last executing test programs:

4m23.712128097s ago: executing program 1 (id=939):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='100\x00', 0x4)
write(r0, &(0x7f00000001c0)='2', 0x1)

4m23.411932305s ago: executing program 1 (id=943):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="778dfff3be521634004115a800", 0xd}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482b4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}, {&(0x7f00000002c0)="38612f161e51aa66c83ead76ff4cd44b777fecc333d6b04df2fcd354385aae96594f6d1bff3a272d3cb5c1fa6891ef904f5a0d61178b6b7c24abf937124533a0daa96989460a78596eb8d170e6a82c3a6aa6ef6b05b3f4feb839cc35ccf555bb960b624d0e7a1dde54eaaba61f77692e177a1b929f8cd4a458ff2cbf91e1a41c3cd33f76b50dd9675de97b6575f25b8205a627b0e532b8c23295a7341cfcb910023f4e32aa3634a87afa9c9827aeced5c1aeddce18460824", 0xb8}, {&(0x7f0000000600)="6d0c4a182d1d26609eabaf112196b9480110c4326f48c6c49b5548be9a0834ec547e6e751c14e1fa8388d7f9c5d0abbb91b81ef1a69bd47552fb5e40cec7fc03ab24f9d2887b5cff664d05", 0x4b}], 0x5}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

4m22.873349449s ago: executing program 1 (id=948):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
chdir(0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97)
timer_settime(0x0, 0x0, 0x0, 0x0)
close(r0)

4m19.755181698s ago: executing program 1 (id=959):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2", 0x3a}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e", 0x64}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

4m18.474670291s ago: executing program 1 (id=962):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff)

4m16.978062569s ago: executing program 1 (id=967):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
chdir(0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97)
timer_settime(0x0, 0x0, 0x0, 0x0)
close(r0)

4m1.884035873s ago: executing program 32 (id=967):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
chdir(0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97)
timer_settime(0x0, 0x0, 0x0, 0x0)
close(r0)

15.384420379s ago: executing program 4 (id=1769):
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00)
openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x103902, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0xc7)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
fsopen(&(0x7f0000000040)='sysfs\x00', 0x1)
socket$alg(0x26, 0x5, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c01020301090212"], 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x0)

12.230190089s ago: executing program 4 (id=1774):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x4c}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5001}, 0x20000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xfff3, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20})
memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11.666675134s ago: executing program 4 (id=1776):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000980)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x5, 0x7, 0xfffffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4800)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}})
r8 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r8, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4)

11.542186677s ago: executing program 3 (id=1777):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa216ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x4c060)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)

11.044523269s ago: executing program 2 (id=1779):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
lseek(r0, 0x10001, 0x0)

10.600400221s ago: executing program 3 (id=1781):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r4, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)=""/174, 0xae}], 0x5}, 0x96f7}], 0x2, 0x101, 0x0)

9.797584761s ago: executing program 2 (id=1783):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x1})
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r3=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r4 = getpid()
mlock(&(0x7f00009a7000/0x4000)=nil, 0x4000)
r5 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241)
ioctl$MTDFILEMODE(r5, 0x4d13, 0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
eventfd(0xfffffff9)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r2)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r11=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x3, 0x1, 0x8, 0x9, 0xfffffffc, 0x1a000, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

9.190988436s ago: executing program 3 (id=1785):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x4c, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x800003, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x6, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x0, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0x5, 0xc, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0xffffffff, 0x5}, {0x9, 0xd76, 0x4, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158144, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x9, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0x8000000f}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x400007ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x6, 0x6, 0x7ffc, 0x9, 0x500, 0x6}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x0, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x9, 0x66a}, {0xfff, 0x6, 0x8, 0xb2f3, 0x9e, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x2, 0x7, 0x6, 0x10, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x402, 0x2b00, 0xf7fff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0x0, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x40057}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x61a6}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x87, 0x7}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xb00000, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff02, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x80000, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x5, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x3, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x1000003, 0x8d, 0x81, 0x2, 0xd99d, 0x6}, {0x9, 0x2, 0x4, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xe6d, 0x62f, 0x401, 0xffff9d44}, {0x9a2f, 0x800, 0x8, 0x1, 0x10000007}, {0x20000009, 0x2, 0x800, 0x200, 0x10001, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0xd28, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0xa, 0x1}, {0x3}, {0x2}, {0x3}, {0x3}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885)

8.880627724s ago: executing program 0 (id=1787):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80))
syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902"], 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = dup(r1)
r5 = fcntl$dupfd(r0, 0x406, r3)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)

5.771134164s ago: executing program 2 (id=1788):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r1 = dup(r0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x3, 0x65})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x1, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
write$P9_RSTATFS(r1, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x569142f7, 0x0, 0x100000001, 0x0, 0x7f, 0x200, 0x7, 0x200, 0x6}}, 0x43)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2, 0x0, 0x2, 0x1e, "0062ba7d820700000000000000000000096304"})
r4 = syz_open_pts(r0, 0x80)
dup3(r4, r0, 0x80000)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000003c0)={0x1000, 0x7ffe, 0x3, 0x400c, 0x5, "73309be7b7525f00", 0x70000001, 0x203})
read(r0, &(0x7f00000002c0)=""/228, 0xe4)

5.654643937s ago: executing program 4 (id=1789):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x1ff, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0xe, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x3fc, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xc, 0x8000000f}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x9, 0x6, 0x6, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x9, 0x66a}, {0xfff, 0x6, 0x8, 0xb2f3, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x8, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5205, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0x46e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x3, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x8000002, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x7fff}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x7}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x404, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0xd99d, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885)

5.635686257s ago: executing program 0 (id=1790):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2", 0x3a}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e", 0x64}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

5.5040766s ago: executing program 3 (id=1791):
mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)

5.5033576s ago: executing program 2 (id=1792):
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r4, 0x0, 0x4)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, 0x0, &(0x7f0000000180))

5.1313669s ago: executing program 0 (id=1793):
syz_open_dev$loop(0x0, 0x6, 0x9a001)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x0, 0x200003, 0x801, 0x4, 0x7})
socket(0x1, 0x5, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2)

4.551029875s ago: executing program 3 (id=1794):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
connect$x25(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000006b113200000000008510000002000000850000000500000095003300000000009500a50500000000d7d86929483a930f2c70e28b47c5a00beaff8cc04257c275f6febbffdda80963ef4d4723307ab70fec7e371be2f916497c74ba124e7c3d0d0ef2d9fae6916f283d9ff87d9a2dede5f1e1268044b539e00f3a7136acde92c31d5db96585f6369be77641f27ead6e878ed48108d92d7bb3670ef346f9450f2c3f9c1430b8ec2a767823a16c87e1ff53172a95c85d3491c0fc93e6e3893d2674bfefa957b16f5de52eec758cf56a16bac6daa02a7ec3e5f1e8bb27"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000140)={0x0, 0x4000001, 0x1b, 0x10, 0x200, &(0x7f00000004c0)="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"})

3.109675351s ago: executing program 2 (id=1795):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1b6)
fallocate(r0, 0x0, 0x0, 0x10000)
pwrite64(r0, &(0x7f0000000100)="fc4e2ba9010000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c532ba90100"/258, 0x102, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='md123\x00', 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0)
write(r3, &(0x7f0000000500)='1.1\x00', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f0000000700)='7:0\x00', 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md123/md/array_state\x00', 0x1, 0x0)
write(r5, &(0x7f0000000900)='active\x00', 0x7)

3.109456361s ago: executing program 0 (id=1796):
futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1}, {0x0, 0x0, 0x3}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.78071846s ago: executing program 0 (id=1797):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x2000090, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$packet(0x11, 0x2, 0x300)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r3 = dup(r2)
write$UHID_INPUT(r3, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0x0, 0x1, 0x2, 0x7ffd, 0x6, 0x1007, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0xc, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]})

2.37321124s ago: executing program 4 (id=1798):
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r5 = syz_pidfd_open(r0, 0x0)
setns(r5, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8e, 0x0, 0x100000}, 0x20)
syz_clone(0xb21e8000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.36291586s ago: executing program 2 (id=1799):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000b00), 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000d00)='1\n', 0x2)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001300)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/d0\x00')
openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0)

2.225572274s ago: executing program 0 (id=1800):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="0400"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2ab, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.19254ms ago: executing program 3 (id=1801):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2", 0x3a}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e", 0x64}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

0s ago: executing program 4 (id=1802):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x88000, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000300)={0x1, 0x20, 0x1, 0x1b, 0x3, 0xff, 0x4, 0x14b, 0x1})
listen(0xffffffffffffffff, 0x4)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  377.534159][ T8701] XFS (loop0): Ending clean mount
[  377.616389][ T8701] XFS (loop0): Quotacheck needed: Please wait.
[  377.718906][ T8701] XFS (loop0): Quotacheck: Done.
[  377.750835][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.790'.
[  377.854881][ T8740] ipvlan2: entered allmulticast mode
[  377.870814][ T8740] syz_tun: entered allmulticast mode
[  378.037830][ T5772] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  378.652744][ T8759] loop3: detected capacity change from 0 to 1024
[  378.775830][   T28] audit: type=1800 audit(1785978933.907:6): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.795" name="file1" dev="loop3" ino=20 res=0 errno=0
[  378.812952][ T8759] syz.3.795: attempt to access beyond end of device
[  378.812952][ T8759] loop3: rw=0, sector=393284, nr_sectors = 2 limit=1024
[  378.866586][ T8763] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  378.916955][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  378.924346][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  379.089761][ T8768] loop3: detected capacity change from 0 to 64
[  379.957827][ T8774] loop3: detected capacity change from 0 to 512
[  380.091952][ T8774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  380.149501][ T8774] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  380.308006][ T8756] loop2: detected capacity change from 0 to 40427
[  380.340558][ T8756] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  380.360094][ T8756] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  380.406960][ T8756] F2FS-fs (loop2): invalid crc value
[  380.422042][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.453544][ T8756] F2FS-fs (loop2): Found nat_bits in checkpoint
[  380.716142][ T8756] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  380.750414][ T8756] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  380.970022][   T28] audit: type=1800 audit(1785978936.087:7): pid=8756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.794" name="file1" dev="loop2" ino=10 res=0 errno=0
[  381.027265][ T8793] Bluetooth: MGMT ver 1.22
[  381.037882][ T8781] loop0: detected capacity change from 0 to 32768
[  381.136801][ T8781] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  381.345917][ T8781] XFS (loop0): Ending clean mount
[  381.534980][ T5772] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  381.804787][ T8810] loop3: detected capacity change from 0 to 256
[  381.841934][ T8810] FAT-fs (loop3): Unrecognized mount option "uRf8=0" or missing value
[  381.980442][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'.
[  382.052849][ T8814] capability: warning: `syz.0.807' uses deprecated v2 capabilities in a way that may be insecure
[  382.960364][ T5834] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  383.170455][ T5834] usb 1-1: Using ep0 maxpacket: 32
[  383.192802][ T5834] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  383.216571][ T5834] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  383.237085][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  383.256465][ T5834] usb 1-1: Product: syz
[  383.262436][ T5834] usb 1-1: Manufacturer: syz
[  383.267118][ T5834] usb 1-1: SerialNumber: syz
[  383.278416][ T5834] usb 1-1: config 0 descriptor??
[  383.309998][ T8831] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  383.361479][ T8841] loop2: detected capacity change from 0 to 512
[  383.676255][ T8851] loop1: detected capacity change from 0 to 256
[  383.749065][ T8848] loop2: detected capacity change from 0 to 4096
[  383.858448][ T8854] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  384.098767][ T8856] loop1: detected capacity change from 0 to 1024
[  384.638197][ T8848] syz.2.819 (8848) used greatest stack depth: 18920 bytes left
[  384.727098][ T8861] loop1: detected capacity change from 0 to 2048
[  384.791079][ T8861] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  384.847232][ T8861] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  384.908457][ T8861] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  385.201148][ T8869] netlink: 'syz.2.827': attribute type 2 has an invalid length.
[  385.232711][ T8869] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.827'.
[  385.672497][   T28] audit: type=1326 audit(1785978940.807:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.2.829" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f83cc79e0d9 code=0x0
[  385.761699][ T5834] usb 1-1: USB disconnect, device number 23
[  385.983082][ T8883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  386.105813][ T8886] loop0: detected capacity change from 0 to 2048
[  386.124223][ T8886] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  386.151858][ T8886] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  386.253130][   T28] audit: type=1800 audit(1785978941.377:9): pid=8886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.833" name="file1" dev="loop0" ino=1346 res=0 errno=0
[  386.492499][ T8897] loop2: detected capacity change from 0 to 256
[  386.523469][ T8897] exfat: Deprecated parameter 'namecase'
[  386.547364][ T8897] exfat: Deprecated parameter 'namecase'
[  386.568286][ T8897] exfat: Deprecated parameter 'namecase'
[  386.584620][ T8897] exfat: Deprecated parameter 'namecase'
[  386.639471][ T8897] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0232f1a3, utbl_chksum : 0xe619d30d)
[  386.694188][ T8897] xt_hashlimit: max too large, truncated to 1048576
[  386.803313][ T8900] loop0: detected capacity change from 0 to 512
[  386.827809][ T8900] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  386.908968][ T8900] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.838: casefold flag without casefold feature
[  386.970425][ T8900] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.838: couldn't read orphan inode 15 (err -117)
[  387.015123][ T8900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  387.053968][ T8900] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.838: bg 0: block 5: invalid block bitmap
[  387.070810][    T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  387.161821][ T8900] CacheFiles: mkdir cache failed with error -105
[  387.168785][ T8900] CacheFiles: Failed to register: -105
[  387.245045][ T8910] loop3: detected capacity change from 0 to 4096
[  387.272089][    T8] usb 2-1: Using ep0 maxpacket: 32
[  387.287763][    T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  387.312889][    T8] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  387.326011][    T8] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  387.329614][ T8910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  387.335527][    T8] usb 2-1: Product: syz
[  387.352085][    T8] usb 2-1: Manufacturer: syz
[  387.356753][    T8] usb 2-1: SerialNumber: syz
[  387.364978][    T8] usb 2-1: config 0 descriptor??
[  387.371001][ T8901] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  387.391930][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.446559][   T28] audit: type=1800 audit(1785978942.567:10): pid=8910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.841" name="file0" dev="loop3" ino=13 res=0 errno=0
[  387.586735][ T8916] loop0: detected capacity change from 0 to 256
[  387.614547][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.021228][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'.
[  389.893034][ T5834] usb 2-1: USB disconnect, device number 12
[  389.997673][ T8930] loop3: detected capacity change from 0 to 40427
[  390.050352][ T8930] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  390.070311][ T8930] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  390.099480][ T8930] F2FS-fs (loop3): invalid crc value
[  390.129348][ T8930] F2FS-fs (loop3): Found nat_bits in checkpoint
[  390.310247][ T8930] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  390.317405][ T8930] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  390.386577][ T8941] loop2: detected capacity change from 0 to 40427
[  390.457321][ T8941] F2FS-fs (loop2): heap/no_heap options were deprecated
[  390.520241][ T8941] F2FS-fs (loop2): invalid crc value
[  390.571758][ T8941] F2FS-fs (loop2): Found nat_bits in checkpoint
[  390.760096][ T5775] syz-executor: attempt to access beyond end of device
[  390.760096][ T5775] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  390.817299][ T5775] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  390.820748][ T8941] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  390.888685][ T8943] loop0: detected capacity change from 0 to 32768
[  390.996121][ T8943] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  391.062124][ T5779] syz-executor: attempt to access beyond end of device
[  391.062124][ T5779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  391.081470][ T8943] XFS (loop0): Ending clean mount
[  391.087949][ T5779] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  391.195569][ T8971] XFS (loop0): EXPERIMENTAL online scrub feature in use. Use at your own risk!
[  391.330620][ T5772] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  391.700567][ T5834] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  391.740822][ T8977] loop3: detected capacity change from 0 to 512
[  391.771249][ T8977] EXT4-fs: Ignoring removed nobh option
[  391.776941][ T8977] EXT4-fs: Ignoring removed mblk_io_submit option
[  391.814304][ T8977] EXT4-fs (loop3): orphan cleanup on readonly fs
[  391.828093][ T8977] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  391.856453][ T8977] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.858: attempt to clear invalid blocks 2 len 1
[  391.882851][ T5834] usb 2-1: config 0 has no interfaces?
[  391.892632][ T5834] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  391.904565][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  391.913204][ T5834] usb 2-1: Product: syz
[  391.915702][ T8977] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, 
[  391.917507][ T5834] usb 2-1: SerialNumber: syz
[  391.917652][ T8977] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  391.932336][ T5834] usb 2-1: config 0 descriptor??
[  391.952520][ T8977] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.858: invalid indirect mapped block 1819239214 (level 0)
[  391.977292][ T8977] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.858: invalid indirect mapped block 1819239214 (level 1)
[  391.997531][ T8977] EXT4-fs (loop3): 1 truncate cleaned up
[  392.007111][ T8977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  392.055475][ T8977] EXT4-fs: Ignoring removed nobh option
[  392.061437][ T8977] EXT4-fs: Ignoring removed mblk_io_submit option
[  392.077882][ T8977] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  392.158060][ T8977] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  392.170083][ T8977] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring
[  392.181325][ T8977] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  392.245934][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.344836][ T8984] loop2: detected capacity change from 0 to 2048
[  392.399962][ T8984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  392.413275][ T8984] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  392.425573][ T8973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.469590][ T8973] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.488634][ T8984] fs-verity: sha512 using implementation "sha512-avx2"
[  392.555527][    T8] usb 2-1: USB disconnect, device number 13
[  392.630510][ T5834] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  392.700093][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.843395][ T5834] usb 4-1: Using ep0 maxpacket: 32
[  392.871219][ T5834] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  392.903949][ T5834] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  392.914884][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  392.923905][ T5834] usb 4-1: Product: syz
[  392.928140][ T5834] usb 4-1: Manufacturer: syz
[  392.933489][ T5834] usb 4-1: SerialNumber: syz
[  392.941301][ T5834] usb 4-1: config 0 descriptor??
[  392.947090][ T8986] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  393.986092][ T9019] loop1: detected capacity change from 0 to 512
[  394.004642][ T9019] EXT4-fs: Ignoring removed nobh option
[  394.025713][ T9019] EXT4-fs: Ignoring removed mblk_io_submit option
[  394.053174][ T9019] EXT4-fs (loop1): orphan cleanup on readonly fs
[  394.095355][ T9019] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  394.117409][ T9019] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.868: attempt to clear invalid blocks 2 len 1
[  394.178348][ T9019] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  394.208767][ T9023] loop2: detected capacity change from 0 to 2048
[  394.257012][ T9019] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.868: invalid indirect mapped block 1819239214 (level 0)
[  394.345506][ T9019] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.868: invalid indirect mapped block 1819239214 (level 1)
[  394.375771][ T9023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  394.434824][ T9023] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  394.545542][ T9019] EXT4-fs (loop1): 1 truncate cleaned up
[  394.560909][ T9019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  394.611101][ T9023] fs-verity: sha256 using implementation "sha256-avx2"
[  394.663627][ T9023] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.869: bg 0: block 322: padding at end of block bitmap is not set
[  394.703204][ T9019] EXT4-fs: Ignoring removed nobh option
[  394.728311][ T9019] EXT4-fs: Ignoring removed mblk_io_submit option
[  394.762105][ T9019] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  394.778247][ T9023] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -28
[  394.886779][ T9019] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  394.916814][ T9019] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring
[  394.940614][ T9019] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  394.976044][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.094676][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.490963][ T5834] usb 4-1: USB disconnect, device number 25
[  396.296127][ T9053] loop3: detected capacity change from 0 to 1024
[  396.350059][ T9053] EXT4-fs: Ignoring removed nomblk_io_submit option
[  396.411998][ T9053] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  396.537443][ T9053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  396.793396][ T9062] syzkaller1: entered promiscuous mode
[  396.799085][ T9062] syzkaller1: entered allmulticast mode
[  396.879724][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.310606][   T56] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  398.510447][   T56] usb 1-1: Using ep0 maxpacket: 32
[  398.532381][   T56] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  398.567803][   T56] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  398.588981][   T56] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  398.607882][   T56] usb 1-1: Product: syz
[  398.614508][   T56] usb 1-1: Manufacturer: syz
[  398.619402][ T9074] loop3: detected capacity change from 0 to 32768
[  398.626479][   T56] usb 1-1: SerialNumber: syz
[  398.675848][   T56] usb 1-1: config 0 descriptor??
[  398.697197][ T9074] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  398.718732][ T9077] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  398.850312][ T9074] XFS (loop3): Ending clean mount
[  399.009347][ T5775] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  399.171681][ T9099] serio: Serial port ptm1
[  399.210618][ T9100] syz.1.889 uses obsolete (PF_INET,SOCK_PACKET)
[  399.735770][ T9114] Illegal XDP return value 243668743 on prog  (id 102) dev syz_tun, expect packet loss!
[  400.856137][ T9137] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9)
[  400.863459][ T9137] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  400.906176][ T9137] vhci_hcd vhci_hcd.0: Device attached
[  400.930332][ T9130] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  400.936928][ T9130] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  401.027146][ T9130] vhci_hcd vhci_hcd.0: Device attached
[  401.033048][ T9133] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6)
[  401.039969][ T9133] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  401.056754][ T9133] vhci_hcd vhci_hcd.0: Device attached
[  401.065111][ T9141] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(5)
[  401.071699][ T9141] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  401.079550][ T9141] vhci_hcd vhci_hcd.0: Device attached
[  401.179027][ T5834] usb 37-3: new high-speed USB device number 2 using vhci_hcd
[  401.307884][ T9130] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(8)
[  401.314494][ T9130] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  401.564722][ T9130] vhci_hcd vhci_hcd.0: Device attached
[  401.674105][ T9135] vhci_hcd: connection closed
[  401.678896][ T9138] vhci_hcd: connection reset by peer
[  401.716573][ T7964] vhci_hcd: stop threads
[  401.754396][ T7964] vhci_hcd: release socket
[  401.759587][ T9132] vhci_hcd: connection closed
[  401.759815][ T9142] vhci_hcd: connection closed
[  401.803239][ T9148] syzkaller1: entered promiscuous mode
[  401.819695][ T7964] vhci_hcd: disconnect device
[  401.851809][ T5827] usb 1-1: USB disconnect, device number 24
[  401.876524][ T7964] vhci_hcd: stop threads
[  401.915849][ T7964] vhci_hcd: release socket
[  401.921987][ T9148] syzkaller1: entered allmulticast mode
[  401.932931][ T7964] vhci_hcd: disconnect device
[  401.949114][ T9145] vhci_hcd: connection closed
[  401.967709][ T7964] vhci_hcd: stop threads
[  401.997799][ T7964] vhci_hcd: release socket
[  402.013053][ T7964] vhci_hcd: disconnect device
[  402.044996][ T7964] vhci_hcd: stop threads
[  402.049331][ T7964] vhci_hcd: release socket
[  402.070527][ T7964] vhci_hcd: disconnect device
[  402.113390][ T7964] vhci_hcd: stop threads
[  402.117723][ T7964] vhci_hcd: release socket
[  402.125125][ T7964] vhci_hcd: disconnect device
[  402.650313][ T5827] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  402.850377][ T5827] usb 3-1: Using ep0 maxpacket: 32
[  402.869185][ T5827] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  402.926483][ T5827] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  402.942828][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  402.966202][ T5827] usb 3-1: Product: syz
[  402.980320][ T5827] usb 3-1: Manufacturer: syz
[  403.007818][ T5827] usb 3-1: SerialNumber: syz
[  403.110383][    T8] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  403.301817][ T5827] usb 3-1: config 0 descriptor??
[  403.400515][    T8] usb 1-1: Using ep0 maxpacket: 32
[  403.416988][ T9165] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  403.534464][    T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  403.593196][    T8] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  403.641767][    T8] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  403.665089][    T8] usb 1-1: Product: syz
[  403.669341][    T8] usb 1-1: Manufacturer: syz
[  403.674904][    T8] usb 1-1: SerialNumber: syz
[  403.695680][    T8] usb 1-1: config 0 descriptor??
[  403.711506][ T9173] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  403.749349][    T8] chaoskey 1-1:0.0: Unable to register with hwrng
[  403.793312][ T9177] loop3: detected capacity change from 0 to 128
[  403.805971][ T9177] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  403.862785][ T9177] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  404.037615][ T7964] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  405.150726][ T9188] loop3: detected capacity change from 0 to 32768
[  405.206742][ T9188] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  405.385423][ T9188] XFS (loop3): Starting recovery (logdev: internal)
[  405.480774][ T9188] XFS (loop3): Ending recovery (logdev: internal)
[  405.604495][    T8] usb 3-1: USB disconnect, device number 20
[  405.796418][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'.
[  405.805524][   T23] usb 1-1: USB disconnect, device number 25
[  406.453787][ T5834] vhci_hcd: vhci_device speed not set
[  407.431399][ T5775] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  407.662852][ T9212] loop1: detected capacity change from 0 to 128
[  407.697541][ T9212] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  407.760408][ T9212] ext4 filesystem being mounted at /249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  407.800482][ T9218] printk: console [ttyGS0] disabled
[  408.001722][ T5781] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  408.192186][ T9226] loop1: detected capacity change from 0 to 128
[  408.240303][   T56] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  408.451477][   T56] usb 1-1: Using ep0 maxpacket: 32
[  408.463125][   T56] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  408.493458][   T56] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  408.504248][   T56] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  408.521118][   T56] usb 1-1: Product: syz
[  408.530610][   T56] usb 1-1: Manufacturer: syz
[  408.535294][   T56] usb 1-1: SerialNumber: syz
[  408.562946][   T56] usb 1-1: config 0 descriptor??
[  408.568844][ T9222] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  408.692317][ T9238] loop2: detected capacity change from 0 to 512
[  408.747765][ T9238] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.930: corrupted in-inode xattr: e_value out of bounds
[  408.767095][ T9238] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.930: couldn't read orphan inode 15 (err -117)
[  408.824175][ T9238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  409.077209][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.868395][ T9274] team0: entered promiscuous mode
[  410.895028][ T9274] team_slave_0: entered promiscuous mode
[  410.906513][ T9274] team_slave_1: entered promiscuous mode
[  410.941826][ T9274] batadv_slave_0: entered promiscuous mode
[  410.971073][ T9273] batadv_slave_0: left promiscuous mode
[  410.992987][ T9273] team0: left promiscuous mode
[  410.997920][ T9273] team_slave_0: left promiscuous mode
[  411.028590][ T5829] usb 1-1: USB disconnect, device number 26
[  411.047712][ T9273] team_slave_1: left promiscuous mode
[  411.452439][ T9289] loop0: detected capacity change from 0 to 2048
[  411.494363][ T9289] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  412.190626][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  412.531991][    T9] usb 2-1: Using ep0 maxpacket: 32
[  412.697983][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  412.746797][    T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  412.790566][    T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  412.826336][    T9] usb 2-1: Product: syz
[  412.856172][    T9] usb 2-1: Manufacturer: syz
[  412.874128][    T9] usb 2-1: SerialNumber: syz
[  412.945254][    T9] usb 2-1: config 0 descriptor??
[  412.970090][ T9303] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  414.660096][ T9334] loop3: detected capacity change from 0 to 128
[  414.885888][ T5829] usb 2-1: USB disconnect, device number 14
[  414.891393][   T28] audit: type=1326 audit(1785978970.017:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9335 comm="syz.2.957" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f83cc79e0d9 code=0x0
[  416.211088][ T9332] loop0: detected capacity change from 0 to 40427
[  416.275323][ T9332] F2FS-fs (loop0): heap/no_heap options were deprecated
[  416.326551][ T9332] F2FS-fs (loop0): invalid crc value
[  416.379713][ T9332] F2FS-fs (loop0): Found nat_bits in checkpoint
[  417.052478][ T9332] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  417.350588][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'.
[  417.390324][ T9362] ip6tnl1: entered promiscuous mode
[  417.528680][ T5772] syz-executor: attempt to access beyond end of device
[  417.528680][ T5772] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  417.565246][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  417.926101][   T28] audit: type=1800 audit(1785978973.057:12): pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.968" name="idProduct" dev="configfs" ino=29723 res=0 errno=0
[  418.151332][ T9360] loop3: detected capacity change from 0 to 40427
[  418.180251][ T9360] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  418.227431][ T9360] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  418.276515][ T9360] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7
[  418.330319][ T9360] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff
[  418.338790][ T9360] F2FS-fs (loop3): Image doesn't support compression
[  418.391509][ T9360] F2FS-fs (loop3): invalid crc value
[  418.427228][ T9360] F2FS-fs (loop3): Found nat_bits in checkpoint
[  418.560548][ T9360] F2FS-fs (loop3): Start checkpoint disabled!
[  418.630319][ T9360] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  418.637482][ T9360] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  418.832192][ T9360] F2FS-fs (loop3): inject evict_inode fail in f2fs_evict_inode of evict+0x4b7/0x8a0
[  419.122946][ T2932] kworker/u4:8: attempt to access beyond end of device
[  419.122946][ T2932] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  419.151566][ T2932] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  419.167419][ T2932] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  419.308772][ T9385] KVM: debugfs: duplicate directory 9385-4
[  420.079921][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.977'.
[  423.220677][   T28] audit: type=1800 audit(1785978978.347:13): pid=9437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.990" name="qw_sign" dev="configfs" ino=30730 res=0 errno=0
[  423.873751][ T9449] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  424.448470][ T9447] loop0: detected capacity change from 0 to 32768
[  424.513380][ T9447] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.992 (9447)
[  424.579701][ T9447] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  424.600938][ T9447] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  424.632421][ T9447] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  424.669349][ T9447] BTRFS info (device loop0): use zstd compression, level 3
[  424.703102][ T9447] BTRFS info (device loop0): using free space tree
[  424.890461][ T9447] BTRFS info (device loop0): enabling ssd optimizations
[  424.918322][ T9447] BTRFS info (device loop0): auto enabling async discard
[  425.128247][   T28] audit: type=1800 audit(1785978980.257:14): pid=9447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.992" name="file1" dev="loop0" ino=260 res=0 errno=0
[  425.670506][ T5772] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  426.037387][ T9492] netlink: 'syz.0.998': attribute type 1 has an invalid length.
[  426.250995][ T9492] 8021q: adding VLAN 0 to HW filter on device bond1
[  426.371302][ T9496] bond1: (slave geneve2): making interface the new active one
[  426.404460][ T9496] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  427.083193][ T9512] loop0: detected capacity change from 0 to 128
[  427.269510][ T9512] syz.0.1005: attempt to access beyond end of device
[  427.269510][ T9512] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128
[  428.976986][ T9527] loop0: detected capacity change from 0 to 32768
[  429.062515][ T9527] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  429.215585][ T9527] XFS (loop0): Ending clean mount
[  429.340551][ T5829] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  429.494385][ T5772] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  429.564952][ T5829] usb 4-1: Using ep0 maxpacket: 32
[  429.591767][ T5829] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  429.635905][ T5829] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  429.660845][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  429.700494][ T5829] usb 4-1: Product: syz
[  429.704768][ T5829] usb 4-1: Manufacturer: syz
[  429.709405][ T5829] usb 4-1: SerialNumber: syz
[  429.751594][ T5829] usb 4-1: config 0 descriptor??
[  429.766436][ T9536] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  430.239112][ T9555] loop2: detected capacity change from 0 to 1024
[  430.271916][ T9555] EXT4-fs: Ignoring removed bh option
[  430.281695][ T9555] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  430.384268][ T9555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  430.463529][   T28] audit: type=1800 audit(1785978985.597:15): pid=9555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1017" name="bus" dev="loop2" ino=18 res=0 errno=0
[  430.551745][   T28] audit: type=1804 audit(1785978985.627:16): pid=9555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1017" name="/newroot/280/file1/bus" dev="loop2" ino=18 res=1 errno=0
[  430.705906][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.137477][ T5827] usb 4-1: USB disconnect, device number 26
[  431.165403][ T9567] loop0: detected capacity change from 0 to 128
[  431.195519][ T9567] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  431.208882][ T9567] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  432.196809][ T5772] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  434.561379][ T9620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  434.573644][ T9620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  434.592119][ T9620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  434.601377][ T9620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  434.611800][ T9622] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  434.621355][ T9622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  434.973494][ T2932] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.133690][ T2932] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.296620][ T2932] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.310269][ T5834] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  435.335885][ T9618] chnl_net:caif_netlink_parms(): no params data found
[  435.393377][ T9622] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  435.443953][ T2932] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.540435][ T5834] usb 1-1: Using ep0 maxpacket: 8
[  435.555459][ T5834] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  435.581636][ T5834] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  435.611880][ T5834] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  435.627826][ T5834] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  435.649244][ T5834] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  435.662993][ T5834] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  435.672664][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.769923][ T9618] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.788483][ T9618] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.803072][ T9618] bridge_slave_0: entered allmulticast mode
[  435.812211][ T9618] bridge_slave_0: entered promiscuous mode
[  435.866929][ T9618] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.877288][ T9618] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.896342][ T9618] bridge_slave_1: entered allmulticast mode
[  435.903569][ T5834] usb 1-1: usb_control_msg returned -32
[  435.909255][ T5834] usbtmc 1-1:16.0: can't read capabilities
[  435.917376][ T9618] bridge_slave_1: entered promiscuous mode
[  436.036553][ T9618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.067169][ T9618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.157296][   T27] usb 1-1: USB disconnect, device number 27
[  436.315747][ T9618] team0: Port device team_slave_0 added
[  436.325338][ T9618] team0: Port device team_slave_1 added
[  436.491430][ T9618] batman_adv: batadv0: Adding interface: batadv_slave_0
[  436.498476][ T9618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.544164][ T9618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  436.590280][   T56] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  436.622791][ T9618] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.629909][ T9618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.670419][ T9622] Bluetooth: hci3: command tx timeout
[  436.682032][ T9618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  436.820351][   T56] usb 3-1: Using ep0 maxpacket: 32
[  436.833179][   T56] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  436.862812][   T56] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  436.879313][   T56] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  436.898431][   T56] usb 3-1: Product: syz
[  436.908773][   T56] usb 3-1: Manufacturer: syz
[  436.940337][   T56] usb 3-1: SerialNumber: syz
[  436.961428][   T56] usb 3-1: config 0 descriptor??
[  436.967945][ T9653] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  437.087417][ T9618] hsr_slave_0: entered promiscuous mode
[  437.129882][ T9618] hsr_slave_1: entered promiscuous mode
[  437.210343][ T9618] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  437.237535][ T9618] Cannot create hsr debugfs directory
[  438.075128][ T9660] loop3: detected capacity change from 0 to 32768
[  438.284470][ T9660] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  438.591241][ T9660] XFS (loop3): Ending clean mount
[  438.752667][ T9622] Bluetooth: hci3: command tx timeout
[  438.844415][ T9660] XFS (loop3): User initiated shutdown received.
[  438.880454][ T9660] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  438.918803][ T9660] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  439.031911][ T5775] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  439.555623][ T9695] loop0: detected capacity change from 0 to 256
[  439.833411][ T2932] hsr_slave_0: left promiscuous mode
[  439.866143][ T2932] hsr_slave_1: left promiscuous mode
[  439.903487][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  439.931686][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_0
[  439.976226][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  440.001770][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_1
[  440.031592][ T2932] bridge_slave_1: left allmulticast mode
[  440.048638][ T2932] bridge_slave_1: left promiscuous mode
[  440.072214][ T2932] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.117943][ T2932] bridge_slave_0: left allmulticast mode
[  440.130686][ T2932] bridge_slave_0: left promiscuous mode
[  440.157132][ T2932] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.267164][ T2932] veth1_macvtap: left promiscuous mode
[  440.288966][ T2932] veth0_macvtap: left promiscuous mode
[  440.303305][ T2932] veth1_vlan: left promiscuous mode
[  440.313096][ T2932] veth0_vlan: left promiscuous mode
[  440.356918][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  440.363994][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  440.832067][ T9622] Bluetooth: hci3: command tx timeout
[  441.119232][ T9727] loop3: detected capacity change from 0 to 7
[  441.128749][ T9727] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  441.147557][ T9727] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  441.156206][ T9727] Dev loop3: unable to read RDB block 7
[  441.169531][ T9727]  loop3: AHDI p2 p4
[  441.173992][ T9727] loop3: partition table partially beyond EOD, truncated
[  441.182704][ T9727] loop3: p4 start 150997256 is beyond EOD, truncated
[  441.983055][ T2932] team0 (unregistering): Port device team_slave_1 removed
[  442.075733][ T2932] team0 (unregistering): Port device team_slave_0 removed
[  442.171890][ T2932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  442.244177][ T2932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  442.868162][ T2932] bond0 (unregistering): Released all slaves
[  442.916705][ T9622] Bluetooth: hci3: command tx timeout
[  443.276023][ T9750] netlink: 'syz.0.1055': attribute type 1 has an invalid length.
[  443.321869][ T9750] bond2: entered promiscuous mode
[  443.327412][ T9750] 8021q: adding VLAN 0 to HW filter on device bond2
[  443.499868][ T9750] 8021q: adding VLAN 0 to HW filter on device bond2
[  443.512739][ T9750] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[  443.523480][ T9750] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  443.538983][ T9750] bond2: (slave vti0): making interface the new active one
[  443.548374][ T9750] vti0: entered promiscuous mode
[  443.557220][ T9750] bond2: (slave vti0): Enslaving as an active interface with an up link
[  443.578003][ T9618] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  443.596698][ T9618] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  443.616960][ T9618] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  443.722394][ T9618] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  444.112058][ T9618] 8021q: adding VLAN 0 to HW filter on device bond0
[  444.188631][ T9618] 8021q: adding VLAN 0 to HW filter on device team0
[  444.214246][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.221623][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  444.250956][ T5827] usb 3-1: USB disconnect, device number 21
[  444.276455][  T140] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.283712][  T140] bridge0: port 2(bridge_slave_1) entered forwarding state
[  444.311458][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1059'.
[  444.546072][ T2932] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  445.023118][ T9618] 8021q: adding VLAN 0 to HW filter on device batadv0
[  445.810198][ T9618] veth0_vlan: entered promiscuous mode
[  445.838036][ T9618] veth1_vlan: entered promiscuous mode
[  445.909644][ T9618] veth0_macvtap: entered promiscuous mode
[  445.940070][ T9618] veth1_macvtap: entered promiscuous mode
[  445.986993][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  446.000087][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.014929][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  446.025873][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.042586][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  446.062322][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.091985][ T9618] batman_adv: batadv0: Interface activated: batadv_slave_0
[  446.117618][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  446.130975][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.141264][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  446.159611][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.173092][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  446.186196][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.206437][ T9618] batman_adv: batadv0: Interface activated: batadv_slave_1
[  446.244986][ T9618] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.256648][ T9618] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.272998][ T9618] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.286653][ T9618] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  446.921814][ T9824] netlink: 'syz.2.1069': attribute type 1 has an invalid length.
[  446.954049][ T9824] 8021q: adding VLAN 0 to HW filter on device bond1
[  446.970489][   T23] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  447.006750][ T9824] 8021q: adding VLAN 0 to HW filter on device team0
[  447.024031][ T9824] bond1: (slave team0): Enslaving as a backup interface with an up link
[  447.118291][ T9827] loop2: detected capacity change from 0 to 512
[  447.142606][ T9827] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.1070: corrupted in-inode xattr: invalid ea_ino
[  447.161171][   T23] usb 4-1: Using ep0 maxpacket: 32
[  447.167015][ T9827] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1070: couldn't read orphan inode 15 (err -117)
[  447.183917][ T9827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  447.196394][   T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  447.222627][   T23] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  447.240348][   T23] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  447.262328][   T23] usb 4-1: Product: syz
[  447.266633][   T23] usb 4-1: Manufacturer: syz
[  447.284067][   T23] usb 4-1: SerialNumber: syz
[  447.313998][ T9770] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  447.327352][   T23] usb 4-1: config 0 descriptor??
[  447.337369][ T9822] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  447.444586][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.483813][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.537157][ T7964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.614009][ T7964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.647423][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.678637][ T9832] syzkaller1: entered promiscuous mode
[  447.706099][ T9832] syzkaller1: entered allmulticast mode
[  449.620653][   T23] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  449.847128][   T23] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  449.870567][    T9] usb 4-1: USB disconnect, device number 27
[  449.893590][   T23] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  449.949328][   T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  450.003608][ T9870] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  450.018347][   T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  450.050206][   T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  450.082684][   T23] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  450.100406][   T23] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  450.108498][   T23] usb 3-1: Product: syz
[  450.164793][   T23] usb 3-1: Manufacturer: syz
[  450.184704][   T23] cdc_wdm 3-1:1.0: skipping garbage
[  450.197600][   T23] cdc_wdm 3-1:1.0: skipping garbage
[  450.205343][   T23] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  450.228083][   T23] cdc_wdm 3-1:1.0: Unknown control protocol
[  452.361082][ T6302] usb 3-1: USB disconnect, device number 22
[  452.526941][ T9943] block device autoloading is deprecated and will be removed.
[  453.764873][ T9961] loop3: detected capacity change from 0 to 32768
[  453.809580][ T9961] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1095 (9961)
[  453.902576][ T9961] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  453.948800][ T9961] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  453.977028][ T9961] BTRFS info (device loop3): setting nodatasum
[  454.009981][ T9961] BTRFS info (device loop3): force zlib compression, level 3
[  454.064377][ T9961] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  454.084457][ T9961] BTRFS info (device loop3): use lzo compression, level 0
[  454.144884][ T9961] BTRFS info (device loop3): turning on flush-on-commit
[  454.191989][ T9961] BTRFS info (device loop3): enabling auto defrag
[  454.198936][ T9961] BTRFS info (device loop3): max_inline at 4096
[  454.240214][ T9961] BTRFS info (device loop3): using free space tree
[  454.336136][ T9977] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  454.533745][ T9961] BTRFS info (device loop3): enabling ssd optimizations
[  455.207135][T10018] jffs2: notice: (10018) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  455.479467][ T5775] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  456.350264][   T27] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  456.550701][   T27] usb 3-1: Using ep0 maxpacket: 32
[  456.563234][   T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  456.609958][   T27] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  456.654533][   T27] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  456.682073][   T27] usb 3-1: Product: syz
[  456.700266][   T27] usb 3-1: Manufacturer: syz
[  456.716203][   T27] usb 3-1: SerialNumber: syz
[  456.739201][   T27] usb 3-1: config 0 descriptor??
[  456.767050][T10043] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  456.781483][T10069] loop4: detected capacity change from 0 to 512
[  456.888794][T10069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  456.954664][T10069] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.196654][ T9618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.367348][T10080] loop4: detected capacity change from 0 to 128
[  457.420623][T10080] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  457.449641][T10080] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  457.568989][T10080] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  457.619651][T10080] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  457.678780][T10085] loop3: detected capacity change from 0 to 2048
[  457.733809][ T9618] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  457.759818][T10085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  457.916835][T10085] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  457.995658][T10085] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  458.021054][T10085] EXT4-fs (loop3): This should not happen!! Data will be lost
[  458.021054][T10085] 
[  458.050852][T10085] EXT4-fs (loop3): Total free blocks count 0
[  458.067880][T10085] EXT4-fs (loop3): Free/Dirty block details
[  458.094518][T10085] EXT4-fs (loop3): free_blocks=4096
[  458.108525][T10085] EXT4-fs (loop3): dirty_blocks=64
[  458.119471][T10085] EXT4-fs (loop3): Block reservation details
[  458.134260][T10085] EXT4-fs (loop3): i_reserved_data_blocks=4
[  458.216988][T10085] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  459.139666][   T23] usb 3-1: USB disconnect, device number 23
[  459.944328][T10115] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  459.967955][T10115] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  460.044327][T10127] gretap0: entered promiscuous mode
[  460.351258][T10131] loop2: detected capacity change from 0 to 512
[  460.637922][T10131] EXT4-fs: quotafile must be on filesystem root
[  460.902932][T10131] Mass Storage Function, version: 2009/09/11
[  460.945497][T10131] LUN: removable file: (no medium)
[  461.019987][   T28] audit: type=1800 audit(1785979016.137:17): pid=10131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1127" name="file" dev="configfs" ino=34541 res=0 errno=0
[  461.065535][T10131] mass_storage.0/lun.0: unable to open backing file: file0
[  461.421181][   T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  461.624299][   T27] usb 5-1: Using ep0 maxpacket: 32
[  461.638533][   T27] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  461.676913][   T27] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  461.696537][   T27] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  461.720231][   T27] usb 5-1: Product: syz
[  461.724483][   T27] usb 5-1: Manufacturer: syz
[  461.770674][   T27] usb 5-1: SerialNumber: syz
[  461.787231][   T27] usb 5-1: config 0 descriptor??
[  461.811474][T10139] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  461.885601][T10155] jffs2: notice: (10155) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  462.446765][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'.
[  462.740386][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'.
[  463.837769][T10177] loop2: detected capacity change from 0 to 512
[  464.009862][T10177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.169687][ T5765] udevd[5765]: incorrect ext4dev checksum on /dev/loop2
[  464.251996][ T5765] udevd[5765]: incorrect ext4dev checksum on /dev/loop2
[  464.304028][T10177] EXT4-fs error (device loop2): ext4_resize_begin:62: comm syz.2.1140: resize_inode disabled but reserved GDT blocks non-zero
[  464.326761][   T27] usb 5-1: USB disconnect, device number 2
[  464.536722][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.397609][T10222] loop0: detected capacity change from 0 to 512
[  465.448390][T10222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  465.489179][T10222] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  465.823208][T10231] ip_tables: iptables: counters copy to user failed while replacing table
[  466.480627][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.636798][T10207] loop4: detected capacity change from 0 to 32768
[  467.060923][ T5829] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  467.316222][ T5829] usb 3-1: Using ep0 maxpacket: 32
[  467.355093][ T5829] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  467.430651][ T5829] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  467.518895][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  467.527722][ T5829] usb 3-1: Product: syz
[  467.536120][ T5829] usb 3-1: Manufacturer: syz
[  467.541158][ T5829] usb 3-1: SerialNumber: syz
[  467.566919][ T5829] usb 3-1: config 0 descriptor??
[  467.587983][T10237] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  468.235493][ T5829] usb 3-1: USB disconnect, device number 24
[  468.741078][T10270] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  470.776038][T10324] FAULT_FLAG_ALLOW_RETRY missing 801
[  470.790354][T10324] CPU: 1 PID: 10324 Comm: syz.3.1175 Not tainted syzkaller #0
[  470.798089][T10324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  470.808197][T10324] Call Trace:
[  470.811562][T10324]  <TASK>
[  470.814591][T10324]  dump_stack_lvl+0x18c/0x250
[  470.819407][T10324]  ? show_regs_print_info+0x20/0x20
[  470.824682][T10324]  ? load_image+0x420/0x420
[  470.829261][T10324]  ? assert_fault_locked+0x17f/0x3a0
[  470.834583][T10324]  handle_userfault+0x11e4/0x13b0
[  470.839635][T10324]  ? lockdep_hardirqs_on+0x98/0x150
[  470.844885][T10324]  ? userfaultfd_wp_unpopulated+0xa0/0xa0
[  470.850644][T10324]  ? do_raw_spin_unlock+0x121/0x230
[  470.855913][T10324]  ? free_unref_page+0x190/0x2e0
[  470.860922][T10324]  handle_mm_fault+0x3ce9/0x4a50
[  470.865892][T10324]  ? handle_mm_fault+0xe6/0x4a50
[  470.870871][T10324]  ? numa_migrate_prep+0x350/0x350
[  470.876136][T10324]  ? follow_page_pte+0x6dd/0x1ae0
[  470.881248][T10324]  ? pmd_lock+0x60/0x60
[  470.885463][T10324]  __get_user_pages+0x604/0x1580
[  470.890560][T10324]  ? populate_vma_page_range+0x380/0x380
[  470.896270][T10324]  populate_vma_page_range+0x2c1/0x380
[  470.901784][T10324]  ? fixup_user_fault+0x750/0x750
[  470.906952][T10324]  mprotect_fixup+0x9a3/0xcd0
[  470.911712][T10324]  ? change_protection+0x31e0/0x31e0
[  470.917048][T10324]  ? apparmor_file_mprotect+0xfe/0x120
[  470.922593][T10324]  ? bpf_lsm_file_mprotect+0x9/0x10
[  470.927858][T10324]  do_mprotect_pkey+0x7c3/0xcc0
[  470.932769][T10324]  ? prot_none_test+0x10/0x10
[  470.937504][T10324]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  470.943548][T10324]  __x64_sys_mprotect+0x80/0x90
[  470.948450][T10324]  do_syscall_64+0x55/0xb0
[  470.952910][T10324]  ? clear_bhb_loop+0x40/0x90
[  470.957751][T10324]  ? clear_bhb_loop+0x40/0x90
[  470.962491][T10324]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  470.968445][T10324] RIP: 0033:0x7f503179e0d9
[  470.972963][T10324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  470.992687][T10324] RSP: 002b:00007f5032627028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a
[  471.001226][T10324] RAX: ffffffffffffffda RBX: 00007f5031a25fa0 RCX: 00007f503179e0d9
[  471.009335][T10324] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000
[  471.017345][T10324] RBP: 00007f5031835024 R08: 0000000000000000 R09: 0000000000000000
[  471.025358][T10324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  471.033382][T10324] R13: 00007f5031a26038 R14: 00007f5031a25fa0 R15: 00007fff46920a58
[  471.041411][T10324]  </TASK>
[  471.098473][   T28] audit: type=1326 audit(1785979026.227:18): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.0.1176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc2879e0d9 code=0x0
[  471.689311][T10347] loop4: detected capacity change from 0 to 128
[  471.752368][T10347] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  471.825884][T10352] capability: warning: `syz.0.1181' uses 32-bit capabilities (legacy support in use)
[  472.729422][T10360] loop4: detected capacity change from 0 to 8192
[  472.755107][T10360] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  472.970339][ T5827] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  473.184638][ T5827] usb 3-1: Using ep0 maxpacket: 32
[  473.202439][ T5827] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  473.225907][ T5827] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  473.242060][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  473.260783][ T5827] usb 3-1: Product: syz
[  473.268795][ T5827] usb 3-1: Manufacturer: syz
[  473.280879][ T5827] usb 3-1: SerialNumber: syz
[  473.305889][ T5827] usb 3-1: config 0 descriptor??
[  473.321527][T10370] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  473.450058][T10364] loop3: detected capacity change from 0 to 40427
[  473.500959][T10364] F2FS-fs (loop3): invalid crc value
[  473.525488][T10364] F2FS-fs (loop3): Found nat_bits in checkpoint
[  473.753782][T10364] F2FS-fs (loop3): Start checkpoint disabled!
[  473.808227][T10364] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  474.395994][ T6049] kworker/u4:10: attempt to access beyond end of device
[  474.395994][ T6049] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  474.448679][ T6049] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  474.476446][ T6049] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  474.740799][   T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  474.840884][ T5827] usb 3-1: USB disconnect, device number 25
[  475.009952][   T23] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  475.040282][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.538307][T10379] loop0: detected capacity change from 0 to 65536
[  475.602229][ T5765] I/O error, dev loop0, sector 65408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  475.896910][   T23] gud 5-1:1.0: Failed to get connectors (error=-5)
[  476.693763][   T23] gud: probe of 5-1:1.0 failed with error -5
[  477.180925][T10437] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  477.319136][T10441] loop2: detected capacity change from 0 to 512
[  477.329248][T10441] EXT4-fs (loop2): bad block size 8192
[  477.396580][ T5765] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  478.085897][T10455] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[  478.497010][    T9] usb 5-1: USB disconnect, device number 3
[  478.831001][T10464] loop2: detected capacity change from 0 to 64
[  480.047819][    T8] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  480.270587][    T8] usb 4-1: Using ep0 maxpacket: 8
[  480.282316][    T8] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  480.327242][    T8] usb 4-1: config 179 has no interface number 0
[  480.340569][    T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  480.380810][    T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  480.407558][    T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  480.449517][    T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  480.480885][    T8] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  480.510399][    T8] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  480.519529][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.556115][T10497] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  480.583343][T10483] loop0: detected capacity change from 0 to 32768
[  480.661750][T10483] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  480.821524][T10483] XFS (loop0): Ending clean mount
[  480.853732][T10483] XFS (loop0): Quotacheck needed: Please wait.
[  480.921926][T10497] loop3: detected capacity change from 0 to 1024
[  481.096856][T10483] XFS (loop0): Quotacheck: Done.
[  481.442642][ T5827] usb 4-1: USB disconnect, device number 28
[  481.442716][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  481.457170][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  481.484100][ T5772] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  481.873629][    T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  482.074772][    T8] usb 5-1: Using ep0 maxpacket: 16
[  482.108356][    T8] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  482.126707][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.146250][    T8] usb 5-1: config 0 descriptor??
[  482.183398][    T8] gspca_main: sonixj-2.14.0 probing 0471:0327
[  483.638611][T10578] netlink: 'syz.2.1227': attribute type 5 has an invalid length.
[  484.158724][T10592] zonefs (nullb0) ERROR: Not a zoned block device
[  484.231278][    T8] gspca_sonixj: reg_r err -71
[  484.236253][    T8] sonixj: probe of 5-1:0.0 failed with error -71
[  484.253944][    T8] usb 5-1: USB disconnect, device number 4
[  484.640310][   T27] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  484.862293][   T27] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  484.885652][   T27] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  484.920238][   T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  484.929333][   T27] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  484.962885][   T27] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  484.980453][   T27] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  484.988556][   T27] usb 1-1: Product: syz
[  485.001402][   T27] usb 1-1: Manufacturer: syz
[  485.020918][T10597] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  485.042924][   T27] cdc_wdm 1-1:1.0: skipping garbage
[  485.050175][   T27] cdc_wdm 1-1:1.0: skipping garbage
[  485.060085][   T27] cdc_wdm: probe of 1-1:1.0 failed with error -22
[  485.339185][   T27] usb 1-1: USB disconnect, device number 28
[  486.730708][T10632] loop3: detected capacity change from 0 to 128
[  486.819580][T10632] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  486.881035][   T28] audit: type=1800 audit(1785979042.007:19): pid=10632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1246" name="file2" dev="loop3" ino=1048718 res=0 errno=0
[  486.937018][T10632] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  486.998246][T10632] FAT-fs (loop3): Filesystem has been set read-only
[  487.020335][T10632] syz.3.1246: attempt to access beyond end of device
[  487.020335][T10632] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  487.070643][T10632] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  487.096352][T10632] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  487.124341][T10632] syz.3.1246: attempt to access beyond end of device
[  487.124341][T10632] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  490.515245][T10700] loop4: detected capacity change from 0 to 2048
[  490.556447][T10700] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  491.409184][T10715] loop4: detected capacity change from 0 to 2048
[  491.459852][T10715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  491.499261][T10715] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  491.620218][T10715] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1262: bg 0: block 368: padding at end of block bitmap is not set
[  491.692940][T10715] fs-verity (loop4, inode 13): Error -28 writing Merkle tree block 1
[  491.740424][T10715] fs-verity (loop4, inode 13): Error -28 building Merkle tree
[  492.069486][ T9618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.964682][T10731] loop4: detected capacity change from 0 to 32768
[  494.006477][T10731] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1264 (10731)
[  494.106452][T10731] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  494.180402][T10731] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  494.228150][T10731] BTRFS info (device loop4): using free space tree
[  494.511484][T10731] BTRFS info (device loop4): enabling ssd optimizations
[  494.518763][T10731] BTRFS info (device loop4): auto enabling async discard
[  495.746625][ T9618] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  497.935516][T10843] loop2: detected capacity change from 0 to 512
[  497.950074][T10843] EXT4-fs: Ignoring removed i_version option
[  497.976169][T10843] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  498.026214][T10843] EXT4-fs (loop2): 1 truncate cleaned up
[  498.076085][T10843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  498.192720][T10843] EXT4-fs error (device loop2) in ext4_setattr:5683: Corrupt filesystem
[  498.304961][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.015237][T10866] vivid-007: =================  START STATUS  =================
[  499.041187][T10866] vivid-007: Enable Output Cropping: true
[  499.080199][T10866] vivid-007: Enable Output Composing: true
[  499.101618][T10866] vivid-007: Enable Output Scaler: true
[  499.117616][T10866] vivid-007: Tx RGB Quantization Range: Automatic
[  499.140574][T10866] vivid-007: Transmit Mode: HDMI
[  499.176681][T10866] vivid-007: Display Present: true inactive
[  499.189457][T10866] vivid-007: Hotplug Present: 0x00000001
[  499.218566][T10866] vivid-007: RxSense Present: 0x00000001
[  499.245401][T10866] vivid-007: EDID Present: 0x00000001
[  499.261993][T10866] vivid-007: ==================  END STATUS  ==================
[  499.843277][T10881] loop4: detected capacity change from 0 to 2048
[  499.915595][T10881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  499.943813][T10881] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  500.569260][ T9618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.796322][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  501.803605][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  502.075542][   T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  502.107170][T10931] loop4: detected capacity change from 0 to 512
[  502.151204][   T56] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  502.172992][T10931] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  502.214359][T10931] EXT4-fs (loop4): invalid journal inode
[  502.223272][T10933] loop3: detected capacity change from 0 to 512
[  502.245874][T10931] EXT4-fs (loop4): can't get journal size
[  502.290922][T10931] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.1311: blocks 4-4 from inode overlap system zone
[  502.326382][T10933] EXT4-fs: Ignoring removed oldalloc option
[  502.343064][T10933] EXT4-fs: inline encryption not supported
[  502.374597][T10931] EXT4-fs (loop4): failed to initialize system zone (-117)
[  502.400701][T10931] EXT4-fs (loop4): mount failed
[  502.406561][T10933] EXT4-fs: Mount option(s) incompatible with ext2
[  502.616293][T10940] loop3: detected capacity change from 0 to 2048
[  503.496608][T10950] loop0: detected capacity change from 0 to 512
[  503.621663][    T8] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  503.705194][    T8] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  503.814052][T10950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  504.009096][T10950] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.1316: Unimplemented hash flags: 0x0001
[  504.132163][T10950] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1316: Corrupt directory, running e2fsck is recommended
[  504.246712][T10962] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.1316: Unimplemented hash flags: 0x0001
[  504.262426][T10962] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1316: Corrupt directory, running e2fsck is recommended
[  504.282354][T10963] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.1316: Unimplemented hash flags: 0x0001
[  504.339871][T10963] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1316: Corrupt directory, running e2fsck is recommended
[  504.360596][T10950] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.1316: Unimplemented hash flags: 0x0001
[  504.384022][T10950] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1316: Corrupt directory, running e2fsck is recommended
[  504.485798][T10962] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.1316: Unimplemented hash flags: 0x0001
[  504.507855][T10962] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1316: Corrupt directory, running e2fsck is recommended
[  504.628997][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  510.282511][   T28] audit: type=1800 audit(1785979065.417:20): pid=11061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1342" name="file0" dev="fuse" ino=0 res=0 errno=0
[  510.341448][T11063] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1343'.
[  510.486947][T11065] loop2: detected capacity change from 0 to 256
[  511.074001][T11074] loop3: detected capacity change from 0 to 1024
[  511.112631][T11074] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  511.154402][T11074] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  511.193818][T11074] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  511.249385][T11074] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #3: comm syz.3.1348: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0)
[  511.331792][T11074] EXT4-fs (loop3): no journal found
[  511.384236][T11074] EXT4-fs (loop3): can't get journal size
[  511.423319][T11074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  511.511560][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.342337][T11094] input: syz0 as /devices/virtual/input/input16
[  513.292888][T11107] binder: 11106:11107 ioctl c0306201 200000000680 returned -14
[  513.498525][T11112] binder: 11111:11112 ioctl c0306201 200000000580 returned -14
[  513.868234][T11123] loop3: detected capacity change from 0 to 128
[  513.903035][T11123] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  513.953677][T11123] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  514.643652][T11133] loop2: detected capacity change from 0 to 512
[  514.831594][ T5765] udevd[5765]: incorrect ext4 checksum on /dev/loop2
[  515.669429][T11141] loop0: detected capacity change from 0 to 32768
[  515.700531][T11141] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop0 scanned by syz.0.1366 (11141)
[  515.739206][T11141] BTRFS info (device loop0): first mount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1
[  515.759559][T11141] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  515.769131][T11141] BTRFS info (device loop0): using free space tree
[  515.921571][T11141] BTRFS info (device loop0): enabling ssd optimizations
[  515.928660][T11141] BTRFS info (device loop0): auto enabling async discard
[  516.378663][ T5772] BTRFS info (device loop0): last unmount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1
[  518.305627][   T28] audit: type=1800 audit(1785979073.437:21): pid=11199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1380" name="attr_allow_any_host" dev="configfs" ino=40685 res=0 errno=0
[  518.356491][   T28] audit: type=1800 audit(1785979073.467:22): pid=11199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1380" name="addr_trtype" dev="configfs" ino=40691 res=0 errno=0
[  518.586260][   T23] nvmet: creating nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:94ddf0ba-fd6f-4205-8f0a-adcb20b3a7a0.
[  518.656943][T11199] nvme nvme0: creating 2 I/O queues.
[  518.718925][T11199] nvme nvme0: new ctrl: "testnqn"
[  519.202637][T11207] loop3: detected capacity change from 0 to 1024
[  519.466307][T11207] EXT4-fs: Ignoring removed orlov option
[  519.702324][T11207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  520.174163][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.391410][T11218] loop3: detected capacity change from 0 to 8
[  524.319454][T11249] loop4: detected capacity change from 0 to 512
[  524.348356][T11249] EXT4-fs: Ignoring removed i_version option
[  524.355350][T11249] EXT4-fs: Ignoring removed oldalloc option
[  524.430836][T11249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  524.811681][T11251] loop2: detected capacity change from 0 to 32768
[  524.839964][T11251] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1394 (11251)
[  524.896075][T11251] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  524.925054][ T9618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.932327][T11251] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  525.004946][T11251] BTRFS info (device loop2): using free space tree
[  525.199501][T11251] BTRFS info (device loop2): enabling ssd optimizations
[  525.215837][T11251] BTRFS info (device loop2): auto enabling async discard
[  525.826491][ T5779] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  527.374302][T11302] syzkaller0: entered promiscuous mode
[  527.380267][T11302] syzkaller0: entered allmulticast mode
[  527.843850][   T28] audit: type=1800 audit(1785979082.967:23): pid=11316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1409" name="c_chmask" dev="configfs" ino=40916 res=0 errno=0
[  528.646696][T11319] loop0: detected capacity change from 0 to 32768
[  528.679682][T11319] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1410 (11319)
[  528.759352][T11319] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  528.774700][T11319] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  528.804184][T11319] BTRFS info (device loop0): using free space tree
[  529.108202][T11319] BTRFS info (device loop0): enabling ssd optimizations
[  529.150579][T11319] BTRFS info (device loop0): auto enabling async discard
[  530.077291][T11319] loop0: detected capacity change from 32768 to 64
[  530.088002][   T48] kworker/u4:3: attempt to access beyond end of device
[  530.088002][   T48] loop0: rw=67112961, sector=10456, nr_sectors = 8 limit=64
[  530.127662][   T48] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  530.158015][   T48] kworker/u4:3: attempt to access beyond end of device
[  530.158015][   T48] loop0: rw=67112961, sector=10464, nr_sectors = 8 limit=64
[  530.173660][   T48] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[  530.185461][   T48] kworker/u4:3: attempt to access beyond end of device
[  530.185461][   T48] loop0: rw=67112961, sector=10472, nr_sectors = 8 limit=64
[  530.200802][   T48] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0
[  530.214534][   T48] kworker/u4:3: attempt to access beyond end of device
[  530.214534][   T48] loop0: rw=67112961, sector=10480, nr_sectors = 8 limit=64
[  530.229357][   T48] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0
[  530.244650][   T48] kworker/u4:3: attempt to access beyond end of device
[  530.244650][   T48] loop0: rw=67112961, sector=10488, nr_sectors = 8 limit=64
[  530.260025][   T48] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 5, rd 0, flush 0, corrupt 0, gen 0
[  530.300419][   T48] kworker/u4:3: attempt to access beyond end of device
[  530.300419][   T48] loop0: rw=67112961, sector=10496, nr_sectors = 8 limit=64
[  530.337522][   T48] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 6, rd 0, flush 0, corrupt 0, gen 0
[  530.353987][T11361] BTRFS error (device loop0: state A): Transaction aborted (error -5)
[  530.363870][T11361] BTRFS: error (device loop0: state A) in __btrfs_free_extent:3133: errno=-5 IO failure
[  530.410165][T11361] BTRFS info (device loop0: state EA): forced readonly
[  530.417161][T11361] BTRFS error (device loop0: state EA): failed to run delayed ref for logical 5353472 num_bytes 4096 type 176 action 2 ref_mod 1: -5
[  530.495297][T11361] BTRFS: error (device loop0: state EA) in btrfs_run_delayed_refs:2201: errno=-5 IO failure
[  530.877904][ T5772] BTRFS info (device loop0: state EA): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  536.599174][T11421] Bluetooth: hci0: invalid length 0, exp 2 for type 7
[  537.315678][T11429] loop4: detected capacity change from 0 to 32768
[  537.374303][T11429] JBD2: Ignoring recovery information on journal
[  537.468667][T11429] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  537.647964][   T28] audit: type=1804 audit(1785979092.777:24): pid=11429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1434" name="/newroot/93/bus/file1" dev="loop4" ino=17059 res=1 errno=0
[  537.760296][ T5829] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  537.771888][   T28] audit: type=1804 audit(1785979092.907:25): pid=11429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1434" name="/newroot/93/bus/bus" dev="loop4" ino=17058 res=1 errno=0
[  537.929787][ T9618] ocfs2: Unmounting device (7,4) on (node local)
[  539.117378][ T5829] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  539.132397][ T5829] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  539.746137][T11455] loop0: detected capacity change from 0 to 1024
[  539.899649][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.910491][ T5829] usb 4-1: config 0 descriptor??
[  539.919687][ T5829] pwc: Askey VC010 type 2 USB webcam detected.
[  540.136117][ T5829] pwc: send_video_command error -71
[  540.144221][ T5829] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  540.156887][ T5829] Philips webcam: probe of 4-1:0.0 failed with error -71
[  540.182076][ T5829] usb 4-1: USB disconnect, device number 29
[  540.193686][T11463] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  540.229149][T11463] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  540.240576][T11463] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[  540.248992][T11463] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[  540.259133][T11463] kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[  540.269757][T11463] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  540.282696][T11463] kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  540.536998][T11474] geneve3: entered promiscuous mode
[  540.780291][ T5829] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  540.993284][ T5829] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  541.017051][ T5829] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  541.044501][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.082500][ T5829] usb 4-1: config 0 descriptor??
[  541.114962][ T5829] pwc: Askey VC010 type 2 USB webcam detected.
[  541.541285][ T5829] pwc: recv_control_msg error -32 req 02 val 2b00
[  541.556893][ T5829] pwc: recv_control_msg error -32 req 02 val 2700
[  541.569844][ T5829] pwc: recv_control_msg error -32 req 02 val 2c00
[  541.587692][ T5829] pwc: recv_control_msg error -32 req 04 val 1000
[  541.603500][ T5829] pwc: recv_control_msg error -32 req 04 val 1300
[  541.804599][T11488] loop2: detected capacity change from 0 to 512
[  541.816230][ T5829] pwc: recv_control_msg error -71 req 02 val 2000
[  541.827574][T11488] EXT4-fs: Ignoring removed bh option
[  541.833648][ T5829] pwc: recv_control_msg error -71 req 02 val 2100
[  541.843910][T11488] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  541.852924][ T5829] pwc: recv_control_msg error -71 req 04 val 1500
[  541.867609][ T5829] pwc: recv_control_msg error -71 req 02 val 2500
[  541.881864][ T5829] pwc: recv_control_msg error -71 req 02 val 2400
[  541.894143][T11488] EXT4-fs (loop2): 1 truncate cleaned up
[  541.909072][ T5829] pwc: recv_control_msg error -71 req 02 val 2600
[  541.920669][ T5829] pwc: recv_control_msg error -71 req 02 val 2900
[  541.920794][T11488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  541.960789][ T5829] pwc: recv_control_msg error -71 req 02 val 2800
[  541.982208][   T28] audit: type=1800 audit(1785979097.117:26): pid=11488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1449" name="file2" dev="loop2" ino=16 res=0 errno=0
[  541.994813][ T5829] pwc: recv_control_msg error -71 req 04 val 1100
[  542.040683][ T5829] pwc: recv_control_msg error -71 req 04 val 1200
[  542.063882][ T5829] pwc: Registered as video103.
[  542.091468][ T5829] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17
[  542.116124][ T5829] usb 4-1: USB disconnect, device number 30
[  542.258191][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  544.086080][T11514] loop0: detected capacity change from 0 to 256
[  544.327896][T11514] exFAT-fs (loop0): error, invalid dentry access beyond EOF (clu : 5, eidx : 129)
[  544.339713][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  544.370174][T11514] exFAT-fs (loop0): Filesystem has been set read-only
[  544.377497][T11518] exFAT-fs (loop0): error, bogus directory size (clus : ondisk(2) != counted(1))
[  544.493285][T11507] loop3: detected capacity change from 0 to 32768
[  544.516998][T11507] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1453 (11507)
[  544.542404][    T9] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00
[  544.552238][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.569114][T11507] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  544.615771][T11507] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  544.625481][    T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  544.657515][T11507] BTRFS info (device loop3): using free space tree
[  544.831194][    T8] usb 3-1: Using ep0 maxpacket: 16
[  544.839464][T11507] BTRFS info (device loop3): enabling ssd optimizations
[  544.866269][    T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  544.890381][T11507] BTRFS info (device loop3): auto enabling async discard
[  544.904592][    T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  544.947111][    T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  544.980368][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.988457][    T8] usb 3-1: Product: syz
[  545.000953][    T8] usb 3-1: Manufacturer: syz
[  545.026920][    T8] usb 3-1: SerialNumber: syz
[  545.276888][    T8] usb 3-1: 0:2 : does not exist
[  545.314418][    T8] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  545.380426][    T8] usb 3-1: USB disconnect, device number 26
[  545.482887][ T5766] udevd[5766]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  545.581511][ T5775] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  545.803751][T11546] md: serialize_policy is only effective for raid1
[  546.236142][T11555] binder: 11554:11555 ioctl c0306201 200000000680 returned -14
[  546.644135][T11551] loop3: detected capacity change from 0 to 32768
[  546.660347][ T5829] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  546.918879][ T5829] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  546.986072][   T28] audit: type=1804 audit(1785979102.107:27): pid=11551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1460" name="/newroot/384/file0/file1" dev="loop3" ino=4 res=1 errno=0
[  547.052733][ T5829] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  547.275356][ T5829] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00
[  547.315384][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.367299][ T5829] usb 1-1: Product: syz
[  547.400448][ T5829] usb 1-1: Manufacturer: syz
[  547.415461][ T5829] usb 1-1: SerialNumber: syz
[  547.436047][   T56] usb 5-1: USB disconnect, device number 5
[  547.458681][T11558] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  547.490404][T11558] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  547.553782][ T5829] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input18
[  547.712265][    C1] usbtouchscreen 1-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1
[  547.745973][ T5829] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/input/input19
[  548.076140][    C1] usbtouchscreen 1-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1
[  548.105899][T11575] loop4: detected capacity change from 0 to 1024
[  548.246719][T11577] loop3: detected capacity change from 0 to 512
[  548.296179][T11577] EXT4-fs (loop3): inodes count not valid: 40 vs 32
[  548.419220][T11575] hfsplus: request for non-existent node 33554434 in B*Tree
[  548.441033][T11575] hfsplus: request for non-existent node 33554434 in B*Tree
[  548.460815][T11575] hfsplus: request for non-existent node 33554434 in B*Tree
[  548.477668][T11575] hfsplus: request for non-existent node 33554434 in B*Tree
[  548.505556][T11575] hfsplus: request for non-existent node 33554434 in B*Tree
[  548.515111][T11575] hfsplus: request for non-existent node 33554434 in B*Tree
[  548.542135][T11575] hfsplus: request for non-existent node 33554434 in B*Tree
[  548.560393][T11575] hfsplus: request for non-existent node 33554434 in B*Tree
[  548.588016][T11575] hfsplus: request for non-existent node 33554434 in B*Tree
[  548.617468][T11575] hfsplus: request for non-existent node 33554434 in B*Tree
[  548.644920][T11575] hfsplus: request for non-existent node 33554434 in B*Tree
[  548.656916][T11575] hfsplus: request for non-existent node 33554434 in B*Tree
[  548.668488][T11575] hfsplus: request for non-existent node 33554434 in B*Tree
[  548.688805][T11575] hfsplus: request for non-existent node 33554434 in B*Tree
[  548.698322][   T28] audit: type=1800 audit(1785979103.827:28): pid=11575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1469" name="file1" dev="loop4" ino=19 res=0 errno=0
[  548.731106][T11581] binder_alloc: 11580: binder_alloc_buf, no vma
[  548.895424][ T6302] usb 1-1: USB disconnect, device number 29
[  549.600838][T11590] loop4: detected capacity change from 0 to 1024
[  550.015725][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'.
[  550.128106][T11598] kvm: pic: single mode not supported
[  550.128397][T11598] kvm: pic: level sensitive irq not supported
[  550.156401][T11598] kvm: pic: single mode not supported
[  550.162776][T11598] kvm: pic: level sensitive irq not supported
[  550.200999][T11598] kvm: pic: single mode not supported
[  550.208516][T11598] kvm: pic: single mode not supported
[  550.214482][T11598] kvm: pic: level sensitive irq not supported
[  550.221211][T11601] syzkaller0: entered promiscuous mode
[  550.233173][T11601] syzkaller0: entered allmulticast mode
[  550.245264][T11598] kvm: pic: single mode not supported
[  550.245288][T11598] kvm: pic: level sensitive irq not supported
[  550.259680][T11598] kvm: pic: non byte read
[  550.275686][T11598] kvm: pic: level sensitive irq not supported
[  550.275838][T11598] kvm: pic: non byte read
[  551.224889][   T28] audit: type=1800 audit(1785979106.347:29): pid=11613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1481" name="zoned" dev="configfs" ino=43701 res=0 errno=0
[  551.280234][   T28] audit: type=1800 audit(1785979106.347:30): pid=11613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1481" name="memory_backed" dev="configfs" ino=43702 res=0 errno=0
[  551.338244][   T28] audit: type=1800 audit(1785979106.357:31): pid=11613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1481" name="zone_nr_conv" dev="configfs" ino=43703 res=0 errno=0
[  551.416342][   T28] audit: type=1800 audit(1785979106.387:32): pid=11613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1481" name="power" dev="configfs" ino=43704 res=0 errno=0
[  551.548492][T11613] null_blk: disk nullb1 created
[  552.312416][T11621] loop4: detected capacity change from 0 to 512
[  552.420599][    T8] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  552.451934][T11621] EXT4-fs: Ignoring removed oldalloc option
[  552.750276][    T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  552.862407][    T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  552.935458][    T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  552.968041][T11621] EXT4-fs error (device loop4): ext4_quota_enable:7144: comm syz.4.1484: inode #50331648: comm syz.4.1484: iget: illegal inode #
[  552.985148][    T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64
[  553.013737][T11621] EXT4-fs (loop4): Remounting filesystem read-only
[  553.020394][T11621] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-117, ino=50331648). Please run e2fsck to fix.
[  553.079006][    T8] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00
[  553.093539][T11621] EXT4-fs (loop4): mount failed
[  553.132501][T11626] syzkaller0: entered promiscuous mode
[  553.149624][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.168006][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  553.220613][T11625] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  553.228081][T11625] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  553.254159][T11625] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  553.276150][T11625] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  553.305691][    T8] mos7720 1-1:1.0: Moschip 2 port adapter converter detected
[  553.580007][    T8] usb 1-1: mos7720: usb_control_msg() failed: -32
[  553.936636][    T8] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB0
[  554.423376][    T8] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB1
[  555.019679][   T27] usb 1-1: USB disconnect, device number 30
[  555.019921][    C0] usb 1-1: mos7720_interrupt_callback - Error -19 submitting control urb
[  555.107395][   T27] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0
[  555.190992][   T27] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1
[  555.228394][   T27] mos7720 1-1:1.0: device disconnected
[  555.959123][T11648] loop3: detected capacity change from 0 to 32768
[  556.012276][   T23] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  556.053204][T11648] JBD2: Ignoring recovery information on journal
[  556.143206][T11648] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  556.233027][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  556.256229][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  556.281225][   T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  556.300244][   T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  556.309372][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.320346][   T23] usb 3-1: config 0 descriptor??
[  556.453761][T11648] ocfs2: Unmounting device (7,3) on (node local)
[  556.592169][T11665] syz.3.1492: attempt to access beyond end of device
[  556.592169][T11665] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[  556.628647][T11660] loop2: detected capacity change from 0 to 2048
[  556.682208][T11665] (syz.3.1492,11665,1):ocfs2_get_sector:1770 ERROR: status = -5
[  556.760409][T11665] (syz.3.1492,11665,1):ocfs2_sb_probe:749 ERROR: status = -5
[  556.768043][T11665] (syz.3.1492,11665,1):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  556.870796][T11665] (syz.3.1492,11665,0):ocfs2_fill_super:1178 ERROR: status = -5
[  556.990793][   T23] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  557.107760][   T23] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  557.643451][ T6302] usb 3-1: USB disconnect, device number 27
[  558.258442][T11686] syz.4.1501 (11686): drop_caches: 2
[  558.436732][T11691] loop2: detected capacity change from 0 to 256
[  558.536769][T11693] syzkaller0: entered promiscuous mode
[  558.558346][T11693] syzkaller0: entered allmulticast mode
[  558.660788][T11691] exFAT-fs (loop2): error, invalid dentry access beyond EOF (clu : 5, eidx : 129)
[  558.691355][T11691] exFAT-fs (loop2): Filesystem has been set read-only
[  559.230287][   T23] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  559.430293][   T23] usb 4-1: Using ep0 maxpacket: 32
[  559.440433][   T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  559.463756][   T23] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  559.505881][   T23] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  559.535701][   T23] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  559.557886][   T23] usb 4-1: Product: syz
[  559.566981][   T23] usb 4-1: Manufacturer: syz
[  559.580192][   T23] usb 4-1: SerialNumber: syz
[  559.591175][   T23] usb 4-1: config 0 descriptor??
[  559.889062][T11711] syzkaller0: entered promiscuous mode
[  559.908354][T11711] syzkaller0: entered allmulticast mode
[  559.937915][T11711] tipc: Started in network mode
[  559.952228][T11711] tipc: Node identity 0a4d8828762e, cluster identity 4711
[  559.985901][T11711] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  560.008081][T11710] tipc: Resetting bearer <eth:syzkaller0>
[  560.117169][T11710] tipc: Disabling bearer <eth:syzkaller0>
[  560.194502][ T5084] Bluetooth: hci3: command 0x0406 tx timeout
[  560.392430][T11713] syzkaller0: entered promiscuous mode
[  560.400477][T11713] syzkaller0: entered allmulticast mode
[  560.582778][T11720] loop4: detected capacity change from 0 to 512
[  560.632299][T11720] EXT4-fs: Ignoring removed nobh option
[  560.718037][T11720] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1513: invalid indirect mapped block 256 (level 2)
[  560.762355][T11720] EXT4-fs (loop4): 2 truncates cleaned up
[  560.802679][T11720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  560.860611][ T6302] usb 4-1: USB disconnect, device number 31
[  561.098118][T11729] input: syz1 as /devices/virtual/input/input20
[  561.142713][T11732] loop3: detected capacity change from 0 to 256
[  561.387838][T11732] exFAT-fs (loop3): error, invalid dentry access beyond EOF (clu : 5, eidx : 129)
[  561.413581][T11732] exFAT-fs (loop3): Filesystem has been set read-only
[  561.645917][   T60] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm kworker/u4:4: bg 0: block 5: invalid block bitmap
[  561.707944][   T60] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 360 with error 28
[  561.722807][   T60] EXT4-fs (loop4): This should not happen!! Data will be lost
[  561.722807][   T60] 
[  561.736068][   T60] EXT4-fs (loop4): Total free blocks count 0
[  561.756049][   T60] EXT4-fs (loop4): Free/Dirty block details
[  561.781156][T11739] syzkaller0: entered promiscuous mode
[  561.788681][T11739] syzkaller0: entered allmulticast mode
[  561.801899][   T60] EXT4-fs (loop4): free_blocks=0
[  561.827019][   T60] EXT4-fs (loop4): dirty_blocks=364
[  561.898806][   T60] EXT4-fs (loop4): Block reservation details
[  561.922726][   T60] EXT4-fs (loop4): i_reserved_data_blocks=364
[  562.041093][ T9618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  562.682808][T11751] loop3: detected capacity change from 0 to 8192
[  562.696438][ T5827] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  562.877658][T11751]  loop3: p4
[  562.979042][T11751] loop3: p4 size 262144 extends beyond EOD, truncated
[  563.238014][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  563.276913][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  563.302283][ T5827] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00
[  563.464740][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.196325][ T5765] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  564.817834][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  564.861512][T11771] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer.
[  565.882923][T11786] syzkaller0: entered promiscuous mode
[  565.889356][T11786] syzkaller0: entered allmulticast mode
[  567.941601][ T5827] usb 3-1: USB disconnect, device number 28
[  571.029631][T11817] loop4: detected capacity change from 0 to 1024
[  572.022630][T11817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  572.307212][T11817] usb usb8: usbfs: process 11817 (syz.4.1541) did not claim interface 0 before use
[  572.542427][ T9618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  573.927661][T11858] syzkaller0: entered promiscuous mode
[  573.933846][T11858] syzkaller0: entered allmulticast mode
[  576.560296][ T5827] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  576.903684][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  576.964136][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  577.032014][ T5827] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  577.103908][ T5827] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  577.161170][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  577.334168][ T5827] usb 1-1: config 0 descriptor??
[  577.818997][T11868] loop0: detected capacity change from 0 to 2048
[  578.426163][ T5827] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  578.519555][ T5827] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  579.631852][    T8] usb 1-1: USB disconnect, device number 31
[  580.684965][T11913] loop4: detected capacity change from 0 to 512
[  585.144112][T11913] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  585.144641][T11913] EXT4-fs: failed to create workqueue
[  585.160395][T11913] EXT4-fs (loop4): mount failed
[  585.701624][T11920] syzkaller0: entered promiscuous mode
[  585.723949][T11920] syzkaller0: entered allmulticast mode
[  585.747200][T11920] syzkaller0: tun_net_xmit 14
[  587.038121][T11921] loop0: detected capacity change from 0 to 32768
[  587.150273][ T5829] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  587.315066][T11939] syzkaller0: entered promiscuous mode
[  587.340598][T11939] syzkaller0: entered allmulticast mode
[  587.353873][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  587.391594][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  587.420219][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  587.466391][ T5829] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  587.511098][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.540046][ T5829] usb 5-1: config 0 descriptor??
[  587.582701][T11943] loop0: detected capacity change from 0 to 256
[  587.625438][T11943] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  587.654209][T11943] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  587.684468][T11943] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  587.730122][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  587.797597][T11943] exFAT-fs (loop0): failed to load alloc-bitmap
[  587.827993][T11943] exFAT-fs (loop0): failed to recognize exfat type
[  587.896547][T11934] loop4: detected capacity change from 0 to 2048
[  588.253000][ T5829] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  588.286059][ T5829] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  588.977137][ T6302] usb 5-1: USB disconnect, device number 6
[  592.092505][T11965] loop3: detected capacity change from 0 to 16
[  592.105872][T11965] erofs: (device loop3): mounted with root inode @ nid 36.
[  593.038353][ T9622] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000]
[  593.136204][T11965] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  593.232537][   T28] audit: type=1800 audit(1785979148.367:33): pid=11965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1581" name="file2" dev="loop3" ino=89 res=0 errno=0
[  593.450201][  T180] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  593.692067][  T180] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00
[  594.732709][  T180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.759362][  T180] snd-ua101 3-1:1.0: invalid bNumEndpoints
[  595.090476][   T23] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  596.120645][   T23] usb 1-1: Using ep0 maxpacket: 32
[  596.140634][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  596.150968][   T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[  596.167630][   T27] usb 3-1: USB disconnect, device number 29
[  596.177792][   T23] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  596.190289][   T23] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  596.212734][   T23] usb 1-1: Product: syz
[  596.217878][   T23] usb 1-1: Manufacturer: syz
[  596.229361][   T23] usb 1-1: SerialNumber: syz
[  596.242609][   T23] usb 1-1: config 0 descriptor??
[  597.479382][  T180] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  597.728604][  T180] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  597.766143][  T180] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  597.779395][  T180] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  597.799067][  T180] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  597.808568][  T180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.827484][  T180] usb 4-1: config 0 descriptor??
[  598.879460][T12009] loop3: detected capacity change from 0 to 2048
[  599.208922][  T180] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  599.257530][  T180] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  599.376321][T12032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  599.384645][T12032] IPv6: NLM_F_CREATE should be set when creating new route
[  599.477484][T12032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  599.627355][  T180] usb 1-1: USB disconnect, device number 32
[  599.831753][T12021] loop4: detected capacity change from 0 to 65536
[  599.853749][ T5829] usb 4-1: USB disconnect, device number 32
[  599.917479][T12021] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  599.997406][T12021] XFS (loop4): Ending clean mount
[  600.268827][ T9618] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  602.004027][T12051] syz.2.1600 (12051): drop_caches: 2
[  602.274506][T12064] syzkaller0: entered promiscuous mode
[  602.285856][T12064] syzkaller0: entered allmulticast mode
[  602.694804][    T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  602.963614][    T9] usb 3-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 0.00
[  603.956392][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.003830][    T9] i2c-tiny-usb 3-1:1.0: version 0.00 found at bus 003 address 030
[  604.068620][T12083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1611'.
[  604.175577][T12083] 8021q: adding VLAN 0 to HW filter on device bond3
[  604.246051][T12087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1611'.
[  604.275256][T12087] bond3: entered promiscuous mode
[  604.300185][T12087] bond3: entered allmulticast mode
[  604.362649][T12083] dummy0: entered promiscuous mode
[  604.384518][T12083] dummy0: entered allmulticast mode
[  604.395498][T12083] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  604.709614][    T9] i2c i2c-1: connected i2c-tiny-usb device
[  605.558879][T12103] saa7115: probe of 0-0021 failed with error -5
[  605.566969][T12103] i2c i2c-0: new_device: Instantiated device saa7115 at 0x21
[  605.577567][T12103] i2c i2c-0: Failed to register i2c client saa7115 at 0x21 (-16)
[  605.657729][T12106] syzkaller0: entered promiscuous mode
[  605.670215][T12106] syzkaller0: entered allmulticast mode
[  607.461220][ T5829] usb 3-1: USB disconnect, device number 30
[  607.776089][T12129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  607.783442][T12129] IPv6: NLM_F_CREATE should be set when creating new route
[  607.809898][T12129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  608.933040][ T5829] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[  609.009400][T12155] syzkaller0: entered promiscuous mode
[  609.020688][T12155] syzkaller0: entered allmulticast mode
[  609.123646][ T5829] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00
[  609.146025][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.810615][ T5829] dvb_ttusb_budget: cmd xter failed, receive error -75
[  609.818662][ T5829] dvb_ttusb_budget: ttusb_init_controller: error
[  609.839542][ T5829] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  609.892976][T12164] syzkaller0: entered promiscuous mode
[  609.898534][T12164] syzkaller0: entered allmulticast mode
[  609.998556][ T5829] DVB: Unable to find symbol stv0299_attach()
[  610.051989][T12168] syzkaller0: entered promiscuous mode
[  610.057546][T12168] syzkaller0: entered allmulticast mode
[  610.067553][T12170] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  610.076636][T12167] tipc: Resetting bearer <eth:syzkaller0>
[  610.137677][ T5829] DVB: Unable to find symbol tda8083_attach()
[  610.165192][ T5829] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  610.217542][T12167] tipc: Disabling bearer <eth:syzkaller0>
[  610.252932][T12174] CIFS: Attempting to mount //127.0.0.1/share
[  610.282954][T12174] CIFS: VFS: Error connecting to socket. Aborting operation.
[  610.285102][T12172] syzkaller0: entered promiscuous mode
[  610.291765][T12174] CIFS: VFS: cifs_mount failed w/return code = -4
[  610.300631][T12172] syzkaller0: entered allmulticast mode
[  611.553725][T12194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1642'.
[  611.650317][ T5829] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  611.745451][T12196] loop2: detected capacity change from 0 to 164
[  613.110439][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  613.523637][ T5829] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00
[  613.540407][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.571109][ T5829] snd-ua101 5-1:1.0: sample format descriptor not found
[  613.745575][    T9] usb 4-1: USB disconnect, device number 33
[  615.002149][ T6302] usb 5-1: USB disconnect, device number 7
[  615.269298][T12213] syzkaller0: entered promiscuous mode
[  615.310248][T12213] syzkaller0: entered allmulticast mode
[  615.377031][   T28] audit: type=1800 audit(1785979170.507:34): pid=12222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1651" name="UDC" dev="configfs" ino=47092 res=0 errno=0
[  615.403928][T12222] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  615.417317][    T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  615.519663][T12222] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  615.643429][T12222] udc dummy_udc.0: failed to start g1: -22
[  615.737574][T12222] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  616.004391][T12222] UDC core: g1: couldn't find an available UDC or it's busy
[  616.159479][    T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  616.173991][    T9] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  616.345379][T12226] fido_id[12226]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  618.230308][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  621.089175][    T9] smpboot: CPU 1 is now offline
[  621.629209][T12294] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  621.694072][    T0] Disabled fast string operations
[  622.101246][T12305] syzkaller0: entered promiscuous mode
[  622.117324][T12305] syzkaller0: entered allmulticast mode
[  622.132508][T12310] Bluetooth: hci0: invalid length 0, exp 2 for type 10
[  622.276025][T12311] syzkaller0: entered promiscuous mode
[  622.281999][T12311] syzkaller0: entered allmulticast mode
[  622.442632][T12313] syzkaller0: entered promiscuous mode
[  622.448193][T12313] syzkaller0: entered allmulticast mode
[  623.316846][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  623.325485][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  624.760190][    T9] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  625.032365][    T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00
[  625.053860][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.302313][ T5827] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  625.670256][ T5827] usb 5-1: Using ep0 maxpacket: 32
[  625.678338][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  625.688927][ T5827] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[  626.091135][    T9] dvb_ttusb_budget: cmd xter failed, receive error -75
[  626.108881][    T9] dvb_ttusb_budget: ttusb_init_controller: error
[  626.117723][    T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  626.130778][ T5827] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  626.141349][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  626.149684][ T5827] usb 5-1: Product: syz
[  626.166647][ T5827] usb 5-1: Manufacturer: syz
[  626.173000][T12359] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  626.186519][ T5827] usb 5-1: SerialNumber: syz
[  626.196824][ T5827] usb 5-1: config 0 descriptor??
[  626.370542][    T9] DVB: Unable to find symbol stv0299_attach()
[  626.477027][    T9] DVB: Unable to find symbol tda8083_attach()
[  626.699258][    T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  627.455111][T12375] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  627.960893][    T9] usb 3-1: USB disconnect, device number 31
[  629.373168][ T5827] usb 5-1: USB disconnect, device number 8
[  629.948023][T12403] loop4: detected capacity change from 0 to 512
[  630.071028][T12403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  630.160322][T12403] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  630.279132][T12409] loop2: detected capacity change from 0 to 64
[  630.355058][T12403] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #2: comm syz.4.1691: corrupted inode contents
[  630.558092][T12403] EXT4-fs (loop4): Remounting filesystem read-only
[  630.872493][ T9618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  631.350220][    T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  631.543872][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  631.576441][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  631.614109][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  631.641827][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.672301][    T9] usb 5-1: Product: syz
[  631.683027][    T9] usb 5-1: Manufacturer: syz
[  631.700678][    T9] usb 5-1: SerialNumber: syz
[  631.936964][    T9] usb 5-1: 0:2 : does not exist
[  631.974005][    T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  632.039275][    T9] usb 5-1: USB disconnect, device number 9
[  633.375399][T12442] loop7: detected capacity change from 0 to 16384
[  633.530668][T12443] loop7: detected capacity change from 16384 to 0
[  635.044687][T12449] sched: RT throttling activated
[  638.873812][T12489] syzkaller0: entered promiscuous mode
[  638.885204][T12489] syzkaller0: entered allmulticast mode
[  639.209172][T12491] tipc: Started in network mode
[  639.223215][T12491] tipc: Node identity 3ab636dde8d, cluster identity 4711
[  639.269677][T12491] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  639.297704][T12496] jffs2: notice: (12496) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  639.319447][T12487] tipc: Resetting bearer <eth:syzkaller0>
[  639.412828][T12487] tipc: Disabling bearer <eth:syzkaller0>
[  639.787446][    T9] smpboot: CPU 1 is now offline
[  639.892069][T12514] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  639.906022][    T0] Disabled fast string operations
[  640.075396][T12512] loop4: detected capacity change from 0 to 8192
[  640.133828][T12512] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  641.550255][ T6302] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  641.729607][T12532] loop0: detected capacity change from 0 to 128
[  641.773015][ T6302] usb 4-1: config 0 has no interfaces?
[  641.793883][ T6302] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00
[  641.823845][ T6302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.865679][ T6302] usb 4-1: Product: syz
[  641.888812][ T6302] usb 4-1: Manufacturer: syz
[  641.907616][ T6302] usb 4-1: SerialNumber: syz
[  641.935031][ T6302] usb 4-1: config 0 descriptor??
[  642.563258][    T9] usb 4-1: USB disconnect, device number 34
[  646.027207][T12570] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  646.036870][T12570] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  646.045767][T12570] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  646.054593][T12570] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  648.322574][T12596] syzkaller0: entered promiscuous mode
[  648.450796][T12596] syzkaller0: entered allmulticast mode
[  648.772112][T12605] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  648.807809][T12605] syzkaller0: entered promiscuous mode
[  648.826283][T12605] syzkaller0: entered allmulticast mode
[  648.867270][T12605] tipc: Resetting bearer <eth:syzkaller0>
[  648.909346][T12602] tipc: Resetting bearer <eth:syzkaller0>
[  648.996582][T12602] tipc: Disabling bearer <eth:syzkaller0>
[  649.408728][T12611] syzkaller0: entered promiscuous mode
[  649.422755][T12611] syzkaller0: entered allmulticast mode
[  655.469563][T12653] syzkaller0: entered promiscuous mode
[  655.488919][T12653] syzkaller0: entered allmulticast mode
[  656.112194][T12658] syzkaller0: entered promiscuous mode
[  656.140181][T12658] syzkaller0: entered allmulticast mode
[  656.836121][T12666] tipc: Started in network mode
[  656.852090][T12666] tipc: Node identity c2b97cd202f1, cluster identity 4711
[  656.875178][T12666] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  656.898200][T12667] syzkaller0: entered promiscuous mode
[  656.916959][T12667] syzkaller0: entered allmulticast mode
[  657.319489][T12674] tipc: Resetting bearer <eth:syzkaller0>
[  658.998915][    T9] tipc: Node number set to 3225976018
[  659.070681][T12662] tipc: Resetting bearer <eth:syzkaller0>
[  659.188504][T12662] tipc: Disabling bearer <eth:syzkaller0>
[  659.414158][T12691] loop3: detected capacity change from 0 to 128
[  659.445484][T12691] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  659.487498][T12691] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  659.724925][T12694] md: serialize_policy is only effective for raid1
[  661.042395][ T6302] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  661.500486][ T2932] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  661.521310][ T6302] usb 5-1: Using ep0 maxpacket: 16
[  661.561653][ T6302] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  661.582936][ T6302] usb 5-1: config 0 has no interfaces?
[  661.616454][ T6302] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  661.639361][ T6302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.838452][ T6302] usb 5-1: Product: syz
[  661.843182][T12702] syzkaller0: entered promiscuous mode
[  661.858931][ T6302] usb 5-1: Manufacturer: syz
[  661.865426][T12702] syzkaller0: entered allmulticast mode
[  661.871284][ T6302] usb 5-1: SerialNumber: syz
[  662.189285][ T6302] usb 5-1: config 0 descriptor??
[  662.403854][    T9] usb 5-1: USB disconnect, device number 10
[  662.788888][T12711] syzkaller0: entered promiscuous mode
[  662.815779][T12711] syzkaller0: entered allmulticast mode
[  662.852683][T12711] 0: reclassify loop, rule prio 0, protocol 700
[  663.939763][T12738] xt_CT: You must specify a L4 protocol and not use inversions on it
[  669.203836][T12781] tc action pedit unable to extract header offset for header type (0x4)
[  669.213055][T12781] tc action pedit unable to extract header offset for header type (0x4)
[  669.221480][T12781] tc action pedit unable to extract header offset for header type (0x4)
[  669.229875][T12781] tc action pedit unable to extract header offset for header type (0x4)
[  669.238288][T12781] tc action pedit unable to extract header offset for header type (0x4)
[  669.246712][T12781] tc action pedit unable to extract header offset for header type (0x4)
[  669.255153][T12781] tc action pedit unable to extract header offset for header type (0x4)
[  669.263616][T12781] tc action pedit unable to extract header offset for header type (0x4)
[  669.272042][T12781] tc action pedit unable to extract header offset for header type (0x4)
[  669.280506][T12781] tc action pedit unable to extract header offset for header type (0x4)
[  669.288927][T12781] 0: reclassify loop, rule prio 0, protocol 800
[  671.860717][T12798] md: could not open device unknown-block(7,0).
[  674.751284][T12810] 
[  674.753654][T12810] ======================================================
[  674.760694][T12810] WARNING: possible circular locking dependency detected
[  674.767741][T12810] syzkaller #0 Tainted: G S                
[  674.773662][T12810] ------------------------------------------------------
[  674.780688][T12810] syz.2.1799/12810 is trying to acquire lock:
[  674.786778][T12810] ffff888020163400 (&sb->s_type->i_mutex_key#20){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430
[  674.798322][T12810] 
[  674.798322][T12810] but task is already holding lock:
[  674.805718][T12810] ffff88805ebb8920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580
[  674.814993][T12810] 
[  674.814993][T12810] which lock already depends on the new lock.
[  674.814993][T12810] 
[  674.825441][T12810] 
[  674.825441][T12810] the existing dependency chain (in reverse order) is:
[  674.834570][T12810] 
[  674.834570][T12810] -> #2 (&opts->dep_lock){+.+.}-{3:3}:
[  674.842250][T12810]        __mutex_lock+0x135/0xc80
[  674.847378][T12810]        tcm_set_name+0x2a/0x90
[  674.852263][T12810]        function_make+0x199/0x350
[  674.857464][T12810]        configfs_mkdir+0x515/0x9e0
[  674.862740][T12810]        vfs_mkdir+0x2a5/0x470
[  674.867596][T12810]        do_mkdirat+0x1dc/0x450
[  674.872486][T12810]        __x64_sys_mkdirat+0x89/0xa0
[  674.877797][T12810]        do_syscall_64+0x55/0xb0
[  674.882765][T12810]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  674.889206][T12810] 
[  674.889206][T12810] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}:
[  674.897493][T12810]        __mutex_lock+0x135/0xc80
[  674.902558][T12810]        uvcg_streaming_header_allow_link+0x71/0x4a0
[  674.909470][T12810]        configfs_symlink+0x5a5/0xfe0
[  674.914915][T12810]        vfs_symlink+0x138/0x2b0
[  674.919888][T12810]        do_symlinkat+0x1ba/0x400
[  674.925316][T12810]        __x64_sys_symlink+0x7e/0x90
[  674.930682][T12810]        do_syscall_64+0x55/0xb0
[  674.935996][T12810]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  674.942458][T12810] 
[  674.942458][T12810] -> #0 (&sb->s_type->i_mutex_key#20){++++}-{3:3}:
[  674.951185][T12810]        __lock_acquire+0x37ef/0x7d80
[  674.956588][T12810]        lock_acquire+0x19e/0x420
[  674.961724][T12810]        down_write+0x97/0x200
[  674.966539][T12810]        configfs_depend_item_unlocked+0x157/0x430
[  674.973066][T12810]        usbg_make_tpg+0x1f7/0x580
[  674.978217][T12810]        target_fabric_make_tpg+0xa4/0x6d0
[  674.984097][T12810]        configfs_mkdir+0x515/0x9e0
[  674.989341][T12810]        vfs_mkdir+0x2a5/0x470
[  674.994139][T12810]        do_mkdirat+0x1dc/0x450
[  674.999012][T12810]        __x64_sys_mkdirat+0x89/0xa0
[  675.004321][T12810]        do_syscall_64+0x55/0xb0
[  675.009287][T12810]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  675.015729][T12810] 
[  675.015729][T12810] other info that might help us debug this:
[  675.015729][T12810] 
[  675.026000][T12810] Chain exists of:
[  675.026000][T12810]   &sb->s_type->i_mutex_key#20 --> gadget_subsys.su_mutex --> &opts->dep_lock
[  675.026000][T12810] 
[  675.040725][T12810]  Possible unsafe locking scenario:
[  675.040725][T12810] 
[  675.048200][T12810]        CPU0                    CPU1
[  675.053610][T12810]        ----                    ----
[  675.059078][T12810]   lock(&opts->dep_lock);
[  675.063529][T12810]                                lock(gadget_subsys.su_mutex);
[  675.071099][T12810]                                lock(&opts->dep_lock);
[  675.078067][T12810]   lock(&sb->s_type->i_mutex_key#20);
[  675.083566][T12810] 
[  675.083566][T12810]  *** DEADLOCK ***
[  675.083566][T12810] 
[  675.092096][T12810] 5 locks held by syz.2.1799/12810:
[  675.097326][T12810]  #0: ffff888018f1c418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  675.106613][T12810]  #1: ffff88805accaef0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450
[  675.117449][T12810]  #2: ffffffff8db2b830 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0
[  675.127247][T12810]  #3: ffffffff8de58f08 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf8/0x580
[  675.136980][T12810]  #4: ffff88805ebb8920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580
[  675.146501][T12810] 
[  675.146501][T12810] stack backtrace:
[  675.152428][T12810] CPU: 0 PID: 12810 Comm: syz.2.1799 Tainted: G S                 syzkaller #0
[  675.161477][T12810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  675.171587][T12810] Call Trace:
[  675.174904][T12810]  <TASK>
[  675.177866][T12810]  dump_stack_lvl+0x18c/0x250
[  675.182587][T12810]  ? load_image+0x420/0x420
[  675.187129][T12810]  ? show_regs_print_info+0x20/0x20
[  675.192363][T12810]  ? print_circular_bug+0x12b/0x1a0
[  675.197592][T12810]  check_noncircular+0x2fc/0x400
[  675.202560][T12810]  ? look_up_lock_class+0x75/0x140
[  675.207705][T12810]  ? print_deadlock_bug+0x5d0/0x5d0
[  675.212965][T12810]  ? lockdep_lock+0xf5/0x230
[  675.217578][T12810]  ? __lock_acquire+0x357f/0x7d80
[  675.222662][T12810]  ? _find_first_zero_bit+0xd6/0x100
[  675.228025][T12810]  __lock_acquire+0x37ef/0x7d80
[  675.232915][T12810]  ? is_bpf_text_address+0x28f/0x2a0
[  675.238248][T12810]  ? verify_lock_unused+0x140/0x140
[  675.243510][T12810]  lock_acquire+0x19e/0x420
[  675.248062][T12810]  ? configfs_depend_item_unlocked+0x157/0x430
[  675.254258][T12810]  ? trace_raw_output_contention_end+0xd0/0xd0
[  675.260442][T12810]  ? __might_sleep+0xe0/0xe0
[  675.265149][T12810]  ? rcu_is_watching+0x15/0xb0
[  675.269952][T12810]  ? read_lock_is_recursive+0x20/0x20
[  675.275361][T12810]  ? trace_contention_end+0x39/0xe0
[  675.280585][T12810]  ? __mutex_lock+0x30d/0xc80
[  675.285316][T12810]  ? do_syscall_64+0x55/0xb0
[  675.289931][T12810]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  675.296032][T12810]  down_write+0x97/0x200
[  675.300324][T12810]  ? configfs_depend_item_unlocked+0x157/0x430
[  675.306585][T12810]  ? down_read_killable+0x340/0x340
[  675.311844][T12810]  configfs_depend_item_unlocked+0x157/0x430
[  675.317877][T12810]  usbg_make_tpg+0x1f7/0x580
[  675.322623][T12810]  ? usbg_drop_tport+0x20/0x20
[  675.327442][T12810]  ? vscnprintf+0x80/0x80
[  675.331820][T12810]  target_fabric_make_tpg+0xa4/0x6d0
[  675.337144][T12810]  ? target_fabric_release_wwn+0xb0/0xb0
[  675.342814][T12810]  configfs_mkdir+0x515/0x9e0
[  675.347541][T12810]  vfs_mkdir+0x2a5/0x470
[  675.351828][T12810]  do_mkdirat+0x1dc/0x450
[  675.356190][T12810]  ? vfs_mkdir+0x470/0x470
[  675.360663][T12810]  __x64_sys_mkdirat+0x89/0xa0
[  675.365487][T12810]  do_syscall_64+0x55/0xb0
[  675.369952][T12810]  ? clear_bhb_loop+0x40/0x90
[  675.374666][T12810]  ? clear_bhb_loop+0x40/0x90
[  675.379468][T12810]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  675.385398][T12810] RIP: 0033:0x7f83cc79e0d9
[  675.389844][T12810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  675.409480][T12810] RSP: 002b:00007f83ca9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  675.417927][T12810] RAX: ffffffffffffffda RBX: 00007f83cca25fa0 RCX: 00007f83cc79e0d9
[  675.425924][T12810] RDX: 00000000000001ff RSI: 0000200000001000 RDI: ffffffffffffff9c
[  675.433953][T12810] RBP: 00007f83cc835024 R08: 0000000000000000 R09: 0000000000000000
[  675.441952][T12810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  675.450119][T12810] R13: 00007f83cca26038 R14: 00007f83cca25fa0 R15: 00007ffdf84370a8
[  675.458125][T12810]  </TASK>
[  675.461282][    C0] vkms_vblank_simulate: vblank timer overrun