last executing test programs:

19.396110388s ago: executing program 3 (id=622):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2)
chdir(0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x32, 0x0, 0xffffd000)
ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000140)={{r0}, 0x0, 0x0, 0x2, 0xf2fe75c159c2112a})

15.355083084s ago: executing program 3 (id=627):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

14.589339242s ago: executing program 3 (id=630):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000000)='7', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

14.028754096s ago: executing program 3 (id=631):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0)
r0 = signalfd(0xffffffffffffffff, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, &(0x7f0000000080))
read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0xb7)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_ADAP_S_PHYS_ADDR(r1, 0x40026102, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24008090)
ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0xd0)
syz_io_uring_setup(0x496, 0x0, &(0x7f0000000000), &(0x7f0000000600), &(0x7f0000000040))
timer_delete(0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0))

7.694311206s ago: executing program 2 (id=642):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'})
read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x97a3, &(0x7f0000009780)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000b40))
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x48}}, 0x880)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc0, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x46}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xb5, 0x51}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_DATA={0x77, 0xc5, "b6d422b64f25ca4e784f22217e35ffa0594c76c7c777ed67df8f89ba0b4d24f4dcd52355affc3de9e82ac2e610bffca3a3ddf2cff2bdb879f31ee2878ae45b9ed9b7f59f3d1d036ec770981d5329fec73c7b9dc900d53c8b912ec1bcf0a18ea93061cd7bc679a795bbf449666e73f5596948b1"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xbf1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8001}]}, 0xc0}, 0x1, 0x0, 0x0, 0x400c0}, 0x40084)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x165840, 0x2)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
rmdir(&(0x7f0000000080)='./bus\x00')

6.887616306s ago: executing program 0 (id=644):
bpf$MAP_CREATE(0x600000000000000, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0)
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
preadv(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x20)
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x8000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet(0x2, 0x2, 0x2)

6.169478432s ago: executing program 2 (id=645):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94)
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

6.157543343s ago: executing program 3 (id=646):
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x1a, 0x0, 0x1, 0x2, 0x10000}, 0x28)
socket$inet(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)

4.498433342s ago: executing program 3 (id=647):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f06b5c01000000090401001186eeea00090582"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[])

4.261382868s ago: executing program 1 (id=648):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0xf}, {}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xfffe}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010)

4.259572568s ago: executing program 0 (id=649):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/dlm/cluster/comms/1/addr\x00', 0x2a841, 0x110)
syz_open_dev$tty1(0xc, 0x4, 0x1)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
mmap$xdp(&(0x7f00009cc000/0x4000)=nil, 0x4000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x180000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000580)={0x0, 0xffff, 0x0, 0x0, <r1=>0xffffffffffffffff})
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
syz_emit_ethernet(0x66, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000200303a00fe8000000000000000000000000000bbfe80000000"], 0x0)
ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500))
syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40)
dup(0xffffffffffffffff)
write(r0, &(0x7f0000000240)="020000007f00000100"/128, 0x80)

3.800622439s ago: executing program 1 (id=650):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x4800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

3.148808755s ago: executing program 0 (id=651):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000480)=0x4, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48095}, 0x4000014)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setreuid(0x0, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00)
ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
write(0xffffffffffffffff, &(0x7f0000000080)='4', 0x1)

2.836712802s ago: executing program 1 (id=652):
syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00, 0xffffffff}, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "2041f09a821e1e3d", "bc1219b53b562baafd2400170f311e6d", "152d5cb7", "c2035c44dee1dcca"}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000004, 0x10012, r2, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)='X', 0x1}], 0x1)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000080)=0x8, 0x4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1003, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x10, 0x10001006, 0x2, 0x6, 0x1bf7, 0xb, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x2, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x40001, 0x7f, 0x4, 0xa, 0x9, 0x8001, 0x101, 0xa, 0x1fa0860a, 0x3, 0x100aa, 0x7f, 0x2, 0x0, 0x4005, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x9, 0x8, 0x3, 0x3, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x3, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x9, 0xc50, 0x1, 0xe, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x100, 0x4, 0x2, 0x40, 0x8, 0x4, 0x5, 0x401, 0x466cd, 0x8, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

2.048252611s ago: executing program 2 (id=653):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x800c6613, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000080)=""/24)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfe63, 0xe7c)

2.038650951s ago: executing program 0 (id=654):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0)
r0 = signalfd(0xffffffffffffffff, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, &(0x7f0000000080))
read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0xb7)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_ADAP_S_PHYS_ADDR(r1, 0x40026102, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24008090)
ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0xd0)
syz_io_uring_setup(0x496, 0x0, &(0x7f0000000000), &(0x7f0000000600), &(0x7f0000000040))
timer_delete(0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0))

1.559872602s ago: executing program 2 (id=655):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3})
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x800, &(0x7f00000002c0)=ANY=[], 0xfd, 0x1524, &(0x7f0000001740)="$eJzs3QuYTlXbOPB1r7U2Yxo8TXJe97o3Txosk4RQkhySJAnJOSFpkiRJYsgpCUnIcZIcxoSc06RxPh9yTpq8kiQJCUnW/5oOf1+9vV+979f76nrn/l3Xvqz72fte+97PfT2etfd1eXzRfUStprWrNyIi8a9QPw/gxz+SL+1KziuECIQQ5ePLx2ftz6Ug+V86Cfs3aZx6uStglxP3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWtpha7kLftu/47n/zFCiMFCCH7+/x8g/+BxFfL+xov8/Z8twD/awf3/b6P+qaO5/9kb9/+/T+SfOJb7n71x/7Oz4HIXwC4z/vxnb9x/xrK1P/2Z8oZzl/uZ9l9gO+8vfw1/bGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxv4DzvlLtBDi5/HlrosxxhhjjDHGGGN/Hv/W5a6AMcYYY4wxxhhj/34gpFBCi0DkEDlFjMglYsUVIk7kFnlEXhERV4p4cZXIJ64W+UUBUVAUEoVFEVFUGIHCChKhKCaKi6i4RpQQ14oEUVKUEqWFE2VEorhOlBXXi3LiBlFeVBAVxY2ikqj8wzmz3CKqiVtFdXGbqCFqilqitrhd1BF3iLriTlFP3CXqi7tFA3GPaCjuFY1EY9FE3CeaivtFM9FctBAtRSvRWrT5nfyUvL+V/4zoJZ4VvUUfkSz6in7iOdFfDBADxSAxWDwvhogXxFDxohgmhosR4iUxUrwsRolXxGgxRowVr4pxYryYICaKSWKySBGviSnidTFVvHF/bjFdzBAzRaqYJdLEm2K2mCPmirfEPDFfLBApuRaJxWKJeFssFe+IdPGuWCbeExliuVghVopVYrVYI9aKdWK92CA2ik1is9gitopt4n2xXewQO8UusVvsEXvFB2Kf+FDsFx+JTPj4n8w/+8t80QMECJAgQYOGHJADYiAGYiEW4iAO8kAeiEAE4iEe8kE+yA/5oSAUhGQoDEWhKCAgEBAUg2IQhSiUgBKQAAlQCkqBAweJkAhl4XooB+WgPJSHilARKkFlqAw3wU1QFapCNagG1aE61IAaUAtqwe1wO9wBdaEu1IN6UB/qQwNoAA2hITSCRtAEmkBTaArNoBm0gBbQClpBG2gDbaEttIN20AE6QEfoCJ2gEyRBEnSGztAFukBX6ArdoBt0h+7QA56Gp+EZeAaehWehD9SQfaEf9IP+0B8GwiAYBM/DEHgBXoAXYRgMhxHwErwEL8MoOAOjYQyMhbFQVY6HCTARSE6GFEiBnGIKTIWpMA2mw3SYCakwC9IgDWbDHJgDb8E8mA/zYSEshMWwBJbAUngH0iEdlsFZyIDlsAJWwipYDatgLayDtbABNsIG2AybYStshffhfdgBO2AX7II9sAc+gA/gQ/gQhkEmZMIBOAAH4SAcgkNwGA7DETgCR+EoHINjcByOwwk4CafgJJyG03AGzsI5IcR5OA8X4AJchItZH36ZRUstc8gcMkbGyFgZK+NknMwj88iIjMh4GS/zyXwyv8wvC8qCsrAsLIvKohIlSpKhLCaLyaiMyhKyhEyQCbKULCWddDJRJsqysqwsJ8vJ8rKCrChvlJVkZdne3SRvklVlB1dN3iqry+qyhqwpa8nasrasI+vIurKurCfryfqyvmwg75ENZV8YCI1lVmeayuHQTI6AFrKlbCVby5fhAdlWjoJ2sr3sIB+SY2A0dJJtXZJ8VHaWE6CLfFxOhCdkNzkZusunZA/5tOwpn5G9ZDvXW/aR06Cv7CdnQn85QA6Ug+RsqCmzOlZLviifyTlcjpAvycXwshwlX5Gj5Rg5Vr4qx8nxcoKcKCfJyTJFvianyNflVPmGnCanyxlypkyVs2SafFPOlnPkXPmWnCfnywVyoVwkF8sl8m25VL4j0+W7cpl8T2bI5XKFXClXydVyjVwr18n1coPcKDfJzXKL3Cq3yffldrlD7pS75G65R+6VH8h98kO5X34kM+XH8oD8mzwoP5GH5KfysPxMHpGfy6PyC3lMfimPy6/kCXlSnpJfy9PyG3lGnpXn5LfyvPxOXpDfy4vSS6FASaWUVoHKoXKqGJVLxaorVJzKrfKovCqirlTx6iqVT12t8qsCqqAupAqrIqqoMgqVVaRCVUwVV1F1jSqhrlUJqqQqpUorp8qoRHWdKquuV+XUDaq8qqAqqhtVJVVZVfFC3ayqqltUNXWrqq5uUzVUTVVL1Va3qzrqDlVX3anqqbtUfXW3aqDuUQ3VvaqRaqyaqPtUU3W/aqaaqxaqpWqlWqs26gHVVj2o2qn2qoN6SHVUD6tO6hGVpB5VndVjqot6XHVVT6hu6knVXT2leqinVU/1vbqovOqt+qhk1Vf1U8+p/mqAGqgGqcHqeTVEvaCGqhfVMDVcjVAvqZHqZTVKvaJGqzFqrHpVjVPj1QQ1UU1Sk1WKek1NUa+rqeoNNU1NVzPUTJWqZqmBP8009w/kv/4b+UN/OPtWtU29r7arHWqn2qV2qz1qr9qr9ql9ar/arzJVpjqgDqiD6qA6pA6pw+qwOqKOqKPqqDqmjqnj6rg6oU6qb9XX6rT6Rp1RZ9VZ9a06r86rCz+9B0KDllpprQOdQ+fUMTqXjtVX6DidW+fReXVEX6nj9VU6n75a59cFdEFdSBfWRXRRbTRqq0mHupgurqP6Gl1CX6sTdEldSpfWTpfRifq6/3P+79XXRrfRbXVb3U630x10B91Rd9SddCedpJN0Z91Zd9FddFfdVXfT3XR33V330D10T91T99K9dG/dWyfrZN1PP6f76wF6oB6kB+vn9RA9RA/VQ/UwPUyP0CP0SD1Sj9Kj9Gg9Wo/VY/U4PU5P0BP0JD1Jp/i8eoqeoqfqqXqanqZnDM6rU3WqTtNperaerefquXqenqcX6AV6kV6kl+gleqleqtN1ul6ml+kMvVwv1yv1Sr1ar9Zr9Vq9Xq/XG/VGvVlv1hl6m96mt+vteqfeqXfr3Xqv3qv36X16v96vM3WmPqAP6IP6oD6kD+nD+rA+oo/oo/qoPqaP6eP6uD6hT+hT+pQ+rU/rM/qMPqfP6fP6vL6gL+iL+mLWsi+QgQx0oIMcQY4gJogJYoPYIC6IC/IEeYJIEAnig/ggX3B1kD8oEBQMCgWFgyJB0cAEGNiAgjAoFhQPosE1QYng2iAhKBmUCkoHLigTJAbXBWWD64NywQ1B+aBCUDG4MagUVA6qBDcFNwdVg1uCasGtQfXgtqBGUDOoFdQObg/qBHcEdYM7g3rBXUH94O6gQXBP0DC4N2gUNA6aBPcFTYP7g2ZB86BF0DJoFbQO2vyp83t/psCDrrfpY5JNX9PPPGf6mwFmoBlkBpvnzRDzghlqXjTDzHAzwrxkRpqXzSjzihltxpix5lUzzow3E8xEM8lMNinmNTPFvG6mmjfMNDPdzAhmmlQzy6SZN81sM8fMNW+ZeWa+WWAWmkVmsYEfl8Qi3bxrlpn3TIZZblaYlWaVWW3WmLVmnVlvNpiNZpPZXH7Ij4ea7WaH2Wl2md1mj9lrPjD7zIdmv/nIZJqPzQHzN3PQfGIOmU/NYfOZOWI+N0fNF+aY+dIcN1+ZE+akOWW+NqfNN+aMOWvOmW/NefOduWC+NxeNz1rcZ329o0aNOTAHxmAMxmIsxmEc5sE8GMEIxmM85sN8mB/zY0EsiIWxMBbFopiFkLAYFsMoRrEElsAETMBSWAodOkzERCyLZbEclsPyWB4rYkWshJWwClbBm/FmvAVvwVvxVrwNb8OaWBNrY22sg3WwLtbFelgP62N9bIANsCE2xEbYCJtgE2yKTbEZNsMW2AJbYStsE9MG22JbbIftsAN2wI7YETthJ0zCJOyMnbELdsGu2BW7YTfsjt2xB/bAntgTe2Ev7I29MRmTsR/2w/7YHwfiQByMg3EIDsGhOBSH4TAcgSNwJI7EUTgKR+MYHIuv4jgcjxNwIk7CyZiCKTgFp+BUnIrTcBrOwBmYiqmYhmk4G2fjXJyL83AeLsAFuAgX4RJcgktxKaZjOi7DZZiBGbgCV+AqXIVrcA2uw3W4ATfgJtyEW3ALbsNtuB23407cibtxN+7FvbgP9+F+3I+ZmIkH8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8jifwBJ7CU3gaT+MZPIPn8Byex+/wAn6PF9FjjM1lY+0VNs7mtnlsXvvruKAtZAvbIraoNTa/LfCLGK3NkWBL2lK2tHW2jE2019lfx5VsZVvF3mRvtlXtLbaarWRzif8Z17F32Lr2TlvP3mVr29t/Ede3d9sG9n7b0Da3jWxL28S2tk3t/baZbW5b2Ja2lW1tO9qHbSf7iE2yj9rO9rG/i5fad+w6u95usBvtPvuhPWe/tUftF/a8/c72tn3sYPu8HWJfsEPti3aYHf7LWAg71r5qx9nxdoKdaCfZyX8Xz7AzbaqdZdPsm3a2nfN38RL7tp1n0+0Cu9Ausot/iLNqSrfv2mX2PZthl9sVdqVdZVfbNXbt/691pd1st9itdq/9wG63O+xOu8vutnt+iLOuY7/9yGbaj+0R+7k9aD+xh+wxe9h+Zo9AshD2C3vMfmmP26/sCXvSnrJf29P2G3vGnv3h+rOu/Wv7vb1ovRUEJEmRpoByUE6KoVwUS1dQHOWmPJSXInQlxdNVlI+upvxUgApSISpMRagoGUKyRBRSMSpOUbqGStC1lEAlqRSVJkdlKJGuo7J0PZWjG6g8VaCKdCNVospUhW6im6kq3ULV6FaqTrdRDapJtag23U516A6qS3dSPbqL6tPd1IDuoYZ0LzWixtSE7qOmdD81o+bUglpSK2pNbegBaksPUjtqTx3oIepID1MneoSS6FHqTI9RF3qcutIT1I2epO70FPWgp6knPUO96FnqTX0omfpSP3qO+tMAGkiDaDA9T0PoBRpKL9IwGk4j6CUaSS/TKHqFRtMYGkuv0jgaTxNoIk2iyZRCr9EUep2m0hs0jabTDJpJqTSL0uhNmk1zaC69RfNoPi2ghbSIFtMSepuW0juUTu/SMnqPMmg5raCVtIpW0xpaS+toPW2gjbSJNtMW2krb6H3aTjtoJ+2i3bSH9tIHtI8+pP30EWXSx3SA/kYH6RM6RJ/SYfqMjtDndJS+oGP0JR2nr+gEnaRT9DWdpm/oDJ2lc/Qtnafv6AJ9TxfJkwghlKEKdRiEOcKcYUyYK4wNrwjjwtxhnjBvGAmvDOPDq8J84dVh/rBAWDAsFBYOi4RFQxNiaEMKw7BYWDyMhteEJcJrw4SwZFgqLB26sEyYGF4Xlg2vD8uFN4TlwwphxfDGsFJYOawS3hTeHFYNbwmrhbeG1cPbwhphzbBWWDu8PawT3hHWDe8M64V3heXCu8MG4T1hw/DesFHYOGwS3hc2De8Pm4XNwxZhy7BV2DpsEz4Qtg0fDNuF7cMO4UNhx/DhsFP4SJgUPhp2Dh+7tL9k8OO36a/2J4d9Q/XTE7I71aLo4uiS6NvRpdF3ounRd6PLou9FM6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Kbo1uiW6Pe184pHGTdCAvtApfD5XQxLpeLFcLFudwuj8vrIu5KF++ucvnc1S6/K+AKukKusCviijrj0FlHLnTFXHEXdde4Eu5al+BKulKutHOujEt0rV0b18a1dQ+6dq696+Aecg+5h93D7pGYnwp3Xdzjrqt7wnVzT7on3VOuh3va9XTPuF7uWdfb9XHJLtn1c/1cf9ffDXQD3WA32A1xQ9xQN9QNc8PcCDfCjXQj3Sg3yo12o91YN9aNc+PcBDfBTXKTXIpLcVPcFDfVTXXT3DQ3w81wqS7Vpbk0N9vNdnPdXDfPzXML3AK3yC1yS9wSt9Qtdeku3S1zy1yGy3Ar3Aq3yq1ya9wat86tcxvcBrfJbXJb3Ba3zW1z2912t9PtdLvdbrfX7XX73D633+13mS7THXAH3EF30B1yn7rD7jN3xH3ujrov3DH3pTvuvnIn3El3ynl12n3jzriz7pz71p1337kL7nt30XmXEnktMiXyemRq5I3ItMj0yIzIzEhqZFYkLfJmZHZkTmRu5K3IvMj8yIKf39HI25GlkXci6ZF3I8si70UyIssjKyIrI6siqyPeF9ke+mK+uI/6a3wJf61P8CV9KV/aO1/GJ/rrfFl/vS/nb/DlfQVf0d/oK/nKvopv7lv4lr6Vb+3b+Ad8W/+gb+fb+w7+Id/RP+w7+Ud8kn/Ud/aP+S7+cd/VP+G7+Sd9d//U/J9q8r38s7637+OTfV/fzz/n+/sBfqAf5Af75/0Q/4If6l/0w/xwP8K/5Ef6l/0o/4of7cf4sf5VP86P9xP8RD/JT/Yp/jU/xb/up/o3/DQ/3c/wM32qn+XT/Jt+tp/j5/q3/Dw/3y/wC/0iv9gv8W/7pf4dn+7f9cv8ez7DL/cr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zb/vt/sdfqff5Xf7PX6v/8Dv8x/6/f4jn+k/9gf83/xB/4k/5D/1h/1n/oj/3B/1X/hj/kt/3H/lT/iT/pT/2p/23/gz/qw/57/15/13/oL/3l/kf7PGGGOMMfaHqN/Z3/c3XpM/bVn6CSFy7yh0+Ndzbsr/43iA3Nc5IoR4tE/3xj9vjRsnJyf/dGyGEkHxhVkr60v5P/z+wE/xctFBPCySRHtR9jfrGyCr/LDu+9/mj1YQIlaIXD/nZC3mY8Wv57/+H8zf/G36vfkXCpFQ/FJO1ol+ji/NX+4fzL+n4+/Mn+uTFCHa/Y+cOHEpvjR/onhQPCaSfnEkY4wxxhhjjDH2owHyfI/fu7/Nuj8vrC/l5BSX4t+7P/8d1f6Ma2CMMcYYY4wxxtj/7omnez7yQFJS+67/zYOcf40y/pQBCCH+9fSs7L/CVfDgLz+43H8zMcYYY4wxxv5slxb9l7sSxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMs+/onfxjs5/9k+emej8g/nHW5r5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi73P5fAAAA//+Ctk/P")
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x9)

977.725087ms ago: executing program 2 (id=656):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x64004000)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x8d0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c)
listen(r3, 0x6f6)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8)

584.757156ms ago: executing program 1 (id=657):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

418.79196ms ago: executing program 1 (id=658):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0xf}, {}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xfffe}, "77ae"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010)

228.284504ms ago: executing program 1 (id=659):
r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002"], 0x0)
syz_usb_ep_read(r0, 0x3, 0x0, 0x0)
syz_usb_ep_write(r0, 0x84, 0x0, &(0x7f0000000100))

197.005535ms ago: executing program 0 (id=660):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r0=>0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
fcntl$dupfd(r1, 0x406, r1)
sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_ublk_setup_queues(r3, r0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

30.036319ms ago: executing program 0 (id=661):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94)
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

0s ago: executing program 2 (id=662):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000100001002bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a43010000000000300016802c0001802800010022540000000000000000000000000000000000000000000000000000000000000000000014000300776c616e30"], 0x6c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts.
[   78.871761][ T5761] cgroup: Unknown subsys name 'net'
[   78.984475][ T5761] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   80.645609][ T5761] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   82.353977][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.361786][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.370452][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.378883][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.387013][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.394985][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.406059][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.427977][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.445823][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.453347][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.462590][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.470348][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.478468][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.485560][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.487399][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   82.498121][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   82.500344][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.507802][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   82.522126][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.524540][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.529713][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.538603][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   82.547339][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.552667][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.049037][ T5774] chnl_net:caif_netlink_parms(): no params data found
[   83.163605][ T5772] chnl_net:caif_netlink_parms(): no params data found
[   83.174780][ T5775] chnl_net:caif_netlink_parms(): no params data found
[   83.220875][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.228925][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.236701][ T5774] bridge_slave_0: entered allmulticast mode
[   83.244291][ T5774] bridge_slave_0: entered promiscuous mode
[   83.296423][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.303614][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.311688][ T5774] bridge_slave_1: entered allmulticast mode
[   83.318940][ T5774] bridge_slave_1: entered promiscuous mode
[   83.337825][ T5773] chnl_net:caif_netlink_parms(): no params data found
[   83.417497][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.430212][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.541124][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.548762][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.556010][ T5775] bridge_slave_0: entered allmulticast mode
[   83.563515][ T5775] bridge_slave_0: entered promiscuous mode
[   83.572259][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.579899][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.587519][ T5772] bridge_slave_0: entered allmulticast mode
[   83.594798][ T5772] bridge_slave_0: entered promiscuous mode
[   83.615532][ T5774] team0: Port device team_slave_0 added
[   83.622008][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.632366][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.639674][ T5773] bridge_slave_0: entered allmulticast mode
[   83.647085][ T5773] bridge_slave_0: entered promiscuous mode
[   83.654882][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.665221][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.673031][ T5775] bridge_slave_1: entered allmulticast mode
[   83.680688][ T5775] bridge_slave_1: entered promiscuous mode
[   83.687937][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.695094][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.702759][ T5772] bridge_slave_1: entered allmulticast mode
[   83.710508][ T5772] bridge_slave_1: entered promiscuous mode
[   83.719566][ T5774] team0: Port device team_slave_1 added
[   83.729328][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.736613][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.743788][ T5773] bridge_slave_1: entered allmulticast mode
[   83.751626][ T5773] bridge_slave_1: entered promiscuous mode
[   83.804426][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.817919][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.882595][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.889973][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.916234][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.931380][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.943871][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.968990][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.976329][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.002549][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.022664][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.040876][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.052751][ T5772] team0: Port device team_slave_0 added
[   84.062063][ T5772] team0: Port device team_slave_1 added
[   84.142502][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.149974][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.176511][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.189720][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.196950][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.223113][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.240286][ T5773] team0: Port device team_slave_0 added
[   84.249849][ T5773] team0: Port device team_slave_1 added
[   84.259294][ T5775] team0: Port device team_slave_0 added
[   84.283519][ T5774] hsr_slave_0: entered promiscuous mode
[   84.290181][ T5774] hsr_slave_1: entered promiscuous mode
[   84.318747][ T5775] team0: Port device team_slave_1 added
[   84.361461][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.368568][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.397816][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.431040][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.438236][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.464626][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.478223][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.485224][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.511620][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.523625][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.530772][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.557002][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.586630][ T5783] Bluetooth: hci0: command tx timeout
[   84.592332][ T5783] Bluetooth: hci3: command tx timeout
[   84.598393][ T5782] Bluetooth: hci1: command tx timeout
[   84.613703][ T5772] hsr_slave_0: entered promiscuous mode
[   84.620363][ T5772] hsr_slave_1: entered promiscuous mode
[   84.627265][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.635132][ T5772] Cannot create hsr debugfs directory
[   84.665788][ T5790] Bluetooth: hci2: command tx timeout
[   84.730377][ T5773] hsr_slave_0: entered promiscuous mode
[   84.737719][ T5773] hsr_slave_1: entered promiscuous mode
[   84.743895][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.752333][ T5773] Cannot create hsr debugfs directory
[   84.791537][ T5775] hsr_slave_0: entered promiscuous mode
[   84.798135][ T5775] hsr_slave_1: entered promiscuous mode
[   84.804313][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.811976][ T5775] Cannot create hsr debugfs directory
[   85.222875][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   85.248529][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   85.267983][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   85.279789][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   85.347259][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   85.357696][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   85.368188][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   85.380517][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   85.481995][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.498824][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.513492][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   85.525048][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.634810][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   85.648097][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.659512][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.672012][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   85.695232][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.749707][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   85.782024][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.789501][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.811037][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.818271][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.853009][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.913614][ T5772] 8021q: adding VLAN 0 to HW filter on device team0
[   85.956978][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.964210][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.987221][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.000089][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.007394][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.077625][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[   86.124792][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.132035][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.149682][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.156924][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.248353][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.305259][ T5773] 8021q: adding VLAN 0 to HW filter on device team0
[   86.343273][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.350538][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.433740][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.441015][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.574733][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.666026][ T5790] Bluetooth: hci3: command tx timeout
[   86.671513][ T5790] Bluetooth: hci1: command tx timeout
[   86.678519][ T5783] Bluetooth: hci0: command tx timeout
[   86.745987][ T5790] Bluetooth: hci2: command tx timeout
[   86.780634][ T5774] veth0_vlan: entered promiscuous mode
[   86.800143][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.839782][ T5774] veth1_vlan: entered promiscuous mode
[   86.937594][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.992597][ T5772] veth0_vlan: entered promiscuous mode
[   87.017707][ T5774] veth0_macvtap: entered promiscuous mode
[   87.065039][ T5774] veth1_macvtap: entered promiscuous mode
[   87.076628][ T5772] veth1_vlan: entered promiscuous mode
[   87.091435][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.135385][ T5775] veth0_vlan: entered promiscuous mode
[   87.173470][ T5775] veth1_vlan: entered promiscuous mode
[   87.189778][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.225069][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.268476][ T5773] veth0_vlan: entered promiscuous mode
[   87.283866][ T5773] veth1_vlan: entered promiscuous mode
[   87.311256][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.322003][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.331904][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.341178][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.353148][ T5772] veth0_macvtap: entered promiscuous mode
[   87.369485][ T5775] veth0_macvtap: entered promiscuous mode
[   87.402042][ T5772] veth1_macvtap: entered promiscuous mode
[   87.438280][ T5775] veth1_macvtap: entered promiscuous mode
[   87.470449][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.487692][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.501587][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.549686][ T5773] veth0_macvtap: entered promiscuous mode
[   87.575628][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.590054][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.603628][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.614622][ T5773] veth1_macvtap: entered promiscuous mode
[   87.624243][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.639318][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.649839][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.660923][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.672882][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.722046][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.731609][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.741187][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.750384][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.767782][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.779068][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.791180][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.802097][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.815532][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.826246][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.834321][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.855057][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.864465][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.880584][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.892826][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.925293][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.940231][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.951653][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.962599][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.972753][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.984194][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.002740][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.049540][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.061319][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.071799][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.083239][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.093789][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.112394][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.126423][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.160236][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.169620][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.184570][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.193828][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.208237][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.231176][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.376681][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.384670][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.482308][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.506962][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.566245][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.574229][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.749244][ T5782] Bluetooth: hci0: command tx timeout
[   88.755170][ T5783] Bluetooth: hci3: command tx timeout
[   88.761215][ T5790] Bluetooth: hci1: command tx timeout
[   88.774646][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.826793][ T5790] Bluetooth: hci2: command tx timeout
[   88.832260][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.894293][ T3451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.902310][ T3451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.625498][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.640603][ T5845] syz.0.1[5845]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   89.672173][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.783941][ T5845] loop0: detected capacity change from 0 to 1024
[   89.833902][ T5845] =======================================================
[   89.833902][ T5845] WARNING: The mand mount option has been deprecated and
[   89.833902][ T5845]          and is ignored by this kernel. Remove the mand
[   89.833902][ T5845]          option from the mount to silence this warning.
[   89.833902][ T5845] =======================================================
[   89.857570][ T5852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[   90.004634][ T5845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   90.037322][ T5850] loop2: detected capacity change from 0 to 4096
[   90.051750][ T5845] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.117374][ T5845] EXT4-fs (loop0): re-mounted 00000000-0000-0006-0000-000000000000.
[   90.183834][ T5845] EXT4-fs (loop0): re-mounted 00000000-0000-0006-0000-000000000000.
[   90.301834][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   90.377869][ T5848] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   90.775828][ T5848] usb 4-1: Using ep0 maxpacket: 32
[   90.796839][ T5848] usb 4-1: config index 0 descriptor too short (expected 27632, got 27)
[   90.805882][ T5848] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   90.814530][ T5848] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[   90.824482][ T5848] usb 4-1: config 1 has no interface number 0
[   90.831048][ T5790] Bluetooth: hci1: command tx timeout
[   90.831117][ T5790] Bluetooth: hci3: command tx timeout
[   90.831162][ T5790] Bluetooth: hci0: command tx timeout
[   90.862640][ T5848] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   90.901410][ T5848] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[   90.914466][ T5783] Bluetooth: hci2: command tx timeout
[   92.973545][  T789] cfg80211: failed to load regulatory.db
[   93.185189][ T5848] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   93.194947][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.357352][ T5848] usb 4-1: can't set config #1, error -71
[   93.377051][ T5848] usb 4-1: USB disconnect, device number 2
[   93.428020][ T5875] netdevsim netdevsim1: loading /lib/firmware// failed with error -22
[   93.564068][ T5884] loop2: detected capacity change from 0 to 64
[   94.175865][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.792955][ T5875] netdevsim netdevsim1: Direct firmware load for / failed with error -22
[   95.827864][ T5875] netdevsim netdevsim1: Falling back to sysfs fallback for: /
[   95.918685][ T5884] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[   97.335525][ T5899] loop2: detected capacity change from 0 to 32768
[   97.391820][ T5899] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   97.400323][ T5899] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   97.437637][ T5899] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[   97.448737][    T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   97.456782][    T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   97.578309][    T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 121ms
[   97.606616][    T9] gfs2: fsid=syz:syz.0: jid=0: Done
[   97.613463][ T5899] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   97.883566][ T5899] gfs2: fsid=syz:syz.0: found 1 quota changes
[   97.986181][ T5899] syz.2.20: attempt to access beyond end of device
[   97.986181][ T5899] loop2: rw=12288, sector=6755399441055880, nr_sectors = 8 limit=32768
[   98.043938][ T5899] syz.2.20: attempt to access beyond end of device
[   98.043938][ T5899] loop2: rw=12288, sector=6755399441055880, nr_sectors = 8 limit=32768
[   98.914493][ T5921] loop0: detected capacity change from 0 to 64
[   98.973599][ T5921] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[   99.006156][ T5774] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[   99.006156][ T5774]   inode = 11 2339
[   99.006156][ T5774]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421
[   99.284831][ T5774] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[   99.451970][ T5774] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:5774 [syz-executor] gfs2_quota_sync+0x411/0x5a0
[   99.685759][ T5774] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[   99.694113][ T5774] gfs2: fsid=syz:syz.0: about to withdraw this file system
[   99.713593][ T5774] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[   99.735574][ T5774] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[   99.756968][ T5774] gfs2: fsid=syz:syz.0: File system withdrawn
[   99.763750][ T5774] CPU: 1 PID: 5774 Comm: syz-executor Not tainted syzkaller #0
[   99.771348][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   99.781459][ T5774] Call Trace:
[   99.784783][ T5774]  <TASK>
[   99.787791][ T5774]  dump_stack_lvl+0x18c/0x250
[   99.792539][ T5774]  ? show_regs_print_info+0x20/0x20
[   99.797784][ T5774]  ? load_image+0x420/0x420
[   99.802295][ T5774]  ? kobject_uevent_env+0x368/0x890
[   99.807535][ T5774]  gfs2_withdraw+0xe16/0x1400
[   99.812304][ T5774]  ? gfs2_lm+0x240/0x240
[   99.816608][ T5774]  ? lockdep_hardirqs_on+0x98/0x150
[   99.821864][ T5774]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[   99.827653][ T5774]  ? gfs2_consist_inode_i+0xf5/0x110
[   99.832992][ T5774]  gfs2_inode_refresh+0xb3c/0x11a0
[   99.838184][ T5774]  ? gfs2_inode_metasync+0xf0/0xf0
[   99.843318][ T5774]  ? gfs2_glock_nq+0xe2e/0x1440
[   99.848199][ T5774]  gfs2_instantiate+0x162/0x220
[   99.853078][ T5774]  gfs2_glock_wait+0x1d4/0x2a0
[   99.857888][ T5774]  do_sync+0x4b8/0xd90
[   99.862031][ T5774]  ? gfs2_quota_sync+0x411/0x5a0
[   99.867009][ T5774]  ? bh_get+0x760/0x760
[   99.871233][ T5774]  ? gfs2_quota_sync+0x318/0x5a0
[   99.876224][ T5774]  ? gfs2_quota_sync+0x411/0x5a0
[   99.881218][ T5774]  ? do_raw_spin_unlock+0x121/0x230
[   99.886482][ T5774]  gfs2_quota_sync+0x411/0x5a0
[   99.891295][ T5774]  gfs2_sync_fs+0x4c/0xb0
[   99.895663][ T5774]  sync_filesystem+0xea/0x220
[   99.900380][ T5774]  generic_shutdown_super+0x6f/0x2b0
[   99.905739][ T5774]  kill_block_super+0x44/0x90
[   99.910472][ T5774]  deactivate_locked_super+0x97/0x100
[   99.915889][ T5774]  cleanup_mnt+0x3d7/0x460
[   99.920355][ T5774]  task_work_run+0x1d4/0x260
[   99.924999][ T5774]  ? task_work_cancel+0x220/0x220
[   99.930081][ T5774]  ? exit_to_user_mode_loop+0x3b/0x110
[   99.935599][ T5774]  exit_to_user_mode_loop+0xe6/0x110
[   99.940935][ T5774]  exit_to_user_mode_prepare+0xee/0x180
[   99.946540][ T5774]  syscall_exit_to_user_mode+0x1a/0x50
[   99.952045][ T5774]  do_syscall_64+0x61/0xb0
[   99.956513][ T5774]  ? clear_bhb_loop+0x40/0x90
[   99.961231][ T5774]  ? clear_bhb_loop+0x40/0x90
[   99.965959][ T5774]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   99.971918][ T5774] RIP: 0033:0x7f8ff999f397
[   99.976414][ T5774] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   99.996048][ T5774] RSP: 002b:00007ffec7988d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  100.004494][ T5774] RAX: 0000000000000000 RBX: 00007f8ff9a34474 RCX: 00007f8ff999f397
[  100.012509][ T5774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec7988dd0
[  100.020529][ T5774] RBP: 00007ffec7988dd0 R08: 00007ffec7989dd0 R09: 00000000ffffffff
[  100.028568][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec7989e60
[  100.036575][ T5774] R13: 00007f8ff9a34474 R14: 0000000000017f0c R15: 00007ffec7989ea0
[  100.044591][ T5774]  </TASK>
[  102.181355][ T5945] netdevsim netdevsim3: loading /lib/firmware// failed with error -22
[  102.189983][ T5945] netdevsim netdevsim3: Direct firmware load for / failed with error -22
[  102.198534][ T5945] netdevsim netdevsim3: Falling back to sysfs fallback for: /
[  103.933673][ T5956] loop0: detected capacity change from 0 to 64
[  104.079078][ T5956] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  104.099984][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  104.732330][    T9] usb 4-1: Using ep0 maxpacket: 16
[  104.770309][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  104.817452][    T9] usb 4-1: config 9 has an invalid interface number: 57 but max is 0
[  104.880281][    T9] usb 4-1: config 9 has no interface number 0
[  104.918635][    T9] usb 4-1: config 9 interface 57 has no altsetting 0
[  104.946845][    T9] usb 4-1: string descriptor 0 read error: -22
[  104.953406][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[  104.985940][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.239578][    T9]  (null): keene_cmd_main failed (-71)
[  105.322170][    T9] video4linux radio48: keene_cmd_main failed (-71)
[  105.340722][    T9] radio-keene 4-1:9.57: V4L2 device registered as radio48
[  105.353372][    T9] usb 4-1: USB disconnect, device number 3
[  105.922216][ T5974] loop2: detected capacity change from 0 to 64
[  106.080905][ T5974] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  106.634298][ T5982] loop1: detected capacity change from 0 to 2048
[  106.676939][ T5982] UDF-fs: bad mount option "io" or missing value
[  107.018126][ T5992] loop0: detected capacity change from 0 to 64
[  107.154303][ T5995] netdevsim netdevsim3: loading /lib/firmware// failed with error -22
[  107.162796][ T5995] netdevsim netdevsim3: Direct firmware load for / failed with error -22
[  107.171424][ T5995] netdevsim netdevsim3: Falling back to sysfs fallback for: /
[  107.582730][ T5992] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  109.259504][ T6007] loop2: detected capacity change from 0 to 64
[  109.945802][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  111.483569][ T6007] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  112.977831][ T6024] loop2: detected capacity change from 0 to 64
[  115.197086][ T6024] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  115.595956][ T6034] loop3: detected capacity change from 0 to 64
[  117.797402][ T6034] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  119.401828][ T6049] netdevsim netdevsim2: loading /lib/firmware// failed with error -22
[  119.411065][ T6049] netdevsim netdevsim2: Direct firmware load for / failed with error -22
[  119.419691][ T6049] netdevsim netdevsim2: Falling back to sysfs fallback for: /
[  119.933320][ T6058] UBIFS error (pid: 6058): cannot open "ubi0", error -19
[  120.375877][ T2133] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  120.588471][ T2133] usb 1-1: Using ep0 maxpacket: 8
[  120.607385][ T2133] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13
[  120.619920][ T2133] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  120.635796][ T2133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.655744][ T2133] usb 1-1: Product: syz
[  120.664113][ T2133] usb 1-1: Manufacturer: syz
[  120.675773][ T2133] usb 1-1: SerialNumber: syz
[  120.691046][ T2133] usb 1-1: config 0 descriptor??
[  120.714534][ T2133] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  120.921669][ T6062] libceph: resolve '0' (ret=-3): failed
[  121.230418][ T6074] loop2: detected capacity change from 0 to 64
[  122.296324][ T2133] gspca_zc3xx: reg_w_i err -110
[  123.631644][ T6074] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  124.238126][ T2133] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  124.265970][ T2133] gspca_zc3xx: probe of 1-1:0.0 failed with error -110
[  124.342385][ T2133] usb 1-1: USB disconnect, device number 2
[  125.174319][ T6102] loop2: detected capacity change from 0 to 128
[  125.222083][ T6102] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  125.233800][ T6102] qnx6: wrong signature (magic) in superblock #1.
[  125.241063][ T6102] qnx6: unable to read the first superblock
[  125.332121][ T6106] loop1: detected capacity change from 0 to 64
[  125.398240][ T6106] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  125.526069][ T5777] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  125.855901][ T5777] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  125.992998][ T5777] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  126.116159][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.147413][ T6102] loop2: detected capacity change from 0 to 2048
[  126.158801][ T5777] gspca_main: stv0680-2.14.0 probing 041e:4007
[  126.229411][ T6108] overlayfs: failed to resolve './file0': -2
[  126.263353][ T6109] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  126.894176][ T5848] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  127.239597][ T5777] stv0680 1-1:4.0: STV(e): camera ping failed!!
[  127.246181][ T5848] usb 4-1: Using ep0 maxpacket: 32
[  127.272799][ T5848] usb 4-1: config index 0 descriptor too short (expected 27632, got 27)
[  127.300260][ T5848] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  127.340376][ T5848] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  127.360731][ T5848] usb 4-1: config 1 has no interface number 0
[  127.372869][ T5848] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  127.391473][ T5848] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  127.405225][ T5848] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  127.421055][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.455078][ T5777] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  127.495342][ T5777] stv0680 1-1:4.0: last error: 0,  command = 0x0
[  127.520964][ T5848] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  127.559958][ T5777] usb 1-1: USB disconnect, device number 3
[  127.585897][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  127.693265][ T5848] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  127.756923][ T6128] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  127.777274][    T9] usb 3-1: Using ep0 maxpacket: 16
[  127.795426][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  127.807192][    T9] usb 3-1: unable to read config index 0 descriptor/start: -71
[  127.815061][    T9] usb 3-1: can't read configurations, error -71
[  127.910028][ T5817] usb 4-1: USB disconnect, device number 4
[  127.936472][ T5817] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  130.780463][ T6165] loop2: detected capacity change from 0 to 64
[  130.881457][ T6165] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  131.455928][ T5777] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  131.820270][ T5777] usb 1-1: Using ep0 maxpacket: 16
[  131.854829][ T5777] usb 1-1: unable to get BOS descriptor or descriptor too short
[  131.867774][ T5777] usb 1-1: unable to read config index 0 descriptor/start: -71
[  131.883439][ T5777] usb 1-1: can't read configurations, error -71
[  133.071338][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  133.241296][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  133.691236][ T6178] capability: warning: `syz.2.119' uses 32-bit capabilities (legacy support in use)
[  133.882365][ T6184] fuse: root generation should be zero
[  133.906031][ T6185] Zero length message leads to an empty skb
[  134.147559][ T6197] loop0: detected capacity change from 0 to 256
[  134.203653][ T6197] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  134.252479][   T28] audit: type=1800 audit(1788040327.811:2): pid=6197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.124" name="file1" dev="loop0" ino=1048592 res=0 errno=0
[  134.287067][   T28] audit: type=1800 audit(1788040327.831:3): pid=6197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.124" name="file1" dev="loop0" ino=1048592 res=0 errno=0
[  134.629441][ T6197] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008)
[  134.638054][ T6197] FAT-fs (loop0): Filesystem has been set read-only
[  134.645025][ T6197] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008)
[  134.655115][ T6197] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008)
[  134.664087][ T6197] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008)
[  134.672870][ T6197] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008)
[  134.681427][ T6197] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008)
[  135.085788][   T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  135.185861][ T5848] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  135.406497][ T5848] usb 3-1: Using ep0 maxpacket: 16
[  135.631910][ T5848] usb 3-1: unable to get BOS descriptor or descriptor too short
[  135.732692][ T5848] usb 3-1: unable to read config index 0 descriptor/start: -71
[  135.807689][ T5848] usb 3-1: can't read configurations, error -71
[  136.078463][   T27] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  136.090015][   T27] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  136.099926][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.188770][   T27] gspca_main: stv0680-2.14.0 probing 041e:4007
[  136.786989][ T6220] loop1: detected capacity change from 0 to 16
[  136.822373][ T6220] erofs: (device loop1): mounted with root inode @ nid 36.
[  136.822480][ T6222] loop0: detected capacity change from 0 to 512
[  136.919521][ T6222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.936936][ T6222] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.232496][ T6231] loop2: detected capacity change from 0 to 256
[  137.233104][   T27] stv0680 4-1:4.0: STV(e): camera ping failed!!
[  137.584959][   T27] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  137.755630][ T6231] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  137.774223][   T27] stv0680 4-1:4.0: last error: 0,  command = 0x0
[  137.834779][   T27] usb 4-1: USB disconnect, device number 5
[  137.901352][   T28] audit: type=1800 audit(1788040331.431:4): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.136" name="file1" dev="loop2" ino=1048593 res=0 errno=0
[  138.007364][   T28] audit: type=1800 audit(1788040331.461:5): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.136" name="file1" dev="loop2" ino=1048593 res=0 errno=0
[  138.047717][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.360378][ T6231] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[  139.377057][ T6231] FAT-fs (loop2): Filesystem has been set read-only
[  139.384270][ T6231] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[  139.397292][ T6231] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[  139.405331][ T6231] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[  139.414051][ T6231] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[  139.428208][ T6231] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[  141.530196][ T6271] loop1: detected capacity change from 0 to 256
[  141.568582][ T6271] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  141.640786][   T28] audit: type=1800 audit(1788040335.201:6): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.150" name="file1" dev="loop1" ino=1048594 res=0 errno=0
[  141.704553][   T28] audit: type=1800 audit(1788040335.231:7): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.150" name="file1" dev="loop1" ino=1048594 res=0 errno=0
[  141.735780][ T5777] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  141.939396][ T5777] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  141.970439][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.005558][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.037439][ T5777] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  142.084780][ T5777] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  142.104468][ T5777] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  142.134651][ T5777] usb 4-1: Manufacturer: syz
[  142.159671][ T5777] usb 4-1: config 0 descriptor??
[  142.469739][ T6271] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  142.510299][ T6271] FAT-fs (loop1): Filesystem has been set read-only
[  142.554414][ T6271] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  142.579787][ T6271] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  142.594273][ T6271] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  142.610291][ T5777] appleir 0003:05AC:8243.0001: unknown main item tag 0x0
[  142.625299][ T6271] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  142.636624][ T6271] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  142.644995][ T5777] appleir 0003:05AC:8243.0001: No inputs registered, leaving
[  142.690103][ T5777] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  143.160682][ T5783] Bluetooth: hci3: Malformed LE Event: 0x0d
[  143.267337][ T5777] usb 4-1: USB disconnect, device number 6
[  144.890965][ T6305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.163'.
[  145.002236][ T6305] netlink: 'syz.0.163': attribute type 7 has an invalid length.
[  145.086011][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.163'.
[  145.324535][ T6308] loop1: detected capacity change from 0 to 1024
[  145.337554][ T6305] ip6gretap0: entered promiscuous mode
[  145.355833][ T6305] syz_tun: entered promiscuous mode
[  145.385536][ T6308] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  145.548888][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  145.629185][ T6308] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.164: lblock 2 mapped to illegal pblock 2 (length 1)
[  145.694901][ T6308] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  145.704322][ T6316] FAULT_INJECTION: forcing a failure.
[  145.704322][ T6316] name failslab, interval 1, probability 0, space 0, times 1
[  145.718220][ T6316] CPU: 1 PID: 6316 Comm: syz.0.167 Not tainted syzkaller #0
[  145.725576][ T6316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  145.735677][ T6316] Call Trace:
[  145.739008][ T6316]  <TASK>
[  145.742021][ T6316]  dump_stack_lvl+0x18c/0x250
[  145.746785][ T6316]  ? show_regs_print_info+0x20/0x20
[  145.752045][ T6316]  ? load_image+0x420/0x420
[  145.756601][ T6316]  ? __might_sleep+0xe0/0xe0
[  145.758827][ T6308] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 48: comm syz.1.164: lblock 0 mapped to illegal pblock 48 (length 1)
[  145.761236][ T6316]  ? __lock_acquire+0x7d80/0x7d80
[  145.776127][    T9] usb 3-1: Using ep0 maxpacket: 8
[  145.780263][ T6316]  should_fail_ex+0x394/0x4c0
[  145.790067][ T6316]  should_failslab+0x9/0x20
[  145.794639][ T6316]  slab_pre_alloc_hook+0x59/0x300
[  145.799731][ T6316]  ? security_prepare_creds+0x4b/0x130
[  145.805240][ T6316]  ? security_prepare_creds+0x4b/0x130
[  145.810740][ T6316]  __kmem_cache_alloc_node+0x53/0x250
[  145.816182][ T6316]  ? security_prepare_creds+0x4b/0x130
[  145.821683][ T6316]  __kmalloc+0xa7/0x240
[  145.825900][ T6316]  security_prepare_creds+0x4b/0x130
[  145.831236][ T6316]  prepare_creds+0x427/0x5d0
[  145.835886][ T6316]  lookup_user_key+0x316/0x1140
[  145.840791][ T6316]  ? lookup_user_key_possessed+0x40/0x40
[  145.846486][ T6316]  ? search_process_keyrings_rcu+0x2b0/0x2b0
[  145.852522][ T6316]  ? __might_fault+0xaa/0x120
[  145.857232][ T6316]  ? _copy_from_user+0xa5/0xe0
[  145.862041][ T6316]  __se_sys_add_key+0x315/0x410
[  145.866938][ T6316]  ? __x64_sys_add_key+0xc0/0xc0
[  145.871927][ T6316]  ? lockdep_hardirqs_on+0x98/0x150
[  145.877162][ T6316]  ? __x64_sys_add_key+0x20/0xc0
[  145.882158][ T6316]  do_syscall_64+0x55/0xb0
[  145.886611][ T6316]  ? clear_bhb_loop+0x40/0x90
[  145.891350][ T6316]  ? clear_bhb_loop+0x40/0x90
[  145.896065][ T6316]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  145.901999][ T6316] RIP: 0033:0x7fcf37d9e159
[  145.906464][ T6316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  145.926116][ T6316] RSP: 002b:00007fcf35ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  145.934593][ T6316] RAX: ffffffffffffffda RBX: 00007fcf38025fa0 RCX: 00007fcf37d9e159
[  145.942596][ T6316] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000140
[  145.950600][ T6316] RBP: 00007fcf37e35024 R08: fffffffffffffffe R09: 0000000000000000
[  145.958614][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.966629][ T6316] R13: 00007fcf38026038 R14: 00007fcf38025fa0 R15: 00007ffe20426b88
[  145.974640][ T6316]  </TASK>
[  146.007129][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13
[  146.019042][ T6308] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  146.038906][ T6308] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.164: Failed to acquire dquot type 0
[  146.051922][ T6308] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  146.088728][ T6308] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.164: mark_inode_dirty error
[  146.109745][ T6308] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  146.121190][ T6308] EXT4-fs (loop1): 1 orphan inode deleted
[  146.127340][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  146.132309][ T6308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.154441][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.170561][ T3451] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  146.237992][    T9] usb 3-1: Product: syz
[  146.242245][    T9] usb 3-1: Manufacturer: syz
[  146.251174][ T3451] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  146.255962][    T9] usb 3-1: SerialNumber: syz
[  146.266270][ T3451] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:8: Failed to release dquot type 0
[  146.313028][    T9] usb 3-1: config 0 descriptor??
[  146.319451][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.333430][    T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  146.350596][ T5775] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0
[  146.374632][ T5775] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  146.386697][ T5775] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error
[  146.855324][    T9] gspca_zc3xx: reg_w_i err -71
[  147.384264][ T6328] FAULT_INJECTION: forcing a failure.
[  147.384264][ T6328] name failslab, interval 1, probability 0, space 0, times 0
[  147.397528][ T6328] CPU: 1 PID: 6328 Comm: syz.0.172 Not tainted syzkaller #0
[  147.404878][ T6328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  147.415029][ T6328] Call Trace:
[  147.418362][ T6328]  <TASK>
[  147.421347][ T6328]  dump_stack_lvl+0x18c/0x250
[  147.426121][ T6328]  ? show_regs_print_info+0x20/0x20
[  147.431376][ T6328]  ? load_image+0x420/0x420
[  147.435931][ T6328]  ? __might_sleep+0xe0/0xe0
[  147.440575][ T6328]  ? __lock_acquire+0x7d80/0x7d80
[  147.445666][ T6328]  should_fail_ex+0x394/0x4c0
[  147.450416][ T6328]  should_failslab+0x9/0x20
[  147.454988][ T6328]  slab_pre_alloc_hook+0x59/0x300
[  147.460089][ T6328]  ? prepend_path+0x8a7/0x950
[  147.464825][ T6328]  ? tomoyo_encode+0x2ad/0x570
[  147.469675][ T6328]  ? tomoyo_encode+0x2ad/0x570
[  147.474500][ T6328]  __kmem_cache_alloc_node+0x53/0x250
[  147.479945][ T6328]  ? tomoyo_encode+0x2ad/0x570
[  147.484798][ T6328]  __kmalloc+0xa7/0x240
[  147.489021][ T6328]  tomoyo_encode+0x2ad/0x570
[  147.493660][ T6328]  tomoyo_realpath_from_path+0x57c/0x5c0
[  147.499347][ T6328]  tomoyo_check_open_permission+0x224/0x460
[  147.505293][ T6328]  ? tomoyo_check_open_permission+0x1cf/0x460
[  147.511404][ T6328]  ? tomoyo_check_path_number_acl+0x280/0x280
[  147.517522][ T6328]  ? __asan_memset+0x22/0x40
[  147.522168][ T6328]  ? __rwlock_init+0x150/0x150
[  147.526976][ T6328]  ? tomoyo_file_open+0xed/0x180
[  147.531944][ T6328]  security_file_open+0x62/0xa0
[  147.536848][ T6328]  do_dentry_open+0x32b/0x14b0
[  147.541663][ T6328]  ? __asan_memcpy+0x40/0x70
[  147.546298][ T6328]  path_openat+0x284f/0x3270
[  147.551387][ T6328]  ? do_sys_openat2+0xda/0x1d0
[  147.556190][ T6328]  ? __x64_sys_openat+0x139/0x160
[  147.561264][ T6328]  ? verify_lock_unused+0x140/0x140
[  147.566502][ T6328]  ? do_filp_open+0x430/0x430
[  147.571226][ T6328]  do_filp_open+0x1f2/0x430
[  147.575764][ T6328]  ? vfs_tmpfile+0x620/0x620
[  147.580402][ T6328]  ? _raw_spin_unlock+0x28/0x40
[  147.585280][ T6328]  ? alloc_fd+0x590/0x640
[  147.589655][ T6328]  do_sys_openat2+0x134/0x1d0
[  147.594366][ T6328]  ? do_sys_open+0xe0/0xe0
[  147.598813][ T6328]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  147.604838][ T6328]  ? lock_chain_count+0x20/0x20
[  147.609723][ T6328]  ? lock_chain_count+0x20/0x20
[  147.614611][ T6328]  __x64_sys_openat+0x139/0x160
[  147.619502][ T6328]  do_syscall_64+0x55/0xb0
[  147.623953][ T6328]  ? clear_bhb_loop+0x40/0x90
[  147.628662][ T6328]  ? clear_bhb_loop+0x40/0x90
[  147.633381][ T6328]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  147.639310][ T6328] RIP: 0033:0x7fcf37d5e98e
[  147.643762][ T6328] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  147.663398][ T6328] RSP: 002b:00007fcf35ff5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  147.671849][ T6328] RAX: ffffffffffffffda RBX: 00007fcf35ff66c0 RCX: 00007fcf37d5e98e
[  147.679866][ T6328] RDX: 0000000000008000 RSI: 00007fcf35ff5c00 RDI: ffffffffffffff9c
[  147.687865][ T6328] RBP: 00007fcf35ff5c00 R08: 0000000000000000 R09: 0000000000000000
[  147.695875][ T6328] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  147.703876][ T6328] R13: 00007fcf38026038 R14: 00007fcf38025fa0 R15: 00007ffe20426b88
[  147.711901][ T6328]  </TASK>
[  147.745783][    T9] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  147.755794][    T9] gspca_zc3xx: probe of 3-1:0.0 failed with error -71
[  147.774780][ T6328] ERROR: Out of memory at tomoyo_realpath_from_path.
[  147.789495][    T9] usb 3-1: USB disconnect, device number 6
[  148.043671][ T6339] netlink: 104 bytes leftover after parsing attributes in process `syz.0.176'.
[  148.800900][ T6364] fuse: Bad value for 'user_id'
[  149.135889][ T5777] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  149.337912][ T5777] usb 2-1: Using ep0 maxpacket: 8
[  149.355242][ T5777] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13
[  149.387603][ T5777] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  149.407284][ T5777] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.429559][ T5777] usb 2-1: Product: syz
[  149.433816][ T5777] usb 2-1: Manufacturer: syz
[  149.451092][ T5777] usb 2-1: SerialNumber: syz
[  149.468418][ T5777] usb 2-1: config 0 descriptor??
[  149.484945][ T5777] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  149.693537][ T5777] gspca_zc3xx: reg_w_i err -71
[  149.826363][ T6372] loop3: detected capacity change from 0 to 32768
[  149.854308][ T6372] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.184 (6372)
[  150.335848][ T5777] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  150.369334][ T5777] gspca_zc3xx: probe of 2-1:0.0 failed with error -71
[  150.444756][ T5777] usb 2-1: USB disconnect, device number 2
[  150.717347][ T6372] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  150.733583][ T6372] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  150.742654][ T6372] BTRFS info (device loop3): using free space tree
[  151.654472][ T6372] BTRFS info (device loop3): enabling ssd optimizations
[  151.690717][ T6372] BTRFS info (device loop3): auto enabling async discard
[  152.232579][ T6421] loop1: detected capacity change from 0 to 64
[  152.245804][ T5817] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  152.315695][ T6421] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  153.114472][ T5773] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  153.358844][ T6429] libceph: resolve '0' (ret=-3): failed
[  153.436038][ T5817] usb 1-1: Using ep0 maxpacket: 32
[  153.463123][ T5817] usb 1-1: config index 0 descriptor too short (expected 27632, got 27)
[  153.473919][ T6430] netdevsim netdevsim1: loading /lib/firmware// failed with error -22
[  153.482515][ T6430] netdevsim netdevsim1: Direct firmware load for / failed with error -22
[  153.491063][ T6430] netdevsim netdevsim1: Falling back to sysfs fallback for: /
[  153.511904][ T5817] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  153.527799][ T5817] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  153.564558][ T5817] usb 1-1: config 1 has no interface number 0
[  153.587608][ T6432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.199'.
[  153.597827][ T5817] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  153.609357][ T6432] netlink: 'syz.2.199': attribute type 7 has an invalid length.
[  153.617288][ T5817] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  153.630822][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'.
[  153.640012][ T5817] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  153.649841][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.665118][ T6432] ip6gretap0: entered promiscuous mode
[  153.693677][ T5817] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  153.700846][ T6432] syz_tun: entered promiscuous mode
[  153.709341][ T6432] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  153.717601][ T6432] Cannot create hsr debugfs directory
[  155.177345][ T5817] snd_usb_pod 1-1:1.1: set_interface failed
[  155.183479][ T5817] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  155.234995][ T5817] snd_usb_pod: probe of 1-1:1.1 failed with error -71
[  155.294848][ T5817] usb 1-1: USB disconnect, device number 6
[  156.160143][ T6458] tipc: Started in network mode
[  156.165940][ T6458] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  156.201483][ T6458] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  156.217589][ T6458] tipc: Enabled bearer <udp:syz0>, priority 10
[  156.825751][ T5817] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  157.027502][ T5817] usb 2-1: Using ep0 maxpacket: 32
[  157.046969][ T5817] usb 2-1: config index 0 descriptor too short (expected 27632, got 27)
[  157.056964][ T5817] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  157.081209][ T5817] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  157.105107][ T5817] usb 2-1: config 1 has no interface number 0
[  157.111526][   T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  157.120165][ T5817] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  157.132901][ T5817] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  157.225426][ T5817] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  157.236428][   T27] tipc: Node number set to 1
[  157.243547][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.302397][ T5817] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  157.326046][   T23] usb 4-1: Using ep0 maxpacket: 16
[  157.339847][   T23] usb 4-1: unable to get BOS descriptor or descriptor too short
[  157.355398][   T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.368212][   T23] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  157.380881][   T23] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  157.402787][   T23] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  157.412351][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.422104][   T23] usb 4-1: Product: syz
[  157.427163][   T23] usb 4-1: Manufacturer: syz
[  157.432001][   T23] usb 4-1: SerialNumber: syz
[  158.315571][   T23] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  158.360438][   T23] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  158.782585][   T23] usb 4-1: USB disconnect, device number 7
[  158.960066][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  159.209691][ T6492] loop2: detected capacity change from 0 to 64
[  159.431762][ T6492] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  160.151251][ T5817] snd_usb_pod 2-1:1.1: set_interface failed
[  160.206299][ T5817] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  160.213744][ T5817] snd_usb_pod: probe of 2-1:1.1 failed with error -71
[  160.282435][ T5817] usb 2-1: USB disconnect, device number 3
[  160.462431][ T6503] loop1: detected capacity change from 0 to 1024
[  160.618974][ T6506] overlayfs: missing 'lowerdir'
[  160.891040][ T6513] loop3: detected capacity change from 0 to 64
[  160.907678][ T6513] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  160.989261][ T6515] loop2: detected capacity change from 0 to 512
[  161.187586][ T6515] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.232: corrupted in-inode xattr: e_value size too large
[  161.357541][ T6515] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.232: couldn't read orphan inode 15 (err -117)
[  161.400716][ T6515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.585822][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  162.143157][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.198795][    T9] usb 1-1: Using ep0 maxpacket: 32
[  162.207845][    T9] usb 1-1: config index 0 descriptor too short (expected 27632, got 27)
[  162.239338][    T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  162.257033][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  162.275910][    T9] usb 1-1: config 1 has no interface number 0
[  162.301763][    T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  162.333371][    T9] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  162.376903][    T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  162.399854][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.445862][    T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  162.590836][ T6533] overlayfs: missing 'lowerdir'
[  163.060093][ T6542] loop3: detected capacity change from 0 to 64
[  163.079233][ T6542] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  163.797537][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'.
[  164.299962][    T9] snd_usb_pod 1-1:1.1: set_interface failed
[  164.333158][    T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  164.350699][    T9] snd_usb_pod: probe of 1-1:1.1 failed with error -71
[  164.368418][ T6553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.244'.
[  164.379415][    T9] usb 1-1: USB disconnect, device number 7
[  164.468178][ T6556] overlayfs: missing 'lowerdir'
[  164.669219][ T6564] loop1: detected capacity change from 0 to 512
[  164.687548][ T6563] loop2: detected capacity change from 0 to 64
[  164.702224][ T6563] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  164.754040][ T6564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.881251][ T6564] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.780816][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.930624][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  166.147883][    T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  166.182677][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.225869][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.264827][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  166.287686][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  166.300724][    T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  166.313564][    T9] usb 3-1: Manufacturer: syz
[  166.341730][    T9] usb 3-1: config 0 descriptor??
[  166.806777][    T9] appleir 0003:05AC:8243.0002: unknown main item tag 0x0
[  166.855293][    T9] appleir 0003:05AC:8243.0002: No inputs registered, leaving
[  166.882869][    T9] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  167.470071][ T5777] usb 3-1: USB disconnect, device number 7
[  167.712114][ T6593] loop0: detected capacity change from 0 to 64
[  167.754875][ T6593] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  167.880362][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  168.103660][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  168.147643][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  168.165854][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  168.183208][    T9] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  168.192686][ T6597] loop0: detected capacity change from 0 to 512
[  168.244027][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.262626][    T9] usb 4-1: Product: syz
[  168.271898][    T9] usb 4-1: Manufacturer: syz
[  168.278163][ T6597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.279165][    T9] usb 4-1: SerialNumber: syz
[  168.296485][ T6597] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.336836][    T9] usb 4-1: selecting invalid altsetting 1
[  168.343500][    T9] usb 4-1: unit 6 not found!
[  169.377943][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.585119][    T9] usb 4-1: 2:0: failed to get current value for ch 0 (-71)
[  169.623743][    T9] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  169.638533][    T9] usb 4-1: USB disconnect, device number 8
[  169.978894][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.224034][ T6621] loop2: detected capacity change from 0 to 1024
[  170.384249][ T6621] hfsplus: invalid file type 0177755 for inode 17
[  170.512309][ T6627] loop1: detected capacity change from 0 to 64
[  170.615553][ T6627] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  171.758716][ T6641] loop1: detected capacity change from 0 to 512
[  171.818476][ T6641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.885135][ T6641] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.035646][    C1] sched: RT throttling activated
[  173.162784][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.428247][ T6655] loop2: detected capacity change from 0 to 1024
[  173.867124][ T6665] netlink: 'syz.2.284': attribute type 1 has an invalid length.
[  173.881503][ T6664] loop0: detected capacity change from 0 to 64
[  173.903901][ T6664] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  173.915868][ T6665] netlink: 208 bytes leftover after parsing attributes in process `syz.2.284'.
[  174.552063][ T6681] loop3: detected capacity change from 0 to 512
[  174.694939][ T6681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.707779][ T6681] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.947620][ T6687] loop1: detected capacity change from 0 to 1024
[  175.775548][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.828626][ T6697] loop1: detected capacity change from 0 to 64
[  175.884709][ T6697] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  176.177626][ T6703] capability: warning: `syz.0.298' uses deprecated v2 capabilities in a way that may be insecure
[  176.548668][ T6714] loop3: detected capacity change from 0 to 1024
[  177.041156][ T6730] loop3: detected capacity change from 0 to 64
[  177.217219][ T6730] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  179.052668][ T6757] loop0: detected capacity change from 0 to 64
[  179.100116][ T6759] loop3: detected capacity change from 0 to 1024
[  179.221741][ T6757] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  179.366046][ T6759] hfsplus: invalid file type 0177755 for inode 17
[  179.632212][ T6769] overlayfs: missing 'lowerdir'
[  180.755770][ T5836] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  180.770146][ T6787] bond_slave_0: entered promiscuous mode
[  180.777257][ T6787] bond_slave_1: entered promiscuous mode
[  180.790241][ T6787] macsec1: entered allmulticast mode
[  180.801989][ T6787] bond0: entered allmulticast mode
[  180.817367][ T6787] bond_slave_0: entered allmulticast mode
[  180.823830][ T6787] bond_slave_1: entered allmulticast mode
[  180.937353][ T5836] usb 3-1: device descriptor read/64, error -71
[  181.029794][ T6792] loop1: detected capacity change from 0 to 64
[  181.165755][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  181.215874][    T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!!
[  181.345679][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  181.415673][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  181.445670][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  181.525671][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  181.665681][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  181.875674][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  181.975673][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  182.835759][ T5836] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  183.597552][ T6792] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  183.644907][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  183.686269][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  183.739685][    T9] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  183.774901][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.804672][    T9] usb 4-1: Product: syz
[  183.813225][    T9] usb 4-1: Manufacturer: syz
[  183.823109][    T9] usb 4-1: SerialNumber: syz
[  183.830701][    T9] usb 4-1: config 0 descriptor??
[  183.859177][ T6789] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  183.886047][ T6789] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  183.944706][ T6798] overlayfs: missing 'lowerdir'
[  183.975505][    T9] usb 4-1: can't set config #0, error -71
[  183.993829][    T9] usb 4-1: USB disconnect, device number 9
[  184.026609][   T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  184.195840][   T23] usb 1-1: device descriptor read/64, error -71
[  186.485948][   T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  186.735808][   T23] usb 1-1: device descriptor read/64, error -71
[  186.856878][   T23] usb usb1-port1: attempt power cycle
[  186.946056][ T2133] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  187.115809][ T2133] usb 3-1: device descriptor read/64, error -71
[  187.272632][ T6834] loop1: detected capacity change from 0 to 64
[  187.346930][ T6834] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  187.391735][ T2133] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  187.596016][ T2133] usb 3-1: device descriptor read/64, error -71
[  187.746108][ T2133] usb usb3-port1: attempt power cycle
[  188.012699][ T6826] loop0: detected capacity change from 0 to 32768
[  188.046522][ T6826] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.345 (6826)
[  188.175872][ T2133] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  188.225349][ T6826] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  188.270358][ T6826] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  188.528195][ T6826] BTRFS info (device loop0): using free space tree
[  189.038154][ T6826] BTRFS info (device loop0): enabling ssd optimizations
[  189.045382][ T6826] BTRFS info (device loop0): auto enabling async discard
[  189.111693][ T2133] usb 3-1: device descriptor read/8, error -71
[  189.184163][ T5772] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  191.054411][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  191.314761][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.350033][    T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  191.389688][    T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00
[  191.417894][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.443969][ T6872] loop0: detected capacity change from 0 to 1024
[  191.455785][    T9] usb 2-1: Product: syz
[  191.460531][    T9] usb 2-1: Manufacturer: syz
[  191.465179][    T9] usb 2-1: SerialNumber: syz
[  191.607150][    T9] usb 2-1: can't set config #1, error -71
[  191.656001][    T9] usb 2-1: USB disconnect, device number 4
[  191.934290][ T6880] loop0: detected capacity change from 0 to 64
[  192.047837][ T6880] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  192.229474][ T6884] loop1: detected capacity change from 0 to 64
[  192.258277][ T6884] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  194.514077][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  194.524826][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  194.595413][ T6890] loop2: detected capacity change from 0 to 16
[  194.678543][ T6890] loop2: detected capacity change from 0 to 256
[  195.105730][ T2133] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  195.249472][ T6903] loop2: detected capacity change from 0 to 1024
[  195.311758][ T2133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  195.349520][ T2133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  195.378585][ T2133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  195.433523][ T2133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  195.481536][ T2133] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  195.491275][ T2133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.504385][ T2133] usb 4-1: Product: syz
[  195.511546][ T2133] usb 4-1: Manufacturer: syz
[  195.521677][ T2133] usb 4-1: SerialNumber: syz
[  195.535149][ T2133] usb 4-1: config 0 descriptor??
[  195.767202][ T2133] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  195.970202][ T2133] usb 4-1: USB disconnect, device number 10
[  197.506016][ T6918] loop1: detected capacity change from 0 to 64
[  197.644851][ T6918] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  199.689354][ T6930] loop0: detected capacity change from 0 to 64
[  199.723570][ T6930] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  200.590984][ T6937] loop2: detected capacity change from 0 to 1024
[  200.893428][ T6943] loop2: detected capacity change from 0 to 64
[  200.904141][ T6943] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  201.116140][   T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  201.318374][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  201.335815][   T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  201.358320][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  201.445808][ T6957] loop3: detected capacity change from 0 to 64
[  201.521091][ T6957] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  202.178402][   T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  202.188338][   T23] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  202.197500][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.225910][   T23] usb 2-1: config 0 descriptor??
[  202.298106][ T6961] loop3: detected capacity change from 0 to 1024
[  202.475952][   T23] hdpvr 2-1:0.0: firmware version 0x0 dated 
[  202.482522][   T23] hdpvr 2-1:0.0: untested firmware, the driver might not work.
[  202.677762][   T23] hdpvr 2-1:0.0: device init failed
[  202.683219][   T23] hdpvr: probe of 2-1:0.0 failed with error -12
[  202.709546][   T23] usb 2-1: USB disconnect, device number 5
[  202.742467][ T6966] loop2: detected capacity change from 0 to 64
[  202.781162][ T6966] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  202.986515][ T6974] blktrace: Concurrent blktraces are not allowed on loop4
[  203.076274][ T6978] syz.0.399 uses obsolete (PF_INET,SOCK_PACKET)
[  203.341695][ T6976] loop3: detected capacity change from 0 to 32768
[  203.418975][ T6976] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  203.614190][ T6986] loop0: detected capacity change from 0 to 1024
[  204.676235][ T6996] loop0: detected capacity change from 0 to 64
[  204.706093][ T5773] ocfs2: Unmounting device (7,3) on (node local)
[  204.719170][ T6996] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  204.850139][ T6998] syzkaller0: entered promiscuous mode
[  204.872333][ T6998] syzkaller0: entered allmulticast mode
[  204.908885][ T6998] tipc: Started in network mode
[  204.934143][ T6998] tipc: Node identity 7e199612c31b, cluster identity 4711
[  204.962320][ T6998] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.064957][ T6997] tipc: Resetting bearer <eth:syzkaller0>
[  205.401693][ T6997] tipc: Disabling bearer <eth:syzkaller0>
[  206.103548][ T7008] batman_adv: batadv0: Adding interface: veth0
[  206.132322][ T7008] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.272102][ T7008] batman_adv: batadv0: Interface activated: veth0
[  206.336749][ T7011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.409'.
[  206.384771][ T7011] batman_adv: batadv0: Interface deactivated: veth0
[  206.544418][ T7011] batman_adv: batadv0: Removing interface: veth0
[  206.562525][ T7018] loop0: detected capacity change from 0 to 1024
[  206.625965][   T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  206.831304][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  206.838201][ T5779] Bluetooth: hci1: command 0x0406 tx timeout
[  206.840502][ T5792] Bluetooth: hci3: command 0x0406 tx timeout
[  206.845338][ T5791] Bluetooth: hci0: command 0x0406 tx timeout
[  206.856909][   T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.886347][   T23] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  206.913142][   T23] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00
[  206.945791][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.953867][   T23] usb 2-1: Product: syz
[  206.983459][   T23] usb 2-1: Manufacturer: syz
[  206.998967][ T7024] loop3: detected capacity change from 0 to 64
[  207.023958][ T7024] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  207.063726][   T23] usb 2-1: SerialNumber: syz
[  207.152795][   T23] ttusb_dec_send_command: command bulk message failed: error -22
[  207.170209][   T23] ttusb-dec: probe of 2-1:1.0 failed with error -22
[  207.346030][ T2133] usb 2-1: USB disconnect, device number 6
[  207.889561][ T7020] loop0: detected capacity change from 0 to 32768
[  207.960191][ T7036] loop2: detected capacity change from 0 to 32768
[  208.053654][   T28] audit: type=1800 audit(1788040401.611:8): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.421" name="file1" dev="loop2" ino=7 res=0 errno=0
[  208.119324][ T7020] jfs_strtoUCS: char2uni returned -22.
[  208.131244][ T7020] charset = iso8859-6, char = 0xfc
[  208.422936][ T7043] batman_adv: batadv0: Adding interface: veth0
[  208.461676][ T7043] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.517451][ T7045] loop1: detected capacity change from 0 to 64
[  208.538524][ T7043] batman_adv: batadv0: Interface activated: veth0
[  208.555361][ T7045] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  208.595228][ T7043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.423'.
[  208.606035][ T7043] batman_adv: batadv0: Interface deactivated: veth0
[  208.979477][ T7043] batman_adv: batadv0: Removing interface: veth0
[  209.665791][    T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  209.742447][ T7069] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  209.876973][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  209.909141][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  209.967837][    T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00
[  209.998811][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.051093][    T9] usb 1-1: Product: syz
[  210.065848][ T7073] loop1: detected capacity change from 0 to 64
[  210.096187][    T9] usb 1-1: Manufacturer: syz
[  210.156044][    T9] usb 1-1: SerialNumber: syz
[  210.192471][ T7073] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  210.492098][    T9] ttusb_dec_send_command: command bulk message failed: error -22
[  210.617582][    T9] ttusb-dec: probe of 1-1:1.0 failed with error -22
[  210.800717][    T9] usb 1-1: USB disconnect, device number 11
[  211.778536][ T7089] netlink: 40 bytes leftover after parsing attributes in process `syz.2.443'.
[  211.948951][ T7094] loop0: detected capacity change from 0 to 64
[  212.008442][ T7094] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  214.405783][ T2133] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  214.601537][ T2133] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  214.635194][ T2133] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  214.683025][ T2133] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00
[  214.708370][ T2133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.718205][ T2133] usb 1-1: Product: syz
[  214.722507][ T2133] usb 1-1: Manufacturer: syz
[  214.727847][ T2133] usb 1-1: SerialNumber: syz
[  214.756481][ T2133] ttusb_dec_send_command: command bulk message failed: error -22
[  214.781086][ T2133] ttusb-dec: probe of 1-1:1.0 failed with error -22
[  214.852231][ T7115] process 'syz.1.454' launched '/dev/fd/4' with NULL argv: empty string added
[  214.967076][ T2133] usb 1-1: USB disconnect, device number 12
[  215.192610][ T7123] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  215.340908][ T7129] loop3: detected capacity change from 0 to 512
[  215.410382][ T7129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.458336][ T7129] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.332619][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.729395][ T7148] loop2: detected capacity change from 0 to 64
[  216.782125][ T7148] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  216.807652][ T7151] futex_wake_op: syz.3.464 tries to shift op by 144; fix this program
[  217.037165][ T7152] loop0: detected capacity change from 0 to 32768
[  217.128428][ T7152] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  218.438098][ T5772] ocfs2: Unmounting device (7,0) on (node local)
[  218.798335][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'.
[  219.714034][ T7165] loop2: detected capacity change from 0 to 32768
[  219.782857][ T7179] loop0: detected capacity change from 0 to 512
[  219.852257][ T7165] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  219.921081][ T7165] (syz.2.466,7165,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  220.014327][ T7179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.214047][ T7179] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.743482][ T7165] syz.2.466 (7165) used greatest stack depth: 18840 bytes left
[  221.051945][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.634779][ T7196] wlan0 speed is unknown, defaulting to 1000
[  221.641225][ T7196] wlan0 speed is unknown, defaulting to 1000
[  221.650977][ T7196] wlan0 speed is unknown, defaulting to 1000
[  221.665907][ T7196] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  221.683881][ T7196] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  221.721434][ T7196] wlan0 speed is unknown, defaulting to 1000
[  221.731715][ T7196] wlan0 speed is unknown, defaulting to 1000
[  221.739532][ T7196] wlan0 speed is unknown, defaulting to 1000
[  221.747359][ T7196] wlan0 speed is unknown, defaulting to 1000
[  222.182008][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  222.388759][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  222.399247][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  222.426045][ T5774] ocfs2: Unmounting device (7,2) on (node local)
[  222.445778][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  222.482200][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  222.503651][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  222.540793][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.575833][    T9] usb 4-1: config 0 descriptor??
[  222.847513][    T9] hdpvr 4-1:0.0: firmware version 0x1e dated 
[  223.158245][    T9] hdpvr 4-1:0.0: device init failed
[  223.163615][    T9] hdpvr: probe of 4-1:0.0 failed with error -12
[  223.224312][    T9] usb 4-1: USB disconnect, device number 11
[  223.293140][ T7213] loop2: detected capacity change from 0 to 8192
[  223.559306][ T7213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  223.578246][ T7213] FAT-fs (loop2): Filesystem has been set read-only
[  223.586178][ T7213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  223.594522][ T7213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  223.614134][ T7213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  223.648890][ T7213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  223.682861][ T7213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  223.723516][ T7213] syz.2.475: attempt to access beyond end of device
[  223.723516][ T7213] loop2: rw=0, sector=15583, nr_sectors = 1 limit=8192
[  223.793897][ T7213] Buffer I/O error on dev loop2, logical block 15583, async page read
[  223.884491][ T7213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  223.946455][ T7213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  223.954361][ T7213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  223.978514][ T7213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  224.077002][ T7213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  224.084911][ T7213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  224.176242][ T7213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  224.184154][ T7213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  224.253112][ T7220] loop1: detected capacity change from 0 to 512
[  224.271035][ T7213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  224.281740][ T7213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  224.304754][ T7213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  224.320420][ T7213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00003c09)
[  224.339176][ T7220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.359967][   T28] audit: type=1800 audit(1788040417.921:9): pid=7213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.475" name="file2" dev="loop2" ino=1048610 res=0 errno=0
[  224.435115][ T7220] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.199977][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.357597][ T7236] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  227.300732][ T7256] loop1: detected capacity change from 0 to 512
[  227.967767][ T7264] loop0: detected capacity change from 0 to 512
[  228.060576][ T7264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.142536][ T7264] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.185829][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  228.810861][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  228.826587][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  228.837477][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  228.851600][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  228.862370][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  228.877804][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.908043][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.920290][    T9] usb 3-1: config 0 descriptor??
[  229.191781][    T9] hdpvr 3-1:0.0: firmware version 0x1e dated 
[  229.429244][    T9] hdpvr 3-1:0.0: device init failed
[  229.434558][    T9] hdpvr: probe of 3-1:0.0 failed with error -12
[  229.491058][    T9] usb 3-1: USB disconnect, device number 14
[  229.671857][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'.
[  231.501921][ T7294] loop0: detected capacity change from 0 to 512
[  231.529374][    T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  231.678203][ T7294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.696839][ T7294] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.739217][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  231.805910][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  231.982154][    T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00
[  232.016348][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.024416][    T9] usb 3-1: Product: syz
[  232.036122][    T9] usb 3-1: Manufacturer: syz
[  232.040794][    T9] usb 3-1: SerialNumber: syz
[  232.537788][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.553648][    T9] ttusb_dec_send_command: result bulk message failed: error -22
[  232.561712][    T9] ttusb-dec: probe of 3-1:1.0 failed with error -22
[  232.594711][    T9] usb 3-1: USB disconnect, device number 15
[  233.123105][ T7314] futex_wake_op: syz.0.516 tries to shift op by 144; fix this program
[  233.324385][   T28] audit: type=1326 audit(1788040426.881:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.0.518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf37d9e159 code=0x7ffc0000
[  233.359664][   T28] audit: type=1326 audit(1788040426.911:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.0.518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf37d9e159 code=0x7ffc0000
[  233.395806][   T28] audit: type=1326 audit(1788040426.911:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.0.518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf37d9e159 code=0x7ffc0000
[  233.439103][   T28] audit: type=1326 audit(1788040426.951:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.0.518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf37d9e159 code=0x7ffc0000
[  233.464600][   T28] audit: type=1326 audit(1788040426.951:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.0.518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf37d9e159 code=0x7ffc0000
[  233.489134][   T28] audit: type=1326 audit(1788040426.951:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.0.518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf37d9e159 code=0x7ffc0000
[  233.518074][   T28] audit: type=1326 audit(1788040426.951:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.0.518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf37d9e159 code=0x7ffc0000
[  233.548499][   T28] audit: type=1326 audit(1788040426.951:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.0.518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf37d9e159 code=0x7ffc0000
[  233.577045][   T28] audit: type=1326 audit(1788040426.951:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.0.518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcf37d9e159 code=0x7ffc0000
[  233.606845][   T28] audit: type=1326 audit(1788040426.951:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.0.518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf37d9e159 code=0x7ffc0000
[  234.507463][ T7330] loop0: detected capacity change from 0 to 512
[  234.607355][ T7330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.670990][ T7330] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.093088][ T7343] futex_wake_op: syz.1.526 tries to shift op by 144; fix this program
[  235.113123][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.605245][ T7340] loop3: detected capacity change from 0 to 32768
[  235.886937][ T7340] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  235.945951][ T5836] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  235.953737][ T7340] XFS (loop3): Ending clean mount
[  236.034138][ T7340] XFS (loop3): Quotacheck needed: Please wait.
[  236.133075][ T7340] XFS (loop3): Quotacheck: Done.
[  236.135918][ T5836] usb 2-1: Using ep0 maxpacket: 32
[  236.162587][ T5836] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  236.173005][ T5836] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  236.226502][ T5836] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  236.304889][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  236.330212][ T5773] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  236.343169][ T5836] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  236.357683][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  236.402490][ T5836] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  236.433187][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.452329][ T5836] usb 2-1: config 0 descriptor??
[  236.685407][ T5836] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  236.727296][ T5836] usb 2-1: USB disconnect, device number 7
[  236.751981][ T5836] usblp0: removed
[  236.961456][ T7372] loop0: detected capacity change from 0 to 512
[  236.994441][ T7372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.018459][ T7372] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.276208][ T7378] futex_wake_op: syz.2.536 tries to shift op by 144; fix this program
[  237.383761][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.460118][ T7380] loop2: detected capacity change from 0 to 128
[  237.466977][ T5836] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  237.537488][ T7380] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  237.569868][ T7380] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  237.784186][ T5836] usb 2-1: Using ep0 maxpacket: 32
[  237.792253][ T5836] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  237.801342][ T5836] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  237.816623][ T5836] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  238.458676][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  238.470625][ T5836] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  238.480501][ T5774] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  238.501058][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  238.573244][ T5836] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  238.595220][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.621023][ T5836] usb 2-1: config 0 descriptor??
[  238.770057][ T5836] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  238.863955][ T5836] usb 2-1: USB disconnect, device number 8
[  238.919146][ T5836] usblp0: removed
[  241.255821][ T2133] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  241.475809][ T2133] usb 4-1: Using ep0 maxpacket: 32
[  241.494450][ T2133] usb 4-1: config index 0 descriptor too short (expected 27632, got 27)
[  241.513425][ T2133] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  241.522543][ T2133] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  241.538416][ T2133] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  241.549039][ T2133] usb 4-1: config 1 has no interface number 0
[  241.555493][ T2133] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  241.568418][ T2133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.630894][ T2133] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  241.841837][ T2133] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values
[  241.878655][ T2133] snd_usb_pod 4-1:1.1: invalid control EP
[  241.899354][ T2133] snd_usb_pod 4-1:1.1: cannot start listening: -22
[  241.908660][ T7405] futex_wake_op: syz.0.545 tries to shift op by 144; fix this program
[  241.916401][ T2133] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  241.924605][ T2133] snd_usb_pod: probe of 4-1:1.1 failed with error -22
[  242.063794][ T5777] usb 4-1: USB disconnect, device number 12
[  243.362642][ T2133] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  243.391975][ T7412] loop2: detected capacity change from 0 to 64
[  243.401359][ T2133] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  243.479748][ T7412] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  243.994082][ T7414] hid-generic 0000:0000:0000.0003: pid 7414 passed too short report
[  244.188413][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.550'.
[  244.911988][ T7428] bond1: entered promiscuous mode
[  244.982588][ T7428] bond1: entered allmulticast mode
[  245.147635][ T7428] 8021q: adding VLAN 0 to HW filter on device bond1
[  245.612578][ T7431] bridge1: entered promiscuous mode
[  245.622333][ T7431] bridge1: entered allmulticast mode
[  245.630815][ T7431] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  245.810710][ T7445] loop3: detected capacity change from 0 to 128
[  245.882213][ T7445] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  245.911082][ T7445] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  246.011884][ T7445] syz.3.556 (pid 7445) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  246.102985][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  246.308460][   T28] kauditd_printk_skb: 342 callbacks suppressed
[  246.308488][   T28] audit: type=1326 audit(1788040439.871:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.1.562" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62799e159 code=0x7ffc0000
[  246.379884][   T28] audit: type=1326 audit(1788040439.871:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.1.562" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62799e159 code=0x7ffc0000
[  246.450118][   T28] audit: type=1326 audit(1788040439.911:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.1.562" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62799e159 code=0x7ffc0000
[  246.492905][   T28] audit: type=1326 audit(1788040439.911:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.1.562" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62799e159 code=0x7ffc0000
[  246.543074][   T28] audit: type=1326 audit(1788040439.911:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.1.562" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff62799e159 code=0x7ffc0000
[  246.611136][   T28] audit: type=1326 audit(1788040439.911:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.1.562" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62799e159 code=0x7ffc0000
[  246.652009][   T28] audit: type=1326 audit(1788040439.911:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.1.562" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62799e159 code=0x7ffc0000
[  246.679560][   T28] audit: type=1326 audit(1788040439.931:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.1.562" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62799e159 code=0x7ffc0000
[  246.706665][   T28] audit: type=1326 audit(1788040439.931:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.1.562" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62799e159 code=0x7ffc0000
[  246.733617][   T28] audit: type=1326 audit(1788040439.931:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.1.562" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff62799e159 code=0x7ffc0000
[  249.470943][ T7495] futex_wake_op: syz.0.576 tries to shift op by 144; fix this program
[  249.537091][ T7490] loop1: detected capacity change from 0 to 32768
[  249.556011][ T7490] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop1 scanned by syz.1.574 (7490)
[  249.587094][ T7488] loop3: detected capacity change from 0 to 32768
[  249.637233][ T7490] BTRFS info (device loop1): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31
[  249.647901][ T7488] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.573 (7488)
[  249.684516][ T7490] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  249.741206][ T7490] BTRFS info (device loop1): using free space tree
[  249.760525][ T7498] loop2: detected capacity change from 0 to 64
[  249.778916][ T7488] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  249.853883][ T7488] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  249.897361][ T7498] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  249.932450][ T7488] BTRFS info (device loop3): using free space tree
[  250.191583][ T7490] BTRFS info (device loop1): enabling ssd optimizations
[  250.277789][ T7490] BTRFS info (device loop1): auto enabling async discard
[  250.328384][ T7488] BTRFS info (device loop3): enabling ssd optimizations
[  250.367362][ T7488] BTRFS info (device loop3): auto enabling async discard
[  250.698840][ T5775] BTRFS info (device loop1): last unmount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31
[  250.816683][ T5773] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  251.114429][ T7542] loop0: detected capacity change from 0 to 128
[  251.190559][ T7542] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  251.297400][ T7542] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  252.995388][ T5859] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (5859)
[  253.818959][ T5772] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  254.070141][ T7563] futex_wake_op: syz.0.587 tries to shift op by 144; fix this program
[  254.285868][ T5848] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  254.517652][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  254.547428][ T5848] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  254.579721][ T5848] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0
[  254.610550][ T5848] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00
[  254.619916][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.634557][ T5848] usb 2-1: Product: syz
[  254.645719][ T5848] usb 2-1: Manufacturer: syz
[  254.650367][ T5848] usb 2-1: SerialNumber: syz
[  254.899206][ T5848] ttusb_dec_send_command: result bulk message failed: error -90
[  254.919749][ T5848] ttusb-dec: probe of 2-1:1.0 failed with error -90
[  254.955710][ T5848] usb 2-1: USB disconnect, device number 9
[  255.269624][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'.
[  255.378034][ T7575] bond1: entered promiscuous mode
[  255.383154][ T7575] bond1: entered allmulticast mode
[  255.431034][ T7575] 8021q: adding VLAN 0 to HW filter on device bond1
[  255.513886][ T7573] bridge1: entered promiscuous mode
[  255.536632][ T7573] bridge1: entered allmulticast mode
[  255.542714][ T7573] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  255.774511][ T7581] Option 'dnserror' to dns_resolver key: bad/missing value
[  255.815989][ T7571] loop0: detected capacity change from 0 to 32768
[  255.837508][ T5848] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  255.845989][ T7571] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  255.958482][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  255.967317][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  256.086390][ T5848] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  256.095185][ T5848] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  256.111221][ T5787] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  256.402283][ T5848] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  256.506337][ T5848] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  256.603257][ T7588] loop1: detected capacity change from 0 to 512
[  256.638738][ T5848] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  256.675871][ T5848] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  256.696346][ T7590] futex_wake_op: syz.0.598 tries to shift op by 144; fix this program
[  256.708558][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  256.724265][ T5848] usb 3-1: Product: syz
[  256.730082][ T5848] usb 3-1: Manufacturer: syz
[  256.751495][ T7588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.768456][ T5848] cdc_wdm 3-1:1.0: skipping garbage
[  256.773738][ T5848] cdc_wdm 3-1:1.0: skipping garbage
[  256.802728][ T5848] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  256.816078][ T5848] cdc_wdm 3-1:1.0: Unknown control protocol
[  256.829368][ T7588] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.293959][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  257.296651][ T5848] usb 3-1: USB disconnect, device number 16
[  257.300964][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  257.300989][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.