last executing test programs:

12m53.094083878s ago: executing program 2 (id=50):
getpid()
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')
pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xac)

12m52.374441569s ago: executing program 2 (id=57):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000d615000008009f000a000000080026000816"], 0x40}}, 0x0)

12m51.704636826s ago: executing program 2 (id=62):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf0e3a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f92b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b17941c4c4fbfac18c8b74e5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c73405baf9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746063d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7b0e000f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c5169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f59d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d00bf58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a60000564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9de9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2c77c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f0000000000000006b050e9319fe88033f830a8490917a9c0572ebbc549000000000000000015a34abef947b5b9a950e780662de18873e55899c92db3ad00437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb00800000000000000ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c040000002b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e400", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}})

12m50.728217047s ago: executing program 2 (id=71):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@errors_remount}]}, 0xfe, 0x596, &(0x7f00000026c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0)

12m49.123401358s ago: executing program 2 (id=77):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0xc0844123, &(0x7f0000002fc0))

12m44.894355765s ago: executing program 2 (id=100):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3d, 0x7fff0000}]})
sendfile(r0, r0, 0x0, 0x40008)

12m44.286856726s ago: executing program 32 (id=100):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3d, 0x7fff0000}]})
sendfile(r0, r0, 0x0, 0x40008)

11m11.894502667s ago: executing program 3 (id=641):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)

11m11.531209193s ago: executing program 3 (id=647):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r2})

11m11.310994357s ago: executing program 3 (id=650):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11m8.969746811s ago: executing program 3 (id=661):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000003900)={0x2020, 0x0, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
setfsgid(0xee00)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r3, @ANYRESOCT=r1, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC=r3, @ANYRESHEX=r2], 0x1, 0x14ee, &(0x7f0000002400)="$eJzs3Au0jtX2MPA511qPW9Kb5L7mmg9v2lgkSS5JckmSJElyS0iSJAmJTW5JSELuSe4hucVO7vdb7klyJEkSEpKsb+ic89ep842+b5y+z/8/9vyNscZecz97rneud77jfZ/n2WPvbzsOrlq/WqW6zAz/Efz7l1QAyAQA/QDgGgCIAKBU9lLZLx3PrDH1P3sQ8dd6aNqVrkBcSdL/9E36n75J/9M36X/6Jv1P36T/6Zv0P32T/guRnm2dnudaGel3yP3/9Ew+/9M36X/6Jv1P36T/6Zv0P32T/qdv0v/0Tfqfvkn/hUjPrvT95/85I+M/nrErXcdfO67wy08IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghRDpxLlxmAOCf8ytdlxBCCCGEEEIIIf46IeOVrkAIIYQQQgghhBD/7yEo0GAgggyQETJBZsgCV0FWuBqywTWQgGshO1wHOeB6yAm5IDfkgbyQD/KDBQIHDDEUgIKQhBugENwIKVAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6Ai3AmV4C6oDFWgKlSDu6E63AM14F6oCfdBLbgfzpX5e5V14SGoBw9DfXgEGsCj0BAaQWNoAk1/n48I8Jv82vAA1IEHf5f/InSFl6AbdIdU6AE94WXoBb2hD/SFfvAK9IdXYQC8BgNhEAyG12EIvAFD4U0YBsNhBLwFI2EUjIYxMBbGwXh4GybAOzAR3oVJMBmmwFSYBtNhBrwHM2EWzIb3YQ58AHNhHsyHBbAQPoRFsBjS4CNYAh/DUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW+AS2wXbYATthF+yGPfAp7IXPYB98Dvvhi//L/LO/y++EgIAKFRo0mAEzYCbMhFkwC2bFrJgNs2ECE5gds//XiyU35sa8mBfzY34kJGRkLIAFMIlJLISFMAVTsAgWQY8ei2NxLIE3Y0ksiaWwFJbG0lgGy2JZLI/lsQJWwIpYESthJayMlbEqVsW78W68B2tgDayJNbEW1sLaWBvrYB2si3WxHtbD+lgfG2ADbIgNsTE2xqbYFJthM2yOzbEltsRW2ApbY2tsg22wLbbFdtgO22N77IAdsCN2xE7YGTvji/givoQvYXesrHpgT+yJvbAX9sG+2Bdfwf74Kr6Kr+FAHISD8XV8Hd/AoXgGh+FwHIEjsIIahaNxDLIah+NxPE7ACTgRJ+IknIyTcSpOw+k4A2fgTJyFs/B9nIMf4Ac4D+fhAlyIC3ERLsY0TMMleBaX4jJcjitwJa7ClbgG1+IaXI8bcD1uwk24BbfgJ/gJbsftuBN34m7cjZ/ip/gZfoYDcT/uxwN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOB7HE3gST+FJPI2n8QyexXN4Ds/jebyAz+f9ut7uwusGgrrEKKMyqAwqk8qksqgsKqvKqrKpbCqhEiq7yq5yqBwqp8qpcqvcKq/Kq/Kr/IoUKVaxKqAKqKRKqkKqkEpRKaqIKqK88qq4Kq5KqBKqpCqpSqlbVWl1myqjyqoWvrwqryqolr6iulNVUpVUZVVFVVXVVDVVXVVXNVQNVVPVVLVULVVbPaDqqB7YBx9SlzpTXw3CBmowNlSNVGPVRL2Bj6lmaig2Vy1US/WEGo7DsLVq5tuop1VbNRrbqWfVGHxOdVDjsKN6QXVSnVUX9aLqqpr7bqq7moQ9VE81FXup3qqP6qtmYhV1qWNV1WtqoBqkBqvX1QJ8Qw1Vb6phargaod5SI9UoNVqNUWPVODVeva0mqHfURPWumqQmqylqqpqmpqsZ6j01U81Ss9X7ao76QM1V89R8tUAtVB+qRWqxSlMfqSXqY7VULVPL1Qq1Uq1Sq9UatVatU+vVBrVRbVKb1Ra1VX2itqntaofaqXap3WqP+lTtVZ+pfepztV99oQ4oTAX4Uh1SX6nD6mt1RH2jjqpv1TH1nTquvlcn1El1Sv2gTqsf1Zlf3xsBQP2sLqhf1EUVFGjUSmttdKQz6Iw6k86ss+irdFZ9tc6mr9EJfa3Orq/TOfT1OqfOpXPrPDqvzqfza6tJO8061gV0QZ3UN+hC+kadogvrIrqo9rqYLq5v0iX0zbqkvkWX0rfq0vo2XUaX1eV0eX27rqDv0BX1nbqSvktX1lV0VV1N362r63t0DX2vrqnv07X0/bq2fkDX0Q/quvohXU8/rOvrR3QD/ahuqBvpxrqJbqof083047q5bqFb6id0K/2kbq2f0m3007qtfka308/q9vo53UE/rzvqF3Qn3Vl30b/oizrobrq7TtU9dE/9su6le+s+uq/up1/R/fWreoB+TQ/Ug/Rg/boeot/QQ/Wbepgerkfot/RIPUqP1mP0WD1Oj9dv6wn6HT1Rv6sn6cl6ip6qp+npus8/Vpr9f5D/zr/JH/Dro2/RW/UnepvernfonXqX3q336D16r96r9+l9er/erw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6JP6J/2DPq1/1Gf0WX1W/6TP6/P6wj+eAzBolNHGmMhkMBlNJpPZZDFXmazmapPNXGMS5lqT3VxncpjrTU6Ty+Q2eUxek8/kN9aQcYZNbAqYgiZpbjCFzI0mxRQ2RUxR400xU9zc9B/n/1l9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL532RSpSkYlMlCHKEGWKMkVZoixR1ihrlC3KFiWiRJQ9yh7liK6Pcka5otxRnihvlC/KH9mIIhdxFEcFooJRMrohKhTdGKVEhaMiUdHIR8Wi4tFNUYno5qhkdEtUKro1Kh3dFpWJykblovLR7VGF6I6oYnRnVCm6K6ocVYmqRtWiu6Pq0T1RjejeqGZ0X1Qruj+qHT0Q1YkejOpGD0X1ooej+tEjUYPo0ahh1ChqHDWJmv6l64dwJtfjvpvtblNtD9vTvmx72d62j+1r+9lXbH/7qh1gX7MD7SA72L5uh9g37FD7ph1mh9sR9i070o6yo+0YO9aOs+Pt23aCfcdOtO/aSXaynWKn2ml2up1h37Mz7Sw7275v59gP7Fw7z863C+xC+6FdZBfbNPuRXWI/tkvtMrvcrrAr7Sq72q6xa+06u95usBvtJrvZbrFb7Sd2m91ud9iddpfdbffYT+1e+5ndZz+3++0X9oD9m1XwpT1kv7KH7df2iP3GHrXf2mP2O3vcfm9P2JP2lP3BnrY/2jP2rD1nf7Ln7c/2gv3FXrTh0sn9pY93MmQoA2WgTJSJslAWykpZKRtlowQlKDtlpxyUg3JSTspNuSkv5aX8lJ8uYWIqQAUoSUkqRIUohVKoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qA76U66i+6iKlSFqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVAml9llcVe5rO5ql81d434f53Z5XF6Xz+V31uV0uf4lJudciivsiriizrtirri76Q9xGVfWlXPl3e2ugrvDVfxDXN3d42q4e11Nd5+r5u7+l7iWu9/Vdo+4Ou5RV9c1cvVcE1ffPeIauEddQ9fINXZNXCv3pGvtnnJt3NOurXvmD/Eit9itdevcerfB7XWfuXPuJ3fUfevOu59dN9fd9XOvuP7uVTfAveYGukF/iEe4t9xIN8qNdmPcWDfuD/EUN9VNc9PdDPeem+lm/SFe6D50c1yam+vmufluwa/xpZrS3EduifvYLXXL3HK3wq10q9xqt+a/al3hNrnNbovb4z5129x2t8PtdLvc7l/jS/vY5z53+90X7oj7xh10X7pD7pg77L7+Nb60v2PuO3fcfe9OuJPulPvBnXY/ujPu7K/7v7T3H9wv7qILDhhZsWbDEWfgjJyJM3MWvoqz8tWcja/hBF/L2fk6zsHXc07Oxbk5D+flfJyfLRM7Zo65ABfkJN/AhfhGTuHCXISLsudiXJxv4hJ8M5fkW7gU38ql+TYuw2W5HJfn27kC38EV+U6uxHdxZa7CVbka383V+R6uwfdyTb6Pa/H9XJsf4Dr8INflh7geP8z1+RFuwI9yQ27EjbkJN+XHuBk/zs25BbfkJ7gVP8mt+Sluw09zW36G2/Gz3J6f4w78PHfkF7gTd+Yu/CJ35Ze4G3fnVO7BPfll7sW9uQ/35X78CvfnV3kAv8YDeRAP5td5CL/BQ/lNHsbDeQS/xSN5FI/mMTyWx/F4fpsn8Ds8kd/lSTyZp/BUnsbTeQa/xzN5Fs/m93kOf8BzeR7P5wW8kD/kRbyY0/gjXsIf81Jexst5Ba/kVbya1/BaXsfreQNv5E28mbfwVv6Et/F23sE7eRfv5j38Ke/lz3gff877+Qs+wH/jg/wlH+Kv+DB/zUf4Gz7K3/Ix/o6P8/d8gk/yKf6BT/OPfIbP8jn+ic/zz3yBf+GLHBhijFWsYxNHcYY4Y5wpzhxnia+Ks8ZXx9nia+JEfG2cPb4uzhFfH+eMc8W54zxx3jhfnD+2McUu5jiOC8QF42R8Q1wovjFOiQvHReKisY+LxcXjm+IS8c1xyfiWuFR8a1w6vi0uE5eNH7mvfHx7XCG+I64Y3xlXiu+KK8dV4qpxtfjuuHp8T1wjvjeuGd8Xl4zvj2vHD8R14gfjuvFDcb344bh+/EjcIH40bhg3ihvHTeKm8WNxs/jxuHncIm4ZPxG3ip+MW8dPxW3ip+O28TN/ejw17hH3jF+OX45DuFfPTy5ILkx+mFyUXJxMS36UXJL8OLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklGUK1jODRK6+98ZHP4DP6TD6zz+Kv8ln91T6bv8Yn/LU+u7/O5/DX+5w+l8/t8/i8Pp/P760n7zz72BfwBX3S3+AL+Rt9ii/si/ii3vtivrhv4pv6pr6Zf9w39y18S/+Ef8I/6Z/0T/mn/NO+rX/Gt/PP+vb+Od/BP++f9y/4Tr6z7+Jf9F39S76b7+5Tfarv6Xv6Xr6X7xOB7+f7+f6+vx/gB/iBfqAf7Af7IX6IH+qH+mF+mB/hR/iRfqQf7Uf7sX6sH+/H+wl+gp/oJ/pJfpKf4qf4aX6an+Fn+Jl+pp/tZ/s5KXP8XD/Xz/fz/UK/0C/yi3yaT/NL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/lD/uv/RH/jT/qv/XH/Hf+uP/en/An/Sn/gz/tf/Rn/Fl/zv/kz/uf/QX/i7/ogx+feDsxIfFOYmLi3cSkzJMTUxJTE9MS0xMzEu8lZiZmJWYn3k/MSXyQmJuYl5ifWJBYmPgwsSixOJGW+CixJPFxYmliWWJ5YkViZWJVIoR82+JQIBQMyXBDKBRuDCmhcCgSigYfioXi4aZQItwcSoZbQqlwaygdbgtlQtlQLjwaGoZGoXFoEpqGx0Kz8HhoHlqEluGJ0Co8GVqHp0Kb8HRoG54J7cKzoX14LnQIz4eO4YXQKXQOXcKLoWt4KXQL3UNq6BF6hpdDr9A79Al9Q7/wSugfXg0DwmthYBgUBofXw5DwRhga3gzDwvAwIrwVRoZRYXQYE8aGcWF8eDtMCO+EieHdMClMDlPC1DAtTA8zwnthZpgVZof3w5zwQZgb5oX5YUFYGD4Mi8LikBY+CkvCx2FpWBaWhxVhZVgVVoc1YW1YF9aHDWFj2BQ2hy1ha/gkbAvbw46wM+wKu8Oe8GnYGz4L+8LnYX/4IhwIfwsHw5fhUPgqHA5fhyPhm3A0fBuOhe/C8fB9OBFOhlPhh3A6/BjOhLPhXPgpnA8/hwvhl3Dx179Z636lbqILIYQQQvyPkfonx3v8m++pf4xLegLA1dvzHP7tcQ0AG3P+fd5b5W2VAICnu3d86J+jcuXU1H8+7lINUcF5AJC4nJ8BLsfLoCU8CW2gBZSAf/766rd6q87n+U/WT94KkOU3OZngcnx5/Zv/7f57q1Fz/nT9eQApBS/nZIbL8eX1S/5v1s/V7E/Wz/zleIDmv8nJCpfjy+sXh8fhGWjzLz8phBBCCCGEEEL8XW9Vrv2fXd9euj7Pay7nZITL8W+vz4UQQgghhBBCCPHf03Oduzz1WJs2LdrL5L/jZLe0SSZXZnKF35iEEEIIIYQQf7nLJ/1XuhIhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEECL9+v/x78Su9B6FEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIK+1/BQAA///apiom")

11m7.038365026s ago: executing program 3 (id=669):
syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000210dc6431450a41d40f157e3512b4b99c026e738de5993f365a0c450b77103ed4a4ce9645d5bda31f3c7059d42c252f8bf6429ca73047cf2160668940f50a78e03514b4a241ac903d9d349a649eb2abefc56cd1ad4da51bca4e370cad9401e0899238a3ce2fbe0aab556b9ba4341a9906debdb2646298351fb5b7ae6dbf1698f4eb5cd65fab44cdf71"], 0xfd, 0x6a5, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
statx(0xffffffffffffff9c, &(0x7f000000b680)='.\x00', 0x2000, 0x1180, &(0x7f000000b6c0))

11m5.887003339s ago: executing program 3 (id=674):
syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000140)='./file1\x00', 0x1210088, &(0x7f0000000500)=ANY=[], 0x7, 0x326, &(0x7f0000000b00)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078)

10m50.794332646s ago: executing program 33 (id=674):
syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000140)='./file1\x00', 0x1210088, &(0x7f0000000500)=ANY=[], 0x7, 0x326, &(0x7f0000000b00)="$eJzs3U1rE00AB/D/7CZp8rT0WdtKwWO14Km09aB4sUjx4hfwIMXapFCyVtAKWhCjZxFvguDRm2fRr6AX8QvoqQfxpJfgwZWZ3c2+dHazm22zKfn/oMkmO687M7szCemCiMbW1fVvby8cyD9RBWACuAwYAOpABcBpzNcf7O7t7NmtZlpCpooh/wTcmOJQmK3dli6qjKdieCz5qoKp8Ht0PBzHcb73DfVrKGWh8gh37B9iABPe6FT760Mv2fHouPUaL6EWFl108RDTZRaHiIjK513/De8qMeXN3w0DWPTm4Sf9+h+Z33TLK8dI6F3/Dfe1I+Tx+V/tCtZ7agknW9/wV4m6tLR9wgkOdw1uz4o0gOi3qlRlMRrbO3ZrqaMSeIYrnlCwOfXYhF8RJam0NfdpQbM2TZFW93STqg5VWYfVhPLP5s7x4w+80me38TlDmcQn8UVsCAuv0ezN/yqOkAdHHR8r1lJu+ZeTU1S1tNxQkVoG6/dTKpMzfgt8eBfUspF0XOswZVl0ZCoiPn+3/HK+rCXHwgyiHyu4tVtJrp2KNauNtdp7/Ucbay4eq7FdtVtLW3ft1I9Siur4G9oVnXghbogF/MR7rIfm/4YMvYjkkRkZ5UKF9HpGan0qKmRCO0aoAXwn18gk5Zq2odM9x21cwvT9R/vtTdtu3RtkQ3aJAtFjG/5QObIEi224HdHrjvId+RwKg7rcqAI4skz/Oo6j3VVBkZSRMXBVVfXim6DK++1N4Z1NilVQnpNiu9aSAwNYC7qWf0YYJPcnvVgTOfvqb9na6h19h/RLNYQO6WcV2WViItNIaQyQ6fXH7U0701nEyX/ioVESNDrmb5ZdGCqDnHcJd/0XWq8sq7OOfLBSViN9x38oxZWEFdCMevwv2wqul2ziPHHS3+iz5jp7HjgXy9GAn+PTeLKWV06M4reS+b/KEOv4ilv8/J+IiIiIiIiIiIiIiIiIiIiIiIiI6KTJ+2uEQX5OEM3xYAz/8QYRERERERERERERERERERERERERERERUTGh+/8CprpjTK30+/+aGe7/Kzo5aklEOv8CAAD//6ToYAA=")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078)

5m5.565779312s ago: executing program 4 (id=2878):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x0, {0xc9e5fcc43f256b3, 0x1, 0x4}, 0x2}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000100)=0x20001, 0x4)
sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004)
readv(r0, &(0x7f0000000880)=[{&(0x7f0000000580)=""/190, 0xbe}], 0x1)

5m5.269361444s ago: executing program 4 (id=2881):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40010)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x50, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/344], 0x4, 0x5525, &(0x7f00000014c0)="$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")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x146142, 0x90)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7000, 0x0, 0x3)

5m4.380521404s ago: executing program 4 (id=2885):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
close(r0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800)

5m3.765265166s ago: executing program 4 (id=2889):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
move_mount(r1, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x204)

5m3.627101749s ago: executing program 4 (id=2891):
pipe(&(0x7f00000001c0))
close(0x4)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(0x4)
r1 = socket$netlink(0x10, 0x3, 0x4)
splice(r1, 0x0, r0, 0x0, 0x81, 0x6)

5m1.773772679s ago: executing program 4 (id=2901):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0)

5m0.725538896s ago: executing program 34 (id=2901):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0)

4m53.017514327s ago: executing program 0 (id=2957):
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x3, 0x2, 0x6], [0x6, 0x7, 0x1, 0x5, 0x80000000008002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x2a3b, 0xc, 0xdd, 0x5, 0x1, 0x2a6, 0x2000000003, 0xc3d, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x2, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x7, 0x6a8, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0x8f, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0xbf4, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m51.887274166s ago: executing program 0 (id=2961):
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x9]}})

4m51.484862576s ago: executing program 0 (id=2963):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m51.194506497s ago: executing program 0 (id=2964):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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")
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
rmdir(&(0x7f00000003c0)='./file1\x00')
chdir(&(0x7f00000000c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0)

4m50.012668332s ago: executing program 0 (id=2967):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
close(0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff000)

4m45.249072171s ago: executing program 0 (id=2981):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x80}, @ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24010}, 0x4)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)

4m44.813822113s ago: executing program 35 (id=2981):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x80}, @ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24010}, 0x4)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)

2m7.2231465s ago: executing program 7 (id=3815):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x6c}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

2m4.489872244s ago: executing program 7 (id=3828):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @remote}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)

2m3.697170476s ago: executing program 7 (id=3830):
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
close(0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)

2m3.057633391s ago: executing program 7 (id=3832):
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), 0x800, 0x0)

2m2.783134047s ago: executing program 7 (id=3833):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x9)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0xfca85826a176b95e, 0xb, 0xe16, 0xfffffffc, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0xa, '\x00', 0xb}, {0xff, 0x7f, 0xd4, '\x00', 0x67}, {0x6, 0x2, 0xf5, '\x00', 0xf}, {0x1, 0x1, 0x9, '\x00', 0xfe}, {0x0, 0x3, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x10}, {0x3, 0xc0, 0x10, '\x00', 0xff}, {0x7f, 0xf, 0x80, '\x00', 0x7}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0xc, 0x7, '\x00', 0xdc}, {0x48, 0x1, 0x5, '\x00', 0x1}, {0xff, 0x1, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0x1, 0xa, '\x00', 0x3}, {0x39, 0x3, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x3, 0x3, 0x7, '\x00', 0x1}, {0x1, 0x83, 0x1, '\x00', 0x7f}, {0x1, 0xc, 0x65, '\x00', 0x7f}, {0x10, 0x25, 0x3, '\x00', 0x30}, {0xff, 0x23, 0xf3}, {0x7, 0x6, 0x7, '\x00', 0x8}]}})

1m59.354969617s ago: executing program 7 (id=3847):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='\x00', 0x1, 0x4001, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r1, 0x1)

1m58.786222849s ago: executing program 36 (id=3847):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='\x00', 0x1, 0x4001, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r1, 0x1)

1m58.766560205s ago: executing program 6 (id=3851):
socket(0xa, 0x3, 0xff)
socket(0x1d, 0x2, 0x6)
socket$unix(0x1, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r0], 0x38}}, 0x10)

1m58.502194559s ago: executing program 6 (id=3852):
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
r1 = gettid()
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8)
timer_create(0x2, &(0x7f00000001c0)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f0000000180)=<r2=>0x0)
timer_settime(r2, 0xe54aef35e9c2845d, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0)

1m58.25887982s ago: executing program 6 (id=3854):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r4=>0x0], 0x0, 0x0, 0x59, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000900)={0x0, 0x0, r4, r2, 0x3ff, 0x0, 0x5, 0x9b3, {0x88, 0x0, 0x9, 0x3, 0x6, 0x7, 0x81, 0x100, 0x7ff, 0x9, 0x7ff, 0x9, 0x7ffffffe, 0x5, "0f04f0ba4f47f47a4b19b6fb42472e94a6a931bf76eb265c263dd1d04560344e"}})

1m57.703705533s ago: executing program 6 (id=3855):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
shutdown(r0, 0x1)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

1m56.649935008s ago: executing program 6 (id=3860):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
syz_usb_disconnect(r0)
syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0)

1m52.982575344s ago: executing program 6 (id=3875):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b<B\xc3k\xcd\x01\xe4\x05\n!\x02Y\xc7`ooveu`z\xb9\xf5r\xc0c\x95\xcbQbj5\xb1\x8f\xb9J\xa9#\x13\x92\x05H\x91\xa5\xdfxM\nD\xc70\xa11B\xf1\xab\xccw\x17\xbf\xc8W\xec\xb88\xc9\x1b*h\xc3c\x89n\x89ic\xfd\x9c\xfa~\xb5$VG\x85\xc2\x86\x89}*\x99\xda\x94\xba)\xb9b\xeb\xe9\x0f{V%TD\xbc\xee\x96C\x89No\xc9\n\x91\xe0\xfcqE4\x8c', 0x3a, '\x8c\xf0<\x06\xd3=(\xa0\x96k\xd8cf\x92\xd1\xed\xf5\x00\x00\xb5\xff\xd9o\x1c.\xecU \xc8\x12\xacf\x15I)S\xa5\xdb\x8f!\x8aA\xee$\x0e\x16\xf7wL\x9c~8\x10\xd2\nJ,D;Z \x92\xccY\xd7', 0x3a, './cgroup.cpu/cpuset.cpus/file0'}, 0x147)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

1m20.435623202s ago: executing program 5 (id=3990):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
syz_emit_ethernet(0x11, &(0x7f0000000940)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @local, @void, {@x25={0x805, {0x3, 0xbd, 0x1}}}}, 0x0)

1m20.195435703s ago: executing program 5 (id=3991):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x87, @private1, 0x3}, 0x1c)

1m19.921399685s ago: executing program 5 (id=3992):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f00000062c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x8001}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x400000000000, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x116)

1m19.512244902s ago: executing program 5 (id=3993):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x10cd0e0, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)

1m18.276494873s ago: executing program 5 (id=3997):
landlock_create_ruleset(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
socket$inet(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)

1m15.921256322s ago: executing program 5 (id=4007):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[], 0x19c}}, 0x4000)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)=""/67, 0x43}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/88, 0x58}], 0x3}, 0x2000)
sendmmsg$alg(r1, &(0x7f0000000e80)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="8c3371918b1475730009fcac9d6e7dd64b", 0x11}], 0x1, 0x0, 0x0, 0x50}], 0x1, 0x50)

1m15.523964826s ago: executing program 37 (id=4007):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[], 0x19c}}, 0x4000)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)=""/67, 0x43}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/88, 0x58}], 0x3}, 0x2000)
sendmmsg$alg(r1, &(0x7f0000000e80)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="8c3371918b1475730009fcac9d6e7dd64b", 0x11}], 0x1, 0x0, 0x0, 0x50}], 0x1, 0x50)

1m5.549801613s ago: executing program 8 (id=4036):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x50)
write(r1, &(0x7f00000002c0)="04", 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8)

1m5.404831179s ago: executing program 8 (id=4037):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

1m3.466129608s ago: executing program 8 (id=4040):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r1 = getpid()
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', <r3=>0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r3, 0x0, 0x0, 0x0, 0x4, 0x8, @empty, @empty, 0x0, 0x1, 0xfffffffe, 0x1}})
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, 0x0)

1m2.606643763s ago: executing program 8 (id=4042):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)

1m2.605312654s ago: executing program 8 (id=4043):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r0, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008055}, 0x44040)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x2}}}, 0x5)

1m0.762238296s ago: executing program 8 (id=4050):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)={0x40000001})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000003c0)={0x1})

1m0.374608721s ago: executing program 38 (id=4050):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)={0x40000001})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000003c0)={0x1})

5.298304231s ago: executing program 1 (id=4156):
capset(0x0, 0x0)
fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
r0 = eventfd2(0x50, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000001240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r0, @ANYRESHEX=r3], 0x15)

5.144486709s ago: executing program 1 (id=4157):
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000200)='./bus\x00', 0x2010805, &(0x7f0000000000)={[{@order_strict}, {@errors_continue}, {@discard}, {@nobarrier}, {@order_relaxed}]}, 0x3, 0xd97, &(0x7f0000000e80)="$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")
ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x67)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[])
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020)

4.824177382s ago: executing program 1 (id=4158):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f)
openat(0xffffffffffffff9c, 0x0, 0x4c142, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r0, r0, 0x0, 0x7f03)

3.328714657s ago: executing program 1 (id=4159):
r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000bc0)='j\x95\'\x8aC\x16\xca\\\xb0e\xb8n\x8a\b2C:\t\x12\xfd\xd9\xdf\x1b\xe8\x87\xe21\xd2\x1a\x18x6\x8b\x04\xc79\x122\xfc\x1f\b~[\xf2L\xf8\xcdO/\a\xbdJ\xb1\\\xe2\xef\xd6\xc3>U\x81\xff\xc2\xcb@_\xe1\xd2\xb63\xcd\xe3Q|\x02\x91\xf8\xd6\xd7+\xcc\x94\x96Vg\x90w4\xd2*+J\x80\\:|Q\xc9\xa2\xd9\xd05\x87\x8c\x04\xab\xaa\x8d\xa0f\xbd\xcb\x95\x97\x9f\xf0`&', &(0x7f0000000b00)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000340)='\xe6\xd2=(L\x9f\x1c&\xdae\xf5\xfa\x01\x00\x00\x004L<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f00000004c0)="b1", 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001880)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x8f%j7\xf7\x98\xc2?\xc6\xc9wo\xec\x19-\xec\x1c\xa9+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\b\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jw\xf1\xf8oG<\t\x00\x18\x80\xe1Kf\xf8\xd2\xdd\x06\xe8\xfbl\v\xb0\xdd\x05\x05\xd8\xdb\xfdB\xcfL`\xf9\xf8\x91<\b\x8c\xad\xc8\x9d=\xfeN\x8b\x1eR\x1e\xf8\x9dn\x19H\xd2aE\xa0\x06\xb0Yv\xf9^\x8c\xbd\xc3\xa5\x985\x85U\x8cZ/\'\xbd\xe2\xdc\xe3\xb9\x8e$Z\xef\xa8\xe5(Mt\xd3\xd9\xf6X\x1a\x9b\t$N\xd0U\xe2z\xeb\x01\x80!0\xe8\xc3\xce\xf8\x03\xde\x92s\xf9[ngE[6c\xbc\xdb\x97\x11\xd5\xea\xc2\xc6\xff\xd5\xf5\xa4\x9f\xc1kY\x9c\"\x06\xa5+\x9c\xea\x9b/_\xd4\xfa\xee|\xa8\xce\xb9t\x89\x18B\xf2~\x7f\xd6\x99\xac8p\xed\xd0\x88|\x9d,ivf3\xec\xcfY\x03,[\xdeO\x1d\x1c\x01&\x1a\x00\x8f\xd8}\xbf\xc4_oK\xb6X[K\xc7\xc6\xae\x80\xf3M\x13\xc9kzP\xd1\x8d\x19[\x01\x00', &(0x7f00000019c0)='f0\xd8\xffXH\x06\x92b0\xc5\x18KZ\xf0\b\vuseblk\xe1L\x92#\x05zcX35\r\xad@\x853o\x0f0\x1a\xc0\"\xf6\x11Z\x01\xc1\xd9\x9fb\xc3_V\x9cT\x1b\x86W\x9e\x87\xe8\x9cz\xe6{\xabyFH\x8b\xdd\xb5 KgK\x9eJ7\xd1\xad\xe1i\x99Y\xe2\x88%\x92\xb3-\xb60O \xc7\xd1q\xcc\x97\xe0\xe8\xb0\n\v\xa9V\xa1\x1d\xf6\x00\x00\x00\x00\x98T\x81\xa2@{_\xba^\xa2\x82khG\xfc\xd4\x99Pl\xfa\xc1\x11\"\x01g4\x00\x00\x00\x00\xc9 h\xd0\xfd\x04\x95\x8c\xb1\xe7\x00\x00)\x96J\xe5n\xa1c\x0f\xe6\x93.S\xd1\xd3R\xa7\xc5\x19\x00\x01\x00\x00XQS5|Q\xdc\x9d\xc7\x81OV\x91\x84?],\xc1\xe0\xea\xbd^\x1a\x84!\xea\xb6\x04\xccdr\xf1\xb4\r\x8a\xd3\a\xeeb\x18\xacA\x16\x7f\xdcP\x0f\xa0\x95bSg\x02g\xa1\xe1\x84\xc5\x9d\x03;}j\xceQ\x0e\x15\xaa\xcbwM\xc3\x8b\x97G\xaf\x1b\xe7\x95\xc3A\xc8B\x98\xbe\xbfW\x05\x1ac;AW\xfa\x9c\xf0)3\x9cu\xe2\xd3\r\xe6\xd1\x8a\f\x9d]\x81`\xc5\xfc\xb1\xf8\a_h9\xa6\xc9\x98,\xbf\xf8\xad\xfc\x81u\x9de\xfd)\xf7B\xf9\xb7\xe3\xc7\xe5\xe9B\xfe\x97\xfe\xe2,\x18\xaf)\x1a\xd9\xea\xbbNP\xd86V\x01\x13\xb3\x94\x9e\x01\x0e8\xe2Q\">\t\r.\xce\x9c\xc1/J&8\x8a.\xfc\xc2\xa4}\xef^\x18\x19\xdd\xa29\xf7p&\x8c\xa6k\x1b\xdb\xf9\xb1\x1f8j\xfb\xd5\x1f\xe9g\xfb\x9a\x03-\xcd|\x05)\xac\x90!\x00\x06\xa03\x01\b\x90\xbc\x96\xf8\x1f\x9e\xf5\x9b\n{p\x13\"\xfa\xb2E\xa6\xc3[\xd5Z\x8d\xf3\xcb\xaf\xcdOQbp\x1c\x81zg-nv\xfaD\xcbL?\x83\x01\x16!\xfa35a\x103\"\x8d\xb3\xe7\r>C\xc5\x01UbG(\x01\n]\xbfg{#u\xb6\xbaO\x1e\xad\xcd\xf6D\xec\xcf6\xd5\xf8\xf5\xd9\x9a\x19+\x89\xdc_\xff', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000680)='P\xfc#N\x1d\x04\x00\x01\x00\x00\x00\x00\x00\x00\x04\x00\xbe\xd8\x83M\x1a\x06mEy\xcf\xb7\xb1\xd0N\x01\x03}\v\xcc\xaaca$|U\xdd\x1fhM\xa6\xa4-\x84Y\x0f\xdd\"\xf0\xf8\x1e\x84H\x7f\xf5*\x88\x8c\x0fF#-)\xa1|\xc2\x17\x1e\xedq*n\xaeT\xbc\xc7fJL\xa3Jq\xd8\xc5S\xed\xb3\fH\xe7kC\xcf', &(0x7f0000000900)="0e", 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='(\xed\xef(.(\\-]\x00', &(0x7f00000000c0)='f\xf0p\xce\x97\xbb\xd2dH\xdf\xbd\x18\x9baE\xef\x90\x90\x057g\x85\xf4\xf0\xba\xb0\xb1\x06\xa6q\xef\x03H\xda\"`\xd6', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='\x82,J\xa6)\xae31\x9b+\x91bYg\x9e\x0f\x16\x0e\x04f)\xb4H\x1d\x03\x80\x94\xd7\xc0\x97\xad1A\xbb9\xc9It\xad\xa2\x14o\x1a\xe5\xce\xcb\n^\xb6\xf1\xf6\x01F\fk\xf2\xce\x01\x86Q\xe1\xf3\xb8hU2A\vj\xd7\x03f\xc1q\x81\xd1\xd5\xb7\xd2\xfe\xa9+\x14\x92\xc0X=<\xb8\x16\xbbC`\x1cY\r\x04\xed\x12?\x17\xf7?\xc7\xb9\xe2Q\xda\xdc\x93\x99\xd7\x90\x16/\xb6!\xe3\xf7\xb4\xbe\x1c\xe6\xf6a\xe0o\x8cg]\xc5\xc7\xcenBpj\x1aM\xdb3\xbe>\xe8G\xd2x`*\x99\x15\xa0/\xc2yOR\x1c\xc6D\xb8)\xec(\xaf\xae\xed*\x10@\'', &(0x7f0000000100)='\b\x00\x00\x00', 0x0)
close(r0)

2.07201112s ago: executing program 1 (id=4160):
openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x10b85, 0x49800}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x0)

0s ago: executing program 1 (id=4161):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

meout
[  718.925252][T15612] XFS (loop8): Ending clean mount
[  719.035227][T15612] XFS (loop8): Quotacheck needed: Please wait.
[  719.052224][T15591] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  719.331606][ T5743] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  719.491565][ T5743] usb 6-1: Using ep0 maxpacket: 16
[  719.499356][ T5743] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[  719.499386][ T5743] usb 6-1: config 0 has no interface number 0
[  719.499524][ T5743] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  719.499553][ T5743] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  719.544835][ T5743] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  719.544870][ T5743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  719.544893][ T5743] usb 6-1: Product: syz
[  719.544909][ T5743] usb 6-1: Manufacturer: syz
[  719.544925][ T5743] usb 6-1: SerialNumber: syz
[  719.551227][T15634] (syz.7.3522,15634,0):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options
[  719.614548][ T5743] usb 6-1: config 0 descriptor??
[  719.620628][T15631] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  719.620774][T15631] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  719.711897][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  719.828615][T15631] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  719.828716][T15631] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  720.033938][ T5627] Bluetooth: hci1: command tx timeout
[  720.053844][ T5743] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  720.757344][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  720.881171][ T5743] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  720.881653][ T5743] asix 6-1:0.34: probe with driver asix failed with error -71
[  721.067116][ T5743] usb 6-1: USB disconnect, device number 34
[  721.207489][T15612] XFS (loop8): Quotacheck: Done.
[  721.454031][T14604] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  721.662636][T14604] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  721.662668][T14604] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.662688][T14604] usb 7-1: Product: syz
[  721.662702][T14604] usb 7-1: Manufacturer: syz
[  721.662715][T14604] usb 7-1: SerialNumber: syz
[  721.803111][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  722.008353][T14604] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  722.354755][T15643] loop1: detected capacity change from 0 to 32768
[  722.814704][T15658] loop5: detected capacity change from 0 to 64
[  722.832084][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  722.867399][T13792] ocfs2: Unmounting device (7,7) on (node local)
[  723.027994][T15643] read_mapping_page failed!
[  723.028019][T15643] ialloc: diAlloc returned -5!
[  723.460083][ T5743] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  723.883452][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  724.067867][ T5836] usb 7-1: USB disconnect, device number 21
[  724.188614][ T5743] usb 7-1: ath9k_htc: Unable to allocate URBs
[  724.281095][ T5836] usb 7-1: ath9k_htc: USB layer deinitialized
[  724.559424][T14010] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  724.924154][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  725.454529][T15686] tls_set_device_offload_rx: netdev not found
[  725.952168][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  726.256735][T15680] loop7: detected capacity change from 0 to 40427
[  726.276391][T15680] F2FS-fs (loop7): build fault injection rate: 174
[  726.276420][T15680] F2FS-fs (loop7): build fault injection type: 0x3bfe8c
[  726.277570][T15680] F2FS-fs (loop7): invalid crc value
[  726.992605][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  727.389746][T15680] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  727.702982][T15680] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  727.716069][T14604] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  727.801641][T15727] loop1: detected capacity change from 0 to 4096
[  727.879857][T14604] usb 6-1: Using ep0 maxpacket: 16
[  727.894801][T14604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  727.894838][T14604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  727.894878][T14604] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  727.894902][T14604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.952597][T14604] usb 6-1: config 0 descriptor??
[  728.043626][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  728.087666][T15680] syz.7.3555: attempt to access beyond end of device
[  728.087666][T15680] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  728.440761][T15732] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  728.502190][T15733] loop8: detected capacity change from 0 to 256
[  728.542636][T13792] syz-executor: attempt to access beyond end of device
[  728.542636][T13792] loop7: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[  728.598921][T14604] usb 6-1: language id specifier not provided by device, defaulting to English
[  728.665808][T13792] CPU: 0 UID: 0 PID: 13792 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  728.665851][T13792] Tainted: [L]=SOFTLOCKUP
[  728.665859][T13792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  728.665874][T13792] Call Trace:
[  728.665882][T13792]  <TASK>
[  728.665892][T13792]  dump_stack_lvl+0xe8/0x150
[  728.665930][T13792]  f2fs_stop_checkpoint+0x3ef/0x5d0
[  728.665976][T13792]  f2fs_write_end_io+0x1274/0x1740
[  728.666030][T13792]  __submit_merged_bio+0x256/0x6a0
[  728.666054][T13792]  ? rcu_is_watching+0x15/0xb0
[  728.666095][T13792]  __submit_merged_write_cond+0x3c9/0x4e0
[  728.666144][T13792]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  728.666207][T13792]  f2fs_write_data_pages+0x287e/0x34f0
[  728.666286][T13792]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  728.666313][T13792]  ? __enqueue_entity+0x27f/0xb70
[  728.666387][T13792]  ? __lock_acquire+0x6b5/0x2d10
[  728.666417][T13792]  ? __lock_acquire+0x6b5/0x2d10
[  728.666464][T13792]  ? do_raw_spin_lock+0x12b/0x2f0
[  728.666498][T13792]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  728.666532][T13792]  ? lockdep_hardirqs_on+0x7a/0x110
[  728.666552][T13792]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  728.666585][T13792]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  728.666611][T13792]  do_writepages+0x32e/0x550
[  728.666635][T13792]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  728.666664][T13792]  ? rt_spin_unlock+0x14f/0x200
[  728.666700][T13792]  filemap_fdatawrite+0x1ec/0x2f0
[  728.666728][T13792]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  728.666752][T13792]  ? __lock_acquire+0x6b5/0x2d10
[  728.666812][T13792]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  728.666847][T13792]  ? rt_spin_unlock+0x160/0x200
[  728.666876][T13792]  f2fs_sync_dirty_inodes+0x30e/0x830
[  728.666917][T13792]  f2fs_write_checkpoint+0x9ce/0x25a0
[  728.666943][T13792]  ? __lock_acquire+0x6b5/0x2d10
[  728.667000][T13792]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  728.667078][T13792]  kill_f2fs_super+0x314/0x730
[  728.667109][T13792]  ? __pfx_kill_f2fs_super+0x10/0x10
[  728.667148][T13792]  ? lockdep_hardirqs_on+0x7a/0x110
[  728.667181][T13792]  deactivate_locked_super+0xbc/0x130
[  728.667211][T13792]  cleanup_mnt+0x437/0x4d0
[  728.667249][T13792]  ? _raw_spin_unlock_irq+0x23/0x50
[  728.667272][T13792]  task_work_run+0x1d9/0x270
[  728.667303][T13792]  ? __pfx_task_work_run+0x10/0x10
[  728.667340][T13792]  exit_to_user_mode_loop+0x193/0x680
[  728.667366][T13792]  ? rcu_is_watching+0x15/0xb0
[  728.667397][T13792]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.667419][T13792]  do_syscall_64+0x353/0x580
[  728.667439][T13792]  ? trace_irq_disable+0x3b/0x140
[  728.667464][T13792]  ? clear_bhb_loop+0x40/0x90
[  728.667488][T13792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.667508][T13792] RIP: 0033:0x7f2f1a78e097
[  728.667529][T13792] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  728.667548][T13792] RSP: 002b:00007ffe5f82e348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  728.667570][T13792] RAX: 0000000000000000 RBX: 00007f2f1a8221ca RCX: 00007f2f1a78e097
[  728.667584][T13792] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5f82e400
[  728.667597][T13792] RBP: 00007ffe5f82e400 R08: 00007ffe5f82f400 R09: 00000000ffffffff
[  728.667610][T13792] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe5f82f490
[  728.667623][T13792] R13: 00007f2f1a8221ca R14: 00000000000b1a41 R15: 00007ffe5f82f4d0
[  728.667654][T13792]  </TASK>
[  728.667743][T13792] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  728.787790][T13792] CPU: 1 UID: 0 PID: 13792 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  728.787874][T13792] Tainted: [L]=SOFTLOCKUP
[  728.787895][T13792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  728.787922][T13792] Call Trace:
[  728.787931][T13792]  <TASK>
[  728.787941][T13792]  dump_stack_lvl+0xe8/0x150
[  728.788003][T13792]  f2fs_stop_checkpoint+0x3ef/0x5d0
[  728.788093][T13792]  f2fs_write_end_io+0x1274/0x1740
[  728.788174][T13792]  __submit_merged_bio+0x256/0x6a0
[  728.788236][T13792]  ? rcu_is_watching+0x15/0xb0
[  728.788280][T13792]  __submit_merged_write_cond+0x3c9/0x4e0
[  728.788375][T13792]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  728.788461][T13792]  f2fs_write_data_pages+0x287e/0x34f0
[  728.788602][T13792]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  728.788631][T13792]  ? __enqueue_entity+0x27f/0xb70
[  728.788789][T13792]  ? __lock_acquire+0x6b5/0x2d10
[  728.788845][T13792]  ? __lock_acquire+0x6b5/0x2d10
[  728.788936][T13792]  ? do_raw_spin_lock+0x12b/0x2f0
[  728.789004][T13792]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  728.789097][T13792]  ? lockdep_hardirqs_on+0x7a/0x110
[  728.789120][T13792]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  728.789218][T13792]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  728.789262][T13792]  do_writepages+0x32e/0x550
[  728.789291][T13792]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  728.789372][T13792]  ? rt_spin_unlock+0x14f/0x200
[  728.789435][T13792]  filemap_fdatawrite+0x1ec/0x2f0
[  728.789483][T13792]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  728.789517][T13792]  ? __lock_acquire+0x6b5/0x2d10
[  728.789618][T13792]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  728.789710][T13792]  ? rt_spin_unlock+0x160/0x200
[  728.789758][T13792]  f2fs_sync_dirty_inodes+0x30e/0x830
[  728.789850][T13792]  f2fs_write_checkpoint+0x9ce/0x25a0
[  728.789906][T13792]  ? __lock_acquire+0x6b5/0x2d10
[  728.790018][T13792]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  728.790163][T13792]  kill_f2fs_super+0x314/0x730
[  728.790242][T13792]  ? __pfx_kill_f2fs_super+0x10/0x10
[  728.790302][T13792]  ? lockdep_hardirqs_on+0x7a/0x110
[  728.790393][T13792]  deactivate_locked_super+0xbc/0x130
[  728.790431][T13792]  cleanup_mnt+0x437/0x4d0
[  728.790544][T13792]  ? _raw_spin_unlock_irq+0x23/0x50
[  728.790572][T13792]  task_work_run+0x1d9/0x270
[  728.790621][T13792]  ? __pfx_task_work_run+0x10/0x10
[  728.790722][T13792]  exit_to_user_mode_loop+0x193/0x680
[  728.790753][T13792]  ? rcu_is_watching+0x15/0xb0
[  728.790841][T13792]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.790887][T13792]  do_syscall_64+0x353/0x580
[  728.790911][T13792]  ? trace_irq_disable+0x3b/0x140
[  728.790954][T13792]  ? clear_bhb_loop+0x40/0x90
[  728.791027][T13792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.791057][T13792] RIP: 0033:0x7f2f1a78e097
[  728.791080][T13792] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  728.791114][T13792] RSP: 002b:00007ffe5f82e348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  728.791176][T13792] RAX: 0000000000000000 RBX: 00007f2f1a8221ca RCX: 00007f2f1a78e097
[  728.791205][T13792] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5f82e400
[  728.791220][T13792] RBP: 00007ffe5f82e400 R08: 00007ffe5f82f400 R09: 00000000ffffffff
[  728.791237][T13792] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe5f82f490
[  728.791258][T13792] R13: 00007f2f1a8221ca R14: 00000000000b1a41 R15: 00007ffe5f82f4d0
[  728.791348][T13792]  </TASK>
[  728.837314][T13792] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  729.091635][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  729.101177][T14604] letsketch 0003:6161:4D15.0027: Device info: 
[  729.539349][T14604] usb 6-1: Max retries (5) exceeded reading string descriptor 201
[  729.539439][T14604] letsketch 0003:6161:4D15.0027: probe with driver letsketch failed with error -71
[  729.599803][T14604] usb 6-1: USB disconnect, device number 35
[  730.084031][T15741] loop8: detected capacity change from 0 to 1024
[  730.112240][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  730.231969][T15741] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  730.857839][T15748] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.3577: missing EA_INODE flag
[  730.911704][T15748] EXT4-fs (loop8): Remounting filesystem read-only
[  731.029235][T14010] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  731.151938][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  732.201834][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  733.241877][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  733.529661][T15828] loop1: detected capacity change from 0 to 512
[  733.558630][T15828] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.3611: inode has both inline data and extents flags
[  733.558663][T15828] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  733.564315][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  733.564337][    C1] EXT4-fs (loop1): initial error at time 1780306962: ext4_orphan_get:1397: inode 15
[  733.564361][    C1] EXT4-fs (loop1): last error at time 1780306962: ext4_orphan_get:1397: inode 15
[  733.623959][T15828] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.3611: couldn't read orphan inode 15 (err -117)
[  733.623999][T15828] loop1: lost filesystem error report for type 5 error -117
[  733.628891][T15828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  734.120989][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  734.199835][ T5748] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  734.271874][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  734.387794][ T5748] usb 9-1: config 4 has an invalid interface number: 128 but max is 0
[  734.387825][ T5748] usb 9-1: config 4 has no interface number 0
[  734.387883][ T5748] usb 9-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid maxpacket 55544, setting to 64
[  734.387930][ T5748] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  734.387956][ T5748] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.476745][T15837] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  734.502441][ T5748] hub 9-1:4.128: USB hub found
[  734.521040][T15853] loop1: detected capacity change from 0 to 512
[  734.684445][ T5748] hub 9-1:4.128: 2 ports detected
[  734.684503][ T5748] hub 9-1:4.128: Using single TT (err -22)
[  734.765924][T15857] macvlan0: entered allmulticast mode
[  734.765949][T15857] veth1_vlan: entered allmulticast mode
[  734.770381][T15857] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3621'.
[  734.805489][T15857] veth1_vlan: left allmulticast mode
[  735.263723][T15857] macvlan0 (unregistering): left allmulticast mode
[  735.315873][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  735.386522][ T5748] usb 9-1: USB disconnect, device number 6
[  736.352943][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  737.392029][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  737.656976][T15923] loop8: detected capacity change from 0 to 256
[  737.973139][ T5743] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  738.127991][ T5743] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  738.128026][ T5743] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  738.128048][ T5743] usb 7-1: Product: syz
[  738.128064][ T5743] usb 7-1: SerialNumber: syz
[  738.157141][ T5743] usb 7-1: config 0 descriptor??
[  738.436590][ T5743] hso 7-1:0.0: Failed to find BULK eps
[  738.442127][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  738.826827][ T5743] usb 7-1: USB disconnect, device number 22
[  738.916641][   T38] audit: type=1326 audit(1780306967.877:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.8.3656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d94dce59 code=0x7ffc0000
[  738.916701][   T38] audit: type=1326 audit(1780306967.887:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.8.3656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d94dce59 code=0x7ffc0000
[  738.918944][   T38] audit: type=1326 audit(1780306967.887:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.8.3656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d94dce59 code=0x7ffc0000
[  738.919157][   T38] audit: type=1326 audit(1780306967.887:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.8.3656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d94dce59 code=0x7ffc0000
[  738.920592][   T38] audit: type=1326 audit(1780306967.887:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.8.3656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d94dce59 code=0x7ffc0000
[  738.920777][   T38] audit: type=1326 audit(1780306967.887:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.8.3656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f00d94dce59 code=0x7ffc0000
[  738.920951][   T38] audit: type=1326 audit(1780306967.887:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.8.3656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d94dce59 code=0x7ffc0000
[  738.924911][   T38] audit: type=1326 audit(1780306967.897:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.8.3656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d94dce59 code=0x7ffc0000
[  738.925089][   T38] audit: type=1326 audit(1780306967.897:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.8.3656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d94dce59 code=0x7ffc0000
[  738.928607][   T38] audit: type=1326 audit(1780306967.897:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.8.3656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f00d94dce59 code=0x7ffc0000
[  739.481945][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  739.888025][T15960] 9p: Bad value for 'wfdno'
[  740.142601][T15965] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  740.231610][ T5712] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  740.392544][ T5712] usb 8-1: Using ep0 maxpacket: 16
[  740.405832][ T5712] usb 8-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  740.405866][ T5712] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.405888][ T5712] usb 8-1: Product: syz
[  740.405903][ T5712] usb 8-1: Manufacturer: syz
[  740.405920][ T5712] usb 8-1: SerialNumber: syz
[  740.443299][ T5712] usb 8-1: config 0 descriptor??
[  740.462857][ T5712] gspca_main: spca508-2.14.0 probing 041e:4018
[  740.513259][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  740.668847][ T5712] gspca_spca508: reg_read err -32
[  740.669875][ T5712] gspca_spca508: reg_read err -32
[  740.670788][ T5712] gspca_spca508: reg_read err -32
[  740.689640][ T5712] gspca_spca508: reg_read err -32
[  740.907833][ T5712] gspca_spca508: reg write: error -71
[  740.907910][ T5712] spca508 8-1:0.0: probe with driver spca508 failed with error -71
[  740.938672][ T5712] usb 8-1: USB disconnect, device number 7
[  741.305430][T15994] loop1: detected capacity change from 0 to 2048
[  741.409123][T15996] loop8: detected capacity change from 0 to 512
[  741.422318][T15996] ext2: Unknown parameter 'smackfsdef'
[  741.532877][T15999] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  741.561926][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  741.667585][T16002] netlink: 204 bytes leftover after parsing attributes in process `syz.7.3678'.
[  741.668985][T16002] netlink: 232 bytes leftover after parsing attributes in process `syz.7.3678'.
[  741.801957][T14604] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  741.958997][T14604] usb 9-1: Using ep0 maxpacket: 8
[  741.963211][T14604] usb 9-1: unable to get BOS descriptor or descriptor too short
[  741.965819][T14604] usb 9-1: config 1 has an invalid descriptor of length 91, skipping remainder of the config
[  741.965846][T14604] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  742.005441][T14604] usb 9-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  742.005475][T14604] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.005498][T14604] usb 9-1: Product: syz
[  742.005515][T14604] usb 9-1: Manufacturer: syz
[  742.005532][T14604] usb 9-1: SerialNumber: syz
[  742.269905][T14604] usb 9-1: failed waiting for Axe-Fx III to boot: -71
[  742.269960][T14604] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71
[  742.308815][T14604] usb 9-1: USB disconnect, device number 7
[  742.591884][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  743.641866][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  743.642289][   T32] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  743.810194][   T32] usb 9-1: config index 0 descriptor too short (expected 12336, got 441)
[  743.810223][   T32] usb 9-1: config 48 has too many interfaces: 48, using maximum allowed: 32
[  743.810244][   T32] usb 9-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config
[  743.810264][   T32] usb 9-1: config 48 has 0 interfaces, different from the descriptor's value: 48
[  743.810299][   T32] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  743.810322][   T32] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  744.417926][T16059] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3703'.
[  744.518516][   T32] usb 9-1: language id specifier not provided by device, defaulting to English
[  744.620193][T16063] loop1: detected capacity change from 0 to 512
[  744.672080][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  744.755287][   T32] usb 9-1: USB disconnect, device number 8
[  744.885739][T16063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  744.885852][T16063] ext4 filesystem being mounted at /751/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  745.121523][   T38] kauditd_printk_skb: 14 callbacks suppressed
[  745.121611][   T38] audit: type=1400 audit(1780306973.587:483): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=16061 comm="syz.1.3705"
[  745.208313][T16052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  745.464509][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  745.721967][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  746.109077][T16089] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3712'.
[  746.755927][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  746.826138][T16111] loop1: detected capacity change from 0 to 512
[  746.861511][T16111] EXT4-fs (loop1): orphan cleanup on readonly fs
[  746.972088][T16111] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3723: bg 0: block 5: invalid block bitmap
[  746.972128][T16111] loop1: lost filesystem error report for type 5 error -117
[  746.981448][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  746.981473][    C1] EXT4-fs (loop1): initial error at time 1780306975: ext4_validate_block_bitmap:432
[  746.981499][    C1] EXT4-fs (loop1): last error at time 1780306975: ext4_validate_block_bitmap:432
[  747.030220][T16111] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  747.030250][T16111] loop1: lost filesystem error report for type 5 error -117
[  747.041209][T16111] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3723: invalid indirect mapped block 3 (level 2)
[  747.041252][T16111] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  747.069139][T16111] EXT4-fs (loop1): 2 truncates cleaned up
[  747.112828][T16111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  747.168194][T16111] EXT4-fs (loop1): shut down requested (2)
[  747.319289][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  747.432695][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[  747.432810][ T1341] ieee802154 phy1 wpan1: encryption failed: -22
[  747.791897][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  747.851622][ T5748] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  747.936916][T16133] loop8: detected capacity change from 0 to 2048
[  748.040627][ T5748] usb 2-1: Using ep0 maxpacket: 32
[  748.049715][ T5748] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  748.049747][ T5748] usb 2-1: config 0 has no interface number 0
[  748.049796][ T5748] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  748.049827][ T5748] usb 2-1: config 0 interface 85 has no altsetting 0
[  748.067689][T16133] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  748.095969][ T5748] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  748.096003][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.096025][ T5748] usb 2-1: Product: syz
[  748.096040][ T5748] usb 2-1: Manufacturer: syz
[  748.096055][ T5748] usb 2-1: SerialNumber: syz
[  748.128351][T16133] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  748.169214][ T5748] usb 2-1: config 0 descriptor??
[  748.203462][T16098] loop7: detected capacity change from 0 to 40427
[  748.233768][T16098] F2FS-fs (loop7): Invalid log blocks per segment (1)
[  748.233795][T16098] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  748.240639][T16098] F2FS-fs (loop7): Image doesn't support compression
[  748.240665][T16098] F2FS-fs (loop7): build fault injection rate: 690
[  748.240683][T16098] F2FS-fs (loop7): build fault injection type: 0x35f7
[  748.248843][T16098] F2FS-fs (loop7): invalid crc value
[  748.842385][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  748.845857][ T5748] appletouch 2-1:0.85: Geyser mode initialized.
[  748.887655][ T5748] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input32
[  749.090749][    T9] usb 2-1: USB disconnect, device number 41
[  749.090838][    C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  749.133752][T16098] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  749.247198][T16098] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0
[  749.247230][T16098] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  749.247261][T16098] F2FS-fs (loop7): Start checkpoint disabled!
[  749.630133][T16160] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3742'.
[  749.684390][T16161] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3742'.
[  749.742274][    T9] appletouch 2-1:0.85: input: appletouch disconnected
[  749.881949][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  750.346668][T16098] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0
[  750.723879][T16172] loop8: detected capacity change from 0 to 512
[  750.725184][T16172] EXT4-fs: Ignoring removed bh option
[  750.784224][T16172] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  750.784266][T16172] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it
[  750.784286][T16172] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.3745: Corrupt directory, running e2fsck is recommended
[  750.813197][T16160] bridge0: port 2(bridge_slave_1) entered disabled state
[  750.912785][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  750.966269][T16172] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117
[  750.966377][T16172] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.3745: corrupted in-inode xattr: e_name out of bounds
[  750.966399][T16172] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  750.968910][T16172] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3745: couldn't read orphan inode 15 (err -117)
[  750.968945][T16172] loop8: lost filesystem error report for type 5 error -117
[  750.970990][T16160] bridge0: port 1(bridge_slave_0) entered disabled state
[  750.972654][    C0] EXT4-fs (loop8): error count since last fsck: 2
[  750.972749][    C0] EXT4-fs (loop8): initial error at time 1780306979: ext4_iget_extra_inode:5128: inode 15
[  750.972793][    C0] EXT4-fs (loop8): last error at time 1780306979: ext4_orphan_get:1402
[  751.012458][T16172] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  751.096005][T16172] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  751.096040][T16172] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it
[  751.096060][T16172] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.3745: Corrupt directory, running e2fsck is recommended
[  751.267512][T16179] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  751.267549][T16179] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it
[  751.267568][T16179] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.3745: Corrupt directory, running e2fsck is recommended
[  751.360990][T16182] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  751.361024][T16182] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it
[  751.361045][T16182] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.3745: Corrupt directory, running e2fsck is recommended
[  751.399173][T16183] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  751.547719][T16172] EXT4-fs error (device loop8): ext4_empty_dir:3091: inode #2: block 3: comm syz.8.3745: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[  751.581878][T16185] loop7: detected capacity change from 0 to 128
[  751.747325][T16185] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  751.749311][T16185] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  751.869610][T16185] syz.7.3747 (pid 16185) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  751.918371][T16174] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  751.963021][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  752.014904][T14010] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  752.205027][T13792] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  752.526450][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  752.873212][T16196] loop8: detected capacity change from 0 to 256
[  752.998195][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  753.039152][T16190] loop1: detected capacity change from 0 to 32768
[  753.061289][T16190] xfs: Deprecated parameter 'ikeep'
[  753.061311][T16190] XFS: ikeep mount option is deprecated.
[  753.065069][T16196] FAT-fs (loop8): Directory bread(block 64) failed
[  753.065151][T16196] FAT-fs (loop8): Directory bread(block 65) failed
[  753.065452][T16196] FAT-fs (loop8): Directory bread(block 66) failed
[  753.065519][T16196] FAT-fs (loop8): Directory bread(block 67) failed
[  753.065776][T16196] FAT-fs (loop8): Directory bread(block 68) failed
[  753.065840][T16196] FAT-fs (loop8): Directory bread(block 69) failed
[  753.066152][T16196] FAT-fs (loop8): Directory bread(block 70) failed
[  753.071023][T16196] FAT-fs (loop8): Directory bread(block 71) failed
[  753.071285][T16196] FAT-fs (loop8): Directory bread(block 72) failed
[  753.071314][T16196] FAT-fs (loop8): Directory bread(block 73) failed
[  753.666024][T16190] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  754.007730][T16190] XFS (loop1): Ending clean mount
[  754.032040][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  754.651773][ T5609] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  755.074191][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  755.679456][T16231] infiniband syz2: set down
[  755.679744][T16231] infiniband syz2: added ipvlan0
[  755.743006][T16231] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  755.743055][T16231] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  755.743103][T16231] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  756.005952][T16231] RDS/IB: syz2: added
[  756.007136][T16231] smc: adding ib device syz2 with port count 1
[  756.008093][T16231] smc:    ib device syz2 port 1 has no pnetid
[  756.121964][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  757.410887][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  758.442403][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  759.028246][T16270] loop1: detected capacity change from 0 to 4096
[  759.037590][T16270] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  759.481824][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  759.783727][   T38] audit: type=1326 audit(1780306988.757:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16277 comm="syz.1.3779" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe12da9ce59 code=0x0
[  760.512984][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  760.804732][T16297] loop1: detected capacity change from 0 to 512
[  760.870598][T16297] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3788: bg 0: block 5: invalid block bitmap
[  760.870640][T16297] loop1: lost filesystem error report for type 5 error -117
[  760.884900][    C0] EXT4-fs (loop1): initial error at time 1780306989: ext4_validate_block_bitmap:432
[  760.885020][    C0] EXT4-fs (loop1): last error at time 1780306989: ext4_validate_block_bitmap:432
[  761.033889][T16297] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  761.033911][T16297] loop1: lost filesystem error report for type 5 error -117
[  761.034323][T16297] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3788: invalid indirect mapped block 3 (level 2)
[  761.034364][T16297] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  761.034886][T16297] EXT4-fs (loop1): 1 orphan inode deleted
[  761.034902][T16297] EXT4-fs (loop1): 1 truncate cleaned up
[  761.040682][T16297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  761.260615][T16304] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  761.374975][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  761.561678][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  761.974393][T16323] loop7: detected capacity change from 0 to 512
[  761.988676][T16323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  762.009715][T16323] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.3797: iget: bad i_size value: 38620345925642
[  762.009749][T16323] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  762.014753][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  762.014788][    C1] EXT4-fs (loop7): initial error at time 1780306990: ext4_orphan_get:1397: inode 15
[  762.014821][    C1] EXT4-fs (loop7): last error at time 1780306990: ext4_orphan_get:1397: inode 15
[  762.080288][T16323] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.3797: couldn't read orphan inode 15 (err -117)
[  762.080345][T16323] loop7: lost filesystem error report for type 5 error -117
[  762.137069][T16323] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  762.256639][T16323] EXT4-fs (loop7): shut down requested (1)
[  762.262249][   T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  762.376128][T13792] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  762.466276][    T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  762.495995][   T10] usb 9-1: Using ep0 maxpacket: 8
[  762.519979][   T10] usb 9-1: config 0 has an invalid interface number: 30 but max is 0
[  762.520012][   T10] usb 9-1: config 0 has no interface number 0
[  762.520043][   T10] usb 9-1: too many endpoints for config 0 interface 30 altsetting 222: 254, using maximum allowed: 30
[  762.520072][   T10] usb 9-1: config 0 interface 30 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  762.520093][   T10] usb 9-1: config 0 interface 30 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0
[  762.520111][   T10] usb 9-1: config 0 interface 30 altsetting 222 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  762.520134][   T10] usb 9-1: config 0 interface 30 has no altsetting 0
[  762.520159][   T10] usb 9-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00
[  762.520176][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.571908][   T10] usb 9-1: config 0 descriptor??
[  762.601784][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  762.626275][    T9] usb 2-1: Using ep0 maxpacket: 8
[  762.634403][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  762.634426][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  762.634445][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  762.634463][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  762.634495][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  762.634513][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  763.184471][   T10] uclogic 0003:256C:006E.0028: interface is invalid, ignoring
[  763.193791][    T9] usb 2-1: GET_CAPABILITIES returned 0
[  763.193841][    T9] usbtmc 2-1:16.0: can't read capabilities
[  763.379571][T14604] usb 9-1: USB disconnect, device number 9
[  763.610340][    T9] usb 2-1: USB disconnect, device number 42
[  763.621812][   T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  763.632871][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  763.771622][   T10] usb 8-1: Using ep0 maxpacket: 16
[  763.776534][   T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  763.776564][   T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  763.780094][   T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  763.780127][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.780151][   T10] usb 8-1: Product: syz
[  763.780162][   T10] usb 8-1: Manufacturer: syz
[  763.780173][   T10] usb 8-1: SerialNumber: syz
[  763.911255][   T10] usb 8-1: 0:2 : does not exist
[  764.186745][   T10] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  764.470247][   T10] usb 8-1: USB disconnect, device number 8
[  764.675612][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  764.891620][    T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  765.022217][ T5602] udevd[5602]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  765.046968][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  765.047001][    T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  765.085971][    T9] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  765.086006][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  765.086029][    T9] usb 2-1: Product: syz
[  765.086046][    T9] usb 2-1: Manufacturer: syz
[  765.086062][    T9] usb 2-1: SerialNumber: syz
[  765.163492][    T9] usb 2-1: config 0 descriptor??
[  765.711831][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  765.923469][T16359] loop8: detected capacity change from 0 to 32768
[  766.030471][T16364] loop7: detected capacity change from 0 to 32768
[  766.040459][T16359] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3811 (16359)
[  766.083783][T16364] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  766.189750][T16364] XFS (loop7): Ending clean mount
[  766.757687][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  767.086865][T16359] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  767.086905][T16359] BTRFS info (device loop8): using crc32c checksum algorithm
[  767.216292][T15101] BTRFS warning (device loop8): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  767.216457][T16359] BTRFS error (device loop8): failed to load root extent
[  767.216502][T16359] BTRFS warning (device loop8): try to load backup roots slot 1
[  767.230703][T15101] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  767.361632][T16359] BTRFS warning (device loop8): couldn't read tree root
[  767.361665][T16359] BTRFS warning (device loop8): try to load backup roots slot 2
[  767.362598][ T8862] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  767.362749][T16359] BTRFS warning (device loop8): couldn't read tree root
[  767.362773][T16359] BTRFS warning (device loop8): try to load backup roots slot 3
[  767.484774][T13792] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  767.653784][   T10] usb 2-1: USB disconnect, device number 43
[  767.697014][T16359] BTRFS info (device loop8): checking UUID tree
[  767.699254][T16359] BTRFS info (device loop8): setting nodatasum
[  767.699277][T16359] BTRFS info (device loop8): setting nodatacow
[  767.699295][T16359] BTRFS info (device loop8): enabling ssd optimizations
[  767.699313][T16359] BTRFS info (device loop8): turning on flush-on-commit
[  767.699328][T16359] BTRFS info (device loop8): turning on async discard
[  767.699345][T16359] BTRFS info (device loop8): enabling free space tree
[  767.699362][T16359] BTRFS info (device loop8): trying to use backup root at mount time
[  767.699381][T16359] BTRFS info (device loop8): max_inline set to 0
[  767.793567][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  768.887043][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  769.953021][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  770.072327][T14010] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  770.991800][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  772.031850][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  772.315162][   T32] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  772.337305][T16428] overlayfs: failed to resolve './file0': -2
[  772.517081][   T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  772.517123][   T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  772.518330][   T32] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  772.518362][   T32] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  772.518384][   T32] usb 2-1: Manufacturer: syz
[  772.571833][   T32] usb 2-1: config 0 descriptor??
[  773.075444][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  773.101259][T16449] loop8: detected capacity change from 0 to 512
[  773.228601][T16449] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3822: bg 0: block 5: invalid block bitmap
[  773.228641][T16449] loop8: lost filesystem error report for type 5 error -117
[  773.236639][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  773.236668][    C0] EXT4-fs (loop8): initial error at time 1780307002: ext4_validate_block_bitmap:432
[  773.236697][    C0] EXT4-fs (loop8): last error at time 1780307002: ext4_validate_block_bitmap:432
[  773.320293][   T32] cougar 0003:060B:700A.0029: unknown main item tag 0x0
[  773.320334][   T32] cougar 0003:060B:700A.0029: unknown main item tag 0x0
[  773.320365][   T32] cougar 0003:060B:700A.0029: unknown main item tag 0x0
[  773.320394][   T32] cougar 0003:060B:700A.0029: unknown main item tag 0x0
[  773.320423][   T32] cougar 0003:060B:700A.0029: unknown main item tag 0x0
[  773.444562][T16449] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  773.444590][T16449] loop8: lost filesystem error report for type 5 error -117
[  773.481579][T16449] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3822: invalid indirect mapped block 3 (level 2)
[  773.481619][T16449] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  773.545787][   T32] cougar 0003:060B:700A.0029: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  773.575111][T16449] EXT4-fs (loop8): 1 orphan inode deleted
[  773.575193][T16449] EXT4-fs (loop8): 1 truncate cleaned up
[  773.677821][T16449] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  773.715436][   T32] usb 2-1: USB disconnect, device number 44
[  773.895506][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3839'.
[  773.895532][T16458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3839'.
[  774.061182][T16456] fido_id[16456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  774.142811][T14010] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  774.157442][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  774.981495][ T5836] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  775.211608][ T5836] usb 9-1: Using ep0 maxpacket: 32
[  775.219821][ T5836] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  775.219856][ T5836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.231937][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  775.246545][ T5836] usb 9-1: config 0 descriptor??
[  775.256802][ T5836] gspca_main: sunplus-2.14.0 probing 041e:400b
[  776.116784][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  776.204211][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  776.278878][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  776.287596][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  776.304827][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  776.327327][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  776.787469][ T5836] gspca_sunplus: reg_w_riv err -71
[  776.787553][ T5836] sunplus 9-1:0.0: probe with driver sunplus failed with error -71
[  776.975799][ T5836] usb 9-1: USB disconnect, device number 10
[  777.333104][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  777.483054][T14604] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  777.641560][T14604] usb 6-1: Using ep0 maxpacket: 8
[  777.644429][T14604] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  777.644492][T14604] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  777.644520][T14604] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  777.644549][T14604] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  777.644577][T14604] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  777.644626][T14604] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  777.644653][T14604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  777.861590][    T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  777.962893][T14604] usb 6-1: usb_control_msg returned -32
[  777.962945][T14604] usbtmc 6-1:16.0: can't read capabilities
[  778.021476][    T9] usb 7-1: Using ep0 maxpacket: 8
[  778.023944][    T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  778.024011][    T9] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  778.024057][    T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  778.024088][    T9] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  778.024118][    T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  778.024147][    T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  778.024178][    T9] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  778.024207][    T9] usb 7-1: config 168 interface 0 has no altsetting 0
[  778.145452][    T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  778.145499][    T9] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  778.145539][    T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  778.145567][    T9] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  778.145593][    T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  778.145619][    T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  778.145646][    T9] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  778.145673][    T9] usb 7-1: config 168 interface 0 has no altsetting 0
[  778.158842][    T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  778.158891][    T9] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  778.158936][    T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  778.158966][    T9] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  778.158996][    T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  778.159024][    T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  778.159055][    T9] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  778.159085][    T9] usb 7-1: config 168 interface 0 has no altsetting 0
[  778.171271][    T9] usb 7-1: string descriptor 0 read error: -22
[  778.171551][    T9] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  778.171581][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.368146][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  778.530064][ T5616] Bluetooth: hci2: command tx timeout
[  778.568113][    T9] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  778.687810][T16519] loop8: detected capacity change from 0 to 1024
[  778.907539][    T9] usb 7-1: USB disconnect, device number 23
[  779.110445][T15099] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.392090][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  780.355257][T14604] usb 6-1: USB disconnect, device number 36
[  780.432619][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  780.511644][    T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  780.663275][ T5616] Bluetooth: hci2: command tx timeout
[  780.681524][    T9] usb 2-1: Using ep0 maxpacket: 8
[  780.683986][    T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  780.684046][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  780.684074][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  780.684101][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  780.684129][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  780.684175][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  780.684227][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  780.898211][    T9] usb 2-1: usb_control_msg returned -32
[  780.898261][    T9] usbtmc 2-1:16.0: can't read capabilities
[  781.115188][T16545] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90
[  781.121101][   T32] usb 2-1: USB disconnect, device number 45
[  781.522893][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  781.586365][T15099] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  781.819993][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  781.882822][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  781.886345][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  781.916847][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  781.920203][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  782.605870][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  782.760071][T15099] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  782.761517][ T5627] Bluetooth: hci2: command tx timeout
[  783.243533][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  783.660914][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  783.969710][T15099] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  784.228092][ T5627] Bluetooth: hci3: command tx timeout
[  784.672772][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  784.834328][ T5627] Bluetooth: hci2: command tx timeout
[  785.255500][    T9] usb 2-1: new full-speed USB device number 46 using dummy_hcd
[  785.329263][T16613] loop8: detected capacity change from 0 to 128
[  785.411553][    T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  785.411588][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.468342][    T9] usb 2-1: config 0 descriptor??
[  785.500704][    T9] cp210x 2-1:0.0: cp210x converter detected
[  785.650549][T16613] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  785.650584][T16613] hpfs: filesystem error: improperly stopped
[  785.650599][T16613] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  785.650616][T16613] hpfs: You really don't want any checks? You are crazy...
[  785.650634][T16613] hpfs: Code page index out of array
[  785.650644][T16613] hpfs: code page support is disabled
[  785.650793][T16613] hpfs: hpfs_map_4sectors(): unaligned read
[  785.650865][T16613] hpfs: hpfs_map_4sectors(): unaligned read
[  785.650875][T16613] hpfs: filesystem error: unable to find root dir
[  785.721977][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  785.913193][    T9] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71
[  785.913226][    T9] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  785.948233][    T9] usb 2-1: cp210x converter now attached to ttyUSB0
[  785.958708][    T9] usb 2-1: USB disconnect, device number 46
[  785.986671][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  785.989668][    T9] cp210x 2-1:0.0: device disconnected
[  786.276238][ T5627] Bluetooth: hci3: command tx timeout
[  786.381841][T16621] netlink: 'syz.8.3894': attribute type 4 has an invalid length.
[  786.478303][T16622] netlink: 'syz.8.3894': attribute type 4 has an invalid length.
[  786.752002][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  787.419136][T16636] loop8: detected capacity change from 0 to 4096
[  787.791859][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  788.126324][T16659] loop1: detected capacity change from 0 to 128
[  788.191653][T16659] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  788.191691][T16659] hpfs: filesystem error: improperly stopped
[  788.191708][T16659] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  788.191726][T16659] hpfs: You really don't want any checks? You are crazy...
[  788.191760][T16659] hpfs: Code page index out of array
[  788.191770][T16659] hpfs: code page support is disabled
[  788.268375][T16636] ntfs3(loop8): Failed to load $Extend (-22).
[  788.268406][T16636] ntfs3(loop8): Failed to initialize $Extend.
[  788.371736][ T5627] Bluetooth: hci3: command tx timeout
[  788.429351][T16659] hpfs: hpfs_map_4sectors(): unaligned read
[  788.429481][T16659] hpfs: hpfs_map_4sectors(): unaligned read
[  788.429493][T16659] hpfs: filesystem error: unable to find root dir
[  788.841957][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  789.552821][T15099] bridge_slave_1: left allmulticast mode
[  789.552851][T15099] bridge_slave_1: left promiscuous mode
[  789.553096][T15099] bridge0: port 2(bridge_slave_1) entered disabled state
[  789.621499][  T823] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  789.633902][T16683] loop1: detected capacity change from 0 to 164
[  789.690311][T16683] rock: directory entry would overflow storage
[  789.690327][T16683] rock: sig=0x66, size=4, remaining=3
[  789.717991][T15099] bridge_slave_0: left allmulticast mode
[  789.718032][T15099] bridge_slave_0: left promiscuous mode
[  789.718382][T15099] bridge0: port 1(bridge_slave_0) entered disabled state
[  789.783696][  T823] usb 9-1: config 0 has an invalid interface number: 6 but max is 0
[  789.783726][  T823] usb 9-1: config 0 has no interface number 0
[  789.783773][  T823] usb 9-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  789.783797][  T823] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.789285][  T823] usb 9-1: config 0 descriptor??
[  789.846740][  T823] ums-realtek 9-1:0.6: USB Mass Storage device detected
[  789.876815][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  790.151305][  T823] usb 9-1: USB disconnect, device number 11
[  790.451809][ T5616] Bluetooth: hci3: command tx timeout
[  790.912027][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  791.253677][T15099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  791.352468][T15099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  791.371700][  T823] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  791.375071][T15099] bond0 (unregistering): Released all slaves
[  791.556105][  T823] usb 2-1: Using ep0 maxpacket: 16
[  791.577756][  T823] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  791.577786][  T823] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  791.580488][  T823] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  791.580526][  T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.580544][  T823] usb 2-1: Product: syz
[  791.580558][  T823] usb 2-1: Manufacturer: syz
[  791.580572][  T823] usb 2-1: SerialNumber: syz
[  791.694021][  T823] usb 2-1: 0:2 : does not exist
[  791.891591][  T823] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  792.011722][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  792.933992][  T823] usb 2-1: USB disconnect, device number 47
[  793.073146][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  793.224135][ T5602] udevd[5602]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  794.112548][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  794.386450][T16746] loop1: detected capacity change from 0 to 64
[  795.102697][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13
[  795.151980][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  795.538226][T16766] loop8: detected capacity change from 0 to 512
[  795.610654][T16485] bridge0: port 1(bridge_slave_0) entered blocking state
[  795.611017][T16485] bridge0: port 1(bridge_slave_0) entered disabled state
[  795.619896][T16485] bridge_slave_0: entered allmulticast mode
[  795.657806][T16485] bridge_slave_0: entered promiscuous mode
[  795.687660][T16766] EXT4-fs: Invalid want_extra_isize 1969
[  795.805339][T16485] bridge0: port 2(bridge_slave_1) entered blocking state
[  795.805683][T16485] bridge0: port 2(bridge_slave_1) entered disabled state
[  795.806027][T16485] bridge_slave_1: entered allmulticast mode
[  795.810277][T16485] bridge_slave_1: entered promiscuous mode
[  796.192022][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  796.853043][T16783] loop1: detected capacity change from 0 to 1024
[  796.864974][T16485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  796.883192][T16783] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  796.883393][T16783] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  797.232052][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  797.309363][T16783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  797.349980][T16485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  797.626313][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  797.972947][T16561] bridge0: port 1(bridge_slave_0) entered blocking state
[  797.999461][T16561] bridge0: port 1(bridge_slave_0) entered disabled state
[  797.999854][T16561] bridge_slave_0: entered allmulticast mode
[  798.039375][T16561] bridge_slave_0: entered promiscuous mode
[  798.295744][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  798.316340][T16561] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.323680][T16561] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.376509][T16561] bridge_slave_1: entered allmulticast mode
[  798.530092][T16561] bridge_slave_1: entered promiscuous mode
[  798.802008][T15099] hsr_slave_0: left promiscuous mode
[  798.841582][T15099] hsr_slave_1: left promiscuous mode
[  798.842805][T15099] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  798.842834][T15099] batman_adv: batadv0: Removing interface: batadv_slave_0
[  798.893008][T15099] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  798.893038][T15099] batman_adv: batadv0: Removing interface: batadv_slave_1
[  799.311702][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  799.331874][T15099] veth1_macvtap: left promiscuous mode
[  799.331984][T15099] veth0_macvtap: left promiscuous mode
[  799.352090][   T32] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  799.391993][T15099] veth1_vlan: left promiscuous mode
[  799.392221][T15099] veth0_vlan: left promiscuous mode
[  799.571693][   T32] usb 2-1: Using ep0 maxpacket: 8
[  799.574292][   T32] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  799.574327][   T32] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  799.574356][   T32] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  799.574383][   T32] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  799.574429][   T32] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  799.574456][   T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.862764][   T32] usb 2-1: GET_CAPABILITIES returned 0
[  799.862815][   T32] usbtmc 2-1:16.0: can't read capabilities
[  800.087951][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  800.105377][   T32] usb 2-1: USB disconnect, device number 48
[  800.288246][T16816] input: syz0 as /devices/virtual/input/input33
[  800.361720][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  801.403595][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  801.555325][ T8870] smc: removing ib device syz2
[  801.669001][T16833] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96
[  802.441723][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  802.788553][T15099] team0 (unregistering): Port device team_slave_1 removed
[  802.952320][T15099] team0 (unregistering): Port device team_slave_0 removed
[  803.471627][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  803.539615][T16485] team0: Port device team_slave_0 added
[  803.704521][T16485] team0: Port device team_slave_1 added
[  804.155768][T16561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  804.509487][T16561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  804.511720][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  804.522615][T16485] batman_adv: batadv0: Adding interface: batadv_slave_0
[  804.522678][T16485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  804.522767][T16485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  804.774099][T16485] batman_adv: batadv0: Adding interface: batadv_slave_1
[  804.774119][T16485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  804.774150][T16485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  805.178071][ T8870] smbdirect: ib_dev[syz2] removed
[  805.354006][T16561] team0: Port device team_slave_0 added
[  805.359380][T16863] mmap: syz.5.3960 (16863): VmData 37470208 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data.
[  805.391203][T16561] team0: Port device team_slave_1 added
[  805.408040][T16863] Invalid argument reading file caps for ./file0
[  805.551659][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  805.615296][   T38] audit: type=1326 audit(1780307034.577:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.1.3962" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  805.615358][   T38] audit: type=1326 audit(1780307034.577:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.1.3962" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  805.615412][   T38] audit: type=1326 audit(1780307034.577:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.1.3962" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  805.615461][   T38] audit: type=1326 audit(1780307034.577:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.1.3962" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  805.615510][   T38] audit: type=1326 audit(1780307034.577:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.1.3962" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  805.615560][   T38] audit: type=1326 audit(1780307034.577:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.1.3962" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  805.615608][   T38] audit: type=1326 audit(1780307034.577:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.1.3962" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  805.615658][   T38] audit: type=1326 audit(1780307034.577:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.1.3962" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  805.615707][   T38] audit: type=1326 audit(1780307034.577:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.1.3962" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  805.615766][   T38] audit: type=1326 audit(1780307034.577:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.1.3962" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  806.097775][T16865] loop1: detected capacity change from 0 to 4096
[  806.591848][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  807.125647][T16561] batman_adv: batadv0: Adding interface: batadv_slave_0
[  807.125770][T16561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  807.125804][T16561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  807.191606][   T32] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  807.249671][T16485] hsr_slave_0: entered promiscuous mode
[  807.264275][T16485] hsr_slave_1: entered promiscuous mode
[  807.290208][T16485] debugfs: 'hsr0' already exists in 'hsr'
[  807.290237][T16485] Cannot create hsr debugfs directory
[  807.341150][T16561] batman_adv: batadv0: Adding interface: batadv_slave_1
[  807.341170][T16561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  807.341203][T16561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  807.350703][   T32] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  807.350740][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.350774][   T32] usb 2-1: Product: syz
[  807.350790][   T32] usb 2-1: Manufacturer: syz
[  807.350807][   T32] usb 2-1: SerialNumber: syz
[  807.529411][   T32] usb 2-1: config 0 descriptor??
[  807.621103][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14
[  807.641712][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  808.673980][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  808.852744][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[  808.852864][ T1341] ieee802154 phy1 wpan1: encryption failed: -22
[  809.461651][T16561] hsr_slave_0: entered promiscuous mode
[  809.467087][T16561] hsr_slave_1: entered promiscuous mode
[  809.468826][T16561] debugfs: 'hsr0' already exists in 'hsr'
[  809.468849][T16561] Cannot create hsr debugfs directory
[  809.708123][   T32] usb 2-1: f81604_read: reg: 200f failed: -EPROTO
[  809.711887][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  809.767492][   T32] usb 2-1: USB disconnect, device number 49
[  809.865948][   T32] usb 2-1: f81604_read: reg: 100f failed: -ENODEV
[  810.205050][T16908] loop1: detected capacity change from 0 to 256
[  810.206422][T16908] exfat: Deprecated parameter 'namecase'
[  810.206466][T16908] exfat: Deprecated parameter 'namecase'
[  810.243869][T16908] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d)
[  810.349214][   T32] usb 2-1: f81604_read: reg: 200f failed: -ENODEV
[  810.584071][T16914] Bluetooth: hci0: unsupported parameter 3079
[  810.584099][T16914] Bluetooth: hci0: invalid length 0, exp 2 for type 2
[  810.755222][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  811.175066][T16925] kvm: emulating exchange as write
[  811.792292][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  812.751155][T14604] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[  812.841872][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  812.934012][T14604] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  812.934054][T14604] usb 2-1: config 0 has no interface number 0
[  812.934119][T14604] usb 2-1: config 0 interface 41 has no altsetting 0
[  812.937116][T14604] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  812.937147][T14604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  812.937170][T14604] usb 2-1: Product: syz
[  812.937187][T14604] usb 2-1: Manufacturer: syz
[  812.937204][T14604] usb 2-1: SerialNumber: syz
[  813.079170][T14604] usb 2-1: config 0 descriptor??
[  813.887365][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  813.927655][T14604] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  814.368757][T14604] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  814.368789][T14604] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  814.369070][T14604] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[  814.479125][T14604] usb 2-1: USB disconnect, device number 50
[  814.917265][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  815.961671][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  816.489011][T16485] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  816.739806][T16485] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  816.748806][T16485] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  816.901502][T16485] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  816.905180][T16485] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  816.991953][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  817.247774][T16485] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  817.295764][T16485] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  817.297781][T16993] loop8: detected capacity change from 0 to 1024
[  817.476618][T16485] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  818.031640][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  818.844572][   T38] kauditd_printk_skb: 32 callbacks suppressed
[  818.844593][   T38] audit: type=1326 audit(1780307047.817:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17009 comm="syz.8.4010" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d94dce59 code=0x7ffc0000
[  818.844650][   T38] audit: type=1326 audit(1780307047.817:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17009 comm="syz.8.4010" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d94dce59 code=0x7ffc0000
[  818.844700][   T38] audit: type=1326 audit(1780307047.817:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17009 comm="syz.8.4010" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d94dce59 code=0x7ffc0000
[  818.844752][   T38] audit: type=1326 audit(1780307047.817:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17009 comm="syz.8.4010" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d94dce59 code=0x7ffc0000
[  818.844802][   T38] audit: type=1326 audit(1780307047.817:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17009 comm="syz.8.4010" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d94dce59 code=0x7ffc0000
[  818.844894][   T38] audit: type=1326 audit(1780307047.817:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17009 comm="syz.8.4010" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f00d94dce59 code=0x7ffc0000
[  818.983116][   T38] audit: type=1326 audit(1780307047.917:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17009 comm="syz.8.4010" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f00d949d68e code=0x7ffc0000
[  818.983179][   T38] audit: type=1326 audit(1780307047.937:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17009 comm="syz.8.4010" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f00d949d68e code=0x7ffc0000
[  818.983232][   T38] audit: type=1326 audit(1780307047.937:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17009 comm="syz.8.4010" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f00d949d68e code=0x7ffc0000
[  818.983284][   T38] audit: type=1326 audit(1780307047.937:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17009 comm="syz.8.4010" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f00d949d68e code=0x7ffc0000
[  819.084247][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  819.094335][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  819.218179][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  819.255225][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  819.308940][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  819.343153][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  820.035212][T17017] loop8: detected capacity change from 0 to 32768
[  820.036472][T17017] btrfs: Deprecated parameter 'usebackuproot'
[  820.036497][T17017] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  820.122816][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  820.134114][T17017] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4011 (17017)
[  820.161894][T17017] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  820.161930][T17017] BTRFS info (device loop8): using crc32c checksum algorithm
[  820.257986][T15099] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  820.258028][T15099] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  820.382622][   T57] BTRFS warning (device loop8): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  820.382781][T17017] BTRFS error (device loop8): failed to load root extent
[  820.382827][T17017] BTRFS warning (device loop8): try to load backup roots slot 1
[  820.383167][T15106] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  820.383304][T17017] BTRFS warning (device loop8): couldn't read tree root
[  820.383328][T17017] BTRFS warning (device loop8): try to load backup roots slot 2
[  820.383885][   T12] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  820.391075][T17017] BTRFS warning (device loop8): couldn't read tree root
[  820.391105][T17017] BTRFS warning (device loop8): try to load backup roots slot 3
[  820.531499][T17017] BTRFS info (device loop8): rebuilding free space tree
[  820.745243][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15
[  820.748717][T17017] BTRFS info (device loop8): checking UUID tree
[  820.749494][T17017] BTRFS info (device loop8): enabling ssd optimizations
[  820.749519][T17017] BTRFS info (device loop8): turning on async discard
[  820.749538][T17017] BTRFS info (device loop8): enabling free space tree
[  820.749557][T17017] BTRFS info (device loop8): force clearing of disk cache
[  820.749577][T17017] BTRFS info (device loop8): enabling auto defrag
[  820.749597][T17017] BTRFS info (device loop8): trying to use backup root at mount time
[  820.749618][T17017] BTRFS info (device loop8): use zstd compression, level 3
[  821.161931][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  821.645978][ T5616] Bluetooth: hci4: command tx timeout
[  821.668973][T15099] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  821.669012][T15099] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  822.199390][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  822.630796][T14010] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  823.262578][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  823.755298][ T5616] Bluetooth: hci4: command tx timeout
[  823.800999][T15099] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  823.801041][T15099] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  823.939593][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16
[  824.274808][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  824.497635][T17079] netlink: 'syz.8.4019': attribute type 1 has an invalid length.
[  824.935430][T15099] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  824.935459][T15099] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  825.222420][T17080] bond1: (slave bridge1): making interface the new active one
[  825.269539][T17080] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  825.323085][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  825.695385][T16485] 8021q: adding VLAN 0 to HW filter on device bond0
[  825.791554][ T5616] Bluetooth: hci4: command tx timeout
[  826.351846][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  826.846021][T16485] 8021q: adding VLAN 0 to HW filter on device team0
[  827.269440][ T8863] bridge0: port 1(bridge_slave_0) entered blocking state
[  827.269663][ T8863] bridge0: port 1(bridge_slave_0) entered forwarding state
[  827.392044][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  827.499780][T15106] bridge0: port 2(bridge_slave_1) entered blocking state
[  827.500046][T15106] bridge0: port 2(bridge_slave_1) entered forwarding state
[  827.732838][T15099] bridge_slave_1: left allmulticast mode
[  827.732876][T15099] bridge_slave_1: left promiscuous mode
[  827.733215][T15099] bridge0: port 2(bridge_slave_1) entered disabled state
[  827.871630][ T5616] Bluetooth: hci4: command tx timeout
[  828.239495][T15099] bridge_slave_0: left allmulticast mode
[  828.239523][T15099] bridge_slave_0: left promiscuous mode
[  828.239735][T15099] bridge0: port 1(bridge_slave_0) entered disabled state
[  828.442929][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  828.823197][T17134] netlink: 'syz.8.4037': attribute type 1 has an invalid length.
[  829.476281][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  829.992253][T15099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  830.062077][T15099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  830.104166][T15099] bond0 (unregistering): Released all slaves
[  830.167696][T17134] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  830.516539][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  830.821933][T15099] tipc: Disabling bearer <udp:s>
[  830.825023][T15099] tipc: Left network mode
[  831.095447][T17012] bridge0: port 1(bridge_slave_0) entered blocking state
[  831.095723][T17012] bridge0: port 1(bridge_slave_0) entered disabled state
[  831.095996][T17012] bridge_slave_0: entered allmulticast mode
[  831.222586][T17012] bridge_slave_0: entered promiscuous mode
[  831.280837][T17012] bridge0: port 2(bridge_slave_1) entered blocking state
[  831.281072][T17012] bridge0: port 2(bridge_slave_1) entered disabled state
[  831.283103][T17012] bridge_slave_1: entered allmulticast mode
[  831.318501][T17012] bridge_slave_1: entered promiscuous mode
[  832.512922][T17012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  832.777976][T17162] loop1: detected capacity change from 0 to 1024
[  833.294804][T17012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  833.920955][T17172] loop1: detected capacity change from 0 to 4096
[  833.931963][T17172] EXT4-fs: Ignoring removed orlov option
[  833.943279][T17172] EXT4-fs (loop1): Test dummy encryption mode enabled
[  834.006808][T17172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  834.086082][T17012] team0: Port device team_slave_0 added
[  834.178103][T17012] team0: Port device team_slave_1 added
[  834.304114][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  834.367802][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  834.606114][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  834.608373][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  834.650156][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  834.658826][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  835.146980][T17012] batman_adv: batadv0: Adding interface: batadv_slave_0
[  835.146997][T17012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  835.147021][T17012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  835.361485][T15099] hsr_slave_0: left promiscuous mode
[  835.401673][T15099] hsr_slave_1: left promiscuous mode
[  835.403137][T15099] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  835.403158][T15099] batman_adv: batadv0: Removing interface: batadv_slave_0
[  835.428829][T15099] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  835.428907][T15099] batman_adv: batadv0: Removing interface: batadv_slave_1
[  835.491250][T17187] netlink: 'syz.1.4055': attribute type 4 has an invalid length.
[  835.557406][T15099] veth1_macvtap: left promiscuous mode
[  835.557510][T15099] veth0_macvtap: left promiscuous mode
[  835.557767][T15099] veth1_vlan: left promiscuous mode
[  835.557934][T15099] veth0_vlan: left promiscuous mode
[  835.856298][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  835.960362][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  835.970066][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  836.069559][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  836.088761][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  837.062528][T15099] team0 (unregistering): Port device team_slave_1 removed
[  837.073470][ T5616] Bluetooth: hci1: command tx timeout
[  837.122179][T15099] team0 (unregistering): Port device team_slave_0 removed
[  837.456946][T17012] batman_adv: batadv0: Adding interface: batadv_slave_1
[  837.456966][T17012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  837.456998][T17012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  838.367794][ T5616] Bluetooth: hci5: command tx timeout
[  838.391879][T17202] loop1: detected capacity change from 0 to 512
[  838.618772][T17202] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.4056: iget: bad i_size value: 38620345925642
[  838.618807][T17202] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  838.619376][T17202] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.4056: couldn't read orphan inode 15 (err -117)
[  838.619409][T17202] loop1: lost filesystem error report for type 5 error -117
[  838.702909][T17202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  838.740377][T17012] hsr_slave_0: entered promiscuous mode
[  838.757211][T17012] hsr_slave_1: entered promiscuous mode
[  838.901590][T17012] debugfs: 'hsr0' already exists in 'hsr'
[  838.901622][T17012] Cannot create hsr debugfs directory
[  839.062622][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  839.164309][ T5616] Bluetooth: hci1: command tx timeout
[  840.434511][ T5616] Bluetooth: hci5: command tx timeout
[  840.912925][T15099] IPVS: stop unused estimator thread 0...
[  841.242418][ T5616] Bluetooth: hci1: command tx timeout
[  841.329225][T16561] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  841.418378][T16561] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  841.506682][T16561] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  841.589901][T16561] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  841.709043][T16561] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  841.807261][T16561] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  841.866578][T16561] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  841.916943][T16561] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  842.337920][T17234] loop1: detected capacity change from 0 to 64
[  842.511506][ T5627] Bluetooth: hci5: command tx timeout
[  842.576031][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  842.729595][T17234] MINIX-fs: mounting file system with errors, running fsck is recommended
[  842.742068][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  842.749347][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  842.778162][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  842.779410][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  843.314285][ T5616] Bluetooth: hci1: command tx timeout
[  843.662578][T16561] kthread_run failed with err -4
[  844.164998][T17254] loop1: detected capacity change from 0 to 128
[  844.206164][T17254] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  844.206197][T17254] hpfs: filesystem error: improperly stopped
[  844.206210][T17254] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  844.206225][T17254] hpfs: You really don't want any checks? You are crazy...
[  844.206237][T17254] hpfs: Code page index out of array
[  844.206245][T17254] hpfs: code page support is disabled
[  844.209151][T17254] hpfs: hpfs_map_4sectors(): unaligned read
[  844.209251][T17254] hpfs: hpfs_map_4sectors(): unaligned read
[  844.209264][T17254] hpfs: filesystem error: unable to find root dir
[  844.591599][ T5616] Bluetooth: hci5: command tx timeout
[  845.152464][ T5616] Bluetooth: hci2: command tx timeout
[  845.761586][ T5621] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  845.971541][ T5621] usb 2-1: Using ep0 maxpacket: 32
[  845.976550][ T5621] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  845.976587][ T5621] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  845.976630][ T5621] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  845.976658][ T5621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  845.989484][ T5621] usb 2-1: config 0 descriptor??
[  846.115452][ T5621] hub 2-1:0.0: USB hub found
[  846.322913][ T5621] hub 2-1:0.0: 1 port detected
[  846.953012][   T10] hub 2-1:0.0: activate --> -90
[  847.245674][ T5616] Bluetooth: hci2: command tx timeout
[  847.539640][   T10] usb 2-1: USB disconnect, device number 51
[  849.203859][  T823] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  849.311601][ T5616] Bluetooth: hci2: command tx timeout
[  849.461618][  T823] usb 2-1: Using ep0 maxpacket: 32
[  849.464879][  T823] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  849.464915][  T823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  849.468322][  T823] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  849.468355][  T823] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  849.468379][  T823] usb 2-1: Product: syz
[  849.468395][  T823] usb 2-1: Manufacturer: syz
[  849.468412][  T823] usb 2-1: SerialNumber: syz
[  849.565226][  T823] usb 2-1: config 0 descriptor??
[  849.770748][  T823] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  849.830425][T15104] usb 2-1: Failed to submit usb control message: -71
[  849.830468][T15104] usb 2-1: unable to send the bmi data to the device: -71
[  849.830489][T15104] usb 2-1: unable to get target info from device
[  849.830626][T15104] usb 2-1: could not get target info (-71)
[  849.831164][T15104] usb 2-1: could not probe fw (-71)
[  849.893666][  T823] usb 2-1: USB disconnect, device number 52
[  850.622698][T17175] bridge0: port 1(bridge_slave_0) entered blocking state
[  850.622964][T17175] bridge0: port 1(bridge_slave_0) entered disabled state
[  850.623251][T17175] bridge_slave_0: entered allmulticast mode
[  850.664374][T17175] bridge_slave_0: entered promiscuous mode
[  850.734365][T17175] bridge0: port 2(bridge_slave_1) entered blocking state
[  850.734805][T17175] bridge0: port 2(bridge_slave_1) entered disabled state
[  850.735082][T17175] bridge_slave_1: entered allmulticast mode
[  850.739461][T17175] bridge_slave_1: entered promiscuous mode
[  851.395278][ T5616] Bluetooth: hci2: command tx timeout
[  851.715743][T17189] bridge0: port 1(bridge_slave_0) entered blocking state
[  851.716186][T17189] bridge0: port 1(bridge_slave_0) entered disabled state
[  851.716589][T17189] bridge_slave_0: entered allmulticast mode
[  851.748703][T17189] bridge_slave_0: entered promiscuous mode
[  851.951238][T17189] bridge0: port 2(bridge_slave_1) entered blocking state
[  851.959475][T17189] bridge0: port 2(bridge_slave_1) entered disabled state
[  851.959841][T17189] bridge_slave_1: entered allmulticast mode
[  851.977546][T17189] bridge_slave_1: entered promiscuous mode
[  852.108038][T17175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  852.406069][T17175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  852.451898][ T5621] usb 2-1: new full-speed USB device number 53 using dummy_hcd
[  852.574177][T17189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  852.653474][ T5621] usb 2-1: not running at top speed; connect to a high speed hub
[  852.655000][ T5621] usb 2-1: config 3 has an invalid interface number: 230 but max is 0
[  852.655030][ T5621] usb 2-1: config 3 has no interface number 0
[  852.655080][ T5621] usb 2-1: config 3 interface 230 has no altsetting 0
[  852.658045][ T5621] usb 2-1: New USB device found, idVendor=199e, idProduct=8002, bcdDevice=bb.31
[  852.658076][ T5621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.658101][ T5621] usb 2-1: Product: syz
[  852.658117][ T5621] usb 2-1: Manufacturer: syz
[  852.658135][ T5621] usb 2-1: SerialNumber: syz
[  853.092604][ T5621] uvcvideo 2-1:3.230: Found UVC 0.00 device syz (199e:8002)
[  853.092645][ T5621] uvcvideo 2-1:3.230: No valid video chain found.
[  853.108260][ T5621] usb 2-1: USB disconnect, device number 53
[  853.153171][T17189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  853.456742][T17175] team0: Port device team_slave_0 added
[  853.572041][T17175] team0: Port device team_slave_1 added
[  853.913360][T17189] team0: Port device team_slave_0 added
[  853.948589][T17376] loop1: detected capacity change from 0 to 2048
[  854.165113][T17384] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  854.583592][T15099] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  854.673162][T17390] loop1: detected capacity change from 0 to 512
[  854.686109][T17390] EXT4-fs (loop1): Test dummy encryption mode enabled
[  854.713469][T17390] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.4082: inode has both inline data and extents flags
[  854.713507][T17390] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  854.713875][T17390] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.4082: couldn't read orphan inode 15 (err -117)
[  854.713908][T17390] loop1: lost filesystem error report for type 5 error -117
[  854.717759][T17390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  854.974379][T17189] team0: Port device team_slave_1 added
[  855.068568][T17175] batman_adv: batadv0: Adding interface: batadv_slave_0
[  855.068597][T17175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  855.068628][T17175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  855.226546][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  855.381055][T17175] batman_adv: batadv0: Adding interface: batadv_slave_1
[  855.381072][T17175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  855.381099][T17175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  855.644510][T17400] loop1: detected capacity change from 0 to 256
[  855.694840][T17400] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  856.096883][T15099] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.164406][T17189] batman_adv: batadv0: Adding interface: batadv_slave_0
[  856.164426][T17189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  856.164467][T17189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  856.177181][T17012] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  856.303565][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  856.309212][T17189] batman_adv: batadv0: Adding interface: batadv_slave_1
[  856.309231][T17189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  856.309265][T17189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  856.411117][T17012] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  856.520008][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  856.612730][T17012] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  856.775824][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  856.970582][   T38] kauditd_printk_skb: 58 callbacks suppressed
[  856.970603][   T38] audit: type=1326 audit(1780307085.937:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17420 comm="syz.1.4088" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe12da9ce59 code=0x0
[  857.291123][T15099] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  857.385991][T17012] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  857.429474][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  857.456895][T17175] hsr_slave_0: entered promiscuous mode
[  857.458975][T17175] hsr_slave_1: entered promiscuous mode
[  857.460690][T17175] debugfs: 'hsr0' already exists in 'hsr'
[  857.460718][T17175] Cannot create hsr debugfs directory
[  857.989605][T15099] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  858.379848][T17189] hsr_slave_0: entered promiscuous mode
[  858.408182][T17189] hsr_slave_1: entered promiscuous mode
[  858.409951][T17189] debugfs: 'hsr0' already exists in 'hsr'
[  858.409972][T17189] Cannot create hsr debugfs directory
[  858.800561][T17235] bridge0: port 1(bridge_slave_0) entered blocking state
[  858.800900][T17235] bridge0: port 1(bridge_slave_0) entered disabled state
[  858.801278][T17235] bridge_slave_0: entered allmulticast mode
[  858.819809][T17235] bridge_slave_0: entered promiscuous mode
[  859.021227][T17235] bridge0: port 2(bridge_slave_1) entered blocking state
[  859.022912][T17235] bridge0: port 2(bridge_slave_1) entered disabled state
[  859.051753][T17235] bridge_slave_1: entered allmulticast mode
[  859.062878][T17235] bridge_slave_1: entered promiscuous mode
[  859.530026][T17464] netlink: 'syz.1.4091': attribute type 4 has an invalid length.
[  859.974114][T17235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  860.058581][T17235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  860.585841][T17235] team0: Port device team_slave_0 added
[  860.645250][T17235] team0: Port device team_slave_1 added
[  861.476042][T17235] batman_adv: batadv0: Adding interface: batadv_slave_0
[  861.476057][T17235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  861.476079][T17235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  861.595624][T17235] batman_adv: batadv0: Adding interface: batadv_slave_1
[  861.595644][T17235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  861.595676][T17235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  861.719796][T15099] bridge_slave_1: left allmulticast mode
[  861.719826][T15099] bridge_slave_1: left promiscuous mode
[  861.720035][T15099] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.833078][T15099] bridge_slave_0: left allmulticast mode
[  861.833108][T15099] bridge_slave_0: left promiscuous mode
[  861.833306][T15099] bridge0: port 1(bridge_slave_0) entered disabled state
[  862.032415][T15099] bridge_slave_1: left allmulticast mode
[  862.032446][T15099] bridge_slave_1: left promiscuous mode
[  862.032653][T15099] bridge0: port 2(bridge_slave_1) entered disabled state
[  862.142876][T15099] bridge_slave_0: left allmulticast mode
[  862.142906][T15099] bridge_slave_0: left promiscuous mode
[  862.158823][T15099] bridge0: port 1(bridge_slave_0) entered disabled state
[  862.932733][   T38] audit: type=1326 audit(1780307091.907:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.1.4098" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  862.934237][   T38] audit: type=1326 audit(1780307091.907:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.1.4098" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  862.937490][   T38] audit: type=1326 audit(1780307091.907:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.1.4098" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  862.938078][   T38] audit: type=1326 audit(1780307091.907:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.1.4098" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  862.938143][   T38] audit: type=1326 audit(1780307091.907:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.1.4098" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  862.938195][   T38] audit: type=1326 audit(1780307091.907:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.1.4098" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  862.938244][   T38] audit: type=1326 audit(1780307091.907:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.1.4098" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  862.938299][   T38] audit: type=1326 audit(1780307091.907:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.1.4098" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  862.938535][   T38] audit: type=1326 audit(1780307091.907:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.1.4098" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  862.938700][   T38] audit: type=1326 audit(1780307091.907:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.1.4098" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fe12da9ce59 code=0x7ffc0000
[  863.816541][T15099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  863.882280][T15099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  863.935683][T15099] bond0 (unregistering): Released all slaves
[  864.508418][T17518] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  864.802277][T15099] bond1 (unregistering): (slave bridge1): Releasing active interface
[  865.010088][T15099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  865.082428][T15099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  865.135752][T15099] bond0 (unregistering): Released all slaves
[  865.159347][T15099] bond1 (unregistering): Released all slaves
[  866.657591][T17235] hsr_slave_0: entered promiscuous mode
[  866.660951][T17235] hsr_slave_1: entered promiscuous mode
[  866.670507][T17235] debugfs: 'hsr0' already exists in 'hsr'
[  866.670580][T17235] Cannot create hsr debugfs directory
[  867.851393][T17544] loop1: detected capacity change from 0 to 32768
[  868.135682][T17544] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  868.198305][T17544] XFS (loop1): Ending clean mount
[  868.243562][   T38] kauditd_printk_skb: 32 callbacks suppressed
[  868.243583][   T38] audit: type=1800 audit(1780307097.217:638): pid=17544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4112" name="bus" dev="loop1" ino=6153 res=0 errno=0
[  868.528585][ T5609] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  870.349180][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[  870.349328][ T1341] ieee802154 phy1 wpan1: encryption failed: -22
[  871.384386][T17610] l2tp_ppp: sess 2/0: no socket in recv
[  872.231558][T15099] hsr_slave_0: left promiscuous mode
[  872.335617][T15099] hsr_slave_1: left promiscuous mode
[  872.341265][T15099] batman_adv: batadv0: Removing interface: batadv_slave_0
[  872.506610][T15099] batman_adv: batadv0: Removing interface: batadv_slave_1
[  872.804891][T15099] hsr_slave_0: left promiscuous mode
[  872.851533][T15099] hsr_slave_1: left promiscuous mode
[  872.854641][T15099] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  872.854672][T15099] batman_adv: batadv0: Removing interface: batadv_slave_0
[  872.953507][T15099] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  872.953557][T15099] batman_adv: batadv0: Removing interface: batadv_slave_1
[  873.189975][T15099] veth1_macvtap: left promiscuous mode
[  873.190087][T15099] veth0_macvtap: left promiscuous mode
[  873.190391][T15099] veth1_vlan: left promiscuous mode
[  873.236815][T15099] veth0_vlan: left promiscuous mode
[  874.680256][T15099] team0 (unregistering): Port device team_slave_1 removed
[  874.817957][T15099] team0 (unregistering): Port device team_slave_0 removed
[  875.692346][T15099] team0 (unregistering): Port device team_slave_1 removed
[  875.752148][T15099] team0 (unregistering): Port device team_slave_0 removed
[  876.210229][   T38] audit: type=1800 audit(1780307105.167:639): pid=17669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4132" name="file0" dev="overlay" ino=4904 res=0 errno=0
[  876.716684][T17012] 8021q: adding VLAN 0 to HW filter on device bond0
[  877.595849][T17012] 8021q: adding VLAN 0 to HW filter on device team0
[  877.684247][ T8870] bridge0: port 1(bridge_slave_0) entered blocking state
[  877.684510][ T8870] bridge0: port 1(bridge_slave_0) entered forwarding state
[  877.735103][ T8858] bridge0: port 2(bridge_slave_1) entered blocking state
[  877.735576][ T8858] bridge0: port 2(bridge_slave_1) entered forwarding state
[  879.698141][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  879.810906][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  879.848508][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  879.906267][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  879.935289][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  880.100829][T17719] loop1: detected capacity change from 0 to 512
[  880.109441][T17719] EXT4-fs: Ignoring removed bh option
[  880.109468][T17719] EXT4-fs: Ignoring removed mblk_io_submit option
[  880.109490][T17719] EXT4-fs: Ignoring removed bh option
[  880.599416][T17719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  880.599563][T17719] ext4 filesystem being mounted at /931/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  880.932733][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  882.321198][T17749] loop1: detected capacity change from 0 to 256
[  882.525545][ T5616] Bluetooth: hci3: command tx timeout
[  883.518479][T17773] loop1: detected capacity change from 0 to 1024
[  883.522710][T17773] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  883.524825][T17773] hfsplus: hfsplus: invalid btree header node
[  883.524872][T17773] hfsplus: (loop1): Extents Overflow File (cnid 0x3) map record invalid or bitmap corruption detected, forcing read-only.
[  883.524945][T17773] hfsplus: Run fsck.hfsplus to repair.
[  883.738736][T17775] netlink: 604 bytes leftover after parsing attributes in process `syz.1.4143'.
[  884.592073][ T5616] Bluetooth: hci3: command tx timeout
[  885.312709][T17175] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  885.337936][T17175] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  885.375496][T17175] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  885.441602][T17175] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  886.668539][T17809] loop1: detected capacity change from 0 to 64
[  886.687945][ T5616] Bluetooth: hci3: command tx timeout
[  886.772191][T17175] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  886.907292][   T38] audit: type=1800 audit(1780307115.867:640): pid=17809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4149" name="file1" dev="loop1" ino=22 res=0 errno=0
[  886.915225][T17175] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  886.994628][T17175] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  887.098595][T17175] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  888.757406][ T5616] Bluetooth: hci3: command tx timeout
[  888.973003][T17839] 9pnet: p9_errstr2errno: server reported unknown error 0x00
[  889.091953][T17842] loop1: detected capacity change from 0 to 4096
[  889.096659][T17842] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  889.096691][T17842] NILFS (loop1): mounting unchecked fs
[  889.096705][T17842] NILFS (loop1): recovery required for readonly filesystem
[  889.096721][T17842] NILFS (loop1): write access will be enabled during recovery
[  889.176015][T17842] NILFS (loop1): recovery complete
[  889.463166][T17714] bridge0: port 1(bridge_slave_0) entered blocking state
[  889.468124][T17714] bridge0: port 1(bridge_slave_0) entered disabled state
[  889.468513][T17714] bridge_slave_0: entered allmulticast mode
[  889.498884][T17714] bridge_slave_0: entered promiscuous mode
[  889.511589][T17714] bridge0: port 2(bridge_slave_1) entered blocking state
[  889.513307][T17714] bridge0: port 2(bridge_slave_1) entered disabled state
[  889.513581][T17714] bridge_slave_1: entered allmulticast mode
[  889.516536][T17714] bridge_slave_1: entered promiscuous mode
[  889.684660][T17714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  889.760557][T17714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  890.019374][T17714] team0: Port device team_slave_0 added
[  890.134238][T17714] team0: Port device team_slave_1 added
[  890.168077][T17846] loop1: detected capacity change from 0 to 40427
[  890.175000][T17846] F2FS-fs (loop1): invalid crc value
[  890.316451][T17846] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  890.404901][T17846] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0
[  890.404936][T17846] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  890.404970][T17846] F2FS-fs (loop1): Start checkpoint disabled!
[  890.507332][T17846] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0
[  890.507852][T17846] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  890.601551][   T38] audit: type=1800 audit(1780307119.577:641): pid=17846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4158" name="file1" dev="loop1" ino=10 res=0 errno=0
[  890.614463][T17846] syz.1.4158: attempt to access beyond end of device
[  890.614463][T17846] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  890.617288][T17846] syz.1.4158: attempt to access beyond end of device
[  890.617288][T17846] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  890.618586][T17846] syz.1.4158: attempt to access beyond end of device
[  890.618586][T17846] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  890.620580][T17846] syz.1.4158: attempt to access beyond end of device
[  890.620580][T17846] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  890.635813][T17846] syz.1.4158: attempt to access beyond end of device
[  890.635813][T17846] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  890.637252][T17846] syz.1.4158: attempt to access beyond end of device
[  890.637252][T17846] loop1: rw=2049, sector=45136, nr_sectors = 8 limit=40427
[  890.639437][T17846] syz.1.4158: attempt to access beyond end of device
[  890.639437][T17846] loop1: rw=2049, sector=45144, nr_sectors = 8 limit=40427
[  890.640877][T17846] syz.1.4158: attempt to access beyond end of device
[  890.640877][T17846] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  890.951141][ T8870] kworker/u8:34: attempt to access beyond end of device
[  890.951141][ T8870] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[  890.963271][ T8870] CPU: 1 UID: 0 PID: 8870 Comm: kworker/u8:34 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  890.963342][ T8870] Tainted: [L]=SOFTLOCKUP
[  890.963364][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  890.963405][ T8870] Workqueue: writeback wb_workfn (flush-7:1)
[  890.963491][ T8870] Call Trace:
[  890.963512][ T8870]  <TASK>
[  890.963541][ T8870]  dump_stack_lvl+0xe8/0x150
[  890.963627][ T8870]  f2fs_stop_checkpoint+0x3ef/0x5d0
[  890.963743][ T8870]  f2fs_write_end_io+0x1274/0x1740
[  890.963875][ T8870]  __submit_merged_bio+0x256/0x6a0
[  890.963945][ T8870]  ? rcu_is_watching+0x15/0xb0
[  890.964111][ T8870]  __submit_merged_write_cond+0x3c9/0x4e0
[  890.964237][ T8870]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  890.964406][ T8870]  f2fs_write_data_pages+0x287e/0x34f0
[  890.964577][ T8870]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  890.964682][ T8870]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  890.964864][ T8870]  ? __lock_acquire+0x6b5/0x2d10
[  890.964979][ T8870]  ? __lock_acquire+0x6b5/0x2d10
[  890.965112][ T8870]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  890.965186][ T8870]  do_writepages+0x32e/0x550
[  890.965261][ T8870]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  890.965367][ T8870]  ? reacquire_held_locks+0x104/0x190
[  890.965473][ T8870]  ? rt_spin_lock+0x1e0/0x400
[  890.965578][ T8870]  __writeback_single_inode+0x133/0x10e0
[  890.965664][ T8870]  ? rt_spin_unlock+0x160/0x200
[  890.965756][ T8870]  writeback_sb_inodes+0x97f/0x1980
[  890.965873][ T8870]  ? lockdep_hardirqs_on+0x7a/0x110
[  890.965947][ T8870]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  890.966111][ T8870]  ? rcu_is_watching+0x15/0xb0
[  890.966225][ T8870]  wb_writeback+0x445/0xb00
[  890.966310][ T8870]  ? queue_io+0x221/0x440
[  890.966416][ T8870]  ? __pfx_wb_writeback+0x10/0x10
[  890.966531][ T8870]  wb_workfn+0x3fd/0xf20
[  890.966585][ T8870]  ? look_up_lock_class+0x57/0x110
[  890.966647][ T8870]  ? trace_hrtimer_start+0x82/0x200
[  890.966771][ T8870]  ? __pfx_wb_workfn+0x10/0x10
[  890.966849][ T8870]  ? do_raw_spin_lock+0x12b/0x2f0
[  890.966923][ T8870]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  890.966997][ T8870]  ? process_one_work+0x8be/0x1630
[  890.967097][ T8870]  ? process_one_work+0x8be/0x1630
[  890.967223][ T8870]  ? process_one_work+0x8be/0x1630
[  890.967309][ T8870]  process_one_work+0x98b/0x1630
[  890.967464][ T8870]  ? __pfx_process_one_work+0x10/0x10
[  890.967541][ T8870]  ? do_raw_spin_lock+0x12b/0x2f0
[  890.967653][ T8870]  worker_thread+0xb49/0x1140
[  890.967780][ T8870]  kthread+0x388/0x470
[  890.967846][ T8870]  ? __pfx_worker_thread+0x10/0x10
[  890.967905][ T8870]  ? __pfx_kthread+0x10/0x10
[  890.967981][ T8870]  ret_from_fork+0x514/0xb70
[  890.968072][ T8870]  ? __pfx_ret_from_fork+0x10/0x10
[  890.968180][ T8870]  ? __switch_to+0xc79/0x1410
[  890.968266][ T8870]  ? __pfx_kthread+0x10/0x10
[  890.968349][ T8870]  ret_from_fork_asm+0x1a/0x30
[  890.968478][ T8870]  </TASK>
[  891.010417][ T8870] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  891.390538][  T823] loop1: lost filesystem error report for type 5 error -108
[  891.496051][T17714] batman_adv: batadv0: Adding interface: batadv_slave_0
[  891.496072][T17714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  891.496103][T17714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  891.566492][T17714] batman_adv: batadv0: Adding interface: batadv_slave_1
[  891.566512][T17714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  891.566544][T17714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  891.831608][T15099] bridge_slave_1: left allmulticast mode
[  891.831636][T15099] bridge_slave_1: left promiscuous mode
[  891.853738][T15099] bridge0: port 2(bridge_slave_1) entered disabled state
[  891.984449][T15099] bridge_slave_0: left allmulticast mode
[  891.984489][T15099] bridge_slave_0: left promiscuous mode
[  891.985859][T15099] bridge0: port 1(bridge_slave_0) entered disabled state
[  892.251684][T15099] bridge_slave_1: left allmulticast mode
[  892.251714][T15099] bridge_slave_1: left promiscuous mode
[  892.251919][T15099] bridge0: port 2(bridge_slave_1) entered disabled state
[  892.352772][T15099] bridge_slave_0: left allmulticast mode
[  892.352801][T15099] bridge_slave_0: left promiscuous mode
[  892.353068][T15099] bridge0: port 1(bridge_slave_0) entered disabled state
[  893.233482][T15099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  893.313657][T15099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  893.337710][T15099] bond0 (unregistering): Released all slaves
[  893.592177][T15099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  893.675597][T15099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  893.733376][T15099] bond0 (unregistering): Released all slaves
[  893.918721][T17853] gretap0: entered promiscuous mode
[  894.357442][T17714] hsr_slave_0: entered promiscuous mode
[  894.359583][T17714] hsr_slave_1: entered promiscuous mode
[  894.364164][T17714] debugfs: 'hsr0' already exists in 'hsr'
[  894.364191][T17714] Cannot create hsr debugfs directory
[  894.852372][  T823] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  895.146969][  T823] usb 2-1: Using ep0 maxpacket: 32
[  895.149363][ T5627]  1024-page vmalloc region starting at 0xffffc900147b6000 allocated at kcov_ioctl+0x58/0x660
[  895.149413][ T5627] list_del corruption. next->prev should be ffffc9001b3ca000, but was 0000000000000000. (next=ffffc900147b6000)
[  895.154570][ T5627] ------------[ cut here ]------------
[  895.154583][ T5627] kernel BUG at lib/list_debug.c:67!
[  895.164877][ T5627] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  895.164906][ T5627] CPU: 0 UID: 0 PID: 5627 Comm: kworker/u9:7 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  895.164932][ T5627] Tainted: [L]=SOFTLOCKUP
[  895.164939][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  895.164951][ T5627] Workqueue: hci4 hci_rx_work
[  895.164983][ T5627] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190
[  895.165011][ T5627] Code: 2c 75 55 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 ed 10 76 fd 49 8b 56 08 48 c7 c7 c0 2e aa 8b 48 89 de 4c 89 f1 e8 f7 77 6d fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  895.165026][ T5627] RSP: 0018:ffffc90005157a40 EFLAGS: 00010246
[  895.165041][ T5627] RAX: 000000000000006d RBX: ffffc9001b3ca000 RCX: 3c1ba374c0c61000
[  895.165054][ T5627] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  895.165065][ T5627] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000
[  895.165076][ T5627] R10: dffffc0000000000 R11: ffffed10170c48fb R12: 1ffff920028f6c01
[  895.165089][ T5627] R13: dffffc0000000000 R14: ffffc900147b6000 R15: ffffc900147b6008
[  895.165103][ T5627] FS:  0000000000000000(0000) GS:ffff888125ecd000(0000) knlGS:0000000000000000
[  895.165118][ T5627] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  895.165130][ T5627] CR2: 00007f3d5f1e3ed0 CR3: 0000000059d1c000 CR4: 00000000003526f0
[  895.165147][ T5627] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000406
[  895.165158][ T5627] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  895.165169][ T5627] Call Trace:
[  895.165178][ T5627]  <TASK>
[  895.165187][ T5627]  kcov_remote_start+0x2af/0x710
[  895.165212][ T5627]  hci_rx_work+0x10f/0x1040
[  895.165241][ T5627]  ? process_one_work+0x8be/0x1630
[  895.165269][ T5627]  process_one_work+0x98b/0x1630
[  895.165306][ T5627]  ? __pfx_process_one_work+0x10/0x10
[  895.165336][ T5627]  ? do_raw_spin_lock+0x12b/0x2f0
[  895.165363][ T5627]  worker_thread+0xb49/0x1140
[  895.165391][ T5627]  kthread+0x388/0x470
[  895.165414][ T5627]  ? __pfx_worker_thread+0x10/0x10
[  895.165431][ T5627]  ? __pfx_kthread+0x10/0x10
[  895.165454][ T5627]  ret_from_fork+0x514/0xb70
[  895.165479][ T5627]  ? __pfx_ret_from_fork+0x10/0x10
[  895.165503][ T5627]  ? __switch_to+0xc79/0x1410
[  895.165525][ T5627]  ? __pfx_kthread+0x10/0x10
[  895.165549][ T5627]  ret_from_fork_asm+0x1a/0x30
[  895.165586][ T5627]  </TASK>
[  895.165602][ T5627] Modules linked in:
[  895.165627][ T5627] ---[ end trace 0000000000000000 ]---
[  895.165641][ T5627] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190
[  895.165670][ T5627] Code: 2c 75 55 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 ed 10 76 fd 49 8b 56 08 48 c7 c7 c0 2e aa 8b 48 89 de 4c 89 f1 e8 f7 77 6d fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  895.165686][ T5627] RSP: 0018:ffffc90005157a40 EFLAGS: 00010246
[  895.165703][ T5627] RAX: 000000000000006d RBX: ffffc9001b3ca000 RCX: 3c1ba374c0c61000
[  895.165717][ T5627] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  895.165728][ T5627] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000
[  895.165740][ T5627] R10: dffffc0000000000 R11: ffffed10170c48fb R12: 1ffff920028f6c01
[  895.165754][ T5627] R13: dffffc0000000000 R14: ffffc900147b6000 R15: ffffc900147b6008
[  895.165769][ T5627] FS:  0000000000000000(0000) GS:ffff888125ecd000(0000) knlGS:0000000000000000
[  895.165785][ T5627] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  895.165798][ T5627] CR2: 00007f3d5f1e3ed0 CR3: 0000000059d1c000 CR4: 00000000003526f0
[  895.165823][ T5627] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000406
[  895.165835][ T5627] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  895.165855][ T5627] Kernel panic - not syncing: Fatal exception
[  895.166290][ T5627] Kernel Offset: disabled