last executing test programs:

12m21.908948108s ago: executing program 2 (id=472):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)
fchown(r0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0))

12m20.083099095s ago: executing program 2 (id=480):
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000001400b59523000000ddffffff0a400000a4f99a2c3084ce88198adbfc47"], 0x18}}, 0x40)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12m19.262017312s ago: executing program 2 (id=484):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = eventfd2(0xfffffffe, 0x1)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x0, r1})
close_range(r0, 0xffffffffffffffff, 0x0)

12m18.96014211s ago: executing program 2 (id=487):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x208}, 0x50)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x80, &(0x7f0000000b80)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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")
ftruncate(0xffffffffffffffff, 0x81fe)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x800000d}, 0x1c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup2(r2, r2)
read$FUSE(r3, &(0x7f0000002240)={0x2020, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0}, 0x75d)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000080)={0xa0, 0x0, r5, {{0x5, 0x3, 0x7, 0x2, 0x2, 0x8, {0x2, 0x3, 0x9, 0x0, 0xffffffffffffffea, 0x5, 0x40, 0x6, 0x7, 0x6000, 0x7, r6, r7, 0x3, 0x3}}, {0x0, 0x12}}}, 0xa0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2)
io_cancel(0x0, 0x0, 0x0)

12m18.601454111s ago: executing program 2 (id=489):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_async', 0x88802, 0x3a)
close_range(r0, 0xffffffffffffffff, 0x2)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0)

12m17.441780559s ago: executing program 2 (id=493):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00')
write$sysctl(r3, &(0x7f00000003c0)='4\x00', 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12m17.000995025s ago: executing program 32 (id=493):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00')
write$sysctl(r3, &(0x7f00000003c0)='4\x00', 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m14.33909509s ago: executing program 3 (id=1011):
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$phonet_pipe(0x23, 0x5, 0x2)

9m12.269188661s ago: executing program 3 (id=1022):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r0, 0x0, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$inet(0x2, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)
unshare(0x400)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_audit(0x10, 0x3, 0x9)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x800000200000000, 0x4ff8a366, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4000, 0x4000, 0x9, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0x0)

9m9.940182836s ago: executing program 3 (id=1026):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0)

9m8.304918471s ago: executing program 3 (id=1031):
sched_setaffinity(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x10, 0xad, 0x7fc00000}]})
syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read(r0, &(0x7f0000000440)=""/190, 0xbe)
read(r0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800003, 0x0)

9m6.997199898s ago: executing program 3 (id=1036):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000052000102"], 0x14}}, 0x40044c4)
recvmmsg$unix(r0, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/172, 0xac}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2}}], 0x1, 0x40, 0x0)

9m6.727111514s ago: executing program 3 (id=1037):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x2000)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x0, 0xa0, @buffer={0x310, 0xffd, &(0x7f00000014c0)=""/4093}, &(0x7f0000000080), 0x0, 0x1, 0xe, 0xffffffffffffffff, 0x0})
move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)

8m50.458233721s ago: executing program 33 (id=1037):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x2000)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x0, 0xa0, @buffer={0x310, 0xffd, &(0x7f00000014c0)=""/4093}, &(0x7f0000000080), 0x0, 0x1, 0xe, 0xffffffffffffffff, 0x0})
move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)

10.401088785s ago: executing program 1 (id=2653):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1600008, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESDEC], 0x3, 0x632, &(0x7f0000000800)="$eJzs3UtsG2kdAPD/OI4TB9TN7qa7Ba1EtJUWRESbh7IQLpSHUA4rtFoOnKPWbay6aZW4KK0QCi9x4MKh4lwOuXFC6j1SOcMF9ZpjJVAvPaDcjGY8dpy386qd7e8Xjb/v8zfzzX/+9jzsyJoA3lrzE1HciCTmJz5bTdub6zO1zfWZoby7FhFpvRBRbBaRLEUkz5vdN9KHr6VP5vMnB63nSXXuixevN182W8XWwkkprQ0fvNxRmguu5VOMR8RAXu412O2oO8a7eeB4+/nvn/YPshlous1XW4mDXmvssXacxU+83wL9I2meN/cYjRjJztDN64DIjw6FNxvd2TvWUQ4AAAAuqHe2Ymut0Wj0Og4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4SPL7/yf5VGjVxyNp3f+/1DF7qYehnomNXgcAAAAAAAAAACfSGOhsfWMrtmI1LrV7k+x//h9njbHs8SvxMFaiEstxLVZjIepRj+WYiojRjoFKqwv1+vJUF0tO77vk9LluNAAAAAAAAAB82f025rf//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP0giRhoFtk01qqPRqEYEcMRUUrnW4v4V6t+kW30OgAAAAB4A97Ziq1YjUutdiPJPvN/kH3uH46HsRT1qEY9alGJW9l3Ac1P/YXN9Zna5vrMvXTaO+5f/tfIdBlGNmI0v3vYf81XsjnKcTuq2TPX4mbcj1q5c5QrrXj2j+s3r9Kxf5DrMrJbeZlu+Z/zsj+MZhkZbGdkMo8tzeO7h2fih69OtaapKLS/+Rk7h5yP5GWyq+y93ZmYjkKW79QHh2ci4pvP/vaLxdrS3cXbKxP9s0kn1MxEo9HMxFDWamXiw7cqE5PZtl9ut+fjp/HzmIjx+DyWoxq/jIWoRyXG4ydZbSF/P6ePo7syVdg59I0drc+PiqSUvy7No+jxYvo4W/ZSVONncT9uRSU+zf6mYyq+G7MxG3Mdr/DlLvb6wvH2+qvfyivpIf2Pedkf0ry+25HXzmPuaNbX+cx2lt47+2Nj8et5JV3H7yLix2e4naezOxPpWeLZV5t97x+eib9m1wkrtaW7y4sLD7pc3yd5me5Hf+irs0T6fnkvfbGy1s53R9r3/r59U1nfWLuvsKfvcrvvqD21lF/D7R1pOuv7cN++mazvSkffnuut9vUQAH1s5NsjpfJ/yv8sPy3/vrxY/mz4R0PfG/qoFIP/GPx+cXLgk8JHyd/jafx6+/M/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwciuPHt9dqNUqy0dWkuzm/xFdzdxRad3O6fCZk/xGPscZWaVWqwxHX4RxrErt3xEdzyS9jqcfKkP99ubv7XEJOH/X6/ceXF959Pg71XsLdyp3KkuDs7Nzk3Ozn85cv12tDUT6WJnsdZTAedg+6fc6EgAAAAAAAAAAAKBbh/8MYDCf63Q/J+jxJgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX3PxEFDciianJa5Npe3N9ppZOrfr2nMWIKERE8quI5HnEjWhOMdoxXHLQep5U57548Xrz5fZYxdb8hcOW685aPsV4RAzk5VmNd/PU4yXtLUwTdrV0uuDgzPw/AAD//4oVCL4=")
syz_emit_ethernet(0x29a, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x89, 0x2, 0xfd, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x93}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r0, 0x1)

9.056084313s ago: executing program 1 (id=2659):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
dup2(r0, r0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000680)='mnt\x00', 0x8242, 0x180)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0x0)
socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
r6 = fanotify_init(0x200, 0x0)
fanotify_mark(r6, 0x1, 0x40001004, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b)
ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x4, 0x1, 0x800})

7.691439043s ago: executing program 1 (id=2662):
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240))
socket$inet6(0xa, 0x5, 0x7ff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r3 = dup(0xffffffffffffffff)
syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801)
write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file0'}, 0xb)
r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a98500000000000000000f9bbadf265b910d77f85d1028e60ab4e45b931e71645d3", 0x23, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)

6.719898559s ago: executing program 4 (id=2668):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1})
chdir(&(0x7f0000000300)='./bus\x00')
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)

6.231934988s ago: executing program 4 (id=2669):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1010000, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=cp864,iocharset=ate=1,iocharset=cp857,dos1xfloppy,utf8=1,utf8=0,uni_xlate=1,uni_xlate=0,uni_xlate=1,shortname=winnt,codepage=1251,utf8=0,shortname=lower,utf8=0,check=strict,iocharset=cp936,\x00'/212], 0x1, 0x36b, &(0x7f0000000500)="$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")
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBTYPE(r2, 0x4b48, &(0x7f0000000040))
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000005c, &(0x7f0000000500)=ANY=[], 0x1, 0x1524, &(0x7f0000002ac0)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
pipe2$watch_queue(0x0, 0x80)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x1, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r3, 0x402c542c, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x7f)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x800)
read$qrtrtun(r5, 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x9)

3.661462207s ago: executing program 0 (id=2673):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff}, 0x18}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

3.566321833s ago: executing program 4 (id=2674):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xd}, 'port1\x00', 0x72, 0x21cfa, 0x0, 0x8000007, 0x3, 0x4, 0x12, 0x0, 0x6})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0)

3.480063338s ago: executing program 0 (id=2675):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x13b)
landlock_restrict_self(r3, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

3.471255899s ago: executing program 1 (id=2676):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f00000001c0), 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
syz_open_dev$video4linux(0x0, 0x5, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "701a16b92ea6656b"}, 0x10}, 0x1, 0x0, 0x0, 0x20048814}, 0xd209f6d814827b13)
bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x11)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x10b302, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2)
preadv2(r3, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0)

3.470973949s ago: executing program 5 (id=2677):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x844}, 0x8000)

3.280877399s ago: executing program 4 (id=2678):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8911, &(0x7f00000002c0)={'ip_vti0\x00', 0x0})

3.180073766s ago: executing program 5 (id=2679):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="4da08ac94753df6529da67a44b85452ab6074e800824466267e984be3aed06aaf88b738364d4f85ade11d5e5dc35c63be82e160159e6fe1bf4dcc3b29d0e5780e9b459881252c4fd50e34cf65f9f538da52b02c8348436a0b9cd08629962c2006b9737a0bbe4759e382ce6e23c9e20036600519cb4bb9c8cad0c12cebdbc4ef026b24fc0e27dbe999b44c71208a009e87273", @ANYRES16=r1], 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x8010)
shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0xc3, 0x40, {<r3=>0xffffffffffffffff}, {}, 0x10000, 0x3})
get_robust_list(r3, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f0000000400)={&(0x7f0000000380)}, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)}}, &(0x7f0000000580)=0x18)
setresuid(0xee00, 0xee00, 0x0)
setfsuid(0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000200), 0x80000001, 0x100)
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55)

2.379988022s ago: executing program 4 (id=2680):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bf, &(0x7f0000002f40)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x2c102, 0x6e)
sendfile(r0, r0, 0x0, 0x800000009)

2.359832243s ago: executing program 0 (id=2681):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)

2.288215428s ago: executing program 1 (id=2682):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1010000, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=cp864,iocharset=ate=1,iocharset=cp857,dos1xfloppy,utf8=1,utf8=0,uni_xlate=1,uni_xlate=0,uni_xlate=1,shortname=winnt,codepage=1251,utf8=0,shortname=lower,utf8=0,check=strict,iocharset=cp936,\x00'/212], 0x1, 0x36b, &(0x7f0000000500)="$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")
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBTYPE(r2, 0x4b48, &(0x7f0000000040))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
pipe2$watch_queue(0x0, 0x80)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x1, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r3, 0x402c542c, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x7f)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x800)
read$qrtrtun(r5, 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x9)

2.24077046s ago: executing program 5 (id=2683):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x3091c0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r1, 0x8001}}, 0x48)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

1.270235557s ago: executing program 0 (id=2684):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001800), 0x0, 0x8000)
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r0, r1, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000002580)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)

1.269570237s ago: executing program 1 (id=2685):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f)
ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000080)=0x485)
r1 = gettid()
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
listen(r3, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})
r5 = open(0x0, 0x4a07e, 0xdc)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r5, 0x5000)
fallocate(r5, 0x0, 0x0, 0x8800000)
timer_create(0x2, 0x0, &(0x7f0000044000))
open(0x0, 0x0, 0x19)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, 0x0)
ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000080))

1.268695927s ago: executing program 5 (id=2686):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)

1.004799612s ago: executing program 5 (id=2687):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xd}, 'port1\x00', 0x72, 0x21cfa, 0x0, 0x8000007, 0x3, 0x4, 0x12, 0x0, 0x6})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0)

940.272956ms ago: executing program 4 (id=2688):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2)
openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
prctl$PR_MCE_KILL(0x41555856, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0))
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setreuid(0x0, r3)
setuid(0x0)

831.802142ms ago: executing program 5 (id=2689):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
listen(r4, 0x0)
accept(r4, 0x0, 0x0)

264.062365ms ago: executing program 0 (id=2690):
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c93012000e000500140c0a00"], 0x17)

0s ago: executing program 0 (id=2691):
syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x4000, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6369692c706172743d30303030303030303030303030322c706172743d3078303030303030303030303030303030622c706172743d30783030303030303030303030303030303401000000000000000000000000000000000000000000f4ba3a1ff83d339ff14b74d0215a5eaffd0924f5da19137338fc7b99ed009b81132a68af75a5085c0a03cf45586a04893d0a54d0d01eb3e61685c2b6bd325aee5803b43133482e6f28"], 0x20, 0x70c, &(0x7f0000003800)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r4, 0x0, 0x0, 0x0, 0x80800, 0x1})
io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0)
r8 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6009, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0xa0, {0x9, 0x21, 0xc, 0x5, 0x1, {0x22, 0xe28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x7, 0x1}}}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r8, &(0x7f0000000a40)={0x24, &(0x7f0000000780)={0x0, 0x5, 0x2, {0x2, 0xb}}, 0x0, &(0x7f0000000980)={0x0, 0x22, 0x1, {[@main]}}, &(0x7f00000009c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x64, 0x1, {0x22, 0x5c2}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000a80)={0x0, 0x31, 0xc5, "7a4a50b1e3c79aacdc473c823d19d47b613e0bc816741c2fada72adc104764a5a07e88c6845eae52ec3c28b17755ad960e7a1d3f5cb44d35453b8c849943c50c1180a8176df2f34910e9fed1c65c60d0d1b3ea405d06952c780588d4fce08038c83091b2a0d9a277186dadb92baf1939017850b59fd739c37236e9707fdb1bb85f6e6a87b5d9509fa54937b3c7291b87c5fc4ff44dd3db01ee29112e34483bb9f4b1a21c3d8334d3a09778cd8066a138afa0410f6470f19f4717b0e03e9037b659f63cf953"}, 0x0, 0x0, &(0x7f0000000c00)={0x20, 0x1, 0xd5, "b823f1c2945d4304c75dd7314b4ca212d3739cbdc54fae41cff978dbf953a066ce9aff5235fcf56bfe7c7238aea9607ab22a071ebbe9b1cc54c9e4bb2502bfd5cac3fe38e8e7cf69064793e197f0c75fe12741563c599a4207214cf2423926caff4d708eb1b3301da0880c11fff48673b784286d868ea6de2651c384fdf6b9f50fc8d00d1567ea2eb71982c3ccddd50052def0e61d18c515ed0e29fa1345507410b4dbf349f925b74d54a62cd984534f5111815fd2dc4b45c79d94d8a1e3568b15284aac390cf683e15e0b4129d70ee851fc82b6b3"}, 0x0})
mq_timedreceive(r3, 0x0, 0x0, 0x200000200009, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000080))
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r9, 0xc0185879, 0x0)

kernel console output (not intermixed with test programs):

55.161758][T12111] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  555.712500][T12121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1502'.
[  556.672239][T12148] fuse: Unknown parameter 'fd0x0000000000000003'
[  557.837008][T12161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  558.072734][T12168] loop0: detected capacity change from 0 to 512
[  558.092479][T12168] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[  560.247193][T12173] Bluetooth: hci4: command 0x0406 tx timeout
[  561.000720][T12225] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.1536'.
[  561.038635][T12225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1536'.
[  561.263297][T12229] loop0: detected capacity change from 0 to 512
[  561.283179][T12229] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[  562.181614][T12245] syzkaller0: entered promiscuous mode
[  562.200880][T12245] syzkaller0: entered allmulticast mode
[  562.233348][T12245] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  563.289873][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  563.296882][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  564.416854][T12281] syzkaller0: entered promiscuous mode
[  564.429958][T12281] syzkaller0: entered allmulticast mode
[  564.444059][T12281] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  566.329207][T12295] qnx6: unable to read the first superblock
[  566.362694][T12293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  567.099829][T12304] loop0: detected capacity change from 0 to 512
[  567.121913][T12304] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[  567.170957][ T5779] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  567.205612][T10603] IPVS: starting estimator thread 0...
[  567.211936][T12308] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  567.516335][T12311] IPVS: using max 21 ests per chain, 50400 per kthread
[  569.764136][T12329] loop5: detected capacity change from 0 to 4096
[  569.887433][T12329] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  569.927202][T12329] ntfs3: loop5: Failed to initialize $Extend/$ObjId.
[  569.967111][T12333] qnx6: unable to read the first superblock
[  570.172344][T12332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  572.483007][T12359] loop4: detected capacity change from 0 to 32768
[  572.553395][T12359] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  572.605482][T12359] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  572.636321][T12359] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  572.663127][T12359] BTRFS info (device loop4): use zstd compression, level 3
[  572.678627][T12359] BTRFS info (device loop4): using free space tree
[  572.790104][T12359] BTRFS info (device loop4): enabling ssd optimizations
[  572.806033][T12359] BTRFS info (device loop4): auto enabling async discard
[  573.212391][ T8026] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  573.264541][T12385] qnx6: unable to read the first superblock
[  573.320802][T12384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  576.900949][T12415] loop0: detected capacity change from 0 to 32768
[  576.932122][T12415] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1592 (12415)
[  577.112877][T12415] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  577.182381][T12415] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  577.339107][T12415] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  577.561003][T12415] BTRFS info (device loop0): use zstd compression, level 3
[  577.820525][T12415] BTRFS info (device loop0): using free space tree
[  578.098042][T12415] BTRFS info (device loop0): enabling ssd optimizations
[  578.150657][T12415] BTRFS info (device loop0): auto enabling async discard
[  578.195213][T12461] loop5: detected capacity change from 0 to 8
[  578.468018][ T5768] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  578.704416][ T5779] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop0 scanned by udevd (5779)
[  580.274020][T12481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1609'.
[  581.803613][T12513] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1620'.
[  582.597968][T12527] syzkaller0: entered promiscuous mode
[  582.604104][T12527] syzkaller0: entered allmulticast mode
[  583.325064][T12540] loop5: detected capacity change from 0 to 8
[  584.474592][T12552] loop4: detected capacity change from 0 to 4096
[  584.768389][T12552] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  584.790958][T12552] ntfs3: loop4: Failed to initialize $Extend/$ObjId.
[  589.500513][T12584] syzkaller0: entered promiscuous mode
[  589.518062][T12584] syzkaller0: entered allmulticast mode
[  593.488313][T12633] loop0: detected capacity change from 0 to 512
[  593.796180][T12633] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[  596.365541][T12660] loop4: detected capacity change from 0 to 4096
[  596.473272][T12660] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  596.497086][T12660] ntfs3: loop4: Failed to initialize $Extend/$ObjId.
[  597.721967][T12681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  598.681252][T12702] loop5: detected capacity change from 0 to 4096
[  598.766369][T12702] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  598.783808][T12702] ntfs3: loop5: Failed to initialize $Extend/$ObjId.
[  599.848814][T12715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  600.371226][T12728] loop5: detected capacity change from 0 to 4096
[  600.439382][T12728] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  600.460469][T12728] ntfs3: loop5: Failed to initialize $Extend/$ObjId.
[  602.405682][T12751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  602.472144][T12754] 8021q: adding VLAN 0 to HW filter on device bond1
[  602.759089][T12754] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  602.774826][T12754] bond1: (slave macvlan2): making interface the new active one
[  603.075303][T12754] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[  603.822642][T12774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1714'.
[  603.840760][T12769] loop0: detected capacity change from 0 to 4096
[  604.102676][T12769] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  604.138774][T12769] ntfs3: loop0: Failed to initialize $Extend/$ObjId.
[  605.806858][ T5779] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  606.211625][T12790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  614.388896][T12905] loop0: detected capacity change from 0 to 4096
[  614.489480][T12905] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  614.513852][T12905] ntfs3: loop0: Failed to initialize $Extend/$ObjId.
[  615.256577][T10601] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  615.272137][T12919] fuse: Bad value for 'fd'
[  615.446140][T10601] usb 6-1: Using ep0 maxpacket: 16
[  615.453647][T10601] usb 6-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[  615.486997][T10601] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  615.717939][T10601] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  615.732649][T10601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.741182][T10601] usb 6-1: Product: syz
[  615.746909][T10601] usb 6-1: Manufacturer: syz
[  615.751827][T10601] usb 6-1: SerialNumber: syz
[  616.451753][T10601] usb 6-1: 0:2 : does not exist
[  616.526870][T10601] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  616.614363][T10601] usb 6-1: USB disconnect, device number 3
[  616.687561][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  618.228431][T12943] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.1750'.
[  618.394271][T12945] fuse: Bad value for 'fd'
[  618.558982][T12939] loop5: detected capacity change from 0 to 32768
[  618.578612][T12939] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  618.804135][ T5779] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  620.261988][T12967] fuse: Bad value for 'fd'
[  620.833079][T12963] loop4: detected capacity change from 0 to 32768
[  620.861934][T12963] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  620.932816][ T5779] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  624.322586][T13006] qnx6: unable to read the first superblock
[  624.466113][T13010] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.1776'.
[  624.544419][T13005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  624.722386][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  624.728999][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  626.192777][T13019] loop0: detected capacity change from 0 to 32768
[  626.468699][T13019] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  626.489446][T13019] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  626.509506][T13019] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  626.529356][T13019] BTRFS info (device loop0): use zstd compression, level 3
[  627.138073][T13019] BTRFS info (device loop0): using free space tree
[  627.207644][   T49] Bluetooth: hci3: Frame reassembly failed (-84)
[  627.564369][T13019] BTRFS info (device loop0): enabling ssd optimizations
[  627.594857][T13019] BTRFS info (device loop0): auto enabling async discard
[  627.965060][ T5768] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  629.196292][T12173] Bluetooth: hci3: command 0x1003 tx timeout
[  629.196469][ T5775] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  629.522300][T13057] netlink: 'syz.4.1788': attribute type 39 has an invalid length.
[  636.769254][T13122] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.1808'.
[  636.796132][T13122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1808'.
[  639.272914][T13148] qnx6: unable to read the first superblock
[  639.369893][T13147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  639.602460][T13152] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.1819'.
[  639.620312][T13152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1819'.
[  642.856150][T13186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  643.362408][ T5775] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  643.369584][T13194] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.1835'.
[  643.374480][ T5775] CPU: 0 PID: 5775 Comm: kworker/u5:3 Not tainted syzkaller #0
[  643.389484][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  643.390883][T13194] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1835'.
[  643.399913][ T5775] Workqueue: hci2 hci_rx_work
[  643.399958][ T5775] Call Trace:
[  643.399970][ T5775]  <TASK>
[  643.399981][ T5775]  dump_stack_lvl+0x18c/0x250
[  643.400017][ T5775]  ? show_regs_print_info+0x20/0x20
[  643.400046][ T5775]  ? load_image+0x400/0x400
[  643.400083][ T5775]  sysfs_create_dir_ns+0x26e/0x2a0
[  643.440053][ T5775]  ? sysfs_warn_dup+0xa0/0xa0
[  643.444911][ T5775]  ? do_raw_spin_unlock+0x121/0x230
[  643.450188][ T5775]  kobject_add_internal+0x61c/0xcc0
[  643.455728][ T5775]  kobject_add+0x164/0x240
[  643.460648][ T5775]  ? __rwlock_init+0x150/0x150
[  643.465581][ T5775]  ? kobject_init+0x1e0/0x1e0
[  643.470334][ T5775]  ? _raw_spin_unlock+0x28/0x40
[  643.475338][ T5775]  ? get_device_parent+0x366/0x390
[  643.480630][ T5775]  device_add+0x408/0xc20
[  643.485117][ T5775]  hci_conn_add_sysfs+0xd5/0x1e0
[  643.490385][ T5775]  le_conn_complete_evt+0xf5d/0x1540
[  643.495930][ T5775]  ? hci_event_packet+0x4cb/0x1270
[  643.501136][ T5775]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  643.507468][ T5775]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  643.513271][ T5775]  ? skb_pull_data+0xfb/0x200
[  643.518208][ T5775]  hci_le_conn_complete_evt+0x187/0x440
[  643.523925][ T5775]  ? hci_remote_host_features_evt+0x150/0x150
[  643.530155][ T5775]  hci_event_packet+0x7ba/0x1270
[  643.535161][ T5775]  ? bis_list+0x290/0x290
[  643.539800][ T5775]  ? lockdep_hardirqs_on+0x98/0x150
[  643.545053][ T5775]  ? hci_send_to_monitor+0xd7/0x4f0
[  643.550480][ T5775]  hci_rx_work+0x43a/0xd60
[  643.554964][ T5775]  ? process_scheduled_works+0x96f/0x15d0
[  643.560735][ T5775]  process_scheduled_works+0xa5d/0x15d0
[  643.566476][ T5775]  ? assign_work+0x430/0x430
[  643.571139][ T5775]  ? assign_work+0x3d0/0x430
[  643.575789][ T5775]  worker_thread+0xa55/0xfc0
[  643.580646][ T5775]  kthread+0x2fa/0x390
[  643.584948][ T5775]  ? pr_cont_work+0x560/0x560
[  643.589698][ T5775]  ? kthread_blkcg+0xd0/0xd0
[  643.594341][ T5775]  ret_from_fork+0x48/0x80
[  643.598904][ T5775]  ? kthread_blkcg+0xd0/0xd0
[  643.603724][ T5775]  ret_from_fork_asm+0x11/0x20
[  643.608747][ T5775]  </TASK>
[  643.615801][ T5775] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  643.631565][ T5775] Bluetooth: hci2: failed to register connection device
[  645.927718][T13217] qnx6: unable to read the first superblock
[  646.069652][T13225] fuse: Bad value for 'fd'
[  646.115925][T13215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  647.246435][T13242] loop0: detected capacity change from 0 to 4096
[  647.265853][T10594] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  647.292214][T13242] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  647.312354][T13242] ntfs3: loop0: Failed to initialize $Extend/$ObjId.
[  647.475990][T10594] usb 6-1: Using ep0 maxpacket: 16
[  647.486543][T10594] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  647.551092][T10594] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  647.597981][T10594] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  647.651501][T10594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.705771][T10594] usb 6-1: Product: syz
[  647.730911][T10594] usb 6-1: Manufacturer: syz
[  647.762847][T10594] usb 6-1: SerialNumber: syz
[  648.070660][T10594] usb 6-1: 0:2 : does not exist
[  648.113999][T10594] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  648.232022][T10594] usb 6-1: USB disconnect, device number 4
[  648.359859][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  649.077237][T13267] loop4: detected capacity change from 0 to 4096
[  650.187380][T13267] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  650.214085][T13267] ntfs3: loop4: Failed to initialize $Extend/$ObjId.
[  651.835917][T12173] Bluetooth: hci2: command 0x0406 tx timeout
[  652.202899][T13298] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.1874'.
[  652.245404][T13298] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1874'.
[  655.983095][T13336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  656.044223][T13340] loop0: detected capacity change from 0 to 512
[  656.057305][T13340] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[  659.363629][T13378] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.1903'.
[  659.383600][T13378] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1903'.
[  660.615888][T10598] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  660.733591][T13399] loop5: detected capacity change from 0 to 512
[  660.770181][T13399] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[  660.955192][T10598] usb 1-1: Using ep0 maxpacket: 16
[  660.979049][T10598] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  661.020690][T10598] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  661.061699][T10598] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  661.132029][T10598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.171477][T10598] usb 1-1: Product: syz
[  661.191914][T10598] usb 1-1: Manufacturer: syz
[  661.226249][T10598] usb 1-1: SerialNumber: syz
[  661.524039][T10598] usb 1-1: 0:2 : does not exist
[  661.576063][T10598] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  661.685157][T10598] usb 1-1: USB disconnect, device number 10
[  661.843906][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  664.619407][ T5756] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  664.909146][ T5756] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  664.945894][ T5756] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  664.955626][ T5756] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  665.007569][ T5756] usb 6-1: config 1 interface 1 has no altsetting 0
[  665.031213][ T5756] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  665.057060][ T5756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.120750][ T5756] usb 6-1: Product: syz
[  665.124993][ T5756] usb 6-1: Manufacturer: syz
[  665.155220][ T5756] usb 6-1: SerialNumber: syz
[  665.405296][ T5756] usb 6-1: selecting invalid altsetting 0
[  665.421830][ T5756] usb 6-1: selecting invalid altsetting 0
[  665.431902][ T5756] cdc_ncm 6-1:1.0: bind() failure
[  665.451436][ T5756] usb 6-1: selecting invalid altsetting 0
[  665.463430][ T5756] cdc_ncm: probe of 6-1:1.1 failed with error -22
[  665.476345][ T5756] usb 6-1: selecting invalid altsetting 0
[  665.492554][ T5756] cdc_mbim: probe of 6-1:1.1 failed with error -22
[  665.513734][ T5756] usb 6-1: selecting invalid altsetting 0
[  665.530819][ T5756] usbtest: probe of 6-1:1.1 failed with error -22
[  665.555528][ T5756] usb 6-1: USB disconnect, device number 5
[  667.086108][ T5775] Bluetooth: hci4: unexpected event for opcode 0x0c0d
[  667.797938][T13467] qnx6: unable to read the first superblock
[  667.994634][T13466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  668.185393][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1938'.
[  669.521384][T13490] IPVS: length: 163 != 8
[  670.003488][T13498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  670.175998][T10594] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  670.303939][   T49] tipc: Left network mode
[  670.366129][T10594] usb 5-1: Using ep0 maxpacket: 16
[  670.373581][T10594] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  670.416206][T10594] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  670.444109][T10594] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  670.464872][T10594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.474861][T10594] usb 5-1: Product: syz
[  670.483167][T10594] usb 5-1: Manufacturer: syz
[  670.491856][T10594] usb 5-1: SerialNumber: syz
[  670.518960][T12173] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  670.532325][T12173] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  670.543157][T12173] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  670.557437][T12173] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  670.590932][T12173] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  670.601320][T12173] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  670.748127][T13504] wg1 speed is unknown, defaulting to 1000
[  670.805363][T10594] usb 5-1: 0:2 : does not exist
[  670.818307][T10594] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  670.866842][T10594] usb 5-1: USB disconnect, device number 7
[  670.966415][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  672.652740][T13504] chnl_net:caif_netlink_parms(): no params data found
[  672.721867][T12173] Bluetooth: hci3: command tx timeout
[  672.767289][ T1195] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  672.805141][ T1195] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  672.954569][T13536] loop0: detected capacity change from 0 to 4096
[  673.103598][T13541] qnx6: unable to read the first superblock
[  673.468521][T13540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  674.025126][T13536] EXT4-fs: Ignoring removed orlov option
[  674.033584][T13536] EXT4-fs (loop0): Test dummy encryption mode enabled
[  674.085428][T13536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  674.139807][T13536] hid-generic 0000:0000:0000.0003: pid 13536 passed too short report
[  674.252289][T13504] bridge0: port 1(bridge_slave_0) entered blocking state
[  674.297578][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  674.309253][T13504] bridge0: port 1(bridge_slave_0) entered disabled state
[  674.343922][T13504] bridge_slave_0: entered allmulticast mode
[  674.397112][T13504] bridge_slave_0: entered promiscuous mode
[  674.498448][   T49] hsr_slave_0: left promiscuous mode
[  674.510845][   T49] hsr_slave_1: left promiscuous mode
[  674.521811][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  674.546175][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  674.601975][   T49] bridge_slave_1: left allmulticast mode
[  674.612532][   T49] bridge_slave_1: left promiscuous mode
[  674.636932][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  674.716101][   T49] bridge_slave_0: left allmulticast mode
[  674.731677][   T49] bridge_slave_0: left promiscuous mode
[  674.739764][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  674.797405][T12173] Bluetooth: hci3: command tx timeout
[  674.837734][   T49] bond1 (unregistering): (slave macvlan2): Releasing active interface
[  675.116290][T10592] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  675.210413][   T49] bond1 (unregistering): Released all slaves
[  675.325961][T10592] usb 1-1: Using ep0 maxpacket: 16
[  675.338201][T10592] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  675.355086][T10592] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  675.369406][T10592] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  675.380454][T10592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.410561][T10592] usb 1-1: Product: syz
[  675.425754][T10592] usb 1-1: Manufacturer: syz
[  675.430579][T10592] usb 1-1: SerialNumber: syz
[  675.661389][T10592] usb 1-1: 0:2 : does not exist
[  675.692457][T10592] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  675.784895][T10592] usb 1-1: USB disconnect, device number 11
[  675.928962][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  676.364263][T13597] qnx6: unable to read the first superblock
[  676.496879][T13596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  676.514553][   T49] team0 (unregistering): Port device team_slave_1 removed
[  676.593980][   T49] team0 (unregistering): Port device team_slave_0 removed
[  676.669636][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  676.745275][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  676.896066][T12173] Bluetooth: hci3: command tx timeout
[  677.541803][   T49] bond0 (unregistering): Released all slaves
[  677.670486][T13504] bridge0: port 2(bridge_slave_1) entered blocking state
[  677.679664][T13504] bridge0: port 2(bridge_slave_1) entered disabled state
[  677.689898][T13504] bridge_slave_1: entered allmulticast mode
[  677.697824][T13504] bridge_slave_1: entered promiscuous mode
[  677.706178][T13564] netlink: 2076 bytes leftover after parsing attributes in process `syz.4.1964'.
[  677.899675][T13504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  677.987478][T13504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  678.149570][T13504] team0: Port device team_slave_0 added
[  678.206720][T13504] team0: Port device team_slave_1 added
[  678.315606][T13504] batman_adv: batadv0: Adding interface: batadv_slave_0
[  678.335940][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  678.419894][T13504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  678.470220][T13504] batman_adv: batadv0: Adding interface: batadv_slave_1
[  678.506006][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  678.556454][T13504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  678.682609][T13628] syzkaller0: entered promiscuous mode
[  678.695861][T13628] syzkaller0: entered allmulticast mode
[  678.727283][T13504] hsr_slave_0: entered promiscuous mode
[  678.750050][T13504] hsr_slave_1: entered promiscuous mode
[  678.964004][T12173] Bluetooth: hci3: command tx timeout
[  681.876267][T10598] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  682.094386][T13504] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  682.146216][T13504] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  682.180881][T13504] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  682.203143][T13504] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  682.228768][T10598] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  682.371604][T10598] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  682.408365][T10598] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  682.441791][T10598] usb 5-1: config 1 interface 1 has no altsetting 0
[  682.450175][T13677] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  682.484808][T10598] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  682.506689][T10598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.559994][T10598] usb 5-1: Product: syz
[  682.581326][T13504] 8021q: adding VLAN 0 to HW filter on device bond0
[  682.582286][T10598] usb 5-1: Manufacturer: syz
[  682.609024][T10598] usb 5-1: SerialNumber: syz
[  682.701890][T13504] 8021q: adding VLAN 0 to HW filter on device team0
[  682.760861][T12894] bridge0: port 1(bridge_slave_0) entered blocking state
[  682.768053][T12894] bridge0: port 1(bridge_slave_0) entered forwarding state
[  682.842007][T12894] bridge0: port 2(bridge_slave_1) entered blocking state
[  682.849450][T12894] bridge0: port 2(bridge_slave_1) entered forwarding state
[  682.880704][T10598] usb 5-1: selecting invalid altsetting 0
[  682.900828][T10598] usb 5-1: selecting invalid altsetting 0
[  682.931074][T10598] cdc_ncm 5-1:1.0: bind() failure
[  682.988905][T10598] usb 5-1: selecting invalid altsetting 0
[  683.034363][T10598] cdc_ncm: probe of 5-1:1.1 failed with error -22
[  683.086289][T10598] usb 5-1: selecting invalid altsetting 0
[  683.092147][T10598] cdc_mbim: probe of 5-1:1.1 failed with error -22
[  683.129284][T10598] usb 5-1: selecting invalid altsetting 0
[  683.135120][T10598] usbtest: probe of 5-1:1.1 failed with error -22
[  683.245216][T10598] usb 5-1: USB disconnect, device number 8
[  683.574327][T13504] 8021q: adding VLAN 0 to HW filter on device batadv0
[  685.243571][T13717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1997'.
[  685.921417][T13504] veth0_vlan: entered promiscuous mode
[  686.012236][T13504] veth1_vlan: entered promiscuous mode
[  686.192661][T13504] veth0_macvtap: entered promiscuous mode
[  686.246553][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  686.253042][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  686.269516][T13504] veth1_macvtap: entered promiscuous mode
[  686.468449][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  686.522386][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.594002][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  686.666052][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.727383][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  686.796014][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.863793][T13504] batman_adv: batadv0: Interface activated: batadv_slave_0
[  686.959870][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  686.997143][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  687.034352][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  687.073890][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  687.103368][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  687.145728][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  687.177478][T13504] batman_adv: batadv0: Interface activated: batadv_slave_1
[  687.253089][T13740] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  687.299608][T13737] tipc: Resetting bearer <eth:syzkaller0>
[  687.369667][T13504] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  687.395936][T13504] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  687.404722][T13504] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  687.465972][T13504] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  687.499619][T13741] syzkaller0: entered promiscuous mode
[  687.505951][T13741] syzkaller0: entered allmulticast mode
[  687.548861][T13736] tipc: Resetting bearer <eth:syzkaller0>
[  687.641497][T13736] tipc: Disabling bearer <eth:syzkaller0>
[  687.918932][T12889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.969393][T12889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  688.141582][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  688.206011][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  689.543454][T13761] loop4: detected capacity change from 0 to 32768
[  689.554039][T13761] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.2003 (13761)
[  689.582497][T13761] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  689.593176][T13761] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  689.603009][T13761] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  689.613601][T13761] BTRFS info (device loop4): use zstd compression, level 3
[  689.620949][T13761] BTRFS info (device loop4): using free space tree
[  689.806271][T13761] BTRFS info (device loop4): enabling ssd optimizations
[  689.814711][T13761] BTRFS info (device loop4): auto enabling async discard
[  691.043822][ T8026] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  693.110776][T13811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2007'.
[  695.235359][T13837] loop5: detected capacity change from 0 to 4096
[  695.302625][T13837] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  695.321294][T13837] ntfs3: loop5: Failed to initialize $Extend/$ObjId.
[  695.392717][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'.
[  700.730095][T13895] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  700.860464][T13895] syzkaller0: entered promiscuous mode
[  701.116759][T13895] syzkaller0: entered allmulticast mode
[  701.366866][T13903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2034'.
[  701.416433][T13891] tipc: Resetting bearer <eth:syzkaller0>
[  701.534577][T13891] tipc: Disabling bearer <eth:syzkaller0>
[  704.335989][    T8] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[  704.577571][    T8] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  704.595254][    T8] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  704.611425][    T8] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  704.632905][    T8] usb 6-1: string descriptor 0 read error: -22
[  704.644565][    T8] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  704.664736][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.711878][    T8] adutux 6-1:168.0: interrupt endpoints not found
[  704.916359][    T8] usb 6-1: USB disconnect, device number 6
[  705.334374][T13935] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  705.525645][T13939] overlayfs: failed to get inode (-116)
[  705.535175][T13939] overlayfs: failed to get inode (-116)
[  707.020074][T10603] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  707.386605][T10603] usb 5-1: Using ep0 maxpacket: 16
[  707.625581][T10603] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  707.646633][T10603] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  707.663394][T10603] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  707.672790][T10603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.681755][T10603] usb 5-1: Product: syz
[  707.686121][T10603] usb 5-1: Manufacturer: syz
[  707.690888][T10603] usb 5-1: SerialNumber: syz
[  708.192274][T10603] usb 5-1: 0:2 : does not exist
[  708.235252][T13956] qnx6: unable to read the first superblock
[  708.255921][T10603] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  708.347840][T10603] usb 5-1: USB disconnect, device number 9
[  708.467388][T13954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  708.521795][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  709.584418][T13966] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  709.593216][T13966] syzkaller0: entered promiscuous mode
[  709.599576][T13966] syzkaller0: entered allmulticast mode
[  709.749197][T13965] tipc: Resetting bearer <eth:syzkaller0>
[  709.925368][T13965] tipc: Disabling bearer <eth:syzkaller0>
[  713.626271][ T5756] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  713.888836][ T5756] usb 6-1: Using ep0 maxpacket: 16
[  713.985085][ T5756] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  714.134573][ T5756] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  714.278068][ T5756] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  714.335543][ T5756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.395986][ T5756] usb 6-1: Product: syz
[  714.413242][ T5756] usb 6-1: Manufacturer: syz
[  714.431071][ T5756] usb 6-1: SerialNumber: syz
[  714.744608][ T5756] usb 6-1: 0:2 : does not exist
[  714.789521][ T5756] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  714.925008][ T5756] usb 6-1: USB disconnect, device number 7
[  715.075038][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  717.165166][T14010] loop0: detected capacity change from 0 to 256
[  717.510645][T14010] FAT-fs (loop0): Directory bread(block 64) failed
[  717.518061][T14010] FAT-fs (loop0): Directory bread(block 65) failed
[  717.527402][T14010] FAT-fs (loop0): Directory bread(block 66) failed
[  717.535045][T14010] FAT-fs (loop0): Directory bread(block 67) failed
[  717.542418][T14010] FAT-fs (loop0): Directory bread(block 68) failed
[  717.549445][T14010] FAT-fs (loop0): Directory bread(block 69) failed
[  717.556544][T14010] FAT-fs (loop0): Directory bread(block 70) failed
[  717.564050][T14010] FAT-fs (loop0): Directory bread(block 71) failed
[  717.571196][T14010] FAT-fs (loop0): Directory bread(block 72) failed
[  717.578073][T14010] FAT-fs (loop0): Directory bread(block 73) failed
[  720.290986][T14035] xt_l2tp: v2 tid > 0xffff: 37482740
[  724.959578][T14055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2082'.
[  726.002413][T14061] netlink: 1832 bytes leftover after parsing attributes in process `syz.5.2083'.
[  726.050137][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2085'.
[  727.389576][T10601] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  728.054082][T10601] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  728.093017][T10601] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  728.239044][T10601] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  728.355699][T10601] usb 1-1: config 1 interface 1 has no altsetting 0
[  728.385050][T14074] overlayfs: missing 'workdir'
[  728.401079][T10601] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  728.415530][T10601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.428800][T10601] usb 1-1: Product: syz
[  728.434880][T10601] usb 1-1: Manufacturer: syz
[  728.440725][T10601] usb 1-1: SerialNumber: syz
[  728.669952][T10601] usb 1-1: selecting invalid altsetting 0
[  728.688515][T10601] usb 1-1: selecting invalid altsetting 0
[  728.694476][T10601] cdc_ncm 1-1:1.0: bind() failure
[  728.714894][T10601] usb 1-1: selecting invalid altsetting 0
[  728.739484][T10601] cdc_ncm: probe of 1-1:1.1 failed with error -22
[  728.746868][T10601] usb 1-1: selecting invalid altsetting 0
[  728.752843][T10601] cdc_mbim: probe of 1-1:1.1 failed with error -22
[  728.763180][T10601] usb 1-1: selecting invalid altsetting 0
[  728.770648][T10601] usbtest: probe of 1-1:1.1 failed with error -22
[  728.786398][T10601] usb 1-1: USB disconnect, device number 12
[  731.218536][T14100] netlink: 1832 bytes leftover after parsing attributes in process `syz.4.2096'.
[  731.376147][T10603] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  731.643003][T10603] usb 1-1: config 10 has an invalid interface number: 230 but max is 0
[  731.761447][T10603] usb 1-1: config 10 has no interface number 0
[  731.827754][T10603] usb 1-1: config 10 interface 230 has no altsetting 0
[  731.876132][T10603] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=1a.99
[  731.909489][T10603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.320907][T10603] usb 1-1: string descriptor 0 read error: -71
[  732.330151][T10603] usb 1-1: f81604_read: reg: 105 failed: -EPROTO
[  732.338475][T10603] f81604 1-1:10.230: Setting termination of CH#0 failed: -EPROTO
[  732.348911][T10603] f81604: probe of 1-1:10.230 failed with error -71
[  732.356581][T10603] usb-storage 1-1:10.230: USB Mass Storage device detected
[  733.346038][T10603] usb 1-1: USB disconnect, device number 13
[  733.382552][T14117] loop4: detected capacity change from 0 to 512
[  733.401531][T14117] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[  735.906780][T14122] loop0: detected capacity change from 0 to 256
[  736.448419][T14122] FAT-fs (loop0): Directory bread(block 64) failed
[  736.455244][T14122] FAT-fs (loop0): Directory bread(block 65) failed
[  736.462699][T14122] FAT-fs (loop0): Directory bread(block 66) failed
[  736.469603][T14122] FAT-fs (loop0): Directory bread(block 67) failed
[  736.477034][T14122] FAT-fs (loop0): Directory bread(block 68) failed
[  736.483838][T14122] FAT-fs (loop0): Directory bread(block 69) failed
[  736.490964][T14122] FAT-fs (loop0): Directory bread(block 70) failed
[  736.497840][T14122] FAT-fs (loop0): Directory bread(block 71) failed
[  736.505566][T14122] FAT-fs (loop0): Directory bread(block 72) failed
[  736.512807][T14122] FAT-fs (loop0): Directory bread(block 73) failed
[  737.058666][T14128] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  738.086102][T14139] IPv6: NLM_F_REPLACE set, but no existing node found!
[  738.553172][T14148] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.2108'.
[  738.771861][T14153] loop4: detected capacity change from 0 to 512
[  738.790329][T14153] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[  739.450649][T14159] input: syz1 as /devices/virtual/input/input8
[  741.148110][T14164] loop0: detected capacity change from 0 to 256
[  741.449706][T14164] FAT-fs (loop0): Directory bread(block 64) failed
[  741.456579][T14164] FAT-fs (loop0): Directory bread(block 65) failed
[  741.463570][T14164] FAT-fs (loop0): Directory bread(block 66) failed
[  741.470508][T14164] FAT-fs (loop0): Directory bread(block 67) failed
[  741.477743][T14164] FAT-fs (loop0): Directory bread(block 68) failed
[  741.484410][T14164] FAT-fs (loop0): Directory bread(block 69) failed
[  741.491492][T14164] FAT-fs (loop0): Directory bread(block 70) failed
[  741.498430][T14164] FAT-fs (loop0): Directory bread(block 71) failed
[  741.505342][T14164] FAT-fs (loop0): Directory bread(block 72) failed
[  741.512199][T14164] FAT-fs (loop0): Directory bread(block 73) failed
[  743.351815][T14168] loop5: detected capacity change from 0 to 32768
[  743.368219][T14168] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11
[  744.134163][ T5779] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11
[  745.485862][T14189] loop5: detected capacity change from 0 to 32768
[  745.570774][T14189] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  745.834734][T14189] XFS (loop5): Ending clean mount
[  745.885280][T14189] XFS (loop5): Quotacheck needed: Please wait.
[  745.896435][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  745.909389][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  745.956474][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  745.993360][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  746.003109][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  746.019448][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  746.078571][T14189] XFS (loop5): Quotacheck: Done.
[  746.260289][T12889] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.357835][T13504] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  746.371460][T14218] wg1 speed is unknown, defaulting to 1000
[  746.432856][T14213] wg1 speed is unknown, defaulting to 1000
[  746.500303][T12889] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.680884][T12889] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.608456][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  747.614832][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  747.748934][T12889] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  748.076277][ T5775] Bluetooth: hci0: command tx timeout
[  749.587469][T12889] tipc: Left network mode
[  749.805821][T10601] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  749.974056][T14213] chnl_net:caif_netlink_parms(): no params data found
[  749.998406][T10601] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  750.025397][T10601] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  750.060910][T10601] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  750.074805][T10601] usb 6-1: config 1 interface 1 has no altsetting 0
[  750.095426][T10601] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  750.114829][T10601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.134078][T10601] usb 6-1: Product: syz
[  750.139241][T10601] usb 6-1: Manufacturer: syz
[  750.147081][T10601] usb 6-1: SerialNumber: syz
[  750.168336][ T5775] Bluetooth: hci0: command tx timeout
[  750.358805][T14244] loop4: detected capacity change from 0 to 32768
[  750.401463][T10601] usb 6-1: selecting invalid altsetting 0
[  750.409147][T10601] usb 6-1: selecting invalid altsetting 0
[  750.415041][T10601] cdc_ncm 6-1:1.0: bind() failure
[  750.423682][T10601] usb 6-1: selecting invalid altsetting 0
[  750.432575][T10601] cdc_ncm: probe of 6-1:1.1 failed with error -22
[  750.442180][T10601] usb 6-1: selecting invalid altsetting 0
[  750.448704][T10601] cdc_mbim: probe of 6-1:1.1 failed with error -22
[  750.456515][T10601] usb 6-1: selecting invalid altsetting 0
[  750.462563][T10601] usbtest: probe of 6-1:1.1 failed with error -22
[  750.487677][T10601] usb 6-1: USB disconnect, device number 8
[  750.806123][T14213] bridge0: port 1(bridge_slave_0) entered blocking state
[  750.813599][T14213] bridge0: port 1(bridge_slave_0) entered disabled state
[  750.849477][T14213] bridge_slave_0: entered allmulticast mode
[  750.861830][T14213] bridge_slave_0: entered promiscuous mode
[  750.912101][T14213] bridge0: port 2(bridge_slave_1) entered blocking state
[  750.920371][T14213] bridge0: port 2(bridge_slave_1) entered disabled state
[  750.928607][T14213] bridge_slave_1: entered allmulticast mode
[  750.936480][T14213] bridge_slave_1: entered promiscuous mode
[  751.123718][T14213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  751.168201][T14213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  751.241847][T14270] loop4: detected capacity change from 0 to 1024
[  751.382859][T14270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  751.422649][T14213] team0: Port device team_slave_0 added
[  751.570638][T14270] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  752.037842][T14270] EXT4-fs error (device loop4): ext4_map_blocks:718: inode #15: block 3: comm syz.4.2147: lblock 3 mapped to illegal pblock 3 (length 3)
[  752.109014][T14213] team0: Port device team_slave_1 added
[  752.172122][T14270] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  752.199473][T14270] EXT4-fs (loop4): This should not happen!! Data will be lost
[  752.199473][T14270] 
[  752.212244][T14281] loop5: detected capacity change from 0 to 1024
[  752.240807][ T5775] Bluetooth: hci0: command tx timeout
[  752.267745][T14279] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #15: block 3: comm syz.4.2147: lblock 3 mapped to illegal pblock 3 (length 1)
[  752.359268][T14281] hfsplus: bad catalog entry type
[  752.423162][T14269] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #15: block 3: comm syz.4.2147: lblock 3 mapped to illegal pblock 3 (length 1)
[  752.479867][T14269] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #15: block 3: comm syz.4.2147: lblock 3 mapped to illegal pblock 3 (length 1)
[  752.497891][T12897] hfsplus: b-tree write err: -5, ino 4
[  752.522623][T14213] batman_adv: batadv0: Adding interface: batadv_slave_0
[  752.549801][T14213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  752.551255][T14279] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #15: block 3: comm syz.4.2147: lblock 3 mapped to illegal pblock 3 (length 1)
[  752.644270][T14269] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #15: block 3: comm syz.4.2147: lblock 3 mapped to illegal pblock 3 (length 1)
[  752.652769][T14213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  752.687075][T14269] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #15: block 3: comm syz.4.2147: lblock 3 mapped to illegal pblock 3 (length 1)
[  752.698308][T14213] batman_adv: batadv0: Adding interface: batadv_slave_1
[  752.726340][T14279] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #15: block 3: comm syz.4.2147: lblock 3 mapped to illegal pblock 3 (length 1)
[  752.739480][T14213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  752.789489][T14269] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #15: block 3: comm syz.4.2147: lblock 3 mapped to illegal pblock 3 (length 1)
[  752.809685][T14279] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #15: block 3: comm syz.4.2147: lblock 3 mapped to illegal pblock 3 (length 1)
[  752.834264][T14213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  753.251811][T14298] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2151'.
[  753.270731][T14298] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2151'.
[  753.286625][T14298] comedi: valid board names for 8255 driver are:
[  753.293089][T14298]  8255
[  753.295987][T14298] comedi: valid board names for vmk80xx driver are:
[  753.303273][T14298]  vmk80xx
[  753.306466][T14298] comedi: valid board names for usbduxsigma driver are:
[  753.313587][T14298]  usbduxsigma
[  753.317058][T14298] comedi: valid board names for usbduxfast driver are:
[  753.324248][T14298]  usbduxfast
[  753.327657][T14298] comedi: valid board names for usbdux driver are:
[  753.334457][T14298]  usbdux
[  753.337641][T14298] comedi: valid board names for ni6501 driver are:
[  753.344297][T14298]  ni6501
[  753.347365][T14298] comedi: valid board names for dt9812 driver are:
[  753.354100][T14298]  dt9812
[  753.357322][T14298] comedi: valid board names for ni_labpc_cs driver are:
[  753.364582][T14298]  ni_labpc_cs
[  753.368191][T14298] comedi: valid board names for ni_daq_700 driver are:
[  753.375253][T14298]  ni_daq_700
[  753.378709][T14298] comedi: valid board names for labpc_pci driver are:
[  753.385609][T14298]  labpc_pci
[  753.389014][T14298] comedi: valid board names for adl_pci9118 driver are:
[  753.396283][T14298]  pci9118dg
[  753.400139][T14298]  pci9118hg
[  753.403751][T14298]  pci9118hr
[  753.407113][T14298] comedi: valid board names for 8255_pci driver are:
[  753.413941][T14298]  8255_pci
[  753.417571][T14298] comedi: valid board names for s526 driver are:
[  753.424283][T14298]  s526
[  753.427227][T14298] comedi: valid board names for multiq3 driver are:
[  753.434070][T14298]  multiq3
[  753.437346][T14298] comedi: valid board names for pcmuio driver are:
[  753.443986][T14298]  pcmuio48
[  753.447391][T14298]  pcmuio96
[  753.450613][T14298] comedi: valid board names for pcmmio driver are:
[  753.457327][T14298]  pcmmio
[  753.460410][T14298] comedi: valid board names for pcmda12 driver are:
[  753.467168][T14298]  pcmda12
[  753.470307][T14298] comedi: valid board names for pcmad driver are:
[  753.476928][T14298]  pcmad12
[  753.480093][T14298]  pcmad16
[  753.483232][T14298] comedi: valid board names for ni_labpc driver are:
[  753.490064][T14298]  lab-pc-1200
[  753.493572][T14298]  lab-pc-1200ai
[  753.497621][T14298]  lab-pc+
[  753.500774][T14298] comedi: valid board names for atmio16 driver are:
[  753.508038][T14298]  atmio16
[  753.511294][T14298]  atmio16d
[  753.514522][T14298] comedi: valid board names for ni_at_ao driver are:
[  753.521758][T14298]  at-ao-6
[  753.524921][T14298]  at-ao-10
[  753.528165][T14298] comedi: valid board names for ni_at_a2150 driver are:
[  753.535418][T14298]  ni_at_a2150
[  753.538993][T14298] comedi: valid board names for adq12b driver are:
[  753.545898][T14298]  adq12b
[  753.548949][T14298] comedi: valid board names for mpc624 driver are:
[  753.555578][T14298]  mpc624
[  753.558658][T14298] comedi: valid board names for c6xdigio driver are:
[  753.565467][T14298]  c6xdigio
[  753.568844][T14298] comedi: valid board names for aio_iiro_16 driver are:
[  753.575948][T14298]  aio_iiro_16
[  753.579437][T14298] comedi: valid board names for aio_aio12_8 driver are:
[  753.586662][T14298]  aio_aio12_8
[  753.590183][T14298]  aio_ai12_8
[  753.593503][T14298]  aio_ao12_4
[  753.597079][T14298] comedi: valid board names for fl512 driver are:
[  753.603609][T14298]  fl512
[  753.607114][T14298] comedi: valid board names for dmm32at driver are:
[  753.613927][T14298]  dmm32at
[  753.617230][T14298] comedi: valid board names for dt282x driver are:
[  753.623768][T14298]  dt2821
[  753.626793][T14298]  dt2821-f
[  753.629362][T14213] hsr_slave_0: entered promiscuous mode
[  753.629999][T14298]  dt2821-g
[  753.639038][T14298]  dt2823
[  753.642003][T14298]  dt2824-pgh
[  753.645401][T14298]  dt2824-pgl
[  753.648776][T14298]  dt2825
[  753.651742][T14298]  dt2827
[  753.654719][T14298]  dt2828
[  753.657792][T14298]  dt2829
[  753.660773][T14298]  dt21-ez
[  753.663927][T14298]  dt23-ez
[  753.667043][T14298]  dt24-ez
[  753.672915][T14298]  dt24-ez-pgl
[  753.673352][T14213] hsr_slave_1: entered promiscuous mode
[  753.676477][T14298] comedi: valid board names for dt2817 driver are:
[  753.676492][T14298]  dt2817
[  753.676501][T14298] comedi: valid board names for dt2815 driver are:
[  753.676511][T14298]  dt2815
[  753.676518][T14298] comedi: valid board names for dt2814 driver are:
[  753.676528][T14298]  dt2814
[  753.676536][T14298] comedi: valid board names for dt2811 driver are:
[  753.676547][T14298]  dt2811-pgh
[  753.676555][T14298]  dt2811-pgl
[  753.676563][T14298] comedi: valid board names for dt2801 driver are:
[  753.676572][T14298]  dt2801
[  753.676580][T14298] comedi: valid board names for das6402 driver are:
[  753.676590][T14298]  das6402-12
[  753.676597][T14298]  das6402-16
[  753.750097][T14298] comedi: valid board names for das1800 driver are:
[  753.757134][T14298]  das-1701st
[  753.760440][T14298]  das-1701st-da
[  753.764096][T14298]  das-1702st
[  753.768129][T14298]  das-1702st-da
[  753.771791][T14298]  das-1702hr
[  753.775104][T14298]  das-1702hr-da
[  753.778821][T14298]  das-1701ao
[  753.782144][T14298]  das-1702ao
[  753.785460][T14298]  das-1801st
[  753.788915][T14298]  das-1801st-da
[  753.792684][T14298]  das-1802st
[  753.796176][T14298]  das-1802st-da
[  753.799930][T14298]  das-1802hr
[  753.803264][T14298]  das-1802hr-da
[  753.807188][T14298]  das-1801hc
[  753.810865][T14298]  das-1802hc
[  753.814271][T14298]  das-1801ao
[  753.817814][T14298]  das-1802ao
[  753.821150][T14298] comedi: valid board names for das800 driver are:
[  753.827951][T14298]  das-800
[  753.831381][T14298]  cio-das800
[  753.834719][T14298]  das-801
[  753.837962][T14298]  cio-das801
[  753.841437][T14298]  das-802
[  753.844689][T14298]  cio-das802
[  753.848185][T14298]  cio-das802/16
[  753.851779][T14298] comedi: valid board names for isa-das08 driver are:
[  753.859032][T14298]  isa-das08
[  753.862279][T14298]  das08-pgm
[  753.865604][T14298]  das08-pgh
[  753.869023][T14298]  das08-pgl
[  753.872398][T14298]  das08-aoh
[  753.875914][T14298]  das08-aol
[  753.879525][T14298]  das08-aom
[  753.882759][T14298]  das08/jr-ao
[  753.886361][T14298]  das08jr-16-ao
[  753.889985][T14298]  pc104-das08
[  753.893563][T14298]  das08jr/16
[  753.897662][T14298] comedi: valid board names for das16m1 driver are:
[  753.904532][T14298]  das16m1
[  753.907711][T14298] comedi: valid board names for dac02 driver are:
[  753.914481][T14298]  dac02
[  753.917560][T14298] comedi: valid board names for rti802 driver are:
[  753.925079][T14298]  rti802
[  753.928323][T14298] comedi: valid board names for rti800 driver are:
[  753.935031][T14298]  rti800
[  753.938220][T14298]  rti815
[  753.941300][T14298] comedi: valid board names for pcm3724 driver are:
[  753.948112][T14298]  pcm3724
[  753.951176][T14298] comedi: valid board names for pcl818 driver are:
[  753.957888][T14298]  pcl818l
[  753.961195][T14298]  pcl818h
[  753.964220][T14298]  pcl818hd
[  753.967416][T14298]  pcl818hg
[  753.970627][T14298]  pcl818
[  753.973562][T14298]  pcl718
[  753.976599][T14298]  pcm3718
[  753.979782][T14298] comedi: valid board names for pcl816 driver are:
[  753.986369][T14298]  pcl816
[  753.989333][T14298]  pcl814b
[  753.992652][T14298] comedi: valid board names for pcl812 driver are:
[  753.999300][T14298]  pcl812
[  754.002317][T14298]  pcl812pg
[  754.005422][T14298]  acl8112pg
[  754.008849][T14298]  acl8112dg
[  754.012179][T14298]  acl8112hg
[  754.015623][T14298]  a821pgl
[  754.018783][T14298]  a821pglnda
[  754.022107][T14298]  a821pgh
[  754.025240][T14298]  a822pgl
[  754.030564][T14298]  a822pgh
[  754.033632][T14298]  a823pgl
[  754.037547][T14298]  a823pgh
[  754.040590][T14298]  pcl813
[  754.043619][T14298]  pcl813b
[  754.046758][T14298]  acl8113
[  754.049821][T14298]  iso813
[  754.052791][T14298]  acl8216
[  754.055999][T14298]  a826pg
[  754.059046][T14298] comedi: valid board names for pcl730 driver are:
[  754.065719][T14298]  pcl730
[  754.068948][T14298]  iso730
[  754.071969][T14298]  acl7130
[  754.075032][T14298]  pcm3730
[  754.078162][T14298]  pcl725
[  754.081179][T14298]  p8r8dio
[  754.084287][T14298]  acl7225b
[  754.087718][T14298]  p16r16dio
[  754.090955][T14298]  pcl733
[  754.093943][T14298]  pcl734
[  754.097002][T14298]  opmm-1616-xt
[  754.100615][T14298]  pearl-mm-p
[  754.104163][T14298]  ir104-pbf
[  754.107472][T14298] comedi: valid board names for pcl726 driver are:
[  754.114008][T14298]  pcl726
[  754.117382][T14298]  pcl727
[  754.120377][T14298]  pcl728
[  754.123331][T14298]  acl6126
[  754.126540][T14298]  acl6128
[  754.129588][T14298] comedi: valid board names for pcl724 driver are:
[  754.136258][T14298]  pcl724
[  754.139220][T14298]  pcl722
[  754.142238][T14298]  pcl731
[  754.145171][T14298]  acl7122
[  754.148398][T14298]  acl7124
[  754.151449][T14298]  pet48dio
[  754.154584][T14298]  pcmio48
[  754.157788][T14298]  onyx-mm-dio
[  754.161267][T14298] comedi: valid board names for pcl711 driver are:
[  754.167912][T14298]  pcl711
[  754.170872][T14298]  pcl711b
[  754.173897][T14298]  acl8112hg
[  754.177188][T14298]  acl8112dg
[  754.180401][T14298] comedi: valid board names for amplc_pc263 driver are:
[  754.187404][T14298]  pc263
[  754.190293][T14298] comedi: valid board names for amplc_pc236 driver are:
[  754.197311][T14298]  pc36at
[  754.200263][T14298] comedi: valid board names for amplc_dio200 driver are:
[  754.207601][T14298]  pc212e
[  754.210563][T14298]  pc214e
[  754.213497][T14298]  pc215e
[  754.216528][T14298]  pc218e
[  754.219894][T14298]  pc272e
[  754.222872][T14298] comedi: valid board names for comedi_parport driver are:
[  754.230192][T14298]  comedi_parport
[  754.233845][T14298] comedi: valid board names for comedi_test driver are:
[  754.240923][T14298]  comedi_test
[  754.244491][T14298] comedi: valid board names for comedi_bond driver are:
[  754.251640][T14298]  comedi_bond
[  754.323966][ T5775] Bluetooth: hci0: command tx timeout
[  754.334302][T14213] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  754.334996][T12894] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  754.342061][T14213] Cannot create hsr debugfs directory
[  754.377407][T12894] EXT4-fs (loop4): This should not happen!! Data will be lost
[  754.377407][T12894] 
[  754.454756][ T8026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  754.455310][T12889] hsr_slave_0: left promiscuous mode
[  754.511023][T12889] hsr_slave_1: left promiscuous mode
[  754.522868][T12889] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  754.549501][T12889] batman_adv: batadv0: Removing interface: batadv_slave_0
[  754.594359][T12889] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  754.621879][T12889] batman_adv: batadv0: Removing interface: batadv_slave_1
[  754.638296][T12889] bridge_slave_1: left allmulticast mode
[  754.644279][T12889] bridge_slave_1: left promiscuous mode
[  754.655495][T12889] bridge0: port 2(bridge_slave_1) entered disabled state
[  754.679881][T12889] bridge_slave_0: left allmulticast mode
[  754.695244][T12889] bridge_slave_0: left promiscuous mode
[  754.708515][T12889] bridge0: port 1(bridge_slave_0) entered disabled state
[  754.869134][T12889] veth1_macvtap: left promiscuous mode
[  754.890940][T12889] veth0_macvtap: left promiscuous mode
[  754.901939][T12889] veth1_vlan: left promiscuous mode
[  754.914236][T12889] veth0_vlan: left promiscuous mode
[  755.880347][T12889] bond1 (unregistering): Released all slaves
[  758.146046][T10601] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  758.553430][T10601] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  759.234990][T10601] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  759.247342][T10601] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  759.267361][T10601] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  759.289745][T10601] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  759.337670][T10601] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  759.348101][T10601] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  759.360824][T10601] usb 5-1: Product: syz
[  759.365156][T10601] usb 5-1: Manufacturer: syz
[  759.389473][T10601] cdc_wdm 5-1:1.0: skipping garbage
[  759.395504][T10601] cdc_wdm 5-1:1.0: skipping garbage
[  759.430968][T10601] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  759.437195][T10601] cdc_wdm 5-1:1.0: Unknown control protocol
[  759.731277][ T5756] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  759.996097][ T5756] usb 1-1: Using ep0 maxpacket: 16
[  760.009864][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  760.016960][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  760.024596][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  760.031236][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  760.037699][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  760.044322][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  760.051235][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  760.057953][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  760.064917][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  760.071819][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  760.079356][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  760.086065][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  760.092809][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  760.099600][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  760.106169][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  760.112946][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  760.119306][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  760.126044][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  760.132488][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  760.139287][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  760.445989][    T8] usb 5-1: USB disconnect, device number 10
[  760.492377][ T5756] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  760.508372][ T5756] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  760.529590][ T5756] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  760.554119][ T5756] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.596230][ T5756] usb 1-1: Product: syz
[  760.600575][ T5756] usb 1-1: Manufacturer: syz
[  760.605301][ T5756] usb 1-1: SerialNumber: syz
[  760.843804][ T5756] usb 1-1: 0:2 : does not exist
[  760.863164][ T5756] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  760.988599][ T5756] usb 1-1: USB disconnect, device number 14
[  761.670258][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  762.122735][T12889] team0 (unregistering): Port device team_slave_1 removed
[  762.206456][T10603] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  762.225108][T12889] team0 (unregistering): Port device team_slave_0 removed
[  762.349807][T12889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  762.415824][T10603] usb 5-1: Using ep0 maxpacket: 16
[  762.423654][T10603] usb 5-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[  762.434560][T10603] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  762.456522][T10603] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  762.472239][T10603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  762.481940][T10603] usb 5-1: Product: syz
[  762.492689][T10603] usb 5-1: Manufacturer: syz
[  762.498015][T10603] usb 5-1: SerialNumber: syz
[  762.543557][T12889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  762.817589][T10603] usb 5-1: 0:2 : does not exist
[  762.852539][T10603] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  762.966669][T10603] usb 5-1: USB disconnect, device number 11
[  763.054557][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  764.369183][T14375] loop0: detected capacity change from 0 to 128
[  764.417590][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  764.417609][   T27] audit: type=1804 audit(1770719709.130:564): pid=14375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2176" name="/newroot/512/file0/bus" dev="loop0" ino=1048629 res=1 errno=0
[  764.851181][T14380] loop0: detected capacity change from 0 to 64
[  765.515081][T12889] bond0 (unregistering): Released all slaves
[  765.885438][ T1195] wg1 speed is unknown, defaulting to 1000
[  765.888368][T14363] netlink: 2088 bytes leftover after parsing attributes in process `syz.5.2171'.
[  767.838681][T14414] loop0: detected capacity change from 0 to 512
[  767.883900][T14414] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[  768.740216][T14422] qnx6: unable to read the first superblock
[  769.125920][T14420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  769.163398][T12889] IPVS: stop unused estimator thread 0...
[  770.073197][T14213] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  770.189181][T14213] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  770.229621][T14213] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  770.268845][T14213] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  772.371059][T14213] 8021q: adding VLAN 0 to HW filter on device bond0
[  772.595239][T14213] 8021q: adding VLAN 0 to HW filter on device team0
[  772.667760][T12896] bridge0: port 1(bridge_slave_0) entered blocking state
[  772.675198][T12896] bridge0: port 1(bridge_slave_0) entered forwarding state
[  772.777168][T12896] bridge0: port 2(bridge_slave_1) entered blocking state
[  772.784601][T12896] bridge0: port 2(bridge_slave_1) entered forwarding state
[  773.472442][T14213] 8021q: adding VLAN 0 to HW filter on device batadv0
[  773.642051][T14213] veth0_vlan: entered promiscuous mode
[  773.673311][T14213] veth1_vlan: entered promiscuous mode
[  773.783450][T14213] veth0_macvtap: entered promiscuous mode
[  773.847713][T14213] veth1_macvtap: entered promiscuous mode
[  773.942354][T14213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  773.992855][T14213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  774.046863][T14213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  774.197858][T14213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  774.382542][T14213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  774.588645][T14213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  774.675396][T14213] batman_adv: batadv0: Interface activated: batadv_slave_0
[  774.769437][T14213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  774.855961][T14213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  774.871838][T14213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  774.883134][T14213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  774.898859][T14213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  774.915046][T14213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  775.101369][T14213] batman_adv: batadv0: Interface activated: batadv_slave_1
[  775.175910][T14213] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  775.232946][T14213] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  775.285764][T14213] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  775.335758][T14213] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  775.672351][  T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  775.672378][  T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  776.801480][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  776.835977][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  778.142046][T14536] loop4: detected capacity change from 0 to 512
[  778.173101][T14536] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[  781.111151][T14559] loop0: detected capacity change from 0 to 256
[  781.589911][T14559] FAT-fs (loop0): Directory bread(block 64) failed
[  782.366064][T14559] FAT-fs (loop0): Directory bread(block 65) failed
[  782.372893][T14559] FAT-fs (loop0): Directory bread(block 66) failed
[  782.382465][T14559] FAT-fs (loop0): Directory bread(block 67) failed
[  782.390233][T14559] FAT-fs (loop0): Directory bread(block 68) failed
[  782.398828][T14559] FAT-fs (loop0): Directory bread(block 69) failed
[  782.406491][T14559] FAT-fs (loop0): Directory bread(block 70) failed
[  782.413429][T14559] FAT-fs (loop0): Directory bread(block 71) failed
[  782.424520][T14559] FAT-fs (loop0): Directory bread(block 72) failed
[  782.431759][T14559] FAT-fs (loop0): Directory bread(block 73) failed
[  784.031173][T14570] qnx6: unable to read the first superblock
[  784.118254][T14569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  786.545016][T14596] binder: 14595:14596 ioctl c0306201 0 returned -14
[  786.553060][T14596] binder: 14595:14596 ioctl 40046104 0 returned -22
[  786.816237][ T5756] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  787.245740][ T5756] usb 5-1: Using ep0 maxpacket: 16
[  787.253461][ T5756] usb 5-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[  787.264732][ T5756] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  788.097595][ T5756] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  788.115787][ T5756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.123953][ T5756] usb 5-1: Product: syz
[  788.129581][ T5756] usb 5-1: Manufacturer: syz
[  788.134227][ T5756] usb 5-1: SerialNumber: syz
[  788.192840][T14619] loop0: detected capacity change from 0 to 128
[  788.363048][ T5756] usb 5-1: 0:2 : does not exist
[  788.408362][ T5756] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  788.477878][ T5756] usb 5-1: USB disconnect, device number 12
[  788.579837][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  789.370396][T14637] overlayfs: failed to resolve './file0': -2
[  795.845840][T12173] Bluetooth: hci3: command 0x0406 tx timeout
[  795.881515][T14693] overlayfs: failed to resolve './file0': -2
[  802.175839][T10592] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  802.355880][T10592] usb 2-1: Using ep0 maxpacket: 16
[  802.374498][T10592] usb 2-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[  802.402312][T10592] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  802.424547][T10592] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  802.435940][T10592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  802.455110][T10592] usb 2-1: Product: syz
[  802.465246][T10592] usb 2-1: Manufacturer: syz
[  802.481855][T10592] usb 2-1: SerialNumber: syz
[  802.719195][T10592] usb 2-1: 0:2 : does not exist
[  802.757752][T10592] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  802.810512][T10592] usb 2-1: USB disconnect, device number 7
[  802.882144][T14752] udevd[14752]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  807.265148][T14797] fuse: Bad value for 'fd'
[  807.716218][T10592] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  807.905953][T10592] usb 5-1: Using ep0 maxpacket: 16
[  808.014010][T10592] usb 5-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[  808.165557][T10592] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  808.382785][T10592] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  808.533435][T10592] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  808.545994][T10592] usb 5-1: Product: syz
[  808.550243][T10592] usb 5-1: Manufacturer: syz
[  808.565513][T10592] usb 5-1: SerialNumber: syz
[  808.807280][T10592] usb 5-1: 0:2 : does not exist
[  808.829845][T10592] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  809.108822][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  809.115295][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  809.133749][T10592] usb 5-1: USB disconnect, device number 13
[  809.181335][T14752] udevd[14752]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  811.614789][T14835] fuse: Bad value for 'fd'
[  815.677912][T14865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2302'.
[  816.582973][T14872] fuse: Bad value for 'fd'
[  816.809946][T14874] qnx6: unable to read the first superblock
[  816.935905][T14873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  817.180349][T14862] loop1: detected capacity change from 0 to 40427
[  817.197265][T14862] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  817.205437][T14862] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  817.240354][T14862] F2FS-fs (loop1): invalid crc value
[  817.770718][T14862] F2FS-fs (loop1): Found nat_bits in checkpoint
[  818.445896][T14862] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  818.482651][T14893] loop4: detected capacity change from 0 to 256
[  818.500268][T14862] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  818.820764][T14893] FAT-fs (loop4): Directory bread(block 64) failed
[  818.829331][T14893] FAT-fs (loop4): Directory bread(block 65) failed
[  818.837063][T14893] FAT-fs (loop4): Directory bread(block 66) failed
[  818.844101][T14893] FAT-fs (loop4): Directory bread(block 67) failed
[  818.851840][T14893] FAT-fs (loop4): Directory bread(block 68) failed
[  818.858969][T14893] FAT-fs (loop4): Directory bread(block 69) failed
[  818.866581][T14893] FAT-fs (loop4): Directory bread(block 70) failed
[  818.873669][T14893] FAT-fs (loop4): Directory bread(block 71) failed
[  818.881193][T14893] FAT-fs (loop4): Directory bread(block 72) failed
[  818.888089][T14893] FAT-fs (loop4): Directory bread(block 73) failed
[  820.440980][T14914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  823.815976][T14346] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  823.997088][T14346] usb 5-1: Using ep0 maxpacket: 16
[  824.015811][T14346] usb 5-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[  824.045810][T14346] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  824.060256][T14346] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  824.073063][T14346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  824.105196][T14947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  824.171622][T14346] usb 5-1: Product: syz
[  824.176085][T14346] usb 5-1: Manufacturer: syz
[  824.180921][T14346] usb 5-1: SerialNumber: syz
[  824.516171][T14346] usb 5-1: 0:2 : does not exist
[  824.529196][T14346] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  824.556115][T14346] usb 5-1: USB disconnect, device number 14
[  825.260502][T14899] udevd[14899]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  826.823018][T14982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  828.179496][T15009] loop1: detected capacity change from 0 to 256
[  828.500343][T15009] FAT-fs (loop1): Directory bread(block 64) failed
[  828.507364][T15009] FAT-fs (loop1): Directory bread(block 65) failed
[  828.514361][T15009] FAT-fs (loop1): Directory bread(block 66) failed
[  828.521486][T15009] FAT-fs (loop1): Directory bread(block 67) failed
[  828.528490][T15009] FAT-fs (loop1): Directory bread(block 68) failed
[  828.535297][T15009] FAT-fs (loop1): Directory bread(block 69) failed
[  828.542402][T15009] FAT-fs (loop1): Directory bread(block 70) failed
[  828.549282][T15009] FAT-fs (loop1): Directory bread(block 71) failed
[  828.556333][T15009] FAT-fs (loop1): Directory bread(block 72) failed
[  828.563554][T15009] FAT-fs (loop1): Directory bread(block 73) failed
[  829.191246][T15014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  829.279494][ T5775] Bluetooth: hci0: command 0x0406 tx timeout
[  829.815016][T15027] fuse: Bad value for 'fd'
[  831.358347][T15037] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2357'.
[  831.375689][   T27] audit: type=1326 audit(1770719776.090:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15040 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357059af79 code=0x7ffc0000
[  831.403178][   T27] audit: type=1326 audit(1770719776.090:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15040 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357059af79 code=0x7ffc0000
[  831.463899][   T27] audit: type=1326 audit(1770719776.090:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15040 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357059af79 code=0x7ffc0000
[  831.490847][   T27] audit: type=1326 audit(1770719776.090:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15040 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357059af79 code=0x7ffc0000
[  831.709983][   T27] audit: type=1326 audit(1770719776.100:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15040 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f357059af79 code=0x7ffc0000
[  831.757814][   T27] audit: type=1326 audit(1770719776.100:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15040 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357059af79 code=0x7ffc0000
[  831.785979][   T27] audit: type=1326 audit(1770719776.100:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15040 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357059af79 code=0x7ffc0000
[  831.819562][   T27] audit: type=1326 audit(1770719776.100:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15040 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357059af79 code=0x7ffc0000
[  831.849688][   T27] audit: type=1326 audit(1770719776.100:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15040 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357059af79 code=0x7ffc0000
[  831.920783][   T27] audit: type=1326 audit(1770719776.100:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15040 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f357059af79 code=0x7ffc0000
[  831.965207][T15054] bridge1: entered promiscuous mode
[  831.971142][T15054] bridge1: entered allmulticast mode
[  831.993188][T15054] team0: Port device bridge1 added
[  832.004679][T15055] bridge0: port 3(team0) entered blocking state
[  832.013867][T15055] bridge0: port 3(team0) entered disabled state
[  832.021253][T15055] team0: entered allmulticast mode
[  832.027201][T15055] team_slave_0: entered allmulticast mode
[  832.036083][T15055] team_slave_1: entered allmulticast mode
[  832.053079][T15055] team0: entered promiscuous mode
[  832.058614][T15055] team_slave_0: entered promiscuous mode
[  832.073259][T15055] team_slave_1: entered promiscuous mode
[  832.089892][T15055] bridge0: port 3(team0) entered blocking state
[  832.097517][T15055] bridge0: port 3(team0) entered forwarding state
[  832.120414][T15054] team0: left allmulticast mode
[  832.125873][T15054] team_slave_0: left allmulticast mode
[  832.131480][T15054] team_slave_1: left allmulticast mode
[  832.137715][T15054] team0: left promiscuous mode
[  832.142744][T15054] team_slave_0: left promiscuous mode
[  832.152632][T15054] team_slave_1: left promiscuous mode
[  832.165469][T15054] bridge0: port 3(team0) entered disabled state
[  832.180972][T15054] bridge_slave_0: left allmulticast mode
[  832.187678][T15054] bridge_slave_0: left promiscuous mode
[  832.193589][T15054] bridge0: port 1(bridge_slave_0) entered disabled state
[  832.204616][T15054] bridge_slave_1: left allmulticast mode
[  832.212324][T15054] bridge_slave_1: left promiscuous mode
[  832.221948][T15054] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.241780][T15054] bond0: (slave bond_slave_0): Releasing backup interface
[  832.261098][T15054] bond0: (slave bond_slave_1): Releasing backup interface
[  832.312186][T15054] team0: Port device team_slave_0 removed
[  832.346290][T15054] team0: Port device team_slave_1 removed
[  832.354111][T15054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  832.464026][T15054] batman_adv: batadv0: Removing interface: batadv_slave_0
[  832.631761][T15054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  832.650620][T15054] batman_adv: batadv0: Removing interface: batadv_slave_1
[  833.558361][T15054] team0: Port device bridge1 removed
[  833.578671][T15068] fuse: Bad value for 'fd'
[  833.944584][T15074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2369'.
[  835.441460][T15082] loop1: detected capacity change from 0 to 512
[  835.465040][T15082] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.2371: iget: bad extended attribute block 1
[  835.495894][T15082] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.2371: couldn't read orphan inode 15 (err -117)
[  835.510123][T15082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  835.531014][T15091] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  835.531014][T15091] The task syz.4.2372 (15091) triggered the difference, watch for misbehavior.
[  835.568256][T15082] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #2: block 13: comm syz.1.2371: lblock 0 mapped to illegal pblock 13 (length 1)
[  835.591942][T15082] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz.1.2371: error -117 reading directory block
[  835.633181][T14213] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  837.313141][T15107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  840.717707][T15146] loop1: detected capacity change from 0 to 40427
[  841.120609][T15146] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  841.128803][T15146] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  841.302746][T15146] F2FS-fs (loop1): invalid crc value
[  841.487228][T15146] F2FS-fs (loop1): Found nat_bits in checkpoint
[  841.546668][T15146] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  841.553789][T15146] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  842.146518][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  842.146536][   T27] audit: type=1800 audit(1770719786.810:579): pid=15162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2392" name="file1" dev="loop1" ino=10 res=0 errno=0
[  842.925984][ T1195] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  843.176078][ T1195] usb 5-1: Using ep0 maxpacket: 16
[  843.320988][ T1195] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  843.656198][ T1195] usb 5-1: config 0 interface 0 has no altsetting 0
[  843.750416][ T1195] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  843.850493][ T1195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.974144][ T1195] usb 5-1: Product: syz
[  844.060756][ T1195] usb 5-1: Manufacturer: syz
[  844.065445][ T1195] usb 5-1: SerialNumber: syz
[  844.336572][ T1195] usb 5-1: config 0 descriptor??
[  844.821385][    C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  844.838409][ T1195] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9
[  844.865318][ T1195] imon:send_packet: packet tx failed (-71)
[  844.892137][ T1195] imon 5-1:0.0: panel buttons/knobs setup failed
[  845.681656][ T1195] rc_core: IR keymap rc-imon-pad not found
[  845.704383][ T1195] Registered IR keymap rc-empty
[  845.722114][ T1195] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  845.755726][ T1195] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  845.988605][ T1195] imon:send_packet: packet tx failed (-71)
[  846.025777][ T1195] imon 5-1:0.0: remote input dev register failed
[  846.034643][ T1195] imon 5-1:0.0: imon_init_intf0: rc device setup failed
[  847.133841][ T1195] imon 5-1:0.0: unable to initialize intf0, err 0
[  847.141817][ T1195] imon:imon_probe: failed to initialize context!
[  847.148276][ T1195] imon 5-1:0.0: unable to register, err -19
[  847.167465][ T1195] usb 5-1: USB disconnect, device number 15
[  847.857134][ T1195] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  848.340250][ T1195] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  848.384288][ T1195] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  848.395455][T15247] loop1: detected capacity change from 0 to 512
[  848.418870][ T1195] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  848.429969][T15247] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  848.446795][ T1195] usb 5-1: config 1 interface 1 has no altsetting 0
[  848.453669][T15247] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  848.473260][T15247] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  848.482026][ T1195] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  848.495693][ T1195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.503737][ T1195] usb 5-1: Product: syz
[  848.516539][T15247] System zones: 1-12
[  848.527918][T15247] EXT4-fs (loop1): orphan cleanup on readonly fs
[  848.546393][ T1195] usb 5-1: Manufacturer: syz
[  848.551046][ T1195] usb 5-1: SerialNumber: syz
[  848.561148][T15247] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2408: invalid indirect mapped block 2 (level 2)
[  848.603159][T15247] EXT4-fs (loop1): Remounting filesystem read-only
[  848.610879][T15247] EXT4-fs (loop1): 1 truncate cleaned up
[  848.618533][T15247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  850.614236][ T1195] usb 5-1: selecting invalid altsetting 0
[  850.667343][ T1195] usb 5-1: selecting invalid altsetting 0
[  850.717715][T15262] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:0
[  851.057568][ T1195] cdc_ncm 5-1:1.0: bind() failure
[  851.414444][ T1195] usb 5-1: selecting invalid altsetting 0
[  851.553316][T14213] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  851.562950][ T1195] cdc_ncm: probe of 5-1:1.1 failed with error -22
[  851.578462][ T1195] usb 5-1: selecting invalid altsetting 0
[  851.584464][ T1195] cdc_mbim: probe of 5-1:1.1 failed with error -22
[  851.594089][ T1195] usb 5-1: selecting invalid altsetting 0
[  851.655666][ T1195] usbtest: probe of 5-1:1.1 failed with error -22
[  851.684935][ T1195] usb 5-1: USB disconnect, device number 16
[  853.182249][ T1195] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  854.617562][ T1195] usb 5-1: Using ep0 maxpacket: 16
[  854.640888][ T1195] usb 5-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[  855.328045][ T1195] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  855.345822][ T1195] usb 5-1: string descriptor 0 read error: -71
[  855.352372][ T1195] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  855.361589][ T1195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.372011][ T1195] usb 5-1: can't set config #1, error -71
[  855.381229][ T1195] usb 5-1: USB disconnect, device number 17
[  857.688927][    T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  858.852584][    T8] usb 2-1: device not accepting address 8, error -71
[  861.741371][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  861.759713][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  861.774172][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  861.797210][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  861.807905][T12903] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  861.823474][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  861.831825][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  861.981157][T12903] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  862.088487][T12903] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  862.178793][T10594] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  862.225044][T12903] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  862.385780][T10594] usb 5-1: Using ep0 maxpacket: 16
[  862.394576][T10594] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  862.436094][T10594] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  862.490852][T10594] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  862.541580][T10594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.575891][T10594] usb 5-1: Product: syz
[  862.580311][T10594] usb 5-1: Manufacturer: syz
[  862.631680][T10594] usb 5-1: SerialNumber: syz
[  862.793462][T15341] chnl_net:caif_netlink_parms(): no params data found
[  862.907340][T10594] usb 5-1: 0:2 : does not exist
[  862.959297][T10594] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  862.975895][T15355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  863.027853][T12903] tipc: Left network mode
[  863.065136][T10594] usb 5-1: USB disconnect, device number 18
[  863.165121][T14899] udevd[14899]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  863.215170][T15341] bridge0: port 1(bridge_slave_0) entered blocking state
[  863.224866][T15341] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.247194][T15341] bridge_slave_0: entered allmulticast mode
[  863.254058][T15341] bridge_slave_0: entered promiscuous mode
[  863.293781][T15341] bridge0: port 2(bridge_slave_1) entered blocking state
[  863.307628][T15341] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.314929][T15341] bridge_slave_1: entered allmulticast mode
[  863.330471][T15341] bridge_slave_1: entered promiscuous mode
[  863.394545][T15341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  863.409987][T15341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  863.916098][T12173] Bluetooth: hci2: command tx timeout
[  864.521382][T15341] team0: Port device team_slave_0 added
[  864.570343][T15341] team0: Port device team_slave_1 added
[  865.064918][T15341] batman_adv: batadv0: Adding interface: batadv_slave_0
[  865.082922][T15341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  865.125726][T15341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  865.156055][T15341] batman_adv: batadv0: Adding interface: batadv_slave_1
[  865.171424][T15341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  865.230206][T15341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  865.728741][T15341] hsr_slave_0: entered promiscuous mode
[  865.744356][T15341] hsr_slave_1: entered promiscuous mode
[  865.751538][T15341] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  865.766764][T15341] Cannot create hsr debugfs directory
[  866.013730][T12173] Bluetooth: hci2: command tx timeout
[  866.024782][T12903] hsr_slave_0: left promiscuous mode
[  866.077163][T12903] hsr_slave_1: left promiscuous mode
[  866.107770][T12903] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  866.152232][T12903] batman_adv: batadv0: Removing interface: batadv_slave_0
[  866.182391][T12903] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  866.202870][T12903] batman_adv: batadv0: Removing interface: batadv_slave_1
[  866.215876][T12903] bridge_slave_1: left allmulticast mode
[  866.225894][T12903] bridge_slave_1: left promiscuous mode
[  866.253924][T12903] bridge0: port 2(bridge_slave_1) entered disabled state
[  866.276802][T12903] bridge_slave_0: left allmulticast mode
[  866.296135][T12903] bridge_slave_0: left promiscuous mode
[  866.332353][T12903] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.525731][T10598] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  866.592500][T12903] veth1_macvtap: left promiscuous mode
[  866.608275][T12903] veth0_macvtap: left promiscuous mode
[  866.614441][T12903] veth1_vlan: left promiscuous mode
[  866.735777][T10598] usb 5-1: Using ep0 maxpacket: 16
[  866.751278][T10598] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  866.805954][T10598] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  866.833714][T10598] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  866.865659][T10598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.873910][T10598] usb 5-1: Product: syz
[  866.915347][T10598] usb 5-1: Manufacturer: syz
[  866.925537][T10598] usb 5-1: SerialNumber: syz
[  867.179676][T10598] usb 5-1: 0:2 : does not exist
[  867.220676][T10598] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  867.283290][T10598] usb 5-1: USB disconnect, device number 19
[  867.343095][T14899] udevd[14899]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  868.077560][T12173] Bluetooth: hci2: command tx timeout
[  869.608385][T12903] team0 (unregistering): Port device team_slave_1 removed
[  869.717787][T12903] team0 (unregistering): Port device team_slave_0 removed
[  870.039505][T12903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  870.788613][T12173] Bluetooth: hci2: command tx timeout
[  870.927470][T15446] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2457'.
[  870.939748][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  870.947524][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  871.441778][T12903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  873.119171][T12173] Bluetooth: hci0: command 0x0406 tx timeout
[  873.267281][T12903] bond0 (unregistering): Released all slaves
[  873.511885][T15446] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  873.520319][   T27] audit: type=1800 audit(1770719818.230:580): pid=15446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2457" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  873.522226][T15446] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  873.552009][T15446] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  875.057258][T12903] IPVS: stop unused estimator thread 0...
[  875.285722][T10594] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  875.480958][T10594] usb 5-1: Using ep0 maxpacket: 16
[  875.521353][T10594] usb 5-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[  875.555251][T10594] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  875.632164][T10594] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  875.655951][T10594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.503145][T10594] usb 5-1: Product: syz
[  876.507513][T10594] usb 5-1: Manufacturer: syz
[  876.512408][T10594] usb 5-1: SerialNumber: syz
[  877.820408][T10594] usb 5-1: 0:2 : does not exist
[  877.850720][T10594] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  877.913635][T10594] usb 5-1: USB disconnect, device number 20
[  878.001743][T14899] udevd[14899]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  878.156660][T15503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2469'.
[  878.271926][T15341] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  878.316356][T15341] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  878.351364][T15341] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  878.386426][T15341] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  878.649244][T15341] 8021q: adding VLAN 0 to HW filter on device bond0
[  878.699521][T15341] 8021q: adding VLAN 0 to HW filter on device team0
[  878.894453][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state
[  878.901853][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state
[  878.911255][T10602] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  878.924285][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state
[  878.932056][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state
[  879.106707][T10602] usb 5-1: Using ep0 maxpacket: 8
[  879.144838][T10602] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  879.209616][T10602] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  879.348831][T10602] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  879.534742][T10602] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  879.771661][T10602] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  879.847235][T10602] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  879.912309][T10602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  881.093675][T10602] usb 5-1: usb_control_msg returned -32
[  881.154058][T15516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  881.168459][T10602] usbtmc 5-1:16.0: can't read capabilities
[  881.221079][T15516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  881.628315][T15516] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0
[  881.671821][T15548] qnx6: unable to read the first superblock
[  881.725361][T15341] 8021q: adding VLAN 0 to HW filter on device batadv0
[  881.733431][T15543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  882.042819][T10598] usb 5-1: USB disconnect, device number 21
[  882.662614][T15341] veth0_vlan: entered promiscuous mode
[  882.728687][T15341] veth1_vlan: entered promiscuous mode
[  883.021700][T15341] veth0_macvtap: entered promiscuous mode
[  883.033621][T15341] veth1_macvtap: entered promiscuous mode
[  883.242029][T15341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  883.254231][T15341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  883.280857][T15341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  883.292197][T15341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  883.402467][T15341] batman_adv: batadv0: Interface activated: batadv_slave_0
[  883.554929][T15341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  883.630186][T15341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  883.643021][T15558] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  883.661328][T15341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  883.703885][T15341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  883.718931][T15561] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  883.796892][T15341] batman_adv: batadv0: Interface activated: batadv_slave_1
[  883.849855][T15341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  883.849883][T15341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  883.849901][T15341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  883.849918][T15341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  886.200773][ T4496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  886.235781][ T4496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  886.715677][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  886.784905][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  890.142238][T15635] ptrace attach of "./syz-executor exec"[15341] was attempted by "./syz-executor exec"[15635]
[  890.835395][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2493'.
[  892.291158][T15657] loop4: detected capacity change from 0 to 128
[  892.380397][T15657] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  893.523989][T15668] overlayfs: missing 'lowerdir'
[  896.337911][T15687] loop1: detected capacity change from 0 to 512
[  896.361721][T15687] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  896.386624][T15685] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  896.458117][T15687] EXT4-fs (loop1): 1 truncate cleaned up
[  896.480726][T15687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  896.976223][T14213] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  899.162604][T15732] loop0: detected capacity change from 0 to 512
[  899.206720][T15732] EXT4-fs: Ignoring removed orlov option
[  900.100363][T15732] EXT4-fs (loop0): Test dummy encryption mode enabled
[  900.285727][T15732] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  900.374593][T15732] EXT4-fs (loop0): 1 truncate cleaned up
[  900.430374][T15732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  900.769200][T15747] loop1: detected capacity change from 0 to 512
[  900.909342][T15747] EXT4-fs (loop1): 1 truncate cleaned up
[  901.137041][T15747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  902.076043][T15743] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  903.528986][T15743] EXT4-fs (loop1): Remounting filesystem read-only
[  903.839401][T15341] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  904.013288][T14213] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  905.066985][T15785] loop0: detected capacity change from 0 to 64
[  911.809757][T10598] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  912.679329][T10598] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  912.731225][T10598] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  912.755797][T10598] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  912.764862][T10598] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  912.793223][T10598] usb 5-1: Product: syz
[  912.801661][T10598] usb 5-1: Manufacturer: syz
[  912.810652][T10598] usb 5-1: SerialNumber: syz
[  912.850632][T10598] usb 5-1: config 0 descriptor??
[  915.130111][T10603] usb 5-1: USB disconnect, device number 22
[  915.417769][T15869] overlayfs: missing 'workdir'
[  917.437665][T15902] overlayfs: missing 'workdir'
[  917.625871][T10598] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  917.825953][T10598] usb 2-1: Using ep0 maxpacket: 8
[  917.842111][T10598] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  917.863090][T10598] usb 2-1: config 0 has no interface number 0
[  917.871871][T10598] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  917.885242][T10598] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  917.903458][T10598] usb 2-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0
[  917.914298][T10598] usb 2-1: Product: syz
[  917.925151][T10598] usb 2-1: config 0 descriptor??
[  917.949832][T10598] iowarrior 2-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0
[  918.181161][T15911] loop0: detected capacity change from 0 to 256
[  918.544311][T15911] FAT-fs (loop0): Directory bread(block 64) failed
[  918.551224][T15911] FAT-fs (loop0): Directory bread(block 65) failed
[  918.558384][T15911] FAT-fs (loop0): Directory bread(block 66) failed
[  918.565285][T15911] FAT-fs (loop0): Directory bread(block 67) failed
[  918.573286][T15911] FAT-fs (loop0): Directory bread(block 68) failed
[  918.580450][T15911] FAT-fs (loop0): Directory bread(block 69) failed
[  918.587730][T15911] FAT-fs (loop0): Directory bread(block 70) failed
[  918.594386][T15911] FAT-fs (loop0): Directory bread(block 71) failed
[  918.601678][T15911] FAT-fs (loop0): Directory bread(block 72) failed
[  918.608506][T15911] FAT-fs (loop0): Directory bread(block 73) failed
[  918.784665][T10598] usb 2-1: USB disconnect, device number 10
[  918.784752][    C0] iowarrior 2-1:0.8: iowarrior_callback - usb_submit_urb failed with result -19
[  919.204968][T15917] loop4: detected capacity change from 0 to 512
[  919.261269][T15917] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  919.293255][T15917] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  919.368233][T15917] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  919.575989][T15917] System zones: 1-12
[  919.580445][T15917] EXT4-fs (loop4): orphan cleanup on readonly fs
[  919.612762][T15917] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2557: invalid indirect mapped block 2 (level 2)
[  919.630396][T15917] EXT4-fs (loop4): Remounting filesystem read-only
[  919.646113][T15917] EXT4-fs (loop4): 1 truncate cleaned up
[  919.655420][T15917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  921.534125][T15932] overlayfs: missing 'workdir'
[  921.613390][ T8026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  921.802678][T15937] bridge1: entered promiscuous mode
[  921.810899][T15937] bridge1: entered allmulticast mode
[  921.826076][T15937] team0: Port device bridge1 added
[  921.834259][T15941] bridge0: port 3(team0) entered blocking state
[  921.843021][T15941] bridge0: port 3(team0) entered disabled state
[  921.858494][T15941] team0: entered allmulticast mode
[  921.869394][T15941] team_slave_0: entered allmulticast mode
[  921.879587][T15941] team_slave_1: entered allmulticast mode
[  921.907894][T15941] team0: entered promiscuous mode
[  921.927471][T15941] team_slave_0: entered promiscuous mode
[  921.978165][T15941] team_slave_1: entered promiscuous mode
[  922.023679][T15937] team0: left allmulticast mode
[  922.028977][T15937] team_slave_0: left allmulticast mode
[  922.034805][T15937] team_slave_1: left allmulticast mode
[  922.043637][T15937] team0: left promiscuous mode
[  922.050387][T15937] team_slave_0: left promiscuous mode
[  922.059031][T15937] team_slave_1: left promiscuous mode
[  922.070278][T15937] bridge0: port 3(team0) entered disabled state
[  922.094335][T15937] bridge_slave_0: left allmulticast mode
[  922.100553][T15937] bridge_slave_0: left promiscuous mode
[  922.107222][T15937] bridge0: port 1(bridge_slave_0) entered disabled state
[  922.238721][T15937] bridge_slave_1: left allmulticast mode
[  922.244588][T15937] bridge_slave_1: left promiscuous mode
[  922.250681][T15937] bridge0: port 2(bridge_slave_1) entered disabled state
[  922.276774][T15937] bond0: (slave bond_slave_0): Releasing backup interface
[  922.303013][T15937] bond0: (slave bond_slave_1): Releasing backup interface
[  922.371979][T15937] team0: Port device team_slave_0 removed
[  922.402658][T15947] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2566'.
[  922.405212][T15937] team0: Port device team_slave_1 removed
[  922.424762][T15937] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  922.432536][T15937] batman_adv: batadv0: Removing interface: batadv_slave_0
[  922.441741][T15937] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  922.450158][T15937] batman_adv: batadv0: Removing interface: batadv_slave_1
[  922.478178][T15937] team0: Port device bridge1 removed
[  925.507586][T10594] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  926.805709][T10594] usb 5-1: Using ep0 maxpacket: 16
[  926.846197][T10594] usb 5-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[  926.900685][T10594] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  926.976606][T10594] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  927.004095][T10594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  927.019692][T10594] usb 5-1: Product: syz
[  927.095432][T10594] usb 5-1: Manufacturer: syz
[  927.159193][T10594] usb 5-1: SerialNumber: syz
[  927.769019][T10594] usb 5-1: can't set config #1, error -71
[  927.817599][T10594] usb 5-1: USB disconnect, device number 23
[  927.924534][T15989] loop1: detected capacity change from 0 to 1024
[  927.987008][T15989] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #4: comm syz.1.2578: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  928.665175][T15989] EXT4-fs error (device loop1): ext4_quota_enable:7143: comm syz.1.2578: Bad quota inode: 4, type: 1
[  929.046144][T15989] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  929.117591][T15989] EXT4-fs (loop1): mount failed
[  929.984454][T10594] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  930.378721][T16012] loop1: detected capacity change from 0 to 256
[  931.536036][T10594] usb 5-1: Using ep0 maxpacket: 16
[  931.569693][T10594] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  931.609650][T10594] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  931.658592][T10594] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  931.689176][T10594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  931.743317][T10594] usb 5-1: Product: syz
[  931.761935][T10594] usb 5-1: Manufacturer: syz
[  931.790307][T10594] usb 5-1: SerialNumber: syz
[  931.841469][T16021] loop1: detected capacity change from 0 to 512
[  931.926652][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  931.933110][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  932.796641][T10594] usb 5-1: 0:2 : does not exist
[  932.810396][T10594] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  932.915882][T10594] usb 5-1: USB disconnect, device number 24
[  933.003529][T14899] udevd[14899]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  933.178518][T16037] overlayfs: failed to clone upperpath
[  934.095782][T15585] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  934.295785][T15585] usb 1-1: Using ep0 maxpacket: 16
[  934.316194][T15585] usb 1-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[  934.335810][T15585] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  934.371262][T15585] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  934.388802][T15585] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.407461][T15585] usb 1-1: Product: syz
[  934.411694][T15585] usb 1-1: Manufacturer: syz
[  934.428045][T15585] usb 1-1: SerialNumber: syz
[  934.652695][T15585] usb 1-1: 0:2 : does not exist
[  934.668930][T15585] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  934.708607][T15585] usb 1-1: USB disconnect, device number 15
[  934.753029][T14899] udevd[14899]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  935.193191][T16071] qnx6: unable to read the first superblock
[  935.205472][T16069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  938.890743][T16104] trusted_key: encrypted_key: insufficient parameters specified
[  939.545142][T16109] loop1: detected capacity change from 0 to 256
[  940.148346][T16109] FAT-fs (loop1): Directory bread(block 64) failed
[  940.155357][T16109] FAT-fs (loop1): Directory bread(block 65) failed
[  940.162577][T16109] FAT-fs (loop1): Directory bread(block 66) failed
[  940.169392][T16109] FAT-fs (loop1): Directory bread(block 67) failed
[  940.176547][T16109] FAT-fs (loop1): Directory bread(block 68) failed
[  940.184309][T16109] FAT-fs (loop1): Directory bread(block 69) failed
[  940.191659][T16109] FAT-fs (loop1): Directory bread(block 70) failed
[  940.198646][T16109] FAT-fs (loop1): Directory bread(block 71) failed
[  940.205914][T16109] FAT-fs (loop1): Directory bread(block 72) failed
[  940.212606][T16109] FAT-fs (loop1): Directory bread(block 73) failed
[  940.722074][T16111] qnx6: unable to read the first superblock
[  941.016328][T16110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.530715][T16121] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  941.552426][T16121] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  941.595662][T16121] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  941.625903][T16121] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  941.733545][T16118] loop1: detected capacity change from 0 to 32768
[  941.767274][T16124] loop0: detected capacity change from 0 to 512
[  941.784176][T16118] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.2624 (16118)
[  941.834927][T16118] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  941.886288][T16118] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  941.896212][T16118] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  941.896983][T16124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  941.905851][T16118] BTRFS info (device loop1): use zstd compression, level 3
[  941.905896][T16118] BTRFS info (device loop1): using free space tree
[  941.964318][T16124] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  942.149059][T16118] BTRFS info (device loop1): enabling ssd optimizations
[  942.166442][T16118] BTRFS info (device loop1): auto enabling async discard
[  942.297867][   T27] audit: type=1800 audit(2000000041.210:581): pid=16118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2624" name="bus" dev="loop1" ino=263 res=0 errno=0
[  942.301823][T15341] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  942.462315][T14213] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  942.865785][T10594] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  943.071131][T10594] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  943.077619][T16156] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2631'.
[  943.090963][T10594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  943.155352][T10594] usb 1-1: Product: syz
[  943.185733][T10594] usb 1-1: Manufacturer: syz
[  943.190505][T10594] usb 1-1: SerialNumber: syz
[  943.493832][T16156] syz.5.2631 (16156) used greatest stack depth: 17864 bytes left
[  943.711916][T10594] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  946.031899][T10594] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  946.051102][T10594] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71
[  946.064644][T10594] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71
[  946.083487][T10594] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71
[  946.098915][T10594] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71
[  946.111844][T10594] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71
[  946.143163][T10594] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71
[  946.166185][T10594] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71
[  946.191515][T10594] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71
[  946.226568][T10594] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  946.244644][T10594] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  946.260588][T10594] lan78xx: probe of 1-1:1.0 failed with error -71
[  946.324662][T10594] usb 1-1: USB disconnect, device number 16
[  949.127675][T16203] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  950.413061][T16222] loop1: detected capacity change from 0 to 1024
[  950.459542][T16222] hfsplus: invalid file type 0113366 for inode 2
[  950.476861][T16222] hfsplus: failed to load root directory
[  950.548830][T16225] overlayfs: failed to clone upperpath
[  951.932309][T16240] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  951.932352][T16240] batman_adv: batadv0: Removing interface: batadv_slave_0
[  952.268321][T16240] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  952.277152][T16240] batman_adv: batadv0: Removing interface: batadv_slave_1
[  954.015185][T16265] loop4: detected capacity change from 0 to 512
[  954.034185][T16265] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  954.104771][T16265] EXT4-fs (loop4): 1 truncate cleaned up
[  954.137207][T16265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  954.353311][T16265] syz.4.2668 (pid 16265) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  954.429979][ T8026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  954.645761][T16271] loop4: detected capacity change from 0 to 256
[  956.269393][T16271] FAT-fs (loop4): Directory bread(block 64) failed
[  956.276138][T16271] FAT-fs (loop4): Directory bread(block 65) failed
[  956.283209][T16271] FAT-fs (loop4): Directory bread(block 66) failed
[  956.290048][T16271] FAT-fs (loop4): Directory bread(block 67) failed
[  956.297318][T16271] FAT-fs (loop4): Directory bread(block 68) failed
[  956.304133][T16271] FAT-fs (loop4): Directory bread(block 69) failed
[  956.311399][T16271] FAT-fs (loop4): Directory bread(block 70) failed
[  956.318369][T16271] FAT-fs (loop4): Directory bread(block 71) failed
[  956.325868][T16271] FAT-fs (loop4): Directory bread(block 72) failed
[  956.332509][T16271] FAT-fs (loop4): Directory bread(block 73) failed
[  956.961571][T16274] ip6gre1: entered promiscuous mode
[  956.991806][T16274] ip6gre1: entered allmulticast mode
[  958.501255][T16300] loop4: detected capacity change from 0 to 512
[  958.557594][T16303] loop1: detected capacity change from 0 to 256
[  958.837293][T16303] FAT-fs (loop1): Directory bread(block 64) failed
[  958.844246][T16303] FAT-fs (loop1): Directory bread(block 65) failed
[  958.851581][T16303] FAT-fs (loop1): Directory bread(block 66) failed
[  958.858264][T16303] FAT-fs (loop1): Directory bread(block 67) failed
[  958.865316][T16303] FAT-fs (loop1): Directory bread(block 68) failed
[  958.872092][T16303] FAT-fs (loop1): Directory bread(block 69) failed
[  958.879155][T16303] FAT-fs (loop1): Directory bread(block 70) failed
[  958.885969][T16303] FAT-fs (loop1): Directory bread(block 71) failed
[  958.892834][T16303] FAT-fs (loop1): Directory bread(block 72) failed
[  958.899649][T16303] FAT-fs (loop1): Directory bread(block 73) failed
[  959.336658][T16300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  959.395989][T16300] ext4 filesystem being mounted at /535/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  959.534918][   T27] audit: type=1800 audit(2000000058.440:582): pid=16300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2680" name="file1" dev="loop4" ino=15 res=0 errno=0
[  959.711995][ T8026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  960.544685][T12173] Bluetooth: Wrong link type (-71)
[  960.576941][T16314] loop1: detected capacity change from 0 to 40427
[  960.588172][T16314] F2FS-fs (loop1): invalid crc value
[  960.622800][T16314] F2FS-fs (loop1): Found nat_bits in checkpoint
[  960.771582][T16332] loop0: detected capacity change from 0 to 1024
[  960.784568][T16332] hfsplus: unable to parse mount options
[  960.885932][T16314] F2FS-fs (loop1): Start checkpoint disabled!
[  960.973961][T16314] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  961.860695][T16314] ------------[ cut here ]------------
[  961.867160][T16314] kernel BUG at fs/f2fs/segment.c:3481!
[  961.902333][T16314] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  961.908489][T16314] CPU: 1 PID: 16314 Comm: syz.1.2685 Not tainted syzkaller #0
[  961.916096][T16314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  961.926293][T16314] RIP: 0010:f2fs_allocate_data_block+0x3f6f/0x3fb0
[  961.932957][T16314] Code: 1a fe 48 8b 54 24 30 e9 88 eb ff ff e8 6a 01 c2 fd 48 c7 c7 90 e5 6f 8d 4c 89 f6 e8 fb 76 97 00 e9 a4 eb ff ff e8 51 01 c2 fd <0f> 0b e8 4a 01 c2 fd 0f 0b e8 43 01 c2 fd 0f 0b e8 3c 01 c2 fd 0f
[  961.952619][T16314] RSP: 0018:ffffc90003947410 EFLAGS: 00010287
[  961.958963][T16314] RAX: ffffffff83c5135f RBX: 0000000000000200 RCX: 0000000000080000
[  961.967066][T16314] RDX: ffffc9000d1db000 RSI: 000000000004ff41 RDI: 000000000004ff42
[  961.975094][T16314] RBP: 0000000000000200 R08: ffff88802f66305f R09: 1ffff11005ecc60b
[  961.983198][T16314] R10: dffffc0000000000 R11: ffffed1005ecc60c R12: 1ffff92000728ef8
[  961.991213][T16314] R13: 0000000000000000 R14: 0000000000001a00 R15: dffffc0000000000
[  961.999239][T16314] FS:  00007fd1188fb6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  962.008220][T16314] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  962.014856][T16314] CR2: 0000001b31917ff8 CR3: 000000001d73a000 CR4: 00000000003506e0
[  962.022978][T16314] Call Trace:
[  962.026467][T16314]  <TASK>
[  962.029439][T16314]  ? f2fs_mark_inode_dirty_sync+0x120/0x1f0
[  962.035482][T16314]  f2fs_map_blocks+0x1338/0x3e60
[  962.040598][T16314]  ? f2fs_get_block_locked+0xe0/0xe0
[  962.046022][T16314]  ? lockdep_hardirqs_on+0x98/0x150
[  962.051528][T16314]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  962.057294][T16314]  ? f2fs_allocate_pinning_section+0x48d/0x590
[  962.063680][T16314]  f2fs_expand_inode_data+0x67a/0xa10
[  962.069207][T16314]  ? f2fs_insert_range+0x470/0x470
[  962.074408][T16314]  ? preempt_schedule_thunk+0x1a/0x30
[  962.079851][T16314]  ? __mnt_drop_write_file+0xc3/0x100
[  962.085273][T16314]  ? file_modified_flags+0x267/0x2a0
[  962.090605][T16314]  f2fs_fallocate+0x416/0x890
[  962.095336][T16314]  vfs_fallocate+0x58e/0x700
[  962.099983][T16314]  do_vfs_ioctl+0x19f6/0x1cc0
[  962.104709][T16314]  ? __ia32_compat_sys_ioctl+0x8a0/0x8a0
[  962.110394][T16314]  ? tomoyo_path_number_perm+0x217/0x620
[  962.116089][T16314]  ? __lock_acquire+0x7d40/0x7d40
[  962.121166][T16314]  ? slab_free_freelist_hook+0x130/0x1a0
[  962.126956][T16314]  ? tomoyo_path_number_perm+0x5b4/0x620
[  962.132839][T16314]  ? tomoyo_path_number_perm+0x217/0x620
[  962.138525][T16314]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  962.144147][T16314]  ? __fget_files+0x28/0x4b0
[  962.148785][T16314]  ? __fget_files+0x28/0x4b0
[  962.153657][T16314]  ? bpf_lsm_file_ioctl+0x9/0x10
[  962.158667][T16314]  ? security_file_ioctl+0x80/0xa0
[  962.163923][T16314]  __se_sys_ioctl+0x83/0x170
[  962.168561][T16314]  do_syscall_64+0x55/0xa0
[  962.173029][T16314]  ? clear_bhb_loop+0x40/0x90
[  962.177749][T16314]  ? clear_bhb_loop+0x40/0x90
[  962.182514][T16314]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  962.188532][T16314] RIP: 0033:0x7fd11799af79
[  962.192983][T16314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  962.213072][T16314] RSP: 002b:00007fd1188fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  962.221737][T16314] RAX: ffffffffffffffda RBX: 00007fd117c15fa0 RCX: 00007fd11799af79
[  962.230017][T16314] RDX: 00002000000000c0 RSI: 0000000040305828 RDI: 0000000000000005
[  962.238369][T16314] RBP: 00007fd117a316e0 R08: 0000000000000000 R09: 0000000000000000
[  962.246382][T16314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  962.254571][T16314] R13: 00007fd117c16038 R14: 00007fd117c15fa0 R15: 00007ffcce973468
[  962.262584][T16314]  </TASK>
[  962.265782][T16314] Modules linked in:
[  962.282654][T16314] ---[ end trace 0000000000000000 ]---
[  962.326624][T16314] RIP: 0010:f2fs_allocate_data_block+0x3f6f/0x3fb0
[  962.333424][T16314] Code: 1a fe 48 8b 54 24 30 e9 88 eb ff ff e8 6a 01 c2 fd 48 c7 c7 90 e5 6f 8d 4c 89 f6 e8 fb 76 97 00 e9 a4 eb ff ff e8 51 01 c2 fd <0f> 0b e8 4a 01 c2 fd 0f 0b e8 43 01 c2 fd 0f 0b e8 3c 01 c2 fd 0f
[  962.354156][T16314] RSP: 0018:ffffc90003947410 EFLAGS: 00010287
[  962.374245][T16314] RAX: ffffffff83c5135f RBX: 0000000000000200 RCX: 0000000000080000
[  962.383029][T16314] RDX: ffffc9000d1db000 RSI: 000000000004ff41 RDI: 000000000004ff42
[  962.408021][T16314] RBP: 0000000000000200 R08: ffff88802f66305f R09: 1ffff11005ecc60b
[  962.428490][T16314] R10: dffffc0000000000 R11: ffffed1005ecc60c R12: 1ffff92000728ef8
[  962.453270][T16314] R13: 0000000000000000 R14: 0000000000001a00 R15: dffffc0000000000
[  962.475791][T16314] FS:  00007fd1188fb6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  962.491904][T16314] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  962.585230][T16314] CR2: 00007f357139eff8 CR3: 000000001d73a000 CR4: 00000000003506f0
[  962.706903][T16314] Kernel panic - not syncing: Fatal exception
[  962.713703][T16314] Kernel Offset: disabled
[  962.718038][T16314] Rebooting in 86400 seconds..