153][T13003] usb 6-1: config 0 descriptor??
[ 1519.450446][T13003] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1519.457943][T13003] dvb-usb: bulk message failed: -22 (3/0)
[ 1519.514350][T13003] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1519.533602][T13003] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1519.542144][T13003] usb 6-1: media controller created
[ 1519.566589][T13003] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1519.620279][T13003] dvb-usb: bulk message failed: -22 (6/0)
[ 1519.627683][T13003] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1519.639717][T13003] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input55
[ 1519.652957][T13003] dvb-usb: schedule remote query interval to 150 msecs.
[ 1519.659982][T13003] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1519.681306][T13003] usb 6-1: USB disconnect, device number 12
[ 1519.711998][T15553] XFS (loop6): Starting recovery (logdev: internal)
[ 1519.835792][T15553] XFS (loop6): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xd0, xfs_refcountbt block 0x8 
[ 1519.848882][T15553] XFS (loop6): Unmount and run xfs_repair
[ 1519.854827][T15553] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[ 1519.862344][T15553] 00000000: 52 33 46 43 00 00 00 03 ff ff ff ff ff ff ff ff  R3FC............
[ 1519.871425][T15553] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[ 1519.880678][T15553] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[ 1519.889588][T15553] 00000030: 00 00 00 00 ea d5 90 f3 00 00 00 07 00 00 00 01  ................
[ 1519.898772][T15553] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[ 1519.907836][T15553] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1519.916928][T15553] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1519.926237][T15553] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1519.937800][T15553] XFS (loop6): Filesystem has been shut down due to log error (0x2).
[ 1519.947433][T15553] XFS (loop6): Please unmount the filesystem and rectify the problem(s).
[ 1519.956166][T15553] XFS (loop6): log mount/recovery failed: error -74
[ 1519.964178][T15553] XFS (loop6): log mount failed
[ 1520.005775][T13003] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1522.806746][T15604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2355'.
[ 1524.521122][T15585] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1529.936673][T15661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2373'.
[ 1535.498274][T15698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1536.039962][T15702] syzkaller0: entered promiscuous mode
[ 1536.045944][T15702] syzkaller0: entered allmulticast mode
[ 1537.107071][ T5986] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1537.247448][T15359] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1537.263894][T15359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1537.274338][T15359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1537.293238][T15359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1537.326944][T15359] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1537.335592][T15359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1537.386945][ T5986] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1537.522228][ T5986] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1537.680499][T15714] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2389'.
[ 1537.851378][    T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[ 1538.224074][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1538.402382][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1538.543445][    T9] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1538.707622][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1538.902278][    T9] usb 6-1: config 0 descriptor??
[ 1538.922268][ T5986] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1539.101696][T11282] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1539.188649][    T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1539.339560][    T9] dvb-usb: bulk message failed: -22 (3/0)
[ 1539.440507][ T5784] Bluetooth: hci0: command tx timeout
[ 1539.457319][T11282] usb 3-1: Using ep0 maxpacket: 32
[ 1539.666887][T11282] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[ 1539.748844][    T9] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1539.785141][T11282] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1539.827732][T15727] loop6: detected capacity change from 0 to 8
[ 1539.834006][    T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1539.864796][T11282] usb 3-1: config 0 has no interface number 0
[ 1539.895194][    T9] usb 6-1: media controller created
[ 1539.907605][T11282] usb 3-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1539.941079][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1539.957591][T11282] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10
[ 1539.983010][T11282] usb 3-1: config 0 interface 8 has no altsetting 0
[ 1539.993185][T11282] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb
[ 1540.007585][T15727] SQUASHFS error: Unable to read directory block [2c0:35]
[ 1540.012828][    T9] dvb-usb: bulk message failed: -22 (6/0)
[ 1540.036978][T11282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1540.045493][    T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1540.052769][T11282] usb 3-1: Product: syz
[ 1540.057290][T11282] usb 3-1: Manufacturer: syz
[ 1540.062433][T11282] usb 3-1: SerialNumber: syz
[ 1540.074425][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input56
[ 1540.090925][T15727] SQUASHFS error: Unable to read directory block [2c0:35]
[ 1540.113368][T11282] usb 3-1: config 0 descriptor??
[ 1540.136353][    T9] dvb-usb: schedule remote query interval to 150 msecs.
[ 1540.160364][    T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1540.190651][    T9] usb 6-1: USB disconnect, device number 13
[ 1540.307208][    T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1540.363887][T11282] ath6kl: Failed to submit usb control message: -71
[ 1540.378880][T11282] ath6kl: unable to send the bmi data to the device: -71
[ 1540.391499][T11282] ath6kl: Unable to send get target info: -71
[ 1540.400327][T11282] ath6kl: Failed to init ath6kl core: -71
[ 1540.417548][T11282] ath6kl_usb: probe of 3-1:0.8 failed with error -71
[ 1540.481864][T11282] usb 3-1: USB disconnect, device number 33
[ 1542.070358][ T5784] Bluetooth: hci0: command tx timeout
[ 1543.583078][T15710] chnl_net:caif_netlink_parms(): no params data found
[ 1543.634075][T15755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1544.090679][T15359] Bluetooth: hci0: command tx timeout
[ 1544.871675][T15710] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1544.878960][T15710] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1544.913909][T15710] bridge_slave_0: entered allmulticast mode
[ 1544.941242][T15710] bridge_slave_0: entered promiscuous mode
[ 1544.979556][T15777] loop2: detected capacity change from 0 to 64
[ 1545.328805][T15710] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1545.483398][T15710] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1545.668179][T15710] bridge_slave_1: entered allmulticast mode
[ 1545.927628][T15710] bridge_slave_1: entered promiscuous mode
[ 1547.701021][T15359] Bluetooth: hci0: command tx timeout
[ 1547.711427][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1547.720297][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1548.026907][T15710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1548.153491][T15710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1548.181750][T15795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1548.455743][T15710] team0: Port device team_slave_0 added
[ 1548.483859][T15710] team0: Port device team_slave_1 added
[ 1549.281901][T15710] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1549.409578][T15710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1549.823768][T15710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1550.369336][T15710] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1550.430235][T15710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1550.487143][T15710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1550.577420][T15818] loop6: detected capacity change from 0 to 64
[ 1550.680477][ T5986] hsr_slave_0: left promiscuous mode
[ 1550.740410][ T5986] hsr_slave_1: left promiscuous mode
[ 1550.787600][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1550.882302][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1551.026465][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1551.153995][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1551.336757][ T5986] bridge_slave_1: left allmulticast mode
[ 1551.445413][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1551.645282][ T5986] bridge_slave_0: left allmulticast mode
[ 1551.651325][ T5986] bridge_slave_0: left promiscuous mode
[ 1551.657164][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1553.364425][ T5986] veth1_macvtap: left promiscuous mode
[ 1553.375055][ T5986] veth0_macvtap: left promiscuous mode
[ 1553.382824][ T5986] veth1_vlan: left promiscuous mode
[ 1553.388263][ T5986] veth0_vlan: left promiscuous mode
[ 1555.066426][T15841] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1555.201544][ T5986] team0 (unregistering): Port device team_slave_1 removed
[ 1555.299290][ T5986] team0 (unregistering): Port device team_slave_0 removed
[ 1555.374675][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1555.459133][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1556.697666][ T5986] bond0 (unregistering): Released all slaves
[ 1557.091717][T15710] hsr_slave_0: entered promiscuous mode
[ 1557.150056][T15856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1557.182377][T15710] hsr_slave_1: entered promiscuous mode
[ 1559.415851][T15874] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1559.806071][   T28] audit: type=1326 audit(1784984079.190:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15861 comm="syz.6.2420" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82f199de99 code=0x0
[ 1560.349418][T15889] tcpci: probe of 0-0050 failed with error -5
[ 1560.401343][T15889] i2c i2c-0: new_device: Instantiated device tcpci at 0x50
[ 1560.502100][T15889] tcpci: probe of 0-0051 failed with error -5
[ 1560.508561][T15889] i2c i2c-0: new_device: Instantiated device tcpci at 0x51
[ 1562.017468][T15903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1562.774797][T15909] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[ 1562.788538][T15909] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[ 1562.812277][T15909] udc dummy_udc.0: failed to start g1: -22
[ 1562.818361][T15909] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1562.843830][T15911] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1562.874924][T15909] UDC core: g1: couldn't find an available UDC or it's busy
[ 1562.904681][T15710] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1563.000278][T15710] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1563.055871][T15710] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1563.120756][T15710] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1563.568931][T15921] loop2: detected capacity change from 0 to 512
[ 1563.717678][T15710] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1563.809673][T15921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1563.865133][T15710] 8021q: adding VLAN 0 to HW filter on device team0
[ 1563.935576][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1563.942772][ T5971] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1563.970977][T15921] ext4 filesystem being mounted at /612/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1564.052905][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1564.060476][ T5971] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1564.388525][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1567.175246][T15956] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1567.211945][T15953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1568.482159][T15710] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1570.773098][T15710] veth0_vlan: entered promiscuous mode
[ 1570.787395][T15970] capability: warning: `syz.2.2443' uses deprecated v2 capabilities in a way that may be insecure
[ 1570.852866][T15710] veth1_vlan: entered promiscuous mode
[ 1571.283360][T15974] lo speed is unknown, defaulting to 1000
[ 1571.290069][T15974] lo speed is unknown, defaulting to 1000
[ 1571.299244][T15974] lo speed is unknown, defaulting to 1000
[ 1571.311010][T15974] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1571.327230][T15974] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1572.784170][T15974] lo speed is unknown, defaulting to 1000
[ 1572.832645][T15974] lo speed is unknown, defaulting to 1000
[ 1572.842411][T15974] lo speed is unknown, defaulting to 1000
[ 1572.849948][T15974] lo speed is unknown, defaulting to 1000
[ 1573.053564][T15710] veth0_macvtap: entered promiscuous mode
[ 1573.104853][T15710] veth1_macvtap: entered promiscuous mode
[ 1573.197712][T15710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1573.242640][T15710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1573.274545][T15710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1573.322482][T15710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1573.352874][T15710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1573.458092][T15710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1573.659133][T15710] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1574.074226][T15710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1574.219538][T15710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1574.392051][T15710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1574.566931][T15710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1574.952951][T15710] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1576.484128][T15710] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1576.573412][T15710] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1576.846261][T15710] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1576.996461][T15710] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1577.705687][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1577.744792][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1577.880082][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1577.888702][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1577.987588][T16000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1579.377516][T16012] i2c i2c-0: Failed to register i2c client tcpci at 0x51 (-16)
[ 1584.337685][T13003] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[ 1584.577821][T13003] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4
[ 1584.627469][T13003] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1584.650075][T13003] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1584.690255][T13003] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1584.698548][T13003] usb 6-1: Product: syz
[ 1584.733424][T13003] usb 6-1: Manufacturer: syz
[ 1584.738123][T13003] usb 6-1: SerialNumber: syz
[ 1584.791553][T13003] usb 6-1: config 0 descriptor??
[ 1584.806140][T13003] usb 6-1: selecting invalid altsetting 0
[ 1585.031590][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1585.044732][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1585.160297][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1585.182365][ T5784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1585.192372][ T5784] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1585.199879][ T5784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1585.310471][ T5815] usb 6-1: USB disconnect, device number 14
[ 1585.715194][T16042] lo speed is unknown, defaulting to 1000
[ 1585.934795][T16039] loop6: detected capacity change from 0 to 32768
[ 1585.974206][ T5982] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1587.930532][T15359] Bluetooth: hci4: command tx timeout
[ 1588.038028][T16058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1588.197923][ T5982] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1588.450579][ T5982] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1588.578094][ T5982] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1588.941236][T16076] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2464'.
[ 1589.016080][T16042] chnl_net:caif_netlink_parms(): no params data found
[ 1590.000497][T15359] Bluetooth: hci4: command tx timeout
[ 1590.925876][T16092] Invalid ELF header magic: != ELF
[ 1591.514191][T16096] loop6: detected capacity change from 0 to 164
[ 1591.691127][T16096] rock: directory entry would overflow storage
[ 1591.698061][T16096] rock: sig=0x66, size=4, remaining=3
[ 1591.788639][T16042] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1591.814203][T16042] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1591.832111][T16096] rock: directory entry would overflow storage
[ 1591.838931][T16096] rock: sig=0x66, size=4, remaining=3
[ 1591.860184][T16042] bridge_slave_0: entered allmulticast mode
[ 1591.891785][T16042] bridge_slave_0: entered promiscuous mode
[ 1592.022250][T16102] i2c i2c-0: Failed to register i2c client tcpci at 0x51 (-16)
[ 1592.081187][T15359] Bluetooth: hci4: command tx timeout
[ 1592.415510][T16042] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1592.450476][T16042] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1592.457808][T16042] bridge_slave_1: entered allmulticast mode
[ 1592.484937][T16042] bridge_slave_1: entered promiscuous mode
[ 1592.647658][T16120] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2473'.
[ 1593.355047][T16042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1594.162795][T15359] Bluetooth: hci4: command tx timeout
[ 1594.344654][T16042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1595.425275][T16042] team0: Port device team_slave_0 added
[ 1595.556562][T16042] team0: Port device team_slave_1 added
[ 1596.370791][T16042] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1596.462173][T16042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1596.676577][T16042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1596.930997][T16042] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1597.031503][T16042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1597.326343][T16153] Need at least one configuration in g_uac2.
[ 1597.332675][T16153] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1597.338982][T16153] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1597.348221][T16042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1597.352003][T16153] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1597.740405][T16042] hsr_slave_0: entered promiscuous mode
[ 1597.779321][T16042] hsr_slave_1: entered promiscuous mode
[ 1597.793181][T16042] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1597.820316][T16042] Cannot create hsr debugfs directory
[ 1597.865179][ T5982] hsr_slave_0: left promiscuous mode
[ 1597.881217][ T5982] hsr_slave_1: left promiscuous mode
[ 1598.048795][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1598.057177][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1598.888749][ T5982] bridge_slave_1: left allmulticast mode
[ 1598.910579][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1598.950833][ T5982] bridge_slave_0: left allmulticast mode
[ 1598.967108][ T5982] bridge_slave_0: left promiscuous mode
[ 1599.002537][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1599.646154][ T5982] veth1_macvtap: left promiscuous mode
[ 1599.663990][ T5982] veth0_macvtap: left promiscuous mode
[ 1599.669749][ T5982] veth1_vlan: left promiscuous mode
[ 1599.700347][ T5982] veth0_vlan: left promiscuous mode
[ 1600.924070][T16189] Need at least one configuration in g_uac2.
[ 1600.930928][T16189] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1600.937368][T16189] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1600.948121][T16189] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1602.617944][ T5982] team0 (unregistering): Port device team_slave_1 removed
[ 1602.683082][ T5982] team0 (unregistering): Port device team_slave_0 removed
[ 1602.748023][ T5982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1602.814730][ T5982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1603.291500][ T5982] bond0 (unregistering): Released all slaves
[ 1603.624861][T14724] lo speed is unknown, defaulting to 1000
[ 1604.070468][  T788] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[ 1604.329185][  T788] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1604.368199][  T788] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[ 1604.403148][T16211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1604.419179][  T788] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1604.472342][  T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1604.532091][  T788] usb 6-1: config 0 descriptor??
[ 1604.879944][T16204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1604.929483][T16204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1604.960985][T10815] usb 6-1: USB disconnect, device number 15
[ 1606.380736][T16228] Need at least one configuration in g_uac2.
[ 1606.444341][T16228] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1606.466734][T16228] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1606.516229][T16228] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1606.596886][T16042] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1606.638410][T16042] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1606.668771][T16042] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1606.705192][T16042] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1607.650871][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.657268][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1607.709713][T16042] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1608.577491][T16042] 8021q: adding VLAN 0 to HW filter on device team0
[ 1608.790172][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1608.797510][ T5982] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1609.009076][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1609.016456][ T5982] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1611.708541][T16259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1611.896355][T16273] Need at least one configuration in g_uac2.
[ 1611.935060][T16273] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1611.941653][T16273] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1611.969811][T16273] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1612.069236][T16042] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1612.084571][  T788] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[ 1612.155898][T16042] veth0_vlan: entered promiscuous mode
[ 1612.174817][T16042] veth1_vlan: entered promiscuous mode
[ 1612.216456][T16042] veth0_macvtap: entered promiscuous mode
[ 1612.228499][T16042] veth1_macvtap: entered promiscuous mode
[ 1612.303489][  T788] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1612.335386][  T788] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[ 1612.355433][T16042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1612.379153][  T788] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1612.389626][T16042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1612.403170][  T788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1612.419013][T16042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1612.441429][  T788] usb 7-1: config 0 descriptor??
[ 1612.465331][T16042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1612.485773][T16042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1612.519536][T16042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1612.544284][T16042] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1612.627910][T16042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1612.659950][T16042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1612.675782][T16042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1612.687208][T16042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1612.706456][T16042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1612.724641][T16042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1612.735041][T16290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1612.748958][T16042] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1612.776999][T16290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1612.787943][T16042] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1612.801750][T16042] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1612.814834][T16042] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1612.829053][  T788] usb 7-1: USB disconnect, device number 3
[ 1612.858291][T16042] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1616.344339][ T5982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1616.398541][ T5982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1616.513581][T16315] Need at least one configuration in g_uac2.
[ 1616.531603][T16311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1616.543335][T16315] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1616.549769][T16315] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1616.571243][ T5971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1616.579259][ T5971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1616.594708][T16315] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1616.840940][T16324] loop2: detected capacity change from 0 to 512
[ 1617.338662][T16324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1617.566549][T16324] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1617.862293][   T28] audit: type=1804 audit(1784984137.250:91): pid=16324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2453" name="/newroot/0/bus/bus" dev="loop2" ino=18 res=1 errno=0
[ 1619.679091][T16042] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1619.805965][T16355] Need at least one configuration in g_uac2.
[ 1619.834917][T16355] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1619.858014][T16355] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1619.903637][T16355] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1620.537741][T16365] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1625.125131][T16394] Need at least one configuration in g_uac2.
[ 1625.152641][T16394] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1625.158998][T16394] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1625.206607][T16394] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1625.285953][T16404] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1627.776881][T16427] Need at least one configuration in g_uac2.
[ 1627.784783][T16427] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1627.796395][T16427] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1627.807126][T16427] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1628.111733][T16435] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1629.596552][T16457] Need at least one configuration in g_uac2.
[ 1629.688798][T16457] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1629.778575][T16457] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1629.920040][T16457] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1630.731079][T16463] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1631.321939][T16472] loop2: detected capacity change from 0 to 4096
[ 1631.632747][T16472] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1631.913935][T16472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1632.047805][T16472] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2563'.
[ 1632.223117][T16042] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1632.332584][T16491] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1632.360564][T16489] Need at least one configuration in g_uac2.
[ 1632.368594][T16489] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1632.398589][T16489] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1632.427788][T16489] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1636.133112][T16530] Need at least one configuration in g_uac2.
[ 1636.200087][T16530] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1636.267294][T16530] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1636.413255][T16530] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1639.253736][T16559] Need at least one configuration in g_uac2.
[ 1639.276410][T16559] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1639.306717][T16559] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1639.336110][T16559] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1646.978858][T16636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2619'.
[ 1650.238800][T16652] loop6: detected capacity change from 0 to 32768
[ 1650.260249][T16652] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2626 (16652)
[ 1650.319762][T16652] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1650.344955][T16652] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[ 1650.363203][T16652] BTRFS info (device loop6): force clearing of disk cache
[ 1650.404151][T16652] BTRFS info (device loop6): metadata ratio 0
[ 1650.420879][T16652] BTRFS info (device loop6): enabling ssd optimizations
[ 1650.442007][T16652] BTRFS info (device loop6): using spread ssd allocation scheme
[ 1650.470467][T16652] BTRFS info (device loop6): using free space tree
[ 1650.526466][T16659] loop2: detected capacity change from 0 to 32768
[ 1650.598476][T16659] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1651.071468][T16652] BTRFS info (device loop6): auto enabling async discard
[ 1651.462080][T16652] BTRFS info (device loop6): rebuilding free space tree
[ 1651.605175][T16659] XFS (loop2): Ending clean mount
[ 1651.632524][T16659] XFS (loop2): Quotacheck needed: Please wait.
[ 1651.832062][T14173] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1651.844739][T16659] XFS (loop2): Quotacheck: Done.
[ 1652.693821][T16717] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2639'.
[ 1653.145160][T16042] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1653.414997][T10141] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop6 scanned by udevd (10141)
[ 1653.440942][T15996] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[ 1653.637207][T15996] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1653.667666][T15996] usb 6-1: config 0 has no interfaces?
[ 1653.694090][T15996] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1653.727421][T15996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1653.762265][T15996] usb 6-1: config 0 descriptor??
[ 1654.075232][T15996] usb 6-1: USB disconnect, device number 16
[ 1655.032773][T16741] loop5: detected capacity change from 0 to 512
[ 1655.108186][T16741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1655.198080][T16741] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1655.323242][T12491] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1657.235056][T16768] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2656'.
[ 1657.288022][T16751] loop2: detected capacity change from 0 to 32768
[ 1657.532576][    T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[ 1657.655552][T16751] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1657.868134][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1658.052223][    T9] usb 7-1: config 0 has no interfaces?
[ 1658.153130][    T9] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1658.213146][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1658.284327][    T9] usb 7-1: config 0 descriptor??
[ 1658.353738][T16751] XFS (loop2): Ending clean mount
[ 1658.404966][T16751] XFS (loop2): Quotacheck needed: Please wait.
[ 1658.511454][T16751] XFS (loop2): Quotacheck: Done.
[ 1658.520317][T15996] usb 7-1: USB disconnect, device number 4
[ 1658.587446][T16042] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1660.927515][T15359] Bluetooth: hci0: command 0x0406 tx timeout
[ 1661.601650][T16811] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2671'.
[ 1661.890254][T15996] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[ 1663.335165][T16828] loop2: detected capacity change from 0 to 512
[ 1663.409328][T15996] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1663.901995][T16828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1664.087048][T16828] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1664.194273][T15996] usb 6-1: config 0 has no interfaces?
[ 1664.199916][T15996] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1664.218312][T15996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1664.229236][T15996] usb 6-1: config 0 descriptor??
[ 1664.347351][T16837] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1664.367799][T16042] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1664.483611][T15996] usb 6-1: USB disconnect, device number 17
[ 1664.855541][T13003] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[ 1666.423415][T16860] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1666.558627][T13003] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1666.665979][T13003] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1666.757622][T13003] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1666.808461][T16862] loop5: detected capacity change from 0 to 512
[ 1666.866425][T13003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1667.129454][T13003] usb 3-1: config 0 descriptor??
[ 1667.242293][T16862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1667.275858][T13003] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1667.302821][T16862] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1667.318066][T13003] dvb-usb: bulk message failed: -22 (3/0)
[ 1667.354685][T13003] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1667.398058][T13003] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1667.408459][T12491] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1667.432088][T13003] usb 3-1: media controller created
[ 1667.447550][T13003] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1667.465511][T16845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1667.494842][T16845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1667.506346][T13003] dvb-usb: bulk message failed: -22 (6/0)
[ 1667.526609][T13003] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1667.554732][T13003] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input57
[ 1667.605950][T13003] dvb-usb: schedule remote query interval to 150 msecs.
[ 1667.620183][T13003] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1667.642259][T13003] usb 3-1: USB disconnect, device number 34
[ 1667.687819][T16876] loop5: detected capacity change from 0 to 8
[ 1667.792503][T13003] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1667.856969][T16876] SQUASHFS error: Unable to read directory block [2c0:35]
[ 1667.879669][T16876] SQUASHFS error: Unable to read directory block [2c0:35]
[ 1669.046132][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1669.063788][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.111102][T16888] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2697'.
[ 1669.588541][T16894] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1669.660344][T13003] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[ 1670.453757][T13003] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1670.464842][T13003] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[ 1670.474332][T13003] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1670.484430][T13003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1670.526075][T13003] usb 6-1: config 0 descriptor??
[ 1670.627735][T16902] loop6: detected capacity change from 0 to 512
[ 1670.687031][T16902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1670.706507][T16902] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1670.739652][  T788] usb 6-1: USB disconnect, device number 18
[ 1670.810668][T14173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1671.254516][T16899] loop2: detected capacity change from 0 to 32768
[ 1671.324974][T16899] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1671.520297][  T788] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[ 1672.443035][T16899] XFS (loop2): Ending clean mount
[ 1672.573460][T16931] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1672.687154][T16899] XFS (loop2): Quotacheck needed: Please wait.
[ 1673.077455][T16899] XFS (loop2): Quotacheck: Done.
[ 1673.276487][  T788] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1673.808989][T16937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1673.872511][  T788] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1673.881868][  T788] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1673.891195][  T788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1673.903230][  T788] usb 7-1: config 0 descriptor??
[ 1673.912840][  T788] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1673.919565][  T788] dvb-usb: bulk message failed: -22 (3/0)
[ 1673.955635][  T788] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1673.978572][  T788] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1673.986878][  T788] usb 7-1: media controller created
[ 1673.994083][  T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1674.023194][  T788] dvb-usb: bulk message failed: -22 (6/0)
[ 1674.029094][  T788] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1674.052293][T16042] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1674.089869][  T788] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input58
[ 1674.125208][T16916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1674.141128][  T788] dvb-usb: schedule remote query interval to 150 msecs.
[ 1674.149861][  T788] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1674.167769][T16916] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1674.191218][  T788] usb 7-1: USB disconnect, device number 5
[ 1674.252646][  T788] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1674.964919][T16953] Need at least one configuration in g_uac2.
[ 1674.985237][T16953] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1674.997210][T16953] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1675.018084][T16953] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1675.068046][T16957] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1675.547883][T16963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1676.523810][T16960] loop2: detected capacity change from 0 to 32768
[ 1676.584226][T16960] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1676.824421][T16960] XFS (loop2): Ending clean mount
[ 1676.845162][T16960] XFS (loop2): Quotacheck needed: Please wait.
[ 1676.951771][T16989] Need at least one configuration in g_uac2.
[ 1676.958154][T16989] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1676.966759][T16989] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1676.985093][T16960] XFS (loop2): Quotacheck: Done.
[ 1676.990940][T16989] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1677.070333][T16991] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1677.311219][T16042] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1678.444543][T17004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1679.743094][T17015] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1679.743737][T17017] Need at least one configuration in g_uac2.
[ 1679.774956][T17017] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1679.798410][T17017] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1679.821615][T17017] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1680.847898][T17009] loop5: detected capacity change from 0 to 32768
[ 1680.908296][T17024] i2c i2c-0: Failed to register i2c client tcpci at 0x51 (-16)
[ 1680.985969][T17009] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1681.309350][T17009] XFS (loop5): Ending clean mount
[ 1681.324821][T17009] XFS (loop5): Quotacheck needed: Please wait.
[ 1681.423068][T17009] XFS (loop5): Quotacheck: Done.
[ 1681.463925][T17041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1681.617628][T12491] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1681.680155][T17046] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1681.763558][T17048] Need at least one configuration in g_uac2.
[ 1681.770471][T17048] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1681.776794][T17048] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1681.788891][T17048] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1681.993858][T17057] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2758'.
[ 1682.030871][T17059] i2c i2c-0: Failed to register i2c client tcpci at 0x51 (-16)
[ 1682.499874][T17073] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1682.614545][T17075] Need at least one configuration in g_uac2.
[ 1682.621503][T17075] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1682.661382][T17075] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1682.677359][T17075] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1683.019322][T17068] loop2: detected capacity change from 0 to 32768
[ 1683.046961][T17086] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2768'.
[ 1683.197596][T17068] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1683.252715][T17094] i2c i2c-0: Failed to register i2c client tcpci at 0x51 (-16)
[ 1683.352613][T17099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1683.454172][T17068] XFS (loop2): Ending clean mount
[ 1683.484964][T17068] XFS (loop2): Quotacheck needed: Please wait.
[ 1683.560280][T17106] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1683.582065][T17068] XFS (loop2): Quotacheck: Done.
[ 1683.620640][  T788] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[ 1683.712403][T16042] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1683.833052][  T788] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1683.843482][  T788] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1683.852501][  T788] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1683.870233][  T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1683.884741][  T788] usb 6-1: config 0 descriptor??
[ 1683.893723][  T788] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1683.910184][  T788] dvb-usb: bulk message failed: -22 (3/0)
[ 1683.933551][  T788] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1683.975448][  T788] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1683.993406][  T788] usb 6-1: media controller created
[ 1684.010036][  T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1684.034599][  T788] dvb-usb: bulk message failed: -22 (6/0)
[ 1684.045863][T17111] loop6: detected capacity change from 0 to 512
[ 1684.052713][  T788] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1684.070260][T17111] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1684.149072][T17098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1684.190860][T17098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1684.244128][T17111] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1684.266268][T17111] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1684.324018][  T788] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input59
[ 1684.342475][  T788] dvb-usb: schedule remote query interval to 150 msecs.
[ 1684.349511][  T788] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1684.383825][  T788] usb 6-1: USB disconnect, device number 19
[ 1684.409669][   T28] audit: type=1800 audit(1784984203.790:92): pid=17111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2776" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 1684.587400][  T788] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1685.547288][T14173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1685.742138][T17128] Need at least one configuration in g_uac2.
[ 1685.758567][T17128] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1685.778868][T17128] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1685.789136][T17130] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2778'.
[ 1685.810024][T17128] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1686.036001][T17135] i2c i2c-0: Failed to register i2c client tcpci at 0x51 (-16)
[ 1686.081763][T17138] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1686.280861][T17141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1686.303535][T17145] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[ 1686.313704][T17145] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[ 1686.333601][T17145] udc dummy_udc.0: failed to start g1: -22
[ 1686.339526][T17145] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1686.354299][T17145] UDC core: g1: couldn't find an available UDC or it's busy
[ 1686.730725][T17139] loop6: detected capacity change from 0 to 32768
[ 1686.777362][T17139] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1686.848452][T17162] Need at least one configuration in g_uac2.
[ 1686.854848][T17162] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1686.861700][T17162] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1686.870505][T17162] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1686.954620][T17166] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2790'.
[ 1687.076429][T17168] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1687.168099][T17139] XFS (loop6): Ending clean mount
[ 1687.200714][T17139] XFS (loop6): Quotacheck needed: Please wait.
[ 1687.329690][T17172] i2c i2c-0: Failed to register i2c client tcpci at 0x51 (-16)
[ 1687.394157][T17139] XFS (loop6): Quotacheck: Done.
[ 1687.469401][T17175] i2c i2c-0: Failed to register i2c client tcpci at 0x51 (-16)
[ 1687.531009][T14173] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1688.358944][T17188] Need at least one configuration in g_uac2.
[ 1688.374082][T17188] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1688.381985][T17188] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1688.390761][T17188] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1688.545311][T17190] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2800'.
[ 1688.669406][T17192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1688.688701][T17195] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1688.803039][T17197] i2c i2c-0: Failed to register i2c client tcpci at 0x51 (-16)
[ 1689.022936][T17201] i2c i2c-0: Failed to register i2c client tcpci at 0x51 (-16)
[ 1689.341385][T17208] Need at least one configuration in g_uac2.
[ 1689.360405][T17208] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1689.396316][T17208] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1689.430409][T17208] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1689.442715][T17199] loop2: detected capacity change from 0 to 32768
[ 1689.560615][T17199] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1689.761488][T17223] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2809'.
[ 1690.036458][T17226] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1690.148439][T17199] XFS (loop2): Ending clean mount
[ 1690.189672][T17199] XFS (loop2): Quotacheck needed: Please wait.
[ 1690.347208][T17199] XFS (loop2): Quotacheck: Done.
[ 1690.759705][T16042] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1691.545255][T17247] Need at least one configuration in g_uac2.
[ 1691.566134][T17247] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1691.586273][T17247] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1691.600956][T17247] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1692.014401][   T27] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[ 1692.246483][   T27] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1692.276403][T17261] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1692.295855][   T27] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1692.358657][   T27] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1692.379812][   T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1692.415964][   T27] usb 6-1: config 0 descriptor??
[ 1692.435681][   T27] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1692.447253][   T27] dvb-usb: bulk message failed: -22 (3/0)
[ 1692.461022][   T27] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1692.491703][   T27] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1692.521104][   T27] usb 6-1: media controller created
[ 1692.543401][   T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1692.560835][   T27] dvb-usb: bulk message failed: -22 (6/0)
[ 1692.569465][T17251] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1692.588104][   T27] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1692.605455][T17251] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1692.616591][   T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input60
[ 1692.628387][T17251] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1692.645075][T17251] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1692.654999][T17251] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1692.674106][T17249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1692.709790][   T27] dvb-usb: schedule remote query interval to 150 msecs.
[ 1692.742223][T17249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1692.759738][   T27] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1692.819116][   T27] usb 6-1: USB disconnect, device number 20
[ 1692.940891][   T27] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1693.236014][T17283] Need at least one configuration in g_uac2.
[ 1693.245634][T17283] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1693.259941][T17283] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1693.272942][T17283] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1693.435373][T17268] loop2: detected capacity change from 0 to 32768
[ 1693.679249][T17268] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1693.788966][T17295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1693.813200][T17301] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1693.840607][ T5784] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1694.008983][T17268] XFS (loop2): Ending clean mount
[ 1694.035262][T17268] XFS (loop2): Quotacheck needed: Please wait.
[ 1694.115353][T17268] XFS (loop2): Quotacheck: Done.
[ 1694.292128][T17305] loop5: detected capacity change from 0 to 256
[ 1694.351974][T16042] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1694.646643][ T5784] Bluetooth: hci0: command tx timeout
[ 1694.651038][T15359] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1694.720340][T15359] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1694.798684][T17311] Need at least one configuration in g_uac2.
[ 1694.805179][T17311] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1694.824959][T17311] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1694.834818][T17311] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1695.328260][T17325] syzkaller0: entered promiscuous mode
[ 1695.334429][T17325] syzkaller0: entered allmulticast mode
[ 1695.540238][T15996] usb 3-1: new full-speed USB device number 35 using dummy_hcd
[ 1695.556020][T17328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1695.736243][T15996] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1695.749251][T15996] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1695.769180][T15996] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1695.783766][T15996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1695.796520][T15996] usb 3-1: config 0 descriptor??
[ 1695.826545][T15996] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1695.835965][T15996] dvb-usb: bulk message failed: -22 (3/0)
[ 1695.842691][T17327] loop6: detected capacity change from 0 to 32768
[ 1695.859196][T15996] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1695.875385][T15996] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1695.886098][T15996] usb 3-1: media controller created
[ 1695.895779][T15996] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1695.919296][T17327] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1695.928229][T15996] dvb-usb: bulk message failed: -22 (6/0)
[ 1695.928315][T15996] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1695.942865][T15996] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input61
[ 1695.983056][T15996] dvb-usb: schedule remote query interval to 150 msecs.
[ 1695.994306][T15996] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1696.012530][T17320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1696.033308][T17320] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1696.114156][ T5815] usb 3-1: USB disconnect, device number 35
[ 1696.167786][ T5815] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1696.253755][T17327] XFS (loop6): Ending clean mount
[ 1696.278306][T17327] XFS (loop6): Quotacheck needed: Please wait.
[ 1696.350006][T17327] XFS (loop6): Quotacheck: Done.
[ 1696.444329][T14173] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1696.506091][T17343] Need at least one configuration in g_uac2.
[ 1696.525847][T17343] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1696.550235][T17343] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1696.562261][T17343] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1696.800363][T15359] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1696.863865][T17349] i2c i2c-0: new_device: Can't parse I2C address
[ 1696.870914][T17349] i2c i2c-0: Failed to register i2c client tcpci at 0x51 (-16)
[ 1697.084111][T17350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1697.113634][T17353] syzkaller0: entered promiscuous mode
[ 1697.119828][T17353] syzkaller0: entered allmulticast mode
[ 1697.684705][T17364] loop6: detected capacity change from 0 to 32768
[ 1697.727653][T17364] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1697.790338][ T9934] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[ 1697.863770][T17364] XFS (loop6): Ending clean mount
[ 1697.884942][T17364] XFS (loop6): Quotacheck needed: Please wait.
[ 1697.937621][T17381] Need at least one configuration in g_uac2.
[ 1697.944759][T17381] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1697.951870][T17381] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1697.963381][T17381] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1697.992768][ T9934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1698.009870][T17364] XFS (loop6): Quotacheck: Done.
[ 1698.015498][ T9934] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1698.045661][ T9934] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1698.060866][ T9934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1698.072104][ T9934] usb 3-1: config 0 descriptor??
[ 1698.129999][ T9934] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1698.159761][ T9934] dvb-usb: bulk message failed: -22 (3/0)
[ 1698.187182][T14173] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1698.205996][ T9934] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1698.225282][ T9934] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1698.261182][ T9934] usb 3-1: media controller created
[ 1698.267947][ T9934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1698.356865][T17369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1698.366002][T17385] tcpci: probe of 0-0005 failed with error -5
[ 1698.389128][T17385] i2c i2c-0: new_device: Instantiated device tcpci at 0x05
[ 1698.397285][ T9934] dvb-usb: bulk message failed: -22 (6/0)
[ 1698.404013][T17386] i2c i2c-0: Failed to register i2c client tcpci at 0x51 (-16)
[ 1698.413954][T17369] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1698.456825][ T9934] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1698.501364][ T9934] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input62
[ 1698.536662][ T9934] dvb-usb: schedule remote query interval to 150 msecs.
[ 1698.580198][ T9934] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1698.603155][ T9934] usb 3-1: USB disconnect, device number 36
[ 1698.718730][ T9934] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1698.795004][T17390] syzkaller0: entered promiscuous mode
[ 1698.800916][T17390] syzkaller0: entered allmulticast mode
[ 1699.181619][T17398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1699.227229][T17402] Need at least one configuration in g_uac2.
[ 1699.260451][T17402] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1699.266804][T17402] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1699.292350][T17402] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1699.408634][T17410] i2c i2c-0: Failed to register i2c client tcpci at 0x05 (-16)
[ 1699.417575][T17410] i2c i2c-0: Failed to register i2c client tcpci at 0x51 (-16)
[ 1700.384018][T17428] Need at least one configuration in g_uac2.
[ 1700.390677][T17428] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1700.397006][T17428] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1700.415329][T17428] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1700.469822][T17421] loop2: detected capacity change from 0 to 32768
[ 1700.528211][T17421] JBD2: Ignoring recovery information on journal
[ 1700.556340][T17431] i2c i2c-0: Failed to register i2c client tcpci at 0x05 (-16)
[ 1700.587789][T17421] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1700.617902][T17431] i2c i2c-0: Failed to register i2c client tcpci at 0x51 (-16)
[ 1701.173228][T16042] ocfs2: Unmounting device (7,2) on (node local)
[ 1701.685701][T17455] Need at least one configuration in g_uac2.
[ 1701.693370][T17455] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1701.699745][T17455] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1701.710422][T17455] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1701.811750][T17444] loop6: detected capacity change from 0 to 32768
[ 1701.812213][T17457] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16)
[ 1701.838316][T17457] i2c i2c-0: Failed to register i2c client tcpci at 0x51 (-16)
[ 1701.857483][T17444] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1702.033322][T17444] XFS (loop6): Ending clean mount
[ 1702.052702][T17444] XFS (loop6): Quotacheck needed: Please wait.
[ 1702.134548][T17444] XFS (loop6): Quotacheck: Done.
[ 1702.232449][T14173] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1702.888129][T17471] loop5: detected capacity change from 0 to 32768
[ 1703.200988][T17471] JBD2: Ignoring recovery information on journal
[ 1703.892370][T17486] lo speed is unknown, defaulting to 1000
[ 1703.898253][T17486] lo speed is unknown, defaulting to 1000
[ 1703.905733][T17486] lo speed is unknown, defaulting to 1000
[ 1703.919842][T17486] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1704.888153][T17486] lo speed is unknown, defaulting to 1000
[ 1704.897742][T17486] lo speed is unknown, defaulting to 1000
[ 1704.905254][T17486] lo speed is unknown, defaulting to 1000
[ 1704.914117][T17486] lo speed is unknown, defaulting to 1000
[ 1705.190731][T17490] Need at least one configuration in g_uac2.
[ 1705.201664][T17471] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 1705.218814][T17490] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1705.235005][T17490] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1705.243850][T17493] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16)
[ 1705.259018][T17490] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1705.267662][T17493] i2c i2c-0: Failed to register i2c client tcpci at 0x51 (-16)
[ 1705.836433][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2905'.
[ 1705.893267][T12491] ocfs2: Unmounting device (7,5) on (node local)
[ 1706.192280][T17497] loop2: detected capacity change from 0 to 32768
[ 1706.269293][T17497] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1706.343100][T17497] XFS (loop2): Ending clean mount
[ 1706.372898][T17497] XFS (loop2): Quotacheck needed: Please wait.
[ 1706.638076][T17497] XFS (loop2): Quotacheck: Done.
[ 1707.210414][T17525] siw: device registration error -23
[ 1708.537164][T16042] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1708.579245][T17531] Need at least one configuration in g_uac2.
[ 1708.590343][T17531] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1708.596910][T17531] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1708.609013][T17531] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1708.633201][T17532] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16)
[ 1708.645719][T17532] i2c i2c-0: Failed to register i2c client tcpci at 0x51 (-16)
[ 1708.967083][T17538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2915'.
[ 1709.117371][T17536] loop5: detected capacity change from 0 to 32768
[ 1709.171548][T17536] JBD2: Ignoring recovery information on journal
[ 1710.927227][T17536] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 1712.111006][T17549] syz.0.2916 (17549): drop_caches: 2
[ 1712.615274][T12491] ocfs2: Unmounting device (7,5) on (node local)
[ 1712.653955][T17559] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16)
[ 1713.128268][T17568] Need at least one configuration in g_uac2.
[ 1713.141278][T17568] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1713.147646][T17568] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1713.179738][T17568] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1713.245406][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2926'.
[ 1715.100291][ T9934] usb 3-1: new full-speed USB device number 37 using dummy_hcd
[ 1715.322754][ T9934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1715.343445][ T9934] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1715.370294][ T9934] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1715.418600][ T9934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1715.448356][ T9934] usb 3-1: config 0 descriptor??
[ 1715.501443][ T9934] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1715.548806][ T9934] dvb-usb: bulk message failed: -22 (3/0)
[ 1715.581830][ T9934] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1715.635732][ T9934] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1715.671989][ T9934] usb 3-1: media controller created
[ 1715.682922][T17567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1715.732558][ T9934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1715.741773][T17567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1715.810730][ T9934] dvb-usb: bulk message failed: -22 (6/0)
[ 1715.855592][ T9934] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1715.911146][ T9934] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input63
[ 1715.979916][ T9934] dvb-usb: schedule remote query interval to 150 msecs.
[ 1716.000889][T17587] siw: device registration error -23
[ 1716.038747][ T9934] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1716.110316][ T9934] usb 3-1: USB disconnect, device number 37
[ 1716.261580][ T9934] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1717.255691][T17595] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16)
[ 1717.726313][T17603] Need at least one configuration in g_uac2.
[ 1717.743060][T17603] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1717.760314][T17603] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1717.792802][T17603] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1718.197216][T17619] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16)
[ 1718.990351][T17627] siw: device registration error -23
[ 1720.469248][T17633] Need at least one configuration in g_uac2.
[ 1720.475959][T17633] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1720.483792][T17633] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1720.494244][T17633] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1720.687919][T17623] loop6: detected capacity change from 0 to 32768
[ 1720.708149][T17623] JBD2: Ignoring recovery information on journal
[ 1720.817864][T17623] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1721.159528][T14173] ocfs2: Unmounting device (7,6) on (node local)
[ 1723.850758][T17663] Need at least one configuration in g_uac2.
[ 1723.865707][T17663] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1723.890211][T17663] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1724.046461][T17663] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1724.437904][T17681] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16)
[ 1724.584542][T17685] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1724.593799][T10815] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[ 1724.794725][T10815] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1724.878159][T10815] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1724.909282][T10815] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1725.630365][T17693] siw: device registration error -23
[ 1725.948621][T10815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1726.618033][T10815] usb 7-1: config 0 descriptor??
[ 1726.653056][T17697] Need at least one configuration in g_uac2.
[ 1726.659243][T17697] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1726.668457][T10815] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1726.673809][T17697] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1726.684550][T17697] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1726.807167][T10815] dvb-usb: bulk message failed: -22 (3/0)
[ 1726.818838][T10815] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1726.828767][T10815] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1726.836139][T10815] usb 7-1: media controller created
[ 1726.843300][T10815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1726.858701][T10815] dvb-usb: bulk message failed: -22 (6/0)
[ 1726.870894][T10815] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1726.881443][T17677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1726.920479][T17677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1726.925513][T10815] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input64
[ 1726.975764][T10815] dvb-usb: schedule remote query interval to 150 msecs.
[ 1727.001477][T10815] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1727.025813][T10815] usb 7-1: USB disconnect, device number 6
[ 1727.194961][T17709] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[ 1728.513769][T10815] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1730.318486][T17723] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16)
[ 1730.409613][T17727] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1730.494779][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.504416][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1730.724818][T17733] Need at least one configuration in g_uac2.
[ 1730.739415][T17733] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1730.747933][T17733] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[ 1730.775820][T17736] loop5: detected capacity change from 0 to 164
[ 1730.782081][T17733] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1731.060279][T10141] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1731.620374][T17741] siw: device registration error -23
[ 1732.802429][T17744] loop5: detected capacity change from 0 to 16
[ 1732.961932][  T788] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[ 1733.003771][T17744] erofs: (device loop5): erofs_read_inode: bogus i_mode (177777) @ nid 36
[ 1733.396798][  T788] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1733.404940][T17753] loop5: detected capacity change from 0 to 512
[ 1733.460503][  T788] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1733.472799][  T788] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1733.489886][  T788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1733.505954][  T788] usb 7-1: config 0 descriptor??
[ 1733.512710][T17753] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1733.522060][  T788] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1733.528770][  T788] dvb-usb: bulk message failed: -22 (3/0)
[ 1733.544092][  T788] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1733.553713][  T788] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1733.575178][  T788] usb 7-1: media controller created
[ 1733.582707][  T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1733.596857][  T788] dvb-usb: bulk message failed: -22 (6/0)
[ 1733.639989][  T788] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1733.683141][  T788] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input65
[ 1733.703111][  T788] dvb-usb: schedule remote query interval to 150 msecs.
[ 1733.712131][  T788] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1733.726073][T17739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1733.742053][T17739] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1733.762510][T17753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1733.801595][  T788] usb 7-1: USB disconnect, device number 7
[ 1733.810010][T17753] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1733.895510][  T788] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1733.918508][   T28] audit: type=1800 audit(1784984253.290:93): pid=17753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2983" name="file1" dev="loop5" ino=15 res=0 errno=0
[ 1734.005508][T17763] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1734.049474][T12491] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1734.401186][T17767] loop5: detected capacity change from 0 to 1764
[ 1734.514717][T17767] iso9660: Corrupted directory entry in block 14 of inode 1920
[ 1734.604086][T17769] i2c i2c-0: new_device: Can't parse I2C address
[ 1738.472000][T17782] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1740.426662][T17789] siw: device registration error -23
[ 1741.182024][T17795] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1741.337648][T17799] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16)
[ 1741.391106][T17799] i2c i2c-0: new_device: Can't parse I2C address
[ 1741.579851][T17801] loop5: detected capacity change from 0 to 164
[ 1741.662112][T10141] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1741.695441][T17801] loop5: detected capacity change from 0 to 16
[ 1741.708751][T17801] erofs: (device loop5): erofs_read_inode: bogus i_mode (177777) @ nid 36
[ 1742.656637][T17814] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1745.940300][T17821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1746.102804][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1746.115500][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1746.133804][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1746.152086][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1746.173287][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1746.190845][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1747.125673][T17838] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1748.038578][T17848] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1749.105153][ T5784] Bluetooth: hci3: command tx timeout
[ 1750.108922][T17857] loop6: detected capacity change from 0 to 32768
[ 1750.135587][T17857] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1750.145958][T17857] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[ 1750.154753][T17857] BTRFS info (device loop6): use zlib compression, level 3
[ 1750.162523][T17857] BTRFS info (device loop6): metadata ratio 0
[ 1750.168649][T17857] BTRFS info (device loop6): turning on sync discard
[ 1750.175499][T17857] BTRFS info (device loop6): using free space tree
[ 1750.357345][T17857] BTRFS info (device loop6): enabling ssd optimizations
[ 1750.545359][   T28] audit: type=1800 audit(1784984269.920:94): pid=17857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3011" name="file0" dev="loop6" ino=258 res=0 errno=0
[ 1751.049955][T14173] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1751.120213][ T5784] Bluetooth: hci3: command tx timeout
[ 1751.234831][T17875] loop5: detected capacity change from 0 to 32768
[ 1751.704291][T17877] loop5: detected capacity change from 0 to 164
[ 1752.082834][T17877] loop5: detected capacity change from 0 to 16
[ 1752.103853][T17877] erofs: (device loop5): erofs_read_inode: bogus i_mode (177777) @ nid 36
[ 1753.072035][T10141] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1753.200423][ T5784] Bluetooth: hci3: command tx timeout
[ 1753.366901][T17823] lo speed is unknown, defaulting to 1000
[ 1755.290259][ T5784] Bluetooth: hci3: command tx timeout
[ 1756.935554][T17823] chnl_net:caif_netlink_parms(): no params data found
[ 1758.408623][ T5982] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1758.687823][T17823] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1758.705764][T17823] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1758.720825][T17823] bridge_slave_0: entered allmulticast mode
[ 1758.740270][T17823] bridge_slave_0: entered promiscuous mode
[ 1758.760840][T17823] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1758.768196][T17823] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1759.290389][T17923] siw: device registration error -23
[ 1760.357591][T17823] bridge_slave_1: entered allmulticast mode
[ 1760.369377][T17823] bridge_slave_1: entered promiscuous mode
[ 1760.560557][ T5982] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1760.632119][T17823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1762.348543][T17823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1762.429823][ T5982] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1762.675176][T17823] team0: Port device team_slave_0 added
[ 1762.763375][T17823] team0: Port device team_slave_1 added
[ 1762.898155][ T5982] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1762.943783][T17951] loop6: detected capacity change from 0 to 512
[ 1763.110443][T17951] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1763.222476][T17823] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1763.229626][T17823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1763.255771][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1763.298469][T17951] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1763.379298][T17951] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1763.478342][T17823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1763.556174][   T28] audit: type=1800 audit(1784984282.940:95): pid=17951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3032" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 1763.565768][T17823] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1763.630279][T17823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1763.656532][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1763.930277][T17823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1764.116518][T17823] hsr_slave_0: entered promiscuous mode
[ 1764.147369][T17823] hsr_slave_1: entered promiscuous mode
[ 1764.170936][T17823] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1764.210399][T17823] Cannot create hsr debugfs directory
[ 1765.129463][T17963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3035'.
[ 1766.448911][T14173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1767.110172][T17823] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1767.241951][T17823] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1767.293974][T17823] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1767.363813][T17999] loop5: detected capacity change from 0 to 512
[ 1767.381600][T17823] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1767.406603][T17999] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1767.472948][T17999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1767.488331][T17999] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1767.556225][   T28] audit: type=1800 audit(1784984286.940:96): pid=17999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3039" name="file1" dev="loop5" ino=15 res=0 errno=0
[ 1767.581062][T17984] loop6: detected capacity change from 0 to 32768
[ 1767.743659][T12491] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1768.173812][ T5982] hsr_slave_0: left promiscuous mode
[ 1768.214839][ T5982] hsr_slave_1: left promiscuous mode
[ 1768.292014][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1768.299558][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1768.371317][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1768.378841][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1768.421560][ T5982] bridge_slave_1: left allmulticast mode
[ 1768.441768][ T5982] bridge_slave_1: left promiscuous mode
[ 1768.447642][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1768.465339][T18017] loop5: detected capacity change from 0 to 512
[ 1768.492438][ T5982] bridge_slave_0: left allmulticast mode
[ 1768.530611][ T5982] bridge_slave_0: left promiscuous mode
[ 1768.551196][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1768.602730][T18017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1768.628007][T18017] ext4 filesystem being mounted at /352/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1768.674760][ T5982] veth1_macvtap: left promiscuous mode
[ 1768.682516][ T5982] veth0_macvtap: left promiscuous mode
[ 1768.688300][ T5982] veth1_vlan: left promiscuous mode
[ 1768.694161][ T5982] veth0_vlan: left promiscuous mode
[ 1769.223105][T12491] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[ 1769.285782][T12491] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[ 1769.669116][T13937] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1770.718273][ T5982] team0 (unregistering): Port device team_slave_1 removed
[ 1770.800471][T18044] siw: device registration error -23
[ 1770.836503][ T5982] team0 (unregistering): Port device team_slave_0 removed
[ 1770.956971][ T5982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1771.073678][ T5982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1771.994057][ T5982] bond0 (unregistering): Released all slaves
[ 1772.294029][   T27] lo speed is unknown, defaulting to 1000
[ 1772.475088][T17823] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1773.401782][T18049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3050'.
[ 1773.488686][T17823] 8021q: adding VLAN 0 to HW filter on device team0
[ 1773.541093][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1773.548390][ T5984] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1773.623015][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1773.630305][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1774.117341][ T5982] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1774.302972][ T5982] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1774.423112][ T5982] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1774.483021][T17823] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1774.583141][ T5982] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1774.849827][T15359] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1774.869115][T15359] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1774.879676][T15359] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1774.899837][T15359] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1774.913887][T15359] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1774.922738][T15359] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1775.054255][ T5982] tipc: Left network mode
[ 1775.165104][T18063] loop6: detected capacity change from 0 to 32768
[ 1777.269011][T15359] Bluetooth: hci1: command tx timeout
[ 1778.024947][T17823] veth0_vlan: entered promiscuous mode
[ 1778.087198][T18077] chnl_net:caif_netlink_parms(): no params data found
[ 1778.219370][T17823] veth1_vlan: entered promiscuous mode
[ 1778.958383][T17823] veth0_macvtap: entered promiscuous mode
[ 1779.019554][T18107] lo speed is unknown, defaulting to 1000
[ 1779.091338][T18107] lo speed is unknown, defaulting to 1000
[ 1779.098037][T18107] lo speed is unknown, defaulting to 1000
[ 1779.117473][T18107] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1779.216005][T17823] veth1_macvtap: entered promiscuous mode
[ 1779.271964][T18107] lo speed is unknown, defaulting to 1000
[ 1779.310908][T15359] Bluetooth: hci1: command tx timeout
[ 1779.631122][T18077] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1779.708906][T18077] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1779.722623][T18077] bridge_slave_0: entered allmulticast mode
[ 1779.731162][T18077] bridge_slave_0: entered promiscuous mode
[ 1779.742742][T18107] lo speed is unknown, defaulting to 1000
[ 1779.830630][T18077] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1779.838051][T18077] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1779.845922][T18077] bridge_slave_1: entered allmulticast mode
[ 1779.854040][T18077] bridge_slave_1: entered promiscuous mode
[ 1779.868406][T18107] lo speed is unknown, defaulting to 1000
[ 1779.876064][T18107] lo speed is unknown, defaulting to 1000
[ 1779.883586][T18107] lo speed is unknown, defaulting to 1000
[ 1780.087260][ T5982] hsr_slave_0: left promiscuous mode
[ 1780.113599][ T5982] hsr_slave_1: left promiscuous mode
[ 1780.135865][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1780.148731][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1780.157426][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1780.169586][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1780.181036][ T5982] bridge_slave_1: left allmulticast mode
[ 1780.186946][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1780.207523][ T5982] bridge_slave_0: left allmulticast mode
[ 1780.213458][ T5982] bridge_slave_0: left promiscuous mode
[ 1780.219330][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1780.266105][ T5982] veth1_macvtap: left promiscuous mode
[ 1780.273850][ T5982] veth0_macvtap: left promiscuous mode
[ 1780.281620][ T5982] veth1_vlan: left promiscuous mode
[ 1780.287044][ T5982] veth0_vlan: left promiscuous mode
[ 1780.702734][T18139] loop6: detected capacity change from 0 to 1024
[ 1780.726082][T18139] EXT4-fs: Ignoring removed orlov option
[ 1780.747326][T18139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1781.023424][T14173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1782.832525][T15359] Bluetooth: hci1: command tx timeout
[ 1782.870629][T18144] 
[ 1782.873046][T18144] ======================================================
[ 1782.880201][T18144] WARNING: possible circular locking dependency detected
[ 1782.887282][T18144] syzkaller #0 Not tainted
[ 1782.891741][T18144] ------------------------------------------------------
[ 1782.898800][T18144] syz.6.3063/18144 is trying to acquire lock:
[ 1782.904911][T18144] ffff888020113910 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430
[ 1782.916561][T18144] 
[ 1782.916561][T18144] but task is already holding lock:
[ 1782.923995][T18144] ffff88805d120120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580
[ 1782.933324][T18144] 
[ 1782.933324][T18144] which lock already depends on the new lock.
[ 1782.933324][T18144] 
[ 1782.944044][T18144] 
[ 1782.944044][T18144] the existing dependency chain (in reverse order) is:
[ 1782.953114][T18144] 
[ 1782.953114][T18144] -> #2 (&opts->dep_lock){+.+.}-{3:3}:
[ 1782.960823][T18144]        __mutex_lock+0x135/0xc80
[ 1782.966024][T18144]        tcm_set_name+0x2a/0x90
[ 1782.970937][T18144]        function_make+0x199/0x350
[ 1782.976138][T18144]        configfs_mkdir+0x515/0x9e0
[ 1782.981384][T18144]        vfs_mkdir+0x2a5/0x470
[ 1782.986222][T18144]        do_mkdirat+0x1dc/0x450
[ 1782.991556][T18144]        __x64_sys_mkdir+0x6e/0x80
[ 1782.996820][T18144]        do_syscall_64+0x55/0xb0
[ 1783.001855][T18144]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1783.008327][T18144] 
[ 1783.008327][T18144] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}:
[ 1783.018115][T18144]        __mutex_lock+0x135/0xc80
[ 1783.023205][T18144]        configfs_rmdir+0x63c/0x980
[ 1783.028510][T18144]        vfs_rmdir+0x352/0x4b0
[ 1783.033770][T18144]        do_rmdir+0x29f/0x590
[ 1783.038495][T18144]        __x64_sys_rmdir+0x49/0x50
[ 1783.043727][T18144]        do_syscall_64+0x55/0xb0
[ 1783.048705][T18144]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1783.055215][T18144] 
[ 1783.055215][T18144] -> #0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}:
[ 1783.064015][T18144]        __lock_acquire+0x37ef/0x7d80
[ 1783.069472][T18144]        lock_acquire+0x19e/0x420
[ 1783.074543][T18144]        down_write+0x97/0x200
[ 1783.079371][T18144]        configfs_depend_item_unlocked+0x157/0x430
[ 1783.086069][T18144]        usbg_make_tpg+0x1f7/0x580
[ 1783.091240][T18144]        target_fabric_make_tpg+0xa4/0x6d0
[ 1783.097282][T18144]        configfs_mkdir+0x515/0x9e0
[ 1783.102536][T18144]        vfs_mkdir+0x2a5/0x470
[ 1783.107347][T18144]        do_mkdirat+0x1dc/0x450
[ 1783.112257][T18144]        __x64_sys_mkdir+0x6e/0x80
[ 1783.117399][T18144]        do_syscall_64+0x55/0xb0
[ 1783.122393][T18144]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1783.128864][T18144] 
[ 1783.128864][T18144] other info that might help us debug this:
[ 1783.128864][T18144] 
[ 1783.139141][T18144] Chain exists of:
[ 1783.139141][T18144]   &sb->s_type->i_mutex_key#23 --> gadget_subsys.su_mutex --> &opts->dep_lock
[ 1783.139141][T18144] 
[ 1783.153980][T18144]  Possible unsafe locking scenario:
[ 1783.153980][T18144] 
[ 1783.161484][T18144]        CPU0                    CPU1
[ 1783.166873][T18144]        ----                    ----
[ 1783.172267][T18144]   lock(&opts->dep_lock);
[ 1783.176715][T18144]                                lock(gadget_subsys.su_mutex);
[ 1783.184891][T18144]                                lock(&opts->dep_lock);
[ 1783.191940][T18144]   lock(&sb->s_type->i_mutex_key#23);
[ 1783.197450][T18144] 
[ 1783.197450][T18144]  *** DEADLOCK ***
[ 1783.197450][T18144] 
[ 1783.205722][T18144] 5 locks held by syz.6.3063/18144:
[ 1783.210962][T18144]  #0: ffff88801f2d8418 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[ 1783.220535][T18144]  #1: ffff88804618d090 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450
[ 1783.231382][T18144]  #2: ffffffff8db2b450 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0
[ 1783.241181][T18144]  #3: ffffffff8de58aa8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf8/0x580
[ 1783.250938][T18144]  #4: ffff88805d120120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580
[ 1783.260647][T18144] 
[ 1783.260647][T18144] stack backtrace:
[ 1783.266557][T18144] CPU: 1 PID: 18144 Comm: syz.6.3063 Not tainted syzkaller #0
[ 1783.274043][T18144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1783.284143][T18144] Call Trace:
[ 1783.287460][T18144]  <TASK>
[ 1783.290428][T18144]  dump_stack_lvl+0x18c/0x250
[ 1783.295422][T18144]  ? load_image+0x420/0x420
[ 1783.300023][T18144]  ? show_regs_print_info+0x20/0x20
[ 1783.305284][T18144]  ? print_circular_bug+0x12b/0x1a0
[ 1783.310631][T18144]  check_noncircular+0x2fc/0x400
[ 1783.315799][T18144]  ? look_up_lock_class+0x75/0x140
[ 1783.321058][T18144]  ? print_deadlock_bug+0x5d0/0x5d0
[ 1783.326291][T18144]  ? lockdep_lock+0xf5/0x230
[ 1783.330911][T18144]  ? __lock_acquire+0x357f/0x7d80
[ 1783.335976][T18144]  ? _find_first_zero_bit+0xd6/0x100
[ 1783.341359][T18144]  __lock_acquire+0x37ef/0x7d80
[ 1783.346350][T18144]  ? is_bpf_text_address+0x28f/0x2a0
[ 1783.351698][T18144]  ? verify_lock_unused+0x140/0x140
[ 1783.356945][T18144]  lock_acquire+0x19e/0x420
[ 1783.361481][T18144]  ? configfs_depend_item_unlocked+0x157/0x430
[ 1783.367686][T18144]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1783.373874][T18144]  ? __might_sleep+0xe0/0xe0
[ 1783.378537][T18144]  ? rcu_is_watching+0x15/0xb0
[ 1783.383337][T18144]  ? read_lock_is_recursive+0x20/0x20
[ 1783.388923][T18144]  ? trace_contention_end+0x39/0xe0
[ 1783.394154][T18144]  ? __mutex_lock+0x30d/0xc80
[ 1783.398875][T18144]  ? do_syscall_64+0x55/0xb0
[ 1783.403581][T18144]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1783.409688][T18144]  down_write+0x97/0x200
[ 1783.414011][T18144]  ? configfs_depend_item_unlocked+0x157/0x430
[ 1783.420381][T18144]  ? down_read_killable+0x340/0x340
[ 1783.425620][T18144]  configfs_depend_item_unlocked+0x157/0x430
[ 1783.431638][T18144]  usbg_make_tpg+0x1f7/0x580
[ 1783.436270][T18144]  ? usbg_drop_tport+0x20/0x20
[ 1783.441153][T18144]  ? vscnprintf+0x80/0x80
[ 1783.445557][T18144]  target_fabric_make_tpg+0xa4/0x6d0
[ 1783.450875][T18144]  ? target_fabric_release_wwn+0xb0/0xb0
[ 1783.456552][T18144]  configfs_mkdir+0x515/0x9e0
[ 1783.461352][T18144]  vfs_mkdir+0x2a5/0x470
[ 1783.465622][T18144]  do_mkdirat+0x1dc/0x450
[ 1783.469998][T18144]  ? vfs_mkdir+0x470/0x470
[ 1783.474475][T18144]  ? getname_flags+0x20a/0x500
[ 1783.479275][T18144]  __x64_sys_mkdir+0x6e/0x80
[ 1783.483960][T18144]  do_syscall_64+0x55/0xb0
[ 1783.488410][T18144]  ? clear_bhb_loop+0x40/0x90
[ 1783.493139][T18144]  ? clear_bhb_loop+0x40/0x90
[ 1783.497845][T18144]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1783.503767][T18144] RIP: 0033:0x7f82f199de99
[ 1783.508336][T18144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1783.528196][T18144] RSP: 002b:00007f82f2899028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 1783.536656][T18144] RAX: ffffffffffffffda RBX: 00007f82f1c25fa0 RCX: 00007f82f199de99
[ 1783.544747][T18144] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000c00
[ 1783.552751][T18144] RBP: 00007f82f1a33eaf R08: 0000000000000000 R09: 0000000000000000
[ 1783.560746][T18144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1783.568826][T18144] R13: 00007f82f1c26038 R14: 00007f82f1c25fa0 R15: 00007ffefa2c7e98
[ 1783.576831][T18144]  </TASK>
[ 1783.579980][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1784.349874][ T5982] team0 (unregistering): Port device team_slave_1 removed
[ 1784.423657][ T5982] team0 (unregistering): Port device team_slave_0 removed
[ 1784.500290][ T5982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1784.563241][ T5982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1784.880458][T15359] Bluetooth: hci1: command tx timeout
[ 1785.000593][ T5982] bond0 (unregistering): Released all slaves
[ 1785.963756][ T5984] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1786.028873][ T5984] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1786.097918][ T5984] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1786.178992][ T5984] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1786.309612][ T5984] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1786.377800][ T5984] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1786.438769][ T5984] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1786.507320][ T5984] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1787.647710][ T5984] bridge_slave_1: left allmulticast mode
[ 1787.653571][ T5984] bridge_slave_1: left promiscuous mode
[ 1787.659383][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1787.673885][ T5984] bridge_slave_0: left allmulticast mode
[ 1787.679612][ T5984] bridge_slave_0: left promiscuous mode
[ 1787.688805][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1787.706464][ T5984] hsr_slave_0: left promiscuous mode
[ 1787.714351][ T5984] hsr_slave_1: left promiscuous mode
[ 1787.726964][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1787.737973][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1787.747200][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1787.757124][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1787.765419][ T5984] bridge_slave_1: left allmulticast mode
[ 1787.775694][ T5984] bridge_slave_1: left promiscuous mode
[ 1787.783019][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1787.794073][ T5984] bridge_slave_0: left allmulticast mode
[ 1787.799782][ T5984] bridge_slave_0: left promiscuous mode
[ 1787.806289][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1787.832876][ T5984] hsr_slave_0: left promiscuous mode
[ 1787.838916][ T5984] hsr_slave_1: left promiscuous mode
[ 1787.847326][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1787.856602][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1787.866478][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1787.875725][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1787.886821][ T5984] bridge_slave_1: left allmulticast mode
[ 1787.895103][ T5984] bridge_slave_1: left promiscuous mode
[ 1787.901126][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1787.912321][ T5984] bridge_slave_0: left allmulticast mode
[ 1787.918028][ T5984] bridge_slave_0: left promiscuous mode
[ 1787.925368][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1787.941954][ T5984] veth1_macvtap: left promiscuous mode
[ 1787.947589][ T5984] veth0_macvtap: left promiscuous mode
[ 1787.956094][ T5984] veth1_vlan: left promiscuous mode
[ 1787.961776][ T5984] veth0_vlan: left promiscuous mode
[ 1787.969049][ T5984] veth1_macvtap: left promiscuous mode
[ 1787.976976][ T5984] veth0_macvtap: left promiscuous mode
[ 1787.984273][ T5984] veth1_vlan: left promiscuous mode
[ 1787.989754][ T5984] veth0_vlan: left promiscuous mode
[ 1788.250478][ T5984] bond0 (unregistering): Released all slaves
[ 1788.478674][ T5984] team0 (unregistering): Port device team_slave_1 removed
[ 1788.517299][ T5984] team0 (unregistering): Port device team_slave_0 removed
[ 1788.554063][ T5984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1788.569305][ T5984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1788.649022][ T5984] bond0 (unregistering): Released all slaves
[ 1788.850757][ T5984] team0 (unregistering): Port device team_slave_1 removed
[ 1788.894578][ T5984] team0 (unregistering): Port device team_slave_0 removed
[ 1788.912587][ T5984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1788.927732][ T5984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1789.012986][ T5984] bond0 (unregistering): Released all slaves
[ 1789.097117][  T788] lo speed is unknown, defaulting to 1000
[ 1790.846814][ T5984] hsr_slave_0: left promiscuous mode
[ 1790.853041][ T5984] hsr_slave_1: left promiscuous mode
[ 1790.859092][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1790.871598][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1790.879652][ T5984] bridge_slave_1: left allmulticast mode
[ 1790.887018][ T5984] bridge_slave_1: left promiscuous mode
[ 1790.892927][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1790.902458][ T5984] bridge_slave_0: left allmulticast mode
[ 1790.908207][ T5984] bridge_slave_0: left promiscuous mode
[ 1790.914165][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1790.926218][ T5984] veth1_macvtap: left promiscuous mode
[ 1790.932060][ T5984] veth0_macvtap: left promiscuous mode
[ 1790.937734][ T5984] veth1_vlan: left promiscuous mode
[ 1790.943173][ T5984] veth0_vlan: left promiscuous mode
[ 1791.245846][ T5984] team0 (unregistering): Port device team_slave_1 removed
[ 1791.279610][ T5984] team0 (unregistering): Port device team_slave_0 removed
[ 1791.295852][ T5984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1791.312793][ T5984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1791.395408][ T5984] bond0 (unregistering): Released all slaves
[ 1791.928246][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.934716][ T1294] ieee802154 phy1 wpan1: encryption failed: -22