last executing test programs:

2m27.85620306s ago: executing program 4 (id=13):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)

2m27.683229104s ago: executing program 4 (id=14):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x2a2, &(0x7f0000000600)="$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")
openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7)

2m26.993567882s ago: executing program 4 (id=18):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001f00)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x16f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x536f}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@hopopts={{0x28, 0x29, 0x32, {0xff, 0x1, '\x00', [@pad1, @calipso={0x7, 0x8, {0x2, 0x0, 0xb5, 0x5}}]}}}], 0x28}}], 0x2, 0x0)

2m26.180814323s ago: executing program 4 (id=20):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f71756f74612c6e6f696e746567726974792c67727071756f74612c6e6f646973636172642c696f636861727365743d6e6f6e652c6e6f646973636172642c696f636861727365743d63703835322c6e6f71756f74612c6e6f696e746567726974792c008283d279ba81174b20bb6aae5ea52f08eb98834c68ee88ba4a7465fd1dd3744c4dc490a46dd35125b04bc3a264a73f3262"], 0x45, 0x6188, &(0x7f0000004940)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

2m24.581493413s ago: executing program 4 (id=24):
syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f00000001c0)='./file0\x00', 0xc2, &(0x7f0000000000)={[{@acl}, {@usrjquota_file, 0x4}, {@user_xattr}, {@data_journal}, {@usrjquota, 0x3d}]}, 0xff, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=")
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x109)

2m23.371347113s ago: executing program 4 (id=29):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x11, 0x6fd, &(0x7f0000000ac0)="$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")
llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x20)

2m22.790809559s ago: executing program 32 (id=29):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x11, 0x6fd, &(0x7f0000000ac0)="$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")
llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x20)

56.267587283s ago: executing program 1 (id=352):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)={0x3c, r0, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x5}]}, 0x3c}}, 0x4004)

55.99657641s ago: executing program 1 (id=356):
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x163882, 0x6d)
close(0x3)

55.797542995s ago: executing program 1 (id=358):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002500), r0)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002540)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008844}, 0x8040)

55.698652467s ago: executing program 1 (id=359):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000), 0x3, 0x470, &(0x7f0000000dc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

54.862250869s ago: executing program 1 (id=366):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
syz_clone(0x24304000, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

53.478187604s ago: executing program 1 (id=373):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x24, r1, 0x1, 0x70bd2a, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3b}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x24}}, 0x0)

53.173835761s ago: executing program 33 (id=373):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x24, r1, 0x1, 0x70bd2a, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3b}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x24}}, 0x0)

49.401892697s ago: executing program 0 (id=398):
unshare(0x20020480)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)

49.213497952s ago: executing program 0 (id=400):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x3b4a8042, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, 0x50)
syz_mount_image$f2fs(&(0x7f0000005700), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6a71666d743d7666736f6c642c7573726a71756f74613d6e6f696e6c696e650700000074727bbd0426b776aa2dd559defbabe1bb7c2990cf2327e9af29b6214ca1a0f50decac5eab7e9507cc6949f5ddd3e28e8b57ddee3b3e5d8d0f008c19753fb6357ce5402421cdf43ebd58fe035a2c7265737569643d", @ANYBLOB="f44efe0670a1b5bd931092861aa69d01914fbef6ba311613d274f0f599d8c77e84fc2f4a71e7fb", @ANYRES64], 0xff, 0x554e, &(0x7f000000b080)="$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")
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

46.969355319s ago: executing program 0 (id=412):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x2, 0x2, 0x3, 0x9, 0x800, 0x1, 0x0, 0x86c}}}}]}, 0x58}}, 0x4890)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

40.477935984s ago: executing program 0 (id=426):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)="5053991c82ddc7f75765a560ad3f59c4795031a503c8358a576cdc91230000000000", 0x22)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[])
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0)
ppoll(&(0x7f0000000040)=[{r6, 0xb00}], 0x1, 0x0, 0x0, 0x0)

39.311687353s ago: executing program 0 (id=430):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getpgrp(0x0)

35.849691771s ago: executing program 0 (id=437):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0000000000000000000000000010d5210fd46e50a86d6181617f99d185e3a5", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x5d9, &(0x7f0000000cc0)="$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")
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(&(0x7f0000000140)='./file/file0/..//file0\x00', &(0x7f0000000200)='./file\x00')

33.693220195s ago: executing program 34 (id=437):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0000000000000000000000000010d5210fd46e50a86d6181617f99d185e3a5", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x5d9, &(0x7f0000000cc0)="$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")
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(&(0x7f0000000140)='./file/file0/..//file0\x00', &(0x7f0000000200)='./file\x00')

31.493911902s ago: executing program 3 (id=444):
r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@bloom_filter={0x1e, 0x8, 0x6, 0x5, 0x2c0, 0x1, 0xfff, '\x00', 0x0, r0, 0x3e, 0x2, 0x4, 0xc}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
r2 = socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff00003e400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}, 0x1, 0x1000000}, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000340), 0x4)

29.394364105s ago: executing program 3 (id=447):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204810, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x25a, &(0x7f0000000240)="$eJzs2s9rI2UYB/Bn6sqmXbqp+ItdEF/0oF6Gbc8edpEKYkFRK6yC7KydauyYlE4oRMT2pFf/BM/i0Zsge/TSi3+BB2+99LgHcSRNWtOysIs/mqX7+RySh3nnm7zzvmF4ErL/6refb6zX+XrRj5ksi5nrsRt3s1iImTiyG6+8dPOX5969+cGbN1ZWWuOjSymly8///OGXP7xwp3/p/R8v/3Qx9hY+2j9Y+n3vmb0r+3++92mnTp06dXv9VKTbvV6/uF2Vaa1Tb+QpvV2VRV2mTrcut06Mr1e9zc1BKrpr83ObW2Vdp6I7SBvlIPV7qb81SMUnRaeb8jxP83PBv7H6/d2miYPm8VvRNM3sd3HpTsz/Fu3InkjZk9ezp29lz+5mVw6apn06OjudGfPf+sf7z7kwvqkvv5NSK6L6Znt1e3X0PBxtxY316EQVZVyL2fgjhh+TsVH9+hsry9fSoYX4utoZ53e2Vx87fP3j/GK0Y+He+cVRPh3lL0bE8HFuMr8U7Xjq3vmlU/nR+7fi5Rcn8nm049ePoxdVrMUwGzvjJVj+ajGl195aOZW/engeAMB5k6djw/5t2LSd6N/y/MT4RH80yk/0h+379Ien+qsLcfXCdK+diHrwxUZRVeXW8AveYXF85FEtZieX5UGKo59C/r+JzZzYs4dloRTnuYj4bCp3JM7S35t+31NbZzIhAAAAAAAAAAAAHshZ/J1w2tcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA83P4KAAD//8scwHs=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x14)
pwrite64(r0, &(0x7f0000000140)='2', 0xfe34, 0xe7c)
fallocate(r0, 0x0, 0x8004, 0xfff)

28.346372921s ago: executing program 3 (id=450):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0)
write(r0, &(0x7f0000001800)='d', 0x1)

27.839920544s ago: executing program 3 (id=452):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f000000cf00)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x10068ad, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

24.570590777s ago: executing program 3 (id=455):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmsg$unix(0xffffffffffffffff, 0x0, 0xc0011023)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
sendfile(r0, r1, &(0x7f00000000c0)=0x749a, 0x5)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x101, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x6}, 0x1c)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
getpriority(0x2, r6)
ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x810)
sendmmsg$inet6(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000013c0)={0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000015c0)=[@pktinfo={{0x24, 0x29, 0x34, {@loopback={0x3f000000}}}}], 0x28}}], 0x2, 0x24040000)
getsockopt(r0, 0x40, 0x200, 0x0, &(0x7f0000000000))

17.495845576s ago: executing program 3 (id=466):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x2a, 0x645, &(0x7f0000000600)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)

17.001942859s ago: executing program 35 (id=466):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x2a, 0x645, &(0x7f0000000600)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)

15.317921021s ago: executing program 6 (id=374):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00')

15.117920997s ago: executing program 6 (id=471):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)={0x28, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
mq_unlink(0x0)
syz_usbip_server_init(0x6)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000005c0)={0x18, 0x0, 0xd8e0afc25e019b91, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x24000010)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0x2f, 0x18, 0x4}, 0x20)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)={0x29, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]})
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x842, 0x2}, 0x10)

11.110408908s ago: executing program 2 (id=479):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

10.774007907s ago: executing program 5 (id=480):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0xb)

4.223546043s ago: executing program 7 (id=438):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010325bd70000000030005"], 0x14}}, 0x400c000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)

4.222917503s ago: executing program 2 (id=489):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setreuid(0x0, 0xee00)

4.214842123s ago: executing program 5 (id=490):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000001b80)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x50}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000000)

4.025449648s ago: executing program 7 (id=481):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000000)=0x488, 0x4)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000001c0)=0x5, 0x4)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x8)
r8 = openat$cgroup(r7, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12)
clock_gettime(0x1, 0x0)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6)
write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000100)=0x1, 0x4)

3.999251129s ago: executing program 5 (id=482):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b16, 0x0)

2.74638139s ago: executing program 7 (id=483):
r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r1, 0xffffffffffffffff, 0x2)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0)

1.928241732s ago: executing program 2 (id=484):
syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000, 0x0, 0x3b2}, 0x0, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x3f, 0x20, 0x0, 0x0, 0x800, 0x3, 0x2}, 0x0, 0x0, 0x0, 0x0)

1.670099948s ago: executing program 2 (id=485):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)

1.482168622s ago: executing program 7 (id=486):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000010)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3e8)
syslog(0x2, &(0x7f00000010c0)=""/2, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x28004044, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
open_tree(0xffffffffffffffff, 0x0, 0x0)
r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0)
preadv(r3, &(0x7f00000001c0), 0x0, 0x400, 0x20000000)
capset(0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_DST={0x14, 0x1, @mcast2}]}, 0x30}}, 0x0)
syslog(0x2, &(0x7f0000001140)=""/53, 0x35)

1.015271335s ago: executing program 2 (id=487):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100060000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a003400010101010101000008002600b40900"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

722.163562ms ago: executing program 5 (id=488):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)=' ', 0x1)

557.123856ms ago: executing program 5 (id=491):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140))

398.01696ms ago: executing program 7 (id=492):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="4700330080000500ffffffffffff080211000000505050505050"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080)

335.268281ms ago: executing program 2 (id=493):
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0xa, 0x10000}, {0x80}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6})
syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003000000088205820540000102030109026e00030109e002080b0000010130fc0904000000010130000a24010c0a00fbffffff0904010000010230000904010101"], 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x37, 0x2, {0x1, 0x7, 0xc, 0x0, 0x1, '\xbb'}}, 0x1f)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

23.1352ms ago: executing program 36 (id=471):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)={0x28, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
mq_unlink(0x0)
syz_usbip_server_init(0x6)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000005c0)={0x18, 0x0, 0xd8e0afc25e019b91, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x24000010)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0x2f, 0x18, 0x4}, 0x20)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)={0x29, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]})
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x842, 0x2}, 0x10)

536.95µs ago: executing program 5 (id=495):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ed)
rmdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac1.usb0\x00')

0s ago: executing program 7 (id=496):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x20e, &(0x7f0000000dc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x1c0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
sendfile(r1, r0, 0x0, 0x3a)

kernel console output (not intermixed with test programs):

ing meta-data file (ino=6, block-offset=1)
[   86.073100][ T4500] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   86.177280][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   86.197270][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   86.247441][ T4500] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.727489][   T26] audit: type=1326 audit(1785522650.474:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.38" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1ff9e019 code=0x7ffc0000
[   87.112299][   T26] audit: type=1326 audit(1785522650.474:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.38" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1ff9e019 code=0x7ffc0000
[   87.181579][  T127] cfg80211: failed to load regulatory.db
[   87.203258][ T4273] EXT4-fs (loop0): unmounting filesystem.
[   87.230377][ T4498] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[   87.253066][ T4498] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[   87.268015][   T26] audit: type=1326 audit(1785522650.484:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.38" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f5e1ff9e019 code=0x7ffc0000
[   87.309315][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.322519][ T4498] Remounting filesystem read-only
[   87.322581][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.337023][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.349090][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.356625][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   87.365821][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.387133][   T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.404849][   T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.416447][ T4288] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[   87.430652][   T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.441949][   T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.462256][   T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   87.469628][   T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.613651][   T26] audit: type=1326 audit(1785522650.484:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.38" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1ff9e019 code=0x7ffc0000
[   87.730185][   T26] audit: type=1326 audit(1785522650.484:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.38" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1ff9e019 code=0x7ffc0000
[   87.920271][   T26] audit: type=1326 audit(1785522650.484:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.38" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f5e1ff9e019 code=0x7ffc0000
[   87.955232][ T4514] chnl_net:caif_netlink_parms(): no params data found
[   88.026751][ T4538] set_capacity_and_notify: 2 callbacks suppressed
[   88.026766][ T4538] loop2: detected capacity change from 0 to 8
[   88.047498][   T26] audit: type=1326 audit(1785522650.484:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.38" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1ff9e019 code=0x7ffc0000
[   88.158587][ T4538] SQUASHFS error: lzo decompression failed, data probably corrupt
[   88.217664][   T26] audit: type=1326 audit(1785522650.484:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.38" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1ff9e019 code=0x7ffc0000
[   88.267416][ T4324] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   88.302380][ T4538] SQUASHFS error: Failed to read block 0x91: -5
[   88.308836][ T4538] SQUASHFS error: Unable to read metadata cache entry [8f]
[   88.316081][ T4538] SQUASHFS error: Unable to read inode 0x11f
[   88.428746][   T26] audit: type=1326 audit(1785522650.484:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.38" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f5e1ff9e019 code=0x7ffc0000
[   88.455813][   T26] audit: type=1326 audit(1785522650.484:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.38" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1ff9e019 code=0x7ffc0000
[   88.481577][ T4324] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[   88.481618][ T4324] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[   88.481642][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.486450][ T4324] gspca_main: stv0680-2.14.0 probing 041e:4007
[   88.487043][ T4514] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.487102][ T4514] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.488173][ T4514] device bridge_slave_0 entered promiscuous mode
[   88.489397][ T4514] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.489437][ T4514] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.489995][ T4514] device bridge_slave_1 entered promiscuous mode
[   88.578785][ T4553] Cannot find set identified by id 0 to match
[   89.113956][ T4514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.116659][ T4514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.226246][ T4514] team0: Port device team_slave_0 added
[   89.248993][ T4514] team0: Port device team_slave_1 added
[   89.370337][ T4555] loop0: detected capacity change from 0 to 4096
[   89.398371][ T4555] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[   89.529052][   T49] Bluetooth: hci2: command 0x0409 tx timeout
[   89.541621][ T4324] stv0680 4-1:4.0: STV(e): camera ping failed!!
[   89.565902][ T4514] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.569076][ T4541] loop1: detected capacity change from 0 to 32768
[   89.608589][ T4514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.616940][ T4541] JBD2: Ignoring recovery information on journal
[   89.634563][    C0] vkms_vblank_simulate: vblank timer overrun
[   89.684169][ T4514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.705586][ T4514] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.745991][ T4514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.747932][ T4324] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[   89.771967][    C0] vkms_vblank_simulate: vblank timer overrun
[   89.786602][ T4324] stv0680 4-1:4.0: last error: 0,  command = 0x0
[   89.787430][ T4321] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   89.796153][ T4324] usb 4-1: USB disconnect, device number 2
[   89.811799][ T4541] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   89.855967][ T4514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.961733][   T47] device hsr_slave_0 left promiscuous mode
[   89.999632][   T47] device hsr_slave_1 left promiscuous mode
[   90.010259][   T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.040962][ T4321] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   90.060979][   T47] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.091395][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.134464][ T4321] usb 3-1: Product: syz
[   90.187518][ T4321] usb 3-1: Manufacturer: syz
[   90.192172][ T4321] usb 3-1: SerialNumber: syz
[   90.200098][   T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.216134][   T47] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.229138][ T4282] ocfs2: Unmounting device (7,1) on (node local)
[   90.245992][   T47] device bridge_slave_1 left promiscuous mode
[   90.472678][   T47] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.559479][ T4321] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   90.940814][   T47] device bridge_slave_0 left promiscuous mode
[   91.034625][   T47] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.070668][   T14] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   91.617382][   T49] Bluetooth: hci2: command 0x041b tx timeout
[   91.897258][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   91.907273][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   91.917260][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   91.952827][ T4577] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   91.997268][    T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!!
[   92.022342][ T4582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'.
[   92.047249][    T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!!
[   92.057252][    T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!!
[   92.567549][   T14] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[   92.575757][   T14] ath9k_htc: Failed to initialize the device
[   92.783728][   T14] usb 3-1: ath9k_htc: USB layer deinitialized
[   92.988380][ T4570] Rounding down aligned max_sectors from 4294967295 to 4294967288
[   92.998354][   T47] device veth1_macvtap left promiscuous mode
[   93.004867][   T47] device veth0_macvtap left promiscuous mode
[   93.048977][ T4324] usb 3-1: USB disconnect, device number 3
[   93.057094][ T4603] se_device not configured yet, cannot port link
[   93.183519][   T47] device veth1_vlan left promiscuous mode
[   93.207633][   T47] device veth0_vlan left promiscuous mode
[   93.697515][   T49] Bluetooth: hci2: command 0x040f tx timeout
[   94.803431][ T4672] netlink: 72 bytes leftover after parsing attributes in process `syz.3.61'.
[   95.231515][ T4674] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[   95.635294][   T47] team0 (unregistering): Port device team_slave_1 removed
[   95.693538][   T47] team0 (unregistering): Port device team_slave_0 removed
[   95.759737][   T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   95.777531][   T49] Bluetooth: hci2: command 0x0419 tx timeout
[   95.834162][   T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.218870][   T47] bond0 (unregistering): Released all slaves
[   96.603968][ T4514] device hsr_slave_0 entered promiscuous mode
[   97.847370][   T49] Bluetooth: hci2: command 0x0405 tx timeout
[   99.225881][ T4514] device hsr_slave_1 entered promiscuous mode
[   99.336263][ T4686] loop2: detected capacity change from 0 to 1024
[   99.352804][ T4686] EXT4-fs: Invalid want_extra_isize 7
[   99.377290][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   99.397288][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   99.493600][ T4682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.63'.
[  100.181688][ T4682] device bridge_slave_1 left promiscuous mode
[  100.213054][ T4682] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.277923][ T4682] device bridge_slave_0 left promiscuous mode
[  100.284187][ T4682] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.777797][ T4694] loop2: detected capacity change from 0 to 131072
[  100.790232][ T4694] F2FS-fs (loop2): invalid crc value
[  101.020912][ T4694] F2FS-fs (loop2): Found nat_bits in checkpoint
[  101.057392][ T4694] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  102.625942][ T4694] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  104.738412][ T4715] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  105.308097][ T4514] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  105.607474][ T4514] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  105.787929][ T4514] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  105.844073][ T4514] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  106.999577][ T4514] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.066018][ T4744] loop3: detected capacity change from 0 to 512
[  107.074946][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  107.112848][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  107.169235][ T4514] 8021q: adding VLAN 0 to HW filter on device team0
[  107.475421][ T4752] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  107.492503][ T4752] VFS: Can't find a romfs filesystem on dev nullb0.
[  107.492503][ T4752] 
[  108.071815][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  108.113149][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  108.176942][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.185286][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.266748][ T4750] netlink: 76 bytes leftover after parsing attributes in process `syz.2.73'.
[  108.288309][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  108.317017][ T4744] EXT4-fs (loop3): Test dummy encryption mode enabled
[  108.361086][ T4744] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  108.373652][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  108.385874][ T4760] loop1: detected capacity change from 0 to 4096
[  108.498337][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  108.533736][ T4760] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  108.549278][ T4744] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  108.558777][ T4744] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  108.568504][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.575616][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.585471][ T4770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.78'.
[  108.666038][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  108.824228][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  109.032138][ T4774] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.74: Directory hole found for htree leaf block 0
[  109.630939][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  109.653392][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  109.725308][ T4514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  109.793592][ T4288] EXT4-fs (loop3): unmounting filesystem.
[  109.806584][ T4777] loop1: detected capacity change from 0 to 1024
[  109.827351][ T4514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  109.869269][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  109.889333][ T4777] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  109.918457][ T4777] EXT4-fs (loop1): orphan cleanup on readonly fs
[  109.961453][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  109.996598][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  110.023481][ T4777] __quota_error: 47 callbacks suppressed
[  110.023496][ T4777] Quota error (device loop1): v2_read_file_info: Can't read info structure
[  110.040332][   T14] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  110.075799][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  110.099675][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  110.114200][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  110.124679][ T4777] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  110.146388][ T4788] loop3: detected capacity change from 0 to 512
[  110.153569][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  110.162589][ T4788] EXT4-fs: Ignoring removed nobh option
[  110.168569][ T4777] EXT4-fs (loop1): Cannot turn on quotas: error -5
[  110.185319][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  110.204573][ T4788] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  110.238504][   T14] usb 1-1: not running at top speed; connect to a high speed hub
[  110.248998][ T4777] EXT4-fs (loop1): 1 truncate cleaned up
[  110.255260][ T4788] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  110.259012][   T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.286132][ T4777] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  110.296235][ T4788] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  110.346437][   T14] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  110.360527][ T4777] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  110.390432][ T4788] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  110.401280][   T14] usb 1-1: config 1 has no interface number 1
[  110.413667][ T4788] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000]
[  110.431836][   T14] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  110.438850][ T4788] EXT4-fs (loop3): failed to initialize system zone (-117)
[  110.452861][ T4788] EXT4-fs (loop3): mount failed
[  110.547428][   T14] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  110.626286][   T14] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  110.649634][ T4282] EXT4-fs (loop1): unmounting filesystem.
[  110.707317][   T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.715597][   T14] usb 1-1: Product: syz
[  110.802968][   T14] usb 1-1: Manufacturer: syz
[  110.827468][   T14] usb 1-1: SerialNumber: syz
[  110.852330][ T4802] loop1: detected capacity change from 0 to 256
[  111.998589][   T14] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  112.006652][   T14] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  112.068428][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  112.076012][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  112.155229][ T4514] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.330600][   T14] usb 1-1: USB disconnect, device number 3
[  112.514265][ T4322] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  112.575967][ T4814] loop1: detected capacity change from 0 to 32768
[  112.595510][ T4814] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.88 (4814)
[  112.727587][ T4322] usb 3-1: Using ep0 maxpacket: 32
[  112.736802][ T4814] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  112.738698][ T4322] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  112.767432][ T4814] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  112.813989][ T4814] BTRFS info (device loop1): using free space tree
[  113.382490][ T4322] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  113.397279][ T4322] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.501811][ T4322] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 81
[  113.621791][ T4322] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  113.692579][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.711367][ T4322] usb 3-1: config 0 descriptor??
[  113.771418][ T4814] BTRFS info (device loop1): enabling ssd optimizations
[  113.849553][ T4814] BTRFS warning (device loop1): can't clear the free_space_tree,compat_ro:1,verity feature bits while mounted
[  113.965864][ T4282] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.978187][ T4459] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  114.157554][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  114.172238][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  114.278845][ T4459] usb 1-1: Using ep0 maxpacket: 8
[  114.294382][ T4459] usb 1-1: unable to get BOS descriptor or descriptor too short
[  114.454459][ T4459] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 237, changing to 7
[  114.786274][ T4459] usb 1-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40
[  114.833227][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  114.848125][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  114.865405][ T4459] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.898940][ T4514] device veth0_vlan entered promiscuous mode
[  114.908734][ T4459] usb 1-1: Product: syz
[  114.912959][ T4514] device veth1_vlan entered promiscuous mode
[  114.916727][ T4459] usb 1-1: Manufacturer: syz
[  114.924934][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  114.941119][ T4459] usb 1-1: SerialNumber: syz
[  114.966547][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  115.019912][ T4852] loop3: detected capacity change from 0 to 32768
[  115.041476][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  115.055483][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  115.099643][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  115.109635][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  115.131269][ T4514] device veth0_macvtap entered promiscuous mode
[  115.170864][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  115.184102][ T4514] device veth1_macvtap entered promiscuous mode
[  115.214916][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.226011][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.236516][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.249240][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.259651][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.270853][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.274604][ T4459] snd-usb-audio: probe of 1-1:1.0 failed with error -2
[  115.281106][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.288706][ T4852] XFS (loop3): Mounting V5 Filesystem
[  115.334725][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.339001][ T4459] usb 1-1: USB disconnect, device number 4
[  115.420375][ T4514] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.445892][ T4369] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (4369)
[  115.475706][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  115.485758][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  115.509666][ T4852] XFS (loop3): Ending clean mount
[  115.535951][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.586067][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.618382][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.637880][ T4852] syz.3.93: attempt to access beyond end of device
[  115.637880][ T4852] loop3: rw=4096, sector=32783, nr_sectors = 1 limit=32768
[  115.690098][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.736923][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.747554][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.757572][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.768319][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.780282][ T4514] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.789939][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  115.799813][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  115.932137][ T4890] process 'syz.1.94' launched '/dev/fd/-1/./file8' with NULL argv: empty string added
[  116.116953][ T4321] usb 3-1: USB disconnect, device number 4
[  116.507148][ T4514] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.557089][ T4514] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.588188][ T4288] XFS (loop3): Unmounting Filesystem
[  116.616206][ T4892] loop2: detected capacity change from 0 to 1024
[  116.619917][ T4514] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.661895][ T4514] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.277494][ T4892] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #3: block 3: comm syz.2.96: lblock 3 mapped to illegal pblock 3 (length 1)
[  117.531393][ T4892] Quota error (device loop2): write_blk: dquota write failed
[  117.581277][ T4892] Quota error (device loop2): find_free_dqentry: Can't write quota data block 3
[  117.648214][ T4643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.651345][ T4892] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  117.656106][ T4643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.717869][ T4892] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.96: Failed to acquire dquot type 0
[  117.780690][ T4904] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551489)
[  117.807891][ T4892] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 3: comm syz.2.96: lblock 3 mapped to illegal pblock 3 (length 1)
[  117.834466][ T4904] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  117.859818][ T4892] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  117.919924][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  117.928268][ T4892] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.96: Failed to acquire dquot type 0
[  117.969007][ T4892] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.96: Freeing blocks not in datazone - block = 0, count = 4096
[  117.983827][   T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.010369][   T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.085723][ T4892] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 3: comm syz.2.96: lblock 3 mapped to illegal pblock 3 (length 1)
[  118.112558][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  118.161424][ T4911] netlink: 132 bytes leftover after parsing attributes in process `syz.0.102'.
[  118.168650][ T4892] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  118.199169][ T4892] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.96: Failed to acquire dquot type 0
[  118.215842][ T4892] EXT4-fs (loop2): 1 orphan inode deleted
[  118.233241][ T4892] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  118.369272][ T4892] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 3: comm syz.2.96: lblock 3 mapped to illegal pblock 3 (length 1)
[  118.423957][ T4892] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  118.480476][ T4892] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.96: Failed to acquire dquot type 0
[  118.519388][ T4920] loop0: detected capacity change from 0 to 2048
[  118.617420][ T4924] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.992862][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  119.682529][ T4938] futex_wake_op: syz.0.108 tries to shift op by 144; fix this program
[  119.754052][ T4938] loop0: detected capacity change from 0 to 256
[  120.298925][ T4938] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  120.350736][   T26] audit: type=1800 audit(1785522684.474:60): pid=4936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.108" name="file1" dev="loop0" ino=1048604 res=0 errno=0
[  120.394424][ T4936] syz.0.108: attempt to access beyond end of device
[  120.394424][ T4936] loop0: rw=0, sector=184, nr_sectors = 120 limit=256
[  120.434214][ T4936] syz.0.108: attempt to access beyond end of device
[  120.434214][ T4936] loop0: rw=524288, sector=664, nr_sectors = 256 limit=256
[  120.449305][ T4936] syz.0.108: attempt to access beyond end of device
[  120.449305][ T4936] loop0: rw=524288, sector=920, nr_sectors = 256 limit=256
[  120.463589][ T4936] syz.0.108: attempt to access beyond end of device
[  120.463589][ T4936] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  120.477018][ T4936] syz.0.108: attempt to access beyond end of device
[  120.477018][ T4936] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  120.490284][ T4936] syz.0.108: attempt to access beyond end of device
[  120.490284][ T4936] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  120.503516][ T4936] syz.0.108: attempt to access beyond end of device
[  120.503516][ T4936] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  120.516719][ T4936] syz.0.108: attempt to access beyond end of device
[  120.516719][ T4936] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  120.530032][ T4936] syz.0.108: attempt to access beyond end of device
[  120.530032][ T4936] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  120.764576][ T4915] loop3: detected capacity change from 0 to 32768
[  120.987391][ T4459] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  121.849729][ T4942] Can't find ip_set type ho#
[  122.081724][ T4459] usb 3-1: unable to get BOS descriptor or descriptor too short
[  122.109988][ T4957] Zero length message leads to an empty skb
[  122.120757][ T4957] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  122.129281][ T4957] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  122.138067][ T4957] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  122.220086][ T4459] usb 3-1: not running at top speed; connect to a high speed hub
[  122.267331][  T129] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  122.351466][ T4459] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  122.508404][ T4459] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  122.699848][ T4459] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  123.048134][ T4459] usb 3-1: string descriptor 0 read error: -71
[  123.065675][ T4459] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[  123.158065][ T4459] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.261913][ T4459] usb 3-1: can't set config #1, error -71
[  123.282424][  T129] usb 1-1: config 0 has an invalid interface number: 168 but max is 0
[  123.316366][  T129] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  123.327890][ T4459] usb 3-1: USB disconnect, device number 5
[  123.992927][  T129] usb 1-1: config 0 has no interface number 0
[  123.999345][  T129] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  124.043514][  T129] usb 1-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[  124.097299][  T129] usb 1-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98
[  124.117347][  T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.152681][  T129] usb 1-1: config 0 descriptor??
[  124.161321][  T129] HFC-S_USB: probe of 1-1:0.168 failed with error -5
[  124.774018][  T129] usb 1-1: USB disconnect, device number 5
[  125.264678][ T4982] loop2: detected capacity change from 0 to 64
[  125.835392][ T4992] syz.3.120 uses obsolete (PF_INET,SOCK_PACKET)
[  127.645057][ T4978] loop5: detected capacity change from 0 to 32768
[  128.974465][ T5018] affs: No valid root block on device nullb0
[  129.018626][ T5020] capability: warning: `syz.5.125' uses 32-bit capabilities (legacy support in use)
[  129.128419][  T127] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  129.312789][ T5025] loop1: detected capacity change from 0 to 128
[  129.354785][  T127] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  129.374734][ T5025] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ" or missing value
[  129.397074][  T127] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  129.442025][  T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.586240][ T4875] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  129.610931][  T127] usb 3-1: Product: syz
[  129.648833][  T127] usb 3-1: Manufacturer: syz
[  130.447503][  T127] usb 3-1: SerialNumber: syz
[  130.470890][  T127] usb 3-1: config 0 descriptor??
[  130.478296][ T5015] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  130.498037][  T127] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  130.563586][ T4875] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  130.584884][ T4875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.607106][ T4875] usb 6-1: config 0 descriptor??
[  130.616520][ T4875] pwc: Samsung MPC-C10 USB webcam detected.
[  132.297117][ T5018] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  132.715455][ T5048] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  132.727932][ T5048] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  132.890619][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  132.897037][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  133.000914][ T4875] pwc: send_video_command error -71
[  133.006489][ T4875] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  133.052407][ T4875] Philips webcam: probe of 6-1:0.0 failed with error -71
[  133.162370][ T4875] usb 6-1: USB disconnect, device number 2
[  134.124541][ T4454] usb 3-1: USB disconnect, device number 6
[  134.202374][ T5057] 8021q: adding VLAN 0 to HW filter on device bond1
[  134.947474][ T4454] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  136.922855][ T4454] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.540813][ T4454] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  137.552011][ T4454] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.561804][ T4454] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  137.586948][ T4454] usb 3-1: string descriptor 0 read error: -71
[  137.605242][ T4454] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  137.625485][ T4454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  137.684763][ T4454] usb 3-1: can't set config #1, error -71
[  137.697915][ T4454] usb 3-1: USB disconnect, device number 7
[  137.709345][ T5102] comedi comedi0: Minor 3 could not be opened
[  137.731495][ T5100] device syzkaller0 entered promiscuous mode
[  137.792392][ T5100] tipc: Started in network mode
[  137.830439][ T5100] tipc: Node identity 0a821a2cabb8, cluster identity 4711
[  137.864920][ T5100] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.927803][ T5107] tipc: Resetting bearer <eth:syzkaller0>
[  137.948499][ T5099] tipc: Resetting bearer <eth:syzkaller0>
[  138.027131][ T5099] tipc: Disabling bearer <eth:syzkaller0>
[  139.066969][ T5116] loop5: detected capacity change from 0 to 4096
[  139.075406][ T5116] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  139.097876][ T5126] loop0: detected capacity change from 0 to 22
[  139.105068][ T5126] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  139.115707][ T5126] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  139.173315][ T5116] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  139.238143][ T5116] ntfs3: loop5: Failed to load $Extend.
[  139.937347][ T4875] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  139.996145][ T5106] loop2: detected capacity change from 0 to 32768
[  140.132359][ T4875] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.163265][ T4875] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  140.232805][ T5106] XFS (loop2): Mounting V5 Filesystem
[  140.259715][ T4875] usb 6-1: config 1 has no interface number 0
[  140.417141][ T4875] usb 6-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[  140.698660][ T4875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.871508][ T4875] usb 6-1: Product: syz
[  140.920161][ T4875] usb 6-1: Manufacturer: syz
[  140.924830][ T4875] usb 6-1: SerialNumber: syz
[  140.934253][ T5134] loop1: detected capacity change from 0 to 32768
[  140.980983][ T5106] XFS (loop2): Ending clean mount
[  141.043102][ T5134] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  141.084475][ T5134] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  141.084497][ T4274] XFS (loop2): Unmounting Filesystem
[  141.134308][ T5134] BTRFS info (device loop1): using free space tree
[  141.219044][ T4875] usb 6-1: 1:0 : does not exist
[  141.237447][ T4454] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  141.254193][ T4875] usb 6-1: 1:2 : does not exist
[  141.281782][ T4875] usb 6-1: 1:3 : does not exist
[  141.304720][ T4875] usb 6-1: BAAD HEADPHONE p_chmask mismatch
[  141.385065][ T4875] snd-usb-audio: probe of 6-1:1.1 failed with error -22
[  141.413118][ T4875] usb 6-1: USB disconnect, device number 3
[  141.419028][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  141.468932][ T4454] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.492363][ T5134] BTRFS info (device loop1): enabling ssd optimizations
[  141.500197][ T4454] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  141.547690][ T4454] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.576293][ T4454] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  141.631574][ T4454] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  141.641667][ T4282] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  141.678434][ T4454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  141.704343][ T4454] usb 1-1: SerialNumber: syz
[  141.758236][ T4454] cdc_ether: probe of 1-1:1.0 failed with error -22
[  141.790826][ T4454] usb-storage 1-1:1.0: USB Mass Storage device detected
[  142.060179][ T4454] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  142.158708][ T5161] loop3: detected capacity change from 0 to 32768
[  142.269803][ T5161] JFS: metapage_get_blocks failed
[  142.289688][ T5161] ERROR: (device loop3): release_metapage: write_one_page() failed
[  142.289688][ T5161] 
[  142.341947][ T5203] device syzkaller0 entered promiscuous mode
[  142.396030][ T5161] ERROR: (device loop3): remounting filesystem as read-only
[  142.463578][ T5203] tipc: Started in network mode
[  142.551408][ T5203] tipc: Node identity ae2274af37a1, cluster identity 4711
[  142.586903][ T5161] JFS: metapage_get_blocks failed
[  142.722487][ T5161] ERROR: (device loop3): release_metapage: write_one_page() failed
[  142.722487][ T5161] 
[  142.764076][ T5203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.989544][ T5161] JFS: metapage_get_blocks failed
[  143.176965][ T4875] usb 1-1: USB disconnect, device number 6
[  143.375881][ T5161] ERROR: (device loop3): release_metapage: write_one_page() failed
[  143.375881][ T5161] 
[  143.397674][ T5161] JFS: metapage_get_blocks failed
[  143.402791][ T5161] ERROR: (device loop3): release_metapage: write_one_page() failed
[  143.402791][ T5161] 
[  143.423941][ T5211] tipc: Resetting bearer <eth:syzkaller0>
[  143.508236][ T5199] tipc: Resetting bearer <eth:syzkaller0>
[  143.747509][ T5161] JFS: metapage_get_blocks failed
[  143.752637][ T5161] ERROR: (device loop3): release_metapage: write_one_page() failed
[  143.752637][ T5161] 
[  144.277444][ T5161] JFS: metapage_get_blocks failed
[  144.282582][ T5161] ERROR: (device loop3): release_metapage: write_one_page() failed
[  144.282582][ T5161] 
[  144.322343][ T5199] tipc: Disabling bearer <eth:syzkaller0>
[  144.380206][ T5161] JFS: metapage_get_blocks failed
[  144.385318][ T5161] ERROR: (device loop3): release_metapage: write_one_page() failed
[  144.385318][ T5161] 
[  144.426817][ T5230] loop1: detected capacity change from 0 to 8
[  144.438217][ T5161] JFS: metapage_get_blocks failed
[  144.472693][ T4321] tipc: Node number set to 2575529135
[  144.527474][ T5161] ERROR: (device loop3): release_metapage: write_one_page() failed
[  144.527474][ T5161] 
[  144.578931][ T5161] JFS: metapage_get_blocks failed
[  144.585340][ T5161] ERROR: (device loop3): release_metapage: write_one_page() failed
[  144.585340][ T5161] 
[  144.620442][ T5161] JFS: metapage_get_blocks failed
[  144.625605][ T5161] ERROR: (device loop3): release_metapage: write_one_page() failed
[  144.625605][ T5161] 
[  144.646469][ T5161] JFS: metapage_get_blocks failed
[  144.651671][ T5161] ERROR: (device loop3): release_metapage: write_one_page() failed
[  144.651671][ T5161] 
[  144.717101][ T5161] JFS: metapage_get_blocks failed
[  144.737803][ T5161] ERROR: (device loop3): release_metapage: write_one_page() failed
[  144.737803][ T5161] 
[  144.755196][ T5161] JFS: metapage_get_blocks failed
[  144.765848][ T5236] loop5: detected capacity change from 0 to 256
[  144.773498][ T5161] ERROR: (device loop3): release_metapage: write_one_page() failed
[  144.773498][ T5161] 
[  144.856570][ T5161] JFS: metapage_get_blocks failed
[  144.914694][ T5161] ERROR: (device loop3): release_metapage: write_one_page() failed
[  144.914694][ T5161] 
[  145.001081][ T5161] JFS: metapage_get_blocks failed
[  145.006206][ T5161] ERROR: (device loop3): release_metapage: write_one_page() failed
[  145.006206][ T5161] 
[  145.079782][ T5241] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  145.454558][ T5161] JFS: metapage_get_blocks failed
[  145.657309][ T5161] ERROR: (device loop3): release_metapage: write_one_page() failed
[  145.657309][ T5161] 
[  146.881252][  T108] blkno = 8ed30, nblocks = 10
[  146.906789][  T108] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  146.906789][  T108] 
[  147.000081][ T5264] loop5: detected capacity change from 0 to 8
[  147.159804][ T5264] SQUASHFS error: Failed to read block 0x6e6: -5
[  147.187674][ T5264] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  147.215561][ T5264] SQUASHFS error: Unable to read directory block [631:26]
[  147.236768][ T5271] device syzkaller0 entered promiscuous mode
[  147.272784][ T5271] tipc: Started in network mode
[  147.297571][ T5271] tipc: Node identity ded0907953eb, cluster identity 4711
[  147.317448][ T5271] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.344171][ T5271] tipc: Resetting bearer <eth:syzkaller0>
[  147.353674][ T5277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'.
[  147.379223][ T5270] tipc: Resetting bearer <eth:syzkaller0>
[  147.434419][ T5270] tipc: Disabling bearer <eth:syzkaller0>
[  147.467175][ T5283] loop2: detected capacity change from 0 to 512
[  147.474545][ T5283] EXT4-fs: inline encryption not supported
[  147.493954][ T5283] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  147.517161][ T5283] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  147.557021][ T5283] EXT4-fs error (device loop2): __ext4_iget:5102: inode #11: block 65530: comm syz.2.186: invalid block
[  147.586922][ T5283] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.186: couldn't read orphan inode 11 (err -117)
[  147.599601][ T5283] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  147.691661][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  147.754888][ T5290] device syzkaller0 entered promiscuous mode
[  147.804974][ T5290] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.877865][ T5290] tipc: Resetting bearer <eth:syzkaller0>
[  147.890092][ T5289] tipc: Resetting bearer <eth:syzkaller0>
[  148.020205][ T5289] tipc: Disabling bearer <eth:syzkaller0>
[  148.113900][ T5297] loop5: detected capacity change from 0 to 512
[  148.205124][ T5302] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  148.343646][ T5297] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.189: bg 0: block 393: padding at end of block bitmap is not set
[  148.741523][ T5297] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  148.770803][ T5305] comedi comedi0: Minor 65537 is invalid!
[  148.898417][ T5297] EXT4-fs (loop5): 2 truncates cleaned up
[  149.069355][ T5297] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  151.494641][ T4514] EXT4-fs (loop5): unmounting filesystem.
[  151.731055][ T5338] loop5: detected capacity change from 0 to 1024
[  151.818194][ T5338] hfsplus: wrong filesystem version
[  151.856138][ T5340] netlink: 13 bytes leftover after parsing attributes in process `syz.2.202'.
[  152.060537][ T5353] loop5: detected capacity change from 0 to 256
[  152.083496][ T5352] loop0: detected capacity change from 0 to 64
[  152.083496][ T5353] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  152.093657][ T5354] loop1: detected capacity change from 0 to 16
[  152.277473][ T4875] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  152.557615][ T4875] usb 4-1: Using ep0 maxpacket: 16
[  152.576297][ T4875] usb 4-1: config index 0 descriptor too short (expected 65, got 36)
[  152.637018][ T5354] erofs: (device loop1): mounted with root inode @ nid 36.
[  152.683356][ T5353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  152.785513][ T4875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.088499][ T5362] loop2: detected capacity change from 0 to 512
[  153.117434][ T4875] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  153.126540][ T4875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.174170][ T5362] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.209: invalid block
[  153.175574][ T4875] usb 4-1: config 0 descriptor??
[  153.193502][ T4875] pxrc 4-1:0.0: Could not find endpoint
[  153.287919][ T5362] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.209: invalid indirect mapped block 10 (level 1)
[  153.397565][ T5362] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.209: invalid indirect mapped block 8 (level 1)
[  153.484068][ T5362] EXT4-fs (loop2): 1 truncate cleaned up
[  153.514384][ T5192] usb 4-1: USB disconnect, device number 3
[  153.541619][ T5362] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  153.653189][ T5374] loop0: detected capacity change from 0 to 4096
[  153.795780][ T5374] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  153.836742][ T5374] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.213: reserved inode found cleared - inode=18
[  153.845712][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  154.822914][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  154.977545][   T26] audit: type=1800 audit(1785522719.094:61): pid=5397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.215" name="qw_sign" dev="configfs" ino=37186 res=0 errno=0
[  155.212862][ T5402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'.
[  155.234276][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'.
[  155.272373][ T5407] loop0: detected capacity change from 0 to 512
[  155.342380][ T5407] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  155.424845][ T5407] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  155.485150][ T5407] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.221: bad orphan inode 15
[  155.542858][ T5407] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  155.596114][ T5407] EXT4-fs error (device loop0): ext4_lookup:1850: inode #2: comm syz.0.221: bad inode number: 16
[  155.687454][ T5407] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.221: reserved inode found cleared - inode=17
[  156.572083][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  156.885391][ T5429] device syzkaller0 entered promiscuous mode
[  157.040954][ T5436] tipc: Started in network mode
[  157.113598][ T5436] tipc: Node identity 963880d8d224, cluster identity 4711
[  157.264057][ T5436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.615415][ T5439] tipc: Resetting bearer <eth:syzkaller0>
[  157.681339][ T5441] futex_wake_op: syz.5.232 tries to shift op by 144; fix this program
[  157.691931][ T5441] futex_wake_op: syz.5.232 tries to shift op by 144; fix this program
[  157.893564][ T5427] tipc: Resetting bearer <eth:syzkaller0>
[  157.985967][ T5427] tipc: Disabling bearer <eth:syzkaller0>
[  158.016660][ T5411] loop1: detected capacity change from 0 to 32768
[  158.137407][   T33] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  158.172421][ T5411] XFS (loop1): Mounting V5 Filesystem
[  158.293577][ T5465] xt_time: unknown flags 0x74
[  158.339950][   T33] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.348795][ T5411] XFS (loop1): Ending clean mount
[  158.364412][   T33] usb 6-1: config 0 has no interfaces?
[  158.393249][   T33] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  158.423650][   T33] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.452398][ T5437] loop0: detected capacity change from 0 to 32768
[  158.461516][   T33] usb 6-1: config 0 descriptor??
[  158.569495][ T4282] XFS (loop1): Unmounting Filesystem
[  158.698867][ T5437] XFS (loop0): Mounting V5 Filesystem
[  158.726789][ T4454] usb 6-1: USB disconnect, device number 4
[  158.791428][ T5488] loop3: detected capacity change from 0 to 64
[  158.835364][ T5437] XFS (loop0): Ending clean mount
[  158.901797][ T5491] loop2: detected capacity change from 0 to 256
[  158.948591][   T26] audit: type=1800 audit(1785522723.074:62): pid=5488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.242" name="file2" dev="loop3" ino=6 res=0 errno=0
[  158.988151][   T26] audit: type=1800 audit(1785522723.094:63): pid=5437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.239" name="file1" dev="loop0" ino=6150 res=0 errno=0
[  159.128696][ T4273] XFS (loop0): Unmounting Filesystem
[  159.515076][ T5501] loop5: detected capacity change from 0 to 512
[  159.603864][ T5501] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.248: Invalid inode bitmap blk 4 in block_group 0
[  159.655826][ T5501] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  159.678420][ T4454] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  159.803576][ T5501] EXT4-fs: old and new quota format mixing
[  159.879689][ T4454] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  159.903135][ T4454] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  159.951728][ T4514] EXT4-fs (loop5): unmounting filesystem.
[  159.959906][ T4454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.000672][ T4454] usb 4-1: config 0 descriptor??
[  160.288358][ T4320] usb 4-1: USB disconnect, device number 4
[  160.527733][ T5542] loop1: detected capacity change from 0 to 512
[  160.616173][ T5542] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  160.633347][ T5542] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  160.857434][ T4320] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  160.885595][ T4282] EXT4-fs (loop1): unmounting filesystem.
[  161.042065][   T26] audit: type=1800 audit(1785522725.164:64): pid=5566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.269" name="b_vendor_code" dev="configfs" ino=38059 res=0 errno=0
[  161.063908][ T4320] usb 4-1: Using ep0 maxpacket: 32
[  161.087794][ T4320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  161.115922][ T4320] usb 4-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice= 0.40
[  161.156565][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.199378][ T4320] usb 4-1: config 0 descriptor??
[  161.233682][ T4320] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state.
[  161.277909][ T4320] dvb-usb: bulk message failed: -22 (2/0)
[  161.284134][ T4320] dvb-usb: will use the device's hardware PID filter (table count: 15).
[  161.347792][ T4320] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom))
[  161.369785][ T4320] usb 4-1: media controller created
[  161.391867][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  161.430604][ T5577] sctp: [Deprecated]: syz.1.273 (pid 5577) Use of int in max_burst socket option.
[  161.430604][ T5577] Use struct sctp_assoc_value instead
[  161.480280][ T4320] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)...
[  161.485227][ T5530] loop0: detected capacity change from 0 to 32768
[  161.510783][ T4320] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[  161.562176][ T5530] 
[  161.562176][ T5530]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.562176][ T5530] 
[  161.626939][ T5530] 
[  161.626939][ T5530]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.626939][ T5530] 
[  161.681431][ T5530] 
[  161.681431][ T5530]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.681431][ T5530] 
[  161.731050][ T5530] 
[  161.731050][ T5530]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.731050][ T5530] 
[  161.734060][ T5587] IPVS: Error connecting to the multicast addr
[  161.753749][ T5530] 
[  161.753749][ T5530]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.753749][ T5530] 
[  161.809250][  T107] 
[  161.809250][  T107]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.809250][  T107] 
[  161.826283][ T5589] loop5: detected capacity change from 0 to 512
[  161.848810][ T5586] read_mapping_page failed!
[  161.864121][ T5586] ERROR: (device loop0): txCommit: 
[  161.864121][ T5586] 
[  161.893268][ T5589] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  161.937616][ T5586] ERROR: (device loop0): remounting filesystem as read-only
[  161.947385][ T4320] rc_core: IR keymap rc-dtt200u not found
[  161.953175][ T4320] Registered IR keymap rc-empty
[  161.968632][ T5589] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #16: comm syz.5.278: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[  162.036076][ T5589] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.278: couldn't read orphan inode 16 (err -117)
[  162.052341][ T4320] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  162.160569][ T5589] EXT4-fs (loop5): 1 orphan inode deleted
[  162.166414][ T5589] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  162.182619][ T4320] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input7
[  162.295642][ T4320] dvb-usb: schedule remote query interval to 300 msecs.
[  162.311017][ T4514] EXT4-fs (loop5): unmounting filesystem.
[  162.343606][ T4320] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected.
[  162.442411][ T4320] usb 4-1: USB disconnect, device number 5
[  162.609726][ T4320] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected.
[  162.723692][ T5583] loop2: detected capacity change from 0 to 32768
[  162.863551][ T5583] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  162.985559][ T5622] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  163.877920][ T4274] ocfs2: Unmounting device (7,2) on (node local)
[  164.707203][ T5663] device syzkaller0 entered promiscuous mode
[  165.517511][ T5665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.556851][ T5657] tipc: Resetting bearer <eth:syzkaller0>
[  165.643556][ T5657] tipc: Disabling bearer <eth:syzkaller0>
[  165.838151][ T5688] device veth1_macvtap left promiscuous mode
[  165.861130][ T5688] device macsec0 entered promiscuous mode
[  165.885978][ T5692] loop0: detected capacity change from 0 to 256
[  165.905522][ T5695] device veth1_macvtap entered promiscuous mode
[  165.921108][ T5695] device macsec0 left promiscuous mode
[  165.950299][ T5692] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d)
[  166.209804][ T5192] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  167.092988][ T5192] usb 3-1: Using ep0 maxpacket: 32
[  167.121508][ T5192] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  167.152592][ T5192] usb 3-1: config 0 has no interface number 0
[  167.176941][ T5192] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  167.207540][ T5192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.215592][ T5192] usb 3-1: Product: syz
[  167.236410][ T5719] device syzkaller0 entered promiscuous mode
[  167.242770][ T5192] usb 3-1: Manufacturer: syz
[  167.251171][ T5719] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.258407][ T5192] usb 3-1: SerialNumber: syz
[  167.268372][ T5192] usb 3-1: config 0 descriptor??
[  167.279641][ T5719] tipc: Resetting bearer <eth:syzkaller0>
[  167.307141][ T5192] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  167.334077][ T5192] usb 3-1: selecting invalid altsetting 1
[  167.353054][ T5192] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  167.402462][ T5192] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  167.418923][ T5192] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  167.429444][ T5192] usb 3-1: media controller created
[  167.462459][ T5192] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  167.495328][ T5717] tipc: Resetting bearer <eth:syzkaller0>
[  167.566133][ T5717] tipc: Disabling bearer <eth:syzkaller0>
[  168.568071][ T5192] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  168.680904][ T5192] zl10353_read_register: readreg error (reg=127, ret==-110)
[  168.763011][   T26] audit: type=1800 audit(1785522732.884:65): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.327" name="idProduct" dev="configfs" ino=38281 res=0 errno=0
[  168.790655][ T5192] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  168.872298][ T5747] loop5: detected capacity change from 0 to 128
[  168.987872][ T5747] bio_check_eod: 2399 callbacks suppressed
[  168.987888][ T5747] syz.5.329: attempt to access beyond end of device
[  168.987888][ T5747] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128
[  169.007544][ T5192] usb 3-1: USB disconnect, device number 8
[  169.132703][ T5725] loop3: detected capacity change from 0 to 40427
[  169.149817][   T26] audit: type=1326 audit(1785522733.274:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8679e019 code=0x7ffc0000
[  169.186951][   T26] audit: type=1326 audit(1785522733.274:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8679e019 code=0x7ffc0000
[  169.186993][ T5725] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  169.237299][   T26] audit: type=1326 audit(1785522733.274:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8679e019 code=0x7ffc0000
[  169.287921][   T26] audit: type=1326 audit(1785522733.274:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8d8679e019 code=0x7ffc0000
[  169.312038][ T5725] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  169.322209][   T26] audit: type=1326 audit(1785522733.274:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8679e019 code=0x7ffc0000
[  169.362280][ T5725] F2FS-fs (loop3): invalid crc value
[  169.413807][ T5725] F2FS-fs (loop3): Found nat_bits in checkpoint
[  169.492198][   T26] audit: type=1326 audit(1785522733.274:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8679e019 code=0x7ffc0000
[  169.602177][   T26] audit: type=1326 audit(1785522733.274:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8679e019 code=0x7ffc0000
[  169.637042][ T5725] F2FS-fs (loop3): recover fsync data on readonly fs
[  169.685926][ T5725] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30
[  169.707207][ T5768] loop0: detected capacity change from 0 to 736
[  169.717073][ T5725] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  169.798182][   T26] audit: type=1326 audit(1785522733.274:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8679e019 code=0x7ffc0000
[  169.957338][   T26] audit: type=1326 audit(1785522733.284:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f8d8679e019 code=0x7ffc0000
[  170.023164][ T5779] loop1: detected capacity change from 0 to 256
[  170.166165][ T5779] FAT-fs (loop1): Directory bread(block 64) failed
[  170.205921][ T5779] FAT-fs (loop1): Directory bread(block 65) failed
[  170.234449][ T5779] FAT-fs (loop1): Directory bread(block 66) failed
[  170.261490][ T5779] FAT-fs (loop1): Directory bread(block 67) failed
[  170.312099][ T5779] FAT-fs (loop1): Directory bread(block 68) failed
[  170.315138][ T5789] netlink: 36 bytes leftover after parsing attributes in process `syz.3.345'.
[  170.347508][ T5779] FAT-fs (loop1): Directory bread(block 69) failed
[  170.395239][ T5779] FAT-fs (loop1): Directory bread(block 70) failed
[  170.415485][ T5779] FAT-fs (loop1): Directory bread(block 71) failed
[  170.467694][ T5779] FAT-fs (loop1): Directory bread(block 72) failed
[  170.474289][ T5779] FAT-fs (loop1): Directory bread(block 73) failed
[  170.786848][ T5796] netlink: 72 bytes leftover after parsing attributes in process `syz.2.346'.
[  171.299901][ T5800] loop1: detected capacity change from 0 to 1024
[  171.541334][ T5776] loop5: detected capacity change from 0 to 32768
[  171.570838][ T5805] loop3: detected capacity change from 0 to 64
[  171.612475][ T5776] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.338 (5776)
[  171.742877][ T5776] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  171.845252][ T5776] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  171.855730][ T5815] tmpfs: Cannot retroactively limit inodes
[  171.888597][ T5776] BTRFS info (device loop5): using free space tree
[  172.012701][ T5823] loop3: detected capacity change from 0 to 256
[  172.092903][ T5823] exfat: Deprecated parameter 'utf8'
[  172.137508][ T5823] exfat: Deprecated parameter 'namecase'
[  172.162856][ T5776] BTRFS info (device loop5): enabling ssd optimizations
[  172.214523][ T5841] loop1: detected capacity change from 0 to 512
[  172.218010][ T5823] exfat: Deprecated parameter 'namecase'
[  172.260257][ T5823] exfat: Deprecated parameter 'namecase'
[  172.293828][ T5823] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9eb8f943, utbl_chksum : 0xe619d30d)
[  172.294277][ T5841] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  172.310220][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'.
[  172.442081][ T4514] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  172.453288][ T5841] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.359: bad orphan inode 131083
[  172.470876][ T5846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.360'.
[  172.601746][ T5841] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  172.745151][ T5814] loop2: detected capacity change from 0 to 32768
[  172.770145][ T5841] overlayfs: upper fs needs to support d_type.
[  172.819816][ T5814] add_index: next_index = 0.  Resetting!
[  172.832404][ T5814] find_entry called with index >= next_index
[  172.838955][ T5814] find_entry called with index >= next_index
[  172.866983][ T5814] find_entry called with index >= next_index
[  172.914533][ T5814] find_entry called with index >= next_index
[  173.606513][ T5869] netlink: 72 bytes leftover after parsing attributes in process `syz.5.361'.
[  174.272957][ T4728] EXT4-fs (loop1): unmounting filesystem.
[  174.498555][   T30] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.646813][   T30] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.733303][ T5859] loop3: detected capacity change from 0 to 32768
[  174.778255][ T5859] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.368 (5859)
[  174.845779][   T30] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.880990][ T5859] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  174.910613][ T5859] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  174.932034][ T5859] BTRFS info (device loop3): using free space tree
[  175.041240][   T30] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.160834][ T5899] loop2: detected capacity change from 0 to 8192
[  175.187068][ T5899] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  175.205645][ T5899] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  175.237447][ T5192] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  175.308460][ T5899] REISERFS (device loop2): using journaled data mode
[  175.315247][ T5899] reiserfs: using flush barriers
[  175.321410][ T5859] BTRFS info (device loop3): enabling ssd optimizations
[  175.401464][ T5899] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  175.468867][ T5192] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  175.480760][ T5899] REISERFS (device loop2): checking transaction log (loop2)
[  175.526212][ T5192] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00
[  175.531143][ T5899] REISERFS (device loop2): Using r5 hash to sort names
[  175.567646][   T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  175.581325][   T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  175.588377][ T5192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.599353][   T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  175.609631][   T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  175.609932][ T5192] usb 1-1: config 0 descriptor??
[  175.624238][   T49] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  175.631863][   T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  175.641849][ T5899] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  175.665460][ T4288] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  175.697715][ T5899] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  175.888193][   T30] tipc: Left network mode
[  175.986807][ T5923] chnl_net:caif_netlink_parms(): no params data found
[  176.092616][ T5192] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0
[  176.136242][ T5192] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0
[  176.187341][ T5192] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0
[  176.194891][ T5192] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0
[  176.197986][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.210064][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.218776][ T5923] device bridge_slave_0 entered promiscuous mode
[  176.228098][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.235434][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.243958][ T5923] device bridge_slave_1 entered promiscuous mode
[  176.254268][ T4369] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 9 /dev/loop3 scanned by udevd (4369)
[  176.276631][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.277351][ T5192] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0
[  176.291518][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.327492][ T5192] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0
[  176.335047][ T5192] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0
[  176.356752][ T5923] team0: Port device team_slave_0 added
[  176.368063][ T5921] loop5: detected capacity change from 0 to 32768
[  176.383429][ T5192] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0
[  176.386190][ T5923] team0: Port device team_slave_1 added
[  176.391791][ T5192] holtek_mouse 0003:04D9:A070.0001: item fetching failed at offset 38/40
[  176.409029][ T5192] holtek_mouse 0003:04D9:A070.0001: hid parse failed: -22
[  176.416432][ T5192] holtek_mouse: probe of 0003:04D9:A070.0001 failed with error -22
[  176.490231][ T5192] usb 1-1: USB disconnect, device number 7
[  176.543916][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.610636][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.764674][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.831285][ T5948] loop3: detected capacity change from 0 to 1024
[  177.039997][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.046998][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.058256][ T5953] loop0: detected capacity change from 0 to 128
[  177.235867][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.260382][ T5959] Need at least one configuration in g1.
[  177.289722][ T5959] udc dummy_udc.0: failed to start g1: -22
[  177.295603][ T5959] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  177.415713][ T5959] UDC core: g1: couldn't find an available UDC or it's busy
[  177.676696][ T5923] device hsr_slave_0 entered promiscuous mode
[  177.701441][ T4287] Bluetooth: hci3: command 0x0409 tx timeout
[  177.724377][ T5923] device hsr_slave_1 entered promiscuous mode
[  177.757648][ T5923] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  177.799253][ T5923] Cannot create hsr debugfs directory
[  177.847586][ T4325] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  178.032194][ T5979] loop0: detected capacity change from 0 to 64
[  178.038767][ T4325] usb 6-1: Using ep0 maxpacket: 8
[  178.049112][ T4325] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  178.112780][ T4325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.170060][ T4325] usb 6-1: Product: syz
[  178.177696][ T4325] usb 6-1: Manufacturer: syz
[  178.215378][ T4325] usb 6-1: SerialNumber: syz
[  178.325074][ T5980] loop2: detected capacity change from 0 to 8192
[  178.971098][ T5923] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  179.076306][ T5923] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  179.101096][ T4325] usb 6-1: 1:1: cannot get freq (v2/v3): err -71
[  179.114641][ T4325] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  179.145092][ T4325] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  179.187425][ T4325] usb 6-1: clock source 0 is not valid, cannot use
[  179.213416][ T4325] usb 6-1: 2:1: cannot get freq (v2/v3): err -71
[  179.265625][ T4325] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  179.353631][ T5923] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  179.387728][ T4325] usb 6-1: USB disconnect, device number 5
[  179.492495][ T4426] udevd[4426]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  179.546694][   T30] device hsr_slave_0 left promiscuous mode
[  179.576051][   T30] device hsr_slave_1 left promiscuous mode
[  179.590581][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.637405][ T5943] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  179.645100][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.655898][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.691197][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.708983][   T30] device bridge_slave_1 left promiscuous mode
[  179.727565][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.755183][   T30] device bridge_slave_0 left promiscuous mode
[  179.771035][ T4287] Bluetooth: hci3: command 0x041b tx timeout
[  179.792937][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.827483][ T5943] usb 4-1: Using ep0 maxpacket: 32
[  179.834562][ T5943] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  179.876252][ T5943] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  179.905476][ T5943] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  179.933691][ T5943] usb 4-1: config 1 has no interface number 0
[  179.939686][ T6021] loop5: detected capacity change from 0 to 4096
[  179.957352][ T5943] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 34305, setting to 1024
[  179.965833][ T6021] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  179.983369][ T5998] loop0: detected capacity change from 0 to 40427
[  179.990048][ T5943] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  180.003499][ T6015] loop2: detected capacity change from 0 to 32768
[  180.037190][ T5998] F2FS-fs (loop0): invalid crc value
[  180.049600][ T5943] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  180.060401][ T5998] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  180.082641][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.082975][ T6015] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  180.099228][ T6012] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  180.104970][ T5943] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  180.153327][ T6015] JBD2: Ignoring recovery information on journal
[  180.159953][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  180.159976][   T26] audit: type=1800 audit(1785522744.274:79): pid=6021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.407" name="file1" dev="loop5" ino=30 res=0 errno=0
[  180.192669][   T30] device veth1_macvtap left promiscuous mode
[  180.201047][   T30] device veth0_macvtap left promiscuous mode
[  180.207490][   T30] device veth1_vlan left promiscuous mode
[  180.213503][   T30] device veth0_vlan left promiscuous mode
[  180.302264][ T6012] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  180.332301][ T5998] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  180.342880][ T5943] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  180.405836][ T6015] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  180.448203][ T5998] F2FS-fs (loop0): Start checkpoint disabled!
[  180.558776][ T5943] usb 4-1: USB disconnect, device number 6
[  180.565972][ T5943] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  180.592916][ T5998] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  180.769737][ T6015] syz.2.406 (6015) used greatest stack depth: 18176 bytes left
[  180.819594][ T4274] ocfs2: Unmounting device (7,2) on (node local)
[  180.831390][ T6036] loop5: detected capacity change from 0 to 16
[  180.869476][ T6036] erofs: (device loop5): mounted with root inode @ nid 36.
[  181.521585][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'.
[  181.857618][ T4287] Bluetooth: hci3: command 0x040f tx timeout
[  183.366416][ T6038] loop5: detected capacity change from 0 to 32768
[  183.412884][ T6038] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.413 (6038)
[  183.488158][ T6038] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  183.545571][ T6038] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  183.587773][ T6038] BTRFS info (device loop5): force clearing of disk cache
[  183.613036][ T6038] BTRFS info (device loop5): enabling auto defrag
[  183.628734][ T6038] BTRFS info (device loop5): max_inline at 428
[  183.645308][ T6038] BTRFS info (device loop5): enabling disk space caching
[  183.671998][ T6038] BTRFS info (device loop5): disk space caching is enabled
[  183.927579][ T4287] Bluetooth: hci3: command 0x0419 tx timeout
[  183.957838][   T30] team0 (unregistering): Port device team_slave_1 removed
[  183.965535][ T6038] BTRFS info (device loop5): enabling ssd optimizations
[  183.988687][ T6038] BTRFS info (device loop5): rebuilding free space tree
[  184.051751][ T6038] BTRFS info (device loop5): disabling free space tree
[  184.058890][ T6038] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  184.072699][ T6038] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  184.125712][ T4514] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  184.141149][   T30] team0 (unregistering): Port device team_slave_0 removed
[  184.165893][ T6067] loop3: detected capacity change from 0 to 32768
[  184.193032][ T6067] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.418 (6067)
[  184.531337][ T4369] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  184.560326][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.630162][ T5620] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (5620)
[  184.759286][ T6100] loop2: detected capacity change from 0 to 512
[  184.781401][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.820283][ T6100] EXT4-fs (loop2): Test dummy encryption mode enabled
[  184.838776][ T6100] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  184.879757][ T6100] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  184.917037][ T6100] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  185.162748][ T4320] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  185.382979][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  185.524399][ T6109] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.422: Directory hole found for htree leaf block 0
[  185.584462][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.862167][ T4320] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00
[  185.872827][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.895192][ T4320] usb 4-1: config 0 descriptor??
[  185.934210][ T6105] loop5: detected capacity change from 0 to 32768
[  185.942793][ T6105] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 scanned by syz.5.419 (6105)
[  185.979371][ T6105] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  186.000797][ T6105] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  186.010070][ T6105] BTRFS info (device loop5): enabling ssd optimizations
[  186.030979][ T6105] BTRFS info (device loop5): not using ssd optimizations
[  186.038202][ T6105] BTRFS info (device loop5): turning off barriers
[  186.054068][ T6105] BTRFS info (device loop5): using free space tree
[  186.325897][ T4320] hid (null): unknown global tag 0xe
[  186.348352][ T4320] hid (null): global environment stack underflow
[  186.354785][ T4320] hid (null): unknown global tag 0x52
[  186.395060][ T4320] wacom 0003:056A:5000.0002: unknown main item tag 0x0
[  186.402423][ T4320] wacom 0003:056A:5000.0002: unknown main item tag 0x0
[  186.410095][ T4320] wacom 0003:056A:5000.0002: unknown main item tag 0x0
[  186.417132][ T4320] wacom 0003:056A:5000.0002: unknown main item tag 0x0
[  186.424498][ T4320] wacom 0003:056A:5000.0002: unknown main item tag 0x0
[  186.437632][ T4320] wacom 0003:056A:5000.0002: unknown main item tag 0x0
[  186.444571][ T4320] wacom 0003:056A:5000.0002: ignoring exceeding usage max
[  186.459336][ T4320] wacom 0003:056A:5000.0002: unknown global tag 0xe
[  186.466091][ T4320] wacom 0003:056A:5000.0002: item 0 1 1 14 parsing failed
[  186.480356][ T4320] wacom 0003:056A:5000.0002: parse failed
[  186.486158][ T4320] wacom: probe of 0003:056A:5000.0002 failed with error -22
[  186.542304][ T4514] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  186.556273][   T30] bond0 (unregistering): Released all slaves
[  186.613602][ T4454] usb 4-1: USB disconnect, device number 7
[  186.911510][ T5923] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  186.932303][ T6062] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.958031][ T6059] device syzkaller0 entered promiscuous mode
[  187.092071][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  187.152375][ T6059] tipc: Resetting bearer <eth:syzkaller0>
[  187.214158][ T6059] tipc: Disabling bearer <eth:syzkaller0>
[  187.455067][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.591318][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'.
[  187.600561][ T6143] device bridge_slave_1 left promiscuous mode
[  187.607274][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.634887][ T6143] device bridge_slave_0 left promiscuous mode
[  187.727111][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.388512][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.440465][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.510401][ T5923] 8021q: adding VLAN 0 to HW filter on device team0
[  188.574366][ T6130] loop5: detected capacity change from 0 to 32768
[  188.589308][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  188.609116][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  188.650427][ T6130] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.424 (6130)
[  188.677648][ T4633] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.684869][ T4633] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.747816][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  188.760552][ T6130] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  188.792130][ T6130] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  188.826298][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  188.848569][ T6130] BTRFS info (device loop5): using free space tree
[  188.856052][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  188.875936][ T4633] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.883147][ T4633] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.936186][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  188.982461][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  190.267611][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  190.342181][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  190.378417][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  190.413284][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  190.434641][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  190.469214][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  190.506480][ T5923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  190.581548][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  190.606773][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  190.616580][ T6130] BTRFS error (device loop5): open_ctree failed: -12
[  190.627351][ T4369] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by udevd (4369)
[  190.645125][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  190.699968][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  192.000624][ T1105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.198626][ T6206] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.870407][ T1105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.953049][ T6194] tipc: Disabling bearer <eth:syzkaller0>
[  193.456790][ T1105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.003950][ T1105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.139678][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  194.159390][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  194.187167][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.242226][ T6230] loop3: detected capacity change from 0 to 1024
[  194.332289][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.341967][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.385407][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.441'.
[  194.506063][ T6230] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  194.801020][ T6230] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  195.002119][ T6230] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  195.946602][ T4288] EXT4-fs (loop3): unmounting filesystem.
[  196.167049][ T1105] tipc: Left network mode
[  196.260479][ T6246] comedi comedi0: Minor 2 could not be opened
[  196.431960][ T6226] loop2: detected capacity change from 0 to 32768
[  198.000434][ T6252] sched: RT throttling activated
[  198.222187][   T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  198.232906][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  198.243019][   T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  198.250952][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  198.258922][   T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  198.291680][   T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  198.532899][ T6273] loop3: detected capacity change from 0 to 128
[  198.601301][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  198.637157][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  198.928818][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  198.956185][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  198.999985][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  199.028129][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  199.084171][ T6271] loop5: detected capacity change from 0 to 32768
[  199.118158][ T5923] device veth0_vlan entered promiscuous mode
[  199.144200][ T6280] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.151920][ T6271] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  199.196404][ T6271] JBD2: Ignoring recovery information on journal
[  199.204685][ T6280] tipc: Resetting bearer <eth:syzkaller0>
[  199.229769][ T5923] device veth1_vlan entered promiscuous mode
[  199.281203][ T6271] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  199.283405][ T6279] tipc: Disabling bearer <eth:syzkaller0>
[  199.545953][ T4514] ocfs2: Unmounting device (7,5) on (node local)
[  199.578106][ T6295] udc usbip-vudc.0: soft-connect without a gadget driver
[  199.920045][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  200.016256][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  200.338014][   T49] Bluetooth: hci0: command 0x0409 tx timeout
[  201.732746][ T5923] device veth0_macvtap entered promiscuous mode
[  201.855044][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  201.865419][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  202.030001][ T5923] device veth1_macvtap entered promiscuous mode
[  202.055040][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  202.071046][ T6263] chnl_net:caif_netlink_parms(): no params data found
[  202.122557][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.147338][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.172839][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.193736][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.224048][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.255044][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.295946][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.317016][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.338948][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.417399][   T49] Bluetooth: hci0: command 0x041b tx timeout
[  202.525595][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  202.548156][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  202.589026][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.595098][ T6308] loop3: detected capacity change from 0 to 40427
[  202.615986][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.637485][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.653617][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.666530][ T6308] F2FS-fs (loop3): invalid crc value
[  202.675480][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.690373][ T6308] F2FS-fs (loop3): Found nat_bits in checkpoint
[  202.710707][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.737325][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.752064][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.788366][ T6308] F2FS-fs (loop3): Start checkpoint disabled!
[  202.805361][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.870664][ T6308] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  202.916199][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  202.945135][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  203.008624][ T1105] device hsr_slave_0 left promiscuous mode
[  203.020255][ T1105] device hsr_slave_1 left promiscuous mode
[  203.036728][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.074167][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.094263][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.108105][ T6326] loop5: detected capacity change from 0 to 4096
[  203.122908][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.181321][ T6328] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  203.243841][ T4288] syz-executor: attempt to access beyond end of device
[  203.243841][ T4288] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  203.281852][ T1105] device veth1_macvtap left promiscuous mode
[  203.300114][ T1105] device veth0_macvtap left promiscuous mode
[  203.306309][ T1105] device veth1_vlan left promiscuous mode
[  203.321413][ T4288] syz-executor: attempt to access beyond end of device
[  203.321413][ T4288] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  203.322457][ T1105] device veth0_vlan left promiscuous mode
[  204.404534][ T4633] kworker/u4:23: attempt to access beyond end of device
[  204.404534][ T4633] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  204.487457][   T49] Bluetooth: hci0: command 0x040f tx timeout
[  204.751619][ T6331] loop2: detected capacity change from 0 to 32768
[  204.925154][ T6331] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  205.212094][ T4274] ocfs2: Unmounting device (7,2) on (node local)
[  205.329968][ T6349] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  205.341565][ T6349] VFS: Can't find a romfs filesystem on dev nullb0.
[  205.341565][ T6349] 
[  206.370122][ T6353] loop2: detected capacity change from 0 to 32768
[  206.406788][ T6353] JFS: metapage_get_blocks failed
[  206.412932][ T6353] ERROR: (device loop2): release_metapage: write_one_page() failed
[  206.412932][ T6353] 
[  206.440219][ T6353] ERROR: (device loop2): remounting filesystem as read-only
[  206.500987][ T6353] JFS: metapage_get_blocks failed
[  206.506313][ T6357] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  206.523105][ T6353] ERROR: (device loop2): release_metapage: write_one_page() failed
[  206.523105][ T6353] 
[  206.548453][ T6353] JFS: metapage_get_blocks failed
[  206.567640][ T4287] Bluetooth: hci0: command 0x0419 tx timeout
[  206.601963][ T6353] ERROR: (device loop2): release_metapage: write_one_page() failed
[  206.601963][ T6353] 
[  206.645954][ T6353] JFS: metapage_get_blocks failed
[  206.655681][ T6353] ERROR: (device loop2): release_metapage: write_one_page() failed
[  206.655681][ T6353] 
[  206.691461][ T6353] JFS: metapage_get_blocks failed
[  206.696726][ T6353] ERROR: (device loop2): release_metapage: write_one_page() failed
[  206.696726][ T6353] 
[  206.726942][ T6353] JFS: metapage_get_blocks failed
[  206.732706][ T6353] ERROR: (device loop2): release_metapage: write_one_page() failed
[  206.732706][ T6353] 
[  206.755089][ T6353] JFS: metapage_get_blocks failed
[  206.775770][ T6353] ERROR: (device loop2): release_metapage: write_one_page() failed
[  206.775770][ T6353] 
[  206.796429][ T6353] JFS: metapage_get_blocks failed
[  206.805210][ T6353] ERROR: (device loop2): release_metapage: write_one_page() failed
[  206.805210][ T6353] 
[  206.863175][ T6353] JFS: metapage_get_blocks failed
[  206.905543][ T6353] ERROR: (device loop2): release_metapage: write_one_page() failed
[  206.905543][ T6353] 
[  206.927562][ T6353] JFS: metapage_get_blocks failed
[  206.937736][ T6353] ERROR: (device loop2): release_metapage: write_one_page() failed
[  206.937736][ T6353] 
[  207.068476][ T6353] JFS: metapage_get_blocks failed
[  207.073548][ T6353] ERROR: (device loop2): release_metapage: write_one_page() failed
[  207.073548][ T6353] 
[  207.111166][ T6353] JFS: metapage_get_blocks failed
[  207.116451][ T6353] ERROR: (device loop2): release_metapage: write_one_page() failed
[  207.116451][ T6353] 
[  207.141549][ T6353] JFS: metapage_get_blocks failed
[  207.146627][ T6353] ERROR: (device loop2): release_metapage: write_one_page() failed
[  207.146627][ T6353] 
[  207.169120][ T6353] JFS: metapage_get_blocks failed
[  207.174242][ T6353] ERROR: (device loop2): release_metapage: write_one_page() failed
[  207.174242][ T6353] 
[  207.213558][ T6353] JFS: metapage_get_blocks failed
[  207.230465][ T6353] ERROR: (device loop2): release_metapage: write_one_page() failed
[  207.230465][ T6353] 
[  207.252071][ T6353] JFS: metapage_get_blocks failed
[  207.257176][ T6353] ERROR: (device loop2): release_metapage: write_one_page() failed
[  207.257176][ T6353] 
[  207.273467][ T1105] team0 (unregistering): Port device team_slave_1 removed
[  207.338181][ T1105] team0 (unregistering): Port device team_slave_0 removed
[  207.396717][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  207.457969][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  207.513660][  T108] blkno = 8ed30, nblocks = 10
[  207.518419][  T108] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  207.518419][  T108] 
[  208.311915][ T1105] bond0 (unregistering): Released all slaves
[  208.677782][ T5923] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.712588][ T5923] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.747588][ T5923] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.789046][ T5923] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.963053][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'.
[  208.980098][ T6362] device bridge_slave_1 left promiscuous mode
[  208.989871][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.001532][ T6362] device bridge_slave_0 left promiscuous mode
[  209.014690][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.330325][ T6263] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.403936][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.431484][ T6263] device bridge_slave_0 entered promiscuous mode
[  209.482253][ T6263] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.521741][ T6374] loop2: detected capacity change from 0 to 512
[  209.540819][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.621773][ T4369] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  209.665664][ T6379] netlink: 72 bytes leftover after parsing attributes in process `syz.5.461'.
[  209.764616][ T6263] device bridge_slave_1 entered promiscuous mode
[  210.349510][ T6383] netlink: 24 bytes leftover after parsing attributes in process `syz.5.465'.
[  210.363905][ T6263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.469007][ T6263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.547397][   T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.577288][   T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.637992][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  210.681209][ T6263] team0: Port device team_slave_0 added
[  210.710715][ T6263] team0: Port device team_slave_1 added
[  210.734974][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.756909][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.779856][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.815438][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.824324][ T6263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  210.846415][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_1
[  210.855454][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.920657][ T6263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.923175][ T6393] udc usbip-vudc.0: soft-connect without a gadget driver
[  210.959166][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  211.091671][ T6263] device hsr_slave_0 entered promiscuous mode
[  211.150625][ T6263] device hsr_slave_1 entered promiscuous mode
[  211.172722][ T6263] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  211.193470][ T6263] Cannot create hsr debugfs directory
[  212.349953][ T4287] Bluetooth: hci2: command 0x0406 tx timeout
[  212.663608][ T1105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.754696][   T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  212.770627][   T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  212.782199][   T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  212.809477][ T4291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  212.817102][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  212.824524][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  212.908466][ T1105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.081095][ T1105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.219799][ T1105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.618536][ T6263] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  213.683663][ T6263] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  213.736659][ T6407] chnl_net:caif_netlink_parms(): no params data found
[  213.768066][ T6263] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  213.830493][ T6263] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  214.309053][ T6407] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.326913][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.347953][ T6407] device bridge_slave_0 entered promiscuous mode
[  214.626522][ T6407] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.653286][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.780827][ T6407] device bridge_slave_1 entered promiscuous mode
[  214.888965][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.472'.
[  214.898175][ T6431] device bridge_slave_1 left promiscuous mode
[  214.905070][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.925708][ T6431] device bridge_slave_0 left promiscuous mode
[  214.933499][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.965495][ T4291] Bluetooth: hci4: command 0x0409 tx timeout
[  215.592610][ T6421] loop2: detected capacity change from 0 to 32768
[  215.648434][ T6407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.671786][ T6407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.700697][   T26] audit: type=1800 audit(1785522779.824:80): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.470" name="bus" dev="loop2" ino=7 res=0 errno=0
[  215.712000][ T6435] loop5: detected capacity change from 0 to 1024
[  215.874695][ T6435] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  215.908729][ T6435] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.098942][ T6407] team0: Port device team_slave_0 added
[  216.119949][ T6407] team0: Port device team_slave_1 added
[  216.139766][ T4514] EXT4-fs (loop5): unmounting filesystem.
[  216.362569][ T6444] loop5: detected capacity change from 0 to 512
[  216.429185][ T6407] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.436189][ T6407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.450684][ T6444] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  216.507504][ T6444] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.546761][ T6407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.559506][ T6407] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.566488][ T6407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.592827][ T6407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.663917][ T6450] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #12: comm syz.5.477: corrupted xattr block 6
[  216.705876][ T6450] EXT4-fs (loop5): Remounting filesystem read-only
[  216.720825][ T6450] overlayfs: failed to get origin (-117)
[  216.746400][ T6450] EXT4-fs error (device loop5): ext4_xattr_block_find:1828: inode #12: comm syz.5.477: corrupted xattr block 6
[  216.792539][ T6263] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.822825][ T6450] EXT4-fs (loop5): Remounting filesystem read-only
[  216.834607][ T6450] overlayfs: failed to verify origin (/, ino=2, err=-117)
[  216.853432][ T6450] overlayfs: failed to verify upper root origin
[  216.924740][ T6456] sctp: [Deprecated]: syz.2.479 (pid 6456) Use of int in maxseg socket option.
[  216.924740][ T6456] Use struct sctp_assoc_value instead
[  216.996206][ T4514] EXT4-fs (loop5): unmounting filesystem.
[  217.004748][ T6263] 8021q: adding VLAN 0 to HW filter on device team0
[  217.047407][ T4291] Bluetooth: hci4: command 0x041b tx timeout
[  217.064605][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  217.074231][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  217.082653][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  217.091749][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  217.101047][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.108223][ T4307] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.132130][ T6407] device hsr_slave_0 entered promiscuous mode
[  217.144118][ T6407] device hsr_slave_1 entered promiscuous mode
[  217.153049][ T6407] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  217.161982][ T6407] Cannot create hsr debugfs directory
[  217.242100][ T1105] IPVS: stopping master sync thread 5622 ...
[  217.271647][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  217.282799][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  217.302573][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  217.321321][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.328530][ T4307] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.343654][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  217.353263][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  217.363261][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  217.381418][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  217.418393][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  217.616709][ T6263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  217.664166][ T6263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  217.687194][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  217.704200][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  217.713905][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  217.729569][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  217.744974][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  217.762623][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  217.773268][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  218.116254][ T1105] device hsr_slave_0 left promiscuous mode
[  218.124153][ T1105] device hsr_slave_1 left promiscuous mode
[  218.152891][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.173312][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0
[  218.212366][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.231875][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1
[  218.308084][ T1105] device veth1_macvtap left promiscuous mode
[  218.314195][ T1105] device veth0_macvtap left promiscuous mode
[  218.322678][ T1105] device veth1_vlan left promiscuous mode
[  218.329216][ T1105] device veth0_vlan left promiscuous mode
[  218.900110][ T1105] bond1 (unregistering): Released all slaves
[  219.132246][ T4291] Bluetooth: hci4: command 0x040f tx timeout
[  219.735775][ T1105] team0 (unregistering): Port device team_slave_1 removed
[  219.826588][ T1105] team0 (unregistering): Port device team_slave_0 removed
[  219.907850][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  219.983973][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  220.574889][ T1105] bond0 (unregistering): Released all slaves
[  220.952603][ T6407] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  220.992077][ T6407] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  221.011300][ T6407] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  221.042933][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  221.054055][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  221.081201][ T6407] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  221.142516][ T6263] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.208291][ T4291] Bluetooth: hci4: command 0x0419 tx timeout
[  221.409678][ T6407] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.440554][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  221.458895][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  221.485120][ T6407] 8021q: adding VLAN 0 to HW filter on device team0
[  221.527977][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  221.536878][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  221.558439][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.565605][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.588136][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  221.612951][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  221.639686][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  221.661702][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.668933][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.722210][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  221.745593][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  221.781075][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  221.803066][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  221.821479][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  221.856801][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  221.881325][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  221.915692][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  221.940601][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  221.966302][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  221.988738][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  222.000743][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  222.212985][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  222.234379][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  222.292328][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  222.311058][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  222.343613][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  222.369092][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  222.382096][ T6263] device veth0_vlan entered promiscuous mode
[  222.412641][ T6263] device veth1_vlan entered promiscuous mode
[  222.461817][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  222.478168][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  222.515741][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  222.554574][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  222.575097][ T6263] device veth0_macvtap entered promiscuous mode
[  222.595293][ T6263] device veth1_macvtap entered promiscuous mode
[  222.634847][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.671112][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.698313][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.728492][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.747303][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.767365][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.789197][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.821756][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  222.848492][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  222.856765][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  222.878981][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  222.901120][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.927312][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.937188][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.967363][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.987611][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.007291][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.037695][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.063803][ T6263] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.088634][ T6263] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.098393][ T6263] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.107132][ T6263] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.122877][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  223.136339][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  223.194126][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  223.202779][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  223.215513][ T6407] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.335619][ T4633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.361905][ T4633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.389858][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  223.453478][ T4633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.481215][ T4633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.508749][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  225.407474][ T5928] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  225.534769][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  225.552050][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  225.597423][ T5928] usb 6-1: Using ep0 maxpacket: 8
[  225.604224][ T5928] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[  225.624394][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  225.644524][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  225.657407][ T5928] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  225.685499][ T6407] device veth0_vlan entered promiscuous mode
[  225.701857][ T5928] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  225.712389][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  225.733088][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  225.752649][ T5928] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  225.785691][ T6407] device veth1_vlan entered promiscuous mode
[  225.787718][ T5928] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  225.824263][ T5928] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  225.844072][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.942480][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  225.958075][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  225.966681][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  226.003177][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  226.031031][ T6407] device veth0_macvtap entered promiscuous mode
[  226.066334][ T6407] device veth1_macvtap entered promiscuous mode
[  226.079906][ T5928] usb 6-1: GET_CAPABILITIES returned 0
[  226.090053][ T5928] usbtmc 6-1:16.0: can't read capabilities
[  226.153842][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.215136][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.237676][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.296734][ T6553] usbtmc 6-1:16.0: usbtmc488_ioctl_trigger returned -71
[  226.302143][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.317662][ T6179] usb 6-1: USB disconnect, device number 6
[  226.332182][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.373249][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.388449][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.402603][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.435405][ T6407] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.777847][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  226.787738][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  226.819159][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  226.997910][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  227.089618][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.099090][ T6578] netlink: 56 bytes leftover after parsing attributes in process `syz.2.487'.
[  227.135700][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.160395][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.187460][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.217516][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.240364][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.256349][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.272795][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.299826][ T6407] batman_adv: batadv0: Interface activated: batadv_slave_1
[  227.344577][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  227.370079][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  227.389930][ T6407] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.434576][ T6407] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.466018][ T6407] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.496501][ T6407] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.516912][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.7.492'.
[  227.742002][   T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.773955][   T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.797850][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  227.827398][  T127] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  227.856978][ T4627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.868663][ T4627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.895365][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  227.904749][ T6594] loop7: detected capacity change from 0 to 8
[  227.904773][ T6595] 
[  227.913194][ T6595] ======================================================
[  227.920238][ T6595] WARNING: possible circular locking dependency detected
[  227.927286][ T6595] syzkaller #0 Not tainted
[  227.931721][ T6595] ------------------------------------------------------
[  227.938770][ T6595] syz.5.495/6595 is trying to acquire lock:
[  227.944676][ T6595] ffffffff8d7b2f90 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x638/0x980
[  227.953022][ T6594] SQUASHFS error: Failed to read block 0x4de: -5
[  227.954454][ T6595] 
[  227.954454][ T6595] but task is already holding lock:
[  227.954461][ T6595] ffff888071e82ee0 (&sb->s_type->i_mutex_key#27){++++}-{3:3}, at: vfs_rmdir+0xea/0x4a0
[  227.977843][ T6595] 
[  227.977843][ T6595] which lock already depends on the new lock.
[  227.977843][ T6595] 
[  227.981298][ T6594] SQUASHFS error: Failed to read block 0x4de: -5
[  227.988239][ T6595] 
[  227.988239][ T6595] the existing dependency chain (in reverse order) is:
[  227.988249][ T6595] 
[  227.988249][ T6595] -> #2 (&sb->s_type->i_mutex_key#27){++++}-{3:3}:
[  227.988281][ T6595]        down_write+0x36/0x60
[  227.988298][ T6595]        configfs_depend_item_unlocked+0x14f/0x430
[  227.988318][ T6595]        usbg_make_tpg+0x1f3/0x580
[  227.988335][ T6595]        target_fabric_make_tpg+0xa0/0x6d0
[  228.009723][ T6594] SQUASHFS error: Failed to read block 0x4de: -5
[  228.012323][ T6595]        configfs_mkdir+0x511/0x9e0
[  228.012353][ T6595]        vfs_mkdir+0x386/0x570
[  228.012366][ T6595]        do_mkdirat+0x1d8/0x440
[  228.012380][ T6595]        __x64_sys_mkdir+0x6a/0x80
[  228.012394][ T6595]        do_syscall_64+0x4c/0xa0
[  228.012413][ T6595]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  228.012432][ T6595] 
[  228.012432][ T6595] -> #1 (&opts->dep_lock){+.+.}-{3:3}:
[  228.012458][ T6595]        __mutex_lock+0x12d/0xae0
[  228.012479][ T6595]        tcm_set_name+0x26/0x90
[  228.012498][ T6595]        function_make+0x195/0x350
[  228.012515][ T6595]        configfs_mkdir+0x511/0x9e0
[  228.012535][ T6595]        vfs_mkdir+0x386/0x570
[  228.012550][ T6595]        do_mkdirat+0x1d8/0x440
[  228.012564][ T6595]        __x64_sys_mkdir+0x6a/0x80
[  228.012580][ T6595]        do_syscall_64+0x4c/0xa0
[  228.012598][ T6595]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  228.012617][ T6595] 
[  228.012617][ T6595] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}:
[  228.012639][ T6595]        __lock_acquire+0x2d18/0x7c40
[  228.017843][ T6594] SQUASHFS error: Failed to read block 0x4de: -5
[  228.023786][ T6595]        lock_acquire+0x1bb/0x4a0
[  228.023814][ T6595]        __mutex_lock+0x12d/0xae0
[  228.029156][ T6594] SQUASHFS error: Failed to read block 0x4de: -5
[  228.034701][ T6595]        configfs_rmdir+0x638/0x980
[  228.034725][ T6595]        vfs_rmdir+0x34e/0x4a0
[  228.067664][   T26] audit: type=1800 audit(1785522792.164:81): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.496" name="file1" dev="loop7" ino=5 res=0 errno=0
[  228.072251][ T6595]        do_rmdir+0x29a/0x5c0
[  228.072274][ T6595]        __x64_sys_rmdir+0x45/0x50
[  228.201071][ T6595]        do_syscall_64+0x4c/0xa0
[  228.206014][ T6595]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  228.212438][ T6595] 
[  228.212438][ T6595] other info that might help us debug this:
[  228.212438][ T6595] 
[  228.222680][ T6595] Chain exists of:
[  228.222680][ T6595]   gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#27
[  228.222680][ T6595] 
[  228.237363][ T6595]  Possible unsafe locking scenario:
[  228.237363][ T6595] 
[  228.244802][ T6595]        CPU0                    CPU1
[  228.250153][ T6595]        ----                    ----
[  228.255508][ T6595]   lock(&sb->s_type->i_mutex_key#27);
[  228.260967][ T6595]                                lock(&opts->dep_lock);
[  228.267896][ T6595]                                lock(&sb->s_type->i_mutex_key#27);
[  228.275890][ T6595]   lock(gadget_subsys.su_mutex);
[  228.280914][ T6595] 
[  228.280914][ T6595]  *** DEADLOCK ***
[  228.280914][ T6595] 
[  228.289056][ T6595] 3 locks held by syz.5.495/6595:
[  228.294243][ T6595]  #0: ffff88801ab76460 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  228.303525][ T6595]  #1: ffff8880747bf3f0 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1b7/0x5c0
[  228.314346][ T6595]  #2: ffff888071e82ee0 (&sb->s_type->i_mutex_key#27){++++}-{3:3}, at: vfs_rmdir+0xea/0x4a0
[  228.324448][ T6595] 
[  228.324448][ T6595] stack backtrace:
[  228.330687][ T6595] CPU: 1 PID: 6595 Comm: syz.5.495 Not tainted syzkaller #0
[  228.337964][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  228.348046][ T6595] Call Trace:
[  228.351332][ T6595]  <TASK>
[  228.354253][ T6595]  dump_stack_lvl+0x188/0x24e
[  228.358933][ T6595]  ? load_image+0x410/0x410
[  228.363434][ T6595]  ? show_regs_print_info+0x12/0x12
[  228.368628][ T6595]  ? print_circular_bug+0x12b/0x1a0
[  228.373832][ T6595]  check_noncircular+0x296/0x330
[  228.378797][ T6595]  ? add_chain_block+0x9b0/0x9b0
[  228.383765][ T6595]  ? lockdep_lock+0xf1/0x1f0
[  228.388372][ T6595]  ? _find_first_zero_bit+0xd2/0x100
[  228.393662][ T6595]  __lock_acquire+0x2d18/0x7c40
[  228.398530][ T6595]  ? mark_lock+0x94/0x320
[  228.402854][ T6595]  ? verify_lock_unused+0x140/0x140
[  228.408052][ T6595]  ? __lock_acquire+0x138a/0x7c40
[  228.413077][ T6595]  ? verify_lock_unused+0x140/0x140
[  228.418290][ T6595]  lock_acquire+0x1bb/0x4a0
[  228.422800][ T6595]  ? configfs_rmdir+0x638/0x980
[  228.427657][ T6595]  ? __might_sleep+0xd0/0xd0
[  228.432246][ T6595]  ? read_lock_is_recursive+0x10/0x10
[  228.437641][ T6595]  __mutex_lock+0x12d/0xae0
[  228.442145][ T6595]  ? configfs_rmdir+0x638/0x980
[  228.447001][ T6595]  ? configfs_rmdir+0x638/0x980
[  228.451848][ T6595]  ? dput+0x37/0x1d0
[  228.455744][ T6595]  ? mutex_lock_nested+0x10/0x10
[  228.460684][ T6595]  ? __lock_acquire+0x7c40/0x7c40
[  228.465715][ T6595]  ? lockref_put_or_lock+0x6e/0xb0
[  228.470821][ T6595]  ? dput+0x37/0x1d0
[  228.474716][ T6595]  ? dput+0x37/0x1d0
[  228.478658][ T6595]  configfs_rmdir+0x638/0x980
[  228.483359][ T6595]  vfs_rmdir+0x34e/0x4a0
[  228.487606][ T6595]  do_rmdir+0x29a/0x5c0
[  228.491760][ T6595]  ? d_delete_notify+0x150/0x150
[  228.496701][ T6595]  ? getname_flags+0x206/0x500
[  228.501457][ T6595]  __x64_sys_rmdir+0x45/0x50
[  228.506041][ T6595]  do_syscall_64+0x4c/0xa0
[  228.510459][ T6595]  ? clear_bhb_loop+0x60/0xb0
[  228.515131][ T6595]  ? clear_bhb_loop+0x60/0xb0
[  228.519807][ T6595]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  228.525716][ T6595] RIP: 0033:0x7f6e7739e019
[  228.530135][ T6595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  228.549740][ T6595] RSP: 002b:00007f6e7831c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  228.558163][ T6595] RAX: ffffffffffffffda RBX: 00007f6e77625fa0 RCX: 00007f6e7739e019
[  228.566136][ T6595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0
[  228.574107][ T6595] RBP: 00007f6e7743500c R08: 0000000000000000 R09: 0000000000000000
[  228.582069][ T6595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.590051][ T6595] R13: 00007f6e77626038 R14: 00007f6e77625fa0 R15: 00007fff3dd3b838
[  228.598022][ T6595]  </TASK>
[  228.726267][  T127] usb 3-1: Using ep0 maxpacket: 8
[  228.768355][  T127] usb 3-1: unable to get BOS descriptor or descriptor too short
[  228.829072][  T127] usb 3-1: unable to read config index 0 descriptor/start: -71
[  228.867692][  T127] usb 3-1: can't read configurations, error -71
[  229.494200][   T30] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.562054][   T30] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.621409][   T30] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.701282][   T30] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.834861][   T30] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.871260][   T30] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.932752][   T30] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.992094][   T30] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.835411][   T30] device hsr_slave_0 left promiscuous mode
[  230.841875][   T30] device hsr_slave_1 left promiscuous mode
[  230.848629][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.856075][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.864966][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.872707][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.881617][   T30] device bridge_slave_1 left promiscuous mode
[  230.888075][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.896326][   T30] device bridge_slave_0 left promiscuous mode
[  230.902975][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.913847][   T30] device hsr_slave_0 left promiscuous mode
[  230.920268][   T30] device hsr_slave_1 left promiscuous mode
[  230.926644][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.934661][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.942672][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.950317][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.958229][   T30] device bridge_slave_1 left promiscuous mode
[  230.964432][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.972580][   T30] device bridge_slave_0 left promiscuous mode
[  230.980872][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.991258][   T30] device veth1_macvtap left promiscuous mode
[  230.997322][   T30] device veth0_macvtap left promiscuous mode
[  231.003392][   T30] device veth1_vlan left promiscuous mode
[  231.009224][   T30] device veth0_vlan left promiscuous mode
[  231.015530][   T30] device veth1_macvtap left promiscuous mode
[  231.021661][   T30] device veth0_macvtap left promiscuous mode
[  231.027887][   T30] device veth1_vlan left promiscuous mode
[  231.033636][   T30] device veth0_vlan left promiscuous mode
[  231.214325][   T30] team0 (unregistering): Port device team_slave_1 removed
[  231.242705][   T30] team0 (unregistering): Port device team_slave_0 removed
[  231.270119][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.299563][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.348793][   T30] bond0 (unregistering): Released all slaves
[  231.497661][   T30] team0 (unregistering): Port device team_slave_1 removed
[  231.529581][   T30] team0 (unregistering): Port device team_slave_0 removed
[  231.560786][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.589475][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.633764][   T30] bond0 (unregistering): Released all slaves
[  232.435079][   T30] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.514460][   T30] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.571469][   T30] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.641674][   T30] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.724184][   T30] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.782029][   T30] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.821996][   T30] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.861952][   T30] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.942696][   T30] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.983325][   T30] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.032300][   T30] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.101438][   T30] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.205777][   T30] tipc: Left network mode
[  233.211672][   T30] tipc: Left network mode
[  234.294600][   T30] device hsr_slave_0 left promiscuous mode
[  234.302194][   T30] device hsr_slave_1 left promiscuous mode
[  234.308561][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  234.315949][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[  234.324210][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.331785][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[  234.339891][   T30] device bridge_slave_1 left promiscuous mode
[  234.346079][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.354146][   T30] device bridge_slave_0 left promiscuous mode
[  234.360583][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.370496][   T30] device hsr_slave_0 left promiscuous mode
[  234.376650][   T30] device hsr_slave_1 left promiscuous mode
[  234.384132][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  234.391697][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[  234.399244][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.406658][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[  234.415644][   T30] device hsr_slave_0 left promiscuous mode
[  234.421884][   T30] device hsr_slave_1 left promiscuous mode
[  234.428376][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  234.435808][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[  234.443514][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.451012][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[  234.460890][   T30] device veth1_macvtap left promiscuous mode
[  234.466916][   T30] device veth0_macvtap left promiscuous mode
[  234.473074][   T30] device veth1_vlan left promiscuous mode
[  234.478895][   T30] device veth0_vlan left promiscuous mode
[  234.485273][   T30] device veth1_macvtap left promiscuous mode
[  234.491476][   T30] device veth0_macvtap left promiscuous mode
[  234.497668][   T30] device veth1_vlan left promiscuous mode
[  234.503443][   T30] device veth0_vlan left promiscuous mode
[  234.509961][   T30] device veth1_macvtap left promiscuous mode
[  234.516000][   T30] device veth0_macvtap left promiscuous mode
[  234.522323][   T30] device veth1_vlan left promiscuous mode
[  234.528155][   T30] device veth0_vlan left promiscuous mode
[  234.743204][   T30] team0 (unregistering): Port device team_slave_1 removed
[  234.771834][   T30] team0 (unregistering): Port device team_slave_0 removed
[  234.799840][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  234.828949][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  234.870488][   T30] bond0 (unregistering): Released all slaves
[  235.021132][   T30] team0 (unregistering): Port device team_slave_1 removed
[  235.049912][   T30] team0 (unregistering): Port device team_slave_0 removed
[  235.060573][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.072359][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  235.113436][   T30] bond0 (unregistering): Released all slaves
[  235.214425][   T30] team0 (unregistering): Port device team_slave_1 removed
[  235.241330][   T30] team0 (unregistering): Port device team_slave_0 removed
[  235.271236][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.301180][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  235.344715][   T30] bond0 (unregistering): Released all slaves