last executing test programs:

3m51.24156497s ago: executing program 32 (id=243):
r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r2, 0xee00, 0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc408, 0x103)

3m11.73115374s ago: executing program 33 (id=476):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x7)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x182, 0x3}, 0x18, 0x0)
landlock_restrict_self(r2, 0xa)

2m55.942174723s ago: executing program 34 (id=572):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r0, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
read$FUSE(r1, &(0x7f0000003380)={0x2020}, 0x2020)

2m37.155047663s ago: executing program 7 (id=667):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0xb000000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

2m35.562689316s ago: executing program 7 (id=679):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000001380)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x10}}, 0x10)
splice(r2, 0x0, r1, 0x0, 0xffff, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)

2m35.164127329s ago: executing program 7 (id=682):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x80002, 0x0)
syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

2m34.277489553s ago: executing program 7 (id=688):
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000001100)='./file1\x00', 0x1000040, &(0x7f0000001140)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp855,errors=remount-ro,utf8,fmask=00000000000000000000004,iocharset=koi8-ru,time_offset=0x0000000000000006,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303430302c646d61736b3d30303030303030303030303034303030303030303030302c616c6c6f775f7574696d653d3030303030303030303030303030303030521e303030312c00b5efd5a5c49860e6033d86a1062aa410763a35d6358f3ec56140261c6ce5becee4b76d651a129b77d4e52b37ca8fdc9a7a3d08e55f6bfc2fdd3440ba22085c942503c30e11081ad5fa75126938c97d581a5cce2f6488388f66fa7e0e33b5b36d"], 0x1, 0x1531, &(0x7f00000014c0)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x18b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

2m33.589790232s ago: executing program 7 (id=694):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140), 0x5, 0xbc5, &(0x7f0000002380)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000010401020000000000000000010000030800034000000007050001000100"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x840)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x40)
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000900)=@v1={0x0, @aes128, 0x0, @desc4})

2m31.886574104s ago: executing program 7 (id=702):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40)
ftruncate(r3, 0x2007ffd)
sendfile(r1, r2, 0x0, 0x1000a3)

2m31.192905204s ago: executing program 35 (id=702):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40)
ftruncate(r3, 0x2007ffd)
sendfile(r1, r2, 0x0, 0x1000a3)

1m43.876907648s ago: executing program 4 (id=991):
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x42, 0x17a)
io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/40, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x10000001)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)={0x2})

1m43.181840193s ago: executing program 4 (id=995):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x800)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)
r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

1m43.006000176s ago: executing program 4 (id=996):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r3}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x3, r3}, 0x38)

1m42.765385913s ago: executing program 4 (id=998):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=','])
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

1m42.38392459s ago: executing program 4 (id=1002):
socket$inet6_icmp(0xa, 0x2, 0x3a)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x33, 0x0, 0x0)

1m41.896276537s ago: executing program 4 (id=1006):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_TABLE={0x8, 0xf, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)

1m41.082817098s ago: executing program 36 (id=1006):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_TABLE={0x8, 0xf, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)

1m24.839307517s ago: executing program 2 (id=1084):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(0x3)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

1m23.659290469s ago: executing program 2 (id=1091):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, <r1=>0x0}, 0x2082)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
statx(r2, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)
write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x9400000, 0x0, 0x0, 0x81, 0x7, 0x0, 0x0, 0x0, 0x4}}, 0x50)
read$FUSE(r0, &(0x7f0000004540)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r3}, 0x10)

1m22.565904879s ago: executing program 2 (id=1096):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)

1m21.30878389s ago: executing program 2 (id=1106):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)

1m20.715566985s ago: executing program 2 (id=1110):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0)=0x5, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x1f5, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x3, 0x2}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

1m20.164496102s ago: executing program 2 (id=1114):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file7/file0\x00', 0x80d3, 0x0, 0x1, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0)
getdents64(r0, 0x0, 0x0)

1m19.499026999s ago: executing program 37 (id=1114):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file7/file0\x00', 0x80d3, 0x0, 0x1, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0)
getdents64(r0, 0x0, 0x0)

1m9.73742326s ago: executing program 9 (id=1169):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x28000000000, 0x840)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f00000008c0)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000002c0)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)

1m6.792684888s ago: executing program 9 (id=1185):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
r3 = dup2(r1, r2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
close_range(r3, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

1m6.519128171s ago: executing program 9 (id=1187):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0)
mremap(&(0x7f0000a26000/0x5000)=nil, 0x5000, 0x1000, 0x3, &(0x7f0000067000/0x1000)=nil)
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil)
mprotect(&(0x7f00003cb000/0x2000)=nil, 0x2000, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x1)

1m5.825797292s ago: executing program 9 (id=1190):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000002c0)={[], [{@audit}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}, 0x1, 0x574, &(0x7f0000000640)="$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")
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m2.265448536s ago: executing program 9 (id=1206):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x30}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

1m1.020804678s ago: executing program 9 (id=1216):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000000)={0x40, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x96}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0xfffffffffffffd9d}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0xffffffff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000300001000000000000000000010100800c007c0004000000000000001400010001"], 0x114}], 0x1, 0x0, 0x0, 0x20000080}, 0x800)
r4 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0)
syz_usb_control_io$uac1(r4, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0)
syz_usb_control_io$uac3(r4, 0x0, &(0x7f00000018c0)={0xfffffffffffffef9, &(0x7f0000001640)={0x0, 0x9, 0x6, "aa8671eaa682"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m0.27514129s ago: executing program 38 (id=1216):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000000)={0x40, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x96}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0xfffffffffffffd9d}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0xffffffff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000300001000000000000000000010100800c007c0004000000000000001400010001"], 0x114}], 0x1, 0x0, 0x0, 0x20000080}, 0x800)
r4 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0)
syz_usb_control_io$uac1(r4, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0)
syz_usb_control_io$uac3(r4, 0x0, &(0x7f00000018c0)={0xfffffffffffffef9, &(0x7f0000001640)={0x0, 0x9, 0x6, "aa8671eaa682"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

12.819495831s ago: executing program 0 (id=1482):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000)

11.234808229s ago: executing program 0 (id=1497):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff)
r1 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000005c0), 0x12)

10.813554169s ago: executing program 0 (id=1501):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005980)=ANY=[@ANYBLOB="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"], 0x3, 0x5505, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
fdatasync(r0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100016, &(0x7f00000002c0)='^\x00')

9.542610403s ago: executing program 0 (id=1506):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r2, 0xffffffffffffffff, 0x14, 0x0, @void}, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x20004000)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000250007002cbd7000000000007e6f3d4e027c0000"], 0x14}}, 0xc000)
r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1402, 0x8, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x30}}, 0x80)

6.79221592s ago: executing program 3 (id=1517):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec772000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000005c0)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5})

6.686850505s ago: executing program 8 (id=1521):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x2049c0, 0x0)
pipe2$watch_queue(&(0x7f0000002240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r4 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, r3)
r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r1, 0x400000000000007c)
r6 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000f80)='G', 0x1, 0xfffffffffffffffb)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r2, 0x47)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r2, 0xe1)
close_range(r0, 0xffffffffffffffff, 0x0)

6.002407716s ago: executing program 0 (id=1523):
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad4301000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1, r0}}, 0x40)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)

5.764573329s ago: executing program 5 (id=1525):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x8e40, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

5.712928704s ago: executing program 8 (id=1526):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x8c, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x1, 0x6, 0xa00, 0x1, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe62077891e54f027}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x8, 0x4, 0x8, 0xe}}]}]}}}]}, 0x8c}}, 0x4000080)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

5.554016569s ago: executing program 3 (id=1528):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x1341d000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000200000faffffff0002000200000000000200001f0000000002"], 0x24, 0x3)

5.168000109s ago: executing program 8 (id=1530):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x5)
landlock_restrict_self(r0, 0xa)
landlock_restrict_self(r0, 0x6)
landlock_restrict_self(r0, 0xe)
r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00')

5.16118971s ago: executing program 0 (id=1531):
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000400)='config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='config/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)="3434313002", 0x5)
symlink(&(0x7f0000000a00)='config/usb_gadget/g1/functions/uac2.usb0\x00', &(0x7f0000000b00)='config/usb_gadget/g1/configs/c.1/uac2.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000d00)='dummy_udc.0', 0xb)

5.022682374s ago: executing program 5 (id=1533):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newtaction={0x14, 0x30, 0x0, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x44}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.696974896s ago: executing program 8 (id=1534):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x200c89f, 0xc000, 0x7, 0x20002f6})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)=0xf3b, 0x4)
io_uring_enter(r0, 0x2219, 0xb, 0x16, 0x0, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0)

3.980356904s ago: executing program 5 (id=1537):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a030000000000000000000500000009"], 0xa4}}, 0x0)
fcntl$setstatus(r1, 0x4, 0x2c00)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)

3.873184963s ago: executing program 3 (id=1538):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r1, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000)

3.716197601s ago: executing program 6 (id=1540):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0)

3.507446155s ago: executing program 5 (id=1541):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x3422a61a}], 0x1, 0x10102, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)

3.48573847s ago: executing program 8 (id=1542):
unshare(0x28000600)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
flock(r0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a)
flock(r1, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

3.312183421s ago: executing program 3 (id=1543):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]})
socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x82000, 0xa1)
getdents64(r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x143000, 0x100)
getdents64(r2, 0xfffffffffffffffe, 0x29)
close_range(r0, 0xffffffffffffffff, 0x600000000000000)

3.267593603s ago: executing program 6 (id=1544):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xfffffffffffffd8e}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)

2.700158936s ago: executing program 6 (id=1546):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="611534000000000061134c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf670000000000003506070038fc1f806706000002000000160300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000005574d074fa7e93447a88c0fbab48660aae7cdf367ef0e4538279b6113de5b94e1056f443305145c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

2.483459381s ago: executing program 1 (id=1547):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x19, &(0x7f0000000780)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000080)=""/51, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)

2.260238038s ago: executing program 3 (id=1548):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

1.477445195s ago: executing program 6 (id=1549):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000})
fcntl$lock(r0, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x20000000000001, 0x90})

1.405100606s ago: executing program 1 (id=1550):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200b, 0x200000000000000})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000380)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1100, 0x3, 0xf0}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@handle={0x73682a85, 0x100a}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

1.326867834s ago: executing program 5 (id=1551):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x4000000fffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x4}, [{0x2, 0x2}, {0x2, 0x3}, {0x2, 0x4}], {}, [], {0x10, 0x7}}, 0x3c, 0x2)

1.142571013s ago: executing program 6 (id=1552):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000600)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x9}, @flat=@handle={0x73682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x1d}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1040}], 0x0, 0x0, 0x0})

1.141262935s ago: executing program 1 (id=1553):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0xfffe, 0x0, @mcast1={0xff, 0x4}}, 0x1c)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)

926.257465ms ago: executing program 8 (id=1554):
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000002700010000000000000000000a00010000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0)

808.870543ms ago: executing program 6 (id=1555):
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa)
clock_gettime(0x8, 0x0)
shutdown(r0, 0x1)
r2 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f0000000080)=@chain)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

754.610343ms ago: executing program 1 (id=1556):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
accept$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = dup2(r0, r0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
read$FUSE(r2, &(0x7f00000016c0)={0x2020}, 0x2020)

384.537979ms ago: executing program 1 (id=1557):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000080)={0x401, {{0x2, 0x4e23, @multicast2}}, 0x1}, 0x90)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f00000012c0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x1, 0x0, 0x3, 0x8, 0x200000000000006, 0x9, 0x3, 0xf64, 0xfffffffe})
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, 0x0, 0x0, 0x4fed0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8)
fchown(r2, 0xee00, 0xee01)

162.976662ms ago: executing program 1 (id=1558):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xce}, 0x38)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1)

101.135987ms ago: executing program 3 (id=1559):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2007ff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3a3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c850}, 0x4000005)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)

0s ago: executing program 5 (id=1560):
socket$l2tp6(0xa, 0x2, 0x73)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed5}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\r'], 0x50)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0, r0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc07e, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x50)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x20)

kernel console output (not intermixed with test programs):

a R14: 0000000000038dc4 R15: 00007ffdb44c0c40
[  233.115116][ T7897]  </TASK>
[  233.547425][ T7897] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  234.254880][ T8894] loop9: detected capacity change from 0 to 32768
[  234.297229][ T8894] btrfs: Deprecated parameter 'usebackuproot'
[  234.345247][ T8894] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  234.392658][ T8894] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.703 (8894)
[  234.464420][ T8928] loop6: detected capacity change from 0 to 512
[  234.466580][ T8894] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  234.471986][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.804'.
[  234.517995][ T8894] BTRFS info (device loop9): using crc32c checksum algorithm
[  234.540068][ T8928] EXT4-fs: Ignoring removed nomblk_io_submit option
[  234.600166][ T8928] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002]
[  234.623022][ T8928] System zones: 0-2, 18-18, 34-34
[  234.634048][ T8928] EXT4-fs (loop6): orphan cleanup on readonly fs
[  234.657872][ T8928] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #4: comm syz.6.803: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  234.706049][ T8928] loop6: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117
[  234.708114][ T8928] EXT4-fs error (device loop6): ext4_quota_enable:7235: comm syz.6.803: Bad quota inode: 4, type: 1
[  234.717360][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  234.717430][    C1] EXT4-fs (loop6): last error at time 1785223575: ext4_ext_check_inode:521: inode 4
[  234.755641][ T8894] BTRFS info (device loop9): rebuilding free space tree
[  234.772644][ T8928] loop6: lost filesystem error report for type 5 error -117
[  234.776110][ T8928] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  234.816676][ T8928] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  234.849127][ T8928] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  234.934770][ T8894] BTRFS info (device loop9): setting nodatasum
[  234.977510][ T8894] BTRFS info (device loop9): allowing degraded mounts
[  235.016302][ T8894] BTRFS info (device loop9): setting nodatacow
[  235.036171][ T8894] BTRFS info (device loop9): enabling ssd optimizations
[  235.054601][ T8894] BTRFS info (device loop9): using spread ssd allocation scheme
[  235.081275][ T8894] BTRFS info (device loop9): turning on flush-on-commit
[  235.102934][ T8894] BTRFS info (device loop9): turning on async discard
[  235.129928][ T8894] BTRFS info (device loop9): enabling free space tree
[  235.159627][ T8894] BTRFS info (device loop9): force clearing of disk cache
[  235.191010][ T8894] BTRFS info (device loop9): trying to use backup root at mount time
[  235.234210][ T6666] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.319910][ T8951] syz_tun: entered allmulticast mode
[  235.344662][ T8959] netlink: 16 bytes leftover after parsing attributes in process `syz.5.810'.
[  235.370647][ T8949] syz_tun: left allmulticast mode
[  235.507122][ T8964] loop8: detected capacity change from 0 to 8
[  235.639127][ T8964] SQUASHFS error: Failed to read block 0x2d7: -5
[  235.692204][ T8964] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  236.183329][ T8986] sctp: [Deprecated]: syz.4.817 (pid 8986) Use of int in max_burst socket option deprecated.
[  236.183329][ T8986] Use struct sctp_assoc_value instead
[  236.412168][ T8990] loop4: detected capacity change from 0 to 7
[  236.430132][ T8990]  loop4:
[  236.439920][ T8461] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  236.442725][ T8990] loop4: partition table partially beyond EOD, truncated
[  237.176297][ T9004] loop6: detected capacity change from 0 to 512
[  237.195632][ T9004] EXT4-fs: Ignoring removed oldalloc option
[  237.231650][ T9004] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  237.278379][ T9004] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  237.375998][ T9004] EXT4-fs (loop6): 1 orphan inode deleted
[  237.399712][ T9004] EXT4-fs (loop6): 1 truncate cleaned up
[  237.459694][ T9004] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.542194][ T9004] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.6.825: path /95/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  237.606223][ T9004] EXT4-fs (loop6): Remounting filesystem read-only
[  237.763130][ T6666] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.889367][ T9000] loop8: detected capacity change from 0 to 32768
[  238.019635][   T30] audit: type=1800 audit(1785223578.645:49): pid=9000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.823" name="bus" dev="loop8" ino=7 res=0 errno=0
[  238.045198][ T9029] loop6: detected capacity change from 0 to 128
[  238.132100][ T9029] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  238.183246][ T9029] hpfs: filesystem error: improperly stopped
[  238.200283][ T9029] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  238.238001][ T9029] hpfs: You really don't want any checks? You are crazy...
[  238.265293][ T9029] hpfs: Code page index out of array
[  238.287134][ T9029] hpfs: code page support is disabled
[  238.307090][ T9029] hpfs: hpfs_map_4sectors(): unaligned read
[  238.331208][ T9029] hpfs: hpfs_map_4sectors(): unaligned read
[  238.356123][ T9029] hpfs: filesystem error: unable to find root dir
[  238.384844][  T185] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  238.581779][  T185] usb 3-1: Using ep0 maxpacket: 8
[  238.599496][  T185] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  238.650279][  T185] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  238.674571][  T185] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  238.726578][  T185] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  238.781089][  T185] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  238.817404][  T185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.898002][  T185] hub 3-1:1.0: bad descriptor, ignoring hub
[  238.926285][  T185] hub 3-1:1.0: probe with driver hub failed with error -5
[  238.968299][  T185] cdc_wdm 3-1:1.0: skipping garbage
[  238.994696][ T9056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.838'.
[  238.996271][  T185] cdc_wdm 3-1:1.0: skipping garbage
[  239.020408][ T9056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.838'.
[  239.100553][  T185] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  239.123367][  T185] cdc_wdm 3-1:1.0: Unknown control protocol
[  239.463926][ T9068] loop4: detected capacity change from 0 to 128
[  239.516093][ T9068] FAT-fs (loop4): bogus sectors per cluster 0
[  239.568074][ T9068] FAT-fs (loop4): Can't find a valid FAT filesystem
[  239.861490][ T7030] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  239.933695][ T7029] usb 3-1: USB disconnect, device number 9
[  240.031897][ T7030] usb 5-1: Using ep0 maxpacket: 8
[  240.044351][ T7030] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  240.061302][ T7030] usb 5-1: config 179 has no interface number 0
[  240.079127][ T7030] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  240.100537][ T7030] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  240.114496][ T7030] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  240.126669][ T7030] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  240.139815][ T7030] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  240.156692][ T7030] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  240.167103][ T7030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.208068][ T9068] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  240.644799][ T7030] usb 5-1: USB disconnect, device number 9
[  240.644882][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  240.644934][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  241.099067][ T5640] Bluetooth: hci1: Malformed MSFT vendor event: 0x02
[  241.971817][ T9134] loop8: detected capacity change from 0 to 4096
[  242.150828][ T9134] ntfs3(loop8): Failed to load $Extend (-22).
[  242.189788][ T9134] ntfs3(loop8): Failed to initialize $Extend.
[  242.443401][ T9148] fuse: fd is not a fuse device
[  242.844927][ T9162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.873'.
[  243.176569][ T9177] netlink: 'syz.5.879': attribute type 1 has an invalid length.
[  243.214409][ T9178] orangefs_devreq_open: device cannot be opened in blocking mode
[  243.565377][ T9177] 8021q: adding VLAN 0 to HW filter on device bond3
[  243.669596][ T9181] bond3: (slave gretap2): making interface the new active one
[  243.692085][ T9181] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  244.061045][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.5.884'.
[  244.222837][ T5634] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  244.528680][ T5634] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  244.601737][ T5634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.615920][ T5634] usb 5-1: Product: syz
[  244.620549][ T5634] usb 5-1: Manufacturer: syz
[  244.625739][ T5634] usb 5-1: SerialNumber: syz
[  244.693670][ T5634] usb 5-1: config 0 descriptor??
[  244.921700][ T5634] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  245.022645][ T7038] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  245.211332][ T7038] usb 9-1: Using ep0 maxpacket: 8
[  245.227815][ T7038] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  245.255743][ T7038] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  245.270313][ T7038] usb 9-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  245.293614][ T7038] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.311310][ T7038] usb 9-1: Product: syz
[  245.321594][ T7038] usb 9-1: Manufacturer: syz
[  245.332582][ T7038] usb 9-1: SerialNumber: syz
[  245.346409][ T7038] usb 9-1: config 0 descriptor??
[  245.425002][ T9234] netlink: 'syz.5.894': attribute type 7 has an invalid length.
[  245.434334][ T9234] netlink: 'syz.5.894': attribute type 8 has an invalid length.
[  245.646330][  T803] usb 9-1: USB disconnect, device number 2
[  245.681567][ T5640] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  245.688242][ T5639] Bluetooth: hci6: command 0x1003 tx timeout
[  246.351271][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  246.371268][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  246.601871][ T5634] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  246.771813][ T5634] usb 5-1: USB disconnect, device number 10
[  247.202619][ T7038] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  247.265044][ T9302] loop6: detected capacity change from 0 to 256
[  247.414239][ T7038] usb 3-1: Using ep0 maxpacket: 8
[  247.454677][ T7038] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  247.508891][ T7038] usb 3-1: config 0 has no interface number 0
[  247.556230][ T7038] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  247.625147][ T7038] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  247.690694][ T7038] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  247.733752][ T7038] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  247.779598][ T7038] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  247.823754][ T7038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.898854][ T7038] usb 3-1: config 0 descriptor??
[  247.967626][ T7038] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  248.335520][ T5634] usb 3-1: USB disconnect, device number 10
[  248.427009][ T5634] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  249.846352][ T9334] loop9: detected capacity change from 0 to 32768
[  249.886299][ T9334] ocfs2: Slot 0 on device (7,9) was already allocated to this node!
[  249.910232][ T9334] JBD2: Ignoring recovery information on journal
[  250.090007][ T9334] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  250.731218][ T8461] ocfs2: Unmounting device (7,9) on (node local)
[  250.888529][ T9369] netlink: 36 bytes leftover after parsing attributes in process `syz.8.918'.
[  251.444551][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.924'.
[  251.946146][ T9401] loop4: detected capacity change from 0 to 64
[  252.135221][ T9406] syz.4.927: attempt to access beyond end of device
[  252.135221][ T9406] loop4: rw=8388608, sector=91, nr_sectors = 1 limit=64
[  252.208071][ T9406] Buffer I/O error on dev loop4, logical block 91, async page read
[  252.227353][ T9406] syz.4.927: attempt to access beyond end of device
[  252.227353][ T9406] loop4: rw=8388608, sector=92, nr_sectors = 1 limit=64
[  252.285890][ T9406] Buffer I/O error on dev loop4, logical block 92, async page read
[  252.341599][ T9406] syz.4.927: attempt to access beyond end of device
[  252.341599][ T9406] loop4: rw=8388608, sector=93, nr_sectors = 1 limit=64
[  252.438991][ T9401] syz.4.927: attempt to access beyond end of device
[  252.438991][ T9401] loop4: rw=2049, sector=408, nr_sectors = 3 limit=64
[  252.491372][ T9406] Buffer I/O error on dev loop4, logical block 93, async page read
[  252.569382][ T9406] syz.4.927: attempt to access beyond end of device
[  252.569382][ T9406] loop4: rw=8388608, sector=94, nr_sectors = 1 limit=64
[  252.616437][ T9406] Buffer I/O error on dev loop4, logical block 94, async page read
[  252.684011][ T9406] syz.4.927: attempt to access beyond end of device
[  252.684011][ T9406] loop4: rw=8388608, sector=95, nr_sectors = 1 limit=64
[  252.793992][ T9406] Buffer I/O error on dev loop4, logical block 95, async page read
[  252.803341][ T9406] syz.4.927: attempt to access beyond end of device
[  252.803341][ T9406] loop4: rw=8388608, sector=96, nr_sectors = 1 limit=64
[  252.868765][ T9406] Buffer I/O error on dev loop4, logical block 96, async page read
[  252.897586][ T9406] syz.4.927: attempt to access beyond end of device
[  252.897586][ T9406] loop4: rw=8388608, sector=97, nr_sectors = 1 limit=64
[  252.943963][ T9406] Buffer I/O error on dev loop4, logical block 97, async page read
[  253.067903][ T9401] syz.4.927: attempt to access beyond end of device
[  253.067903][ T9401] loop4: rw=8388608, sector=91, nr_sectors = 1 limit=64
[  253.139704][ T9401] Buffer I/O error on dev loop4, logical block 91, async page read
[  253.172902][ T9401] syz.4.927: attempt to access beyond end of device
[  253.172902][ T9401] loop4: rw=8388608, sector=92, nr_sectors = 1 limit=64
[  253.205637][ T9401] Buffer I/O error on dev loop4, logical block 92, async page read
[  253.226301][ T9401] Buffer I/O error on dev loop4, logical block 93, async page read
[  253.704953][ T9448] syz_tun: entered allmulticast mode
[  253.782713][ T9444] loop6: detected capacity change from 0 to 4096
[  253.892630][ T9444] ntfs3(loop6): Failed to load $Extend (-22).
[  253.922780][ T9444] ntfs3(loop6): Failed to initialize $Extend.
[  254.212049][ T9465] loop8: detected capacity change from 0 to 1024
[  254.955251][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  254.962029][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  255.331906][ T9498] overlayfs: failed to clone upperpath
[  256.312833][ T9546] overlayfs: failed to clone upperpath
[  257.031724][ T5639] Bluetooth: hci2: command 0x0406 tx timeout
[  257.056407][ T5634] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  257.252838][ T5634] usb 3-1: Using ep0 maxpacket: 8
[  257.300666][ T5634] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  257.357527][ T5634] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  257.406441][ T5634] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  257.429641][ T5634] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  257.456127][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz.5.976'.
[  257.464566][ T5634] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  257.489717][ T5634] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.572353][ T9578] loop9: detected capacity change from 0 to 4096
[  257.690165][ T9578] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  257.770701][ T5634] usb 3-1: GET_CAPABILITIES returned 0
[  257.784647][ T9578] ntfs3(loop9): Failed to load $Extend (-22).
[  257.798607][ T5634] usbtmc 3-1:16.0: can't read capabilities
[  257.809289][ T9578] ntfs3(loop9): Failed to initialize $Extend.
[  258.100819][ T9568] loop6: detected capacity change from 0 to 32768
[  258.189350][ T7038] usb 3-1: USB disconnect, device number 11
[  258.272310][ T9586] netlink: 'syz.9.979': attribute type 2 has an invalid length.
[  258.303750][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.9.979'.
[  258.519062][ T9586] ¿: entered promiscuous mode
[  258.889253][ T9604] loop2: detected capacity change from 0 to 128
[  258.959099][ T9604] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  258.991821][ T9604] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  259.002867][ T7038] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  259.322152][ T7038] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  259.706727][ T7038] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.861561][ T7038] usb 7-1: Product: syz
[  259.873214][ T7038] usb 7-1: Manufacturer: syz
[  259.891863][ T7038] usb 7-1: SerialNumber: syz
[  259.903406][ T9611] loop8: detected capacity change from 0 to 2048
[  259.917981][ T7038] usb 7-1: config 0 descriptor??
[  259.937338][ T9611] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  259.977036][ T5624] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  260.020119][ T9611] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  260.066096][ T9611] UDF-fs: Scanning with blocksize 512 failed
[  260.135946][ T9611] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  260.529802][ T9617] loop9: detected capacity change from 0 to 40427
[  260.553080][ T9617] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  260.560845][ T9617] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  260.621212][ T9617] F2FS-fs (loop9): invalid crc value
[  260.737695][ T9617] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  260.755333][ T9617] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  260.762400][ T9617] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  260.983695][ T7038] usb 7-1: f81604_read: reg: 100f failed: -EPIPE
[  261.270739][ T9617] bio_check_eod: 22 callbacks suppressed
[  261.270760][ T9617] syz.9.989: attempt to access beyond end of device
[  261.270760][ T9617] loop9: rw=8423425, sector=77824, nr_sectors = 32 limit=40427
[  261.400786][ T7038] usb 7-1: f81604_read: reg: 200e failed: -EPROTO
[  261.428885][ T7038] usb 7-1: USB disconnect, device number 6
[  261.578324][ T7038] usb 7-1: f81604_read: reg: 100f failed: -ENODEV
[  261.644198][ T5281] usb 7-1: f81604_read: reg: 200f failed: -ENODEV
[  261.684162][ T5281] usb 7-1: f81604_read: reg: 200f failed: -ENODEV
[  261.740315][ T7038] usb 7-1: f81604_read: reg: 200f failed: -ENODEV
[  262.020920][ T8461] syz-executor: attempt to access beyond end of device
[  262.020920][ T8461] loop9: rw=8390659, sector=77824, nr_sectors = 32 limit=40427
[  262.097040][ T8461] F2FS-fs (loop9): Issue discard(9728, 9728, 4) failed, ret: -5
[  262.822138][ T9509] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  263.167774][ T9509] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  263.394758][ T9509] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  263.848852][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  263.863799][ T5639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  263.874644][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  263.923637][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  263.964890][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  264.804126][ T9509] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  265.563441][ T9732] loop8: detected capacity change from 0 to 64
[  266.111411][ T5639] Bluetooth: hci4: command tx timeout
[  266.567668][ T9742] loop9: detected capacity change from 0 to 131072
[  266.590184][ T9742] F2FS-fs (loop9): Invalid log sectorsize (67108873)
[  266.597884][ T9742] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  266.607583][ T9742] F2FS-fs (loop9): invalid crc value
[  266.737176][ T9742] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  266.763034][ T9742] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  266.770122][ T9742] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  266.812362][   T30] audit: type=1800 audit(1785223607.445:50): pid=9742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1021" name="file1" dev="loop9" ino=7 res=0 errno=0
[  266.897089][ T9748] openvswitch: netlink: Duplicate or invalid key (type 0).
[  266.982495][ T9748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.814477][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1027'.
[  267.941032][ T9509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  267.961640][ T7029] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  267.980725][ T9509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  268.043077][ T9509] bond0 (unregistering): Released all slaves
[  268.110149][ T9509] bond1 (unregistering): Released all slaves
[  268.128964][ T7029] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  268.151695][ T5639] Bluetooth: hci4: command tx timeout
[  268.174865][ T7029] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  268.195601][ T9763] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.203133][ T7029] usb 7-1: Product: syz
[  268.230426][ T7029] usb 7-1: SerialNumber: syz
[  268.273122][ T9763] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.287614][ T7029] usb 7-1: config 0 descriptor??
[  268.525115][ T7029] hso 7-1:0.0: Failed to find BULK eps
[  268.732451][ T5634] usb 7-1: USB disconnect, device number 7
[  269.984243][ T9509] hsr_slave_0: left promiscuous mode
[  270.005472][ T9509] hsr_slave_1: left promiscuous mode
[  270.013155][ T9509] batman_adv: batadv0: Removing interface: batadv_slave_0
[  270.042629][ T9509] batman_adv: batadv0: Removing interface: batadv_slave_1
[  270.087972][ T9509] batman_adv: batadv0: Removing interface: dummy0
[  270.231464][ T5639] Bluetooth: hci4: command tx timeout
[  270.716326][ T9806] input: syz1 as /devices/virtual/input/input9
[  270.914152][ T9776] loop8: detected capacity change from 0 to 32768
[  270.942489][ T9776] xfs: Unknown parameter 'smackfstransmute'
[  271.059569][ T9811] overlayfs: failed to clone upperpath
[  271.227322][ T9509] team0 (unregistering): Port device team_slave_1 removed
[  271.336108][ T9509] team0 (unregistering): Port device team_slave_0 removed
[  272.213817][ T5281] 8021q: adding VLAN 0 to HW filter on device eth13
[  272.275905][ T9830] sctp: [Deprecated]: syz.5.1042 (pid 9830) Use of struct sctp_assoc_value in delayed_ack socket option.
[  272.275905][ T9830] Use struct sctp_sack_info instead
[  272.311386][ T5639] Bluetooth: hci4: command tx timeout
[  273.410087][ T9705] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.417406][ T9705] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.425081][ T9705] bridge_slave_0: entered allmulticast mode
[  273.433322][ T9705] bridge_slave_0: entered promiscuous mode
[  273.443687][ T9705] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.451078][ T9705] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.458829][ T9705] bridge_slave_1: entered allmulticast mode
[  273.467324][ T9705] bridge_slave_1: entered promiscuous mode
[  273.525284][ T9705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.539356][ T9705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.684666][ T9705] team0: Port device team_slave_0 added
[  273.715901][ T9705] team0: Port device team_slave_1 added
[  273.837795][ T9705] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.858166][ T9705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.933967][ T9705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.979215][ T9705] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.018582][ T9705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  274.125909][ T9705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.287107][ T9848] loop6: detected capacity change from 0 to 32768
[  274.438565][ T9879] overlayfs: failed to clone upperpath
[  274.492445][ T9705] hsr_slave_0: entered promiscuous mode
[  274.526318][ T9705] hsr_slave_1: entered promiscuous mode
[  275.290052][ T5281] 8021q: adding VLAN 0 to HW filter on device eth14
[  275.564777][ T9897] loop9: detected capacity change from 0 to 16
[  275.630503][ T9897] erofs (device loop9): mounted with root inode @ nid 36.
[  276.412616][ T9920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1063'.
[  277.310375][ T9909] loop6: detected capacity change from 0 to 32768
[  277.551345][ T7036] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  277.742726][ T7036] usb 9-1: Using ep0 maxpacket: 16
[  277.771668][ T7036] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  277.811944][ T7036] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  277.843828][ T7036] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.871537][ T7036] usb 9-1: Product: syz
[  277.878695][ T5281] 8021q: adding VLAN 0 to HW filter on device eth15
[  277.904738][ T7036] usb 9-1: Manufacturer: syz
[  277.928511][ T7036] usb 9-1: SerialNumber: syz
[  277.955322][ T7036] usb 9-1: config 0 descriptor??
[  278.050029][ T7036] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  278.085808][ T9951] macvtap1: entered promiscuous mode
[  278.111024][ T9951] vlan0: entered promiscuous mode
[  278.123617][ T9951] macvtap1: entered allmulticast mode
[  278.134508][ T9951] vlan0: entered allmulticast mode
[  278.139661][ T9951] veth0_vlan: entered allmulticast mode
[  278.202730][ T9509] usb 9-1: Failed to submit usb control message: -71
[  278.203168][ T7029] usb 9-1: USB disconnect, device number 3
[  278.220756][ T9958] sd 0:0:1:0: PR command failed: 1026
[  278.247842][ T9958] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  278.261628][ T9509] usb 9-1: unable to send the bmi data to the device: -71
[  278.284888][ T9958] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  278.295959][ T9509] usb 9-1: unable to get target info from device
[  278.313783][ T9956] macvtap2: entered promiscuous mode
[  278.319293][ T9956] macvtap2: entered allmulticast mode
[  278.321010][ T9509] usb 9-1: could not get target info (-71)
[  278.341066][ T9509] usb 9-1: could not probe fw (-71)
[  278.354042][ T9935] loop2: detected capacity change from 0 to 32768
[  278.498715][ T9705] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  278.556217][ T9705] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  278.600667][ T9705] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  278.673370][ T9705] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  278.715984][ T9705] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  278.755345][ T9705] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  278.787670][ T9705] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  278.824877][ T9705] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  279.040921][ T9982] bridge0: entered promiscuous mode
[  279.081724][ T9982] bridge0: entered allmulticast mode
[  279.309200][ T9989] file system registered
[  279.330443][ T9993] fuse: fd is not a fuse device
[  279.412079][ T9996] bond2: entered allmulticast mode
[  279.447033][ T9996] lo: entered allmulticast mode
[  279.477615][ T9995] bond2: left allmulticast mode
[  279.513579][   T30] audit: type=1800 audit(1785223620.055:51): pid=9994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1078" name="UDC" dev="configfs" ino=25193 res=0 errno=0
[  279.630610][ T9990] loop8: detected capacity change from 0 to 32768
[  279.650804][ T9990] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  279.659277][ T9990] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  279.714680][ T9990] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  279.725329][  T803] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  279.770694][  T803] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  279.862226][ T9705] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.980642][ T9705] 8021q: adding VLAN 0 to HW filter on device team0
[  280.068993][ T9275] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.077842][ T9275] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.097066][ T5639] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  280.107343][ T5639] Bluetooth: hci3: Injecting HCI hardware error event
[  280.118360][ T5639] Bluetooth: hci3: hardware error 0x00
[  280.245656][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.252901][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.421514][  T803] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 650ms
[  280.449545][  T803] gfs2: fsid=syz:syz.0: jid=0: Done
[  280.475612][ T9990] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  280.624373][ T7029] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  280.883501][ T7029] usb 10-1: Using ep0 maxpacket: 8
[  280.900325][ T7029] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7
[  280.956704][ T7029] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  280.997661][ T7029] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  281.036938][ T7029] usb 10-1: Product: syz
[  281.047486][ T7029] usb 10-1: Manufacturer: syz
[  281.061669][ T7029] usb 10-1: SerialNumber: syz
[  281.290293][ T7029] usb 10-1: Handspring Visor / Palm OS: port 0, is for unknown use
[  281.307621][ T7029] usb 10-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  281.308837][ T5281] 8021q: adding VLAN 0 to HW filter on device eth16
[  281.317005][ T7029] usb 10-1: Handspring Visor / Palm OS: Number of ports: 2
[  281.496011][ T7029] usb 10-1: palm_os_3_probe - error -71 getting bytes available request
[  281.517192][ T7029] visor 10-1:1.0: Handspring Visor / Palm OS converter detected
[  281.636888][ T7029] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  281.707567][ T7029] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  281.768194][ T7029] usb 10-1: USB disconnect, device number 2
[  281.825294][ T7029] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  281.905579][ T7029] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  281.955080][ T7029] visor 10-1:1.0: device disconnected
[  282.235750][ T5639] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  282.262711][ T9705] 8021q: adding VLAN 0 to HW filter on device batadv0
[  282.308857][ T5639] Bluetooth: hci0: Unknown advertising packet type: 0x19
[  282.308913][ T5639] Bluetooth: hci0: Unknown advertising packet type: 0x1f
[  282.417495][ T9705] veth0_vlan: entered promiscuous mode
[  282.505013][ T9705] veth1_vlan: entered promiscuous mode
[  282.643615][ T9705] veth0_macvtap: entered promiscuous mode
[  282.679052][ T9705] veth1_macvtap: entered promiscuous mode
[  282.745883][ T9705] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.785072][ T9705] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.820340][ T9275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.841637][ T7038] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  282.860896][ T9275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.908701][ T9275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.965679][ T9275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.010253][ T7038] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  283.057933][ T7038] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  283.105234][ T7038] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.183881][ T7038] usb 10-1: config 0 descriptor??
[  283.222324][ T7038] pwc: Askey VC010 type 2 USB webcam detected.
[  283.307122][ T9275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.364378][ T9275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.468769][ T9517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.496808][ T9517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.627695][ T7038] pwc: recv_control_msg error -32 req 02 val 2b00
[  283.655943][ T7038] pwc: recv_control_msg error -32 req 02 val 2700
[  283.688718][ T7038] pwc: recv_control_msg error -32 req 02 val 2c00
[  283.717693][ T7038] pwc: recv_control_msg error -32 req 04 val 1000
[  283.743611][ T7038] pwc: recv_control_msg error -32 req 04 val 1300
[  283.782658][ T7038] pwc: recv_control_msg error -32 req 04 val 1400
[  283.812264][T10114] loop0: detected capacity change from 0 to 128
[  283.841970][T10114] FAT-fs (loop0): Directory bread(block 1048) failed
[  283.859610][T10114] FAT-fs (loop0): Directory bread(block 1049) failed
[  283.889281][T10114] FAT-fs (loop0): Directory bread(block 1050) failed
[  283.930025][T10114] FAT-fs (loop0): Directory bread(block 1051) failed
[  283.967445][T10114] FAT-fs (loop0): Directory bread(block 1052) failed
[  284.021880][ T7038] pwc: recv_control_msg error -71 req 02 val 2100
[  284.030811][T10114] FAT-fs (loop0): Directory bread(block 1053) failed
[  284.050639][ T7038] pwc: recv_control_msg error -71 req 04 val 1500
[  284.060957][T10114] FAT-fs (loop0): Directory bread(block 1054) failed
[  284.078465][ T7038] pwc: recv_control_msg error -71 req 02 val 2500
[  284.093881][T10114] FAT-fs (loop0): Directory bread(block 1055) failed
[  284.109981][ T7038] pwc: recv_control_msg error -71 req 02 val 2400
[  284.118243][T10121] loop6: detected capacity change from 0 to 256
[  284.134744][ T7038] pwc: recv_control_msg error -71 req 02 val 2600
[  284.167783][ T7038] pwc: recv_control_msg error -71 req 02 val 2900
[  284.193611][ T7038] pwc: recv_control_msg error -71 req 02 val 2800
[  284.218804][T10114] FAT-fs (loop0): Directory bread(block 1048) failed
[  284.247081][ T7038] pwc: recv_control_msg error -71 req 04 val 1100
[  284.250646][T10114] FAT-fs (loop0): Directory bread(block 1049) failed
[  284.289681][ T7038] pwc: recv_control_msg error -71 req 04 val 1200
[  284.383641][ T7038] pwc: Registered as video103.
[  284.424003][ T7038] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input10
[  284.508960][T10098] loop8: detected capacity change from 0 to 32768
[  284.527113][ T7038] usb 10-1: USB disconnect, device number 3
[  284.671893][T10098] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  284.963188][   T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.122275][T10098] XFS (loop8): Ending clean mount
[  285.425465][   T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.480457][T10098] XFS (loop8): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[  285.550041][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  285.565276][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  285.573897][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  285.590877][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  285.599153][T10098] XFS (loop8): Unmount and run xfs_repair
[  285.606194][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  285.611546][T10098] XFS (loop8): First 128 bytes of corrupted metadata buffer:
[  285.654532][T10098] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  285.742341][T10098] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[  285.764434][T10098] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  285.838238][T10098] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  285.895709][T10098] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  285.929851][T10167] fuse: fd is not a fuse device
[  285.945729][T10098] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  285.983052][T10098] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  286.014023][T10098] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  286.034022][T10098] XFS (loop8): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x14 len 4 error 74
[  286.069998][T10098] XFS (loop8): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280).  Shutting down filesystem.
[  286.120684][T10098] XFS (loop8): Please unmount the filesystem and rectify the problem(s)
[  286.170482][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1125'.
[  286.248650][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1125'.
[  286.302100][   T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.309505][ T7897] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  286.717585][   T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.741830][T10185] loop0: detected capacity change from 0 to 2048
[  286.799375][T10185]  loop0: p2 p3 < > p4 < p5 >
[  286.820884][T10185] loop0: partition table partially beyond EOD, truncated
[  286.855025][T10185] loop0: p2 start 53543428 is beyond EOD, truncated
[  286.874779][T10189] loop9: detected capacity change from 0 to 512
[  286.898768][T10185] loop0: p3 start 4284289 is beyond EOD, truncated
[  286.948549][T10189] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.1128: corrupted in-inode xattr: invalid ea_ino
[  287.001926][T10189] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  287.006137][T10189] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1128: couldn't read orphan inode 15 (err -117)
[  287.006721][T10185] loop0: p5 start 53543428 is beyond EOD, 
[  287.015346][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  287.015367][    C0] EXT4-fs (loop9): initial error at time 1785223627: ext4_iget_extra_inode:5180: inode 15
[  287.050802][    C0] EXT4-fs (loop9): last error at time 1785223627: ext4_iget_extra_inode:5180: inode 15
[  287.062291][T10189] loop9: lost filesystem error report for type 5 error -117
[  287.062470][T10185] truncated
[  287.120740][T10189] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.164895][ T4986]  loop0: p2 p3 < > p4 < p5 >
[  287.185177][ T4986] loop0: partition table partially beyond EOD, truncated
[  287.215939][ T4986] loop0: p2 start 53543428 is beyond EOD, truncated
[  287.236511][ T4986] loop0: p3 start 4284289 is beyond EOD, truncated
[  287.272659][ T4986] loop0: p5 start 53543428 is beyond EOD, truncated
[  287.507863][ T5763] udevd[5763]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  287.672632][ T5640] Bluetooth: hci5: command tx timeout
[  288.032737][ T8461] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.417987][T10235] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1133'.
[  288.569446][   T57] bridge_slave_1: left allmulticast mode
[  288.600245][   T57] bridge_slave_1: left promiscuous mode
[  288.622802][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.675422][   T57] bridge_slave_0: left allmulticast mode
[  288.704502][   T57] bridge_slave_0: left promiscuous mode
[  288.725482][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.785967][   T57] lo: left allmulticast mode
[  288.933805][T10251] fuse: fd is not a fuse device
[  289.137207][T10258] fuse: fd is not a fuse device
[  289.148495][    T9] Process accounting resumed
[  289.758028][ T5640] Bluetooth: hci5: command tx timeout
[  290.149734][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  290.222107][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.256633][   T57] bond0 (unregistering): Released all slaves
[  290.265215][   T36] smbdirect: ib_dev[syz1] removed
[  290.290145][   T57] bond1 (unregistering): Released all slaves
[  290.379888][T10283] loop2: detected capacity change from 0 to 7
[  290.404554][   T57] bond2 (unregistering): Released all slaves
[  290.413449][T10283]  loop2:
[  290.429043][T10283] loop2: partition table partially beyond EOD, truncated
[  290.550390][T10288] fuse: fd is not a fuse device
[  290.649677][ T7031] infiniband syz1: ib_query_port failed (-19)
[  290.771068][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1147'.
[  290.822531][   T57] tipc: Left network mode
[  291.223324][T10306] loop8: detected capacity change from 0 to 128
[  291.317408][T10306] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  291.426176][T10306] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  291.602657][ T7038] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  291.626116][T10316] loop9: detected capacity change from 0 to 2048
[  291.687201][T10306] EXT4-fs (loop8): shut down requested (2)
[  291.716040][T10316] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.795440][ T7038] usb 1-1: Using ep0 maxpacket: 8
[  291.807996][ T7038] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  291.842684][ T5640] Bluetooth: hci5: command tx timeout
[  291.855701][ T7038] usb 1-1: config 0 has no interface number 0
[  291.875887][ T7038] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  291.887254][ T7038] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  291.901315][ T7038] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  291.913027][ T7038] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  291.929271][ T7897] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  291.933813][ T7038] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  291.947569][ T7038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.969002][ T7038] usb 1-1: config 0 descriptor??
[  291.990997][ T7038] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  292.125193][ T8461] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.327567][   T57] hsr_slave_0: left promiscuous mode
[  292.361325][   T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  292.397313][   T57] hsr_slave_1: left promiscuous mode
[  292.427588][T10339] netlink: 'syz.9.1156': attribute type 1 has an invalid length.
[  292.457924][   T57] veth1_macvtap: left promiscuous mode
[  292.485468][   T57] veth0_macvtap: left promiscuous mode
[  292.509114][   T57] veth1_vlan: left promiscuous mode
[  292.523642][   T57] veth0_vlan: left promiscuous mode
[  292.555122][T10342] loop6: detected capacity change from 0 to 256
[  292.587454][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.605130][T10345] netlink: 'syz.9.1156': attribute type 10 has an invalid length.
[  292.645752][   T24] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  292.661316][T10342] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  292.725652][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.814776][   T24] usb 9-1: config 0 descriptor??
[  293.085055][   T24] usbhid 9-1:0.0: can't add hid device: -71
[  293.118429][   T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  293.174650][   T24] usb 9-1: USB disconnect, device number 4
[  293.274178][T10351] Bluetooth: hci6: Frame reassembly failed (-90)
[  293.357579][ T9518] Bluetooth: hci6: Frame reassembly failed (-84)
[  293.564668][   T57] team0 (unregistering): Port device team_slave_1 removed
[  293.594762][   T57] team0 (unregistering): Port device team_slave_0 removed
[  293.633280][   T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  293.804406][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.816008][   T24] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  293.859115][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.861960][ T5771] usb 1-1: USB disconnect, device number 5
[  293.869715][T10339] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  293.889018][ T5771] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  293.910717][   T24] usb 9-1: config 0 descriptor??
[  293.914844][ T5639] Bluetooth: hci5: command tx timeout
[  293.963122][T10345] team0: Port device dummy0 added
[  294.005763][T10151] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.016466][T10151] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.028997][T10151] bridge_slave_0: entered allmulticast mode
[  294.038566][T10151] bridge_slave_0: entered promiscuous mode
[  294.054909][T10151] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.087066][T10151] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.094569][T10151] bridge_slave_1: entered allmulticast mode
[  294.103524][T10151] bridge_slave_1: entered promiscuous mode
[  294.295757][T10151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.327137][T10151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.476891][T10151] team0: Port device team_slave_0 added
[  294.504815][T10151] team0: Port device team_slave_1 added
[  294.621697][T10151] batman_adv: batadv0: Adding interface: batadv_slave_0
[  294.651024][T10151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  294.679164][T10376] loop0: detected capacity change from 0 to 2048
[  294.702152][T10380] fuse: fd is not a fuse device
[  294.715115][T10376] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  294.726917][T10151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  294.757070][T10151] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.765127][   T24] aiptek 9-1:0.0: Aiptek using 400 ms programming speed
[  294.774536][T10330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.802806][T10151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  294.838891][T10330] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.848786][   T24] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input11
[  294.911179][T10151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.963761][T10383] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  295.002383][   T57] IPVS: stop unused estimator thread 0...
[  295.027152][T10376] syz.0.1167: attempt to access beyond end of device
[  295.027152][T10376] loop0: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[  295.299270][    T9] usb 9-1: USB disconnect, device number 5
[  295.299769][    C1] aiptek 9-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  295.312793][T10151] hsr_slave_0: entered promiscuous mode
[  295.329304][T10151] hsr_slave_1: entered promiscuous mode
[  295.346406][T10151] debugfs: 'hsr0' already exists in 'hsr'
[  295.362206][ T5639] Bluetooth: hci6: command 0x1003 tx timeout
[  295.365021][ T5640] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  295.382013][T10151] Cannot create hsr debugfs directory
[  295.462875][ T7038] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  295.615884][T10389] syz.0.1167: attempt to access beyond end of device
[  295.615884][T10389] loop0: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048
[  295.683063][ T7038] usb 10-1: Using ep0 maxpacket: 8
[  295.707161][T10389] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=3)
[  295.724288][ T7038] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  295.726711][T10389] NILFS (loop0): error -5 reading inode: ino=12
[  295.742441][ T7038] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.772118][ T7038] usb 10-1: Product: syz
[  295.787204][ T7038] usb 10-1: Manufacturer: syz
[  295.806815][ T7038] usb 10-1: SerialNumber: syz
[  295.823947][ T7038] usb 10-1: config 0 descriptor??
[  296.054140][ T7038] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  296.415675][T10151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  296.439005][T10151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.657932][T10420] loop0: detected capacity change from 0 to 4096
[  296.783449][T10420] ntfs3(loop0): Failed to load $Extend (-22).
[  296.807359][T10151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  296.830371][T10420] ntfs3(loop0): Failed to initialize $Extend.
[  296.869823][T10151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.919769][ T7038] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  296.986971][ T7038] usb 10-1: USB disconnect, device number 4
[  297.348176][T10151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  297.395757][T10151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.626653][T10151] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  297.680489][T10151] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.277140][T10456] loop0: detected capacity change from 0 to 32768
[  298.284491][T10456] xfs: Deprecated parameter 'ikeep'
[  298.289680][T10456] XFS: ikeep mount option is deprecated.
[  298.330689][T10456] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  298.371976][T10456] XFS (loop0): Ending clean mount
[  298.382547][T10456] XFS (loop0): Quotacheck needed: Please wait.
[  298.446743][T10456] XFS (loop0): Quotacheck: Done.
[  298.534292][T10456] evm: overlay not supported
[  298.748651][T10472] loop6: detected capacity change from 0 to 8
[  298.825106][T10475] loop9: detected capacity change from 0 to 512
[  298.827573][T10472] SQUASHFS error: lzo decompression failed, data probably corrupt
[  298.877266][T10477] netlink: 'syz.5.1191': attribute type 1 has an invalid length.
[  298.936114][T10472] SQUASHFS error: Failed to read block 0x28d: -5
[  298.978822][T10472] SQUASHFS error: Unable to read metadata cache entry [28b]
[  298.984430][T10475] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.018707][T10475] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  299.067433][T10472] SQUASHFS error: Unable to read inode 0x11f
[  299.097687][ T9705] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  299.187492][T10477] 8021q: adding VLAN 0 to HW filter on device bond4
[  299.312907][T10486] bond4: (slave syz_tun): Enslaving as a backup interface with an up link
[  299.559389][T10497] bridge0: port 3(syz_tun) entered blocking state
[  299.585778][    C0] I/O error, dev loop9, sector 180 op 0x1:(WRITE) flags 0x803800 phys_seg 1 prio class 2
[  299.595725][    C0] buffer_io_error: 20 callbacks suppressed
[  299.595741][    C0] Buffer I/O error on dev loop9, logical block 45, lost sync page write
[  299.618616][T10497] bridge0: port 3(syz_tun) entered disabled state
[  299.639719][T10491] EXT4-fs error (device loop9): ext4_check_bdev_write_error:227: comm syz.9.1190: Error while async write back metadata
[  299.685555][T10497] syz_tun: entered allmulticast mode
[  299.696037][T10475] EXT4-fs error (device loop9): ext4_ext_rm_leaf:2770: inode #16: block 45: comm syz.9.1190: IO error syncing itable block
[  299.708182][    C0] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x803800 phys_seg 1 prio class 2
[  299.718784][    C0] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x803800 phys_seg 1 prio class 2
[  299.728731][    C0] Buffer I/O error on dev loop9, logical block 0, lost sync page write
[  299.763833][T10497] syz_tun: entered promiscuous mode
[  299.799399][T10497] bridge0: port 3(syz_tun) entered blocking state
[  299.805994][T10497] bridge0: port 3(syz_tun) entered listening state
[  299.858315][T10489] loop9: detected capacity change from 512 to 0
[  299.980478][T10491] EXT4-fs (loop9): I/O error while writing superblock
[  299.995115][T10502] loop6: detected capacity change from 0 to 32768
[  300.002647][T10502] btrfs: Deprecated parameter 'usebackuproot'
[  300.008720][T10502] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  300.021574][T10502] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1194 (10502)
[  300.035703][T10475] EXT4-fs (loop9): previous I/O error to superblock detected
[  300.043565][T10475] Buffer I/O error on dev loop9, logical block 0, lost sync page write
[  300.052608][T10475] EXT4-fs (loop9): I/O error while writing superblock
[  300.059520][T10475] EXT4-fs error (device loop9): ext4_check_bdev_write_error:227: comm syz.9.1190: Error while async write back metadata
[  300.078662][T10475] Buffer I/O error on dev loop9, logical block 0, lost sync page write
[  300.087018][T10475] EXT4-fs (loop9): I/O error while writing superblock
[  300.102805][T10491] EXT4-fs error (device loop9): ext4_check_bdev_write_error:227: comm syz.9.1190: Error while async write back metadata
[  300.105492][T10502] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  300.126022][T10502] BTRFS info (device loop6): using crc32c checksum algorithm
[  300.133460][T10502] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  300.190185][T10151] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  300.197848][T10491] Buffer I/O error on dev loop9, logical block 0, lost sync page write
[  300.210746][T10491] EXT4-fs (loop9): I/O error while writing superblock
[  300.222458][T10151] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  300.230630][T10151] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  300.232678][T10475] EXT4-fs error (device loop9): ext4_check_bdev_write_error:227: comm syz.9.1190: Error while async write back metadata
[  300.263489][T10151] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  300.279941][T10151] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  300.299492][ T9273] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  300.302084][T10475] Buffer I/O error on dev loop9, logical block 0, lost sync page write
[  300.322741][T10475] EXT4-fs (loop9): I/O error while writing superblock
[  300.341953][T10491] EXT4-fs error (device loop9): ext4_check_bdev_write_error:227: comm syz.9.1190: Error while async write back metadata
[  300.366164][T10475] Buffer I/O error on dev loop9, logical block 45, lost sync page write
[  300.376263][T10475] EXT4-fs error (device loop9): ext4_ext_insert_extent:2210: inode #16: block 45: comm syz.9.1190: IO error syncing itable block
[  300.426841][T10475] Buffer I/O error on dev loop9, logical block 0, lost sync page write
[  300.426909][T10502] BTRFS error (device loop6): failed to load root extent
[  300.442366][T10502] BTRFS warning (device loop6): try to load backup roots slot 1
[  300.445341][T10151] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  300.457754][ T9527] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  300.506623][T10502] BTRFS warning (device loop6): couldn't read tree root
[  300.511907][T10491] EXT4-fs (loop9): previous I/O error to superblock detected
[  300.513687][T10502] BTRFS warning (device loop6): try to load backup roots slot 2
[  300.523886][T10151] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  300.541125][ T9514] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  300.577072][T10502] BTRFS warning (device loop6): couldn't read tree root
[  300.584370][T10502] BTRFS warning (device loop6): try to load backup roots slot 3
[  300.592518][T10491] Buffer I/O error on dev loop9, logical block 0, lost sync page write
[  300.614564][T10502] BTRFS info (device loop6): rebuilding free space tree
[  300.634803][T10502] BTRFS info (device loop6): disabling free space tree
[  300.641791][T10502] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  300.651522][T10502] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  300.667555][T10502] BTRFS info (device loop6): checking UUID tree
[  300.674417][T10502] BTRFS info (device loop6): enabling ssd optimizations
[  300.679542][T10475] EXT4-fs (loop9): I/O error while writing superblock
[  300.682292][T10502] BTRFS info (device loop6): turning on async discard
[  300.695047][T10502] BTRFS info (device loop6): enabling disk space caching
[  300.702330][T10502] BTRFS info (device loop6): force clearing of disk cache
[  300.709444][T10502] BTRFS info (device loop6): enabling auto defrag
[  300.714964][T10491] EXT4-fs (loop9): I/O error while writing superblock
[  300.715913][T10502] BTRFS info (device loop6): trying to use backup root at mount time
[  300.730758][T10502] BTRFS info (device loop6): use zstd compression, level 3
[  300.754200][T10475] EXT4-fs error (device loop9): ext4_check_bdev_write_error:227: comm syz.9.1190: Error while async write back metadata
[  300.802377][T10491] Buffer I/O error on dev loop9, logical block 46, lost sync page write
[  300.803816][T10151] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  300.855607][T10475] EXT4-fs error (device loop9): ext4_check_bdev_write_error:227: comm syz.9.1190: Error while async write back metadata
[  300.856055][T10491] EXT4-fs error (device loop9): ext4_getblk:1038: inode #19: block 46: comm syz.9.1190: IO error syncing itable block
[  301.045377][ T6666] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  301.135031][T10475] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 38)
[  301.189260][T10538] loop8: detected capacity change from 0 to 2048
[  301.252132][T10475] Buffer I/O error on device loop9, logical block 38
[  301.259202][T10475] Buffer I/O error on device loop9, logical block 39
[  301.312361][T10538] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  301.348300][T10475] Buffer I/O error on device loop9, logical block 40
[  301.355050][T10475] Buffer I/O error on device loop9, logical block 41
[  301.385011][T10151] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.446679][T10475] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 42)
[  301.511991][T10475] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 44)
[  301.531022][T10151] 8021q: adding VLAN 0 to HW filter on device team0
[  301.573462][T10475] Buffer I/O error on device loop9, logical block 44
[  301.617433][ T9273] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.618199][T10475] Buffer I/O error on device loop9, logical block 42
[  301.624617][ T9273] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.644560][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1203'.
[  301.690962][T10475] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 47)
[  301.740131][ T9273] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.747318][ T9273] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.754746][T10475] Buffer I/O error on device loop9, logical block 47
[  301.761431][T10475] Buffer I/O error on device loop9, logical block 48
[  301.849316][T10475] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 57)
[  301.932751][T10475] Buffer I/O error on device loop9, logical block 57
[  301.939466][T10475] Buffer I/O error on device loop9, logical block 58
[  301.960487][T10151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  301.996335][T10475] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 61)
[  302.091733][T10560] fuse: Bad value for 'fd'
[  302.186023][ T8461] EXT4-fs warning (device loop9): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.'
[  302.352867][ T8461] EXT4-fs warning (device loop9): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.'
[  302.415289][ T8461] EXT4-fs warning (device loop9): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.'
[  302.479374][ T8461] EXT4-fs warning (device loop9): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.'
[  302.583644][T10571] fuse: fd is not a fuse device
[  302.806318][T10578] netlink: 'syz.0.1210': attribute type 11 has an invalid length.
[  303.050345][T10545] loop6: detected capacity change from 0 to 32768
[  303.144327][T10545] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  303.156615][T10545] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  303.173429][T10586] netlink: 'syz.0.1213': attribute type 1 has an invalid length.
[  303.456902][T10545] XFS (loop6): Ending clean mount
[  303.484804][T10545] XFS (loop6): Quotacheck needed: Please wait.
[  303.764661][T10545] XFS (loop6): Quotacheck: Done.
[  303.794947][   T30] audit: type=1800 audit(1785223644.425:52): pid=10545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1201" name="file1" dev="loop6" ino=9286 res=0 errno=0
[  303.864125][ T9273] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.170529][ T6666] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  304.178472][ T9273] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.274352][T10151] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.346173][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1220'.
[  304.389418][ T7031] IPVS: starting estimator thread 0...
[  304.507110][ T9273] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.538801][T10629] IPVS: using max 34 ests per chain, 81600 per kthread
[  304.766790][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  304.781060][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  304.793357][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  304.810939][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  304.824039][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  304.942940][ T9273] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.067998][T10151] veth0_vlan: entered promiscuous mode
[  305.094751][T10644] fuse: fd is not a fuse device
[  305.138652][T10151] veth1_vlan: entered promiscuous mode
[  305.803907][T10151] veth0_macvtap: entered promiscuous mode
[  305.840037][T10651] mmap: syz.5.1225 (10651) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  305.873806][T10151] veth1_macvtap: entered promiscuous mode
[  305.983987][ T9273] bridge_slave_1: left allmulticast mode
[  306.008265][ T9273] bridge_slave_1: left promiscuous mode
[  306.031929][ T9273] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.116067][ T9273] bridge_slave_0: left allmulticast mode
[  306.137375][ T9273] bridge_slave_0: left promiscuous mode
[  306.160313][ T9273] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.448127][T10683] xt_TPROXY: Can be used only with -p tcp or -p udp
[  306.918286][ T9273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  306.938566][ T9273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  306.952905][ T5640] Bluetooth: hci0: command tx timeout
[  306.973312][ T9273] bond0 (unregistering): Released all slaves
[  307.149007][ T9273] ¿: left promiscuous mode
[  307.326631][T10151] batman_adv: batadv0: Interface activated: batadv_slave_0
[  307.358428][T10151] batman_adv: batadv0: Interface activated: batadv_slave_1
[  307.447934][ T9518] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.489584][ T9518] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.695064][ T9518] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.726096][ T9518] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.171702][ T5771] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  308.340816][ T9273] hsr_slave_0: left promiscuous mode
[  308.368486][ T9273] hsr_slave_1: left promiscuous mode
[  308.374322][ T5771] usb 7-1: Using ep0 maxpacket: 8
[  308.384094][ T5771] usb 7-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 37, changing to 9
[  308.398388][ T9273] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  308.406755][ T5771] usb 7-1: config 0 interface 0 has no altsetting 0
[  308.414170][ T9273] batman_adv: batadv0: Removing interface: batadv_slave_0
[  308.421735][ T5771] usb 7-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  308.430882][ T5771] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.443518][ T5771] usb 7-1: config 0 descriptor??
[  308.473526][ T9273] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  308.498744][ T9273] batman_adv: batadv0: Removing interface: batadv_slave_1
[  308.693174][ T9273] vlan0: left allmulticast mode
[  308.783577][ T9273] veth0_vlan: left allmulticast mode
[  308.819400][ T9273] vlan0: left promiscuous mode
[  308.846589][ T9273] veth1_macvtap: left promiscuous mode
[  308.881756][ T9273] veth0_macvtap: left promiscuous mode
[  308.903544][ T9273] veth1_vlan: left promiscuous mode
[  308.929544][ T9273] veth0_vlan: left promiscuous mode
[  308.990079][ T5771] hid_parser_main: 365 callbacks suppressed
[  308.990104][ T5771] petalynx 0003:18B1:0037.0005: unknown main item tag 0x1
[  309.516426][ T5640] Bluetooth: hci0: command tx timeout
[  310.267191][ T5771] petalynx 0003:18B1:0037.0005: unknown main item tag 0x6
[  310.274855][ T5771] petalynx 0003:18B1:0037.0005: unknown main item tag 0x4
[  310.317387][ T5771] petalynx 0003:18B1:0037.0005: hidraw0: USB HID v10.08 Device [HID 18b1:0037] on usb-dummy_hcd.6-1/input0
[  310.374395][ T9273] team0 (unregistering): Port device team_slave_1 removed
[  310.380038][ T5771] usb 7-1: USB disconnect, device number 8
[  310.445380][ T9273] team0 (unregistering): Port device team_slave_0 removed
[  310.460245][T10757] fido_id[10757]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  310.567788][T10761] fuse: fd is not a fuse device
[  310.688299][ T9273] team0 (unregistering): Port device dummy0 removed
[  310.870990][ T9527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.888248][ T9527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.129242][ T9527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.157581][ T9527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.591398][ T5640] Bluetooth: hci0: command tx timeout
[  311.851623][T10636] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.885206][T10636] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.915191][T10636] bridge_slave_0: entered allmulticast mode
[  311.940960][T10636] bridge_slave_0: entered promiscuous mode
[  311.985390][T10636] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.015890][T10636] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.043775][T10636] bridge_slave_1: entered allmulticast mode
[  312.071661][T10636] bridge_slave_1: entered promiscuous mode
[  312.217188][T10636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.246954][T10636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.272058][T10805] overlayfs: failed to clone upperpath
[  312.341404][ T7029] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  312.369817][T10636] team0: Port device team_slave_0 added
[  312.394834][T10636] team0: Port device team_slave_1 added
[  312.475872][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1
[  312.492984][T10636] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.511600][ T7029] usb 1-1: Using ep0 maxpacket: 32
[  312.529795][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  312.583551][ T7029] usb 1-1: unable to get BOS descriptor or descriptor too short
[  312.604431][ T7029] usb 1-1: config 14 has an invalid interface number: 57 but max is 1
[  312.615890][ T7029] usb 1-1: config 14 has an invalid interface number: 228 but max is 1
[  312.630890][T10636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.646511][ T7029] usb 1-1: config 14 has no interface number 0
[  312.667531][ T7029] usb 1-1: config 14 has no interface number 1
[  312.677446][T10636] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.692253][ T7029] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  312.709350][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  312.758226][ T7029] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  312.794655][ T7029] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  312.816947][T10636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.830589][ T7029] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  312.867717][ T7029] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  312.916982][ T7029] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  312.962278][ T7029] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  313.009235][ T7029] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  313.066983][ T7029] usb 1-1: config 14 interface 57 has no altsetting 0
[  313.101849][ T7029] usb 1-1: config 14 interface 228 has no altsetting 0
[  313.117053][T10636] hsr_slave_0: entered promiscuous mode
[  313.135138][ T7029] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  313.148005][T10636] hsr_slave_1: entered promiscuous mode
[  313.155212][ T7029] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.178810][T10636] debugfs: 'hsr0' already exists in 'hsr'
[  313.193969][ T7029] usb 1-1: Product: syz
[  313.208816][ T7029] usb 1-1: Manufacturer: syz
[  313.214247][T10636] Cannot create hsr debugfs directory
[  313.239968][ T7029] usb 1-1: SerialNumber: syz
[  313.671738][ T5640] Bluetooth: hci0: command tx timeout
[  313.695970][ T7029] legousbtower 1-1:14.57: interrupt endpoints not found
[  314.095344][ T7029] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  314.207852][ T7029] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  314.606733][T10818] loop1: detected capacity change from 0 to 32768
[  314.829772][ T7029] usb 1-1: USB disconnect, device number 6
[  314.842438][T10842] usb 1-1: Couldn't submit interrupt_in_urb -19
[  314.943325][ T7029] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected
[  315.115503][    C1] bridge0: port 3(syz_tun) entered learning state
[  315.293508][T10834] loop6: detected capacity change from 0 to 32768
[  315.342554][T10834] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1269 (10834)
[  315.444247][T10834] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  315.487383][T10834] BTRFS info (device loop6): using sha256 checksum algorithm
[  315.629077][T10834] BTRFS info (device loop6): setting nodatasum
[  315.666348][T10834] BTRFS info (device loop6): enabling ssd optimizations
[  315.727369][T10834] BTRFS info (device loop6): turning on async discard
[  315.819806][T10834] BTRFS info (device loop6): enabling free space tree
[  315.902803][T10875] loop0: detected capacity change from 0 to 512
[  315.972893][T10875] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1276: iget: bad i_size value: 38620345925642
[  316.117387][T10875] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  316.117914][T10875] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1276: couldn't read orphan inode 15 (err -117)
[  316.127127][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  316.127149][    C0] EXT4-fs (loop0): initial error at time 1785223656: ext4_orphan_get:1399: inode 15
[  316.127187][    C0] EXT4-fs (loop0): last error at time 1785223656: ext4_orphan_get:1399: inode 15
[  316.183779][T10875] loop0: lost filesystem error report for type 5 error -117
[  316.213492][T10875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.394042][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  316.403836][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  316.475743][T10888] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1276: bg 0: block 5: invalid block bitmap
[  316.592999][T10888] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 204 with error 28
[  316.621953][T10888] EXT4-fs (loop0): This should not happen!! Data will be lost
[  316.621953][T10888] 
[  316.679705][T10888] EXT4-fs (loop0): Total free blocks count 0
[  316.691358][T10888] EXT4-fs (loop0): Free/Dirty block details
[  316.707407][T10636] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  316.715810][T10888] EXT4-fs (loop0): free_blocks=0
[  316.743106][T10888] EXT4-fs (loop0): dirty_blocks=208
[  316.766230][T10636] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  316.776874][T10888] EXT4-fs (loop0): Block reservation details
[  316.781909][ T6666] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  316.794099][T10888] EXT4-fs (loop0): i_reserved_data_blocks=208
[  316.803691][T10636] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  316.835529][T10636] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  316.863422][T10636] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  316.935442][T10636] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  316.999024][T10636] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  317.004694][ T9705] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  317.066249][T10636] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  317.118514][ T9705] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.417202][T10911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'.
[  317.473236][T10911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'.
[  317.565176][T10908] loop6: detected capacity change from 0 to 8192
[  317.686063][T10636] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.846895][T10636] 8021q: adding VLAN 0 to HW filter on device team0
[  317.916591][ T9527] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.923802][ T9527] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.044594][ T9520] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.051783][ T9520] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.053034][T10925] fuse: Bad value for 'fd'
[  318.506049][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2
[  318.567954][   T30] audit: type=1804 audit(1785223659.195:53): pid=10930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1287" name=2321200A5854DE9422AB97CA0E43DE0A7956F703D038A068546AD861EC77F558BAC3ECA6C926A316 dev="ramfs" ino=30350 res=1 errno=0
[  319.116263][T10943] loop0: detected capacity change from 0 to 16
[  319.231054][T10943] erofs (device loop0): mounted with root inode @ nid 36.
[  319.415147][T10943] sd 0:0:1:0: PR command failed: 1026
[  319.437678][T10943] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  319.460609][T10943] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  320.277748][T10636] 8021q: adding VLAN 0 to HW filter on device batadv0
[  320.509932][T10636] veth0_vlan: entered promiscuous mode
[  320.573856][T10636] veth1_vlan: entered promiscuous mode
[  320.762922][T10636] veth0_macvtap: entered promiscuous mode
[  320.799813][T10636] veth1_macvtap: entered promiscuous mode
[  320.910446][T10636] batman_adv: batadv0: Interface activated: batadv_slave_0
[  320.984642][T10636] batman_adv: batadv0: Interface activated: batadv_slave_1
[  321.038722][ T9525] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.073778][ T9525] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.126325][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3
[  321.155495][ T9525] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.187637][ T9525] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.580330][ T9273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.630688][ T9273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.797899][ T9273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.839959][ T9273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.875234][T11017] loop3: detected capacity change from 0 to 128
[  322.882561][T11017] EXT4-fs: Ignoring removed orlov option
[  322.892828][T11017] EXT4-fs (loop3): unsupported inode size: 0
[  322.899689][T11017] EXT4-fs (loop3): blocksize: 1024
[  325.046203][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4
[  325.321130][ T5640] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  325.335422][ T5640] CPU: 1 UID: 0 PID: 5640 Comm: kworker/u9:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  325.335459][ T5640] Tainted: [L]=SOFTLOCKUP
[  325.335468][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  325.335483][ T5640] Workqueue: hci4 hci_rx_work
[  325.335517][ T5640] Call Trace:
[  325.335525][ T5640]  <TASK>
[  325.335536][ T5640]  dump_stack_lvl+0xe8/0x150
[  325.335576][ T5640]  sysfs_create_dir_ns+0x271/0x2a0
[  325.335616][ T5640]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  325.335655][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  325.335684][ T5640]  ? do_raw_spin_unlock+0xf5/0x210
[  325.335720][ T5640]  kobject_add_internal+0x622/0xcd0
[  325.335765][ T5640]  kobject_add+0x163/0x240
[  325.335797][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  325.335834][ T5640]  ? __pfx_kobject_add+0x10/0x10
[  325.335870][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  325.335901][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  325.335934][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  325.335962][ T5640]  ? get_device_parent+0x366/0x3a0
[  325.335998][ T5640]  device_add+0x3fa/0xb80
[  325.336030][ T5640]  hci_conn_add_sysfs+0xd5/0x210
[  325.336063][ T5640]  le_conn_complete_evt+0xfef/0x1580
[  325.336120][ T5640]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  325.336157][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  325.336186][ T5640]  ? __mutex_unlock_slowpath+0x731/0x900
[  325.336221][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  325.336250][ T5640]  ? skb_pull_data+0xf0/0x200
[  325.336289][ T5640]  hci_le_conn_complete_evt+0x187/0x470
[  325.336334][ T5640]  hci_event_packet+0x67a/0xf10
[  325.336373][ T5640]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  325.336407][ T5640]  ? __pfx_hci_event_packet+0x10/0x10
[  325.336444][ T5640]  ? audit_tree_freeing_mark+0x760/0xb20
[  325.336478][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  325.336506][ T5640]  ? hci_send_to_monitor+0xe2/0x590
[  325.336549][ T5640]  hci_rx_work+0x3ee/0x1020
[  325.336589][ T5640]  ? process_scheduled_works+0xa20/0x14e0
[  325.336620][ T5640]  process_scheduled_works+0xa8e/0x14e0
[  325.336684][ T5640]  ? __pfx_process_scheduled_works+0x10/0x10
[  325.336722][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  325.336750][ T5640]  ? assign_work+0x3cf/0x5d0
[  325.336786][ T5640]  worker_thread+0xa47/0xfb0
[  325.336849][ T5640]  kthread+0x388/0x470
[  325.336887][ T5640]  ? __pfx_worker_thread+0x10/0x10
[  325.336916][ T5640]  ? __pfx_kthread+0x10/0x10
[  325.336955][ T5640]  ret_from_fork+0x514/0xb70
[  325.336996][ T5640]  ? __pfx_ret_from_fork+0x10/0x10
[  325.337034][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  325.337062][ T5640]  ? __switch_to+0xc89/0x1420
[  325.337105][ T5640]  ? __pfx_kthread+0x10/0x10
[  325.337146][ T5640]  ret_from_fork_asm+0x1a/0x30
[  325.337190][ T5640]  </TASK>
[  325.338181][ T5640] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  325.628249][ T5640] Bluetooth: hci4: failed to register connection device
[  325.963330][   T30] audit: type=1326 audit(1785223666.595:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.6.1325" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106639de99 code=0x7ffc0000
[  326.057887][   T30] audit: type=1326 audit(1785223666.595:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.6.1325" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106639de99 code=0x7ffc0000
[  326.154693][   T30] audit: type=1326 audit(1785223666.595:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.6.1325" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f106639de99 code=0x7ffc0000
[  326.290746][   T30] audit: type=1326 audit(1785223666.595:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.6.1325" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106639de99 code=0x7ffc0000
[  326.449373][   T30] audit: type=1326 audit(1785223666.595:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.6.1325" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106639de99 code=0x7ffc0000
[  326.587526][   T30] audit: type=1326 audit(1785223666.595:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.6.1325" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f106639de99 code=0x7ffc0000
[  326.648887][   T30] audit: type=1326 audit(1785223666.595:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.6.1325" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106639de99 code=0x7ffc0000
[  326.674366][   T30] audit: type=1326 audit(1785223666.595:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.6.1325" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106639de99 code=0x7ffc0000
[  326.701769][   T30] audit: type=1326 audit(1785223666.595:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.6.1325" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f106639de99 code=0x7ffc0000
[  326.727025][   T30] audit: type=1326 audit(1785223666.595:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.6.1325" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106639de99 code=0x7ffc0000
[  329.324393][T11134] overlayfs: failed to clone upperpath
[  329.504972][ T5281] 8021q: adding VLAN 0 to HW filter on device eth17
[  329.722587][T11153] overlayfs: failed to clone upperpath
[  330.351972][ T7029] IPVS: starting estimator thread 0...
[  330.462580][T11179] IPVS: using max 25 ests per chain, 60000 per kthread
[  330.475487][    C1] bridge0: port 3(syz_tun) entered forwarding state
[  330.482183][    C1] bridge0: topology change detected, propagating
[  330.954895][T11183] loop0: detected capacity change from 0 to 40427
[  330.966104][T11183] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[  330.973393][T11183] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  330.982056][T11183] F2FS-fs (loop0): Image doesn't support compression
[  330.992525][T11183] F2FS-fs (loop0): invalid crc value
[  331.077397][T11183] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  331.095621][T11183] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0
[  331.103270][T11183] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  331.116531][T11183] F2FS-fs (loop0): Start checkpoint disabled!
[  331.139938][T11183] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0
[  331.158525][T11183] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  331.166305][T11183] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  331.325890][T11183] F2FS-fs (loop0): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  331.334942][ T5281] 8021q: adding VLAN 0 to HW filter on device eth18
[  331.399916][T11195] tipc: Failed to remove unknown binding: 66,1,1/0:1139201008/1139201010
[  331.557138][ T9514] kworker/u8:26: attempt to access beyond end of device
[  331.557138][ T9514] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  331.616596][ T9514] CPU: 0 UID: 0 PID: 9514 Comm: kworker/u8:26 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  331.616634][ T9514] Tainted: [L]=SOFTLOCKUP
[  331.616643][ T9514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  331.616659][ T9514] Workqueue: writeback wb_workfn (flush-7:0)
[  331.616698][ T9514] Call Trace:
[  331.616708][ T9514]  <TASK>
[  331.616718][ T9514]  dump_stack_lvl+0xe8/0x150
[  331.616758][ T9514]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  331.616797][ T9514]  f2fs_write_end_io+0x124b/0x1710
[  331.616859][ T9514]  __submit_merged_bio+0x258/0x6a0
[  331.616890][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.616920][ T9514]  ? rcu_is_watching+0x15/0xb0
[  331.616951][ T9514]  f2fs_submit_merged_write+0x27d/0x380
[  331.616990][ T9514]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  331.617031][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.617069][ T9514]  f2fs_sync_node_pages+0x1055/0x1210
[  331.617124][ T9514]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  331.617156][ T9514]  ? __percpu_counter_sum+0x1c6/0x1f0
[  331.617216][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.617244][ T9514]  ? __lock_acquire+0x683/0x2cf0
[  331.617284][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.617315][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.617343][ T9514]  ? blk_start_plug+0x51/0x1b0
[  331.617388][ T9514]  f2fs_write_node_pages+0x311/0x700
[  331.617427][ T9514]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  331.617476][ T9514]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  331.617510][ T9514]  do_writepages+0x338/0x560
[  331.617555][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.617584][ T9514]  ? reacquire_held_locks+0x104/0x190
[  331.617616][ T9514]  ? writeback_sb_inodes+0x450/0x1b00
[  331.617659][ T9514]  __writeback_single_inode+0x12e/0xf90
[  331.617705][ T9514]  writeback_sb_inodes+0x9de/0x1b00
[  331.617738][ T9514]  ? __lock_acquire+0x683/0x2cf0
[  331.617803][ T9514]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  331.617885][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.617914][ T9514]  ? rcu_is_watching+0x15/0xb0
[  331.617937][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.617965][ T9514]  ? queue_io+0x2d3/0x470
[  331.618003][ T9514]  wb_writeback+0x41c/0xad0
[  331.618039][ T9514]  ? queue_io+0x261/0x470
[  331.618080][ T9514]  ? __pfx_wb_writeback+0x10/0x10
[  331.618110][ T9514]  ? do_raw_spin_lock+0x12b/0x2f0
[  331.618159][ T9514]  wb_workfn+0x431/0x10f0
[  331.618208][ T9514]  ? __pfx_wb_workfn+0x10/0x10
[  331.618235][ T9514]  ? rcu_is_watching+0x15/0xb0
[  331.618259][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.618287][ T9514]  ? trace_hrtimer_start+0x82/0x200
[  331.618327][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.618356][ T9514]  ? do_raw_spin_lock+0x12b/0x2f0
[  331.618388][ T9514]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  331.618421][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.618452][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.618490][ T9514]  ? rcu_is_watching+0x15/0xb0
[  331.618514][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.618544][ T9514]  ? process_scheduled_works+0xa20/0x14e0
[  331.618575][ T9514]  process_scheduled_works+0xa8e/0x14e0
[  331.618643][ T9514]  ? __pfx_process_scheduled_works+0x10/0x10
[  331.618680][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.618708][ T9514]  ? assign_work+0x3cf/0x5d0
[  331.618744][ T9514]  worker_thread+0xa47/0xfb0
[  331.618807][ T9514]  kthread+0x388/0x470
[  331.618845][ T9514]  ? __pfx_worker_thread+0x10/0x10
[  331.618874][ T9514]  ? __pfx_kthread+0x10/0x10
[  331.618914][ T9514]  ret_from_fork+0x514/0xb70
[  331.618956][ T9514]  ? __pfx_ret_from_fork+0x10/0x10
[  331.619013][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.619040][ T9514]  ? __switch_to+0xc89/0x1420
[  331.619075][ T9514]  ? __pfx_kthread+0x10/0x10
[  331.619114][ T9514]  ret_from_fork_asm+0x1a/0x30
[  331.619157][ T9514]  </TASK>
[  331.619190][ T9514] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  331.980050][ T5640] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  332.022111][ T5640] CPU: 1 UID: 0 PID: 5640 Comm: kworker/u9:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  332.022147][ T5640] Tainted: [L]=SOFTLOCKUP
[  332.022156][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  332.022171][ T5640] Workqueue: hci0 hci_rx_work
[  332.022204][ T5640] Call Trace:
[  332.022213][ T5640]  <TASK>
[  332.022223][ T5640]  dump_stack_lvl+0xe8/0x150
[  332.022266][ T5640]  sysfs_create_dir_ns+0x271/0x2a0
[  332.022305][ T5640]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  332.022347][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.022376][ T5640]  ? do_raw_spin_unlock+0xf5/0x210
[  332.022412][ T5640]  kobject_add_internal+0x622/0xcd0
[  332.022456][ T5640]  kobject_add+0x163/0x240
[  332.022488][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.022524][ T5640]  ? __pfx_kobject_add+0x10/0x10
[  332.022555][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.022586][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.022619][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.022647][ T5640]  ? get_device_parent+0x366/0x3a0
[  332.022681][ T5640]  device_add+0x3fa/0xb80
[  332.022712][ T5640]  hci_conn_add_sysfs+0xd5/0x210
[  332.022744][ T5640]  le_conn_complete_evt+0xfef/0x1580
[  332.022796][ T5640]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  332.022834][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.022862][ T5640]  ? __mutex_unlock_slowpath+0x731/0x900
[  332.022896][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.022924][ T5640]  ? skb_pull_data+0xf0/0x200
[  332.022963][ T5640]  hci_le_conn_complete_evt+0x187/0x470
[  332.023008][ T5640]  hci_event_packet+0x67a/0xf10
[  332.023046][ T5640]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  332.023080][ T5640]  ? __pfx_hci_event_packet+0x10/0x10
[  332.023122][ T5640]  ? audit_tree_freeing_mark+0x760/0xb20
[  332.023155][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.023183][ T5640]  ? hci_send_to_monitor+0xe2/0x590
[  332.023226][ T5640]  hci_rx_work+0x3ee/0x1020
[  332.023265][ T5640]  ? process_scheduled_works+0xa20/0x14e0
[  332.023296][ T5640]  process_scheduled_works+0xa8e/0x14e0
[  332.023359][ T5640]  ? __pfx_process_scheduled_works+0x10/0x10
[  332.023396][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.023424][ T5640]  ? assign_work+0x3cf/0x5d0
[  332.023460][ T5640]  worker_thread+0xa47/0xfb0
[  332.023523][ T5640]  kthread+0x388/0x470
[  332.023560][ T5640]  ? __pfx_worker_thread+0x10/0x10
[  332.023588][ T5640]  ? __pfx_kthread+0x10/0x10
[  332.023627][ T5640]  ret_from_fork+0x514/0xb70
[  332.023668][ T5640]  ? __pfx_ret_from_fork+0x10/0x10
[  332.023705][ T5640]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.023733][ T5640]  ? __switch_to+0xc89/0x1420
[  332.023769][ T5640]  ? __pfx_kthread+0x10/0x10
[  332.023807][ T5640]  ret_from_fork_asm+0x1a/0x30
[  332.023851][ T5640]  </TASK>
[  332.024918][ T5640] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  332.320165][ T5640] Bluetooth: hci0: failed to register connection device
[  332.337571][ T9514] CPU: 1 UID: 0 PID: 9514 Comm: kworker/u8:26 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  332.337607][ T9514] Tainted: [L]=SOFTLOCKUP
[  332.337616][ T9514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  332.337632][ T9514] Workqueue: writeback wb_workfn (flush-7:0)
[  332.337669][ T9514] Call Trace:
[  332.337680][ T9514]  <TASK>
[  332.337689][ T9514]  dump_stack_lvl+0xe8/0x150
[  332.337731][ T9514]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  332.337773][ T9514]  f2fs_write_end_io+0x124b/0x1710
[  332.337840][ T9514]  __submit_merged_bio+0x258/0x6a0
[  332.337873][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.337902][ T9514]  ? rcu_is_watching+0x15/0xb0
[  332.337935][ T9514]  f2fs_submit_merged_write+0x27d/0x380
[  332.337976][ T9514]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  332.338019][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.338059][ T9514]  f2fs_sync_node_pages+0x1055/0x1210
[  332.338125][ T9514]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  332.338159][ T9514]  ? __percpu_counter_sum+0x1c6/0x1f0
[  332.338225][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.338253][ T9514]  ? __lock_acquire+0x683/0x2cf0
[  332.338293][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.338325][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.338353][ T9514]  ? blk_start_plug+0x51/0x1b0
[  332.338397][ T9514]  f2fs_write_node_pages+0x311/0x700
[  332.338439][ T9514]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  332.338491][ T9514]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  332.338526][ T9514]  do_writepages+0x338/0x560
[  332.338572][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.338601][ T9514]  ? reacquire_held_locks+0x104/0x190
[  332.338626][ T9514]  ? writeback_sb_inodes+0x450/0x1b00
[  332.338669][ T9514]  __writeback_single_inode+0x12e/0xf90
[  332.338718][ T9514]  writeback_sb_inodes+0x9de/0x1b00
[  332.338751][ T9514]  ? __lock_acquire+0x683/0x2cf0
[  332.338823][ T9514]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  332.338913][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.338941][ T9514]  ? rcu_is_watching+0x15/0xb0
[  332.338963][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.339002][ T9514]  ? queue_io+0x2d3/0x470
[  332.339036][ T9514]  wb_writeback+0x41c/0xad0
[  332.339070][ T9514]  ? queue_io+0x261/0x470
[  332.339112][ T9514]  ? __pfx_wb_writeback+0x10/0x10
[  332.339139][ T9514]  ? do_raw_spin_lock+0x12b/0x2f0
[  332.339187][ T9514]  wb_workfn+0x431/0x10f0
[  332.339235][ T9514]  ? __pfx_wb_workfn+0x10/0x10
[  332.339259][ T9514]  ? rcu_is_watching+0x15/0xb0
[  332.339280][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.339305][ T9514]  ? trace_hrtimer_start+0x82/0x200
[  332.339343][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.339367][ T9514]  ? do_raw_spin_lock+0x12b/0x2f0
[  332.339397][ T9514]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  332.339427][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.339456][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.339491][ T9514]  ? rcu_is_watching+0x15/0xb0
[  332.339512][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.339540][ T9514]  ? process_scheduled_works+0xa20/0x14e0
[  332.339571][ T9514]  process_scheduled_works+0xa8e/0x14e0
[  332.339634][ T9514]  ? __pfx_process_scheduled_works+0x10/0x10
[  332.339669][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.339694][ T9514]  ? assign_work+0x3cf/0x5d0
[  332.339728][ T9514]  worker_thread+0xa47/0xfb0
[  332.339790][ T9514]  kthread+0x388/0x470
[  332.339824][ T9514]  ? __pfx_worker_thread+0x10/0x10
[  332.339849][ T9514]  ? __pfx_kthread+0x10/0x10
[  332.339889][ T9514]  ret_from_fork+0x514/0xb70
[  332.339926][ T9514]  ? __pfx_ret_from_fork+0x10/0x10
[  332.339959][ T9514]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.339984][ T9514]  ? __switch_to+0xc89/0x1420
[  332.340016][ T9514]  ? __pfx_kthread+0x10/0x10
[  332.340051][ T9514]  ret_from_fork_asm+0x1a/0x30
[  332.340099][ T9514]  </TASK>
[  332.340363][ T9514] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  332.410062][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1365'.
[  332.754446][ T5634] loop0: lost filesystem error report for type 5 error -108
[  332.817151][T11221] macvlan0: entered promiscuous mode
[  332.861333][ T7036] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  332.923361][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1366'.
[  333.021298][ T7036] usb 4-1: Using ep0 maxpacket: 8
[  333.035160][ T7036] usb 4-1: config 0 has no interfaces?
[  333.050251][ T7036] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  333.069043][ T7036] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.112939][ T7036] usb 4-1: Product: syz
[  333.132155][ T7036] usb 4-1: Manufacturer: syz
[  333.155025][ T5639] Bluetooth: hci1: unexpected event for opcode 0x200b
[  333.164987][ T7036] usb 4-1: SerialNumber: syz
[  333.196777][ T7036] usb 4-1: config 0 descriptor??
[  333.582277][ T5771] usb 4-1: USB disconnect, device number 4
[  333.626216][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1370'.
[  333.670338][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1370'.
[  333.737084][T11210] loop6: detected capacity change from 0 to 32768
[  333.881673][T11241] fuse: fd is not a fuse device
[  333.935788][T11245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1372'.
[  333.993012][T11245] hsr_slave_0 (unregistering): left promiscuous mode
[  334.231941][T11258] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  334.383666][ T5281] 8021q: adding VLAN 0 to HW filter on device eth19
[  334.820766][T11276] overlayfs: failed to clone upperpath
[  335.136726][T11284] loop6: detected capacity change from 0 to 512
[  335.219528][T11284] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.586903][ T6666] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.762666][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1384'.
[  335.819646][T11302] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.912846][T11302] batman_adv: batadv0: Removing interface: batadv_slave_1
[  335.991761][T11313] fuse: fd is not a fuse device
[  336.653028][ T5281] 8021q: adding VLAN 0 to HW filter on device eth20
[  337.202435][T11338] loop0: detected capacity change from 0 to 32768
[  337.258730][T11338] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  337.267608][T11338] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  337.353821][T11338] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  337.363476][ T7036] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  337.371475][ T7036] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  337.740177][ T7036] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 368ms
[  337.781968][T11353] tipc: Started in network mode
[  337.804344][ T7036] gfs2: fsid=syz:syz.0: jid=0: Done
[  337.830507][T11353] tipc: Node identity 1000001, cluster identity 4711
[  337.845889][T11338] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  337.884404][T11353] tipc: Node number set to 16777217
[  338.028439][T11357] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  338.494953][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  338.494973][   T30] audit: type=1804 audit(1785223679.125:78): pid=11338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1397" name="/newroot/48/file0/file0" dev="loop0" ino=9378 res=1 errno=0
[  338.771505][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  338.903851][T11366] syz_tun (unregistering): left allmulticast mode
[  339.750673][T11366] bond4: (slave syz_tun): Releasing backup interface
[  339.770020][ T5640] Bluetooth: hci0: command 0x0406 tx timeout
[  340.649415][T11405] loop6: detected capacity change from 0 to 1024
[  340.710137][T11405] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  340.794219][T11405] EXT4-fs (loop6): required journal recovery suppressed and not mounted read-only
[  340.960426][T11405] loop6: detected capacity change from 0 to 1024
[  340.997279][T11405] EXT4-fs: Ignoring removed orlov option
[  341.091152][T11405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  341.205717][T11405] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  341.378054][T11405] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.1409: Freeing blocks not in datazone - block = 0, count = 16
[  341.628083][ T9275] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:20: bg 0: block 112: padding at end of block bitmap is not set
[  341.727555][ T9275] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  341.784129][ T9275] EXT4-fs (loop6): This should not happen!! Data will be lost
[  341.784129][ T9275] 
[  341.813780][ T9275] EXT4-fs (loop6): Total free blocks count 0
[  341.831903][ T9275] EXT4-fs (loop6): Free/Dirty block details
[  341.854068][ T9275] EXT4-fs (loop6): free_blocks=16
[  341.872235][ T9275] EXT4-fs (loop6): dirty_blocks=16
[  341.890039][ T9275] EXT4-fs (loop6): Block reservation details
[  341.909199][ T9275] EXT4-fs (loop6): i_reserved_data_blocks=1
[  341.943875][ T6666] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  342.013240][ T6666] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  342.641869][T11474] fuse: fd is not a fuse device
[  343.283906][T11500] fuse: fd is not a fuse device
[  343.727447][   T30] audit: type=1326 audit(1785223684.355:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.6.1431" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f106639de99 code=0x0
[  343.872453][T11520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1434'.
[  344.446145][T11542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1439'.
[  345.734749][ T7036] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  345.903869][ T7036] usb 4-1: Using ep0 maxpacket: 32
[  347.965034][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1460'.
[  347.980925][T11614] netlink: 'syz.5.1459': attribute type 1 has an invalid length.
[  348.215858][T11614] 8021q: adding VLAN 0 to HW filter on device bond5
[  348.366944][ T7036] usb 4-1: unable to get BOS descriptor or descriptor too short
[  348.401574][ T7036] usb 4-1: unable to read config index 0 descriptor/start: -71
[  348.428262][ T7036] usb 4-1: can't read configurations, error -71
[  348.575400][T11620] 8021q: adding VLAN 0 to HW filter on device bond5
[  348.593984][T11620] bond5: (slave vti0): The slave device specified does not support setting the MAC address
[  348.627855][T11620] bond5: (slave vti0): Error -95 calling set_mac_address
[  348.705391][T11623] gretap3: entered promiscuous mode
[  348.743981][T11623] bond5: (slave gretap3): making interface the new active one
[  348.780057][T11623] bond5: (slave gretap3): Enslaving as an active interface with an up link
[  348.800712][T11644] netlink: 'syz.0.1465': attribute type 4 has an invalid length.
[  348.853060][T11646] netlink: 'syz.0.1465': attribute type 4 has an invalid length.
[  349.085199][T11651] pim6reg: entered allmulticast mode
[  350.348647][T11686] loop6: detected capacity change from 0 to 256
[  350.380001][T11686] exfat: Deprecated parameter 'namecase'
[  350.429592][T11686] exfat: Deprecated parameter 'namecase'
[  350.539311][T11686] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  350.657469][T11686] exfat filesystem being mounted at /194/éq‰Y’3aK supports timestamps until 2107-12-31 (0x10391447f)
[  350.868065][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1476'.
[  351.858349][T11713] PKCS8: Unsupported PKCS#8 version
[  352.635325][T11740] ref_ctr increment failed for inode: 0x118 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880469672c0
[  352.823026][T11746] netlink: 'syz.6.1490': attribute type 12 has an invalid length.
[  353.089885][T11757] syz_tun: entered allmulticast mode
[  353.484277][T11771] fuse: Bad value for 'fd'
[  354.075839][T11779] loop0: detected capacity change from 0 to 40427
[  354.084856][T11779] F2FS-fs: heap/no_heap options were deprecated
[  354.094145][T11779] F2FS-fs (loop0): build fault injection rate: 19
[  354.100605][T11779] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  354.110199][T11779] F2FS-fs (loop0): invalid crc value
[  354.146051][T11779] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0
[  354.220528][T11779] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  354.245194][T11779] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  354.262603][T11779] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  354.378204][T11779] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[  354.402327][T11779] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0
[  354.419527][T11779] F2FS-fs (loop0): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x355/0xdc0
[  354.438956][T11779] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0
[  354.517291][T11779] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  354.708634][T11779] syz.0.1501: attempt to access beyond end of device
[  354.708634][T11779] loop0: rw=2049, sector=45096, nr_sectors = 32 limit=40427
[  354.733226][T11779] F2FS-fs (loop0): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8c1/0xdf0
[  354.745744][T11779] F2FS-fs (loop0): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[  355.000315][    C0] F2FS-fs (loop0): inject inconsistent footer in f2fs_sanity_check_node_footer of f2fs_write_end_io+0x90d/0x1710
[  355.377430][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  355.377471][    C0] Tainted: [L]=SOFTLOCKUP
[  355.377481][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  355.377496][    C0] Call Trace:
[  355.377517][    C0]  <TASK>
[  355.377528][    C0]  dump_stack_lvl+0xe8/0x150
[  355.377571][    C0]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  355.377611][    C0]  f2fs_write_end_io+0x124b/0x1710
[  355.377673][    C0]  blk_update_request+0x57b/0xe50
[  355.377720][    C0]  blk_mq_end_request+0x3e/0x70
[  355.377754][    C0]  blk_done_softirq+0x10a/0x160
[  355.377787][    C0]  handle_softirqs+0x225/0x840
[  355.377821][    C0]  ? run_ksoftirqd+0x36/0x60
[  355.377863][    C0]  run_ksoftirqd+0x36/0x60
[  355.377895][    C0]  smpboot_thread_fn+0x57c/0xa80
[  355.377931][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  355.377972][    C0]  kthread+0x388/0x470
[  355.378010][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  355.378040][    C0]  ? __pfx_kthread+0x10/0x10
[  355.378078][    C0]  ret_from_fork+0x514/0xb70
[  355.378118][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  355.378154][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.378182][    C0]  ? __switch_to+0xc89/0x1420
[  355.378217][    C0]  ? __pfx_kthread+0x10/0x10
[  355.378255][    C0]  ret_from_fork_asm+0x1a/0x30
[  355.378297][    C0]  </TASK>
[  355.378306][    C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  355.516450][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  355.516488][    C0] Tainted: [L]=SOFTLOCKUP
[  355.516497][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  355.516518][    C0] Call Trace:
[  355.516528][    C0]  <TASK>
[  355.516539][    C0]  dump_stack_lvl+0xe8/0x150
[  355.516582][    C0]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  355.516622][    C0]  f2fs_write_end_io+0x124b/0x1710
[  355.516682][    C0]  blk_update_request+0x57b/0xe50
[  355.516734][    C0]  blk_mq_end_request+0x3e/0x70
[  355.516772][    C0]  blk_done_softirq+0x10a/0x160
[  355.516808][    C0]  handle_softirqs+0x225/0x840
[  355.516844][    C0]  ? run_ksoftirqd+0x36/0x60
[  355.516887][    C0]  run_ksoftirqd+0x36/0x60
[  355.516922][    C0]  smpboot_thread_fn+0x57c/0xa80
[  355.516960][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  355.517003][    C0]  kthread+0x388/0x470
[  355.517042][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  355.517075][    C0]  ? __pfx_kthread+0x10/0x10
[  355.517114][    C0]  ret_from_fork+0x514/0xb70
[  355.517157][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  355.517194][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.517223][    C0]  ? __switch_to+0xc89/0x1420
[  355.517261][    C0]  ? __pfx_kthread+0x10/0x10
[  355.517300][    C0]  ret_from_fork_asm+0x1a/0x30
[  355.517343][    C0]  </TASK>
[  355.517353][    C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  355.655421][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  355.655458][    C0] Tainted: [L]=SOFTLOCKUP
[  355.655467][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  355.655482][    C0] Call Trace:
[  355.655491][    C0]  <TASK>
[  355.655505][    C0]  dump_stack_lvl+0xe8/0x150
[  355.655547][    C0]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  355.655587][    C0]  f2fs_write_end_io+0x124b/0x1710
[  355.655648][    C0]  blk_update_request+0x57b/0xe50
[  355.655695][    C0]  blk_mq_end_request+0x3e/0x70
[  355.655729][    C0]  blk_done_softirq+0x10a/0x160
[  355.655761][    C0]  handle_softirqs+0x225/0x840
[  355.655797][    C0]  ? run_ksoftirqd+0x36/0x60
[  355.655840][    C0]  run_ksoftirqd+0x36/0x60
[  355.655873][    C0]  smpboot_thread_fn+0x57c/0xa80
[  355.655910][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  355.655953][    C0]  kthread+0x388/0x470
[  355.655992][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  355.656025][    C0]  ? __pfx_kthread+0x10/0x10
[  355.656064][    C0]  ret_from_fork+0x514/0xb70
[  355.656106][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  355.656144][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.656175][    C0]  ? __switch_to+0xc89/0x1420
[  355.656211][    C0]  ? __pfx_kthread+0x10/0x10
[  355.656250][    C0]  ret_from_fork_asm+0x1a/0x30
[  355.656299][    C0]  </TASK>
[  355.656308][    C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  355.794666][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  355.794696][    C0] Tainted: [L]=SOFTLOCKUP
[  355.794703][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  355.794716][    C0] Call Trace:
[  355.794724][    C0]  <TASK>
[  355.794732][    C0]  dump_stack_lvl+0xe8/0x150
[  355.794770][    C0]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  355.794804][    C0]  f2fs_write_end_io+0x124b/0x1710
[  355.794858][    C0]  blk_update_request+0x57b/0xe50
[  355.794897][    C0]  blk_mq_end_request+0x3e/0x70
[  355.794925][    C0]  blk_done_softirq+0x10a/0x160
[  355.794953][    C0]  handle_softirqs+0x225/0x840
[  355.794983][    C0]  ? run_ksoftirqd+0x36/0x60
[  355.795020][    C0]  run_ksoftirqd+0x36/0x60
[  355.795047][    C0]  smpboot_thread_fn+0x57c/0xa80
[  355.795079][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  355.795113][    C0]  kthread+0x388/0x470
[  355.795146][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  355.795174][    C0]  ? __pfx_kthread+0x10/0x10
[  355.795207][    C0]  ret_from_fork+0x514/0xb70
[  355.795242][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  355.795273][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.795301][    C0]  ? __switch_to+0xc89/0x1420
[  355.795337][    C0]  ? __pfx_kthread+0x10/0x10
[  355.795376][    C0]  ret_from_fork_asm+0x1a/0x30
[  355.795418][    C0]  </TASK>
[  355.795428][    C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  355.934142][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  355.934180][    C0] Tainted: [L]=SOFTLOCKUP
[  355.934190][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  355.934205][    C0] Call Trace:
[  355.934214][    C0]  <TASK>
[  355.934224][    C0]  dump_stack_lvl+0xe8/0x150
[  355.934266][    C0]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  355.934308][    C0]  f2fs_write_end_io+0x124b/0x1710
[  355.934369][    C0]  blk_update_request+0x57b/0xe50
[  355.934419][    C0]  blk_mq_end_request+0x3e/0x70
[  355.934454][    C0]  blk_done_softirq+0x10a/0x160
[  355.934488][    C0]  handle_softirqs+0x225/0x840
[  355.934533][    C0]  ? run_ksoftirqd+0x36/0x60
[  355.934576][    C0]  run_ksoftirqd+0x36/0x60
[  355.934610][    C0]  smpboot_thread_fn+0x57c/0xa80
[  355.934647][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  355.934691][    C0]  kthread+0x388/0x470
[  355.934730][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  355.934762][    C0]  ? __pfx_kthread+0x10/0x10
[  355.934802][    C0]  ret_from_fork+0x514/0xb70
[  355.934844][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  355.934883][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  355.934912][    C0]  ? __switch_to+0xc89/0x1420
[  355.934949][    C0]  ? __pfx_kthread+0x10/0x10
[  355.934988][    C0]  ret_from_fork_asm+0x1a/0x30
[  355.935032][    C0]  </TASK>
[  355.935041][    C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  356.073783][ T9705] F2FS-fs (loop0): do_checkpoint failed err:-5, stop checkpoint
[  356.227362][ T7036] loop0: lost filesystem error report for type 5 error -108
[  356.767661][T11823] loop6: detected capacity change from 0 to 32768
[  356.782702][T11823] btrfs: Deprecated parameter 'usebackuproot'
[  356.788787][T11823] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  356.823365][T11823] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1512 (11823)
[  356.848092][T11823] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  356.858361][T11823] BTRFS info (device loop6): using crc32c checksum algorithm
[  356.865811][T11823] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  356.968806][   T48] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  357.095681][   T30] audit: type=1326 audit(3932707345.723:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.8.1509" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf41f9de99 code=0x7ffc0000
[  357.108418][T11823] BTRFS error (device loop6): failed to load root extent
[  357.127801][T11823] BTRFS warning (device loop6): try to load backup roots slot 1
[  357.151641][   T48] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  357.217275][T11823] BTRFS warning (device loop6): couldn't read tree root
[  357.228471][T11823] BTRFS warning (device loop6): try to load backup roots slot 2
[  357.240184][   T36] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  357.270325][   T30] audit: type=1326 audit(3932707345.723:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.8.1509" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7faf41f9de99 code=0x7ffc0000
[  357.307512][T11823] BTRFS warning (device loop6): couldn't read tree root
[  357.316657][T11823] BTRFS warning (device loop6): try to load backup roots slot 3
[  357.344083][T11823] BTRFS info (device loop6): rebuilding free space tree
[  357.416365][T11823] BTRFS info (device loop6): disabling free space tree
[  357.424131][T11823] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  357.433909][T11823] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  357.445127][   T30] audit: type=1326 audit(3932707345.723:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.8.1509" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf41f9de99 code=0x7ffc0000
[  357.448825][T11823] BTRFS info (device loop6): checking UUID tree
[  357.501857][T11823] BTRFS info (device loop6): enabling ssd optimizations
[  357.508878][T11823] BTRFS info (device loop6): turning on async discard
[  357.516457][T11823] BTRFS info (device loop6): enabling disk space caching
[  357.524203][T11823] BTRFS info (device loop6): force clearing of disk cache
[  357.531397][T11823] BTRFS info (device loop6): enabling auto defrag
[  357.537826][T11823] BTRFS info (device loop6): trying to use backup root at mount time
[  357.545982][T11823] BTRFS info (device loop6): use zstd compression, level 3
[  357.627148][   T30] audit: type=1326 audit(3932707345.753:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.8.1509" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf41f9de99 code=0x7ffc0000
[  357.788855][   T30] audit: type=1326 audit(3932707345.813:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.8.1509" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf41f5e6ce code=0x7ffc0000
[  357.834509][ T6666] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  357.841281][   T30] audit: type=1326 audit(3932707345.813:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.8.1509" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf41f5e6ce code=0x7ffc0000
[  357.928766][   T30] audit: type=1326 audit(3932707345.823:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.8.1509" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf41f5e6ce code=0x7ffc0000
[  358.064315][   T30] audit: type=1326 audit(3932707345.823:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.8.1509" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf41f5e6ce code=0x7ffc0000
[  358.093592][   T30] audit: type=1326 audit(3932707345.833:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.8.1509" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf41f5e6ce code=0x7ffc0000
[  358.119465][   T30] audit: type=1326 audit(3932707345.833:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.8.1509" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf41f5e6ce code=0x7ffc0000
[  358.910343][T11893] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1526'.
[  359.635848][T11916] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1533'.
[  359.715682][ T8658] bond2: (slave dummy0): link status up again after 0 ms
[  359.716144][T11918] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1533'.
[  359.802756][ T9518] bond2: (slave dummy0): link status up again after 0 ms
[  359.862795][ T9518] bond2: (slave dummy0): link status up again after 0 ms
[  359.914480][ T8658] bond2: (slave dummy0): link status up again after 0 ms
[  359.970666][ T8658] bond2: (slave gretap1): link status up again after 0 ms
[  360.010128][ T8658] bond2: (slave dummy0): link status up again after 0 ms
[  360.071854][ T8658] bond2: (slave gretap1): link status up again after 0 ms
[  360.107614][ T8658] bond2: (slave dummy0): link status up again after 0 ms
[  360.164847][ T9514] bond2: (slave gretap1): link status up again after 0 ms
[  360.200169][ T9514] bond2: (slave dummy0): link status up again after 0 ms
[  360.792503][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1538'.
[  360.822051][T11941] netlink: 'syz.1.1539': attribute type 39 has an invalid length.
[  361.455873][T11960] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1544'.
[  361.489757][T11960] netlink: 'syz.6.1544': attribute type 3 has an invalid length.
[  361.533427][T11960] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1544'.
[  361.565595][T11917] configfs-gadget.g1 gadget.0: Error: incorrect playback sampling rate
[  361.590363][T11960] netlink: 'syz.6.1544': attribute type 3 has an invalid length.
[  363.484966][T11994] binder: 11993:11994 ioctl c0306201 2000000003c0 returned -14
[  363.505690][T11996] 9p: Bad value for 'rfdno'
[  363.865405][T12004] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1554'.
[  363.963834][T12004] unsupported nlmsg_type 40
[  364.430195][T12015] fuse: fd is not a fuse device
[  364.545441][T11917] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI
[  364.557551][T11917] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737]
[  364.565963][T11917] CPU: 1 UID: 0 PID: 11917 Comm: syz.0.1531 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  364.576897][T11917] Tainted: [L]=SOFTLOCKUP
[  364.581211][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  364.591267][T11917] RIP: 0010:f_midi2_free_ep+0x52/0x2f0
[  364.596736][T11917] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 33 03 64 fa 41 bc 30 07 00 00 4d 03 26 4c 89 e0 48 c1 e8 03 48 89 44 24 30 <0f> b6 04 28 84 c0 0f 85 5d 02 00 00 41 8b 1c 24 31 ff 89 de e8 f5
[  364.616333][T11917] RSP: 0018:ffffc90013377708 EFLAGS: 00010212
[  364.622399][T11917] RAX: 00000000000000e6 RBX: ffff8880534d4000 RCX: 0000000000080000
[  364.630359][T11917] RDX: ffffc9001069d000 RSI: 0000000000026625 RDI: 0000000000026626
[  364.638321][T11917] RBP: dffffc0000000000 R08: ffffffff90579137 R09: 1ffffffff20af226
[  364.646293][T11917] R10: dffffc0000000000 R11: fffffbfff20af227 R12: 0000000000000730
[  364.654253][T11917] R13: dffffc0000000000 R14: ffff8880534d4128 R15: dffffc0000000000
[  364.662216][T11917] FS:  00007f87ce2e16c0(0000) GS:ffff88812504e000(0000) knlGS:0000000000000000
[  364.671133][T11917] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  364.677701][T11917] CR2: 00007ffd6b871608 CR3: 000000005b135000 CR4: 0000000000350ef0
[  364.685667][T11917] Call Trace:
[  364.688932][T11917]  <TASK>
[  364.691852][T11917]  f_midi2_unbind+0x9b/0x340
[  364.696446][T11917]  purge_configs_funcs+0x248/0x3d0
[  364.701554][T11917]  configfs_composite_bind+0x106d/0x1410
[  364.707183][T11917]  ? __pfx_configfs_composite_bind+0x10/0x10
[  364.713190][T11917]  gadget_bind_driver+0x2ca/0x9e0
[  364.718217][T11917]  ? __pfx_gadget_bind_driver+0x10/0x10
[  364.723756][T11917]  really_probe+0x254/0xae0
[  364.728261][T11917]  __driver_probe_device+0x1e8/0x360
[  364.733542][T11917]  driver_probe_device+0x4f/0x240
[  364.738569][T11917]  __driver_attach+0x339/0x600
[  364.743328][T11917]  bus_for_each_dev+0x23b/0x2c0
[  364.748179][T11917]  ? __pfx___driver_attach+0x10/0x10
[  364.753460][T11917]  ? __pfx_bus_for_each_dev+0x10/0x10
[  364.758839][T11917]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.764465][T11917]  ? do_raw_spin_unlock+0xf5/0x210
[  364.769577][T11917]  bus_add_driver+0x345/0x670
[  364.774265][T11917]  driver_register+0x23a/0x320
[  364.779034][T11917]  usb_gadget_register_driver_owner+0xf9/0x270
[  364.785188][T11917]  gadget_dev_desc_UDC_store+0x1c9/0x2f0
[  364.790821][T11917]  ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10
[  364.796972][T11917]  configfs_write_iter+0x337/0x430
[  364.802091][T11917]  vfs_write+0x612/0xba0
[  364.806327][T11917]  ? __pfx_vfs_write+0x10/0x10
[  364.811088][T11917]  ? __fget_files+0x2a/0x420
[  364.815678][T11917]  ? srso_alias_return_thunk+0x5/0xfbef5
[  364.821308][T11917]  ksys_write+0x150/0x270
[  364.825627][T11917]  ? __pfx_ksys_write+0x10/0x10
[  364.830500][T11917]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.836561][T11917]  do_syscall_64+0x174/0x580
[  364.841145][T11917]  ? trace_irq_disable+0x3b/0x140
[  364.846279][T11917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.852160][T11917] RIP: 0033:0x7f87cd39de99
[  364.856561][T11917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  364.876155][T11917] RSP: 002b:00007f87ce2e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  364.884562][T11917] RAX: ffffffffffffffda RBX: 00007f87cd625fa0 RCX: 00007f87cd39de99
[  364.892530][T11917] RDX: 000000000000000b RSI: 0000200000000d00 RDI: 0000000000000004
[  364.900490][T11917] RBP: 00007f87cd433eaf R08: 0000000000000000 R09: 0000000000000000
[  364.908450][T11917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  364.916405][T11917] R13: 00007f87cd626038 R14: 00007f87cd625fa0 R15: 00007ffc5f536408
[  364.924375][T11917]  </TASK>
[  364.927376][T11917] Modules linked in:
[  364.932768][T11917] ---[ end trace 0000000000000000 ]---
[  364.934906][ T9514] net_ratelimit: 62 callbacks suppressed
[  364.934923][ T9514] bond2: (slave gretap1): failed to get link speed/duplex
[  364.953381][ T9514] bond2: (slave dummy0): failed to get link speed/duplex
[  365.004336][T12021] tipc: Started in network mode
[  365.017700][T12021] tipc: Node identity 2007ff, cluster identity 4711
[  365.028586][T11917] RIP: 0010:f_midi2_free_ep+0x52/0x2f0
[  365.057546][T11917] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 33 03 64 fa 41 bc 30 07 00 00 4d 03 26 4c 89 e0 48 c1 e8 03 48 89 44 24 30 <0f> b6 04 28 84 c0 0f 85 5d 02 00 00 41 8b 1c 24 31 ff 89 de e8 f5
[  365.135101][T12021] tipc: Node number set to 2099199
[  365.183140][ T9514] bond2: (slave gretap1): failed to get link speed/duplex
[  365.187445][T11917] RSP: 0018:ffffc90013377708 EFLAGS: 00010212
[  365.191050][ T9514] bond2: (slave dummy0): failed to get link speed/duplex
[  365.191670][T11917] 
[  365.197634][ T9275] tipc: Subscription rejected, illegal request
[  365.207860][T11917] RAX: 00000000000000e6 RBX: ffff8880534d4000 RCX: 0000000000080000
[  365.221041][T11917] RDX: ffffc9001069d000 RSI: 0000000000026625 RDI: 0000000000026626
[  365.230006][T11917] RBP: dffffc0000000000 R08: ffffffff90579137 R09: 1ffffffff20af226
[  365.238588][T11917] R10: dffffc0000000000 R11: fffffbfff20af227 R12: 0000000000000730
[  365.287625][T11917] R13: dffffc0000000000 R14: ffff8880534d4128 R15: dffffc0000000000
[  365.317653][T11917] FS:  00007f87ce2e16c0(0000) GS:ffff88812504e000(0000) knlGS:0000000000000000
[  365.326949][ T9275] bond2: (slave gretap1): failed to get link speed/duplex
[  365.337687][T11917] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  365.343232][ T9275] bond2: (slave dummy0): failed to get link speed/duplex
[  365.372725][T11917] CR2: 00007ffcc8751cf0 CR3: 000000005b135000 CR4: 0000000000350ef0
[  365.389510][T11917] Kernel panic - not syncing: Fatal exception
[  365.395785][T11917] Kernel Offset: disabled
[  365.400093][T11917] Rebooting in 86400 seconds..