last executing test programs:

8m48.412404694s ago: executing program 32 (id=813):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x8, "", [{{0x9, 0x4, 0x0, 0xfc, 0xdf, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3f, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="20082b0000002b21c263138526792c3cbdeace918d0fb74237cc6e"], 0x0, 0x0, 0x0, 0x0}, 0x0)

7m52.993676258s ago: executing program 33 (id=1261):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x88c0, &(0x7f0000000100)={[{@dir_resv_level={'dir_resv_level', 0x3d, 0x402}}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x7}}, {@noacl}, {@journal_async_commit}, {@coherency_full}, {@heartbeat_none}, {@atime_quantum={'atime_quantum', 0x3d, 0x3}}, {@acl}]}, 0xfd, 0x4421, &(0x7f0000004480)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0x2020)

5m15.701826948s ago: executing program 34 (id=2500):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9000000000010506010000000000000002000000340001801400018008000100c0a8010108000200c0a801021c000280050001000600000006000200303900000600030000150000340002801400018008000100c0a8010208000200c0a801011c000280050001000600000006000200001500000600030030390000080007000000012c0c0005800800010066747000"], 0x90}}, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="b800000000020104010000000000000002000000340001801400018008000100c0a8010108000200c0a801021c000280050001000600000006000200303900000600030000150000340002801400018008000100c0a8010208000200c0a801011c00028005000100060000000600020000000000060003004e200000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff0000080004000000012c"], 0xb8}}, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="b800000000020100020000000000000002000000340001801400018008000100c0a8010108000200c0a801021c000280050001000600000006000200303900000600030000150000340002801400018008000100c0a8010208000200c0a801011c00028005000100060000000600020000000000060003004e200000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff00000800040000000258"], 0xb8}}, 0x0)

3m9.764728347s ago: executing program 2 (id=3473):
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000", @ANYRESHEX=0x0], 0x1, 0x1ac, &(0x7f0000001980)="$eJzsmDFPIkEUx/+zy0K4XMK1d81dciRwxS27y93lKK6gvkITjcbOjawEXcTAFkBn/AzG2k9gaYgN30MLtbIQOyuLNbM7uAOKqAmK8f2Kt/9985h98wh/kgVBEO+Ws9Ork/1MOsn1R6SREPlzNapRpPpO6vrHUWXmcNe4PO50/xeG92MAfP/xz48B6BZVeOLe9wc/nRbXeSh9rcnri2DQhV6GggWhHTAsCb0m6Rqv1/XViuvoKzW3xIXBg8mDxUN+uL/eFkNJ6o9J641We912Xac+QTFufr2ign9Sf/L31Z+NEc0PJhSYQufBMCf0XyT6swlHIp3/SyzaX33h879t8Tk1pkbDZJ7OdriweYb/vKdjGs8XGqaijbGCgYuLJDAd/byWiPzJ32PISP4Uk/wj51U3c41W+2elapedsrNhWfk/xi/D+G3lAiMK4wP+lwz86YO0vzaiNs7iaNqeVzfDeHtvNRPw6tZ9jhsP/E9B9nvYNRM5meD/4BP7xi9ZFdiW1g5Gdk4QBEEQBEEQBEEQBEEQBPFUvoIFb0EHKNxJWbNB9U0AAAD//6Nob4A=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011)

3m8.99267296s ago: executing program 2 (id=3477):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0x10, "318c40a88379530888000f0bde66eca3"}, &(0x7f0000000700)=0x18)

3m7.191331312s ago: executing program 2 (id=3486):
syz_mount_image$nilfs2(&(0x7f0000000b80), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000003140)=ANY=[], 0x3, 0xa76, &(0x7f00000000c0)="$eJzs3U2MG1cBAOA33vUmmwTilIQuSWgTftry091ms4SfCJqquRA1FbdKEZcoTUtEGhCpBK0qkeTEjVZVuPIjTuVQAUJqLyjqiUslGolLxaFw4EAUpEocoJC4iv2e136xNfb+2V5/n/T89s0bz3szOx6PZ+a9F4CJVWm8Li3NFSFcffPV4/984B+zd6Y82pqj1nidbktVQwhFTE9ny3tvqhnfev+lM93iIiw2XlM6PHmz9d7tIYRL4UC4Fmph79Xrr7y9+MTJyyeuHHzntaM31mftAQBgsnzr2tGlPX/7875dH7x+37GwpTU9nZ/XYnpHPO8/Fk/80/l/JXSmi7bQbiabbzqGSjbfVJf52supZvNN9yh/JltutZW/r2O+LSXlT7VN67beMM7SflwLRWW+I12pzM83f5OHxu/6mWL+wrnzz1wcUkWBNffv+0MIB4RBQ71e/3FjA45AXdY/3KgPvw7CeoT6zmEfgQCa8vuFd7mUX1lYndbSpvsr/+Zjle7vhzWw0fu/8ser/F9fjuWf+uu61oPJsFm/v9J6pc/RjpjO7yPkzy8N+vlPy5uKL9PZ8sv0uo8wLvcXetVzaoPrsVK96p/vF5vV12OctsM3svz2z0/+Px2X/zHQ3X8m7Pr/gRGow6YO1RGog9B3qA/7AASMrOXn5prqUcrPn+vL87eU5G8tyZ8tyd9Wkr+9JB8m2e+f/2l4uVj+nZ//ph/0eli6zvaRGH90wPrk1yMHLT9/7ndQqy0/f54YRtkbp586+5WnT11vPv9ftPb/23F/PxDTtfjZuhZnSNcL8+vqrWf/a53lVHrMd09Wn3TcqGxJ89ebJe7unK/Yvbyc0Hacuasec53v29lrvv2d89Wy+WZj2JrVNz8/2Za9L51/pONq2l7T2fpWs/WYyeqRjiu7YpzXA1Yi7Y+9nv9P++dcqBbPnDt/9pGYTvvpn6aqW+5MP9S+0N9sTN2B1em3/c9c6Gz/s6M1vVppPy7sXJ5etB8Xatn0xWaydZs8TT8c0+l77jtTs43p82e+d/7ptV55mHAXX3jxu6fPnz/7A3+kP2ZtFn/4Y9hHJmC9LTz/3PcXLr7w4sPnnjv97Nlnz144fOTI4cXFI189vLTQOK9faD+7BzaT5S/9YdcEAAAAAAAAAAAA6NcPTxy//pe3vvxus/3/cvu/1P4/Pfmb2v//JGv/n7eTT+3gUzvAXV3yG+PuvdFZj5lsvmoMH8vquzsrZ0/2vo/HuDWOX2z/n9rb5/26pvrcm03P++9N82XdCdzVX8pM1gdJPl7gp2J8Jca/CjBExWz3yTHu6N863N2/ddrXU/8U+qUYT+n/lvaG1I9Jav/dq1+ndPzftQF1ZO1tRHPCYa8j0N2/Rr7/77Yz8aHXZQKC7TxRoV43igcwGoY9/me67pniC3/85tY7Ic1287HO42XefymsxqiPP6n8URj/s1izSrTGv+vr+Neld/WOfp77H13hvz+/8W5bsWFvv8ffy9mqp36gd5eX2e6DWH5a/wdDf+XXf5mVn98Q6tP/svK39Vn+Xeu/f2Xl/z+WnzbbQ5/ut/xmjYtKZz3y68bp/l9+3Ti5la1/6ttz4PVf4UCNt2P5MMl6jzPb7wi2o2ko4/92uT+6UvlzGF+K6XQgTM855N/Ig9Y/PV+Rvgf2ZMsvSr7fxmWc4l4mffzfr8W47POQxv9N+2OtS7rSlq522bbjvq/AZvPeyN//G7NwaQTqIIxomB2BOnSGer2+vhe0Sgy1cIa+/Yd993nY5Q97+5fJx//Nz+Hz8X8r2Q+IfPzf/P35+L95fj6+Xp6fj/+bb898/N88/95sufkV7LmS/E+U5O8tyd+3nD/bLX9/yfs/WZJ/MMRzkh7595W8//6S/HtK8qdK8j9Tkv/ZkvwHSvIfKsn/XEn+Zpfao0zq+sMky9vn+fzD5Ej3f3p9/neX5APj62evH3r81O++XWu2/59p/V5L9/GOxXQ1/nb+UUzn971DW/pO3lsx/fcsf9Svd8AkyfvPyL/fHyzJB8ZXes7L5xsmUNG9x55++63qdZ7PePl8jL8Q4y/G+OEYz8d4IcaHYry4QfVjfTz+2z8cfblY/r2/M8vv93nyvD1Q3k/U4T7rk18fGPR59rwfv0GttvwVNgcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYmkrjdWlprgjh6puvHn/q5LmFO1Mebc1Ra7xOt6WqrfeF8EiMp2L8i/jHrfdfOtMe345xERZDEYrW9PDkzVZJ20MIl8KBcC3Uwt6r1195e/GJk5dPXDn4zmtHb6zfFgAAAIDN78MAAAD//+bcHCE=")
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/214, 0xd6)
getdents64(r0, 0x0, 0x0)

3m6.277268946s ago: executing program 2 (id=3492):
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000100)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@grpjquota}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@inlinecrypt}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000)

3m4.653808511s ago: executing program 2 (id=3509):
r0 = socket(0x2c, 0x3, 0x0)
close(0x3)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4)

3m3.87409429s ago: executing program 2 (id=3513):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10)
write(r0, &(0x7f0000000340)='4', 0x1)

3m0.834623924s ago: executing program 1 (id=3528):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

2m58.946840615s ago: executing program 1 (id=3543):
r0 = socket$kcm(0x10, 0x2, 0x4)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)

2m57.638079021s ago: executing program 1 (id=3549):
ioprio_set$uid(0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
preadv2(r0, &(0x7f0000008280)=[{&(0x7f0000006200)=""/4105, 0x1009}], 0x1, 0x2000, 0xfffffffd, 0x68f0e6a83b2c1371)

2m57.300135713s ago: executing program 1 (id=3551):
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5b6, &(0x7f0000000940)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x141104, 0x105)
getdents64(r0, &(0x7f0000000400)=""/4081, 0xff1)

2m55.942563586s ago: executing program 1 (id=3560):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x0)
fcntl$notify(r0, 0x402, 0x91ea6c1ef182517)
fcntl$setsig(r0, 0xa, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)

2m53.458176948s ago: executing program 1 (id=3571):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}})
ioctl(r0, 0x8b1a, &(0x7f0000000040))

2m52.397513578s ago: executing program 35 (id=3571):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}})
ioctl(r0, 0x8b1a, &(0x7f0000000040))

2m48.497934572s ago: executing program 36 (id=3513):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10)
write(r0, &(0x7f0000000340)='4', 0x1)

2m43.495197783s ago: executing program 4 (id=3607):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x2000000, 0x0, 'id0\x00', 'timer0\x00'})

2m43.045998669s ago: executing program 4 (id=3610):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

2m42.211983362s ago: executing program 4 (id=3613):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@block_validity}, {@usrquota}, {@nobh}]}, 0x1, 0x526, &(0x7f00000027c0)="$eJzs3c9vG1kdAPCvnTi/mt1klz0Agt2wu1BQVedH2WjZAywnhNBKiJW4gNQNiRtFseModpYmVCI9c0WiEic4cOAP4Fxx4M4FwY1LOVQqEIEaEAejGY9TN7XTtEntbPz5SKP58cbzfS/pvFd/Hc8LYGDNRMReRIxExEcRMZUdz2VLvN9ckvMe7t9aPti/tZyLRuPDf+TS8uRYtL0mcSm75lhEfO9bET/KPRm3trO7vlQul7ay/dl6ZXO2trN7da2ytFpaLW0sLCzOL869e+2dhSdeu9dIPXNb36iMZFufv/fHva/8JKnWZHak1Y7xZ77q8ZpNLxzGSQxHxHfOOE6/DGXtGel3RXgu+Yh4NSLeTO//qRhKf5sAwEXWaExFY6p9HwC46PJpDiyXL2a5gMnI54vFZg7vtZjIl6u1+pUb1e2NlWaubDoK+Rtr5dJcliucjkIu2Z9PtyOms+v+tJkaOiy/FhGvRMTPR8fT/eJytbzSx//3AMAgu3Rk/P/3aHP8BwAuuLGI3/y++b6931UBAHpkrN8VAAB6zvgPAIPH+A8Ag6c5/p/1oy8AgPPsa/2uAADQc/L/ADBQvvvBB8nSOMief73y8c72evXjqyul2nqxsr1cXK5ubRZXq9XV9Jk9laddr1ytbn7/fmzfnP76Zq0+W9vZvV6pbm/Ur6fP9b5eKqRn7fWgZQBAN6+8cfcvuWREfm88XaJtLodCX2sGvGj5flcA6JuhflcA6BuzfcHgOsV7fOkBuCA6TNH7mLFOXxDywFD4RLv8mSP5///K/8OgaMv/+ytgGDDy/zC45P9hcDUauZPO+R8nPREAON/k+IEun/+/mq1/m3048MOVo2fcOdHlfbYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAhdSa/7eYzQU+Gfl8sRjxUkRMRyF3Y61cmouIlyPiz6OF0WR/vs91BgBOK38/l83/dXnq7cnHil6/dLg5EhE//uWHv7i5VK9v/SliJPfP0dbx+p3s+MIxYRovrgUAwPFa43S6bnsj/3D/1nJr6WV9HnyzOTtoEvdgfyQODuMPx3C6HotCREz8K5ftN+XachensXc7Ij7dqf25mExzIM2pS4/GT2K/1NP4+cfi59Oy5jr5WXzqDOoCg+Zu0v+83+n+y8dMuu58/4+lPdTpZf1fcqnlg7QPfBS/1f8Nden/Zh7tjh8b46t/+Ha30x7cjvjscEQr9kFb/9OKn+sS/+0TtvGvn3v9zW5ljV9FXI7O8dtjzdYrm7O1nd2ra5Wl1dJqaWNhYXF+ce7da+8szKY56tnuo8Hf37vycreypP0TXeKPPaX9Xzxh+3/9v49+8IVj4n/5rU7x8/HaMfGTMfFLJ4y/NPG7rvNvJ/FXurT/ab//KyeMf+9vu09MGw4A9E9tZ3d9qVwubdmwcf43kn+yLzbEzHO//Bu9+iGMROein73VvKePFDUazY3b8UyxuvUYZ5F1A86Dw5s+Iv7T78oAAAAAAAAAAAAAAAAd9eIbS/1uIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//B0flCg==")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x0, 0x3, 0x8, 0x6, 0x8, 0xf, 0x4, 0xfffffffd})
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x40013, 0x0, 0x1})
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2m41.710176101s ago: executing program 4 (id=3617):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x300, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmsg$inet(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000140)="fd0e3bf12efa7e1a31b500a736fd771b2c13", 0x12}, {&(0x7f0000000280)="db53ea65640da181f229fc8f72b35da28688d8ac03fc036d648f8f6bdcb71cd0a848c8e55882a637c10dba53a9a3de8752447417400043e94bc16d97dcbfb1f5cfcce75c7435cd43f41e35f82dc6dafd2b1e8684af09caca9d0ad0b4aff6e3918d755b9c08efbc9dbb744f158d6d457fd50605459c888be8087fbbac58280d75a5c9604306dcff8b243aae16b2e3c4807f532e2eb8afa0c55c137f990f34bb4555898f9f77a511a020098edf58a436a4d04d4ee1f485604afa24666900ebac899660ef811508596c0f7bc6a72f4232b2624728f65ef71beee1aeb6a0600800091b825d", 0xe3}, {&(0x7f0000000540)="c4ec3fe21da796dc025c59094bbe02ca22d57ea2cdbb36712173a999fa813a79492ae4f2d01af3f135fe6f6ad1be9c43524692f490dd90cbef195a842ec005f85a0961a6b78a3ba421afb9897d4af240c58d42db07861bad0fc176442d5ba20a0a38b166d414c7a910f741185bc080cf6e7214012139c50aa82de0256aab8ac37c9d8af3b1146af4c5697e2580b32373c9fbb99037ace2a408375c84e91175974f95b7431d6db4ab3217cce7123b7474341d5ce0d260c19a95b99a1e390f5ddfe9b86e17c0a0d19975c26c7e8f4583ce89593fe7426df553b3", 0xd9}, {&(0x7f0000001880)="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", 0x1b3}], 0x4}, 0x4040000)

2m41.35138819s ago: executing program 4 (id=3619):
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x40000010)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8", 0x49, 0x8000, 0x0, 0x0)
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

2m40.162400403s ago: executing program 4 (id=3623):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1cd)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='-2 -3 +4\n', 0x9)

2m24.684918695s ago: executing program 37 (id=3623):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1cd)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='-2 -3 +4\n', 0x9)

2m13.692689539s ago: executing program 0 (id=3719):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f6", 0x1}], 0x1, &(0x7f0000000240)=[@sndinfo={0x20, 0x84, 0x2, {0x8, 0x4d, 0x4c0, 0x2}}], 0x20, 0x40001}, 0x0)

2m12.229920103s ago: executing program 0 (id=3723):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1)
read(r0, 0x0, 0x70)
ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000240))

2m11.522925607s ago: executing program 0 (id=3725):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000380)=0x10)
sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="05", 0x1}], 0x1}}], 0x1, 0x4000080)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8)

2m10.200861238s ago: executing program 0 (id=3731):
socket$igmp(0x2, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, 0x0)

2m9.355382543s ago: executing program 0 (id=3733):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x502, 0xb8)
write(r0, &(0x7f00000000c0)='mydomain / 64\n', 0xe)

2m8.407635012s ago: executing program 0 (id=3736):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff0000000705810200020007050102000200070582020002000705020200020007058303"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x14c)

1m53.074135463s ago: executing program 38 (id=3736):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff0000000705810200020007050102000200070582020002000705020200020007058303"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x14c)

47.032251503s ago: executing program 9 (id=4242):
r0 = timerfd_create(0x7, 0x80800)
timerfd_settime(r0, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
ppoll(&(0x7f0000000040)=[{r0, 0x2060}], 0x1, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/84, 0x54}], 0x1)

46.915311185s ago: executing program 6 (id=4244):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000400), 0x1000, 0x1)

46.073989274s ago: executing program 6 (id=4251):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x10003}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc)

45.886879738s ago: executing program 9 (id=4253):
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b)
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x1013c1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045503, &(0x7f0000000040))

45.411067309s ago: executing program 8 (id=4258):
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000001940)='c', 0x1}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

45.383803846s ago: executing program 6 (id=4259):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0xa, 0x922000000003, 0x11)
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0200"})

45.26955404s ago: executing program 3 (id=4260):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xe8001, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x800})

45.186236776s ago: executing program 5 (id=4261):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x3c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}, @FRA_DST={0x8, 0x1, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

45.1175601s ago: executing program 7 (id=4262):
socket$kcm(0xa, 0x922000000003, 0x11)
r0 = socket$kcm(0x10, 0x2, 0x4)
setresuid(0x0, 0xee00, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f01020000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)

45.089646056s ago: executing program 9 (id=4263):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10000, &(0x7f0000000300)={[{@abort}, {}, {@grpquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@dioread_nolock}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=")
syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x84406d, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x300c249, &(0x7f0000000600)={[{@sb={'sb', 0x3d, 0x293}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@user_xattr}, {@nodelalloc}, {@data_err_ignore}, {@noblock_validity}, {@noquota}, {@journal_checksum}]}, 0x1, 0x60d, &(0x7f0000000800)="$eJzs3c9rG9kdAPDvjGzXTtw6KSU0gVJDDwmU+EcaSNtTkktz6CHQHErpISa2g4mcmNiBJg3UuTXQQym9lpJL/4HeS+i1t1Joe9vzQnZZvOxhd4mWGc0kWllyFMX64cznA5LevBnpva+enueNxk8TQGXNZ3dpxOmIuJlEzLWsm43myvliu71PHt/Kbkk0Gr/4OImkyCu3f1k8Hs/ukojpiPj31Yhv1/aXu/3w0Z2VeqPpdxGLO5tbi9sPH53f2Fy5vXZ77e7yhR9fvLT0k+WLy4cSZxnXdPG4/p/6+SQux43J365GWxyHZT7m42URYmv+RERcyhId3pejpgwhGXE96E+t+DxORsSpmItavtQ0Fxt/GGnlgIFq1CIaQEUl+j9UVDkOKI/tB3EcPM5eXGkeAO2Pf6L53UhM58dGx/aSliOj5vHuiUMoPyvjy8dn/pLdosv3EBOHUE43u08i4rud4k/yup0ovjE5tpdG2vK8LL0UEVPFe5H2Wf582/KwP39vE39rO2TxXi4es/yrfZY/6vgBqKbnV4od+W629Hr/l40My/FPdBj/zHbYd/Vj1Pu/7uO/cn8/nX9HnraNw7Ixz/XOLznZnvHB02t/6lZ+6/gvu2Xll2PBYXjxJOJMW/y/zwdzyav2Tzq0f7bJzR7L+Nl/P7rWbV3/8R/OGafGs4izHY9/kq+VtLizuVXmtZ2fXFzfqK8tNe87lvGPf/36b93KH4f2jy7xH9T+Wd5Wj2X8/fqzzW7rZt8Yf/rhVHIjT00VOb9Z2dm5vxwxlfy82KQl/8LBdSm3KV8ji//cDzr3/wPizxt6t8f4t355Z6+Z2v+Z7bn99/1Vyb1s9FiHbrL4V/ts/z/2WMZnv3rwvbasmTJxUPwz+18q6fU9BwAAAAAAgCpK83OwSbrwKp2mCwvNObzfiWNp/d72zg/X7z24uxpxLv9/yMm0PNM911xOsuXl4v9hy+ULbcs/ioiTEfHn2ky+vHDrXn111MEDAAAAAAAAAAAAAAAAAADAmDhezP8vr1P9aa05/78nO6cGXDtg4AZ5gTlgvOn/UF15/+/3Cq7AkWb/D9Wl/0N16f9QXfo/VJf+D9XVU/+fGnw9gOGz/4fq0v8BAAAA4L108vvP/59ExO5PZ/JbtJzpmxxpzYBBe/s+Pj+QegDDVxvq04Bx8urUv+n/UDk9jf8/L34ccPDVAUYg6ZSZDw4aB3f+5x2f2aun7/JkAAAAAAAAAAAAAKias6fN/4eqSuOfo64CMCLvMJHfbwDAEeen/6G6HOMDb5rFP91txbvN/wcAAAAAAAAAAAAA3sJsfkvSheISoLORpgsLEd+MiBMxmaxv1NeWIuJbEfG/2uQ3suXlUVcaAAAAAAAAAAAAAAAAAAAA3jPbDx/dWanX1+63Jr7Yl/N+J8qroI5LfVoTkQy/0JmIGIfYB5OYaMlJInazlh+Lit3fjrGoRppXY8R/mAAAAAAAAAAAAAAAAAAAoIJa5h53duavQ64RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzf6+v/959I3vA6o44RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiavgoAAP//F1A3Eg==")
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x84406d, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0)

44.666153753s ago: executing program 7 (id=4264):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b80)=[{{&(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x20}}], 0x1, 0x4800)
sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040)

44.647146822s ago: executing program 5 (id=4265):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x7)

44.613782231s ago: executing program 3 (id=4266):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x153, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c)

44.522091528s ago: executing program 8 (id=4267):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1bf5f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x3c}}, 0x0)

44.478849026s ago: executing program 6 (id=4268):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newqdisc={0x150, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x10, 0x80, 0x8, 0x8, 0x6}}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1}]}}]}, 0x150}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newqdisc={0x150, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x10, 0x80, 0x8, 0x8, 0x6}}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1}]}}]}, 0x150}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b40)=@newqdisc={0x150, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x10, 0x80, 0x8, 0x8, 0x6}}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x2}]}}]}, 0x150}}, 0x0)

44.361704562s ago: executing program 9 (id=4269):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x4}, @TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010)

44.150241294s ago: executing program 5 (id=4270):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700"], 0x2c}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

44.14997006s ago: executing program 7 (id=4271):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)

44.113131714s ago: executing program 3 (id=4272):
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000580)={0x0, 0x4}, &(0x7f00000005c0)=0x8)

44.060786757s ago: executing program 8 (id=4273):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/callback_tcpport\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000240)=0x6ef, 0x12)

43.802164149s ago: executing program 9 (id=4274):
ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd6a, 0x0, {0x4}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic='\x00']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

43.80197179s ago: executing program 5 (id=4275):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/lru_gen\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)='- 1 0 3', 0x7)

43.7406607s ago: executing program 7 (id=4276):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000438000/0x3000)=nil, 0x400000, 0x2, 0x2})

43.731299708s ago: executing program 3 (id=4277):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
r0 = socket(0x15, 0x5, 0x0)
connect$unix(r0, &(0x7f00000003c0)=@abs={0xa}, 0x6e)
getsockname$llc(r0, 0x0, &(0x7f0000000040))

43.658207489s ago: executing program 6 (id=4278):
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r1=>0x0)
io_submit(r1, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)='m', 0xffffff4c}])
close(0x3)

43.652982072s ago: executing program 8 (id=4279):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000100000004000000080000000000", @ANYRES32=0x0, @ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)

43.456089015s ago: executing program 5 (id=4280):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000000000101040000000000000000020000003400018014000180080001000102030408000200050607081c0002800500010006000000060002002710000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000150000060003002710000008000700000003e8100005800800010066747000"], 0x9c}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="b4000000000201040000000000000000020000003400018014000180080001000102030408000200050607081c0002800500010006000000060002002710000006000300001500003400028014000180080001000102030408000200050607081c00028005000100060000000600020000000000060003004e200000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff0000080004000000012c"], 0xb4}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="b4000000000201040000000000000000020000003400018014000180080001000102030408000200050607081c0002800500010006000000060002002710000006000300001500003400028014000180080001000102030508000200050607081c00028005000100060000000600020000000000060003004e200000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff0000080004000000012c"], 0xb4}}, 0x0)

43.322084505s ago: executing program 3 (id=4281):
r0 = socket(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5400000030000504010000000000000000000000400001803c0001800900010067617465000000002c000280180002000000000000000000000000000000000000000000100005800c00018008000300e8030000", 0x54}], 0x1}, 0x0)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, 0x0)

43.32186317s ago: executing program 7 (id=4282):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0xe92}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

43.192264992s ago: executing program 8 (id=4283):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={<r1=>0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90)

33.570774621s ago: executing program 3 (id=4284):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000002200)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x5e22, @loopback}}}, 0x90)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x2}}, 0x18)

33.52657672s ago: executing program 9 (id=4285):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x20404a, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x1, 0x1e7, &(0x7f0000000980)="$eJzslr2qE0EUx/8zu8zmiiJY2lh4QS3cu7tRsRFuGisLwY9gIRh0DTHRQJLCBCQGH8BesLCw9wUEbX0IiVY2sbOxcGU+NjuGbD5NUtzzg5z8dzJz9sw5w5mAIIgjy/dvv4YJCkofxz48M/7DyeZwa/7Xws8Xn29cL7++//6LN/T3pvlMksXf7wL4VHLQGa/9d/W++b4NPtZ3wHHB6LKJXfIAHHeNjsFwz+gnlm6Cwff9x7VG7D9sCkgRSBNKE0lTnIxvNGB4ZMXHrN/b3V690mjErQ2KefkblTiuWfHZ9fKhow2s/IXgCI0uguGW0VfhpbnRKbH2f9rN/Dsz9y+w1m5fzZ8jQ1nC86kTuaUSAFYLFWBjh2+xVoHx0hzZTZ6hHOFAibSi/8mzs6VdyIM+Zw7crSVTmAqy5ZPpWSOr1OLjoV6TjiR9/azmnMxxmPQXfIXQfg6XS0vWn5J3DOes/qRbyRt11cgSHrS7vYu1p5VqXI2fRVHxSnApCC5HB6oRaTuj/+2p/nQs8z/1TpIIJvC80um0QmX/yKtGqUjbaR2XA3w04Dh/Vj/L4ooJvwVLM/Nx4YLp3lv/kBs9QRDE7jgD9jsxuKkwtwms/7o3dxgjQRAEQRAEQRAEQRDr8TcAAP//7PFEyw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
readahead(r0, 0x6, 0x0)

33.034145967s ago: executing program 5 (id=4286):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='/', 0x1)

31.452830695s ago: executing program 7 (id=4287):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xc]}, 0x0, 0x0, 0x8)
tkill(r0, 0x4)

30.041999662s ago: executing program 8 (id=4288):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/profiles\x00', 0x2280, 0x0)
pread64$ublk_bdev(r0, &(0x7f0000000140)=""/6, 0x6, 0xb)

29.115223214s ago: executing program 6 (id=4289):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)

13.192086228s ago: executing program 39 (id=4285):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x20404a, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x1, 0x1e7, &(0x7f0000000980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
readahead(r0, 0x6, 0x0)

6.216572646s ago: executing program 40 (id=4284):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000002200)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x5e22, @loopback}}}, 0x90)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x2}}, 0x18)

0s ago: executing program 41 (id=4289):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)

kernel console output (not intermixed with test programs):

832] gud 5-1:1.0: probe with driver gud failed with error -71
[  486.705448][ T5832] usb 5-1: USB disconnect, device number 15
[  487.495063][T14364] loop4: detected capacity change from 0 to 512
[  487.523926][T14364] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  487.553951][T14364] EXT4-fs (loop4): 1 truncate cleaned up
[  487.575952][T14364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  487.759051][T14372] ima: policy update failed
[  487.759354][   T31] audit: type=1802 audit(1790956422.004:239): pid=14372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3231" res=0 errno=0
[  488.350284][ T9416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.547946][T14390] loop6: detected capacity change from 0 to 512
[  488.671834][T14390] EXT4-fs error (device loop6): ext4_xattr_inode_iget:473: comm syz.6.3239: EA inode 11 has unexpected i_nlink=0 ref_count=7168870745731235840
[  488.671869][T14390] loop6: lost filesystem error report for type 5 error -117
[  488.672300][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  488.672318][    C0] EXT4-fs (loop6): initial error at time 1790956422: ext4_xattr_inode_iget:473
[  488.672338][    C0] EXT4-fs (loop6): last error at time 1790956422: ext4_xattr_inode_iget:473
[  488.729047][T14390] EXT4-fs (loop6): 1 orphan inode deleted
[  488.746505][T14390] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  488.809812][T14390] EXT4-fs (loop6): shut down requested (2)
[  489.088054][ T7909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.271114][   T43] rpcbind: server 127.0.0.1 not responding, timed out
[  490.730673][T14431] loop6: detected capacity change from 0 to 256
[  490.800656][T14431] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d)
[  491.335937][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3264'.
[  491.335963][T14448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3264'.
[  491.397070][T14446] loop8: detected capacity change from 0 to 2048
[  491.449261][T14446] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  491.564315][T14443] bond2: Unable to set peer notification delay as MII monitoring is disabled
[  491.619646][T14443] bond2 (unregistering): Released all slaves
[  491.761339][T14455] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.3267'.
[  491.761361][T14455] openvswitch: netlink: ufid size 21390 bytes exceeds the range (1, 16)
[  491.761375][T14455] openvswitch: netlink: Message has 4 unknown bytes.
[  491.783173][    T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  491.965005][    T9] usb 3-1: Using ep0 maxpacket: 16
[  491.986777][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  491.990195][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  492.016156][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.016178][    T9] usb 3-1: Product: syz
[  492.016191][    T9] usb 3-1: Manufacturer: syz
[  492.016203][    T9] usb 3-1: SerialNumber: syz
[  492.022969][    T9] usb 3-1: config 0 descriptor??
[  492.086479][    T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  492.086509][    T9] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  492.491729][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3273'.
[  492.529290][T14460] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.757642][    T9] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  492.812425][ T5843] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  492.972154][ T5843] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  492.989343][ T5843] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  492.989365][ T5843] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3
[  492.989403][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.024132][ T5843] usb 2-1: config 0 descriptor??
[  493.144926][    T9] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  493.144976][    T9] em28xx 3-1:0.0: board has no eeprom
[  493.262593][    T9] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  493.262643][    T9] em28xx 3-1:0.0: dvb set to bulk mode.
[  493.302748][    T9] usb 3-1: USB disconnect, device number 17
[  493.306895][    T9] em28xx 3-1:0.0: Disconnecting em28xx
[  493.307358][ T5796] em28xx 3-1:0.0: Binding DVB extension
[  493.413754][T14486] Bluetooth: MGMT ver 1.23
[  493.634542][ T5796] em28xx 3-1:0.0: Registering input extension
[  493.656316][    T9] em28xx 3-1:0.0: Closing input extension
[  493.676122][ T5843] Bluetooth: Can't get version to change to load ram patch err
[  493.676138][ T5843] Bluetooth: Loading sysconfig file failed
[  493.676160][ T5843] ath3k 2-1:0.0: probe with driver ath3k failed with error -71
[  493.716901][ T5843] usb 2-1: USB disconnect, device number 18
[  493.879171][T14492] tap0: tun_chr_ioctl cmd 1074025677
[  493.879268][T14492] tap0: linktype set to 778
[  494.081505][    T9] em28xx: Freeing device
[  494.470420][ T1002] IPVS: starting estimator thread 0...
[  494.497744][T14505] IPVS: sh: SCTP 172.20.20.187:0 - no destination available
[  494.553410][T14507] IPVS: using max 32 ests per chain, 76800 per kthread
[  494.926205][T14521] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  495.470590][T14499] loop6: detected capacity change from 0 to 32768
[  495.471538][T14499] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  495.505445][T14499] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3287 (14499)
[  495.634621][T14499] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  495.634653][T14499] BTRFS info (device loop6): using crc32c checksum algorithm
[  495.999017][T14499] BTRFS info (device loop6): rebuilding free space tree
[  496.444914][T14499] BTRFS info (device loop6): disabling free space tree
[  496.448215][T14499] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  496.448238][T14499] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  496.634139][T14499] BTRFS info (device loop6): enabling ssd optimizations
[  496.634162][T14499] BTRFS info (device loop6): turning on async discard
[  496.634177][T14499] BTRFS info (device loop6): force clearing of disk cache
[  496.634193][T14499] BTRFS info (device loop6): use zstd compression, level 3
[  497.074843][ T7909] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  497.638634][    T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  497.683088][ T5843] bridge0: entered promiscuous mode
[  497.756178][T14579] loop2: detected capacity change from 0 to 1024
[  497.757049][T14579] EXT4-fs: Ignoring removed bh option
[  497.786349][    T9] usb 2-1: Using ep0 maxpacket: 8
[  497.786938][    T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64
[  497.818120][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[  497.818142][    T9] usb 2-1: Product: syz
[  497.818156][    T9] usb 2-1: Manufacturer: syz
[  497.818168][    T9] usb 2-1: SerialNumber: syz
[  497.884673][T14579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  497.884774][T14579] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  497.888109][    T9] usb 2-1: config 0 descriptor??
[  497.968520][    T9] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  498.041715][T14579] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 3: comm syz.2.3315: lblock 3 mapped to illegal pblock 3 (length 3)
[  498.062057][T14579] EXT4-fs (loop2): Remounting filesystem read-only
[  498.122944][    T9] gspca_sn9c2028: read1 error -32
[  498.185321][    T9] gspca_sn9c2028: read1 error -32
[  498.405634][    T9] usb 2-1: USB disconnect, device number 19
[  498.758861][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  498.960198][T14594] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3322'.
[  499.170572][T14598] loop2: detected capacity change from 0 to 2048
[  499.213368][T14598] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  499.283972][T14598] syz.2.3319: attempt to access beyond end of device
[  499.283972][T14598] loop2: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[  499.291157][T14599] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  500.120466][T14613] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3330'.
[  500.341396][T14592] loop6: detected capacity change from 0 to 40427
[  500.370982][T14592] F2FS-fs (loop6): Wrong segment_count / block_count (31 > 0)
[  500.371005][T14592] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  500.371908][T14592] F2FS-fs (loop6): invalid crc value
[  500.790421][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  500.790473][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  501.055691][T14592] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  501.081651][T14631] loop4: detected capacity change from 0 to 64
[  501.219066][T14631] hfs: request for non-existent node 131072 in B*Tree
[  501.219086][T14631] hfs: request for non-existent node 131072 in B*Tree
[  501.321900][T14592] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  501.321925][T14592] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  501.555576][T14592] F2FS-fs (loop6): Stopped filesystem due to reason: 0
[  502.237193][T14653] loop1: detected capacity change from 0 to 16
[  502.291909][T14653] erofs (device loop1): mounted with root inode @ nid 36.
[  503.493159][    T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  503.643192][    T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  503.644152][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  503.644178][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  503.644209][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.699155][    T9] usb 7-1: config 0 descriptor??
[  504.167163][    T9] hid_parser_main: 11 callbacks suppressed
[  504.181979][    T9] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0
[  504.182010][    T9] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0
[  504.182029][    T9] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0
[  504.182047][    T9] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0
[  504.182065][    T9] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0
[  504.182082][    T9] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0
[  504.182100][    T9] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0
[  504.316656][    T9] arvo 0003:1E7D:30D4.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.6-1/input0
[  504.726434][    T9] usb 7-1: USB disconnect, device number 11
[  505.128981][T14704] loop8: detected capacity change from 0 to 8192
[  505.637740][T14720] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3375'.
[  506.223008][  T831] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  506.373708][  T831] usb 7-1: Using ep0 maxpacket: 32
[  506.375804][  T831] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  506.381231][  T831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  506.381257][  T831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  506.381288][  T831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.445972][  T831] usb 7-1: config 0 descriptor??
[  506.603182][T14738] netlink: Conntrack attr has 12 unknown bytes
[  506.603233][T14738] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  506.907014][  T831] savu 0003:1E7D:2D5A.0014: unknown main item tag 0x0
[  506.907041][  T831] savu 0003:1E7D:2D5A.0014: ignoring exceeding usage max
[  506.931952][  T831] savu 0003:1E7D:2D5A.0014: item fetching failed at offset 4/8
[  506.947771][  T831] savu 0003:1E7D:2D5A.0014: parse failed
[  506.950775][  T831] savu 0003:1E7D:2D5A.0014: probe with driver savu failed with error -22
[  507.127380][T14750] loop1: detected capacity change from 0 to 1024
[  507.172962][ T5832] usb 7-1: USB disconnect, device number 12
[  507.458544][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3391'.
[  508.408181][T14778] sg_write: data in/out 270400/136 bytes for SCSI command 0x0-- guessing data in;
[  508.408181][T14778]    program syz.1.3401 not setting count and/or reply_len properly
[  509.131871][   T31] audit: type=1326 audit(1790956443.374:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14802 comm="syz.6.3414" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786df9e159 code=0x7ffc0000
[  509.132205][   T31] audit: type=1326 audit(1790956443.374:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14802 comm="syz.6.3414" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786df9e159 code=0x7ffc0000
[  509.229020][   T31] audit: type=1326 audit(1790956443.474:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14802 comm="syz.6.3414" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f786df9e159 code=0x7ffc0000
[  509.331224][   T31] audit: type=1326 audit(1790956443.574:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14802 comm="syz.6.3414" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786df9e159 code=0x7ffc0000
[  509.372761][   T31] audit: type=1326 audit(1790956443.624:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14802 comm="syz.6.3414" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786df9e159 code=0x7ffc0000
[  509.375751][   T31] audit: type=1326 audit(1790956443.624:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14810 comm="syz.6.3414" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f786df5e98e code=0x7ffc0000
[  509.524027][   T31] audit: type=1326 audit(1790956443.774:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14802 comm="syz.6.3414" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f786df9e159 code=0x7ffc0000
[  509.524076][   T31] audit: type=1326 audit(1790956443.774:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14802 comm="syz.6.3414" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786df9e159 code=0x7ffc0000
[  509.524114][   T31] audit: type=1326 audit(1790956443.774:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14802 comm="syz.6.3414" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786df9e159 code=0x7ffc0000
[  509.627163][   T31] audit: type=1326 audit(1790956443.874:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14810 comm="syz.6.3414" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f786df9e159 code=0x7ffc0000
[  509.875668][T14818] netlink: 'syz.4.3419': attribute type 4 has an invalid length.
[  512.963243][T14894] xt_hashlimit: size too large, truncated to 1048576
[  513.026813][T14895] C: renamed from lo (while UP)
[  513.056702][T14888] loop1: detected capacity change from 0 to 8192
[  513.429722][T14895] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  514.348649][T14920] loop6: detected capacity change from 0 to 128
[  514.446686][T14920] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  514.446727][T14920] hpfs: filesystem error: improperly stopped
[  514.446741][T14920] hpfs: You really don't want any checks? You are crazy...
[  514.447142][T14920] hpfs: hpfs_map_sector(): read error
[  514.447152][T14920] hpfs: code page support is disabled
[  514.448421][T14920] hpfs: hpfs_map_4sectors(): unaligned read
[  514.448487][T14920] hpfs: hpfs_map_4sectors(): unaligned read
[  514.448495][T14920] hpfs: filesystem error: unable to find root dir
[  515.005371][  T831] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  515.046118][ T5832] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  515.154440][  T831] usb 2-1: Using ep0 maxpacket: 32
[  515.155035][  T831] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  515.156225][  T831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.194731][ T5832] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00
[  515.215896][ T5832] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  515.215932][ T5832] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024
[  515.215953][ T5832] usb 9-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  515.215973][ T5832] usb 9-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255
[  515.216004][ T5832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.283691][T14931] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  515.288523][  T831] usb 2-1: config 0 descriptor??
[  515.532795][    T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  515.620007][  T831] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  515.676655][  T831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  515.678532][  T831] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  515.678693][  T831] usb 2-1: media controller created
[  515.692470][    T9] usb 7-1: Using ep0 maxpacket: 16
[  515.725653][    T9] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  515.763572][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  515.770486][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.770507][    T9] usb 7-1: Product: syz
[  515.770608][    T9] usb 7-1: Manufacturer: syz
[  515.770622][    T9] usb 7-1: SerialNumber: syz
[  515.886170][    T9] usb 7-1: config 0 descriptor??
[  515.961535][    T9] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  515.961568][    T9] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  516.031466][  T831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  516.576758][  T831] az6027: usb out operation failed. (-71)
[  516.578929][  T831] az6027: usb out operation failed. (-71)
[  516.578941][  T831] stb0899_attach: Driver disabled by Kconfig
[  516.578953][  T831] az6027: no front-end attached
[  516.578953][  T831] 
[  516.579504][  T831] az6027: usb out operation failed. (-71)
[  516.579515][  T831] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  516.620353][ T5832] ims_pcu 9-1:1.0: GET_INFO command failed, error: -71
[  516.645022][ T5832] ims_pcu 9-1:1.0: probe with driver ims_pcu failed with error -71
[  516.663382][  T831] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26
[  516.704964][  T831] dvb-usb: schedule remote query interval to 400 msecs.
[  516.704981][  T831] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  516.745475][  T831] usb 2-1: USB disconnect, device number 20
[  516.751472][    T9] em28xx 7-1:0.0: chip ID is em2874
[  516.934492][ T5796] usb 9-1: USB disconnect, device number 7
[  517.074537][    T9] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  517.074567][    T9] em28xx 7-1:0.0: board has no eeprom
[  517.159092][  T831] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  517.185814][    T9] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  517.185841][    T9] em28xx 7-1:0.0: dvb set to bulk mode.
[  517.248442][ T5796] em28xx 7-1:0.0: Binding DVB extension
[  517.260689][    T9] usb 7-1: USB disconnect, device number 13
[  517.278572][    T9] em28xx 7-1:0.0: Disconnecting em28xx
[  517.319949][T14956] loop1: detected capacity change from 0 to 16
[  517.338322][T14956] erofs (device loop1): mounted with root inode @ nid 36.
[  517.427274][T14956] erofs (device loop1): unsupported i_format 65535 of nid 89
[  517.679071][ T5796] em28xx 7-1:0.0: Registering input extension
[  518.034223][ T5796] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[  518.034241][ T5796] Registered IR keymap rc-empty
[  518.206377][ T5796] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  518.223065][ T5629] Bluetooth: hci0: command 0x0406 tx timeout
[  518.373485][ T5796] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input27
[  518.406063][T14975] loop4: detected capacity change from 0 to 4096
[  518.519539][T14975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  518.609479][T14975] EXT4-fs (loop4): shut down requested (0)
[  518.732214][ T5796] em28xx 7-1:0.0: Input extension successfully initialized
[  518.745941][    T9] em28xx 7-1:0.0: Closing input extension
[  518.896436][T14990] loop2: detected capacity change from 0 to 16
[  519.016280][T14990] erofs (device loop2): mounted with root inode @ nid 36.
[  519.407959][ T9416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.795998][    T9] em28xx: Freeing device
[  519.823828][T15001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3479'.
[  520.556289][T15009] loop8: detected capacity change from 0 to 131072
[  520.588365][T15009] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(0)
[  520.588391][T15009] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  520.602990][T15009] F2FS-fs (loop8): invalid crc value
[  520.737184][T15009] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  520.757737][T15009] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  520.757759][T15009] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  520.899953][T15019] kAFS: bad VL server IP address

syzkaller
syzkaller login: [  521.421913][T15033] loop1: detected capacity change from 0 to 24
[  521.447958][T15033] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  521.499763][T15032] loop2: detected capacity change from 0 to 2048
[  521.628723][T15036] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  521.718500][T15033] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  522.429711][T15048] loop2: detected capacity change from 0 to 512
[  522.469149][T15048] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.3492: corrupted in-inode xattr: invalid ea_ino
[  522.469180][T15048] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  522.470772][T15048] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.3492: couldn't read orphan inode 15 (err -117)
[  522.470806][T15048] loop2: lost filesystem error report for type 5 error -117
[  522.472310][    C0] EXT4-fs (loop2): error count since last fsck: 2
[  522.472328][    C0] EXT4-fs (loop2): initial error at time 1790956456: ext4_iget_extra_inode:5210: inode 15
[  522.472356][    C0] EXT4-fs (loop2): last error at time 1790956456: ext4_orphan_get:1408
[  522.564774][T15048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  522.980385][T15060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3497'.
[  523.069852][T15064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3498'.
[  523.373891][T15056] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3492: invalid indirect mapped block 234881024 (level 0)
[  523.374024][T15056] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  523.694918][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.738943][T15079] loop8: detected capacity change from 0 to 2048
[  523.810515][T15079] EXT4-fs: Ignoring removed nobh option
[  523.887972][T15079] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  523.888058][T15079] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  523.961973][T15081] loop1: detected capacity change from 0 to 2048
[  524.037913][T15081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  524.037994][T15081] ext4 filesystem being mounted at /613/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  524.313500][T12455] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.496280][T15094] loop4: detected capacity change from 0 to 512
[  524.815928][T15081] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null.
[  524.865897][T15081] overlayfs: failed to verify upper root origin
[  525.589774][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.651675][T15102] loop4: detected capacity change from 0 to 32768
[  526.726801][T15102] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  526.811963][T15102] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  526.840648][T15102] XFS (loop4): Tail block (0x29) overwrite detected. Updated to 0x30
[  526.880264][T15102] XFS (loop4): Ending clean mount
[  526.946750][T15128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3522'.
[  526.998925][T15102] XFS (loop4): User initiated shutdown received.
[  527.012958][T15102] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468).  Shutting down filesystem.
[  527.013002][T15102] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  527.021217][T15102] XFS (loop4): Error -5 reserving per-AG metadata reserve pool.
[  527.205898][ T9416] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  527.965255][T15136] ovs-dp0: entered promiscuous mode
[  528.071418][T15147] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3531'.
[  528.680464][T15158] sd 0:0:1:0: PR command failed: 1026
[  528.680506][T15158] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  528.680540][T15158] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  528.688374][    T9] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  528.757583][T15159] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.3538'.
[  528.881433][    T9] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  528.915137][    T9] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  528.915162][    T9] usb 9-1: Product: syz
[  528.915175][    T9] usb 9-1: Manufacturer: syz
[  528.915191][    T9] usb 9-1: SerialNumber: syz
[  528.954213][    T9] usb 9-1: config 0 descriptor??
[  529.710335][    T9] usb 9-1: USB disconnect, device number 8
[  529.818067][ T3251] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.156933][ T3251] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.271138][T14932] udevd[14932]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  530.427182][ T3251] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.604121][ T3251] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.838683][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  530.854278][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  530.856860][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  530.857646][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  530.858731][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  531.208509][T15187] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3550'.
[  531.248974][T15189] loop1: detected capacity change from 0 to 1024
[  531.329138][T15189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  531.329223][T15189] ext4 filesystem being mounted at /620/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  531.568725][T15187] macvlan0: entered promiscuous mode
[  531.569400][T15187] netlink: 'syz.8.3550': attribute type 1 has an invalid length.
[  531.569415][T15187] netlink: 'syz.8.3550': attribute type 2 has an invalid length.
[  531.569427][T15187] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3550'.
[  531.845457][T15200] overlayfs: regular lower layers cannot follow data lower layers
[  531.862886][T15189] EXT4-fs error (device loop1): ext4_readdir:280: inode #12: block 80: comm syz.1.3551: path /: bad entry in directory: directory entry overrun - offset=296, inode=0, rec_len=1024, size=1024 fake=0
[  531.864098][T15197] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  532.112231][T14945] kernel write not supported for file /comedi4 (pid: 14945 comm: kworker/0:3)
[  532.170466][ T3251] bridge_slave_1: left allmulticast mode
[  532.170491][ T3251] bridge_slave_1: left promiscuous mode
[  532.170673][ T3251] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.214569][ T3251] bridge_slave_0: left allmulticast mode
[  532.214591][ T3251] bridge_slave_0: left promiscuous mode
[  532.214754][ T3251] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.340979][ T5616] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 16: comm syz-executor: path /620/file0: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0
[  532.497921][ T5616] EXT4-fs error (device loop1): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /620/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0
[  532.502096][ T5616] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0
[  532.634669][T15212] loop4: detected capacity change from 0 to 1024
[  532.640898][ T5616] EXT4-fs error (device loop1): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /620/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0
[  532.641601][ T5616] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0
[  532.673805][ T5616] EXT4-fs error (device loop1): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /620/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0
[  532.745525][ T5616] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0
[  532.746304][ T5616] EXT4-fs error (device loop1): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /620/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0
[  532.751409][T15212] EXT4-fs: Ignoring removed bh option
[  532.859456][T15212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  532.944081][ T5629] Bluetooth: hci2: command tx timeout
[  533.200403][ T9416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.757175][T15232] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3565'.
[  533.857636][ T3251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  533.884918][ T3251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  533.890882][ T3251] bond0 (unregistering): Released all slaves
[  533.940445][ T3251] bond1 (unregistering): Released all slaves
[  534.026571][T15232] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3565'.
[  534.715098][ T9813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  534.946001][T15254] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  535.028017][ T5629] Bluetooth: hci2: command tx timeout
[  535.277329][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5
[  535.280634][T15257] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  535.556966][ T3251] hsr_slave_0: left promiscuous mode
[  535.561441][ T3251] hsr_slave_1: left promiscuous mode
[  535.562133][ T3251] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  535.562150][ T3251] batman_adv: batadv0: Removing interface: batadv_slave_0
[  535.613336][ T3251] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  535.613354][ T3251] batman_adv: batadv0: Removing interface: batadv_slave_1
[  535.641735][ T3251] veth1_macvtap: left promiscuous mode
[  535.641764][ T3251] veth0_macvtap: left promiscuous mode
[  535.641852][ T3251] veth1_vlan: left promiscuous mode
[  535.641906][ T3251] veth0_vlan: left promiscuous mode
[  536.450576][   T31] audit: type=1326 audit(1790956470.694:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.8.3577" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1799e159 code=0x7ffc0000
[  536.489925][   T31] audit: type=1326 audit(1790956470.734:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.8.3577" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1799e159 code=0x7ffc0000
[  536.538416][   T31] audit: type=1326 audit(1790956470.784:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.8.3577" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1799e159 code=0x7ffc0000
[  536.538610][   T31] audit: type=1326 audit(1790956470.784:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.8.3577" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1799e159 code=0x7ffc0000
[  536.605560][   T31] audit: type=1326 audit(1790956470.854:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.8.3577" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4b1799e159 code=0x7ffc0000
[  536.605601][   T31] audit: type=1326 audit(1790956470.854:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.8.3577" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1799e159 code=0x7ffc0000
[  536.605639][   T31] audit: type=1326 audit(1790956470.854:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.8.3577" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1799e159 code=0x7ffc0000
[  536.676937][   T31] audit: type=1326 audit(1790956470.934:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.8.3577" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1799e159 code=0x7ffc0000
[  536.676978][   T31] audit: type=1326 audit(1790956470.934:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.8.3577" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1799e159 code=0x7ffc0000
[  536.784113][   T31] audit: type=1326 audit(1790956471.034:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.8.3577" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f4b1799e159 code=0x7ffc0000
[  536.826642][T12961] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  536.840991][T12961] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  536.849681][T12961] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  536.863190][T12961] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  536.863828][T12961] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  537.102591][T12961] Bluetooth: hci2: command tx timeout
[  537.386299][T15292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3580'.
[  537.596128][ T3251] team0 (unregistering): Port device team_slave_1 removed
[  537.649323][ T3251] team0 (unregistering): Port device team_slave_0 removed
[  538.151201][T15302] loop4: detected capacity change from 0 to 1024
[  538.204676][T15302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  538.360141][T15308] EXT4-fs warning (device loop4): ext4_rmdir:3194: inode #11: comm syz.4.3583: empty directory 'file0' has too many links (111)
[  538.522026][ T9416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  538.562788][T15290] vlan2: entered promiscuous mode
[  538.562812][T15290] bond0: entered promiscuous mode
[  538.562825][T15290] bond_slave_0: entered promiscuous mode
[  538.563024][T15290] bond_slave_1: entered promiscuous mode
[  538.604043][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6
[  538.948852][T12961] Bluetooth: hci5: command tx timeout
[  539.183493][T12961] Bluetooth: hci2: command tx timeout
[  540.269501][ T3251] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  540.269540][ T3251] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.670419][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  540.687530][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  540.688327][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  540.689307][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  540.690311][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  540.924910][ T3251] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  540.924941][ T3251] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.984695][T15330] loop4: detected capacity change from 0 to 32768
[  541.000715][T15330] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3590 (15330)
[  541.022957][ T5629] Bluetooth: hci5: command tx timeout
[  541.046618][T15330] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  541.046642][T15330] BTRFS info (device loop4): using blake2b checksum algorithm
[  541.218458][T15330] BTRFS info (device loop4): setting nodatasum
[  541.218481][T15330] BTRFS info (device loop4): enabling ssd optimizations
[  541.218496][T15330] BTRFS info (device loop4): turning on async discard
[  541.218510][T15330] BTRFS info (device loop4): enabling free space tree
[  541.218526][T15330] BTRFS info (device loop4): force zlib compression, level 3
[  541.258970][  T831] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  541.413852][  T831] usb 9-1: Using ep0 maxpacket: 32
[  541.414503][  T831] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  541.415878][  T831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.451508][  T831] usb 9-1: config 0 descriptor??
[  541.519213][ T3251] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  541.519248][ T3251] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.691444][  T831] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  541.764654][T15183] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.764744][T15183] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.765074][T15183] bridge_slave_0: entered allmulticast mode
[  541.804833][T15183] bridge_slave_0: entered promiscuous mode
[  541.845493][  T831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  541.863583][  T831] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  541.863627][  T831] usb 9-1: media controller created
[  541.870073][T15183] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.870162][T15183] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.870286][T15183] bridge_slave_1: entered allmulticast mode
[  541.919654][T15183] bridge_slave_1: entered promiscuous mode
[  542.013468][  T831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  542.130465][ T3251] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  542.130499][ T3251] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.203296][  T831] az6027: usb out operation failed. (-71)
[  542.205526][  T831] az6027: usb out operation failed. (-71)
[  542.205538][  T831] stb0899_attach: Driver disabled by Kconfig
[  542.205547][  T831] az6027: no front-end attached
[  542.205547][  T831] 
[  542.207248][  T831] az6027: usb out operation failed. (-71)
[  542.207259][  T831] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  542.317722][  T831] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input28
[  542.384239][  T831] dvb-usb: schedule remote query interval to 400 msecs.
[  542.384260][  T831] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  542.426834][  T831] usb 9-1: USB disconnect, device number 9
[  542.598847][ T9416] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  542.710686][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7
[  542.773284][T15183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  542.788612][ T5629] Bluetooth: hci6: command tx timeout
[  542.831065][T15183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  542.917178][  T831] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  543.104950][ T5629] Bluetooth: hci5: command tx timeout
[  543.298150][T15183] team0: Port device team_slave_0 added
[  543.317356][T15183] team0: Port device team_slave_1 added
[  543.465754][T15394] syz_tun: entered promiscuous mode
[  543.513511][T15394] vlan2: entered promiscuous mode
[  544.270951][T15409] loop4: detected capacity change from 0 to 1024
[  544.289680][T15183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  544.289694][T15183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  544.289717][T15183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  544.374278][T15409] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  544.415685][T15409] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #3: block 1: comm syz.4.3604: lblock 1 mapped to illegal pblock 1 (length 1)
[  544.415716][T15409] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  544.415917][T15409] EXT4-fs (loop4): Remounting filesystem read-only
[  544.415933][T15409] __quota_error: 9 callbacks suppressed
[  544.415943][T15409] Quota error (device loop4): write_blk: dquota write failed
[  544.415970][T15409] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  544.416074][T15409] EXT4-fs (loop4): 1 orphan inode deleted
[  544.419985][T15409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  544.515870][T15183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  544.515883][T15183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  544.515907][T15183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  544.850734][ T9416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  544.862830][ T5629] Bluetooth: hci6: command tx timeout
[  544.988103][T15417] nbd: couldn't find device at index 234
[  545.183618][ T5629] Bluetooth: hci5: command tx timeout
[  545.299138][T15428] loop8: detected capacity change from 0 to 512
[  545.299954][T15428] EXT4-fs: Ignoring removed i_version option
[  545.325795][T15428] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  545.473084][T15428] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  545.482296][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  545.482311][    C0] EXT4-fs (loop8): initial error at time 1790956479: ext4_mb_generate_buddy:1317
[  545.482332][    C0] EXT4-fs (loop8): last error at time 1790956479: ext4_mb_generate_buddy:1317
[  545.533445][T15428] Quota error (device loop8): write_blk: dquota write failed
[  545.533462][T15428] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5
[  545.533542][T15428] Quota error (device loop8): write_blk: dquota write failed
[  545.533625][T15428] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[  545.533660][T15428] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.3609: Failed to acquire dquot type 1
[  545.533679][T15428] loop8: lost filesystem error report for type 5 error -28
[  545.633427][T15183] hsr_slave_0: entered promiscuous mode
[  545.634296][T15183] hsr_slave_1: entered promiscuous mode
[  545.634873][T15183] debugfs: 'hsr0' already exists in 'hsr'
[  545.634888][T15183] Cannot create hsr debugfs directory
[  545.635476][T15428] EXT4-fs (loop8): 1 truncate cleaned up
[  545.683976][T15428] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  545.740873][ T3251] bridge_slave_1: left allmulticast mode
[  545.740896][ T3251] bridge_slave_1: left promiscuous mode
[  545.741067][ T3251] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.789284][ T3251] bridge_slave_0: left allmulticast mode
[  545.789304][ T3251] bridge_slave_0: left promiscuous mode
[  545.789463][ T3251] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.820912][T15428] EXT4-fs error (device loop8): __ext4_remount:6872: comm syz.8.3609: Abort forced by user
[  545.824316][T15428] EXT4-fs (loop8): Remounting filesystem read-only
[  545.824332][T15428] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  545.996027][T12455] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  546.300387][T15444] loop4: detected capacity change from 0 to 512
[  546.314900][T15444] EXT4-fs: Ignoring removed nobh option
[  546.366800][T15444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  546.366891][T15444] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  546.659798][ T9416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  546.944754][ T5629] Bluetooth: hci6: command tx timeout
[  546.972405][ T5796] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  546.995608][ T3251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  547.000942][ T3251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  547.026635][ T3251] bond0 (unregistering): Released all slaves
[  547.056733][ T3251] bond1 (unregistering): Released all slaves
[  547.124810][ T5796] usb 9-1: Using ep0 maxpacket: 32
[  547.126715][ T5796] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  547.127732][ T5796] usb 9-1: config index 0 descriptor too short (expected 27632, got 27)
[  547.127752][ T5796] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  547.127770][ T5796] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92
[  547.127787][ T5796] usb 9-1: config 1 has no interface number 0
[  547.127825][ T5796] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  547.127847][ T5796] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  547.127879][ T5796] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.303571][ T5796] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found
[  547.418106][ T5796] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached
[  547.501757][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8
[  547.591369][ T3251] tipc: Disabling bearer <udp:syz2>
[  547.591676][ T3251] tipc: Left network mode
[  547.686207][ T3251] IPVS: stopping master sync thread 9407 ...
[  547.861886][ T5796] usb 9-1: USB disconnect, device number 10
[  547.864913][ T5796] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected
[  548.897539][ T3251] hsr_slave_0: left promiscuous mode
[  548.898128][ T3251] hsr_slave_1: left promiscuous mode
[  548.901955][ T3251] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  548.901974][ T3251] batman_adv: batadv0: Removing interface: batadv_slave_0
[  548.934318][ T3251] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  548.934340][ T3251] batman_adv: batadv0: Removing interface: batadv_slave_1
[  548.936359][ T3251] batman_adv: batadv0: Interface deactivated: ipvlan2
[  548.936376][ T3251] batman_adv: batadv0: Removing interface: ipvlan2
[  549.022597][ T5629] Bluetooth: hci6: command tx timeout
[  549.079884][ T3251] veth1_macvtap: left promiscuous mode
[  549.079933][ T3251] veth0_macvtap: left promiscuous mode
[  549.080017][ T3251] veth1_vlan: left promiscuous mode
[  549.080072][ T3251] veth0_vlan: left promiscuous mode
[  549.269204][T15492] loop8: detected capacity change from 0 to 256
[  549.371769][T15492] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb2f9d067, utbl_chksum : 0xe619d30d)
[  549.998082][T15501] loop8: detected capacity change from 0 to 512
[  550.408819][ T3251] team0 (unregistering): Port device team_slave_1 removed
[  550.474895][ T3251] team0 (unregistering): Port device team_slave_0 removed
[  551.132674][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10
[  551.137930][T15280] bridge0: port 1(bridge_slave_0) entered blocking state
[  551.138589][T15280] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.139000][T15280] bridge_slave_0: entered allmulticast mode
[  551.177008][T15280] bridge_slave_0: entered promiscuous mode
[  551.278855][T15280] bridge0: port 2(bridge_slave_1) entered blocking state
[  551.278944][T15280] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.279065][T15280] bridge_slave_1: entered allmulticast mode
[  551.283149][T15280] bridge_slave_1: entered promiscuous mode
[  551.561976][T15280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  551.641052][ T3251] IPVS: stop unused estimator thread 0...
[  552.004707][T15280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  552.303190][T14945] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[  552.453681][T14945] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  552.454603][T14945] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  552.454629][T14945] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  552.454660][T14945] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.526730][T14945] hub 9-1:4.0: USB hub found
[  552.541803][T15280] team0: Port device team_slave_0 added
[  552.629483][T15280] team0: Port device team_slave_1 added
[  552.775795][T14945] hub 9-1:4.0: 2 ports detected
[  552.775846][T14945] usb 9-1: selecting invalid altsetting 1
[  552.775874][T14945] hub 9-1:4.0: Using single TT (err -22)
[  552.974235][T14945] hub 9-1:4.0: config failed, can't get hub status (err -5)
[  553.010122][T15280] batman_adv: batadv0: Adding interface: batadv_slave_0
[  553.010139][T15280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  553.010163][T15280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  553.069574][T15280] batman_adv: batadv0: Adding interface: batadv_slave_1
[  553.069588][T15280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  553.069613][T15280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  553.296503][T14945] usb 9-1: USB disconnect, device number 11
[  553.497171][T15280] hsr_slave_0: entered promiscuous mode
[  553.500840][T15280] hsr_slave_1: entered promiscuous mode
[  553.501577][T15280] debugfs: 'hsr0' already exists in 'hsr'
[  553.501594][T15280] Cannot create hsr debugfs directory
[  553.659213][T15350] bridge0: port 1(bridge_slave_0) entered blocking state
[  553.659310][T15350] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.659423][T15350] bridge_slave_0: entered allmulticast mode
[  553.690588][T15350] bridge_slave_0: entered promiscuous mode
[  553.724286][T15350] bridge0: port 2(bridge_slave_1) entered blocking state
[  553.724380][T15350] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.724497][T15350] bridge_slave_1: entered allmulticast mode
[  553.756687][T15350] bridge_slave_1: entered promiscuous mode
[  554.044204][T15350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  554.091967][T15350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  554.481428][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11
[  554.551558][T15350] team0: Port device team_slave_0 added
[  554.661771][T15350] team0: Port device team_slave_1 added
[  554.898882][T15350] batman_adv: batadv0: Adding interface: batadv_slave_0
[  554.898899][T15350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  554.898923][T15350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  555.039541][T15350] batman_adv: batadv0: Adding interface: batadv_slave_1
[  555.039558][T15350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  555.039583][T15350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  555.167107][T15183] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  555.248839][T15183] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  555.262003][T15183] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  555.275278][T15183] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  555.293286][T15183] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  555.315765][T15183] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  555.451387][T15183] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  555.551239][T15183] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  555.737845][T15350] hsr_slave_0: entered promiscuous mode
[  555.738839][T15350] hsr_slave_1: entered promiscuous mode
[  555.741943][T15350] debugfs: 'hsr0' already exists in 'hsr'
[  555.741961][T15350] Cannot create hsr debugfs directory
[  556.449207][T15280] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  556.490089][T15280] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  556.490794][T15280] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  556.529346][T15280] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  556.646541][T15280] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  556.671450][T15280] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  556.735096][T15610] zero sized request
[  556.761487][T15280] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  556.787479][T15280] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  557.166489][T15623] misc userio: Can't change port type on an already running userio instance
[  557.422183][T15183] 8021q: adding VLAN 0 to HW filter on device bond0
[  557.457138][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12
[  557.656363][T15183] 8021q: adding VLAN 0 to HW filter on device team0
[  557.674648][T15350] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  557.681739][T15350] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  557.709083][T15350] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  557.730012][T15350] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  557.746071][T15350] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  557.766986][T15350] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  557.770809][T15350] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  557.796928][T15350] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  557.810241][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.810358][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  557.886739][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  557.886840][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  557.978775][T15280] 8021q: adding VLAN 0 to HW filter on device bond0
[  558.155861][T15280] 8021q: adding VLAN 0 to HW filter on device team0
[  558.241516][  T171] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.241602][  T171] bridge0: port 1(bridge_slave_0) entered forwarding state
[  558.278433][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  558.278519][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  558.638140][T15350] 8021q: adding VLAN 0 to HW filter on device bond0
[  558.739295][T15350] 8021q: adding VLAN 0 to HW filter on device team0
[  558.810907][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.810995][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  558.858118][ T3251] bridge0: port 2(bridge_slave_1) entered blocking state
[  558.858206][ T3251] bridge0: port 2(bridge_slave_1) entered forwarding state
[  559.368697][   T31] audit: type=1326 audit(1790956493.614:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15659 comm="syz.5.3665" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76dbd9e159 code=0x0
[  559.505762][T15665] loop8: detected capacity change from 0 to 1024
[  559.511647][T15665] EXT4-fs: Ignoring removed bh option
[  559.549484][T15665] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  559.599311][T15665] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  560.301214][T12455] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  560.941210][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13
[  561.116379][T15183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  561.367044][T15280] 8021q: adding VLAN 0 to HW filter on device batadv0
[  561.771031][T15350] 8021q: adding VLAN 0 to HW filter on device batadv0
[  562.051827][T15350] veth0_vlan: entered promiscuous mode
[  562.108035][T15350] veth1_vlan: entered promiscuous mode
[  562.228148][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  562.308502][T15350] veth0_macvtap: entered promiscuous mode
[  562.375006][T15350] veth1_macvtap: entered promiscuous mode
[  562.495475][T15350] batman_adv: batadv0: Interface activated: batadv_slave_0
[  562.589214][T15350] batman_adv: batadv0: Interface activated: batadv_slave_1
[  562.763620][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  562.763763][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  562.763888][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  562.763919][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  562.993756][T15183] veth0_vlan: entered promiscuous mode
[  563.126439][T15183] veth1_vlan: entered promiscuous mode
[  563.456081][  T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  563.456103][  T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.601866][T15280] veth0_vlan: entered promiscuous mode
[  563.654476][T15183] veth0_macvtap: entered promiscuous mode
[  563.808756][T15183] veth1_macvtap: entered promiscuous mode
[  563.821447][T15280] veth1_vlan: entered promiscuous mode
[  563.876467][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  563.876487][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  564.036145][T15183] batman_adv: batadv0: Interface activated: batadv_slave_0
[  564.117690][T15183] batman_adv: batadv0: Interface activated: batadv_slave_1
[  564.210931][  T171] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  564.211331][  T171] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  564.211474][  T171] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  564.211508][  T171] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  564.300950][T15280] veth0_macvtap: entered promiscuous mode
[  564.357945][T15280] veth1_macvtap: entered promiscuous mode
[  564.745949][T15280] batman_adv: batadv0: Interface activated: batadv_slave_0
[  564.784786][T12961] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  564.821169][T12961] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  564.841142][T12961] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  564.856763][T12961] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  564.857928][T12961] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  564.980484][T15280] batman_adv: batadv0: Interface activated: batadv_slave_1
[  565.070162][T15744] loop0: detected capacity change from 0 to 164
[  565.140850][T15744] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  565.274453][T15744] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  565.332947][   T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  565.333697][   T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  565.333732][   T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  565.333764][   T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  565.529182][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  565.529203][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  565.895070][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  565.895090][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.036199][T15751] loop8: detected capacity change from 0 to 2048
[  566.037027][T15751] EXT4-fs: Ignoring removed orlov option
[  566.168704][T15751] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  566.168790][T15751] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  566.329018][  T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.329041][  T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.546305][T12455] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  566.742199][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.742219][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  567.022692][ T5629] Bluetooth: hci7: command tx timeout
[  567.095321][ T5843] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  567.243272][ T5843] usb 7-1: Using ep0 maxpacket: 32
[  567.245583][ T5843] usb 7-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40
[  567.246582][ T5843] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 96, changing to 7
[  567.246619][ T5843] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7
[  567.248618][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.248640][ T5843] usb 7-1: Product: syz
[  567.248654][ T5843] usb 7-1: Manufacturer: syz
[  567.248667][ T5843] usb 7-1: SerialNumber: syz
[  567.607051][ T5843] usb 7-1: Fast Track Pro switching to config #2
[  567.710564][ T5843] usb 7-1: USB disconnect, device number 14
[  568.750599][T15806] loop0: detected capacity change from 0 to 512
[  568.823878][T15806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  568.823978][T15806] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  569.102910][ T5629] Bluetooth: hci7: command tx timeout
[  569.266895][T15820] loop8: detected capacity change from 0 to 1764
[  569.289202][T15820] iso9660: Bad value for 'session'
[  569.491054][T15808] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4
[  569.491095][T15808] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4
[  569.491114][T15808] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s
[  569.801396][T15804] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  569.854884][T15804] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  569.855037][T15804] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  569.855103][T15804] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  570.246561][T15350] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.329739][T15804] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  570.329797][T15804] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  570.368870][T15804] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  570.406306][T15804] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  570.406437][T15804] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  570.478454][T15804] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  570.510406][T15804] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  570.510504][T15804] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  570.548610][T15842] loop8: detected capacity change from 0 to 2048
[  570.573967][T15804] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  570.600725][T15842] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  570.695691][T15804] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  570.701065][T15804] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  571.043967][T15804] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  571.130157][T15853] netlink: 'syz.0.3701': attribute type 1 has an invalid length.
[  571.781972][T15868] loop9: detected capacity change from 0 to 1024
[  571.828012][ T5629] Bluetooth: hci1: command 0x0406 tx timeout
[  571.902671][ T5629] Bluetooth: hci0: command 0x0406 tx timeout
[  571.902705][ T5629] Bluetooth: hci4: command 0x0419 tx timeout
[  572.330667][T15876] loop0: detected capacity change from 0 to 4096
[  572.383110][T12961] Bluetooth: hci2: command 0x0c1a tx timeout
[  572.409121][T15880] loop8: detected capacity change from 0 to 128
[  572.483719][T12961] Bluetooth: hci5: command 0x0c1a tx timeout
[  572.550387][T12961] Bluetooth: hci6: command 0x0c1a tx timeout
[  572.580312][T15882] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  572.703051][T12961] Bluetooth: hci7: command 0x0419 tx timeout
[  573.377695][T15888] loop9: detected capacity change from 0 to 131072
[  573.510023][T15888] F2FS-fs (loop9): invalid crc value
[  573.600377][T15888] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  573.618095][T15888] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  573.982704][T12961] Bluetooth: hci0: command 0x0406 tx timeout
[  574.096433][T15741] bridge0: port 1(bridge_slave_0) entered blocking state
[  574.096522][T15741] bridge0: port 1(bridge_slave_0) entered disabled state
[  574.096701][T15741] bridge_slave_0: entered allmulticast mode
[  574.141965][T15741] bridge_slave_0: entered promiscuous mode
[  574.176477][T15741] bridge0: port 2(bridge_slave_1) entered blocking state
[  574.176569][T15741] bridge0: port 2(bridge_slave_1) entered disabled state
[  574.176698][T15741] bridge_slave_1: entered allmulticast mode
[  574.221762][T15741] bridge_slave_1: entered promiscuous mode
[  574.465799][T12961] Bluetooth: hci2: command 0x0c1a tx timeout
[  574.542994][T12961] Bluetooth: hci5: command 0x0c1a tx timeout
[  574.623673][T12961] Bluetooth: hci6: command 0x0c1a tx timeout
[  574.783357][T12961] Bluetooth: hci7: command 0x0419 tx timeout
[  574.899810][T15741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  574.986057][T15741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  575.292800][T15907] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  575.292980][T15907] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  575.293105][T15907] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  575.293227][T15907] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  575.293350][T15907] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  575.293473][T15907] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  575.293594][T15907] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  575.375396][T15741] team0: Port device team_slave_0 added
[  575.443349][T15741] team0: Port device team_slave_1 added
[  576.136758][T15741] batman_adv: batadv0: Adding interface: batadv_slave_0
[  576.136774][T15741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  576.137255][T15741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  576.198414][T15741] batman_adv: batadv0: Adding interface: batadv_slave_1
[  576.198430][T15741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  576.198455][T15741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  576.292965][T15923] loop8: detected capacity change from 0 to 512
[  576.360272][T15923] EXT4-fs (loop8): 1 truncate cleaned up
[  576.390196][T15923] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  576.564840][T15923] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.3722: bg 0: block 465: padding at end of block bitmap is not set
[  576.741822][T15923] EXT4-fs (loop8): Remounting filesystem read-only
[  576.751776][T15904] loop6: detected capacity change from 0 to 32768
[  576.827232][T15741] hsr_slave_0: entered promiscuous mode
[  576.828136][T15741] hsr_slave_1: entered promiscuous mode
[  576.855021][T15741] debugfs: 'hsr0' already exists in 'hsr'
[  576.855039][T15741] Cannot create hsr debugfs directory
[  577.023789][T12961] Bluetooth: hci1: command 0x0406 tx timeout
[  577.158679][T12455] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  577.345147][ T5617] Bluetooth: hci7: command 0x0419 tx timeout
[  577.345185][ T5617] Bluetooth: hci6: command 0x0c1a tx timeout
[  577.345210][ T5617] Bluetooth: hci5: command 0x0c1a tx timeout
[  577.345234][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout
[  577.345260][ T5617] Bluetooth: hci0: command 0x0406 tx timeout
[  577.345360][T12961] Bluetooth: hci4: command 0x0419 tx timeout
[  578.413742][T15956] loop0: detected capacity change from 0 to 512
[  578.478444][T15956] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.3731: iget: bad i_size value: 38620345925642
[  578.478478][T15956] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  578.482317][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  578.482336][    C0] EXT4-fs (loop0): initial error at time 1790956512: ext4_orphan_get:1403: inode 15
[  578.482363][    C0] EXT4-fs (loop0): last error at time 1790956512: ext4_orphan_get:1403: inode 15
[  578.507558][T15956] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.3731: couldn't read orphan inode 15 (err -117)
[  578.507589][T15956] loop0: lost filesystem error report for type 5 error -117
[  578.578913][T15956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  578.856356][T14944] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  579.012959][T14944] usb 7-1: Using ep0 maxpacket: 8
[  579.015196][T15350] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  579.015372][T14944] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[  579.017634][T14944] usb 7-1: config 0 has no interfaces?
[  579.059871][T14944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.059896][T14944] usb 7-1: Product: syz
[  579.059910][T14944] usb 7-1: Manufacturer: syz
[  579.059923][T14944] usb 7-1: SerialNumber: syz
[  579.175275][T14944] usb 7-1: config 0 descriptor??
[  579.178311][T15741] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.425977][T12961] Bluetooth: hci7: command 0x0419 tx timeout
[  579.490818][  T831] usb 7-1: USB disconnect, device number 15
[  579.631318][ T5843] input: syz0 as /devices/virtual/misc/uhid/0005:0576:0306.0015/input/input30
[  579.837817][T15741] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.241651][T15741] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.430227][ T5843] hid-generic 0005:0576:0306.0015: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  580.716308][T15741] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.875833][T15987] bridge0: port 2(bridge_slave_1) entered listening state
[  581.927283][T15987] bridge0: port 2(bridge_slave_1) entered disabled state
[  582.324885][T15741] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  582.358573][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  582.378315][T15741] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  582.408994][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  582.441125][T15741] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  582.485737][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  582.486500][T15741] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  582.559505][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  582.720617][T16027] netlink: 'syz.6.3752': attribute type 1 has an invalid length.
[  583.007839][T15741] 8021q: adding VLAN 0 to HW filter on device bond0
[  583.111609][T15741] 8021q: adding VLAN 0 to HW filter on device team0
[  583.156036][ T3251] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.156121][ T3251] bridge0: port 1(bridge_slave_0) entered forwarding state
[  583.222033][ T3251] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.222123][ T3251] bridge0: port 2(bridge_slave_1) entered forwarding state
[  583.475709][T16040] loop6: detected capacity change from 0 to 512
[  583.590605][T16040] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  583.694863][T16046] loop9: detected capacity change from 0 to 64
[  583.714531][T16038] loop8: detected capacity change from 0 to 8192
[  584.001277][T15183] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  584.087624][T16046] hfs: request for non-existent node 131072 in B*Tree
[  584.087642][T16046] hfs: request for non-existent node 131072 in B*Tree
[  584.808218][T16064] loop8: detected capacity change from 0 to 1024
[  584.874174][T16064] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  585.205856][T12455] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.256360][ T5843] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  585.436795][ T5843] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  585.441796][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.441820][ T5843] usb 7-1: Product: syz
[  585.441834][ T5843] usb 7-1: Manufacturer: syz
[  585.441847][ T5843] usb 7-1: SerialNumber: syz
[  586.254712][T15741] 8021q: adding VLAN 0 to HW filter on device batadv0
[  586.373658][ T5843] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[  586.373710][ T5843] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  586.457295][ T5843] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  586.576923][ T5843] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[  586.634333][ T5843] usb 7-1: USB disconnect, device number 16
[  586.727503][T15741] veth0_vlan: entered promiscuous mode
[  586.782183][T15741] veth1_vlan: entered promiscuous mode
[  586.886876][T16096] hugetlbfs: syz.5.3767 (16096): Using mlock ulimits for SHM_HUGETLB is obsolete
[  586.930557][T15741] veth0_macvtap: entered promiscuous mode
[  586.989878][T15741] veth1_macvtap: entered promiscuous mode
[  587.104755][T15741] batman_adv: batadv0: Interface activated: batadv_slave_0
[  587.160521][T15741] batman_adv: batadv0: Interface activated: batadv_slave_1
[  587.224457][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  587.224501][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  587.224550][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  587.224582][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  587.606055][ T5832] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  587.693527][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.693548][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  587.755307][ T5832] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  587.775322][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.775344][ T5832] usb 7-1: Product: syz
[  587.775358][ T5832] usb 7-1: Manufacturer: syz
[  587.775371][ T5832] usb 7-1: SerialNumber: syz
[  587.819233][ T5832] usb 7-1: config 0 descriptor??
[  587.853037][ T5832] ums-onetouch 7-1:0.0: USB Mass Storage device detected
[  588.023361][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  588.023382][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  588.132943][T14944] usb 7-1: USB disconnect, device number 17
[  588.870798][T16127] jffs2: notice: (16127) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  589.216702][T16135] loop6: detected capacity change from 0 to 512
[  589.249768][T16135] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  589.279991][T16135] EXT4-fs (loop6): 1 truncate cleaned up
[  589.295129][T16138] loop9: detected capacity change from 0 to 256
[  589.298911][T16135] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  589.630019][T15183] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  589.934070][T16149] loop6: detected capacity change from 0 to 256
[  590.604158][T16158] ieee802154 phy0 wpan0: encryption failed: -22
[  590.707548][T16143] loop8: detected capacity change from 0 to 32768
[  590.765436][T16143] JBD2: Ignoring recovery information on journal
[  590.928636][T16143] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  591.484622][T16176] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3794'.
[  593.449083][T12455] ocfs2: Unmounting device (7,8) on (node local)
[  594.859512][T16225] loop8: detected capacity change from 0 to 32768
[  594.958543][T16225] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  594.958563][T16225] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  595.060314][T16225] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  595.156634][T16226] vxlan0: entered promiscuous mode
[  595.156734][T16226] vxlan0: entered allmulticast mode
[  595.178494][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  595.179906][ T6395] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  595.179943][ T6395] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  595.179977][ T6395] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  595.291370][  T831] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  595.291390][  T831] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  596.141569][ T5629] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  596.166627][ T5629] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  596.175898][ T5629] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  596.199903][ T5629] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  596.214717][ T5629] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  596.327072][  T831] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1035ms
[  596.439983][  T831] gfs2: fsid=syz:syz.0: jid=0: Done
[  596.442784][T16225] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  596.483398][T16249] loop9: detected capacity change from 0 to 256
[  597.013321][T16249] FAT-fs (loop9): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  597.013345][T16249] FAT-fs (loop9): Filesystem has been set read-only
[  597.714908][    T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  597.862451][    T9] usb 10-1: Using ep0 maxpacket: 16
[  597.863770][    T9] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  597.866682][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.866705][    T9] usb 10-1: Product: syz
[  597.866718][    T9] usb 10-1: Manufacturer: syz
[  597.866731][    T9] usb 10-1: SerialNumber: syz
[  598.306588][T12961] Bluetooth: hci8: command tx timeout
[  598.432786][ T5832] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  598.589824][ T5832] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  598.603614][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.625882][ T5832] usb 7-1: config 0 descriptor??
[  598.709492][ T5832] cp210x 7-1:0.0: cp210x converter detected
[  598.805382][    T9] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71
[  598.835346][    T9] usb 10-1: USB disconnect, device number 2
[  599.132796][ T5832] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32
[  599.181095][ T5832] usb 7-1: cp210x converter now attached to ttyUSB0
[  599.302052][T16287] loop3: detected capacity change from 0 to 2048
[  599.371058][T14944] usb 7-1: USB disconnect, device number 18
[  599.497958][T16287] Alternate GPT is invalid, using primary GPT.
[  599.498079][T16287]  loop3: p2 p3 p7
[  599.797936][T14944] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  599.824986][T16299] ptp ptp0: only physical clock in use now
[  599.855414][T14944] cp210x 7-1:0.0: device disconnected
[  600.382882][T12961] Bluetooth: hci8: command tx timeout
[  602.179435][T16243] bridge0: port 1(bridge_slave_0) entered blocking state
[  602.179523][T16243] bridge0: port 1(bridge_slave_0) entered disabled state
[  602.179626][T16243] bridge_slave_0: entered allmulticast mode
[  602.213017][T16243] bridge_slave_0: entered promiscuous mode
[  602.242232][T16243] bridge0: port 2(bridge_slave_1) entered blocking state
[  602.242513][T16243] bridge0: port 2(bridge_slave_1) entered disabled state
[  602.242621][T16243] bridge_slave_1: entered allmulticast mode
[  602.279109][T16243] bridge_slave_1: entered promiscuous mode
[  602.311624][ T5743] input: syz0 as /devices/virtual/misc/uhid/0005:0576:0306.0016/input/input31
[  602.463982][T12961] Bluetooth: hci8: command tx timeout
[  602.592815][ T5743] hid-generic 0005:0576:0306.0016: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  602.632402][    T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  602.726042][T16243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  602.764352][T16243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  602.791497][    T9] usb 9-1: Using ep0 maxpacket: 8
[  602.805725][    T9] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[  602.836811][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.836839][    T9] usb 9-1: Product: syz
[  602.836852][    T9] usb 9-1: Manufacturer: syz
[  602.836865][    T9] usb 9-1: SerialNumber: syz
[  603.240897][T16243] team0: Port device team_slave_0 added
[  603.260400][    T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  603.260447][    T9] usb 9-1: MIDIStreaming interface descriptor not found
[  603.378491][T16354] fido_id[16354]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  603.383954][T16243] team0: Port device team_slave_1 added
[  603.874890][T16364] loop9: detected capacity change from 0 to 128
[  603.878944][T16364] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  603.921792][T16364] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  604.357824][ T3251] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  604.458044][T16243] batman_adv: batadv0: Adding interface: batadv_slave_0
[  604.458064][T16243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  604.458088][T16243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  604.530793][T16243] batman_adv: batadv0: Adding interface: batadv_slave_1
[  604.530811][T16243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  604.530836][T16243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  604.570665][T12961] Bluetooth: hci8: command tx timeout
[  605.074387][T16243] hsr_slave_0: entered promiscuous mode
[  605.079628][T16243] hsr_slave_1: entered promiscuous mode
[  605.103703][T16243] debugfs: 'hsr0' already exists in 'hsr'
[  605.103721][T16243] Cannot create hsr debugfs directory
[  605.159015][T16377] loop9: detected capacity change from 0 to 4096
[  605.219002][    T9] usb 9-1: USB disconnect, device number 12
[  605.296305][T16385] loop3: detected capacity change from 0 to 128
[  605.368941][T16388] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  605.519433][T16385] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  605.549430][T16385] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  605.776574][T16385] overlayfs: upper fs needs to support d_type.
[  606.444909][T16403] input: syz0 as /devices/virtual/input/input32
[  606.580508][T15741] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  607.161037][T14896] udevd[14896]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  608.046510][T16416] zswap: compressor  not available
[  608.538311][T16442] loop3: detected capacity change from 0 to 7
[  608.578195][T14946] buffer_io_error: 138 callbacks suppressed
[  608.578212][T14946] Buffer I/O error on dev loop3, logical block 0, async page read
[  608.605150][T14946] Buffer I/O error on dev loop3, logical block 0, async page read
[  608.605591][T14946] Buffer I/O error on dev loop3, logical block 0, async page read
[  608.606008][T14946] Buffer I/O error on dev loop3, logical block 0, async page read
[  608.610618][T14946] Buffer I/O error on dev loop3, logical block 0, async page read
[  608.662659][   T31] audit: type=1326 audit(1790956542.904:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz.3.3884" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f710779e159 code=0x0
[  609.347391][T16457] netlink: 'syz.8.3888': attribute type 7 has an invalid length.
[  609.607718][T16460] loop9: detected capacity change from 0 to 4096
[  609.760426][T16465] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  609.997659][T16471] NILFS (loop9): nilfs_sufile_do_free: segment 9 is already clean
[  611.093026][   T31] audit: type=1400 audit(1790956545.344:271): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name=":" pid=16478 comm="syz.8.3895" name=":" offset=33
[  611.793889][T16501] netlink: 27 bytes leftover after parsing attributes in process `syz.6.3904'.
[  612.436489][T16494] loop8: detected capacity change from 0 to 32768
[  612.516233][T16494] ocfs2: Slot 0 on device (7,8) was already allocated to this node!
[  612.549526][T16494] JBD2: Ignoring recovery information on journal
[  612.668659][T16494] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  613.476731][T12455] ocfs2: Unmounting device (7,8) on (node local)
[  613.649415][T16243] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  613.711443][T16243] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  613.731112][T16243] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  613.813124][T16243] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  613.814692][T16243] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  613.859941][T16243] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  613.877005][T16243] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  613.915875][T16243] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  614.234899][T14944] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  614.405370][T14944] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  614.421776][T14944] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  614.421800][T14944] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  614.421818][T14944] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  614.421856][T14944] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  614.421879][T14944] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  614.484743][T14944] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  614.484770][T14944] usb 10-1: Product: syz
[  614.484785][T14944] usb 10-1: Manufacturer: syz
[  614.547333][T14944] cdc_wdm 10-1:1.0: skipping garbage
[  614.547353][T14944] cdc_wdm 10-1:1.0: skipping garbage
[  614.616713][T14944] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  614.616737][T14944] cdc_wdm 10-1:1.0: Unknown control protocol
[  614.717853][T16243] 8021q: adding VLAN 0 to HW filter on device bond0
[  614.816394][T16243] 8021q: adding VLAN 0 to HW filter on device team0
[  614.821656][T16535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  614.822052][T16535] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  614.877818][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  614.877906][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  614.974280][T14944] usb 10-1: USB disconnect, device number 3
[  614.994868][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  614.994960][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  617.103439][ T5832] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  617.264618][ T5832] usb 10-1: Using ep0 maxpacket: 32
[  617.278173][ T5832] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  617.304111][ T5832] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.304136][ T5832] usb 10-1: Product: syz
[  617.304150][ T5832] usb 10-1: Manufacturer: syz
[  617.304162][ T5832] usb 10-1: SerialNumber: syz
[  617.311529][ T5832] usb 10-1: config 0 descriptor??
[  617.371138][ T5832] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  617.620461][T16608] evm: overlay not supported
[  618.140831][T16243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  618.219314][T16623] loop3: detected capacity change from 0 to 8
[  618.276918][ T5832] gspca_ov534_9: reg_w failed -71
[  618.456337][T16624] loop6: detected capacity change from 0 to 4096
[  618.567164][ T5832] gspca_ov534_9: Unknown sensor 0000
[  618.567240][ T5832] ov534_9 10-1:0.0: probe with driver ov534_9 failed with error -22
[  618.586082][ T5832] usb 10-1: USB disconnect, device number 4
[  618.740488][T16630] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  620.358055][T16243] veth0_vlan: entered promiscuous mode
[  620.438921][T16243] veth1_vlan: entered promiscuous mode
[  620.477119][T16664] loop9: detected capacity change from 0 to 1024
[  620.575058][T16664] EXT4-fs error (device loop9): ext4_orphan_get:1429: comm syz.9.3952: bad orphan inode 134217728
[  620.575087][T16664] loop9: lost filesystem error report for type 5 error -117
[  620.580265][T16664] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  620.645861][T16666] base or size exceeds the MTRR width
[  620.780819][T16243] veth0_macvtap: entered promiscuous mode
[  620.806421][T16673] kAFS: Invalid Command on /proc/fs/afs/cells file
[  620.843141][T16243] veth1_macvtap: entered promiscuous mode
[  620.998175][T16243] batman_adv: batadv0: Interface activated: batadv_slave_0
[  621.058369][T16243] batman_adv: batadv0: Interface activated: batadv_slave_1
[  621.133335][  T171] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  621.133377][  T171] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  621.133409][  T171] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  621.133467][  T171] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  621.335223][T16681] tun0: tun_chr_ioctl cmd 1074025675
[  621.335248][T16681] tun0: persist disabled
[  621.515042][T15280] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.036528][ T6395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.036549][ T6395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.215573][T16698] loop8: detected capacity change from 0 to 256
[  622.403925][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.403946][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  623.305660][   T31] audit: type=1400 audit(1790956557.554:272): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=16717 comm="syz.9.3969"
[  623.632056][T16723] loop8: detected capacity change from 0 to 512
[  623.662190][T16723] EXT4-fs: Ignoring removed nomblk_io_submit option
[  623.687647][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  623.839819][T16723] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  623.880491][T16723] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.3970: bad orphan inode 131083
[  623.880521][T16723] loop8: lost filesystem error report for type 5 error -117
[  623.882310][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  623.882327][    C0] EXT4-fs (loop8): initial error at time 1790956558: ext4_orphan_get:1429
[  623.882347][    C0] EXT4-fs (loop8): last error at time 1790956558: ext4_orphan_get:1429
[  623.960602][T16723] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  624.146720][ T5743] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  624.276545][   T31] audit: type=1400 audit(1790956558.524:273): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name=":" pid=16733 comm="syz.7.3975" name=":" offset=58
[  624.301252][ T5743] usb 4-1: Using ep0 maxpacket: 8
[  624.306988][ T5743] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  624.338086][ T5743] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  624.361210][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.361235][ T5743] usb 4-1: Product: syz
[  624.361248][ T5743] usb 4-1: Manufacturer: syz
[  624.361261][ T5743] usb 4-1: SerialNumber: syz
[  624.427457][ T5743] usb 4-1: config 0 descriptor??
[  624.452208][ T5743] gspca_main: stk014-2.14.0 probing 05e1:0893
[  624.467375][ T5743] usb 4-1: selecting invalid altsetting 1
[  624.604562][T16723] EXT4-fs error (device loop8): ext4_append:79: inode #2: comm syz.8.3970: Logical block already allocated
[  624.689210][T16723] CacheFiles: mkdir cache failed with error -117
[  624.689263][T16723] CacheFiles: Failed to register: -117
[  624.700778][ T5743] gspca_stk014: init reg: 0x00
[  624.700839][ T5743] stk014 4-1:0.0: probe with driver stk014 failed with error -5
[  624.929087][T12455] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.036490][    T9] usb 4-1: USB disconnect, device number 7
[  625.300483][T16718] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3968'.
[  625.396894][T16752] tipc: Started in network mode
[  625.396924][T16752] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  625.397770][T16752] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  626.207924][T14944] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[  626.398612][T14944] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  626.414590][T14944] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  626.414617][T14944] usb 4-1: config 0 has no interface number 0
[  626.414654][T14944] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  626.414679][T14944] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  626.414717][T14944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.475145][T14944] usb 4-1: config 0 descriptor??
[  626.475835][T16764] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  626.575813][ T5832] tipc: Node number set to 43690
[  626.577411][T14944] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  626.655823][T16771] netlink: 'syz.9.3988': attribute type 2 has an invalid length.
[  626.807194][T16773] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3988'.
[  626.929253][T14944] usb 4-1: USB disconnect, device number 8
[  627.241251][T16778] PID 16778 killed due to inadequate hugepage pool
[  627.311207][T16771] �: entered promiscuous mode
[  627.751439][T16792] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3994'.
[  628.436575][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4004'.
[  628.679039][T16814] ovs-dp0: entered promiscuous mode
[  629.346741][T16836] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  629.742593][T16843] tun0: tun_chr_ioctl cmd 2148553947
[  631.638387][T16884] syz.5.4027 uses obsolete (PF_INET,SOCK_PACKET)
[  632.136402][T16892] xt_hashlimit: size too large, truncated to 1048576
[  633.131484][T16905] loop8: detected capacity change from 0 to 4096
[  633.160163][T16905] EXT4-fs: Ignoring removed nobh option
[  633.160222][T16905] EXT4-fs: Ignoring removed bh option
[  633.188612][T16905] EXT4-fs (loop8): Test dummy encryption mode enabled
[  633.227617][T16905] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  633.734688][T16917] loop3: detected capacity change from 0 to 1024
[  633.769358][T16917] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  633.798701][T16917] EXT4-fs (loop3): orphan cleanup on readonly fs
[  633.863070][T16917] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.4035: lblock 2 mapped to illegal pblock 2 (length 1)
[  633.863107][T16917] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  633.882329][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  633.882351][    C0] EXT4-fs (loop3): initial error at time 1790956568: ext4_map_blocks:790: inode 3: block 2
[  633.882383][    C0] EXT4-fs (loop3): last error at time 1790956568: ext4_map_blocks:790: inode 3: block 2
[  633.968459][T16917] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  633.968540][T16917] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.4035: Invalid inode table block 1 in block_group 0
[  633.968563][T16917] loop3: lost filesystem error report for type 5 error -117
[  634.174363][T12455] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.229697][T16917] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem
[  634.229721][T16917] loop3: lost filesystem error report for type 5 error -117
[  634.247739][T16917] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.4035: mark_inode_dirty error
[  634.247772][T16917] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  634.250309][T16917] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  634.250328][T16917] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.4035: Failed to acquire dquot type 0
[  634.250347][T16917] loop3: lost filesystem error report for type 5 error -117
[  634.251417][T16917] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem
[  634.251436][T16917] loop3: lost filesystem error report for type 5 error -117
[  634.274508][T16917] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.4035: mark_inode_dirty error
[  634.274535][T16917] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  634.332399][T16917] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[  634.332494][T16917] EXT4-fs (loop3): 1 orphan inode deleted
[  634.456849][ T6395] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  634.456889][ T6395] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  634.459865][ T6395] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  634.459905][ T6395] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:13: Failed to release dquot type 0
[  634.459925][ T6395] loop3: lost filesystem error report for type 5 error -117
[  634.663685][T16917] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.4035: Invalid inode table block 1 in block_group 0
[  634.663718][T16917] loop3: lost filesystem error report for type 5 error -117
[  634.670715][T16917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  635.066403][T15741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  635.243964][T16931] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4038'.
[  635.291799][T16934] netlink: Only one type of NAT may be specified
[  635.291825][T16934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  636.854080][ T5843] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  636.913138][T16976] macvlan1: entered allmulticast mode
[  637.006956][T16976] veth1_vlan: entered allmulticast mode
[  637.007118][T16976] macvlan1: left allmulticast mode
[  637.007130][T16976] veth1_vlan: left allmulticast mode
[  637.036688][ T5843] usb 4-1: unable to get BOS descriptor or descriptor too short
[  637.036730][ T5843] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  637.041874][ T5843] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  637.041894][ T5843] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  637.116704][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.116731][ T5843] usb 4-1: Product: syz
[  637.116745][ T5843] usb 4-1: Manufacturer: syz
[  637.116757][ T5843] usb 4-1: SerialNumber: syz
[  637.191660][ T5843] usb 4-1: selecting invalid altsetting 1
[  637.218696][ T5843] usb 4-1: unit 6 not found!
[  637.589140][T16990] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4060'.
[  637.643411][T16992] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4061'.
[  637.643436][T16992] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4061'.
[  637.643451][T16992] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4061'.
[  637.695732][ T5832] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  637.879512][ T5832] usb 7-1: Using ep0 maxpacket: 16
[  637.880781][ T5832] usb 7-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00
[  637.888338][ T5832] usb 7-1: too many endpoints for config 0 interface 0 altsetting 69: 68, using maximum allowed: 30
[  637.888371][ T5832] usb 7-1: config 0 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  637.888394][ T5832] usb 7-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid wMaxPacketSize 0
[  637.888412][ T5832] usb 7-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 68
[  637.888456][ T5832] usb 7-1: config 0 interface 0 has no altsetting 0
[  637.888484][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.988779][ T5832] usb 7-1: config 0 descriptor??
[  638.028265][T16996] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4063'.
[  638.196129][ T5843] usb 4-1: 2:0: failed to get current value for ch 0 (-71)
[  638.579320][ T5832] wacom 0003:056A:0309.0017: unknown main item tag 0x0
[  638.579351][ T5832] wacom 0003:056A:0309.0017: unknown main item tag 0x0
[  638.579369][ T5832] wacom 0003:056A:0309.0017: unknown main item tag 0x0
[  638.579387][ T5832] wacom 0003:056A:0309.0017: unknown main item tag 0x0
[  638.579405][ T5832] wacom 0003:056A:0309.0017: unknown main item tag 0x0
[  638.579422][ T5832] wacom 0003:056A:0309.0017: unknown main item tag 0x0
[  638.579440][ T5832] wacom 0003:056A:0309.0017: unknown main item tag 0x0
[  638.579458][ T5832] wacom 0003:056A:0309.0017: unknown main item tag 0x0
[  638.579475][ T5832] wacom 0003:056A:0309.0017: unknown main item tag 0x0
[  638.624073][ T5843] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  638.734891][ T5843] usb 4-1: USB disconnect, device number 9
[  638.757361][ T5832] usb 7-1: USB disconnect, device number 19
[  638.991886][T16925] udevd[16925]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  639.695720][T17027] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4073'.
[  640.058146][T17038] loop8: detected capacity change from 0 to 512
[  640.098887][T17038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002]
[  640.098997][T17038] System zones: 1-12
[  640.102364][T17038] EXT4-fs error (device loop8): dx_probe:791: inode #2: comm syz.8.4074: Directory hole found for htree index block 0
[  640.102391][T17038] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  640.113707][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  640.113725][    C0] EXT4-fs (loop8): initial error at time 1790956574: dx_probe:791: inode 2
[  640.113754][    C0] EXT4-fs (loop8): last error at time 1790956574: dx_probe:791: inode 2
[  640.244412][T17038] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -117
[  640.244477][T17038] EXT4-fs error (device loop8): dx_probe:791: inode #2: comm syz.8.4074: Directory hole found for htree index block 0
[  640.244500][T17038] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  640.277458][T17038] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117
[  640.306456][T17038] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  640.381819][T17038] EXT4-fs error (device loop8): dx_probe:791: inode #2: comm syz.8.4074: Directory hole found for htree index block 0
[  640.417032][T17038] EXT4-fs error (device loop8): dx_probe:791: inode #2: comm syz.8.4074: Directory hole found for htree index block 0
[  640.803222][  T831] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  640.880650][T12455] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  640.953163][  T831] usb 10-1: Using ep0 maxpacket: 32
[  640.964738][  T831] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  640.970650][  T831] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  640.970676][  T831] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  641.019122][  T831] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  641.019145][  T831] usb 10-1: Product: syz
[  641.019158][  T831] usb 10-1: Manufacturer: syz
[  641.059785][  T831] hub 10-1:4.0: USB hub found
[  641.127495][T17027] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4073'.
[  641.300336][  T831] hub 10-1:4.0: 2 ports detected
[  641.730069][T17068] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4085'.
[  641.954025][  T831] usb 10-1: USB disconnect, device number 5
[  642.573529][T17079] loop3: detected capacity change from 0 to 8192
[  642.619000][T17079] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  642.986238][T17094] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1)
[  643.104154][ T5843] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  643.272782][ T5843] usb 7-1: Using ep0 maxpacket: 32
[  643.274400][ T5843] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  643.277065][ T5843] usb 7-1: config index 0 descriptor too short (expected 27632, got 27)
[  643.278172][ T5843] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  643.278190][ T5843] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92
[  643.278207][ T5843] usb 7-1: config 1 has no interface number 0
[  643.278241][ T5843] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  643.278263][ T5843] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  643.278298][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.377952][T17096] loop8: detected capacity change from 0 to 4096
[  643.439037][ T5843] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found
[  643.615675][T17103] i2c i2c-0: delete_device: Can't find device in list
[  643.688505][T17096] ntfs3(loop8): ino=b, Correct links count -> 1.
[  643.688950][ T5843] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached
[  643.713836][T17096] ntfs3(loop8): ino=18, mi_enum_attr
[  643.713886][T17096] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  644.034748][T17096] ntfs3(loop8): failed to convert "0080" to koi8-r
[  644.168189][ T5843] usb 7-1: USB disconnect, device number 20
[  644.169936][ T5843] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected
[  644.543378][ T5832] usb 10-1: new low-speed USB device number 6 using dummy_hcd
[  644.693627][ T5832] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  644.697222][ T5832] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  644.697242][ T5832] usb 10-1: config 0 has no interface number 0
[  644.697274][ T5832] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  644.697296][ T5832] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  644.697329][ T5832] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.777780][ T5832] usb 10-1: config 0 descriptor??
[  644.780058][T17112] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  644.918550][ T5832] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  645.162209][    C0] iowarrior 10-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1
[  645.178161][ T5843] usb 10-1: USB disconnect, device number 6
[  647.543908][T17182] loop3: detected capacity change from 0 to 256
[  647.544775][T17182] exfat: Deprecated parameter 'utf8'
[  647.625153][T17182] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x03f9cff3, utbl_chksum : 0xe619d30d)
[  648.489337][T17199] loop9: detected capacity change from 0 to 512
[  648.489985][T17192] batman_adv: batadv0: Adding interface: macsec0
[  648.489997][T17192] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.490034][T17192] batman_adv: batadv0: Interface activated: macsec0
[  648.602856][T17199] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  648.602959][T17199] System zones: 1-12
[  648.606148][T17199] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #12: comm syz.9.4132: missing EA_INODE flag
[  648.606170][T17199] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  648.612305][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  648.612325][    C0] EXT4-fs (loop9): initial error at time 1790956582: ext4_xattr_inode_iget:437: inode 12
[  648.612355][    C0] EXT4-fs (loop9): last error at time 1790956582: ext4_xattr_inode_iget:437: inode 12
[  648.644782][T17199] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.4132: error while reading EA inode 12 err=-117
[  648.644812][T17199] loop9: lost filesystem error report for type 5 error -117
[  648.704763][T17199] EXT4-fs (loop9): 1 orphan inode deleted
[  648.738816][T17199] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  649.101932][T15280] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  649.190577][T17208] tap0: tun_chr_ioctl cmd 1074025677
[  649.190682][T17208] tap0: linktype set to 769
[  650.213787][T17237] loop8: detected capacity change from 0 to 256
[  650.300347][T17237] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  650.851335][T17249] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4151'.
[  650.885695][   T31] audit: type=1326 audit(1790956585.134:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.3.4152" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710779e159 code=0x7ffc0000
[  650.891076][   T31] audit: type=1326 audit(1790956585.134:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.3.4152" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710779e159 code=0x7ffc0000
[  650.969662][   T31] audit: type=1326 audit(1790956585.214:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.3.4152" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710779e159 code=0x7ffc0000
[  650.970254][   T31] audit: type=1326 audit(1790956585.214:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.3.4152" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710779e159 code=0x7ffc0000
[  651.039968][   T31] audit: type=1326 audit(1790956585.284:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.3.4152" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f710779e159 code=0x7ffc0000
[  651.040014][   T31] audit: type=1326 audit(1790956585.284:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.3.4152" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710779e159 code=0x7ffc0000
[  651.040060][   T31] audit: type=1326 audit(1790956585.284:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.3.4152" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710779e159 code=0x7ffc0000
[  651.147776][   T31] audit: type=1326 audit(1790956585.394:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.3.4152" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710779e159 code=0x7ffc0000
[  651.147828][   T31] audit: type=1326 audit(1790956585.394:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.3.4152" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710779e159 code=0x7ffc0000
[  651.228653][   T31] audit: type=1326 audit(1790956585.474:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.3.4152" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f710779e159 code=0x7ffc0000
[  651.628181][T17264] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4157'.
[  652.392975][T17282] fuse-io-uring is disabled by module parameter
[  652.860579][T17293] bonding: no command found in bonding_masters - use +ifname or -ifname
[  653.218804][T17266] loop8: detected capacity change from 0 to 32768
[  653.376395][T17266] JBD2: Ignoring recovery information on journal
[  653.576817][T17266] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  654.298944][T17266] syz.8.4156 (17266) used greatest stack depth: 18696 bytes left
[  654.507442][T17297] loop3: detected capacity change from 0 to 32768
[  654.547452][T17297] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  654.661549][T17297] XFS (loop3): Ending clean mount
[  655.259369][T15741] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  655.495074][T12455] ocfs2: Unmounting device (7,8) on (node local)
[  656.018494][T17345] CacheFiles: Failed to register: -95
[  656.803517][T17364] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  656.803517][T17364] The task syz.8.4190 (17364) triggered the difference, watch for misbehavior.
[  657.087273][T17370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  657.087289][T17370] IPv6: NLM_F_CREATE should be set when creating new route
[  657.087327][T17370] IPv6: NLM_F_CREATE should be set when creating new route
[  657.087348][T17370] IPv6: NLM_F_CREATE should be set when creating new route
[  657.485938][   T31] kauditd_printk_skb: 9 callbacks suppressed
[  657.485957][   T31] audit: type=1400 audit(1790956591.734:293): apparmor="STATUS" operation="profile_load" info="failed to create" error=-2 profile="unconfined" name="//o" pid=17374 comm="syz.5.4197"
[  657.856300][T17384] loop9: detected capacity change from 0 to 512
[  657.904298][T17384] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -13
[  657.904336][T17384] EXT4-fs error (device loop9): ext4_orphan_get:1403: comm syz.9.4200: inode #15: comm syz.9.4200: iget: illegal inode #
[  657.904361][T17384] loop9: lost filesystem error report for type 5 error -117
[  657.904687][T17384] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.4200: couldn't read orphan inode 15 (err -117)
[  657.904712][T17384] loop9: lost filesystem error report for type 5 error -117
[  657.965546][T17384] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  658.052985][T17384] EXT4-fs (loop9): shut down requested (2)
[  658.300866][T15280] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  660.192033][T17444] loop6: detected capacity change from 0 to 164
[  660.787864][T17462] loop3: detected capacity change from 0 to 512
[  661.541209][T12961] Bluetooth: hci0: unexpected event for opcode 0x0c7d
[  661.719896][T17479] loop2: detected capacity change from 0 to 7
[  661.966649][T17479] Dev loop2: unable to read RDB block 7
[  661.966683][T17479]  loop2: unable to read partition table
[  661.966853][T17479] loop2: partition table beyond EOD, truncated
[  661.966881][T17479] loop_reread_partitions: partition scan of loop2 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  662.515598][T17496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4252'.
[  663.352161][T17519] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4261'.
[  663.424390][T17523] loop9: detected capacity change from 0 to 1024
[  663.441325][T17523] EXT4-fs: Ignoring removed nobh option
[  663.441365][T17523] EXT4-fs: Ignoring removed orlov option
[  663.462392][T17523] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  663.523749][T17523] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  663.717981][T17523] EXT4-fs: Ignoring sb option on remount
[  663.746457][T17523] EXT4-fs (loop9): changing journal_checksum during remount not supported; ignoring
[  663.746478][T17523] EXT4-fs (loop9): can't disable delalloc during remount
[  663.976718][T15280] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  664.355955][T17542] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4270'.
[  665.081208][T17560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4280'.
[  665.081258][T17560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4280'.
[  665.134579][T17560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4280'.
[  665.139479][T17560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4280'.
[  685.116229][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  694.187391][   T31] audit: type=1326 audit(1790956628.424:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17587 comm="syz.7.4287" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371039e159 code=0x7ffc0000
[  694.556636][   T31] audit: type=1326 audit(1790956628.574:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17587 comm="syz.7.4287" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f371035ae51 code=0x7ffc0000
[  694.557147][   T31] audit: type=1326 audit(1790956628.804:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17587 comm="syz.7.4287" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371039e159 code=0x7ffc0000
[  694.985415][   T31] audit: type=1326 audit(1790956628.784:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17587 comm="syz.7.4287" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f371039ef49 code=0x7ffc0000
[  712.055020][   T32] INFO: task syz.4.3623:15472 blocked for more than 143 seconds.
[  712.055185][   T32]       Tainted: G             L      syzkaller #0
[  712.055228][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  712.055271][   T32] task:syz.4.3623      state:D stack:28112 pid:15472 tgid:15471 ppid:9416   task_flags:0x400140 flags:0x00080002
[  712.055901][   T32] Call Trace:
[  712.055958][   T32]  <TASK>
[  712.056103][   T32]  __schedule+0x17db/0x58f0
[  712.056424][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  712.056533][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  712.309182][   T32]  ? __pfx___schedule+0x10/0x10
[  712.309514][   T32]  ? schedule+0x90/0x2b0
[  712.309696][   T32]  schedule+0x164/0x2b0
[  712.309878][   T32]  schedule_preempt_disabled+0x13/0x30
[  712.309955][   T32]  __mutex_lock+0x7c1/0x1550
[  712.310166][   T32]  ? __mutex_lock+0x5d4/0x1550
[  712.310333][   T32]  ? write_versions+0x95/0xe30
[  712.310486][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  712.310869][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  712.311019][   T32]  write_versions+0x95/0xe30
[  712.311259][   T32]  ? __pfx_write_versions+0x10/0x10
[  712.311320][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  712.311575][   T32]  ? _copy_from_user+0x94/0xb0
[  712.311671][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  712.311730][   T32]  ? simple_transaction_get+0x12d/0x160
[  712.311886][   T32]  nfsctl_transaction_write+0x10f/0x160
[  712.312019][   T32]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  712.312117][   T32]  vfs_write+0x296/0xba0
[  712.482754][   T32]  ? __pfx_vfs_write+0x10/0x10
[  712.482941][   T32]  ? __fget_files+0x2a/0x420
[  712.483105][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  712.483166][   T32]  ? __fget_files+0x3a2/0x420
[  712.483242][   T32]  ? __fget_files+0x2a/0x420
[  712.483406][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  712.483548][   T32]  ksys_write+0x150/0x270
[  712.483715][   T32]  ? __pfx_ksys_write+0x10/0x10
[  712.484024][   T32]  do_syscall_64+0x166/0x520
[  712.484099][   T32]  ? trace_irq_disable+0x3b/0x140
[  712.484158][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.484332][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.484402][   T32] RIP: 0033:0x7f4b52f9e159
[  712.484454][   T32] RSP: 002b:00007f4b53d8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  712.484543][   T32] RAX: ffffffffffffffda RBX: 00007f4b53225fa0 RCX: 00007f4b52f9e159
[  712.484591][   T32] RDX: 0000000000000009 RSI: 0000200000000180 RDI: 0000000000000003
[  712.484637][   T32] RBP: 00007f4b5303506b R08: 0000000000000000 R09: 0000000000000000
[  712.484684][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  712.484740][   T32] R13: 00007f4b53226038 R14: 00007f4b53225fa0 R15: 00007fff4ceab548
[  712.484771][   T32]  </TASK>
[  712.484824][   T32] 
[  712.484824][   T32] Showing all locks held in the system:
[  712.484835][   T32] locks held by kworker/u8:0/12: 3, last CPU#0:
[  712.484849][   T32]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  712.484906][   T32]  #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  712.484960][   T32]  #2: ffff888070a80800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  712.485010][   T32] locks held by kworker/u8:1/13: 3, last CPU#0:
[  712.485023][   T32]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  712.485076][   T32]  #1: ffffc90000127c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  712.485131][   T32]  #2: ffff888031141258 (&devlink->lock_key#13){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  712.485202][   T32] locks held by khungtaskd/32: 1, last CPU#0:
[  712.485215][   T32]  #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  712.485263][   T32] locks held by khugepaged/38: 2, last CPU#0:
[  712.485284][   T32]  #0: ffff88802ba54cc0 (&mm->mmap_lock){++++}-{4:4}, at: collapse_single_pmd+0x29c4/0x3c50
[  712.756298][   T32]  #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  712.756618][   T32] locks held by kworker/u8:2/43: 2, last CPU#0:
[  712.756668][   T32]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  712.756934][   T32]  #1: ffffc90000b37c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  712.757290][   T32] locks held by kworker/0:2/831: 4, last CPU#0:
[  712.757337][   T32]  #0: ffff888079d1e540 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  713.113001][   T32]  #1: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0
[  713.113266][   T32]  #2: ffff8880b8628298 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x466/0xa10
[  713.113531][   T32]  #3: ffffffff9aa31748 (&____s->seqcount#2){----}-{0:0}, at: ktime_get+0x45/0x220
[  713.113897][   T32] locks held by kworker/u8:7/1002: 3, last CPU#0:
[  713.113946][   T32]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  713.114215][   T32]  #1: ffffc90004befc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  713.114483][   T32]  #2: ffff888035683258 (&devlink->lock_key#16){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  713.115198][   T32] locks held by kworker/u8:9/3251: 3, last CPU#0:
[  713.115247][   T32]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  713.115500][   T32]  #1: ffffc9000e277c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  713.115753][   T32]  #2: ffff888070a90800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  713.116036][   T32] locks held by kworker/u9:1/4928: 2, on CPU#0:
[  713.116085][   T32]  #0: ffff888026796140 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  713.116358][   T32]  #1: ffffc90005f4fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  713.116627][   T32] locks held by klogd/4967: 1, last CPU#0:
[  713.116674][   T32]  #0: ffffffff8ed4eb20 (syslog_lock){+.+.}-{4:4}, at: syslog_print+0x4ad/0x610
[  713.116992][   T32] locks held by kworker/u9:4/5621: 2, on CPU#0:
[  713.117038][   T32]  #0: ffff888026796140 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  713.117293][   T32]  #1: ffffc90003c77c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  713.117646][   T32] locks held by kworker/0:5/5796: 2, last CPU#0:
[  713.117692][   T32]  #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  713.117946][   T32]  #1: ffffc90004377c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  713.118294][   T32] locks held by kworker/0:3/14945: 3, last CPU#0:
[  713.118342][   T32]  #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  713.118605][   T32]  #1: ffffc9000484fc40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  713.118868][   T32]  #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890
[  713.119142][   T32] locks held by getty/15014: 2, on CPU#0:
[  713.119192][   T32]  #0: ffff8880359b40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  713.119461][   T32]  #1: ffffc900039842e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  713.119739][   T32] locks held by syz.2.3513/15097: 4, on CPU#0:
[  713.119789][   T32]  #0: ffff888079dfc0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  713.120064][   T32]  #1: ffff888012558460 (sb_writers#36){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  713.120361][   T32]  #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  713.120625][   T32]  #3: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  713.120907][   T32] locks held by syz-executor/15183: 2, last CPU#0:
[  713.120957][   T32]  #0: ffff88803364a800 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  713.121226][   T32]  #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  713.121508][   T32] locks held by syz-executor/15280: 1, on CPU#0:
[  713.121557][   T32]  #0: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  713.121839][   T32] locks held by syz-executor/15350: 2, on CPU#0:
[  713.121888][   T32]  #0: ffff88804d6180e8 (&type->s_umount_key#129){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0
[  713.122196][   T32]  #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0
[  713.933748][   T32] locks held by syz.4.3623/15472: 3, on CPU#0:
[  713.933798][   T32]  #0: ffff888077a45970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  713.934067][   T32]  #1: ffff88805e9c2460 (sb_writers#36){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  713.934365][   T32]  #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  713.934805][   T32] locks held by syz-executor/16233: 2, last CPU#0:
[  713.934855][   T32]  #0: ffff888079c3f180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  713.935121][   T32]  #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  713.935378][   T32] locks held by kworker/u8:3/16818: 5, last CPU#0:
[  713.935394][   T32]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  713.935454][   T32]  #1: ffffc90003c4fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  713.935513][   T32]  #2: ffff88803b880800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  713.935567][   T32]  #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40
[  713.935627][   T32]  #4: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: sta_info_get+0x4f/0x300
[  713.935687][   T32] locks held by kworker/u8:8/16820: 3, last CPU#0:
[  713.935703][   T32]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  713.935762][   T32]  #1: ffffc90004287c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  713.935823][   T32]  #2: ffff888077c02258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  713.935892][   T32] locks held by kworker/u8:10/16821: 3, last CPU#0:
[  713.935908][   T32]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  713.935967][   T32]  #1: ffffc90003667c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  713.936027][   T32]  #2: ffff88801d7ce258 (&devlink->lock_key#14){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  714.244760][   T32] locks held by kworker/u8:11/16822: 3, last CPU#0:
[  714.244810][   T32]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.245076][   T32]  #1: ffffc90003cbfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.245341][   T32]  #2: ffff88806f5e0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  714.245605][   T32] locks held by kworker/u8:12/16823: 3, last CPU#0:
[  714.245653][   T32]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.245906][   T32]  #1: ffffc90003c5fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.246164][   T32]  #2: ffff888035683258 (&devlink->lock_key#16){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  714.246487][   T32] locks held by syz.6.4106/17174: 2, last CPU#0:
[  714.246537][   T32]  #0: ffff888036098460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x3764/0x4520
[  714.246864][   T32]  #1: ffff8880353e26b8 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120
[  714.247221][   T32] locks held by kworker/u8:16/17568: 3, last CPU#0:
[  714.247268][   T32]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.247530][   T32]  #1: ffffc90004d7fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.247793][   T32]  #2: ffff888067e61258 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  714.248118][   T32] locks held by kworker/u8:17/17569: 3, last CPU#0:
[  714.248170][   T32]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.248427][   T32]  #1: ffffc90004e0fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.248680][   T32]  #2: ffff88806f5f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  714.248930][   T32] locks held by kworker/u8:18/17570: 3, last CPU#0:
[  714.248975][   T32]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.249233][   T32]  #1: ffffc90004e1fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.249486][   T32]  #2: ffff888059e40800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  714.249750][   T32] locks held by kworker/u8:19/17572: 3, last CPU#0:
[  714.249798][   T32]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.250052][   T32]  #1: ffffc90004e3fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.250308][   T32]  #2: ffff8880692e0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  714.250573][   T32] locks held by kworker/u8:20/17575: 3, last CPU#0:
[  714.250620][   T32]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.250873][   T32]  #1: ffffc90004ec7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.251126][   T32]  #2: ffff88806e420800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  714.251394][   T32] locks held by kworker/u8:21/17577: 3, last CPU#0:
[  714.251441][   T32]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.251694][   T32]  #1: ffffc900024dfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.251948][   T32]  #2: ffff88804d990800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  714.252218][   T32] locks held by kworker/u8:24/17580: 4, last CPU#0:
[  714.929862][   T32]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.930162][   T32]  #1: ffffc90004ea7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.930428][   T32]  #2: ffff888070810800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  714.930689][   T32]  #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  714.930969][   T32] locks held by kworker/u8:25/17581: 3, last CPU#0:
[  714.931020][   T32]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.931289][   T32]  #1: ffffc90004ed7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  714.931546][   T32]  #2: ffff888059c60800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  714.931856][   T32] locks held by syz-executor/17594: 2, last CPU#0:
[  714.931904][   T32]  #0: ffff88807e37b440 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0
[  714.932159][   T32]  #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  714.932530][   T32] locks held by syz.6.4289/17596: 2, last CPU#0:
[  714.932577][   T32]  #0: ffff888045825900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  714.932665][   T32]  #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  714.932720][   T32] locks held by syz-executor/17597: 2, last CPU#0:
[  714.932734][   T32]  #0: ffff88807e37ccc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0
[  714.932784][   T32]  #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  714.932840][   T32] locks held by syz-executor/17598: 1, last CPU#0:
[  714.932855][   T32]  #0: ffff88807e37a800 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0
[  714.932907][   T32] 
[  714.932913][   T32] =============================================
[  714.932913][   T32] 
[  714.932922][   T32] NMI backtrace for cpu 0
[  714.932937][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  714.932961][   T32] Tainted: [L]=SOFTLOCKUP
[  714.932969][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  714.932981][   T32] Call Trace:
[  714.932989][   T32]  <TASK>
[  714.932998][   T32]  dump_stack_lvl+0xe8/0x150
[  714.933027][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  714.933050][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  714.933082][   T32]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  714.933107][   T32]  sys_info+0x135/0x170
[  714.933126][   T32]  watchdog+0xfd7/0x1030
[  714.933160][   T32]  ? watchdog+0x1c7/0x1030
[  714.933186][   T32]  kthread+0x38b/0x480
[  714.933206][   T32]  ? __pfx_watchdog+0x10/0x10
[  714.933224][   T32]  ? __pfx_kthread+0x10/0x10
[  714.933244][   T32]  ret_from_fork+0x514/0xb70
[  714.933266][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  714.933283][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.933306][   T32]  ? __switch_to+0xc89/0x1420
[  714.933335][   T32]  ? __pfx_kthread+0x10/0x10
[  714.933355][   T32]  ret_from_fork_asm+0x1a/0x30
[  714.933398][   T32]  </TASK>
[  714.933409][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  715.360793][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  715.371472][   T32] Tainted: [L]=SOFTLOCKUP
[  715.375819][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  715.385856][   T32] Call Trace:
[  715.389120][   T32]  <TASK>
[  715.392076][   T32]  vpanic+0x56d/0xa60
[  715.396066][   T32]  ? __pfx_vpanic+0x10/0x10
[  715.400576][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  715.406220][   T32]  ? console_srcu_read_unlock+0x3a/0x60
[  715.411760][   T32]  panic+0xc5/0xd0
[  715.415575][   T32]  ? __pfx_panic+0x10/0x10
[  715.420011][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  715.425659][   T32]  ? nmi_cpu_backtrace+0x2b0/0x2d0
[  715.430766][   T32]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[  715.436908][   T32]  watchdog+0x1030/0x1030
[  715.441231][   T32]  ? watchdog+0x1c7/0x1030
[  715.445669][   T32]  kthread+0x38b/0x480
[  715.449726][   T32]  ? __pfx_watchdog+0x10/0x10
[  715.454387][   T32]  ? __pfx_kthread+0x10/0x10
[  715.458964][   T32]  ret_from_fork+0x514/0xb70
[  715.463544][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  715.468645][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  715.474283][   T32]  ? __switch_to+0xc89/0x1420
[  715.478965][   T32]  ? __pfx_kthread+0x10/0x10
[  715.483542][   T32]  ret_from_fork_asm+0x1a/0x30
[  715.488319][   T32]  </TASK>
[  715.491359][   T32] Kernel Offset: disabled
[  715.495666][   T32] Rebooting in 86400 seconds..