last executing test programs:

4m40.607551262s ago: executing program 32 (id=714):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)="2e801dc070eb3d02050b03b7b765146d6bdd78cb2c2bb145f9cbdffe40737978", 0x20)

3m37.759910026s ago: executing program 4 (id=1184):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0)
ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000002c0)={0x2, 0x6})

3m36.606388179s ago: executing program 4 (id=1188):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10)
sendmmsg$sock(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000200)="0100000003000000640000000000000000000000000000000000000000000000000000000000000000000000000000000200000001000000", 0x38}, {&(0x7f0000000840)="3c288d8b3b7d97f8c475ed07c88ca0836243c54dddf9e0f57bfa33a44b9d48f76902f42f22f03e6dd8ce26c87191adc51558ec6f6c4d9098317c377d4fa22032bc971b1f810292ea3dcf6ac06c8903c5", 0x50}], 0x2}}], 0x1, 0x20004090)

3m36.488110926s ago: executing program 4 (id=1189):
syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4800802, &(0x7f0000000080), 0x7, 0x9864, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000009b40)='.\x00', 0x0, 0x120)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000009b80)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00']})
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)

3m35.71061467s ago: executing program 1 (id=1198):
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
exit(0x9)
timer_delete(r1)

3m35.011308448s ago: executing program 4 (id=1208):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x8)

3m34.603489376s ago: executing program 1 (id=1211):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x94)
r1 = getpid()
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000640)='./cgroup/cgroup.procs\x00', &(0x7f0000000680)=[0x0], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40)
close(r2)

3m34.431672911s ago: executing program 4 (id=1214):
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x1, [{0xed, &(0x7f00000004c0)=@string={0xed, 0x3, "510970e8c288c80960e90b0c6965bb5250160ddb271fef1d5bcf9c5897804f2381fdb90c613d5b29f283b0e91f57c6013b6fa9ad15e70d9fe75eae20e51074d0da876ac47caeb45e58804e36989b9e77291b98a8ebb9a3dcdee12dd0024a9b2d395106924d115145fc42c3721063bb77873a98d872d029639e87680595acaf984afcc6b3c5304fd682fcc736e37787f93cdd6e0b76e2f576f625bb5d2a77a37283e8d9ed25fd31a0cfc3e7e495dc54a8bff99a944c59448eada3a20483b96c748244b0bb2bad5becfcab091c85e7ea2072e93d5851c405faf2197caa16b6eb8df8105e9a9b8f5a54590dd8"}}]})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000140)=ANY=[])

3m33.924468147s ago: executing program 1 (id=1216):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={<r1=>0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000280)=0x10)
setsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000600)={r1, 0x6}, 0x8)

3m33.877115765s ago: executing program 4 (id=1218):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000c80), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000cc0)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000ffdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004)

3m33.240808884s ago: executing program 33 (id=1218):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000c80), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000cc0)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000ffdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004)

3m33.229246433s ago: executing program 1 (id=1223):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x8)

3m33.039524122s ago: executing program 1 (id=1226):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_dbg\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys_dbg\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_dbg/bus/usb/devices/usb5/authorized_default\x00', 0x1, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000280)={0xb, 0x29, 0x6, {0x6}}, 0xb)

3m31.820515103s ago: executing program 1 (id=1235):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xcf52, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r4, 0xc, &(0x7f0000000140)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0xfc, '\x00', 0x0}})
io_uring_enter(r0, 0x7c65, 0xa334, 0x1, 0x0, 0x0)

3m31.12693332s ago: executing program 34 (id=1235):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xcf52, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r4, 0xc, &(0x7f0000000140)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0xfc, '\x00', 0x0}})
io_uring_enter(r0, 0x7c65, 0xa334, 0x1, 0x0, 0x0)

3m13.005939553s ago: executing program 5 (id=1340):
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0x4, 0x1, 0x3ff}, 0x9})
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x1, 0x6, 0x4, 0x10000, "5debca001a5fbf0900000000000000ff", 0x2, 0x3, 0x1c, 0x0, 0x0, 0x7f})
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

3m12.454736306s ago: executing program 3 (id=1344):
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0)

3m12.149483823s ago: executing program 3 (id=1346):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='.\x00')

3m12.148552621s ago: executing program 5 (id=1356):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x4b1, &(0x7f0000001d00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
mknodat$null(r0, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x103)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

3m11.905468222s ago: executing program 3 (id=1349):
r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b71"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000001b80)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="40111b000000a3a601"], 0x0, 0x0})

3m11.832498515s ago: executing program 5 (id=1351):
r0 = socket$inet6(0xa, 0x3, 0x87)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg0\x00', <r1=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, {0xfbfffffffffbfffd, 0x1, 0x4, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4051e5, 0x20}, 0x6, 0x80001, 0x1, 0x1, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x2, @in=@loopback, 0x3502, 0x0, 0x1, 0x0, 0x6, 0xfffffffe, 0x1000000}}, 0xe8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)

3m11.64811615s ago: executing program 5 (id=1354):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000000c0)={[{@utf8}, {@utf8}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@allow_utime}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x4}}, {@fmask={'fmask', 0x3d, 0x3}}, {@umask={'umask', 0x3d, 0x4}}]}, 0x1, 0x153c, &(0x7f00000009c0)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000880)='./tracing\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0)

3m11.293023154s ago: executing program 5 (id=1357):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb7}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4050)

3m10.787348153s ago: executing program 5 (id=1362):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c61677300070200000000020000000002000000080402", 0x3c)

3m10.046899377s ago: executing program 35 (id=1362):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c61677300070200000000020000000002000000080402", 0x3c)

3m9.947692934s ago: executing program 3 (id=1368):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000000c0)={[{@utf8}, {@utf8}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@allow_utime}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x4}}, {@fmask={'fmask', 0x3d, 0x3}}, {@umask={'umask', 0x3d, 0x4}}]}, 0x1, 0x153c, &(0x7f00000009c0)="$eJzs3AuYjtXaOPD7Xms9Y0h6m+QwrLXuhzc5LJIkhyQ5JEkStuSUkCTZkpAYckoakpAchuQwhOQwMWmcz+dDQpI0SRKSU7L+18T81a797b2/3c73fXP/ruu9rDXruddzP+/9vs/7PGte803XYTUa16zagIjg34KX/kkAgFgAGAQA1wFAAABl48rGZYxnl5jw7+2E/bEaJl/tDNjVxPXP2rj+WRvXP2vj+mdtXP+sjeuftXH9szauP2NZ2ZYZ+a/nR9Z98Pp/Vsaf//+HpJcc98W6kjd2A4j5Z0O4/v/74b8Ry/X/Pyv4Zzbi+mdtXP+sKvZqJ8D+B+D3f1aQ7e+OcP2zNq4/Y1nZL9eCY+FqrkU/fKah+fP3C5H/5O9AfO9Lz/LVX+f/u8fPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Cc76KxQAZLavdl6MMcYYY4wxxhj74/hsVzsDxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyRy/HuLgBsgNN0IeyAv5ID/EQwEoCBoMWCAIoRAUhijcBEXgZigKxaA4lAAHJaEU3AKl4VYoA7dBWbgdysEdUB4qQEWoBHdCZbgLqsDdUBXugWpQHWpATbgXasF9UBvuhzrwANSFB6EePAT14WFoAA2hEfwFGsMj0AQehabQDJpDC2j534p/AXrCi9ALekMC9IG+8BL0g/4wAAbCIHgZBsMrMARehUQYCsPgNRgOr8MIeANGwigYDW/CGHgLxsI4GA8TIAkmwiR4GybDOzAFpsI0mA7JMANmwrswC2bDHHgP5sL7MA/mwwJYCCnwASyCxZAKH8IS+AjSYCksg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK2yD7bADdsIu+Bh2wyewB/bCPvgU9sNn/2L8mb+J74aAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/FMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgffivdgHa2NtrIN1sC7WzVyewgbYABthI2yMjbEJNsGm2BSbY3NsiS2xFbbC1tga22JbbIftsD22xw7YATtiR+yEnbAzdsYu2AW7Ylfsht2xe/oL2QBfxBexN1YTfbAv9sV+mJhtAA7EgfgyDsZX8BV8FRNxKA7D1/A1fB1H4GkceXEUjsbRWFm8hWNxHJKYgEmYhJNwEk7GyTgFp+JUnI7JOANn4kychbNxNr6Hc/F9fB/n43xciCmYgotwMaZiKi7BM5iGS3EZLscVuBJX4Gpcg6txHa7HdbgRN+Jm3IxbcStux+24E3fix6gA8BPci3sxEffjfjyAB/AgHsRDeAjTMR0P42E8gkfwKB7FY3gMj+MJPIkn8BSewtN4Bs/iWTyP5/ECPhf/VaOPi61NBJFBCSViRIyIFbEih8ghcoqcIpfIJSIiIuJEnMgtcos8Io/IJ/KJeBEvCoqCwggjSIQZZwoRFVFRRBQRRUVRUVwUF044UUqUEqVFaVFGlBFlxe2inLhDlBcVRBtXSVQSlUVbV0XcLaqKqqKaqC5qiJqipqglaonaoraoI+qIuqKuqCceEvVFHxyADUVGZRqLodhEDMOmopmQl89QrcQIbC3aiLbiCTEKR2J70cp1EE+LjmIsdhJ/FePwWdFFTMCu4nnRTXQXPcQLoqdo7XqJ3mIK9hF9xXTsJ/qLAWKgmIXVxXs4N3sN8apIFEPFMPGaWIivixHiDTFSjBKjxZtijHhLjBXjxHgxQSSJiWKSeFtMFu+IKWKqmCami2QxQ8wU74pZYraYI94Tc8X7Yp6YLxaIhSJFfCAWicUiVXwoloiPRJpYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih9gpdomPxW7xidgj9op94lOxX3wmDojPxUHxhTgkvhTp4itxWHwtjohvxFHxrTgmvhPHxQlxUnwvTokfxGlxRpwV58R58aO4IH4SF4UXIFEKKaWSgYyR2WSszC5zyGtkThlknv9lnLxB5pY3yjwyr8wn88t4WUAWlFoaaSXJUBaShWVU3iSLyJtlUVlMFpclpJMlZSl5iywtb5Vl5G2yrLxdlpN3yPKygqwoK8k7ZWV5l4TIpX1Uk9VlDVlT3isT4D5ZW94v68gHZF35oKwnH5L15cOygWwoG8m/yMbyEdlEPiqbymayuWwhW8rHZCv5uGwt28i28gnZTj4p28unZAf5tOwo/eWXyLOyi3xOdpXPy26yu+whf5IXpZe9ZG8JfUD2lS/JfrK/HCAHykHyZTlYviKHyFdlohwqh8nX5HD5uhwh35Aj5Sg5Wr4px8i35Fg5To6XE2SSnCgnybflZPmOnCKnymlyukyWM+SAyzPNkfIfxr/9O/FDft77ZrlFbpXb5Ha5Q+6Uu+THcrfcLffIPXKf3Cf3y/3ygDwgD8qD8pA8JNNlujwsD8sj8og8Ko/KY/KYPC5PyHPye3lK/iBPyzPyjDwnz8vz8sLl5wAUKqGkUipQMSqbilXZVQ51jcqprlW51HUqoq5XceoGlVvdqPKovCqfyq/iVQFVUGlllFWkQlVIFVZRdRNefsGo4qqEcqqkKqVu+VfiVRF1syqqiv0qPjO/hL+TX0vVUrVSrVRr1Vq1VW1VO9VOtVftVQfVQXVUHVUn1Ul1Vp1VF9VFdVVdVTfVTfVQPVRP1VP1Ur1UgkpQfdVLqp/qrwaogWqQellkHMMQNUQlqkQ1TA1Tw9VwNUKNUCPVSDVajVZj1Bg1Vo1V49V4laSS1CQ1SU1Wk9UUNUVNU9NUskpWM9VMNUvNUnPUHDVXzVXz1Dy1QC1QKSpFLVKLVKpKVUvUEpWmlqqlarlarlaqlWq1Wq3WqrVqvVqvNqqNKk1tUVvUNrVN7VA71C61S+1Wu9UetUftU/vUfrVfHVAH1EF1UB1Sh1S6SleH1WF1RB1RR9VRdUwdU8fVcXVSnVSn1Cl1Wp1WZ9VZdV6dVxfUBXVRXcy47AtEIAIVqCAmiAlig9ggR5AjyBnkDHIFuYJIEAnigrggd3BjkCfIG+QL8gfxQYGgYKADE9hAXC56NLgpKBLcHBQNigXFgxKBC0oGpYJbgtLBrUGZ4LagbHB7UC64IygfVAgqBpWCO4PKwV1BleDuoGpwT1AtqB7UCGoG9wa1gvuC2sH9QZ3ggaBu8GBQL3goqB88HDQIGma8voLGwSNBk+DRoGnQLGgetAha/nHzB40C70/nfdz10r11gu6j++qXdD/dXw/QA/Ug/bIenHE20a/qRD1UD9Ov6eH6dT1Cv6FH6lF6tH5Tj9Fv6bF6nB6vJ+gkPVFP0m/ryfodPUVP1dP0dJ2sZ+iZ+l09S8/Wc/R7eq5+X8/T8/UCvVCn6A/0Ir1Yp+oP9RL9kU7TS/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1Nr1d79A79S79sd6tP9F79F69T3+q9+vP9AH9uT6ov9CH9Jc6XX+lD+uv9RH9jT6qv9XH9Hf6uD6hy+jv9Sn9gz6tz+iz+pw+r3/UF/RP+qL2GRf3GR/vRhllYkyMiTWxJofJYXKanCaXyWUiJmLiTJzJbXKbPCaPyWfymXgTbwqagiYDGTKFTCETNVFTxBQxRU1RU9wUN844U8qUMqVNaVPGlDFlTVlTzpQz5U15U9FUNHeaO81d5i5zt7nb3GPuMdVNdVPT1DS1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPTyDQyjU1j08Q0MU1NU9PcNDctTUvTyrQyrU1r09a0Ne1MO9PetDcdTAfT0XQ0nUwn09l0Nl1MF9PVdDXdTDfTw/QwPU1P08v0MgkmwfQ1fU0/088MMAPMIDPIDDaDzRAzxCSaRDPMDDPDzXAzwowwI80oMzrjQtW8ZcaacWa8mWCSTJKZZCaZyWaymWKmmGlmmkk2yWammWlmmVlmjplj5pq5Zp6ZZxaYBSbFpJhFZpFJNalmiVli0kyaWWaWmRVmhVllVpk1Zo1ZZ9aZDbDBbDKbzBazxWwz28wOs8PsMrvMbrPb7DF7zD6zz+w3+80Bc8AcNAfNIXPIpJt0c9gcNkfMEXPUHDXHzDFz3Bw3J81Jc8qcMqfNaXPWnDXnTd7Ln5fexNrsNoe9xua019pc9jr7t/18Nr+NtwVsQattHpv3V31jrS1qi9nitoR1tqQtZW/5Tb+8rWAr2kr2TlvZ3mWr/KZfy95na9v7bR37gK1p7/1Vv6590Nazj9j6iAC2mW1kW9jG9hHbxD5qm9pmtrltYdvZJ217+5TtYJ+2He0zv+kvsovtGrvWrrPr7R6715615+wR+409b3+0vWxvO8i+bAfbV+wQ+6pNtEN/0x9t37Rj7Ft2rB1nx9sJv+lPs9Ntsp1hZ9p37Sw7+zf9FPuBnWtT7Tw73y6wC3/uZ+SUaj+0S+xHNs0GsMwutyvsSrvKrv7/uS63G+0mu9nutp/YbXa73WF32l2ZF8J2r91nP7Wxl7sH7Rf2kD1q0+1X9rD9+ufjO2q/tcfsd/a4PWFP2u/tKfuDyozOOPbv7U/2ovUWCAlIkqKAYigbxVJ2ykHXUE66lnLRdRSh6ymObqDcdCPlobyUj/JTPBWggqTJkCWikApRYYrSTZSZXnEqQY5KUim6hUrTrVSGbqOydDuVozuoPFWgilSJ7qTKdBdVobupKt1D1ag61aCadC/VovuoNt1PdegBqksPUj16iOrTw9SAGlIj+gs1pkeoCT1KTakZNacW1JIeo1b0OLWmNtSWnqB29CS1p6eoAz1NHekZ6kR/pc70LHWh56grPU/dqDv1oBeoJ71Ivag3JVAf6ksvUT/qTwNoIA2il2kwvUJD6FVKpKE0jF6j4fQ6jaA3aCSNotH0Jo2ht2gsjaPxNIGSaCJNordpMr1DU2gqTaPplEwzaCa9S7NoNs2h92guvU/zaD4toIWUQh/QIlpMqfQhLaGPKI2W0jJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSNtpOO2gn7aKPaTd9QntoL+2jT2k/fUYH6HM6SF/QIfqS0ukrOkxf0xH6ho7St743fUfH6QSdpO/pFP1Ap+kMnaVzdJ5+pAv0E10kTxBiKEIZqjAIY8JsYWyYPcwRXhPmDK8Nc4XXhZHw+jAuvCHMHd4Y5gnzhvnC/GF8WCAsGOrQhDakMAwLhYXDaHhTWCS8OSwaFguLhyVCF5YMS4W3hKXDW8My4W1h2fD2sFx4R1g+rBA+8kCl8M6wcnhXWCW8O6wa3hNWC6uHNcKa4b1hrfC+sHZ4f1gnfCAsEz4Y1gsfCuuHD4cNwoZho/AvYePwkbBJ+GjYNGwWNg9bhC3Dx8JW4eNh67BN2Da8JmwXPhm2D58KO4RPhx3DZ34ef3Bx5vgTvxlPCPuEfcOXwpdC7++XC6ILoynRD6KLooujqdEPo0uiH0XTokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Kbo97XzAYOnXDSKRe4GJfNxbrsLoe7xuV017pc7joXcde7OHeDy+1udHlcXpfP5XfxroAr6LQzzjpyoSvkCruou8kVcTe7oq6YK+5KOOdKulKuhWvpWrpW7nHX2rVxbd0T7gn3pHvSPeWeck+7ju4Z18n91XV2z7ou7jn3nHvedXPdXQ/3guvpJua69J5McH1dX9fP9XMD3AA3yA1yg91gN8QNcYku0Q1zw9xwN9yNcCPcSDfSjXaj3Rg3xo11Y914N94luSQ3yU1yk91kN8VNcdPcNJfskt1MN9PNcrNc5dmX9jLPzXML3AKX4lLcIpdxzZjqlrglLs2luWVumVvhVrhVbpVb49a4dW6d2+A2uE1uk9vitrhtbpvb4Xa4XW6X2+12uz3+ukuTuv3ugDvgDrqD7pD70qW7r9xh97U74r5xR9237pj7zh13J9xJ97075X5wp90Zd9adc+fdj+6C+8lddN4lRSZGJkXejkyOvBOZEpkamRaZHkmOzIjMjLwbmRWZHZkTeS8yN/J+ZF5kfmRBZGEkJfJBZFFkcSQ18mFkSeSjSFpkaWRZZHlkRWRlxPsC20JfyBf2UX+TL+Jv9kV9MV/cl/DOl/Sl/C2+9KW807y/3Zfzd/jyvoKv6B/1TX0z39y38C39Y76Vf9y39m18W/+Eb+ef9O39U76Df9p39M/4Tv6vvrN/1nfxz/mu/nnfzXf3PfwLvqd/0ffyvX2C7+P7+pd8P9/fD/AD/SD/sh/sX/FD/Ks+0Q/1w/xrfrh/3Y/wb/iRfpQfHfOmH5N5iwwTfJKf6Cf5t/1k/46f4qf6aX66T/Yz/Ez/rp/lZ/s5/j0/17/v5/n5foFf6FP8B36RX+xT/Yd+if/Ip/mlmYvGfpVf7df4tX6dX+83+I1+k9/st/itfpvf7nf4nX6X/9jv9p/4PX6v3+c/9fv9Z/6A/9wf9F/4Q/5Ln+6/8of91/6I/8Yf9d/6Y/47f9yf8Cf99/6U/8Gf9mf8WX/On/c/+gv+J3+R/88aY4wxxtg/ZeKVpvj1yKXl/D6/EyN+sXFfALh2e/70X45nXFFuyHOp3V/E/7wc8XTvrg0zH9WqJSQkXN42TUJQeD5A5m+CMvz81YPL/aXQFp6EDtAGSv9u/v1F9/P0D+aP3g6Q4xcxGQll9q/M/zkAJvzO/I89MXpRufBs3H8x/3yAooWvxGSHK/2l0Pbn9ZU2UObv5J+31T/IP/sXSQCtfxGTE670r+RfCh6HZ6DDr7ZkjDHGGGOMMcYu6S8qds68/8z8xufv3Z/Hqysx2eBK/x/dnzPGGGOMMcYYY+zqe7Z7j6ce69ChTed/vVHlvxX1TzeawH9qZm78bsN7gMyfKAD4NycEyGjI/2Ib8UcfxdY/5YlKvPzW+duhFed8AP8zSvlHNK7yiYkxxhhjjDH2h7ty0f/rn6urlRBjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZYF/Rl/TuxqHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//9BC/Sw")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000880)='./tracing\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0)

3m9.467979316s ago: executing program 3 (id=1372):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb7}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4050)

3m8.862620331s ago: executing program 3 (id=1374):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=';', 0x1}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000240), 0x4)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/139, 0x8b}, 0x20)

3m8.085446759s ago: executing program 36 (id=1374):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=';', 0x1}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000240), 0x4)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/139, 0x8b}, 0x20)

1m38.829044042s ago: executing program 9 (id=1969):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/vhci\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000240)=0x2, 0x8)

1m38.450415161s ago: executing program 9 (id=1972):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x2001c004)

1m38.025938631s ago: executing program 9 (id=1977):
io_destroy(0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f00000001c0)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
r0 = syz_open_dev$dvb_demux(&(0x7f0000000300), 0xcd79, 0x141000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000340)={0x2, 0x0, 0x1, 0x7, 0x4})

1m36.424937271s ago: executing program 9 (id=1983):
r0 = mq_open(&(0x7f00000000c0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r0, &(0x7f0000000680)=""/204, 0x2000, 0x0, 0x0)

1m35.993980576s ago: executing program 9 (id=1986):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
utimensat(r1, 0x0, 0x0, 0x0)

1m35.728434115s ago: executing program 9 (id=1988):
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x2)

1m20.36849055s ago: executing program 37 (id=1988):
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x2)

3.791313953s ago: executing program 0 (id=2532):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c)
r1 = socket(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)

3.415380499s ago: executing program 0 (id=2536):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x2040, 0x6c)
flock(r0, 0x2)
fcntl$setlease(r0, 0x400, 0x0)
execve(&(0x7f0000000080)='./file2\x00', 0x0, 0x0)

3.007429288s ago: executing program 0 (id=2541):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}]}]}]}]}, 0x4c}}, 0x0)

2.962052745s ago: executing program 8 (id=2542):
mkdir(&(0x7f00000005c0)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000600)='mnt\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000680)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303a5"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000780)='mnt/ttyUSB0\x00', 0x44002, 0x0)

2.952942985s ago: executing program 2 (id=2543):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0)
preadv2(r1, &(0x7f0000000980)=[{&(0x7f0000000600)=""/165, 0xa5}], 0x1, 0x86, 0x4, 0x0)

2.794024944s ago: executing program 6 (id=2545):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000))

2.77287997s ago: executing program 0 (id=2546):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0xffff, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0)

2.753065352s ago: executing program 2 (id=2547):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000035c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==")
r0 = open(&(0x7f0000000100)='./file2\x00', 0x1ad941, 0x176)
truncate(&(0x7f0000000080)='./file2\x00', 0x42da)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)='\b', 0xffffff54}], 0x1, 0x7000, 0x0, 0x3)

2.69664327s ago: executing program 7 (id=2548):
syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f00000003c0)="$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")
syz_mount_image$vfat(&(0x7f0000001000), &(0x7f0000001040)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f0000001080))
syz_mount_image$vfat(&(0x7f00000010c0), &(0x7f0000001100)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000001140))
rmdir(&(0x7f0000001180)='./bus\x00')

2.234239754s ago: executing program 6 (id=2549):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)="6164642073797a30202032372e302e302e314a0da87d5d8ac48a7665b20a", 0x1e)

2.013763588s ago: executing program 7 (id=2550):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0)
write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './sys'}, 0x9)

1.779792629s ago: executing program 6 (id=2551):
r0 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000040))
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)={0x0, 0xfb, 0x2005d0, 0x0, 0x81})

1.550541352s ago: executing program 7 (id=2552):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r1, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x240440d0}, 0x0)

1.408219528s ago: executing program 6 (id=2553):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='<kernel> //\\0_domain\n', 0x15)

1.380847923s ago: executing program 2 (id=2554):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @none={0x0, 0xffff}}, 0x14)
sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010)

1.285774647s ago: executing program 0 (id=2555):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0)
write(r0, &(0x7f0000000640)='\"l', 0x2)

1.235902928s ago: executing program 7 (id=2556):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000019400)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000019480)=0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
shutdown(r0, 0x2)

1.16841165s ago: executing program 6 (id=2557):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$msr(r2, 0x0, 0x0)

1.105897913s ago: executing program 8 (id=2558):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000740)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000780)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000800)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44)

1.089726585s ago: executing program 0 (id=2559):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, 0x0, &(0x7f0000000880)='GPL\x00'}, 0x94)
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])

969.177997ms ago: executing program 7 (id=2560):
socket$rds(0x15, 0x5, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r0, 0x114, 0x271f, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000)

915.821628ms ago: executing program 8 (id=2561):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f00000005c0)={0x74, 0x0, 0x54})

810.758983ms ago: executing program 7 (id=2562):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
membarrier(0x10, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000009c0)={0x0, 0x1, r1, 0x3, 0x80000})

719.113415ms ago: executing program 8 (id=2563):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@nodioread_nolock}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000000)="1f37973e5b6de60678e117a36df6", 0xe, 0x8400c61)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4f000, 0x100000001})

700.388543ms ago: executing program 2 (id=2564):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1})
ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1)

340.109464ms ago: executing program 2 (id=2565):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c6500070504002f2f6f00040600666c61677300070200000000020000000002000000000802000000000200000000020000000002000000003f", 0x52)

289.754896ms ago: executing program 8 (id=2566):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x1, 0x0, 0x0, 0x3}, [@TCA_NETEM_RATE={0x14, 0xe}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

140.660454ms ago: executing program 6 (id=2567):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x4, 0x3, 0xfffffffd}]}}]}, 0x38}}, 0x0)

131.222771ms ago: executing program 2 (id=2568):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000680)={0x1d, r1}, 0x10)
sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)="0100000003000000640000000000000000000000000000000000000000000000000000000000000001000000000000000200000001000000020000000100"/72, 0x48}], 0x1}}], 0x2, 0x0)

0s ago: executing program 8 (id=2569):
set_mempolicy(0x8006, &(0x7f00000001c0)=0xfff, 0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="230000002300000002001200ff19010005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=""/86}, 0x20)

kernel console output (not intermixed with test programs):

8783][ T9165]  </TASK>
[  344.597037][ T9165] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  345.012315][T11179] loop2: detected capacity change from 0 to 8192
[  345.188197][T10136] usb 10-1: USB disconnect, device number 3
[  346.418725][ T5763] hsr0: entered promiscuous mode
[  347.363104][T11212] loop7: detected capacity change from 0 to 32768
[  347.364098][T11212] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  347.395348][T11212] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1833 (11212)
[  347.428355][T11212] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  347.428463][T11212] BTRFS info (device loop7): using crc32c checksum algorithm
[  347.589032][T11212] BTRFS info (device loop7): rebuilding free space tree
[  347.651329][T11212] BTRFS info (device loop7): disabling free space tree
[  347.651384][T11212] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  347.651400][T11212] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  347.692593][T11212] BTRFS info (device loop7): enabling ssd optimizations
[  347.692613][T11212] BTRFS info (device loop7): turning on async discard
[  347.692642][T11212] BTRFS info (device loop7): force clearing of disk cache
[  347.692710][T11212] BTRFS info (device loop7): use zstd compression, level 3
[  348.137109][ T9209] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  348.285280][T11250] loop8: detected capacity change from 0 to 4096
[  348.397352][T11251] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  349.189465][   T64] wlan1: Trigger new scan to find an IBSS to join
[  349.923963][T11292] block2mtd: illegal erase size
[  349.987510][T11295] loop9: detected capacity change from 0 to 256
[  349.988286][T11295] exfat: Deprecated parameter 'namecase'
[  350.011276][T11295] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[  350.047314][T11295] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  350.081216][  T171] wlan1: Creating new IBSS network, BSSID 82:e9:8c:14:76:ec
[  350.130024][T11295] exfat: Deprecated parameter 'namecase'
[  350.233383][T11300] loop6: detected capacity change from 0 to 64
[  350.457342][ T9165] hfs: request for non-existent node 131072 in B*Tree
[  351.343366][T11334] loop7: detected capacity change from 0 to 512
[  351.344028][T11334] EXT4-fs: Ignoring removed orlov option
[  351.369525][T11334] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  351.369540][T11334] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  351.419222][T11334] EXT4-fs (loop7): 1 truncate cleaned up
[  351.420485][T11334] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.498147][T11334] EXT4-fs (loop7): shut down requested (2)
[  351.623042][ T9209] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.347295][T11333] loop8: detected capacity change from 0 to 32768
[  352.414079][T11333] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  352.464962][T11358] loop7: detected capacity change from 0 to 2048
[  352.519267][T11358] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  352.884480][ T9645] ocfs2: Unmounting device (7,8) on (node local)
[  353.046018][T11358] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  353.098545][T11378] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1902'.
[  353.248214][T11358] overlayfs: failed to verify upper root origin
[  353.371425][ T9209] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.600932][T11389] loop6: detected capacity change from 0 to 164
[  353.735452][T11392] loop9: detected capacity change from 0 to 512
[  353.780217][  T128] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  353.807134][T11392] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  353.807213][T11392] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  353.929919][  T128] usb 9-1: Using ep0 maxpacket: 32
[  353.932394][  T128] usb 9-1: New USB device found: idVendor=0fc5, idProduct=b080, bcdDevice=0.00
[  353.937746][  T128] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  353.937790][  T128] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  353.937807][  T128] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  353.937867][  T128] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.006488][  T128] usb 9-1: config 0 descriptor??
[  354.160145][ T9676] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.395190][T11379] loop2: detected capacity change from 0 to 32768
[  354.517372][  T128] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x1
[  354.517400][  T128] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x2
[  354.539454][T11379] read_mapping_page failed!
[  354.539529][T11379] ERROR: (device loop2): txCommit: 
[  354.539529][T11379] 
[  354.925733][  T128] hid-led 0003:0FC5:B080.0008: probe with driver hid-led failed with error -71
[  354.952489][  T128] usb 9-1: USB disconnect, device number 3
[  354.983587][T11390] loop7: detected capacity change from 0 to 40427
[  355.019069][T11390] F2FS-fs (loop7): build fault injection rate: 14
[  355.019088][T11390] F2FS-fs (loop7): build fault injection type: 0xe4
[  355.044138][T11390] F2FS-fs (loop7): invalid crc value
[  355.291051][T11390] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  355.324423][T11390] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  355.484265][   T32] audit: type=1800 audit(2000000109.700:130): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1905" name="file1" dev="loop7" ino=10 res=0 errno=-22
[  355.694574][ T9209] syz-executor: attempt to access beyond end of device
[  355.694574][ T9209] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  355.739196][ T9209] CPU: 0 UID: 0 PID: 9209 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  355.739243][ T9209] Tainted: [L]=SOFTLOCKUP
[  355.739249][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  355.739259][ T9209] Call Trace:
[  355.739265][ T9209]  <TASK>
[  355.739289][ T9209]  dump_stack_lvl+0xe8/0x150
[  355.739344][ T9209]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  355.739422][ T9209]  f2fs_write_end_bio+0x118e/0x15d0
[  355.739479][ T9209]  __submit_merged_bio+0x258/0x6a0
[  355.739520][ T9209]  ? rcu_is_watching+0x16/0xb0
[  355.739565][ T9209]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  355.739588][ T9209]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  355.739627][ T9209]  f2fs_write_data_pages+0x2a13/0x36e0
[  355.739678][ T9209]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  355.739700][ T9209]  ? is_bpf_text_address+0x26/0x2b0
[  355.739740][ T9209]  ? arch_stack_walk+0xfb/0x150
[  355.739792][ T9209]  ? add_lock_to_list+0xc7/0x100
[  355.739820][ T9209]  ? lockdep_unlock+0x5c/0xd0
[  355.739836][ T9209]  ? __lock_acquire+0x1511/0x2de0
[  355.739875][ T9209]  ? do_raw_spin_lock+0x12b/0x2f0
[  355.739899][ T9209]  ? do_raw_spin_unlock+0xf5/0x200
[  355.739915][ T9209]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  355.739939][ T9209]  do_writepages+0x338/0x560
[  355.739974][ T9209]  ? do_raw_spin_unlock+0xf5/0x200
[  355.739992][ T9209]  filemap_fdatawrite+0x1e9/0x2f0
[  355.740013][ T9209]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  355.740064][ T9209]  ? do_raw_spin_unlock+0xf5/0x200
[  355.740083][ T9209]  f2fs_sync_dirty_inodes+0x471/0x970
[  355.740111][ T9209]  f2fs_write_checkpoint+0x860/0x24d0
[  355.740154][ T9209]  kill_f2fs_super+0x2dc/0x700
[  355.740198][ T9209]  ? rcu_do_enqueue+0x616/0x870
[  355.740217][ T9209]  ? lockdep_hardirqs_on+0x7b/0x110
[  355.740315][ T9209]  ? __pfx_kill_f2fs_super+0x10/0x10
[  355.740368][ T9209]  ? __pfx_call_rcu+0x10/0x10
[  355.740395][ T9209]  ? shrinker_free+0x2a7/0x3b0
[  355.740428][ T9209]  deactivate_locked_super+0xbe/0x110
[  355.740455][ T9209]  cleanup_mnt+0x204/0x2a0
[  355.740519][ T9209]  task_work_run+0x1d9/0x260
[  355.740563][ T9209]  ? __pfx_task_work_run+0x10/0x10
[  355.740586][ T9209]  exit_to_user_mode_loop+0x204/0x770
[  355.740604][ T9209]  ? rcu_is_watching+0x16/0xb0
[  355.740626][ T9209]  do_syscall_64+0x328/0x520
[  355.740657][ T9209]  ? trace_irq_disable+0x3b/0x140
[  355.740675][ T9209]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.740701][ T9209]  ? clear_bhb_loop+0x70/0xc0
[  355.740717][ T9209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.740730][ T9209] RIP: 0033:0x7f2bbb1a0797
[  355.740744][ T9209] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  355.740755][ T9209] RSP: 002b:00007fffaa1eba08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  355.740769][ T9209] RAX: 0000000000000000 RBX: 00007f2bbb235f63 RCX: 00007f2bbb1a0797
[  355.740778][ T9209] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffaa1ebac0
[  355.740786][ T9209] RBP: 00007fffaa1ebac0 R08: 00007fffaa1ecac0 R09: 00000000ffffffff
[  355.740795][ T9209] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffaa1ecb50
[  355.740803][ T9209] R13: 00007f2bbb235f63 R14: 0000000000056ca9 R15: 00007fffaa1ecb90
[  355.740824][ T9209]  </TASK>
[  355.900871][ T9209] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  357.134415][T11411] loop9: detected capacity change from 0 to 32768
[  357.151374][T11411] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1913 (11411)
[  357.181000][T11411] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  357.181026][T11411] BTRFS info (device loop9): using crc32c checksum algorithm
[  357.268779][T11426] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1914'.
[  357.314681][T11439] loop2: detected capacity change from 0 to 256
[  357.315432][T11439] exfat: Deprecated parameter 'utf8'
[  357.346979][T11439] exfat: Deprecated parameter 'namecase'
[  357.347040][T11439] exfat: Deprecated parameter 'utf8'
[  357.400883][T11441] loop8: detected capacity change from 0 to 512
[  357.403327][T11439] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  357.435617][T11411] BTRFS info (device loop9): enabling ssd optimizations
[  357.435637][T11411] BTRFS info (device loop9): turning on flush-on-commit
[  357.435649][T11411] BTRFS info (device loop9): enabling free space tree
[  357.435660][T11411] BTRFS info (device loop9): enabling auto defrag
[  357.435673][T11411] BTRFS info (device loop9): use lzo compression, level 1
[  357.435687][T11411] BTRFS info (device loop9): max_inline set to 4096
[  357.604900][   T32] audit: type=1800 audit(2000000111.820:131): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1913" name="file1" dev="loop9" ino=260 res=0 errno=-22
[  357.677828][T11445] batman_adv: batadv0: Adding interface: macvtap1
[  357.677842][T11445] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  357.677860][T11445] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  357.735881][T11441] EXT4-fs error (device loop8) in ext4_process_orphan:346: Out of memory
[  357.735902][T11441] loop8: lost filesystem error report for type 5 error -12
[  357.738923][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  357.738939][    C0] EXT4-fs (loop8): initial error at time 2000000111: ext4_process_orphan:346
[  357.738955][    C0] EXT4-fs (loop8): last error at time 2000000111: ext4_process_orphan:346
[  357.885855][T11441] EXT4-fs (loop8): 2 truncates cleaned up
[  357.906307][T11441] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.950123][ T9676] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  358.127646][ T6385] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm kworker/u8:34: bg 0: block 5: invalid block bitmap
[  358.191593][ T6385] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  358.191618][ T6385] EXT4-fs (loop8): This should not happen!! Data will be lost
[  358.191618][ T6385] 
[  358.191629][ T6385] EXT4-fs (loop8): Total free blocks count 0
[  358.191639][ T6385] EXT4-fs (loop8): Free/Dirty block details
[  358.191665][ T6385] EXT4-fs (loop8): free_blocks=0
[  358.191699][ T6385] EXT4-fs (loop8): dirty_blocks=1
[  358.191708][ T6385] EXT4-fs (loop8): Block reservation details
[  358.191716][ T6385] EXT4-fs (loop8): i_reserved_data_blocks=1
[  358.277901][ T9645] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.862509][T11468] loop8: detected capacity change from 0 to 164
[  359.360639][T11471] loop8: detected capacity change from 0 to 8
[  359.605636][T11471] SQUASHFS error: Failed to read block 0x636: -5
[  359.605653][T11471] SQUASHFS error: Unable to read metadata cache entry [634]
[  359.799947][ T5763] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  359.951487][ T5763] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  359.954554][ T5763] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  359.954578][ T5763] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 169, setting to 64
[  359.954598][ T5763] usb 8-1: config 0 interface 0 has no altsetting 0
[  359.958536][ T5763] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  359.958555][ T5763] usb 8-1: Product: syz
[  359.958565][ T5763] usb 8-1: Manufacturer: syz
[  359.958576][ T5763] usb 8-1: SerialNumber: syz
[  360.038801][ T5763] usb 8-1: config 0 descriptor??
[  360.052871][T11474] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  360.187215][ T5763] usb 8-1: selecting invalid altsetting 0
[  360.267110][T11490] netlink: 88 bytes leftover after parsing attributes in process `syz.8.1940'.
[  360.267144][T11490] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1940'.
[  360.584518][T11502] loop6: detected capacity change from 0 to 128
[  360.636815][T11502] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  360.638742][T11502] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  360.754177][    T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  360.876399][ T9165] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  360.947822][    T9] usb 10-1: New USB device found: idVendor=1b96, idProduct=0004, bcdDevice=0.00
[  360.964567][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.964592][    T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  360.964622][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.008674][    T9] usb 10-1: config 0 descriptor??
[  361.324230][   T32] audit: type=1326 audit(2000000115.540:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.2.1950" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5299f559 code=0x7ffc0000
[  361.324270][   T32] audit: type=1326 audit(2000000115.540:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.2.1950" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5299f559 code=0x7ffc0000
[  361.325451][ T5763] usb 8-1: USB disconnect, device number 4
[  361.414171][   T32] audit: type=1326 audit(2000000115.630:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.2.1950" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7ffa5299f559 code=0x7ffc0000
[  361.414211][   T32] audit: type=1326 audit(2000000115.630:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.2.1950" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5299f559 code=0x7ffc0000
[  361.414241][   T32] audit: type=1326 audit(2000000115.630:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.2.1950" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5299f559 code=0x7ffc0000
[  361.529142][   T32] audit: type=1326 audit(2000000115.740:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.2.1950" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ffa5299f559 code=0x7ffc0000
[  361.529183][   T32] audit: type=1326 audit(2000000115.740:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.2.1950" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5299f559 code=0x7ffc0000
[  361.529239][   T32] audit: type=1326 audit(2000000115.740:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.2.1950" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5299f559 code=0x7ffc0000
[  361.687926][    T9] input: HID 1b96:0004 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:1B96:0004.0009/input/input24
[  361.756510][T11516] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  361.780048][    T9] ntrig 0003:1B96:0004.0009: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:0004] on usb-dummy_hcd.9-1/input0
[  361.924450][    T9] usb 10-1: USB disconnect, device number 4
[  362.308712][T11523] fido_id[11523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  362.462257][T11530] batman_adv: batadv0: Adding interface: macvtap1
[  362.462271][T11530] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  362.462292][T11530] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  362.608576][T11533] loop2: detected capacity change from 0 to 2048
[  362.678269][T11533] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  363.292023][T11548] loop8: detected capacity change from 0 to 128
[  363.304207][T11548] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  363.332433][T11548] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  363.614344][T11528] loop6: detected capacity change from 0 to 32768
[  363.696407][T11528] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  363.726719][T11551] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  363.827248][T11528] XFS (loop6): Ending clean mount
[  363.882132][T11528] XFS (loop6): Quotacheck needed: Please wait.
[  364.050666][ T6163] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  364.154033][ T6385] wlan1: Trigger new scan to find an IBSS to join
[  364.187682][T11528] XFS (loop6): Quotacheck: Done.
[  364.364367][ T9165] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  364.440823][T11572] batman_adv: batadv0: Adding interface: macvtap1
[  364.440837][T11572] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  364.440856][T11572] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  364.674226][T11570] loop8: detected capacity change from 0 to 8192
[  364.824593][T10136] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  364.990066][T10136] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41
[  364.990956][T10136] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  364.990975][T10136] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  364.990992][T10136] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  364.992714][T10136] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  364.992731][T10136] usb 8-1: Product: syz
[  364.992741][T10136] usb 8-1: Manufacturer: syz
[  364.992751][T10136] usb 8-1: SerialNumber: syz
[  365.021248][    T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  365.179350][    T9] usb 10-1: Using ep0 maxpacket: 8
[  365.181253][    T9] usb 10-1: unable to get BOS descriptor or descriptor too short
[  365.181375][    T9] usb 10-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05
[  365.183576][    T9] usb 10-1: config 4 interface 0 has no altsetting 0
[  365.186047][    T9] usb 10-1: string descriptor 0 read error: -22
[  365.186128][    T9] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  365.261941][    T9] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  365.302109][    T9] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  365.302466][    T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  365.302556][    T9] usb 10-1: media controller created
[  365.396897][T10136] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  365.422552][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  365.455561][T11584] zram: failed to load dictionary d (err=-2)
[  365.499866][T11578] usb 10-1: dvb_usb_v2: could not submit urb no. 0 - get them all back
[  365.584920][    T9] zl10353_read_register: readreg error (reg=127, ret==0)
[  365.642969][  T128] usb 8-1: USB disconnect, device number 5
[  365.655602][  T128] usblp0: removed
[  365.729528][T10136] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  365.737151][    T9] usb 10-1: USB disconnect, device number 5
[  365.879852][T10136] usb 3-1: Using ep0 maxpacket: 32
[  365.880490][T10136] usb 3-1: New USB device found: idVendor=0fc5, idProduct=b080, bcdDevice=0.00
[  365.881337][T10136] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  365.881366][T10136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  365.881385][T10136] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  365.881413][T10136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.887287][T10136] usb 3-1: config 0 descriptor??
[  366.124129][T11592] loop8: detected capacity change from 0 to 2048
[  366.151668][ T6385] wlan1: Trigger new scan to find an IBSS to join
[  366.185039][T11592] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  366.185133][T11592] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  366.352263][T11583] loop6: detected capacity change from 0 to 32768
[  366.374163][T11583] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1974 (11583)
[  366.404717][T11583] BTRFS info (device loop6): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f
[  366.404742][T11583] BTRFS info (device loop6): using sha256 checksum algorithm
[  366.510101][ T9645] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.516032][T10136] hid-led 0003:0FC5:B080.000A: unknown main item tag 0x1
[  366.516058][T10136] hid-led 0003:0FC5:B080.000A: unknown main item tag 0x2
[  366.641766][ T5633] Bluetooth: unknown link type 128
[  366.671128][T11583] BTRFS info (device loop6): enabling ssd optimizations
[  366.671149][T11583] BTRFS info (device loop6): turning on async discard
[  366.671160][T11583] BTRFS info (device loop6): enabling free space tree
[  366.880968][T10136] hid-led 0003:0FC5:B080.000A: probe with driver hid-led failed with error -71
[  366.912526][T10136] usb 3-1: USB disconnect, device number 11
[  367.000986][ T9165] BTRFS info (device loop6): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f
[  367.726993][T11625] loop8: detected capacity change from 0 to 2048
[  367.750637][T11625] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  367.750656][T11625] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  367.750685][T11625] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[  367.750696][T11625] EXT4-fs (loop8): group descriptors corrupted!
[  368.641614][T11621] loop7: detected capacity change from 0 to 32768
[  368.679295][T10136] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  368.701343][T11621] read_mapping_page failed!
[  368.701357][T11621] ERROR: (device loop7): txCommit: 
[  368.701357][T11621] 
[  368.709798][ T5633] Bluetooth: hci2: command tx timeout
[  368.830183][T10136] usb 3-1: Using ep0 maxpacket: 32
[  368.831326][T10136] usb 3-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  368.835983][T10136] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  368.836003][T10136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  368.836020][T10136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  368.836103][T10136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  368.836121][T10136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  368.889640][T10136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.889661][T10136] usb 3-1: Product: syz
[  368.889672][T10136] usb 3-1: Manufacturer: syz
[  368.889683][T10136] usb 3-1: SerialNumber: syz
[  368.953688][T10136] usb 3-1: config 0 descriptor??
[  369.190111][ T6386] wlan1: Trigger new scan to find an IBSS to join
[  369.190208][ T6386] wlan1: Trigger new scan to find an IBSS to join
[  369.405517][T10136] iforce 3-1:0.0: usb_submit_urb failed: -32
[  369.405599][T10136] input input25: Device does not respond to id packet M
[  369.428430][T10136] input input25: Device does not respond to id packet P
[  369.628552][T10136] iforce 3-1:0.0: usb_submit_urb failed: -71
[  369.628591][T10136] input input25: Device does not respond to id packet B
[  369.635491][T10136] iforce 3-1:0.0: usb_submit_urb failed: -71
[  369.635522][T10136] input input25: Device does not respond to id packet N
[  369.658115][T10136] iforce 3-1:0.0: usb_submit_urb failed: -71
[  369.672352][T10136] iforce 3-1:0.0: usb_submit_urb failed: -71
[  369.674531][T10136] iforce 3-1:0.0: usb_submit_urb failed: -71
[  369.674880][T11648] loop7: detected capacity change from 0 to 128
[  369.685825][T10136] iforce 3-1:0.0: usb_submit_urb failed: -71
[  369.725085][T10136] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input25
[  369.756446][T11648] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  369.781993][T11648] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  369.865683][T10136] usb 3-1: USB disconnect, device number 12
[  369.867140][T11648] fscrypt (loop7, inode 12): Unsupported encryption flags (0x7a)
[  369.964950][T11637] loop8: detected capacity change from 0 to 32768
[  370.050278][ T9209] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  370.086424][T11637] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  370.237632][   T64] wlan1: Creating new IBSS network, BSSID 8a:fb:39:f3:13:41
[  370.291920][T11637] XFS (loop8): Ending clean mount
[  370.344392][   T32] audit: type=1800 audit(2000000124.560:140): pid=11637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1995" name="file1" dev="loop8" ino=4422 res=0 errno=-22
[  370.502347][T11660] 8021q: adding VLAN 0 to HW filter on device bond1
[  370.545371][T11660] bond0: (slave bond1): Enslaving as an active interface with an up link
[  370.687578][ T9645] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  370.797079][  T128] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  371.028204][T11673] batman_adv: batadv0: Adding interface: macvtap1
[  371.028218][T11673] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  371.028237][T11673] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  371.068126][  T128] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  371.462490][T11667] ceph: No mds server is up or the cluster is laggy
[  371.604774][T11682] loop2: detected capacity change from 0 to 128
[  371.623647][T11682] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  371.670344][T11682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  371.961899][T11687] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  371.961930][T11687] CPU: 0 UID: 0 PID: 11687 Comm: syz.7.2014 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  371.961952][T11687] Tainted: [L]=SOFTLOCKUP
[  371.961957][T11687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  371.961979][T11687] Call Trace:
[  371.961986][T11687]  <TASK>
[  371.961992][T11687]  dump_stack_lvl+0xe8/0x150
[  371.962024][T11687]  sysfs_create_dir_ns+0x271/0x2a0
[  371.962138][T11687]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  371.962161][T11687]  ? do_raw_spin_unlock+0xf5/0x200
[  371.962180][T11687]  kobject_add_internal+0x622/0xcd0
[  371.962224][T11687]  kobject_add+0x163/0x240
[  371.962245][T11687]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  371.962268][T11687]  ? __pfx_kobject_add+0x10/0x10
[  371.962294][T11687]  ? get_device_parent+0x366/0x3a0
[  371.962356][T11687]  device_add+0x3fa/0xb80
[  371.962376][T11687]  tty_register_device_attr+0x428/0x9b0
[  371.962432][T11687]  ? __pfx_tty_register_device_attr+0x10/0x10
[  371.962454][T11687]  ? tty_port_init+0x136/0x1a0
[  371.962483][T11687]  ? gsm_dlci_alloc+0x330/0x640
[  371.962530][T11687]  gsm_activate_mux+0x110/0x2a0
[  371.962551][T11687]  gsmld_ioctl+0x12d3/0x1930
[  371.962572][T11687]  ? __pfx_gsmld_ioctl+0x10/0x10
[  371.962595][T11687]  ? __pfx___ldsem_down_read_nested+0x10/0x10
[  371.962621][T11687]  ? ldsem_down_read+0x12/0x40
[  371.962673][T11687]  ? __pfx_gsmld_ioctl+0x10/0x10
[  371.962688][T11687]  tty_ioctl+0x9bd/0xde0
[  371.962704][T11687]  ? __pfx_tty_ioctl+0x10/0x10
[  371.962719][T11687]  __se_sys_ioctl+0xfc/0x170
[  371.962744][T11687]  do_syscall_64+0x166/0x520
[  371.962763][T11687]  ? trace_irq_disable+0x3b/0x140
[  371.962784][T11687]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.962800][T11687]  ? clear_bhb_loop+0x70/0xc0
[  371.962819][T11687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.962834][T11687] RIP: 0033:0x7f2bbb19f559
[  371.962849][T11687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  371.962862][T11687] RSP: 002b:00007f2bbc0d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  371.962879][T11687] RAX: ffffffffffffffda RBX: 00007f2bbb426090 RCX: 00007f2bbb19f559
[  371.962891][T11687] RDX: 00002000000000c0 RSI: 00000000404c4701 RDI: 0000000000000003
[  371.962907][T11687] RBP: 00007f2bbb236b20 R08: 0000000000000000 R09: 0000000000000000
[  371.962917][T11687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  371.962927][T11687] R13: 00007f2bbb426128 R14: 00007f2bbb426090 R15: 00007fffaa1ec798
[  371.962951][T11687]  </TASK>
[  372.216203][ T6163] wlan1: Creating new IBSS network, BSSID 3a:80:0e:f0:50:02
[  372.308745][T11687] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  372.695543][T11696] loop2: detected capacity change from 0 to 1024
[  372.763502][T11694] loop6: detected capacity change from 0 to 4096
[  372.790327][T11694] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  372.830260][T11694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  373.383984][ T9165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.913376][T11724] loop6: detected capacity change from 0 to 32768
[  374.972212][T11724] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  374.972228][T11724] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  375.028290][T11724] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  375.049666][    T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  375.049682][    T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  375.384915][    T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 335ms
[  375.385059][    T9] gfs2: fsid=syz:syz.0: jid=0: Done
[  375.385101][T11724] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  375.835927][ T5634] Bluetooth: hci0: command 0x0406 tx timeout
[  375.835971][ T4945] Bluetooth: hci2: command 0x0406 tx timeout
[  376.013883][T11746] loop8: detected capacity change from 0 to 512
[  377.271507][T11754] loop8: detected capacity change from 0 to 131072
[  377.311572][T11754] F2FS-fs (loop8): invalid crc value
[  377.407866][T11754] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  377.425342][T11754] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  378.171937][   T32] audit: type=1326 audit(2000000132.380:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11750 comm="syz.2.2040" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5299f559 code=0x7ffc0000
[  378.172009][   T32] audit: type=1326 audit(2000000132.380:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11750 comm="syz.2.2040" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5299f559 code=0x7ffc0000
[  378.178722][   T32] audit: type=1326 audit(2000000132.390:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11750 comm="syz.2.2040" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7ffa5299f559 code=0x7ffc0000
[  378.178762][   T32] audit: type=1326 audit(2000000132.390:144): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=11750 comm="syz.2.2040" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5299f559 code=0x7ffc0000
[  378.178794][   T32] audit: type=1326 audit(2000000132.390:145): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=11750 comm="syz.2.2040" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5299f559 code=0x7ffc0000
[  378.382564][T11763] loop6: detected capacity change from 0 to 8192
[  378.426364][T11763] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  378.665793][T11752] loop7: detected capacity change from 0 to 40427
[  378.714363][T11752] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  378.714382][T11752] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  378.759807][T11752] F2FS-fs (loop7): invalid crc value
[  378.876073][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  378.876116][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  379.193112][T11752] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  379.951818][T11782] loop2: detected capacity change from 0 to 1024
[  380.012238][T11782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  380.160587][ T6385] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  380.622374][ T9907] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.854443][T11801] sd 0:0:1:0: PR command failed: 1026
[  380.854506][T11801] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  380.854551][T11801] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  380.979680][ T5763] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  381.130713][ T5763] usb 9-1: Using ep0 maxpacket: 8
[  381.131254][ T5763] usb 9-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  381.132233][ T5763] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  381.132266][ T5763] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  381.132281][ T5763] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  381.132298][ T5763] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  381.132315][ T5763] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  381.132363][ T5763] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.345334][T11813] loop6: detected capacity change from 0 to 2048
[  381.374746][T11813] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  381.412107][T11813] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  381.496252][ T5763] usb 9-1: GET_CAPABILITIES returned 0
[  381.496286][ T5763] usbtmc 9-1:16.0: can't read capabilities
[  381.748112][ T5763] usb 9-1: USB disconnect, device number 4
[  381.894271][T11820] loop6: detected capacity change from 0 to 256
[  381.894979][T11820] exfat: Deprecated parameter 'utf8'
[  381.923004][T11820] exfat: Deprecated parameter 'namecase'
[  381.923350][T11820] exfat: Deprecated parameter 'namecase'
[  381.923369][T11820] exfat: Deprecated parameter 'utf8'
[  381.967272][T11820] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  381.967550][T11820] exFAT-fs (loop6): failed to test first cluster bit of root dir(5)
[  382.587580][T11831] loop8: detected capacity change from 0 to 1024
[  382.945470][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  382.960132][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  382.961658][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  382.965883][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  382.966453][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  383.695921][T11858] loop6: detected capacity change from 0 to 256
[  383.714350][T11858] exfat: Deprecated parameter 'namecase'
[  383.714391][T11858] exfat: Deprecated parameter 'namecase'
[  383.714438][T11858] exfat: Deprecated parameter 'namecase'
[  383.797733][T11858] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  384.060106][   T32] audit: type=1400 audit(2000000138.280:146): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=11861 comm="syz.7.2077" name="p" offset=58
[  384.396174][   T64] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.704208][   T64] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.918484][   T64] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.940031][T11888] loop7: detected capacity change from 0 to 2048
[  384.965671][T11888] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  385.003594][T11888] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  385.109223][ T5636] Bluetooth: hci5: command tx timeout
[  385.181210][T11892] loop8: detected capacity change from 0 to 256
[  385.182090][T11892] exfat: Deprecated parameter 'namecase'
[  385.182133][T11892] exfat: Deprecated parameter 'namecase'
[  385.182185][T11892] exfat: Deprecated parameter 'namecase'
[  385.244241][T11892] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  385.270329][   T64] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.313471][T11839] rxe_eth0 speed is unknown, defaulting to 1000
[  385.612194][T11897] loop2: detected capacity change from 0 to 128
[  385.637876][T11897] EXT4-fs (loop2): Test dummy encryption mode enabled
[  385.663721][T11897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  385.663806][T11897] System zones: 1-3, 19-19, 35-36
[  385.685631][T11897] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  385.714898][T11897] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  386.107965][T11897] fscrypt: AES-256-XTS using blk-crypto-fallback
[  386.123514][   T32] audit: type=1800 audit(2000000140.340:147): pid=11897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2091" name="file3" dev="loop2" ino=12 res=0 errno=-22
[  386.365449][ T9907] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  386.365589][   T64] bridge_slave_1: left allmulticast mode
[  386.365605][   T64] bridge_slave_1: left promiscuous mode
[  386.365775][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.443988][   T64] bridge_slave_0: left allmulticast mode
[  386.444011][   T64] bridge_slave_0: left promiscuous mode
[  386.444163][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.189924][ T5636] Bluetooth: hci5: command tx timeout
[  387.390796][   T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  387.413953][   T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  387.439638][   T64] bond0 (unregistering): Released all slaves
[  387.534031][T11912] loop8: detected capacity change from 0 to 32768
[  387.564068][T11912] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2096 (11912)
[  387.596912][T11912] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  387.596937][T11912] BTRFS info (device loop8): using crc32c checksum algorithm
[  387.856245][T11912] BTRFS info (device loop8): enabling ssd optimizations
[  387.856268][T11912] BTRFS info (device loop8): turning on flush-on-commit
[  387.856280][T11912] BTRFS info (device loop8): enabling free space tree
[  387.856292][T11912] BTRFS info (device loop8): enabling auto defrag
[  387.856319][T11912] BTRFS info (device loop8): use lzo compression, level 1
[  387.856333][T11912] BTRFS info (device loop8): max_inline set to 4096
[  388.377806][ T9645] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  389.256722][T11974] TCP: TCP_TX_DELAY enabled
[  389.272719][ T5636] Bluetooth: hci5: command tx timeout
[  389.351283][ T5290] 8021q: adding VLAN 0 to HW filter on device eth13
[  389.807703][T11983] kvm: apic: phys broadcast and lowest prio
[  389.905761][T11959] loop6: detected capacity change from 0 to 32768
[  390.000713][T11959] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  390.282715][   T64] hsr_slave_0: left promiscuous mode
[  390.299240][   T64] hsr_slave_1: left promiscuous mode
[  390.300011][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  390.300028][   T64] batman_adv: batadv0: Removing interface: batadv_slave_0
[  390.335088][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  390.335106][   T64] batman_adv: batadv0: Removing interface: batadv_slave_1
[  390.353630][   T64] batman_adv: batadv0: Removing interface: macvtap1
[  390.506614][   T64] veth1_macvtap: left promiscuous mode
[  390.506646][   T64] veth0_macvtap: left promiscuous mode
[  390.506712][   T64] veth1_vlan: left promiscuous mode
[  390.506757][   T64] veth0_vlan: left promiscuous mode
[  391.138019][ T9165] ocfs2: Unmounting device (7,6) on (node local)
[  391.201877][T12004] loop7: detected capacity change from 0 to 4096
[  391.258074][T12004] NILFS (loop7): invalid segment: Checksum error in segment payload
[  391.258094][T12004] NILFS (loop7): trying rollback from an earlier position
[  391.348515][T12004] NILFS (loop7): recovery complete
[  391.349347][ T5636] Bluetooth: hci5: command tx timeout
[  391.378492][T12006] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  392.141906][T11996] loop8: detected capacity change from 0 to 32768
[  392.215543][T12017] xt_hashlimit: size too large, truncated to 1048576
[  392.406723][   T64] team0 (unregistering): Port device team_slave_1 removed
[  392.499875][   T64] team0 (unregistering): Port device team_slave_0 removed
[  393.167872][ T5290] 8021q: adding VLAN 0 to HW filter on device eth14
[  393.498533][   T32] audit: type=1326 audit(2000000147.710:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz.7.2122" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbb19f559 code=0x7ffc0000
[  393.498574][   T32] audit: type=1326 audit(2000000147.710:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz.7.2122" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbb19f559 code=0x7ffc0000
[  393.583078][   T32] audit: type=1326 audit(2000000147.800:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz.7.2122" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f2bbb19f559 code=0x7ffc0000
[  393.583120][   T32] audit: type=1326 audit(2000000147.800:151): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=12018 comm="syz.7.2122" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbb19f559 code=0x7ffc0000
[  393.583151][   T32] audit: type=1326 audit(2000000147.800:152): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=12018 comm="syz.7.2122" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbb19f559 code=0x7ffc0000
[  393.722133][T12036] netlink: 'syz.6.2127': attribute type 12 has an invalid length.
[  393.722151][T12036] netlink: 'syz.6.2127': attribute type 29 has an invalid length.
[  393.722161][T12036] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2127'.
[  393.738016][T11839] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.738093][T11839] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.738244][T11839] bridge_slave_0: entered allmulticast mode
[  393.803085][T11839] bridge_slave_0: entered promiscuous mode
[  393.820659][T11839] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.820732][T11839] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.820864][T11839] bridge_slave_1: entered allmulticast mode
[  393.828433][T11839] bridge_slave_1: entered promiscuous mode
[  394.068006][T11839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.112255][T11839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.324197][T11839] team0: Port device team_slave_0 added
[  394.346767][T11839] team0: Port device team_slave_1 added
[  394.439198][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  394.513622][T11839] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.513637][T11839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.513658][T11839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.567643][T11839] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.567656][T11839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.567674][T11839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.605589][    T9] usb 3-1: Using ep0 maxpacket: 16
[  394.608168][    T9] usb 3-1: New USB device found: idVendor=0c70, idProduct=f00d, bcdDevice=0.00
[  394.646082][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  394.646127][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.717342][    T9] usb 3-1: config 0 descriptor??
[  394.724799][T12046] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  395.003772][T11839] hsr_slave_0: entered promiscuous mode
[  395.004706][T11839] hsr_slave_1: entered promiscuous mode
[  395.028363][T11839] debugfs: 'hsr0' already exists in 'hsr'
[  395.028381][T11839] Cannot create hsr debugfs directory
[  395.178324][    T9] hid (null): unknown global tag 0xc
[  395.255287][    T9] aquacomputer_d5next 0003:0C70:F00D.000B: unknown main item tag 0x0
[  395.255315][    T9] aquacomputer_d5next 0003:0C70:F00D.000B: unknown main item tag 0x0
[  395.255335][    T9] aquacomputer_d5next 0003:0C70:F00D.000B: unknown main item tag 0x0
[  395.255354][    T9] aquacomputer_d5next 0003:0C70:F00D.000B: unknown main item tag 0x0
[  395.255372][    T9] aquacomputer_d5next 0003:0C70:F00D.000B: unknown main item tag 0x0
[  395.255390][    T9] aquacomputer_d5next 0003:0C70:F00D.000B: unknown main item tag 0x0
[  395.255409][    T9] aquacomputer_d5next 0003:0C70:F00D.000B: unknown main item tag 0x0
[  395.255427][    T9] aquacomputer_d5next 0003:0C70:F00D.000B: unknown main item tag 0x0
[  395.255446][    T9] aquacomputer_d5next 0003:0C70:F00D.000B: unknown main item tag 0x0
[  395.255464][    T9] aquacomputer_d5next 0003:0C70:F00D.000B: unknown main item tag 0x0
[  395.323251][    T9] aquacomputer_d5next 0003:0C70:F00D.000B: unknown global tag 0xc
[  395.323271][    T9] aquacomputer_d5next 0003:0C70:F00D.000B: item 0 1 1 12 parsing failed
[  395.382829][    T9] aquacomputer_d5next 0003:0C70:F00D.000B: probe with driver aquacomputer_d5next failed with error -22
[  395.424700][    T9] usb 3-1: USB disconnect, device number 13
[  395.733730][T12041] loop8: detected capacity change from 0 to 32768
[  395.809531][T12041] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  395.925127][T12041] XFS (loop8): Ending clean mount
[  396.316494][ T5633] Bluetooth: hci1: command 0x0406 tx timeout
[  396.654009][    T9] XFS (loop8): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  396.761856][ T9645] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  397.212057][T11839] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.406561][ T5290] 8021q: adding VLAN 0 to HW filter on device eth15
[  397.474261][T12086] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  397.828642][T11839] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.035603][T12098] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  398.194116][T11839] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.525169][T11839] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.444971][T12107] loop6: detected capacity change from 0 to 32768
[  399.522308][T12107] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  399.650846][ T5763] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  399.766399][T11839] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  399.790559][T11839] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  399.797952][T11839] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  399.818330][ T5763] usb 9-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  399.834138][ T5763] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.863445][ T5763] usb 9-1: config 0 descriptor??
[  399.864149][ T5731] kernel write not supported for file /amidi2 (pid: 5731 comm: kworker/0:3)
[  399.866807][T11839] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  399.903687][T11839] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  399.906864][ T5763] cp210x 9-1:0.0: cp210x converter detected
[  399.945170][T11839] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  399.965283][T11839] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  400.112232][T11839] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  400.252782][ T5290] 8021q: adding VLAN 0 to HW filter on device eth16
[  400.376766][ T5763] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32
[  400.457851][T12107] (syz.6.2143,12107,0):ocfs2_rename:1290 ERROR: status = -2
[  400.457879][T12107] (syz.6.2143,12107,0):ocfs2_rename:1705 ERROR: status = -2
[  400.500016][ T5763] usb 9-1: cp210x converter now attached to ttyUSB0
[  400.726686][    T9] usb 9-1: USB disconnect, device number 5
[  400.818413][T11839] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.827349][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  400.827884][    T9] cp210x 9-1:0.0: device disconnected
[  400.858519][ T9165] ocfs2: Unmounting device (7,6) on (node local)
[  400.974274][T11839] 8021q: adding VLAN 0 to HW filter on device team0
[  401.005558][T12150] loop7: detected capacity change from 0 to 4096
[  401.025365][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.025442][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  401.098178][  T171] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.098257][  T171] bridge0: port 2(bridge_slave_1) entered forwarding state
[  401.228756][T12150] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  401.318114][T12150] ntfs3(loop7): Failed to load $Extend (-22).
[  401.318134][T12150] ntfs3(loop7): Failed to initialize $Extend.
[  401.694650][T12160] loop8: detected capacity change from 0 to 512
[  401.728082][T12160] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  401.947574][T12160] EXT4-fs (loop8): 1 orphan inode deleted
[  401.948692][T12160] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  401.955726][ T5903] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  401.955800][ T5903] EXT4-fs error (device loop8): ext4_release_dquot:7156: comm kworker/u8:13: Failed to release dquot type 1
[  401.955817][ T5903] loop8: lost filesystem error report for type 5 error -117
[  402.000494][T12160] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  402.115065][T12160] EXT4-fs (loop8): shut down requested (2)
[  402.284132][ T9645] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.125085][ T5774] kernel read not supported for file /dummy_udc (pid: 5774 comm: kworker/0:7)
[  403.624045][T12185] loop2: detected capacity change from 0 to 32768
[  403.645890][T12185] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2165 (12185)
[  403.675626][T12185] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  403.675651][T12185] BTRFS info (device loop2): using sha256 checksum algorithm
[  403.701973][T11839] 8021q: adding VLAN 0 to HW filter on device batadv0
[  403.940494][T12185] BTRFS info (device loop2): enabling ssd optimizations
[  403.940515][T12185] BTRFS info (device loop2): turning on async discard
[  403.940527][T12185] BTRFS info (device loop2): enabling free space tree
[  403.983430][T11839] veth0_vlan: entered promiscuous mode
[  404.034289][T11839] veth1_vlan: entered promiscuous mode
[  404.183142][T11839] veth0_macvtap: entered promiscuous mode
[  404.211344][T11839] veth1_macvtap: entered promiscuous mode
[  404.252417][ T9907] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  404.280061][T12223] comedi comedi1: board detection failed
[  404.343457][T11839] batman_adv: batadv0: Interface activated: batadv_slave_0
[  404.386580][T11839] batman_adv: batadv0: Interface activated: batadv_slave_1
[  404.421333][T12192] loop7: detected capacity change from 0 to 40427
[  404.450936][T12192] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504)
[  404.450958][T12192] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  404.499998][ T6385] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.500719][ T6385] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.500946][ T6385] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.572020][ T5903] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.577370][T12192] F2FS-fs (loop7): build fault injection rate: 17008
[  404.577389][T12192] F2FS-fs (loop7): build fault injection type: 0x1f8
[  404.617040][T12192] F2FS-fs (loop7): invalid crc value
[  405.176288][T12192] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  405.297102][ T6385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.297120][ T6385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.415133][T12192] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  405.415157][T12192] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  405.588207][ T6385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.588226][ T6385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  406.433966][T12254] loop6: detected capacity change from 0 to 256
[  406.487603][T12254] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  406.487896][T12254] exFAT-fs (loop6): failed to test first cluster bit of root dir(5)
[  407.219622][T12263] sctp: [Deprecated]: syz.8.2184 (pid 12263) Use of int in max_burst socket option deprecated.
[  407.219622][T12263] Use struct sctp_assoc_value instead
[  407.710482][T12272] loop8: detected capacity change from 0 to 4096
[  407.715706][T12277] ipvlan2: entered promiscuous mode
[  407.846204][T12278] loop0: detected capacity change from 0 to 4096
[  407.890203][T12280] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  408.021986][T12283] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  408.689312][   T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  408.769055][    T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  408.840417][   T10] usb 7-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00
[  408.841549][   T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  408.841569][   T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  408.845454][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.845471][   T10] usb 7-1: Product: syz
[  408.845481][   T10] usb 7-1: Manufacturer: syz
[  408.845491][   T10] usb 7-1: SerialNumber: syz
[  408.919599][    T9] usb 9-1: Using ep0 maxpacket: 8
[  408.920985][    T9] usb 9-1: New USB device found: idVendor=07c0, idProduct=1500, bcdDevice=b8.c5
[  408.923093][    T9] usb 9-1: config 0 has an invalid interface number: 186 but max is 0
[  408.923112][    T9] usb 9-1: config 0 has no interface number 0
[  408.923143][    T9] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  408.923161][    T9] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  408.923179][    T9] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  408.923197][    T9] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  409.023031][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.023052][    T9] usb 9-1: Product: syz
[  409.023063][    T9] usb 9-1: Manufacturer: syz
[  409.023074][    T9] usb 9-1: SerialNumber: syz
[  409.039935][    T9] usb 9-1: config 0 descriptor??
[  409.321469][    T9] iowarrior 9-1:0.186: IOWarrior product=0x1500, serial=42424242 interface=186 now attached to iowarrior0
[  409.381812][T12306] syz_tun: entered promiscuous mode
[  409.383815][T12306] macsec1: entered allmulticast mode
[  409.383830][T12306] syz_tun: entered allmulticast mode
[  409.439406][T12306] syz_tun: left allmulticast mode
[  409.439429][T12306] syz_tun: left promiscuous mode
[  409.533852][    T9] usb 9-1: USB disconnect, device number 6
[  410.499140][T12315] loop2: detected capacity change from 0 to 131072
[  410.503143][   T10] usb 7-1: failed to execute ARPC: -110
[  410.503161][   T10] usb 7-1: failed to set connected state for cport 0: -110
[  410.503175][   T10] greybus greybus1: 0/0:0: failed to set connected state: -110
[  410.549551][   T10] usb 7-1: failed to send ARPC request 3: -71
[  410.549758][   T10] usb 7-1: failed to execute ARPC: -71
[  410.549770][   T10] usb 7-1: failed to clear cport 0: -71
[  410.549897][   T10] greybus greybus1: 0/0:0: failed to clear host cport: -71
[  410.576264][T12315] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  410.576286][T12315] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  410.601974][T12315] F2FS-fs (loop2): invalid crc value
[  410.738323][T12315] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  410.761855][T12315] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  410.761878][T12315] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  410.839560][T12310] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.862695][   T10] es2_ap_driver 7-1:1.0: probe with driver es2_ap_driver failed with error -110
[  410.903056][   T10] usb 7-1: USB disconnect, device number 9
[  411.187947][ T6171] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  411.604756][T12335] No memory to map
[  412.100371][T12344] ipvlan3: entered allmulticast mode
[  412.100393][T12344] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode
[  412.147390][T12344] batman_adv: batadv0: Adding interface: ipvlan3
[  412.147406][T12344] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  412.147432][T12344] batman_adv: batadv0: Interface activated: ipvlan3
[  412.339332][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  412.502236][    T9] usb 1-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  412.503104][    T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  412.503120][    T9] usb 1-1: config 0 has no interface number 0
[  412.518390][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.518408][    T9] usb 1-1: Product: syz
[  412.518418][    T9] usb 1-1: Manufacturer: syz
[  412.518427][    T9] usb 1-1: SerialNumber: syz
[  412.565376][    T9] usb 1-1: config 0 descriptor??
[  412.815319][    T9] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  412.833868][    T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  412.834107][    T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  412.834157][    T9] usb 1-1: media controller created
[  412.916990][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  413.194457][T12371] loop6: detected capacity change from 0 to 256
[  413.224504][T12371] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  413.283651][T12371] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  413.486380][T12371] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  413.504630][T12371] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  414.168088][    T9] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  414.345263][    T9] usb 1-1: USB disconnect, device number 7
[  414.467931][T12367] loop7: detected capacity change from 0 to 32768
[  414.492241][T12367] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2224 (12367)
[  414.547485][T12367] BTRFS info (device loop7): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  414.547532][T12367] BTRFS info (device loop7): using xxhash64 checksum algorithm
[  414.646468][T12367] BTRFS info (device loop7): enabling ssd optimizations
[  414.646489][T12367] BTRFS info (device loop7): turning on async discard
[  414.646501][T12367] BTRFS info (device loop7): enabling free space tree
[  415.177862][T12411] loop0: detected capacity change from 0 to 256
[  415.327570][ T9209] BTRFS info (device loop7): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  415.351488][ T6377] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  415.884070][   T32] audit: type=1326 audit(2000000170.100:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12426 comm="syz.2.2238" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa5299f559 code=0x0
[  416.868817][T12452] ipvlan2: entered allmulticast mode
[  416.873249][T12452] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[  416.903797][T12452] batman_adv: batadv0: Adding interface: ipvlan2
[  416.903811][T12452] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  416.903835][T12452] batman_adv: batadv0: Interface activated: ipvlan2
[  417.429588][T12470] hugetlbfs: syz.6.2254 (12470): Using mlock ulimits for SHM_HUGETLB is obsolete
[  417.469834][   T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  417.630296][   T10] usb 8-1: Using ep0 maxpacket: 8
[  417.631082][   T10] usb 8-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  417.633109][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  417.633140][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.638013][   T10] usb 8-1: config 0 descriptor??
[  417.925793][   T10] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  417.949037][T10136] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  418.099875][T10136] usb 7-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00
[  418.100894][T10136] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  418.100931][T10136] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.171254][T10136] ttusb_dec_send_command: command bulk message failed: error -22
[  418.171423][T10136] ttusb-dec 7-1:1.0: probe with driver ttusb-dec failed with error -22
[  418.223776][ T5763] usb 8-1: USB disconnect, device number 6
[  418.273461][   T32] audit: type=1400 audit(2000000172.490:154): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=12492 comm="syz.0.2262" name="p" offset=33
[  418.375957][T12495] Bluetooth: MGMT ver 1.23
[  418.400540][   T10] usb 7-1: USB disconnect, device number 10
[  418.770902][ T5763] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  418.880621][T12513] loop7: detected capacity change from 0 to 256
[  418.919882][ T5763] usb 3-1: New USB device found: idVendor=5543, idProduct=0064, bcdDevice=0.00
[  418.926376][ T5763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  418.926421][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.970693][ T5763] usb 3-1: config 0 descriptor??
[  418.972444][T12500] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  419.033177][    T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  419.180145][    T9] usb 9-1: New USB device found: idVendor=104f, idProduct=0004, bcdDevice=1.00
[  419.188067][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  419.188108][    T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  419.236879][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  419.236900][    T9] usb 9-1: Product: syz
[  419.236910][    T9] usb 9-1: Manufacturer: syz
[  419.313850][    T9] iuu_phoenix 9-1:1.0: iuu_phoenix converter detected
[  419.384127][    T9] usb 9-1: iuu_phoenix converter now attached to ttyUSB0
[  419.530006][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2272'.
[  419.592303][ T5763] hid_parser_main: 151 callbacks suppressed
[  419.592324][ T5763] uclogic 0003:5543:0064.000C: unknown main item tag 0x0
[  419.592346][ T5763] uclogic 0003:5543:0064.000C: unknown main item tag 0x0
[  419.592364][ T5763] uclogic 0003:5543:0064.000C: unknown main item tag 0x0
[  419.592383][ T5763] uclogic 0003:5543:0064.000C: unknown main item tag 0x0
[  419.592401][ T5763] uclogic 0003:5543:0064.000C: unknown main item tag 0x0
[  419.592419][ T5763] uclogic 0003:5543:0064.000C: unknown main item tag 0x0
[  419.592437][ T5763] uclogic 0003:5543:0064.000C: unknown main item tag 0x0
[  419.592455][ T5763] uclogic 0003:5543:0064.000C: unknown main item tag 0x0
[  419.592473][ T5763] uclogic 0003:5543:0064.000C: unknown main item tag 0x0
[  419.592491][ T5763] uclogic 0003:5543:0064.000C: unknown main item tag 0x0
[  419.689490][ T5763] uclogic 0003:5543:0064.000C: unexpected long global item
[  419.690045][ T5763] uclogic 0003:5543:0064.000C: parse failed
[  419.690134][ T5763] uclogic 0003:5543:0064.000C: probe with driver uclogic failed with error -22
[  419.752653][ T5763] usb 3-1: USB disconnect, device number 14
[  420.154854][T12533] ipvlan2: entered allmulticast mode
[  420.154875][T12533] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode
[  420.178275][T12533] batman_adv: batadv0: Adding interface: ipvlan2
[  420.178288][T12533] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  420.178311][T12533] batman_adv: batadv0: Interface activated: ipvlan2
[  420.541709][T12541] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.542201][T12541] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.624983][T12546] loop2: detected capacity change from 0 to 512
[  420.653019][T12546] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  420.670427][T12546] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  420.884220][T12542] loop6: detected capacity change from 0 to 8192
[  420.957922][T12508] iuu_phoenix ttyUSB0: iuu_open - failed submitting read urb, error -90
[  420.973221][    T9] usb 9-1: USB disconnect, device number 7
[  421.043885][    T9] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  421.044347][    T9] iuu_phoenix 9-1:1.0: device disconnected
[  421.184998][T12546] EXT4-fs (loop2): failed to open journal device unknown-block(0,194) -ENXIO
[  421.329850][ T5763] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  421.480071][ T5763] usb 1-1: Using ep0 maxpacket: 32
[  421.492820][ T5763] usb 1-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  421.498679][ T5763] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  421.498698][ T5763] usb 1-1: config 0 has no interface number 0
[  421.498727][ T5763] usb 1-1: config 0 interface 12 has no altsetting 0
[  421.547202][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.547222][ T5763] usb 1-1: Product: syz
[  421.547232][ T5763] usb 1-1: Manufacturer: syz
[  421.547242][ T5763] usb 1-1: SerialNumber: syz
[  421.574385][ T5763] usb 1-1: config 0 descriptor??
[  421.933372][   T32] audit: type=1326 audit(2000000176.150:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.8.2287" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb2479f559 code=0x0
[  422.439793][ T5763] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  422.439913][ T5763] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  422.439927][ T5763] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  422.439987][ T5763] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  422.503742][ T5763] usb 1-1: USB disconnect, device number 8
[  422.766169][T12574] loop7: detected capacity change from 0 to 32768
[  422.783768][T12574] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2289 (12574)
[  422.851904][T12574] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  422.851929][T12574] BTRFS info (device loop7): using sha256 checksum algorithm
[  422.946188][T12574] BTRFS info (device loop7): enabling ssd optimizations
[  422.946211][T12574] BTRFS info (device loop7): turning on async discard
[  422.946222][T12574] BTRFS info (device loop7): enabling free space tree
[  423.220768][ T9209] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  423.979427][ T5763] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  424.130844][ T5763] usb 7-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  424.131709][ T5763] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  424.131726][ T5763] usb 7-1: config 0 has no interface number 0
[  424.156852][ T5763] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.156873][ T5763] usb 7-1: Product: syz
[  424.156884][ T5763] usb 7-1: Manufacturer: syz
[  424.156894][ T5763] usb 7-1: SerialNumber: syz
[  424.197029][ T5763] usb 7-1: config 0 descriptor??
[  424.420174][T12592] loop2: detected capacity change from 0 to 40427
[  424.437801][ T5763] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  424.450019][ T5763] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  424.450250][ T5763] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  424.450284][ T5763] usb 7-1: media controller created
[  424.508158][T12592] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  424.508177][T12592] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  424.544487][T12592] F2FS-fs (loop2): invalid crc value
[  424.586272][ T5763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  424.929412][T12592] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  425.007769][T12592] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  425.007792][T12592] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  425.131658][ T5636] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  425.131700][ T5636] CPU: 0 UID: 0 PID: 5636 Comm: kworker/u9:4 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  425.131722][ T5636] Tainted: [L]=SOFTLOCKUP
[  425.131727][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  425.131737][ T5636] Workqueue: hci1 hci_rx_work
[  425.131864][ T5636] Call Trace:
[  425.131870][ T5636]  <TASK>
[  425.131877][ T5636]  dump_stack_lvl+0xe8/0x150
[  425.131907][ T5636]  sysfs_create_dir_ns+0x271/0x2a0
[  425.131934][ T5636]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  425.131959][ T5636]  ? do_raw_spin_unlock+0xf5/0x200
[  425.131980][ T5636]  kobject_add_internal+0x622/0xcd0
[  425.132002][ T5636]  kobject_add+0x163/0x240
[  425.132031][ T5636]  ? __pfx_kobject_add+0x10/0x10
[  425.132059][ T5636]  ? get_device_parent+0x366/0x3a0
[  425.132085][ T5636]  device_add+0x3fa/0xb80
[  425.132107][ T5636]  hci_conn_add_sysfs+0xd5/0x210
[  425.132168][ T5636]  le_conn_complete_evt+0x1094/0x1780
[  425.132276][ T5636]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  425.132293][ T5636]  ? __mutex_unlock_slowpath+0x731/0x900
[  425.132317][ T5636]  ? skb_pull_data+0xf0/0x200
[  425.132402][ T5636]  hci_le_enh_conn_complete_evt+0x189/0x490
[  425.132443][ T5636]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  425.132471][ T5636]  hci_event_packet+0x67a/0xf10
[  425.132510][ T5636]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  425.132531][ T5636]  ? __pfx_hci_event_packet+0x10/0x10
[  425.132554][ T5636]  ? kcov_remote_start+0x523/0x7e0
[  425.132583][ T5636]  ? hci_send_to_monitor+0xdf/0x600
[  425.132602][ T5636]  hci_rx_work+0x2b4/0x1110
[  425.132627][ T5636]  ? process_scheduled_works+0x97a/0x1630
[  425.132649][ T5636]  process_scheduled_works+0xc3d/0x1630
[  425.132694][ T5636]  ? __pfx_process_scheduled_works+0x10/0x10
[  425.132720][ T5636]  ? assign_work+0x3cf/0x5d0
[  425.132745][ T5636]  worker_thread+0xa47/0xfb0
[  425.132777][ T5636]  ? __kthread_parkme+0x71/0x1f0
[  425.132798][ T5636]  kthread+0x38b/0x480
[  425.132814][ T5636]  ? __pfx_worker_thread+0x10/0x10
[  425.132834][ T5636]  ? __pfx_kthread+0x10/0x10
[  425.132851][ T5636]  ret_from_fork+0x514/0xb70
[  425.132879][ T5636]  ? __pfx_ret_from_fork+0x10/0x10
[  425.132895][ T5636]  ? __switch_to+0xc78/0x1410
[  425.132919][ T5636]  ? __pfx_kthread+0x10/0x10
[  425.132936][ T5636]  ret_from_fork_asm+0x1a/0x30
[  425.132963][ T5636]  </TASK>
[  425.133090][ T5636] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  425.133118][ T5636] Bluetooth: hci1: failed to register connection device
[  425.540220][ T9907] syz-executor: attempt to access beyond end of device
[  425.540220][ T9907] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  425.577531][ T9907] CPU: 0 UID: 0 PID: 9907 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  425.577557][ T9907] Tainted: [L]=SOFTLOCKUP
[  425.577562][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  425.577570][ T9907] Call Trace:
[  425.577575][ T9907]  <TASK>
[  425.577582][ T9907]  dump_stack_lvl+0xe8/0x150
[  425.577608][ T9907]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  425.577633][ T9907]  f2fs_write_end_bio+0x118e/0x15d0
[  425.577659][ T9907]  __submit_merged_bio+0x258/0x6a0
[  425.577676][ T9907]  ? rcu_is_watching+0x16/0xb0
[  425.577701][ T9907]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  425.577720][ T9907]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  425.577753][ T9907]  f2fs_write_data_pages+0x2a13/0x36e0
[  425.577797][ T9907]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  425.577825][ T9907]  ? is_bpf_text_address+0x292/0x2b0
[  425.577839][ T9907]  ? is_bpf_text_address+0x26/0x2b0
[  425.577869][ T9907]  ? stack_trace_save+0xa9/0x100
[  425.577885][ T9907]  ? __pfx_stack_trace_save+0x10/0x10
[  425.577913][ T9907]  ? lockdep_unlock+0x5c/0xd0
[  425.577926][ T9907]  ? __lock_acquire+0x1511/0x2de0
[  425.577960][ T9907]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  425.577980][ T9907]  do_writepages+0x338/0x560
[  425.578002][ T9907]  ? do_raw_spin_unlock+0xf5/0x200
[  425.578018][ T9907]  filemap_fdatawrite+0x1e9/0x2f0
[  425.578035][ T9907]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  425.578080][ T9907]  ? do_raw_spin_unlock+0xf5/0x200
[  425.578095][ T9907]  f2fs_sync_dirty_inodes+0x471/0x970
[  425.578119][ T9907]  f2fs_write_checkpoint+0x860/0x24d0
[  425.578164][ T9907]  kill_f2fs_super+0x2dc/0x700
[  425.578188][ T9907]  ? rcu_do_enqueue+0x616/0x870
[  425.578204][ T9907]  ? lockdep_hardirqs_on+0x7b/0x110
[  425.578221][ T9907]  ? __pfx_kill_f2fs_super+0x10/0x10
[  425.578253][ T9907]  ? __pfx_call_rcu+0x10/0x10
[  425.578276][ T9907]  ? shrinker_free+0x2a7/0x3b0
[  425.578293][ T9907]  deactivate_locked_super+0xbe/0x110
[  425.578311][ T9907]  cleanup_mnt+0x204/0x2a0
[  425.578334][ T9907]  task_work_run+0x1d9/0x260
[  425.578353][ T9907]  ? __pfx_task_work_run+0x10/0x10
[  425.578376][ T9907]  exit_to_user_mode_loop+0x204/0x770
[  425.578394][ T9907]  ? rcu_is_watching+0x16/0xb0
[  425.578416][ T9907]  do_syscall_64+0x328/0x520
[  425.578432][ T9907]  ? trace_irq_disable+0x3b/0x140
[  425.578454][ T9907]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.578488][ T9907]  ? clear_bhb_loop+0x70/0xc0
[  425.578505][ T9907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.578519][ T9907] RIP: 0033:0x7ffa529a0797
[  425.578532][ T9907] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  425.578544][ T9907] RSP: 002b:00007ffde551f9a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  425.578559][ T9907] RAX: 0000000000000000 RBX: 00007ffa52a35f63 RCX: 00007ffa529a0797
[  425.578568][ T9907] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde551fa60
[  425.578577][ T9907] RBP: 00007ffde551fa60 R08: 00007ffde5520a60 R09: 00000000ffffffff
[  425.578587][ T9907] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde5520af0
[  425.578595][ T9907] R13: 00007ffa52a35f63 R14: 0000000000067dd5 R15: 00007ffde5520b30
[  425.578618][ T9907]  </TASK>
[  425.760253][ T5763] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  425.863537][ T9907] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  426.053696][T12639] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  426.053929][T12639] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  426.088703][ T5763] usb 7-1: USB disconnect, device number 11
[  426.236426][T12639] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  426.236503][T12639] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  426.290534][T12639] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  426.290578][T12639] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  426.357968][T12639] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  426.366690][T12639] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  426.366757][T12639] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  426.414514][T12639] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  426.431545][T12639] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  426.431624][T12639] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  426.458542][T12639] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  426.724865][T12648] loop6: detected capacity change from 0 to 1024
[  426.735644][ T5763] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  426.746096][T12648] EXT4-fs: Ignoring removed mblk_io_submit option
[  426.787510][T12648] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  426.895025][ T5763] usb 1-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  426.896737][ T5763] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  426.896753][ T5763] usb 1-1: config 0 has no interface number 0
[  426.925693][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.925713][ T5763] usb 1-1: Product: syz
[  426.925722][ T5763] usb 1-1: Manufacturer: syz
[  426.925732][ T5763] usb 1-1: SerialNumber: syz
[  426.928231][ T5763] usb 1-1: config 0 descriptor??
[  427.128663][ T9165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.199727][ T5763] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  427.222354][ T5763] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  427.222556][ T5763] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  427.222586][ T5763] usb 1-1: media controller created
[  427.319797][ T5763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  427.553357][T12664] loop8: detected capacity change from 0 to 4096
[  427.900364][T12668] loop6: detected capacity change from 0 to 32768
[  427.928171][T12668] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  427.928202][T12668] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  427.974178][T12668] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  427.987050][   T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  427.987064][   T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  428.069965][ T5636] Bluetooth: hci0: command 0x0406 tx timeout
[  428.309185][ T5636] Bluetooth: hci2: command 0x0406 tx timeout
[  428.325365][T12672] loop7: detected capacity change from 0 to 512
[  428.352861][T12672] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  428.352877][T12672] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  428.390177][ T5636] Bluetooth: hci4: command 0x0c1a tx timeout
[  428.390219][ T5636] Bluetooth: hci1: command 0x0406 tx timeout
[  428.427913][T12672] EXT4-fs error (device loop7): ext4_free_branches:1040: inode #11: comm syz.7.2321: invalid indirect mapped block 9 (level 0)
[  428.427940][T12672] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  428.429494][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  428.429510][    C0] EXT4-fs (loop7): initial error at time 2000000182: ext4_free_branches:1040: inode 11
[  428.429532][    C0] EXT4-fs (loop7): last error at time 2000000182: ext4_free_branches:1040: inode 11
[  428.473961][ T5633] Bluetooth: hci5: command 0x0c1a tx timeout
[  428.493196][ T5763] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  428.557440][   T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 570ms
[  428.557565][   T10] gfs2: fsid=syz:syz.0: jid=0: Done
[  428.557596][T12668] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  428.749081][T12672] EXT4-fs (loop7): 1 truncate cleaned up
[  428.750248][T12672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  428.902178][ T5763] usb 1-1: USB disconnect, device number 9
[  429.097270][ T9209] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.285605][T12658] loop2: detected capacity change from 0 to 32768
[  429.387589][T12658] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  429.865471][ T9907] ocfs2: Unmounting device (7,2) on (node local)
[  430.145809][T12695] loop7: detected capacity change from 0 to 256
[  430.155285][ T5633] Bluetooth: hci0: command 0x0406 tx timeout
[  430.207954][T12695] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  430.389562][ T5633] Bluetooth: hci2: command 0x0406 tx timeout
[  430.470398][ T5636] Bluetooth: hci4: command 0x0c1a tx timeout
[  430.470798][ T5633] Bluetooth: hci1: command 0x0406 tx timeout
[  430.550204][ T5633] Bluetooth: hci5: command 0x0c1a tx timeout
[  430.695368][T12694] si4713 0-0063: IRQ not configured. Using timeouts.
[  430.695564][T12694] si4713 0-0063: Error while sending command 0x01
[  430.695578][T12694] si4713 0-0063: Failed to probe device information.
[  430.793199][T12702] device-mapper: table: 248:4: crypt: Device lookup failed (-ENOENT)
[  430.793221][T12702] device-mapper: ioctl: error adding target to table
[  430.864039][T12694] si4713 0-0063: probe with driver si4713 failed with error -5
[  430.864506][T12694] i2c i2c-0: new_device: Instantiated device si4713 at 0x63
[  431.361661][T12728] loop2: detected capacity change from 0 to 16
[  431.376217][T12728] erofs (device loop2): mounted with root inode @ nid 36.
[  431.471143][T12728] erofs (device loop2): negative i_size @ nid 86
[  431.804443][T12739] loop2: detected capacity change from 0 to 1024
[  432.550786][ T5633] Bluetooth: hci1: command 0x0406 tx timeout
[  432.550836][ T5633] Bluetooth: hci4: command 0x0c1a tx timeout
[  432.631235][ T5633] Bluetooth: hci5: command 0x0c1a tx timeout
[  432.876832][T12744] loop6: detected capacity change from 0 to 32768
[  432.898343][T12744] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2351 (12744)
[  432.926187][T12744] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  432.926212][T12744] BTRFS info (device loop6): using blake2b checksum algorithm
[  433.077161][T12744] BTRFS info (device loop6): enabling ssd optimizations
[  433.077182][T12744] BTRFS info (device loop6): turning on async discard
[  433.077193][T12744] BTRFS info (device loop6): enabling free space tree
[  433.077230][T12744] BTRFS info (device loop6): use zlib compression, level 3
[  433.183056][T12742] loop0: detected capacity change from 0 to 40427
[  433.187240][   T32] audit: type=1800 audit(2000000187.400:156): pid=12744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2351" name="file1" dev="loop6" ino=260 res=0 errno=-22
[  433.231347][T12742] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  433.231367][T12742] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  433.283240][T12742] F2FS-fs (loop0): invalid crc value
[  433.682066][T12742] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  433.787922][T12742] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  433.787945][T12742] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  433.835395][ T9165] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  434.186015][T11839] syz-executor: attempt to access beyond end of device
[  434.186015][T11839] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  434.245028][T11839] CPU: 0 UID: 0 PID: 11839 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  434.245055][T11839] Tainted: [L]=SOFTLOCKUP
[  434.245061][T11839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  434.245070][T11839] Call Trace:
[  434.245076][T11839]  <TASK>
[  434.245083][T11839]  dump_stack_lvl+0xe8/0x150
[  434.245113][T11839]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  434.245140][T11839]  f2fs_write_end_bio+0x118e/0x15d0
[  434.245169][T11839]  __submit_merged_bio+0x258/0x6a0
[  434.245189][T11839]  ? rcu_is_watching+0x16/0xb0
[  434.245218][T11839]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  434.245240][T11839]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  434.245279][T11839]  f2fs_write_data_pages+0x2a13/0x36e0
[  434.245329][T11839]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  434.245361][T11839]  ? is_bpf_text_address+0x292/0x2b0
[  434.245387][T11839]  ? is_bpf_text_address+0x26/0x2b0
[  434.245420][T11839]  ? stack_trace_save+0xa9/0x100
[  434.245437][T11839]  ? __pfx_stack_trace_save+0x10/0x10
[  434.245467][T11839]  ? lockdep_unlock+0x5c/0xd0
[  434.245481][T11839]  ? __lock_acquire+0x1511/0x2de0
[  434.245536][T11839]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  434.245559][T11839]  do_writepages+0x338/0x560
[  434.245583][T11839]  ? do_raw_spin_unlock+0xf5/0x200
[  434.245602][T11839]  filemap_fdatawrite+0x1e9/0x2f0
[  434.245621][T11839]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  434.245672][T11839]  ? do_raw_spin_unlock+0xf5/0x200
[  434.245690][T11839]  f2fs_sync_dirty_inodes+0x471/0x970
[  434.245729][T11839]  f2fs_write_checkpoint+0x860/0x24d0
[  434.245770][T11839]  kill_f2fs_super+0x2dc/0x700
[  434.245795][T11839]  ? rcu_do_enqueue+0x616/0x870
[  434.245812][T11839]  ? lockdep_hardirqs_on+0x7b/0x110
[  434.245830][T11839]  ? __pfx_kill_f2fs_super+0x10/0x10
[  434.245863][T11839]  ? __pfx_call_rcu+0x10/0x10
[  434.245889][T11839]  ? shrinker_free+0x2a7/0x3b0
[  434.245911][T11839]  deactivate_locked_super+0xbe/0x110
[  434.245930][T11839]  cleanup_mnt+0x204/0x2a0
[  434.245954][T11839]  task_work_run+0x1d9/0x260
[  434.245974][T11839]  ? __pfx_task_work_run+0x10/0x10
[  434.245998][T11839]  exit_to_user_mode_loop+0x204/0x770
[  434.246018][T11839]  ? rcu_is_watching+0x16/0xb0
[  434.246042][T11839]  do_syscall_64+0x328/0x520
[  434.246059][T11839]  ? trace_irq_disable+0x3b/0x140
[  434.246079][T11839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.246093][T11839]  ? clear_bhb_loop+0x70/0xc0
[  434.246110][T11839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.246124][T11839] RIP: 0033:0x7fe61bda0797
[  434.246138][T11839] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  434.246150][T11839] RSP: 002b:00007fff409800b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  434.246166][T11839] RAX: 0000000000000000 RBX: 00007fe61be35f63 RCX: 00007fe61bda0797
[  434.246175][T11839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff40980170
[  434.246184][T11839] RBP: 00007fff40980170 R08: 00007fff40981170 R09: 00000000ffffffff
[  434.246194][T11839] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff40981200
[  434.246203][T11839] R13: 00007fe61be35f63 R14: 0000000000069f55 R15: 00007fff40981240
[  434.246226][T11839]  </TASK>
[  434.468524][T11839] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  434.714707][T12791] loop2: detected capacity change from 0 to 8192
[  435.886881][T12790] loop7: detected capacity change from 0 to 32768
[  435.936533][T12790] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  436.002831][T12790] XFS (loop7): Ending clean mount
[  436.143252][T12790] XFS (loop7): Quotacheck needed: Please wait.
[  436.413259][T12790] XFS (loop7): Quotacheck: Done.
[  436.681518][ T9209] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  436.908542][T12832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2377'.
[  437.738405][T12856] vlan2: entered promiscuous mode
[  437.738423][T12856] macvlan0: entered promiscuous mode
[  437.784191][T12860] program syz.6.2391 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  438.085869][T12867] Context (ID=0x0) not attached to queue pair (handle=0x4e3:0x0)
[  438.537167][T12881] loop0: detected capacity change from 0 to 1024
[  438.537870][T12881] EXT4-fs: Ignoring removed orlov option
[  438.537888][T12881] EXT4-fs: Ignoring removed i_version option
[  438.601953][T12881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  438.700006][    T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  438.755323][T11839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.872330][    T9] usb 7-1: New USB device found: idVendor=104f, idProduct=0004, bcdDevice=1.00
[  438.884628][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  438.884648][    T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  438.887246][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  438.887264][    T9] usb 7-1: Product: syz
[  438.887274][    T9] usb 7-1: Manufacturer: syz
[  438.947435][    T9] iuu_phoenix 7-1:1.0: iuu_phoenix converter detected
[  438.984012][    T9] usb 7-1: iuu_phoenix converter now attached to ttyUSB0
[  439.091589][T12891] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2403'.
[  439.347723][T12894] loop7: detected capacity change from 0 to 2048
[  439.396651][T12894] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  439.397025][T12894] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  439.397038][T12894] UDF-fs: Scanning with blocksize 512 failed
[  439.464583][T12894] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  439.534135][T12900] loop0: detected capacity change from 0 to 512
[  439.576882][T12900] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2407: iget: bad i_size value: 38620345925642
[  439.576911][T12900] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  439.589931][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  439.589947][    C0] EXT4-fs (loop0): initial error at time 2000000193: ext4_orphan_get:1404: inode 15
[  439.589968][    C0] EXT4-fs (loop0): last error at time 2000000193: ext4_orphan_get:1404: inode 15
[  439.602914][T12900] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2407: couldn't read orphan inode 15 (err -117)
[  439.602962][T12900] loop0: lost filesystem error report for type 5 error -117
[  439.656657][T12900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.908580][T11839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.233365][T12877] iuu_phoenix ttyUSB0: iuu_open - failed submitting read urb, error -90
[  440.235140][    T9] usb 7-1: USB disconnect, device number 12
[  440.274456][    T9] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  440.294539][    T9] iuu_phoenix 7-1:1.0: device disconnected
[  440.315224][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  440.804245][   T32] audit: type=1326 audit(2000000195.020:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.0.2417" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61bd9f559 code=0x7ffc0000
[  440.807890][   T32] audit: type=1326 audit(2000000195.020:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.0.2417" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61bd9f559 code=0x7ffc0000
[  440.876604][   T32] audit: type=1326 audit(2000000195.090:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.0.2417" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61bd9f559 code=0x7ffc0000
[  440.877517][   T32] audit: type=1326 audit(2000000195.090:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.0.2417" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61bd9f559 code=0x7ffc0000
[  440.878156][T12899] loop2: detected capacity change from 0 to 40427
[  440.910895][   T32] audit: type=1326 audit(2000000195.130:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.0.2417" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe61bd9f559 code=0x7ffc0000
[  440.910933][   T32] audit: type=1326 audit(2000000195.130:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.0.2417" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61bd9f559 code=0x7ffc0000
[  440.910963][   T32] audit: type=1326 audit(2000000195.130:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.0.2417" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61bd9f559 code=0x7ffc0000
[  441.058480][T12899] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  441.058501][T12899] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  441.078096][   T32] audit: type=1326 audit(2000000195.300:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.0.2417" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61bd9f559 code=0x7ffc0000
[  441.078134][   T32] audit: type=1326 audit(2000000195.300:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.0.2417" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61bd9f559 code=0x7ffc0000
[  441.144964][   T32] audit: type=1326 audit(2000000195.360:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.0.2417" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe61bd5fd8e code=0x7ffc0000
[  441.194872][T12899] F2FS-fs (loop2): invalid crc value
[  441.464564][T12926] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  441.464793][T12926] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  441.464834][T12926] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  441.496398][T12926] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  441.496561][T12926] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  441.496801][T12926] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  441.547426][T12899] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  441.617840][T12931] kvm: user requested TSC rate below hardware speed
[  441.654724][T12899] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  441.654771][T12899] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  441.787899][T12899] fscrypt (loop2, inode 3): Error -61 getting encryption context
[  441.978503][T12940] loop0: detected capacity change from 0 to 1024
[  442.104648][T12916] loop8: detected capacity change from 0 to 32768
[  442.157593][T12916] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  442.214132][ T6171] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  442.276364][T12916] XFS (loop8): Ending clean mount
[  442.318483][T12916] XFS (loop8): Quotacheck needed: Please wait.
[  442.605722][T12916] XFS (loop8): Quotacheck: Done.
[  442.833612][ T9645] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  443.392314][T12961] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.510764][ T5633] Bluetooth: hci5: command 0x0c1a tx timeout
[  443.510802][ T5633] Bluetooth: hci4: command 0x0c1a tx timeout
[  443.510822][ T5633] Bluetooth: hci1: command 0x0406 tx timeout
[  443.510841][ T5633] Bluetooth: hci2: command 0x0406 tx timeout
[  443.510859][ T5633] Bluetooth: hci0: command 0x0406 tx timeout
[  444.199028][T12966] loop0: detected capacity change from 0 to 131072
[  444.247306][T12966] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  444.247328][T12966] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  444.276603][T12966] F2FS-fs (loop0): invalid crc value
[  444.340632][T12966] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  444.360038][T12966] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  444.360059][T12966] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  444.768149][T12978] ima: policy update failed
[  445.051097][T12981] i2c i2c-0: new_device: Instantiated device anx7411 at 0x2c
[  445.132624][T12959] loop7: detected capacity change from 0 to 40427
[  445.158669][T12959] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  445.158687][T12959] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  445.200031][T12959] F2FS-fs (loop7): invalid crc value
[  445.589328][ T5636] Bluetooth: hci2: command 0x0406 tx timeout
[  445.623264][T12959] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  445.733564][T12959] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  445.733586][T12959] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  445.736931][T12976] loop6: detected capacity change from 0 to 32768
[  445.834504][T12976] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  446.152753][ T9165] ocfs2: Unmounting device (7,6) on (node local)
[  446.673675][   T10] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  446.818946][   T10] usb 9-1: Using ep0 maxpacket: 8
[  446.827106][   T10] usb 9-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  446.842247][   T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  446.842266][   T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  446.842285][   T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  446.842300][   T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  446.842326][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.076596][   T10] usb 9-1: GET_CAPABILITIES returned 0
[  447.076631][   T10] usbtmc 9-1:16.0: can't read capabilities
[  447.246406][T13004] loop2: detected capacity change from 0 to 32768
[  447.307942][T13004] JBD2: Ignoring recovery information on journal
[  447.331904][ T5774] usb 9-1: USB disconnect, device number 8
[  447.350002][ T6375] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  447.467671][T13004] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  447.665370][T13004] (syz.2.2441,13004,0):ocfs2_check_dir_entry:333 ERROR: directory entry (#65: offset=312) too close to end or out-of-bounds
[  447.854850][ T9907] ocfs2: Unmounting device (7,2) on (node local)
[  447.877954][T13017] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2445'.
[  448.189415][T13024] program syz.0.2449 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  448.380351][T13027] loop7: detected capacity change from 0 to 512
[  448.383666][T13027] EXT4-fs: Ignoring removed orlov option
[  448.383689][T13027] EXT4-fs: Ignoring removed mblk_io_submit option
[  448.418566][T13027] EXT4-fs error (device loop7): ext4_iget_extra_inode:6027: inode #15: comm syz.7.2451: corrupted in-inode xattr: e_value size too large
[  448.418593][T13027] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  448.418908][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  448.418922][    C0] EXT4-fs (loop7): initial error at time 2000000202: ext4_iget_extra_inode:6027: inode 15
[  448.418943][    C0] EXT4-fs (loop7): last error at time 2000000202: ext4_iget_extra_inode:6027: inode 15
[  448.452162][T13027] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.2451: couldn't read orphan inode 15 (err -117)
[  448.452187][T13027] loop7: lost filesystem error report for type 5 error -117
[  448.496085][T13027] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  448.605091][T13027] EXT4-fs (loop7): shut down requested (1)
[  448.657049][T13034] trusted_key: encrypted_key: keyword 'epdate' not recognized
[  448.732205][ T9209] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.824561][T13036] loop9: detected capacity change from 0 to 524287936
[  448.966547][T13039] loop2: detected capacity change from 0 to 1024
[  449.029498][T13042] loop6: detected capacity change from 0 to 512
[  449.103257][T13039] hfsplus: invalid length 1280 has been corrected to 255
[  449.105289][T13039] hfsplus: invalid length 1280 has been corrected to 255
[  449.105304][T13039] hfsplus: invalid length 1280 has been corrected to 255
[  449.105313][T13039] hfsplus: invalid length 1280 has been corrected to 255
[  449.105322][T13039] hfsplus: invalid length 1280 has been corrected to 255
[  449.153534][T13042] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  449.271088][T13042] EXT4-fs (loop6): 1 truncate cleaned up
[  449.490301][T13042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  449.561538][T13051] netlink: 'syz.0.2461': attribute type 39 has an invalid length.
[  449.661723][   T32] kauditd_printk_skb: 14 callbacks suppressed
[  449.661737][   T32] audit: type=1800 audit(2000000203.880:181): pid=13042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2456" name="file1" dev="loop6" ino=15 res=0 errno=-22
[  449.963314][ T9165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.108801][T13060] loop7: detected capacity change from 0 to 40427
[  451.153312][T13060] F2FS-fs (loop7): invalid crc value
[  451.485995][T13060] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  451.537788][T13060] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  451.683565][   T32] audit: type=1800 audit(2000000205.900:182): pid=13060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2465" name="file1" dev="loop7" ino=10 res=0 errno=-22
[  451.888757][T13060] syz.7.2465: attempt to access beyond end of device
[  451.888757][T13060] loop7: rw=8423425, sector=53248, nr_sectors = 8 limit=40427
[  451.973779][  T264] IPVS: starting estimator thread 0...
[  451.993657][T13103] IPVS: sh: SCTP 172.20.20.187:0 - no destination available
[  452.047718][ T9209] syz-executor: attempt to access beyond end of device
[  452.047718][ T9209] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  452.064871][T13105] IPVS: using max 40 ests per chain, 96000 per kthread
[  452.101086][ T9209] CPU: 0 UID: 0 PID: 9209 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  452.101114][ T9209] Tainted: [L]=SOFTLOCKUP
[  452.101120][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  452.101130][ T9209] Call Trace:
[  452.101136][ T9209]  <TASK>
[  452.101143][ T9209]  dump_stack_lvl+0xe8/0x150
[  452.101172][ T9209]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  452.101198][ T9209]  f2fs_write_end_bio+0x118e/0x15d0
[  452.101227][ T9209]  __submit_merged_bio+0x258/0x6a0
[  452.101246][ T9209]  ? rcu_is_watching+0x16/0xb0
[  452.101274][ T9209]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  452.101296][ T9209]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  452.101346][ T9209]  f2fs_write_data_pages+0x2a13/0x36e0
[  452.101401][ T9209]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  452.101421][ T9209]  ? is_bpf_text_address+0x26/0x2b0
[  452.101443][ T9209]  ? arch_stack_walk+0xfb/0x150
[  452.101482][ T9209]  ? add_lock_to_list+0xc7/0x100
[  452.101504][ T9209]  ? lockdep_unlock+0x5c/0xd0
[  452.101518][ T9209]  ? __lock_acquire+0x1511/0x2de0
[  452.101554][ T9209]  ? do_raw_spin_lock+0x12b/0x2f0
[  452.101575][ T9209]  ? do_raw_spin_unlock+0xf5/0x200
[  452.101589][ T9209]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  452.101611][ T9209]  do_writepages+0x338/0x560
[  452.101634][ T9209]  ? do_raw_spin_unlock+0xf5/0x200
[  452.101651][ T9209]  filemap_fdatawrite+0x1e9/0x2f0
[  452.101669][ T9209]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  452.101715][ T9209]  ? do_raw_spin_unlock+0xf5/0x200
[  452.101732][ T9209]  f2fs_sync_dirty_inodes+0x471/0x970
[  452.101757][ T9209]  f2fs_write_checkpoint+0x860/0x24d0
[  452.101797][ T9209]  kill_f2fs_super+0x2dc/0x700
[  452.101822][ T9209]  ? rcu_do_enqueue+0x616/0x870
[  452.101839][ T9209]  ? lockdep_hardirqs_on+0x7b/0x110
[  452.101875][ T9209]  ? __pfx_kill_f2fs_super+0x10/0x10
[  452.101911][ T9209]  ? __pfx_call_rcu+0x10/0x10
[  452.101938][ T9209]  ? shrinker_free+0x2a7/0x3b0
[  452.101956][ T9209]  deactivate_locked_super+0xbe/0x110
[  452.101976][ T9209]  cleanup_mnt+0x204/0x2a0
[  452.102001][ T9209]  task_work_run+0x1d9/0x260
[  452.102023][ T9209]  ? __pfx_task_work_run+0x10/0x10
[  452.102049][ T9209]  exit_to_user_mode_loop+0x204/0x770
[  452.102069][ T9209]  ? rcu_is_watching+0x16/0xb0
[  452.102094][ T9209]  do_syscall_64+0x328/0x520
[  452.102113][ T9209]  ? trace_irq_disable+0x3b/0x140
[  452.102133][ T9209]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.102148][ T9209]  ? clear_bhb_loop+0x70/0xc0
[  452.102167][ T9209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.102182][ T9209] RIP: 0033:0x7f2bbb1a0797
[  452.102196][ T9209] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  452.102210][ T9209] RSP: 002b:00007fffaa1eba08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  452.102225][ T9209] RAX: 0000000000000000 RBX: 00007f2bbb235f63 RCX: 00007f2bbb1a0797
[  452.102235][ T9209] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffaa1ebac0
[  452.102244][ T9209] RBP: 00007fffaa1ebac0 R08: 00007fffaa1ecac0 R09: 00000000ffffffff
[  452.102255][ T9209] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffaa1ecb50
[  452.102264][ T9209] R13: 00007f2bbb235f63 R14: 000000000006e4fb R15: 00007fffaa1ecb90
[  452.102288][ T9209]  </TASK>
[  452.108641][ T9209] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  452.914734][T13115] loop8: detected capacity change from 0 to 256
[  453.110197][    T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  453.259823][    T9] usb 3-1: Using ep0 maxpacket: 8
[  453.260456][    T9] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  453.262505][    T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  453.262540][    T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  453.262556][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  453.262574][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  453.262591][    T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  453.262621][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.518480][    T9] usb 3-1: GET_CAPABILITIES returned 0
[  453.518519][    T9] usbtmc 3-1:16.0: can't read capabilities
[  453.791521][    T9] usb 3-1: USB disconnect, device number 15
[  453.881157][T13112] loop0: detected capacity change from 0 to 32768
[  453.907560][T13131] loop8: detected capacity change from 0 to 2048
[  453.951086][T13131] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  453.996539][T13112] JBD2: Ignoring recovery information on journal
[  454.065598][T13134] loop6: detected capacity change from 0 to 256
[  454.116792][T13112] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  454.246684][T13138] syz.6.2494: attempt to access beyond end of device
[  454.246684][T13138] loop6: rw=2049, sector=1832, nr_sectors = 32 limit=256
[  454.246814][T13138] syz.6.2494: attempt to access beyond end of device
[  454.246814][T13138] loop6: rw=2049, sector=1896, nr_sectors = 32 limit=256
[  454.246936][T13138] syz.6.2494: attempt to access beyond end of device
[  454.246936][T13138] loop6: rw=2049, sector=1960, nr_sectors = 32 limit=256
[  454.341921][T13112] (syz.0.2485,13112,0):ocfs2_check_dir_entry:333 ERROR: directory entry (#65: offset=312) too close to end or out-of-bounds
[  454.612524][T11839] ocfs2: Unmounting device (7,0) on (node local)
[  454.719713][    T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  454.876251][    T9] usb 9-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  454.888664][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.902645][    T9] usb 9-1: config 0 descriptor??
[  454.921338][    T9] cp210x 9-1:0.0: cp210x converter detected
[  455.234152][  T264] kworker/u8:7: attempt to access beyond end of device
[  455.234152][  T264] loop6: rw=1, sector=2024, nr_sectors = 32 limit=256
[  455.253719][  T264] kworker/u8:7: attempt to access beyond end of device
[  455.253719][  T264] loop6: rw=1, sector=2088, nr_sectors = 32 limit=256
[  455.253842][  T264] kworker/u8:7: attempt to access beyond end of device
[  455.253842][  T264] loop6: rw=1, sector=2152, nr_sectors = 32 limit=256
[  455.254282][  T264] kworker/u8:7: attempt to access beyond end of device
[  455.254282][  T264] loop6: rw=1, sector=2216, nr_sectors = 32 limit=256
[  455.254393][  T264] kworker/u8:7: attempt to access beyond end of device
[  455.254393][  T264] loop6: rw=1, sector=2280, nr_sectors = 32 limit=256
[  455.331218][    T9] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32
[  455.362240][    T9] usb 9-1: cp210x converter now attached to ttyUSB0
[  455.515762][T13158] loop7: detected capacity change from 0 to 64
[  455.573135][    T9] usb 9-1: USB disconnect, device number 9
[  455.643243][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  455.643656][    T9] cp210x 9-1:0.0: device disconnected
[  455.707863][T13160] loop8: detected capacity change from 0 to 7
[  455.721134][T13160]  loop8: [POWERTEC]
[  455.949935][ T5763] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  456.101782][ T5763] usb 1-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  456.104389][ T5763] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  456.104409][ T5763] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[  456.104423][ T5763] usb 1-1: config 0 interface 0 has no altsetting 0
[  456.150492][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  456.150518][ T5763] usb 1-1: Product: syz
[  456.150528][ T5763] usb 1-1: Manufacturer: syz
[  456.150538][ T5763] usb 1-1: SerialNumber: syz
[  456.188231][ T5763] usb 1-1: config 0 descriptor??
[  456.222095][ T5763] usb 1-1: selecting invalid altsetting 0
[  456.527324][ T5763] usb 1-1: USB disconnect, device number 10
[  457.413041][T13189] loop7: detected capacity change from 0 to 512
[  457.414439][T13187] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2518'.
[  457.454834][ T5636] block nbd2: Receive control failed (result -32)
[  457.485941][T13189] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  457.486034][T13189] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.570319][T13190] loop2: detected capacity change from 0 to 2048
[  457.615495][T13190] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  457.724549][ T9209] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.834577][T13198] loop6: detected capacity change from 0 to 256
[  457.900612][T13198] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  458.175205][T13204] loop7: detected capacity change from 0 to 2048
[  458.224888][T13204] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  458.400786][T13206] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2526'.
[  458.909483][T13219] loop2: detected capacity change from 0 to 1024
[  458.915325][T13219] EXT4-fs: Ignoring removed nomblk_io_submit option
[  458.972598][T13219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  459.002292][ T6171] exFAT-fs (loop6): error, broken FAT chain.
[  459.002307][ T6171] exFAT-fs (loop6): Filesystem has been set read-only
[  459.002564][ T6171] loop6: writeback error on inode 203, offset 8192, sector 208
[  459.002724][ T6171] exFAT-fs (loop6): error, broken FAT chain.
[  459.002764][ T6171] exFAT-fs (loop6): error, broken FAT chain.
[  459.002799][ T6171] exFAT-fs (loop6): error, broken FAT chain.
[  459.253578][ T9907] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.306698][T13229] loop6: detected capacity change from 0 to 512
[  459.365141][T13229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  459.365236][T13229] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  459.547718][ T9165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.019552][T13255] loop2: detected capacity change from 0 to 256
[  460.066660][T13255] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  460.083295][ T5731] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[  460.105000][T13252] tap0: tun_chr_ioctl cmd 1074025692
[  460.224985][T13258] loop7: detected capacity change from 0 to 2048
[  460.245131][ T5731] usb 9-1: not running at top speed; connect to a high speed hub
[  460.245156][ T5731] usb 9-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40
[  460.276581][ T5731] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  460.276615][ T5731] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 165, setting to 64
[  460.317250][ T5731] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.317270][ T5731] usb 9-1: Product: syz
[  460.317279][ T5731] usb 9-1: Manufacturer: syz
[  460.317289][ T5731] usb 9-1: SerialNumber: syz
[  460.327706][T13258] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  460.369360][T13247] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  460.423490][ T5731] oti6858 9-1:1.0: oti6858 converter detected
[  460.453519][ T5731] usb 9-1: oti6858 converter now attached to ttyUSB0
[  460.706684][T13260] kAFS: bad VL server IP address
[  460.906303][ T5774] usb 9-1: USB disconnect, device number 10
[  460.947712][ T5774] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  460.977178][ T5774] oti6858 9-1:1.0: device disconnected
[  461.266139][ T5903] exFAT-fs (loop2): error, broken FAT chain.
[  461.266155][ T5903] exFAT-fs (loop2): Filesystem has been set read-only
[  461.266199][ T5903] loop2: writeback error on inode 206, offset 8192, sector 208
[  461.266341][ T5903] exFAT-fs (loop2): error, broken FAT chain.
[  461.266375][ T5903] exFAT-fs (loop2): error, broken FAT chain.
[  461.266406][ T5903] exFAT-fs (loop2): error, broken FAT chain.
[  461.655702][ T6375] IPVS: starting estimator thread 0...
[  461.740567][T13283] IPVS: using max 40 ests per chain, 96000 per kthread
[  461.908928][ T5774] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  461.990778][T13291] loop8: detected capacity change from 0 to 512
[  462.002925][T13291] EXT4-fs (loop8): Test dummy encryption mode enabled
[  462.002940][T13291] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  462.002948][T13291] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  462.045776][T13291] EXT4-fs (loop8): 1 truncate cleaned up
[  462.046935][T13291] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  462.067657][ T5774] usb 1-1: Using ep0 maxpacket: 16
[  462.068182][ T5774] usb 1-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42
[  462.100645][ T5774] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  462.100692][ T5774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  462.100711][ T5774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  462.100725][ T5774] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  462.100739][ T5774] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  462.103066][ T5774] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  462.103083][ T5774] usb 1-1: Manufacturer: syz
[  462.186276][ T5774] usb 1-1: config 0 descriptor??
[  462.335291][ T9645] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.406259][   T32] audit: type=1400 audit(2000000472.617:183): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="//o" pid=13297 comm="syz.2.2565" name="//o" offset=81
[  462.533084][T13301] netlink: 'syz.8.2566': attribute type 14 has an invalid length.
[  462.610883][ T5774] rc_core: IR keymap rc-hauppauge not found
[  462.610897][ T5774] Registered IR keymap rc-empty
[  462.611418][ T5774] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  462.614403][T13303] netlink: 'syz.6.2567': attribute type 3 has an invalid length.
[  462.647337][ T5774] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  462.724442][ T5774] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  463.871194][ T5774] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input27
[  466.435766][ T5774] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  466.477439][ T5774] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  507.384964][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  515.635396][ T5774] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  538.133854][ T1411] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  569.597493][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  573.890919][    C0] sched: DL replenish lagged too much
[  573.984895][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  573.991872][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P13289/1:b..l.. P5369/1:b..l.. P13282/1:b..l..
[  574.004662][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=140057, q=1360 ncpus=1)
[  574.012554][    C0] task:syz.0.2559      state:R  running task     stack:26856 pid:13282 tgid:13281 ppid:11839  task_flags:0x40054c flags:0x00080002
[  574.026031][    C0] Call Trace:
[  574.029311][    C0]  <TASK>
[  574.032259][    C0]  __schedule+0x17dd/0x5830
[  574.036773][    C0]  ? __alloc_frozen_pages_noprof+0x24c/0x410
[  574.042806][    C0]  ? irqentry_exit+0x2a0/0x9b0
[  574.047587][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  574.052602][    C0]  ? __pfx___schedule+0x10/0x10
[  574.057464][    C0]  ? preempt_schedule_thunk+0x16/0x40
[  574.062832][    C0]  preempt_schedule_common+0x7f/0xd0
[  574.068135][    C0]  preempt_schedule_thunk+0x16/0x40
[  574.073333][    C0]  _raw_spin_unlock+0x41/0x50
[  574.077999][    C0]  __zap_vma_range+0x3d29/0x4b50
[  574.082971][    C0]  ? __pfx___zap_vma_range+0x10/0x10
[  574.088258][    C0]  ? mas_find+0x6d6/0xcb0
[  574.092630][    C0]  unmap_vmas+0x38b/0x550
[  574.096959][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  574.101803][    C0]  ? mas_next_slot+0xc91/0xd70
[  574.106593][    C0]  exit_mmap+0x290/0xa40
[  574.110831][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  574.115606][    C0]  ? __pfx_exit_aio+0x10/0x10
[  574.120347][    C0]  ? uprobe_clear_state+0x2a4/0x3d0
[  574.125554][    C0]  __mmput+0x118/0x420
[  574.129635][    C0]  exit_mm+0x18e/0x240
[  574.133699][    C0]  do_exit+0x6a8/0x2360
[  574.137863][    C0]  ? raw_ioctl+0x2526/0x41c0
[  574.142516][    C0]  ? __pfx_do_exit+0x10/0x10
[  574.147102][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  574.152126][    C0]  do_group_exit+0x22d/0x2f0
[  574.156708][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  574.161916][    C0]  get_signal+0x1216/0x12c0
[  574.166444][    C0]  arch_do_signal_or_restart+0xbb/0x860
[  574.171994][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  574.178163][    C0]  exit_to_user_mode_loop+0x10e/0x770
[  574.183530][    C0]  ? rcu_is_watching+0x16/0xb0
[  574.188314][    C0]  do_syscall_64+0x328/0x520
[  574.192922][    C0]  ? trace_irq_disable+0x3b/0x140
[  574.197947][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.204005][    C0]  ? clear_bhb_loop+0x70/0xc0
[  574.208683][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.214571][    C0] RIP: 0033:0x7fe61bd9f1eb
[  574.218988][    C0] RSP: 002b:00007fe61cc7bf60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  574.227401][    C0] RAX: 0000000000000c38 RBX: 0000000000000c38 RCX: 00007fe61bd9f1eb
[  574.235364][    C0] RDX: 00007fe61cc7bfe0 RSI: 0000000040085507 RDI: 0000000000000003
[  574.243345][    C0] RBP: 0000000000000003 R08: 00007fe61c150320 R09: 0000000000000000
[  574.251339][    C0] R10: 0000000000000003 R11: 0000000000000246 R12: 0000200000000080
[  574.259315][    C0] R13: 000000000000000a R14: 00007fe61c025fa0 R15: 00007fff40980e48
[  574.267320][    C0]  </TASK>
[  574.270335][    C0] task:crond           state:R  running task     stack:23080 pid:5369  tgid:5369  ppid:1      task_flags:0x400000 flags:0x00080000
[  574.283811][    C0] Call Trace:
[  574.287100][    C0]  <TASK>
[  574.290036][    C0]  __schedule+0x17dd/0x5830
[  574.294546][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  574.299826][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  574.305022][    C0]  ? kernel_text_address+0xa5/0xe0
[  574.310133][    C0]  ? unwind_get_return_address+0x4d/0x90
[  574.315770][    C0]  ? __pfx___schedule+0x10/0x10
[  574.320625][    C0]  preempt_schedule_irq+0x4b/0x90
[  574.325644][    C0]  irqentry_exit+0x14f/0x9b0
[  574.330247][    C0]  ? trace_irq_disable+0x3b/0x140
[  574.335294][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  574.341284][    C0] RIP: 0010:__update_page_owner_free_handle+0x1a2/0x410
[  574.348270][    C0] Code: 24 28 4c 8b 25 9f 0e c3 0d 49 01 ec 83 3c 24 00 74 38 e8 41 f8 7e ff 48 89 ef be 08 00 00 00 e8 f4 cb f5 ff 48 0f ba 75 00 01 <49> 8d 5c 24 0c 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 66
[  574.367884][    C0] RSP: 0018:ffffc90003677a90 EFLAGS: 00000257
[  574.373974][    C0] RAX: ffffffff824a2201 RBX: 000000000002adde RCX: ffffffff824a223c
[  574.381944][    C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88801d8e5560
[  574.389911][    C0] RBP: ffff88801d8e5560 R08: ffff88801d8e5567 R09: 1ffff11003b1caac
[  574.397875][    C0] R10: dffffc0000000000 R11: ffffed1003b1caad R12: ffff88801d8e5568
[  574.405852][    C0] R13: dffffc0000000000 R14: 0000000000000008 R15: 0000000000000007
[  574.413832][    C0]  ? __update_page_owner_free_handle+0x161/0x410
[  574.420164][    C0]  ? __update_page_owner_free_handle+0x19c/0x410
[  574.426510][    C0]  ? __update_page_owner_free_handle+0x37/0x410
[  574.432754][    C0]  __reset_page_owner+0xd2/0x2a0
[  574.437715][    C0]  __free_frozen_pages+0xc97/0xd90
[  574.442841][    C0]  __slab_free+0x269/0x2c0
[  574.447291][    C0]  ? qlist_free_all+0x8e/0x100
[  574.452079][    C0]  qlist_free_all+0x99/0x100
[  574.456686][    C0]  ? do_getname+0x2e/0x250
[  574.461101][    C0]  ? kmem_cache_alloc_noprof+0x151/0x600
[  574.466740][    C0]  kasan_quarantine_reduce+0x148/0x160
[  574.472201][    C0]  __kasan_slab_alloc+0x22/0x80
[  574.477083][    C0]  kmem_cache_alloc_noprof+0x2b4/0x600
[  574.482551][    C0]  ? do_getname+0x2e/0x250
[  574.486960][    C0]  ? kmem_cache_alloc_noprof+0x151/0x600
[  574.492592][    C0]  ? do_getname+0x2e/0x250
[  574.497008][    C0]  do_getname+0x2e/0x250
[  574.501243][    C0]  ? getname_flags+0x11/0x20
[  574.505840][    C0]  do_sys_openat2+0xce/0x200
[  574.510433][    C0]  ? __pfx_do_sys_openat2+0x10/0x10
[  574.515640][    C0]  ? rcu_is_watching+0x16/0xb0
[  574.520408][    C0]  __x64_sys_openat+0x138/0x170
[  574.525270][    C0]  do_syscall_64+0x166/0x520
[  574.529857][    C0]  ? trace_irq_disable+0x3b/0x140
[  574.534900][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.540959][    C0]  ? clear_bhb_loop+0x70/0xc0
[  574.545654][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.551537][    C0] RIP: 0033:0x7f9b5b27ec3a
[  574.555988][    C0] RSP: 002b:00007ffee7f94c28 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
[  574.564401][    C0] RAX: ffffffffffffffda RBX: 0000556f47d252a0 RCX: 00007f9b5b27ec3a
[  574.572370][    C0] RDX: 0000000000080000 RSI: 00007f9b5b31b45a RDI: 00000000ffffff9c
[  574.580334][    C0] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001
[  574.588297][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f9b5b3197f4
[  574.596255][    C0] R13: 00007f9b5b3197f4 R14: 0000000000000001 R15: 0000000000000035
[  574.604230][    C0]  </TASK>
[  574.607252][    C0] task:syz.7.2562      state:R  running task     stack:26856 pid:13289 tgid:13288 ppid:9209   task_flags:0x40054c flags:0x00080000
[  574.620741][    C0] Call Trace:
[  574.624011][    C0]  <TASK>
[  574.626946][    C0]  __schedule+0x17dd/0x5830
[  574.631467][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  574.636484][    C0]  ? __pfx___schedule+0x10/0x10
[  574.641338][    C0]  ? preempt_schedule_thunk+0x16/0x40
[  574.646710][    C0]  preempt_schedule_common+0x7f/0xd0
[  574.651988][    C0]  preempt_schedule_thunk+0x16/0x40
[  574.657203][    C0]  _raw_spin_unlock+0x41/0x50
[  574.661877][    C0]  __zap_vma_range+0x3d29/0x4b50
[  574.666861][    C0]  ? __pfx___zap_vma_range+0x10/0x10
[  574.672155][    C0]  ? mas_find+0x6d6/0xcb0
[  574.676491][    C0]  unmap_vmas+0x38b/0x550
[  574.680834][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  574.685683][    C0]  ? mas_next_slot+0xc91/0xd70
[  574.690470][    C0]  exit_mmap+0x290/0xa40
[  574.694709][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  574.699483][    C0]  ? __pfx_exit_aio+0x10/0x10
[  574.704170][    C0]  ? uprobe_clear_state+0x2a4/0x3d0
[  574.709373][    C0]  __mmput+0x118/0x420
[  574.713448][    C0]  exit_mm+0x18e/0x240
[  574.717513][    C0]  do_exit+0x6a8/0x2360
[  574.721670][    C0]  ? __pfx_do_exit+0x10/0x10
[  574.726256][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  574.731281][    C0]  do_group_exit+0x22d/0x2f0
[  574.735864][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  574.741058][    C0]  get_signal+0x1216/0x12c0
[  574.745589][    C0]  arch_do_signal_or_restart+0xbb/0x860
[  574.751161][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  574.757346][    C0]  exit_to_user_mode_loop+0x10e/0x770
[  574.762735][    C0]  ? rcu_is_watching+0x16/0xb0
[  574.767515][    C0]  do_syscall_64+0x328/0x520
[  574.772127][    C0]  ? trace_irq_disable+0x3b/0x140
[  574.777160][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.783226][    C0]  ? clear_bhb_loop+0x70/0xc0
[  574.787907][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.793803][    C0] RIP: 0033:0x7f2bbb19f559
[  574.798213][    C0] RSP: 002b:00007f2bbc0f80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  574.806620][    C0] RAX: ffffffffffffffda RBX: 00007f2bbb425fa8 RCX: 00007f2bbb19f559
[  574.814587][    C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2bbb425fac
[  574.822585][    C0] RBP: 00007f2bbb425fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  574.830574][    C0] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  574.838550][    C0] R13: 00007f2bbb426038 R14: 00007fffaa1ec6b0 R15: 00007fffaa1ec798
[  574.846539][    C0]  </TASK>