last executing test programs:

4m20.802588884s ago: executing program 2 (id=330):
r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
read(r1, &(0x7f00000001c0)=""/260, 0xfffffd3c)
close_range(r0, 0xffffffffffffffff, 0x0)

4m20.429958085s ago: executing program 2 (id=332):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)

4m20.228070038s ago: executing program 2 (id=334):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "e2599803"}]}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

4m19.985789922s ago: executing program 2 (id=336):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1200002, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=cp936,quota,errors=remount-ro,errors=remount-ro,nodiscard,noquota,discard=0x00000000000005a6\x00integrity,discard=0x0000000000000009,umask=0x00000000000bfe,quota,quota,errors=remount-ro,umask=0x0000000000020046,\x00'], 0xfc, 0x61e8, &(0x7f000001e9c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38)
getdents64(r0, 0x0, 0x0)

4m18.578685184s ago: executing program 2 (id=342):
r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb143, 0x1000, 0x2, 0x196})
close_range(r0, 0xffffffffffffffff, 0x0)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
io_getevents(r1, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0)

4m17.585716132s ago: executing program 2 (id=346):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000040)='./mnt\x00', 0x0, &(0x7f0000000180)={[{@grpid}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0)

4m16.685016005s ago: executing program 32 (id=346):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000040)='./mnt\x00', 0x0, &(0x7f0000000180)={[{@grpid}]}, 0x0, 0x236, &(0x7f0000000300)="$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")
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0)

3m6.651673114s ago: executing program 0 (id=816):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1, 0x307}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m6.513372312s ago: executing program 0 (id=818):
syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0x2, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@usrjquota_file, 0x4}, {@acl}, {@data_journal}, {@usrjquota, 0x3d}]}, 0x2, 0x110f, &(0x7f0000001140)="$eJzs2LFqFEEYB/D/7B2Y7mTTL4IWFhISzs4qRYRrrW0kpDJVrooI4rv4OJLKPuQBLAKWwshusp5IIGAuhoPfD2Z3+OabmW/KmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCVV/1nu0naMdIkKUnXnS0uknRj/PHXSZOSN0eL5cHJ/PUyyWRIL33rZ/XT0u493Wrn7bzda19u7z9rl6cf3r87Pj46uV6mpMv55foPUq7rudHW+vcDAACATVHvbPb3ktP/uz8AAABwm7U+JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8gzpb9dskP2utaZKUpOvOFhdJuocsEAAAALizkiZvZzfFMzwDrLzIt1kZ4mP7Ufqc3XwZ5j9apR429184AAAAbJTprRnlj/v480xTa/00jj3JNDs7V/3+1w98308mpwfZ/X0n/zx8zy8/Ho6t1Mk9nQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAXO3BAAgAAACDo/+t2BAoAAAAAAAAAAAAAAAAAAAAAAB8FAAD//6zC3aE=")
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3854052, 0x0, 0x0, 0x0, &(0x7f00000000c0))
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x1004080, 0x0, 0x1, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x0)

3m5.740721427s ago: executing program 0 (id=819):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file2\x00', 0x1c882, &(0x7f0000000ec0)=ANY=[], 0x1, 0x5eea, &(0x7f000000e480)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fchdir(r0)
openat(0xffffffffffffff9c, &(0x7f0000001b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x1ff)

3m4.633890672s ago: executing program 0 (id=822):
syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40), 0xff, 0x4b7, &(0x7f0000000640)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x80)
getdents64(r0, &(0x7f0000000000)=""/39, 0x27)

3m3.98566191s ago: executing program 0 (id=826):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="83df1214e6fc0fc5c6", 0x9}], 0x1, 0x0, 0x0, 0x2008000}], 0x1, 0x24040806)

3m1.737735081s ago: executing program 0 (id=838):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000000f40)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6164696e6963622c6164696e6963622c7569643d666f72749a742c7569643d666f726765742c756d61736b3d3030303030303030303030303030303030322c6c6f6e6761642c6769643d0000000000", @ANYRESDEC=0x0, @ANYBLOB=',nostrict,\x00'], 0xfe, 0xc22, &(0x7f00000002c0)="$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")
r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r0}, &(0x7f0000000180)=""/59, 0x3b, &(0x7f0000000340)={&(0x7f0000000280)={'crc32\x00'}})

3m1.279044508s ago: executing program 33 (id=838):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000000f40)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6164696e6963622c6164696e6963622c7569643d666f72749a742c7569643d666f726765742c756d61736b3d3030303030303030303030303030303030322c6c6f6e6761642c6769643d0000000000", @ANYRESDEC=0x0, @ANYBLOB=',nostrict,\x00'], 0xfe, 0xc22, &(0x7f00000002c0)="$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")
r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r0}, &(0x7f0000000180)=""/59, 0x3b, &(0x7f0000000340)={&(0x7f0000000280)={'crc32\x00'}})

1m36.564140667s ago: executing program 5 (id=1374):
r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0)
keyctl$setperm(0x5, r1, 0x4201004)
keyctl$search(0xa, r0, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff)

1m36.447236994s ago: executing program 5 (id=1375):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110)
setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108)

1m36.35494919s ago: executing program 5 (id=1376):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x16803})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x104)

1m35.975615102s ago: executing program 5 (id=1379):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00)

1m35.672644899s ago: executing program 5 (id=1382):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100005800c000580"], 0x34}}, 0x0)

1m35.180348808s ago: executing program 5 (id=1386):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000012c0)={0x3c, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="b46db521a4a6", {0x9, 0x1ba}}, 0x10, @void}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846)

1m34.732539744s ago: executing program 34 (id=1386):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000012c0)={0x3c, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="b46db521a4a6", {0x9, 0x1ba}}, 0x10, @void}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846)

16.993324525s ago: executing program 6 (id=1951):
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x4}, 0x2003})
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe)

16.809842726s ago: executing program 6 (id=1953):
r0 = epoll_create1(0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000140)=0x9, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))

16.683231083s ago: executing program 6 (id=1956):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0)

16.493943724s ago: executing program 6 (id=1957):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)

16.472465075s ago: executing program 6 (id=1958):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000001040)=0x40007, 0x2d)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11)

16.136273145s ago: executing program 6 (id=1959):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080600000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xe00, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.995715848s ago: executing program 1 (id=2009):
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108)

4.59785143s ago: executing program 1 (id=2012):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x20000090)

4.427560071s ago: executing program 1 (id=2014):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000418, &(0x7f0000000100), 0x6, 0x504, &(0x7f0000019940)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000540)=ANY=[], 0x9a, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
lchown(&(0x7f0000000880)='./file0\x00', 0x0, 0x0)

3.277829237s ago: executing program 1 (id=2016):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x50e, &(0x7f00000006c0)={[{@barrier_val={'barrier', 0x3d, 0xc}}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@test_dummy_encryption}, {@quota}]}, 0x1, 0x45e, &(0x7f0000000240)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000180)=@v2={0x2, @aes128, 0x0, '\x00', @c})

2.513764703s ago: executing program 1 (id=2019):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x31, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x100, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x80, 0xea}}}}}]}}]}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x40, 0x8, 0x2c, {0x2c, 0x10, "ed9db5633eb62d5c50cc59932ea51e0b8b91b9cfeadc804b684d09dd8c07c0d50dcdf46aca378e236fb9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.322230424s ago: executing program 4 (id=2021):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x4, 0xaf}, 0x2)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)

1.316503142s ago: executing program 4 (id=2027):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r0, 0x8800000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
sendfile(r1, r0, 0x0, 0x558410e9)

1.241593997s ago: executing program 3 (id=2028):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10)

1.015661111s ago: executing program 3 (id=2029):
r0 = socket$inet6(0xa, 0x2, 0x0)
capset(0x0, &(0x7f0000000080)={0x0, 0x0, 0xffffffff, 0x0, 0x3a5f, 0x8})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}})

885.603058ms ago: executing program 3 (id=2030):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, r1, 0x321, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0xa4)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)

689.764199ms ago: executing program 4 (id=2031):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x2, 0x0, 0x1000000}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000280)=""/201}, 0x20)

628.177183ms ago: executing program 3 (id=2032):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2})

429.045525ms ago: executing program 3 (id=2033):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000804)

418.776135ms ago: executing program 4 (id=2034):
r0 = fsopen(&(0x7f0000000180)='securityfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x86)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='\x8f$,-!+!\\-\x00', &(0x7f0000000200)='y', 0x1)

390.776747ms ago: executing program 1 (id=2035):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
timerfd_gettime(0xffffffffffffffff, 0x0)

189.869239ms ago: executing program 4 (id=2036):
r0 = socket(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="120000007d0000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r1, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r0}, 0x20)
recvmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x12122, 0x0)

159.78113ms ago: executing program 3 (id=2037):
syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x1a0)
fcntl$setlease(r0, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

0s ago: executing program 4 (id=2038):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

[ T5863] pwc: recv_control_msg error -71 req 02 val 2c00
[  258.762562][ T5863] pwc: recv_control_msg error -71 req 04 val 1000
[  258.772403][ T5863] pwc: recv_control_msg error -71 req 04 val 1300
[  258.783284][ T5863] pwc: recv_control_msg error -71 req 04 val 1400
[  258.785331][ T5774] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  258.799292][ T5863] pwc: recv_control_msg error -71 req 02 val 2000
[  258.830867][ T5863] pwc: recv_control_msg error -71 req 02 val 2100
[  258.838206][ T5863] pwc: recv_control_msg error -71 req 04 val 1500
[  258.855103][ T5863] pwc: recv_control_msg error -71 req 02 val 2500
[  258.862115][ T5863] pwc: recv_control_msg error -71 req 02 val 2400
[  258.875511][ T5863] pwc: recv_control_msg error -71 req 02 val 2600
[  258.890120][ T5863] pwc: recv_control_msg error -71 req 02 val 2900
[  258.901511][ T5863] pwc: recv_control_msg error -71 req 02 val 2800
[  258.955732][ T5863] pwc: recv_control_msg error -71 req 04 val 1100
[  258.967346][ T5863] pwc: recv_control_msg error -71 req 04 val 1200
[  258.978252][ T9573] sctp: [Deprecated]: syz.1.1192 (pid 9573) Use of int in max_burst socket option deprecated.
[  258.978252][ T9573] Use struct sctp_assoc_value instead
[  258.999236][ T5863] pwc: Registered as video103.
[  259.005104][ T5774] usb 6-1: Using ep0 maxpacket: 32
[  259.008351][ T5863] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21
[  259.030424][ T5774] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  259.056652][ T5863] usb 5-1: USB disconnect, device number 8
[  259.064149][ T5774] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  259.086375][ T5774] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  259.120664][ T5774] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  259.146587][ T5774] usb 6-1: config 0 interface 0 has no altsetting 0
[  259.166534][ T5774] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  259.178509][ T5774] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  259.188025][ T5774] usb 6-1: Product: syz
[  259.192235][ T5774] usb 6-1: Manufacturer: syz
[  259.204577][ T5774] usb 6-1: SerialNumber: syz
[  259.215458][ T5774] usb 6-1: config 0 descriptor??
[  259.231483][ T5774] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  259.258238][ T5774] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  259.295277][ T5778] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  259.457114][    C1] ldusb 6-1:0.0: usb_submit_urb failed (-19)
[  259.463351][ T5774] usb 6-1: USB disconnect, device number 5
[  259.487957][ T5774] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  259.509814][ T5778] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  259.532330][ T5778] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  259.557994][ T5778] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  259.575082][ T5778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  259.583203][ T5778] usb 4-1: SerialNumber: syz
[  259.653555][ T9565] ldusb: No device or device unplugged -19
[  259.821861][ T5778] usb 4-1: 0:2 : does not exist
[  259.854684][ T5778] usb 4-1: USB disconnect, device number 14
[  259.909506][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  260.466172][ T9593] loop5: detected capacity change from 0 to 512
[  260.635307][ T5838] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  260.861409][ T5838] usb 5-1: Using ep0 maxpacket: 16
[  260.869664][ T5838] usb 5-1: config index 0 descriptor too short (expected 65, got 36)
[  260.881054][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.893127][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  260.907610][ T5838] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  260.917157][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.950113][ T5838] usb 5-1: config 0 descriptor??
[  260.974618][ T5838] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22
[  261.056454][ T5774] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  261.245674][ T5774] usb 2-1: Using ep0 maxpacket: 16
[  261.256090][ T5838] usb 5-1: USB disconnect, device number 9
[  261.273521][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.285509][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.312150][ T5774] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  261.334508][ T5774] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  261.378351][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.403042][ T5774] usb 2-1: config 0 descriptor??
[  261.580984][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1212'.
[  261.765778][ T9616] loop3: detected capacity change from 0 to 32768
[  261.792937][ T9616] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  261.836589][ T9625] loop5: detected capacity change from 0 to 1024
[  261.908536][ T5774] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000D/input/input23
[  261.966258][ T5774] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  262.075254][ T5774] usb 2-1: USB disconnect, device number 17
[  262.153178][ T2920] hfsplus: b-tree write err: -5, ino 4
[  262.240136][ T5770] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  262.242902][ T9628] fido_id[9628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  262.411935][ T9634] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1217'.
[  262.593537][ T9636] gre0: entered promiscuous mode
[  262.605979][ T9635] gre0: left promiscuous mode
[  263.210624][ T9633] loop4: detected capacity change from 0 to 32768
[  263.232207][ T9633] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1218 (9633)
[  263.293879][ T9633] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  263.335249][ T9633] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  263.344012][ T9633] BTRFS info (device loop4): enabling auto defrag
[  263.395531][ T9633] BTRFS info (device loop4): disabling auto defrag
[  263.422526][ T9633] BTRFS info (device loop4): use no compression
[  263.452875][ T9633] BTRFS info (device loop4): force clearing of disk cache
[  263.468935][ T9633] BTRFS info (device loop4): max_inline at 0
[  263.485247][ T9633] BTRFS info (device loop4): disabling free space tree
[  263.694834][ T9644] loop1: detected capacity change from 0 to 32768
[  263.722128][ T9633] BTRFS info (device loop4): enabling ssd optimizations
[  263.722450][ T9668] overlay: filesystem on ./file0 is read-only
[  263.739775][ T9644] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1223 (9644)
[  263.755288][ T9633] BTRFS info (device loop4): auto enabling async discard
[  263.802990][ T9633] BTRFS info (device loop4): rebuilding free space tree
[  263.825598][ T9644] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  263.857259][ T9644] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  263.895194][ T9644] BTRFS info (device loop1): using free space tree
[  263.918079][ T9633] BTRFS info (device loop4): disabling free space tree
[  263.945782][ T9633] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  263.956700][ T9633] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  264.061669][ T9644] BTRFS info (device loop1): enabling ssd optimizations
[  264.095410][ T9644] BTRFS info (device loop1): auto enabling async discard
[  264.106583][ T9647] loop5: detected capacity change from 0 to 32768
[  264.126740][ T9647] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.1224 (9647)
[  264.237040][    T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  264.454020][ T5779] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by udevd (5779)
[  264.464914][    T9] usb 4-1: Using ep0 maxpacket: 32
[  264.471818][   T61] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  264.506441][    T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  264.513250][ T5768] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  264.551616][ T6776] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  264.562200][    T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[  264.562236][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  264.562278][    T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  264.562303][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.607033][    T9] usb 4-1: config 0 descriptor??
[  265.137270][    T9] corsair-psu 0003:1B1C:1C09.000E: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0
[  265.161048][ T9698] loop4: detected capacity change from 0 to 2048
[  265.253585][ T9698] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  265.265310][    T9] corsair-psu 0003:1B1C:1C09.000E: unable to initialize device (-90)
[  265.304368][ T6925] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (6925)
[  265.359931][    T9] corsair-psu: probe of 0003:1B1C:1C09.000E failed with error -90
[  265.387967][ T9702] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  265.388341][ T9698] syz.4.1231: attempt to access beyond end of device
[  265.388341][ T9698] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  265.670293][ T5863] usb 4-1: USB disconnect, device number 15
[  266.324071][ T9719] loop4: detected capacity change from 0 to 512
[  266.450054][ T9719] Quota error (device loop4): do_check_range: Getting dqdh_entries 1536 out of range 0-14
[  266.485476][ T9719] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  266.560387][ T9719] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.1240: Failed to acquire dquot type 1
[  266.563125][ T9730] netlink: 'syz.3.1243': attribute type 6 has an invalid length.
[  266.677837][ T9719] EXT4-fs (loop4): 1 truncate cleaned up
[  266.696221][ T9719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.774365][ T9719] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.872074][ T9719] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.1240: path /218/file0: bad entry in directory: rec_len is smaller than minimal - offset=323, inode=0, rec_len=0, size=4096 fake=0
[  266.892623][    C1] vkms_vblank_simulate: vblank timer overrun
[  267.040447][ T6776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.368912][ T9748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.434123][ T9748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.465213][ T9748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.499642][ T9748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.522521][ T9748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.533473][ T9748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.549260][ T9748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.561503][ T9748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.586278][ T9748] batman_adv: batadv0: Adding interface: ipvlan2
[  267.594402][ T9748] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.635267][ T9748] batman_adv: batadv0: Interface activated: ipvlan2
[  268.384079][ T9766] ip6_vti0 speed is unknown, defaulting to 1000
[  268.448389][ T9767] kvm: kvm [9764]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x5
[  268.711792][ T5838] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  268.948812][ T5838] usb 4-1: config 0 has an invalid interface number: 204 but max is 0
[  268.967046][ T5838] usb 4-1: config 0 has no interface number 0
[  268.980487][ T5838] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d
[  269.000311][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.017352][ T5838] usb 4-1: Product: syz
[  269.026305][ T5838] usb 4-1: Manufacturer: syz
[  269.045108][ T5838] usb 4-1: SerialNumber: syz
[  269.049478][ T9773] loop1: detected capacity change from 0 to 8192
[  269.062130][ T5838] usb 4-1: config 0 descriptor??
[  269.071706][ T9773] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  269.093814][ T5838] ems_usb 4-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[  269.107800][ T9776] loop4: detected capacity change from 0 to 4096
[  269.110894][ T5838] ems_usb: probe of 4-1:0.204 failed with error -22
[  269.125388][ T9773] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  269.146057][ T9773] REISERFS (device loop1): using ordered data mode
[  269.186078][ T9773] reiserfs: using flush barriers
[  269.244442][ T9773] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  269.287124][ T9773] REISERFS (device loop1): checking transaction log (loop1)
[  269.312224][ T9773] REISERFS (device loop1): Using r5 hash to sort names
[  269.361586][ T9773] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  269.425090][ T9773] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  269.504777][  T788] usb 4-1: USB disconnect, device number 16
[  270.633053][ T9809] loop5: detected capacity change from 0 to 8192
[  271.245368][ T5771] Bluetooth: hci3: command tx timeout
[  271.363913][ T9825] loop4: detected capacity change from 0 to 1764
[  271.512915][ T9830] loop5: detected capacity change from 0 to 64
[  271.840726][ T9814] loop3: detected capacity change from 0 to 32768
[  271.885433][ T9814] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1282 (9814)
[  271.991524][ T9814] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  272.045583][ T9814] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  272.054336][ T9814] BTRFS info (device loop3): enabling auto defrag
[  272.112448][ T9814] BTRFS info (device loop3): use no compression
[  272.120254][ T9814] BTRFS info (device loop3): force clearing of disk cache
[  272.142593][ T9814] BTRFS info (device loop3): max_inline at 4096
[  272.154943][ T9814] BTRFS info (device loop3): disabling free space tree
[  272.375442][ T9814] BTRFS info (device loop3): enabling ssd optimizations
[  272.382498][ T9814] BTRFS info (device loop3): auto enabling async discard
[  272.390163][ T9865] loop4: detected capacity change from 0 to 64
[  272.455374][ T9814] BTRFS info (device loop3): rebuilding free space tree
[  272.553908][ T9869] loop5: detected capacity change from 0 to 256
[  272.562196][ T9814] BTRFS info (device loop3): disabling free space tree
[  272.587006][ T9814] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  272.635070][ T9814] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  272.740867][ T9869] FAT-fs (loop5): Directory bread(block 64) failed
[  272.773618][ T9869] FAT-fs (loop5): Directory bread(block 65) failed
[  272.817021][ T9869] FAT-fs (loop5): Directory bread(block 66) failed
[  272.823650][ T9869] FAT-fs (loop5): Directory bread(block 67) failed
[  272.875401][ T9869] FAT-fs (loop5): Directory bread(block 68) failed
[  272.882019][ T9869] FAT-fs (loop5): Directory bread(block 69) failed
[  272.907402][ T9869] FAT-fs (loop5): Directory bread(block 70) failed
[  272.914190][ T9869] FAT-fs (loop5): Directory bread(block 71) failed
[  272.957575][ T9869] FAT-fs (loop5): Directory bread(block 72) failed
[  272.964202][ T9869] FAT-fs (loop5): Directory bread(block 73) failed
[  273.071349][   T28] audit: type=1800 audit(1770493443.530:26): pid=9814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1282" name="file1" dev="loop3" ino=261 res=0 errno=0
[  273.083642][ T9876] cgroup: fork rejected by pids controller in /syz4
[  273.255426][ T5771] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  273.265947][ T5771] Bluetooth: hci2: Injecting HCI hardware error event
[  273.277119][ T5771] Bluetooth: hci2: hardware error 0x00
[  273.516282][ T5767] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  274.388667][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1315'.
[  275.094376][ T9918] loop1: detected capacity change from 0 to 1024
[  275.189102][   T11] hfsplus: b-tree write err: -5, ino 4
[  275.205254][  T788] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  275.357884][ T9912] loop5: detected capacity change from 0 to 32768
[  275.377365][ T9912] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1319 (9912)
[  275.405773][ T5771] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  275.421342][ T9912] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  275.432846][ T9912] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  275.441760][  T788] usb 4-1: Using ep0 maxpacket: 8
[  275.453307][ T9912] BTRFS info (device loop5): enabling auto defrag
[  275.461149][ T9912] BTRFS info (device loop5): disabling auto defrag
[  275.461574][  T788] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[  275.467922][ T9912] BTRFS info (device loop5): use no compression
[  275.482793][ T9912] BTRFS info (device loop5): force clearing of disk cache
[  275.491029][ T9912] BTRFS info (device loop5): max_inline at 0
[  275.498105][ T9912] BTRFS info (device loop5): disabling free space tree
[  275.522482][  T788] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  275.532120][  T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.545151][  T788] usb 4-1: Product: syz
[  275.549461][  T788] usb 4-1: Manufacturer: syz
[  275.564703][  T788] usb 4-1: SerialNumber: syz
[  275.575705][  T788] usb 4-1: config 0 descriptor??
[  275.587099][  T788] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  275.610821][  T788] usb 4-1: setting power ON
[  275.615961][  T788] dvb-usb: bulk message failed: -22 (2/0)
[  275.652087][  T788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  275.671425][  T788] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  275.682799][  T788] usb 4-1: media controller created
[  275.709757][ T9912] BTRFS info (device loop5): enabling ssd optimizations
[  275.732122][  T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  275.735127][ T9912] BTRFS info (device loop5): auto enabling async discard
[  275.768984][  T788] usb 4-1: selecting invalid altsetting 6
[  275.785280][  T788] usb 4-1: digital interface selection failed (-22)
[  275.791960][  T788] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  275.825380][ T9912] BTRFS info (device loop5): rebuilding free space tree
[  275.829476][  T788] usb 4-1: setting power OFF
[  275.843701][  T788] dvb-usb: bulk message failed: -22 (2/0)
[  275.854842][ T9914] dvb-usb: bulk message failed: -22 (3/0)
[  275.862510][  T788] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  275.872581][ T9914] dvb-usb: bulk message failed: -22 (4/0)
[  275.883428][ T9914] cxusb: i2c read failed
[  275.895218][  T788] (NULL device *): no alternate interface
[  275.903507][ T9912] BTRFS info (device loop5): disabling free space tree
[  275.918366][ T9914] cxusb: i2c rd: len=81 is too big!
[  275.918366][ T9914] 
[  275.955253][ T9912] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  275.995089][ T9912] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  275.996962][  T788] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  276.095560][  T788] usb 4-1: USB disconnect, device number 17
[  276.322573][ T8347] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  276.328296][   T11] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared)
[  277.190596][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  277.202938][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  277.213315][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  277.226570][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  277.235673][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  277.243081][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  277.378650][ T9950] ip6_vti0 speed is unknown, defaulting to 1000
[  277.992060][ T9955] loop5: detected capacity change from 0 to 32768
[  278.022814][ T9948] loop3: detected capacity change from 0 to 32768
[  278.052378][ T9948] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  278.056422][ T9955] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  278.136023][ T9948] XFS (loop3): Ending clean mount
[  278.159211][ T9948] XFS (loop3): Quotacheck needed: Please wait.
[  278.187889][ T9955] XFS (loop5): Ending clean mount
[  278.237115][ T9950] chnl_net:caif_netlink_parms(): no params data found
[  278.357746][ T9948] XFS (loop3): Quotacheck: Done.
[  278.412108][ T8347] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  278.480226][ T5767] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  278.506468][ T9950] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.513744][ T9950] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.521105][ T9950] bridge_slave_0: entered allmulticast mode
[  278.530265][ T9950] bridge_slave_0: entered promiscuous mode
[  278.540726][ T9950] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.548477][ T9950] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.558574][ T9950] bridge_slave_1: entered allmulticast mode
[  278.604428][ T9950] bridge_slave_1: entered promiscuous mode
[  278.905990][ T9950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.945477][ T9986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1334'.
[  278.989479][ T9950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.184209][ T9950] team0: Port device team_slave_0 added
[  279.293485][ T9950] team0: Port device team_slave_1 added
[  279.328560][ T5771] Bluetooth: hci2: command tx timeout
[  279.435801][ T9950] batman_adv: batadv0: Adding interface: batadv_slave_0
[  279.442827][ T9950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.475232][ T5863] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  279.552405][ T9950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  279.579530][T10000] loop3: detected capacity change from 0 to 2048
[  279.587311][ T9950] batman_adv: batadv0: Adding interface: batadv_slave_1
[  279.600095][ T9950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.631524][T10000] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  279.645669][ T9950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.676480][ T5863] usb 2-1: Using ep0 maxpacket: 16
[  279.688655][ T5863] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  279.711674][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.731022][ T5863] usb 2-1: Product: syz
[  279.735710][ T5863] usb 2-1: Manufacturer: syz
[  279.740423][ T5863] usb 2-1: SerialNumber: syz
[  279.841558][ T9950] hsr_slave_0: entered promiscuous mode
[  279.862521][ T9950] hsr_slave_1: entered promiscuous mode
[  279.898389][ T9950] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  279.926232][ T9950] Cannot create hsr debugfs directory
[  279.991407][ T5863] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  280.016923][ T5863] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  280.028981][T10007] netem: change failed
[  280.038465][ T5863] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  280.049055][ T5863] usb 2-1: media controller created
[  280.074430][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  280.369755][ T5863] zl10353_read_register: readreg error (reg=127, ret==-110)
[  280.422100][ T5863] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5
[  280.429953][T10015] program syz.3.1347 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  280.444493][ T5863] usb 2-1: USB disconnect, device number 18
[  280.629695][ T9950] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.858307][ T9950] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.985908][T10013] loop5: detected capacity change from 0 to 32768
[  281.030115][ T9950] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.056842][T10013] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  281.143017][T10013] XFS (loop5): Ending clean mount
[  281.159935][T10013] XFS (loop5): Quotacheck needed: Please wait.
[  281.189333][ T9950] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.205539][ T5838] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  281.234187][T10013] XFS (loop5): Quotacheck: Done.
[  281.405221][ T5771] Bluetooth: hci2: command tx timeout
[  281.438504][ T5838] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  281.467898][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.485858][ T8347] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  281.510292][ T5838] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  281.542166][ T5838] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  281.587057][ T5838] usb 4-1: Manufacturer: syz
[  281.612538][ T5838] usb 4-1: config 0 descriptor??
[  281.731562][ T9950] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  281.770597][ T9950] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  281.795148][ T5838] rc_core: IR keymap rc-hauppauge not found
[  281.805480][ T9950] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  281.814484][ T5838] Registered IR keymap rc-empty
[  281.838225][ T9950] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  281.847320][ T5838] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  281.919516][ T5838] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input24
[  281.956196][    C1] igorplugusb 4-1:0.0: Error: urb status = -32
[  281.980941][ T5838] usb 4-1: USB disconnect, device number 18
[  282.211101][ T9950] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.257071][ T9950] 8021q: adding VLAN 0 to HW filter on device team0
[  282.278549][ T2920] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.285809][ T2920] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.315336][ T5774] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  282.316904][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.330179][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.357278][T10054] loop5: detected capacity change from 0 to 8
[  282.519186][ T5774] usb 2-1: Using ep0 maxpacket: 8
[  282.530952][ T5774] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  282.557806][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.583679][ T5774] usb 2-1: Product: syz
[  282.593395][ T5774] usb 2-1: Manufacturer: syz
[  282.601170][ T5774] usb 2-1: SerialNumber: syz
[  282.622193][ T5774] usb 2-1: config 0 descriptor??
[  282.646675][ T5774] gspca_main: se401-2.14.0 probing 047d:5003
[  282.753513][ T9950] 8021q: adding VLAN 0 to HW filter on device batadv0
[  283.184258][T10076] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1362'.
[  283.225798][ T5774] usb 2-1: reset high-speed USB device number 19 using dummy_hcd
[  283.240555][ T9950] veth0_vlan: entered promiscuous mode
[  283.271335][ T9950] veth1_vlan: entered promiscuous mode
[  283.343419][ T9950] veth0_macvtap: entered promiscuous mode
[  283.362683][ T9950] veth1_macvtap: entered promiscuous mode
[  283.400859][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.414648][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.432738][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.445544][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.455956][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.467864][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.477973][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.488710][ T5771] Bluetooth: hci2: command tx timeout
[  283.494295][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.504499][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: ipvlan2
[  283.514844][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.526909][ T9950] batman_adv: batadv0: Interface activated: batadv_slave_0
[  283.547476][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.566345][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.582610][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.595115][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.605556][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.616634][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.626890][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.644648][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.657676][ T9950] batman_adv: batadv0: Interface activated: batadv_slave_1
[  283.680416][ T9950] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.690421][ T9950] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.700077][ T9950] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.709615][ T9950] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.805281][ T5838] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  283.852393][ T5774] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  283.882064][ T5774] se401: probe of 2-1:0.0 failed with error -71
[  283.901797][ T5774] usb 2-1: USB disconnect, device number 19
[  283.904052][T10082] loop3: detected capacity change from 0 to 512
[  283.923630][T10082] EXT4-fs: Ignoring removed i_version option
[  283.954344][T10082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.978429][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.025080][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.026127][ T5838] usb 6-1: Using ep0 maxpacket: 8
[  284.046048][ T5838] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  284.058333][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.076576][ T5838] pvrusb2: Hardware description: Terratec Grabster AV400
[  284.084278][ T5838] pvrusb2: **********
[  284.089730][ T5838] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  284.101151][ T5838] pvrusb2: Important functionality might not be entirely working.
[  284.109442][ T5838] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  284.123831][ T5838] pvrusb2: **********
[  284.143366][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.154189][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.234591][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.318703][ T2320] pvrusb2: Invalid write control endpoint
[  284.429348][ T2320] pvrusb2: Invalid write control endpoint
[  284.441264][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  284.454011][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  284.471302][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  284.502660][ T2320] pvrusb2: Device being rendered inoperable
[  284.510380][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  284.550670][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  284.571657][ T2320] pvrusb2: Attached sub-driver cx25840
[  284.589437][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  284.600743][ T5863] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  284.633412][T10080] pvrusb2: Attempted to execute control transfer when device not ok
[  284.639389][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  284.657628][ T5774] usb 6-1: USB disconnect, device number 6
[  284.678868][T10093] loop3: detected capacity change from 0 to 1024
[  284.807485][ T5863] usb 5-1: Using ep0 maxpacket: 16
[  284.819961][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.841703][ T5863] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  284.872834][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.889361][ T5863] usb 5-1: config 0 descriptor??
[  284.889702][   T12] hfsplus: b-tree write err: -5, ino 4
[  285.349408][ T5863] mcp2221 0003:04D8:00DD.000F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  285.575322][ T5771] Bluetooth: hci2: command tx timeout
[  285.887991][ T5863] usb 5-1: USB disconnect, device number 10
[  286.237804][T10115] loop5: detected capacity change from 0 to 2048
[  286.262552][T10115] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  286.431946][ T8347] UDF-fs: error (device loop5): udf_read_inode: (ino 1410) failed !bh
[  286.444509][ T8347] UDF-fs: error (device loop5): udf_read_inode: (ino 1410) failed !bh
[  286.575178][ T5774] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  286.766581][ T5774] usb 2-1: Using ep0 maxpacket: 8
[  286.785874][ T5774] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  286.802045][ T5774] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  286.831055][ T5774] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  286.859285][ T5774] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  286.872729][ T5774] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  286.907463][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.059887][ T2920] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.219142][ T5774] usb 2-1: GET_CAPABILITIES returned 0
[  287.232069][ T2920] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.243655][ T5774] usbtmc 2-1:16.0: can't read capabilities
[  287.461183][ T2920] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.482071][  T788] usb 2-1: USB disconnect, device number 20
[  287.693345][ T2920] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.118646][ T2920] tipc: Left network mode
[  288.317388][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  288.330659][T10145] loop4: detected capacity change from 0 to 512
[  288.330980][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  288.346310][T10145] EXT4-fs: Ignoring removed mblk_io_submit option
[  288.355880][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  288.374426][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  288.401932][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  288.413297][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  288.501811][T10145] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1393: invalid indirect mapped block 10 (level 1)
[  288.542890][T10145] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1393: invalid indirect mapped block 8 (level 1)
[  288.591553][T10154] loop3: detected capacity change from 0 to 128
[  288.623784][T10145] EXT4-fs (loop4): 1 truncate cleaned up
[  288.652417][T10145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.676840][T10154] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  288.712497][T10154] hpfs: filesystem error: improperly stopped
[  288.735177][T10154] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  288.765297][T10154] hpfs: You really don't want any checks? You are crazy...
[  288.773047][T10154] hpfs: hpfs_map_sector(): read error
[  288.827450][T10154] hpfs: code page support is disabled
[  288.834822][T10154] hpfs: hpfs_map_4sectors(): unaligned read
[  288.886836][T10154] hpfs: hpfs_map_4sectors(): unaligned read
[  288.897234][ T9950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.906631][T10154] hpfs: filesystem error: unable to find root dir
[  288.947589][T10143] ip6_vti0 speed is unknown, defaulting to 1000
[  289.812992][T10155] loop1: detected capacity change from 0 to 32768
[  289.895641][T10155] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  289.978511][T10155] XFS (loop1): Ending clean mount
[  290.175636][ T5855] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  290.271811][ T5768] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  290.280853][  T788] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  290.364133][T10143] chnl_net:caif_netlink_parms(): no params data found
[  290.495182][  T788] usb 4-1: Using ep0 maxpacket: 8
[  290.514055][  T788] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  290.534768][  T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.583424][  T788] pvrusb2: Hardware description: Terratec Grabster AV400
[  290.625260][ T5771] Bluetooth: hci3: command tx timeout
[  290.636121][  T788] pvrusb2: **********
[  290.640639][  T788] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  290.651099][  T788] pvrusb2: Important functionality might not be entirely working.
[  290.659105][  T788] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  290.672499][  T788] pvrusb2: **********
[  290.801655][ T2320] pvrusb2: Invalid write control endpoint
[  290.938751][T10199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  290.947021][T10199] IPv6: NLM_F_CREATE should be set when creating new route
[  290.954438][T10199] IPv6: NLM_F_CREATE should be set when creating new route
[  290.961800][T10199] IPv6: NLM_F_CREATE should be set when creating new route
[  290.972324][T10199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  291.000726][  T788] usb 4-1: USB disconnect, device number 19
[  291.002161][ T2320] pvrusb2: Invalid write control endpoint
[  291.055147][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  291.094065][T10203] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1404'.
[  291.116840][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  291.124460][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  291.150979][T10203] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1404'.
[  291.199958][ T2320] pvrusb2: Device being rendered inoperable
[  291.212208][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  291.216800][T10203] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.224510][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  291.256859][ T2320] pvrusb2: Attached sub-driver cx25840
[  291.262402][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  291.282369][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  291.726133][T10143] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.733364][T10143] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.785527][T10143] bridge_slave_0: entered allmulticast mode
[  291.835521][T10143] bridge_slave_0: entered promiscuous mode
[  291.874283][T10143] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.888821][T10143] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.915414][T10143] bridge_slave_1: entered allmulticast mode
[  291.932695][T10226] loop4: detected capacity change from 0 to 64
[  291.943682][T10143] bridge_slave_1: entered promiscuous mode
[  291.983836][T10223] loop3: detected capacity change from 0 to 4096
[  292.038660][T10223] ntfs3: Unknown parameter 'windowv_names'
[  292.097071][ T2920] hsr_slave_0: left promiscuous mode
[  292.106399][ T2920] hsr_slave_1: left promiscuous mode
[  292.141038][ T6925] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  292.186794][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  292.220594][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0
[  292.266048][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  292.293069][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1
[  292.348728][ T2920] bridge_slave_1: left allmulticast mode
[  292.374957][ T2920] bridge_slave_1: left promiscuous mode
[  292.392094][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.685217][ T5771] Bluetooth: hci3: command tx timeout
[  292.874308][T10231] loop4: detected capacity change from 0 to 40427
[  292.896204][ T2920] bridge_slave_0: left allmulticast mode
[  292.905986][T10231] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  292.924863][ T2920] bridge_slave_0: left promiscuous mode
[  292.931840][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.942801][T10231] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  292.976617][T10231] F2FS-fs (loop4): invalid crc value
[  293.011101][T10231] F2FS-fs (loop4): Found nat_bits in checkpoint
[  293.057784][ T2920] veth1_macvtap: left promiscuous mode
[  293.075853][ T2920] veth0_macvtap: left promiscuous mode
[  293.093805][ T2920] veth1_vlan: left promiscuous mode
[  293.102772][ T2920] veth0_vlan: left promiscuous mode
[  293.197066][T10231] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  293.216113][T10231] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  294.480042][T10244] loop1: detected capacity change from 0 to 40427
[  294.525418][T10244] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  294.545401][T10244] F2FS-fs (loop1): Image doesn't support compression
[  294.552220][T10244] F2FS-fs (loop1): Image doesn't support compression
[  294.583006][T10244] F2FS-fs (loop1): invalid crc value
[  294.649154][T10244] F2FS-fs (loop1): Found nat_bits in checkpoint
[  294.766278][ T5771] Bluetooth: hci3: command tx timeout
[  294.776710][T10244] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  294.967395][ T5768] syz-executor: attempt to access beyond end of device
[  294.967395][ T5768] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  294.991365][ T5768] F2FS-fs (loop1): Remounting filesystem read-only
[  295.121654][   T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  295.312159][   T23] usb 5-1: Using ep0 maxpacket: 32
[  295.346279][   T23] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  295.365267][   T23] usb 5-1: config 0 has no interface number 0
[  295.381492][   T23] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  295.390923][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.415093][   T23] usb 5-1: Product: syz
[  295.419345][   T23] usb 5-1: Manufacturer: syz
[  295.424006][   T23] usb 5-1: SerialNumber: syz
[  295.458266][   T23] usb 5-1: config 0 descriptor??
[  295.497068][   T23] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  295.515452][ T2920] team0 (unregistering): Port device team_slave_1 removed
[  295.636571][ T2920] team0 (unregistering): Port device team_slave_0 removed
[  295.784948][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  295.888547][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  296.107855][   T23] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  296.168906][   T23] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  296.379891][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  296.388570][ T5838] usb 5-1: USB disconnect, device number 11
[  296.423262][ T5838] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  296.444092][ T5838] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  296.479191][ T5838] quatech2 5-1:0.51: device disconnected
[  296.851012][ T5771] Bluetooth: hci3: command tx timeout
[  296.951275][ T2920] bond0 (unregistering): Released all slaves
[  297.113204][T10273] loop1: detected capacity change from 0 to 128
[  297.149174][T10273] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  297.178422][T10273] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  297.271819][T10273] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:512: comm syz.1.1426: Block bitmap for bg 0 marked uninitialized
[  297.287823][T10250] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  297.312925][T10143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  297.429860][T10143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  297.541527][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  297.602967][T10143] team0: Port device team_slave_0 added
[  297.693174][T10143] team0: Port device team_slave_1 added
[  297.794386][T10143] batman_adv: batadv0: Adding interface: batadv_slave_0
[  297.825053][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.925960][T10143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  297.995231][T10143] batman_adv: batadv0: Adding interface: batadv_slave_1
[  298.005845][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.086871][T10143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  298.278501][T10143] hsr_slave_0: entered promiscuous mode
[  298.352240][T10143] hsr_slave_1: entered promiscuous mode
[  298.400093][T10275] loop4: detected capacity change from 0 to 32768
[  298.424156][T10143] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  298.449355][T10143] Cannot create hsr debugfs directory
[  298.480645][T10275] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  298.509102][T10275] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  298.652014][T10275] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  298.702776][ T5838] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  298.725104][ T5838] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  298.804627][ T5838] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 79ms
[  298.848383][ T5838] gfs2: fsid=syz:syz.0: jid=0: Done
[  298.857323][T10275] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  298.945501][ T5855] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  299.160986][ T5855] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  299.163512][T10143] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  299.185251][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.199286][T10143] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  299.225747][ T5855] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  299.233327][T10143] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  299.244018][ T5855] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  299.268657][T10143] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  299.275597][ T5855] usb 2-1: Manufacturer: syz
[  299.287961][ T5855] usb 2-1: config 0 descriptor??
[  299.336503][T10275] gfs2: fsid=syz:syz.0: found 1 quota changes
[  299.346137][T10291] loop3: detected capacity change from 0 to 32768
[  299.445248][T10291] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  299.515817][T10143] 8021q: adding VLAN 0 to HW filter on device bond0
[  299.569831][ T5855] rc_core: IR keymap rc-hauppauge not found
[  299.585773][ T5855] Registered IR keymap rc-empty
[  299.593801][ T5855] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  299.608542][ T5855] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input25
[  299.649672][T10143] 8021q: adding VLAN 0 to HW filter on device team0
[  299.661378][    C1] igorplugusb 2-1:0.0: Error: urb status = -32
[  299.693164][ T5855] usb 2-1: USB disconnect, device number 21
[  299.701626][ T9950] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  299.701626][ T9950]   inode = 11 2339
[  299.701626][ T9950]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472
[  299.735845][ T9950] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  299.752292][ T9950] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:9950 [syz-executor] gfs2_quota_sync+0x411/0x5a0
[  299.781946][ T9950] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  299.811657][ T2920] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.820296][ T2920] bridge0: port 1(bridge_slave_0) entered forwarding state
[  299.835125][ T9950] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  299.867997][T10291] XFS (loop3): Ending clean mount
[  299.872410][ T9950] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  299.905907][ T9950] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  299.934307][ T9950] gfs2: fsid=syz:syz.0: File system withdrawn
[  299.952063][ T9950] CPU: 1 PID: 9950 Comm: syz-executor Not tainted syzkaller #0
[  299.959692][ T9950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  299.969776][ T9950] Call Trace:
[  299.973089][ T9950]  <TASK>
[  299.976065][ T9950]  dump_stack_lvl+0x18c/0x250
[  299.980788][ T9950]  ? kobject_uevent_env+0x363/0x8b0
[  299.981831][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.986021][ T9950]  ? show_regs_print_info+0x20/0x20
[  299.986063][ T9950]  ? load_image+0x400/0x400
[  299.993203][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.998372][ T9950]  ? kobject_uevent_env+0x363/0x8b0
[  299.998409][ T9950]  gfs2_withdraw+0xb24/0x13d0
[  300.020126][ T9950]  ? gfs2_lm+0x240/0x240
[  300.024433][ T9950]  ? preempt_schedule+0xc0/0xd0
[  300.029362][ T9950]  ? gfs2_consist_inode_i+0xf5/0x110
[  300.034707][ T9950]  gfs2_inode_refresh+0xb89/0x1000
[  300.039886][ T9950]  ? gfs2_inode_metasync+0xf0/0xf0
[  300.045141][ T9950]  ? gfs2_glock_nq+0xd4f/0x1420
[  300.050127][ T9950]  gfs2_instantiate+0x162/0x220
[  300.055080][ T9950]  gfs2_glock_wait+0x1d4/0x2a0
[  300.059916][ T9950]  do_sync+0x4c6/0xe50
[  300.064031][ T9950]  ? gfs2_quota_sync+0x411/0x5a0
[  300.069015][ T9950]  ? bh_get+0x760/0x760
[  300.073192][ T9950]  ? __lock_acquire+0x7d40/0x7d40
[  300.078236][ T9950]  ? do_raw_spin_lock+0x11f/0x2c0
[  300.083276][ T9950]  ? gfs2_quota_sync+0x411/0x5a0
[  300.088229][ T9950]  ? do_raw_spin_unlock+0x121/0x230
[  300.093447][ T9950]  gfs2_quota_sync+0x411/0x5a0
[  300.098232][ T9950]  gfs2_sync_fs+0x4c/0xb0
[  300.102576][ T9950]  sync_filesystem+0xea/0x220
[  300.107276][ T9950]  generic_shutdown_super+0x6f/0x2b0
[  300.112579][ T9950]  kill_block_super+0x44/0x90
[  300.117266][ T9950]  deactivate_locked_super+0x97/0x100
[  300.122652][ T9950]  cleanup_mnt+0x43b/0x4d0
[  300.127089][ T9950]  task_work_run+0x1d4/0x260
[  300.131696][ T9950]  ? task_work_cancel+0x220/0x220
[  300.136742][ T9950]  ? exit_to_user_mode_loop+0x3b/0x110
[  300.142304][ T9950]  exit_to_user_mode_loop+0xe6/0x110
[  300.147606][ T9950]  exit_to_user_mode_prepare+0xee/0x180
[  300.153183][ T9950]  syscall_exit_to_user_mode+0x1a/0x50
[  300.158666][ T9950]  do_syscall_64+0x61/0xa0
[  300.163103][ T9950]  ? clear_bhb_loop+0x40/0x90
[  300.167795][ T9950]  ? clear_bhb_loop+0x40/0x90
[  300.172488][ T9950]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  300.178482][ T9950] RIP: 0033:0x7ff05319c117
[  300.182912][ T9950] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  300.202618][ T9950] RSP: 002b:00007ffef4f61188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  300.211063][ T9950] RAX: 0000000000000000 RBX: 00007ff05320471f RCX: 00007ff05319c117
[  300.219068][ T9950] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef4f61240
[  300.227058][ T9950] RBP: 00007ffef4f61240 R08: 00007ffef4f62240 R09: 00000000ffffffff
[  300.235043][ T9950] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef4f622d0
[  300.243040][ T9950] R13: 00007ff05320471f R14: 00000000000491fa R15: 00007ffef4f62310
[  300.251077][ T9950]  </TASK>
[  300.399294][ T5767] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  300.899883][T10143] 8021q: adding VLAN 0 to HW filter on device batadv0
[  301.475133][ T5774] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  301.618612][T10365] program syz.1.1440 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  301.686066][ T5774] usb 5-1: Using ep0 maxpacket: 8
[  301.715983][ T5774] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  301.744257][ T5774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.818963][ T5774] pvrusb2: Hardware description: Terratec Grabster AV400
[  301.854026][ T5774] pvrusb2: **********
[  301.859981][ T5774] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  301.885673][ T5774] pvrusb2: Important functionality might not be entirely working.
[  301.904684][ T5774] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  301.907340][T10143] veth0_vlan: entered promiscuous mode
[  301.940847][ T5774] pvrusb2: **********
[  302.005638][T10143] veth1_vlan: entered promiscuous mode
[  302.072300][ T2320] pvrusb2: Invalid write control endpoint
[  302.164334][T10374] loop3: detected capacity change from 0 to 2048
[  302.179395][T10143] veth0_macvtap: entered promiscuous mode
[  302.206186][ T2320] pvrusb2: Invalid write control endpoint
[  302.217185][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  302.244523][T10143] veth1_macvtap: entered promiscuous mode
[  302.254807][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  302.291512][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  302.309058][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  302.350087][ T2320] pvrusb2: Device being rendered inoperable
[  302.350618][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.385146][T10350] pvrusb2: Attempted to execute control transfer when device not ok
[  302.394710][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  302.407422][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  302.422280][ T5774] usb 5-1: USB disconnect, device number 12
[  302.430996][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  302.455386][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.472602][ T2320] pvrusb2: Attached sub-driver cx25840
[  302.485383][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  302.485669][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  302.526030][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  302.535212][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.535233][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: ipvlan2
[  302.535252][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.535265][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  302.535279][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.537113][T10143] batman_adv: batadv0: Interface activated: batadv_slave_0
[  302.709939][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.785500][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.805981][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.835138][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.855386][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.877139][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.914536][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.959062][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.981388][T10143] batman_adv: batadv0: Interface activated: batadv_slave_1
[  303.020568][T10143] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.040574][T10143] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.060563][T10143] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.095092][T10143] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.392594][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.445146][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.558012][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.590443][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.815097][    T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  303.834171][T10380] loop3: detected capacity change from 0 to 32768
[  304.025576][    T9] usb 2-1: Using ep0 maxpacket: 32
[  304.047853][    T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  304.095093][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.134118][    T9] usb 2-1: Product: syz
[  304.145042][    T9] usb 2-1: Manufacturer: syz
[  304.149806][    T9] usb 2-1: SerialNumber: syz
[  304.197465][    T9] usb 2-1: config 0 descriptor??
[  304.374717][T10408] loop6: detected capacity change from 0 to 256
[  304.423499][T10408] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  304.444762][    T9] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device:
[  304.492795][    T9] 23 46 85 2e 41 85 9a 99 
[  304.510424][    T9] snd-usb-6fire: probe of 2-1:0.0 failed with error -5
[  304.701292][    T9] usb 2-1: USB disconnect, device number 22
[  304.854968][T10412] loop6: detected capacity change from 0 to 4096
[  304.894394][T10412] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  304.926916][T10412] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  305.039458][T10412] ntfs: volume version 3.1.
[  305.161396][T10422] program syz.4.1455 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  305.307934][T10412] ntfs: (device loop6): ntfs_nlstoucs(): Name using character set cp949 contains characters that cannot be converted to Unicode.
[  305.370384][T10412] ntfs: (device loop6): ntfs_lookup(): Failed to convert name to Unicode.
[  305.838640][T10443] loop1: detected capacity change from 0 to 1024
[  306.515156][ T5817] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  306.720287][ T5817] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  306.721577][T10470] loop4: detected capacity change from 0 to 64
[  306.735090][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.760915][ T5817] usb 2-1: Product: syz
[  306.767622][ T5817] usb 2-1: Manufacturer: syz
[  306.785394][ T5817] usb 2-1: SerialNumber: syz
[  306.807836][ T5817] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  306.848317][T10472] loop3: detected capacity change from 0 to 2048
[  306.881706][T10472] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=26504, location=26504
[  306.906343][    T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  306.940666][T10472] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  307.289643][T10455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.306687][T10455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.347113][ T5774] IPVS: starting estimator thread 0...
[  307.360029][T10483] IPVS: nq: FWM 3 0x00000003 - no destination available
[  307.435595][T10484] IPVS: using max 20 ests per chain, 48000 per kthread
[  307.605352][ T5817] usb 2-1: USB disconnect, device number 23
[  308.013301][T10501] tipc: Started in network mode
[  308.023917][T10501] tipc: Node identity ac14140f, cluster identity 4711
[  308.040147][T10501] tipc: New replicast peer: 255.255.255.255
[  308.049037][T10501] tipc: Enabled bearer <udp:syz2>, priority 10
[  308.365776][    T9] usb 2-1: Service connection timeout for: 256
[  308.380159][    T9] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  308.428403][    T9] ath9k_htc: Failed to initialize the device
[  308.463816][ T5817] usb 2-1: ath9k_htc: USB layer deinitialized
[  309.050835][ T5817] tipc: Node number set to 2886997007
[  309.262620][T10528] ALSA: mixer_oss: invalid OSS volume ''
[  310.066453][T10558] program syz.1.1497 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  310.214326][T10563] loop6: detected capacity change from 0 to 512
[  310.270383][T10565] loop1: detected capacity change from 0 to 64
[  310.296476][T10563] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.300826][T10565] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  310.572678][T10143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.685445][T10597] loop3: detected capacity change from 0 to 131072
[  312.742106][T10597] F2FS-fs (loop3): invalid crc value
[  312.801016][T10597] F2FS-fs (loop3): Found nat_bits in checkpoint
[  312.896807][T10597] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  313.074294][T10597] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36
[  313.462657][T10609] loop6: detected capacity change from 0 to 32768
[  313.508449][T10609] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop6 scanned by syz.6.1512 (10609)
[  313.611250][T10609] BTRFS info (device loop6): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  313.643468][T10609] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  313.680097][T10609] BTRFS info (device loop6): using free space tree
[  313.875111][T10609] BTRFS info (device loop6): enabling ssd optimizations
[  313.901394][T10623] loop4: detected capacity change from 0 to 32768
[  313.915138][T10609] BTRFS info (device loop6): auto enabling async discard
[  314.221507][T10143] BTRFS info (device loop6): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  314.334610][   T23] kernel write not supported for file /comedi4 (pid: 23 comm: kworker/1:0)
[  315.028759][T10653] loop6: detected capacity change from 0 to 64
[  315.565634][ T5778] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  315.770650][ T5778] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  315.785098][ T5774] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  315.785100][ T5778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.801478][T10672] loop6: detected capacity change from 0 to 4096
[  315.827197][ T5778] usb 5-1: Product: syz
[  315.831458][ T5778] usb 5-1: Manufacturer: syz
[  315.845954][ T5778] usb 5-1: SerialNumber: syz
[  315.862146][ T5778] usb 5-1: config 0 descriptor??
[  315.893304][T10677] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  315.961525][   T28] audit: type=1800 audit(2000000010.190:27): pid=10672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1531" name="file1" dev="loop6" ino=15 res=0 errno=0
[  316.006360][ T5774] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  316.039008][ T5774] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  316.052431][ T5774] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  316.087427][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.128504][ T5774] usb 2-1: Product: syz
[  316.132789][ T5774] usb 2-1: Manufacturer: syz
[  316.172147][ T5774] usb 2-1: SerialNumber: syz
[  316.483150][T10688] loop6: detected capacity change from 0 to 512
[  316.548168][T10688] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.1535: couldn't read orphan inode 26 (err -116)
[  316.570881][T10688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.604171][T10688] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  316.647910][ T5774] usb 2-1: 0:2 : does not exist
[  316.732370][T10688] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.1535: iget: bad i_size value: 360287970189639690
[  316.747497][ T5778] usb 5-1: f81604_write: reg: 105 data: 56 failed: -EPROTO
[  316.754788][ T5778] f81604 5-1:0.0: Setting termination of CH#1 failed: -EPROTO
[  316.792181][T10688] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  316.805308][ T5778] f81604: probe of 5-1:0.0 failed with error -71
[  316.827338][ T5778] usb 5-1: USB disconnect, device number 13
[  316.906668][T10143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.119230][ T5774] usb 2-1: USB disconnect, device number 24
[  317.495689][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  317.502228][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  318.484850][T10707] loop3: detected capacity change from 0 to 32768
[  318.515951][T10707] XFS: attr2 mount option is deprecated.
[  318.573570][T10707] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  318.699164][T10707] XFS (loop3): Ending clean mount
[  318.766195][T10707] XFS (loop3): Quotacheck needed: Please wait.
[  318.920807][T10707] XFS (loop3): Quotacheck: Done.
[  319.053614][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'.
[  319.090530][T10743] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.112531][ T5767] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  319.330586][T10743] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.513303][T10743] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.798830][T10743] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.846697][T10757] Bluetooth: MGMT ver 1.22
[  320.000298][T10743] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.048463][T10743] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.105151][ T5855] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  320.130212][T10743] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.137364][T10764] loop3: detected capacity change from 0 to 16
[  320.154299][T10764] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  320.187776][T10743] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  320.287806][ T5855] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  320.323290][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  320.355700][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[  320.375045][ T5855] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  320.393332][ T5855] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  320.423048][ T5855] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  320.444919][ T5855] usb 2-1: Manufacturer: syz
[  320.471709][ T5855] usb 2-1: config 0 descriptor??
[  320.740649][T10774] loop3: detected capacity change from 0 to 1024
[  320.879239][ T5855] rc_core: IR keymap rc-hauppauge not found
[  320.907999][ T5855] Registered IR keymap rc-empty
[  320.913956][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71
[  320.975067][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71
[  321.019343][ T5855] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  321.022986][   T12] hfsplus: b-tree write err: -5, ino 4
[  321.078842][ T5855] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26
[  321.170485][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71
[  321.225467][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71
[  321.283510][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71
[  321.325641][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71
[  321.367536][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71
[  321.427031][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71
[  321.477815][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71
[  321.535074][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71
[  321.553849][T10792] erspan0: entered promiscuous mode
[  321.585699][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71
[  321.639222][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71
[  321.688854][ T5855] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  321.727924][ T5855] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  321.791908][ T5855] usb 2-1: USB disconnect, device number 25
[  321.885306][ T5771] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  321.891743][ T5784] Bluetooth: hci2: command 0x0401 tx timeout
[  322.341333][T10812] loop4: detected capacity change from 0 to 256
[  322.365306][   T28] audit: type=1326 audit(2000000272.591:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.3.1579" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facd259aeb9 code=0x0
[  322.374170][T10812] exfat: Deprecated parameter 'utf8'
[  322.424047][T10812] exfat: Deprecated parameter 'namecase'
[  322.446473][T10812] exfat: Deprecated parameter 'utf8'
[  322.481115][T10812] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  322.642755][T10812] exFAT-fs (loop4): error, tried to truncate zeroed cluster.
[  322.927791][T10826] can0: slcan on ttyS3.
[  323.027697][T10826] can0 (unregistered): slcan off ttyS3.
[  323.515950][ T5817] usb 2-1: new low-speed USB device number 26 using dummy_hcd
[  323.718700][ T5817] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  323.742645][ T5817] usb 2-1: config 0 has no interface number 0
[  323.775154][ T5817] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  323.829299][ T5817] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  323.874107][ T5817] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  323.915626][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.946436][ T5817] usb 2-1: config 0 descriptor??
[  323.972460][T10835] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  323.990848][ T5817] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  324.244533][ T5817] usb 2-1: USB disconnect, device number 26
[  324.250590][    C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  324.625262][ T5855] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  324.679958][T10867] loop3: detected capacity change from 0 to 1024
[  324.794759][T10867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  324.817989][ T5855] usb 5-1: Using ep0 maxpacket: 16
[  324.838754][T10867] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.858013][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.908724][T10867] EXT4-fs (loop3): Online resizing not supported with bigalloc
[  324.910008][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.995147][ T5855] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  325.001825][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  325.023201][ T5855] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  325.052198][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.072359][T10881] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1597'.
[  325.091259][T10881] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1597'.
[  325.102261][ T5855] usb 5-1: config 0 descriptor??
[  325.198837][T10881] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.587350][ T5855] microsoft 0003:045E:07DA.0010: No inputs registered, leaving
[  325.635545][ T5855] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  325.674699][ T5855] microsoft 0003:045E:07DA.0010: no inputs found
[  325.710520][ T5855] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway
[  325.713858][T10890] loop1: detected capacity change from 0 to 8192
[  325.783040][ T5855] usb 5-1: USB disconnect, device number 14
[  325.873255][T10890] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  325.931669][T10890] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  325.941142][T10890] REISERFS (device loop1): using ordered data mode
[  325.947898][T10890] reiserfs: using flush barriers
[  325.991058][T10898] fido_id[10898]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  326.025842][T10890] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  326.084929][T10890] REISERFS (device loop1): checking transaction log (loop1)
[  326.130682][T10890] REISERFS (device loop1): Using r5 hash to sort names
[  326.180331][T10890] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  326.672477][T10921] loop6: detected capacity change from 0 to 524288000
[  327.511389][T10949] loop4: detected capacity change from 0 to 2048
[  327.572943][T10949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.956830][ T9950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.319672][T10973] hsr0: entered promiscuous mode
[  328.340023][T10973] macsec3: entered allmulticast mode
[  328.359283][T10973] hsr0: entered allmulticast mode
[  328.375478][T10973] hsr_slave_0: entered allmulticast mode
[  328.406228][T10973] hsr_slave_1: entered allmulticast mode
[  328.435434][T10973] hsr0: left allmulticast mode
[  328.455221][T10973] hsr_slave_0: left allmulticast mode
[  328.479174][T10973] hsr_slave_1: left allmulticast mode
[  329.686913][T10970] loop4: detected capacity change from 0 to 40427
[  329.729212][T10970] F2FS-fs (loop4): invalid crc value
[  329.737965][T11010] loop3: detected capacity change from 0 to 764
[  329.758882][T10970] F2FS-fs (loop4): Found nat_bits in checkpoint
[  329.798506][T11010] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  329.965251][ T5817] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  330.014390][T10970] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  330.185636][ T5817] usb 2-1: Using ep0 maxpacket: 8
[  330.194953][ T5817] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  330.230492][ T5817] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  330.235305][ T9950] syz-executor: attempt to access beyond end of device
[  330.235305][ T9950] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  330.261092][ T5817] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  330.290310][ T9950] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  330.300978][ T5817] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  330.372074][ T5817] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  330.411492][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.685544][ T5817] usb 2-1: GET_CAPABILITIES returned 0
[  330.696241][ T5817] usbtmc 2-1:16.0: can't read capabilities
[  330.981684][    T9] usb 2-1: USB disconnect, device number 27
[  331.028530][T11035] loop6: detected capacity change from 0 to 4096
[  331.058133][T11035] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512).
[  331.230055][T11044] loop3: detected capacity change from 0 to 256
[  331.537890][T11047] loop4: detected capacity change from 0 to 4096
[  331.637641][T11047] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing.
[  331.675054][T11047] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  331.750620][T11047] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  331.794755][T11047] ntfs: volume version 3.1.
[  332.244502][ T9950] ntfs: (device loop4): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  332.685351][   T27] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  332.883371][   T27] usb 4-1: Using ep0 maxpacket: 16
[  332.901543][   T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  332.912249][T11085] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.941692][   T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  332.965038][   T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  332.995432][   T27] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  333.022030][   T27] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  333.034647][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  333.044126][   T27] usb 4-1: SerialNumber: syz
[  333.066582][T11072] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  333.087815][T11072] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  333.120792][   T27] hub 4-1:1.0: bad descriptor, ignoring hub
[  333.141572][   T27] hub: probe of 4-1:1.0 failed with error -5
[  333.267980][T11085] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.363076][T11072] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  333.395783][T11072] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  333.695307][T11085] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.723770][T11105] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  333.873952][T11085] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.946504][   T27] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42
[  334.123059][T11085] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.181300][T11085] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.220216][T11116] loop4: detected capacity change from 0 to 128
[  334.227206][T11085] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  334.247236][ T5817] usb 4-1: USB disconnect, device number 20
[  334.257991][T11085] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  334.285630][ T5817] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device
[  334.304503][T11116] FAT-fs (loop4): Directory bread(block 414) failed
[  334.319477][T11116] FAT-fs (loop4): Directory bread(block 415) failed
[  334.344387][T11116] FAT-fs (loop4): Directory bread(block 416) failed
[  334.380457][T11116] FAT-fs (loop4): Directory bread(block 417) failed
[  334.406806][T11116] FAT-fs (loop4): Directory bread(block 418) failed
[  334.419034][T11116] FAT-fs (loop4): Directory bread(block 419) failed
[  334.442079][T11116] FAT-fs (loop4): Directory bread(block 420) failed
[  334.471226][T11116] FAT-fs (loop4): Directory bread(block 421) failed
[  334.569269][T11116] FAT-fs (loop4): Directory bread(block 414) failed
[  334.591216][T11116] FAT-fs (loop4): Directory bread(block 415) failed
[  334.722012][T11129] fuse: Invalid group_id
[  334.946108][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1666'.
[  335.779307][T11159] loop4: detected capacity change from 0 to 128
[  335.922123][T11162] loop1: detected capacity change from 0 to 256
[  336.058270][T11162] FAT-fs (loop1): Directory bread(block 64) failed
[  336.091651][T11162] FAT-fs (loop1): Directory bread(block 65) failed
[  336.125554][T11162] FAT-fs (loop1): Directory bread(block 66) failed
[  336.153955][T11162] FAT-fs (loop1): Directory bread(block 67) failed
[  336.186347][T11162] FAT-fs (loop1): Directory bread(block 68) failed
[  336.192939][T11162] FAT-fs (loop1): Directory bread(block 69) failed
[  336.226532][T11162] FAT-fs (loop1): Directory bread(block 70) failed
[  336.233156][T11162] FAT-fs (loop1): Directory bread(block 71) failed
[  336.260535][T11162] FAT-fs (loop1): Directory bread(block 72) failed
[  336.277982][T11162] FAT-fs (loop1): Directory bread(block 73) failed
[  336.793463][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1681'.
[  337.137997][T11199] netlink: 'syz.4.1684': attribute type 15 has an invalid length.
[  337.232890][T11201] loop1: detected capacity change from 0 to 1024
[  337.281268][T11203] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[  337.473937][  T746] hfsplus: b-tree write err: -5, ino 4
[  337.929688][T11216] loop4: detected capacity change from 0 to 4096
[  337.943733][T11216] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512).
[  338.072210][T11216] ntfs3: loop4: Failed to initialize $Extend/$ObjId.
[  338.298911][T11226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1697'.
[  338.776192][T11224] loop1: detected capacity change from 0 to 32768
[  338.792057][T11224] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1696 (11224)
[  338.877073][T11224] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  338.897694][T11224] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  338.935260][T11224] BTRFS info (device loop1): using free space tree
[  339.112341][T11224] BTRFS info (device loop1): enabling ssd optimizations
[  339.120911][T11224] BTRFS info (device loop1): auto enabling async discard
[  339.304115][ T5768] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  339.692371][ T5770] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop1 scanned by udevd (5770)
[  339.756937][T11262] program syz.4.1706 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  339.812006][T11267] loop3: detected capacity change from 0 to 128
[  340.383186][T11275] loop3: detected capacity change from 0 to 1024
[  340.650728][  T746] hfsplus: b-tree write err: -5, ino 3
[  341.040482][T11269] loop4: detected capacity change from 0 to 32768
[  341.066313][T11269] 
[  341.066313][T11269]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  341.066313][T11269] 
[  341.102609][T11284] loop3: detected capacity change from 0 to 16
[  341.147801][T11284] erofs: (device loop3): mounted with root inode @ nid 36.
[  341.274479][ T9950] 
[  341.274479][ T9950]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  341.274479][ T9950] 
[  341.289665][ T9950] 
[  341.289665][ T9950]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  341.289665][ T9950] 
[  341.601200][T11292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1719'.
[  341.864440][   T28] audit: type=1326 audit(2000000292.091:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.3.1722" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7facd259aeb9 code=0x0
[  342.061558][T11309] netlink: 'syz.6.1724': attribute type 3 has an invalid length.
[  342.087862][T11309] netlink: 'syz.6.1724': attribute type 3 has an invalid length.
[  342.381067][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1728'.
[  342.600643][T11327] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1731'.
[  343.048840][T11342] loop6: detected capacity change from 0 to 1024
[  343.146619][T11342] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  343.339638][T10143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.499666][T11354] loop4: detected capacity change from 0 to 256
[  343.594273][T11354] FAT-fs (loop4): Directory bread(block 64) failed
[  343.616010][T11354] FAT-fs (loop4): Directory bread(block 65) failed
[  343.662004][T11354] FAT-fs (loop4): Directory bread(block 66) failed
[  343.691413][T11354] FAT-fs (loop4): Directory bread(block 67) failed
[  343.712130][T11354] FAT-fs (loop4): Directory bread(block 68) failed
[  343.747458][T11354] FAT-fs (loop4): Directory bread(block 69) failed
[  343.774721][T11354] FAT-fs (loop4): Directory bread(block 70) failed
[  343.813375][T11354] FAT-fs (loop4): Directory bread(block 71) failed
[  343.842811][T11354] FAT-fs (loop4): Directory bread(block 72) failed
[  343.875089][T11354] FAT-fs (loop4): Directory bread(block 73) failed
[  344.050867][T11368] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1748'.
[  344.388991][T11372] loop4: detected capacity change from 0 to 1024
[  344.553328][T11372] hfsplus: request for non-existent node 211 in B*Tree
[  344.595048][T11372] hfsplus: request for non-existent node 211 in B*Tree
[  344.669179][ T1321] hfsplus: b-tree write err: -5, ino 8
[  344.727352][T11363] loop1: detected capacity change from 0 to 32768
[  344.787894][T11363] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  344.910196][T11363] XFS (loop1): Ending clean mount
[  344.939442][T11363] XFS (loop1): Quotacheck needed: Please wait.
[  344.950145][T11364] loop6: detected capacity change from 0 to 40427
[  345.049697][T11364] F2FS-fs (loop6): Found nat_bits in checkpoint
[  345.072473][T11363] XFS (loop1): Quotacheck: Done.
[  345.139052][T11364] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  345.253278][T11395] netlink: 'syz.4.1754': attribute type 21 has an invalid length.
[  345.262557][T11395] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1754'.
[  345.317679][T11396] netlink: 'syz.4.1754': attribute type 21 has an invalid length.
[  345.350087][T11396] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1754'.
[  345.540885][ T5768] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  345.566498][T10143] syz-executor: attempt to access beyond end of device
[  345.566498][T10143] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  345.605271][T10143] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  345.647712][T11402] loop3: detected capacity change from 0 to 512
[  345.749807][T11402] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.1759: bad orphan inode 11862016
[  345.857193][T11402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  345.905840][T11402] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  346.043966][T11402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  347.095791][T11435] loop3: detected capacity change from 0 to 512
[  347.146378][T11435] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.1769: corrupted in-inode xattr: invalid ea_ino
[  347.168295][T11435] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.1769: couldn't read orphan inode 15 (err -117)
[  347.216824][T11435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.350034][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.775742][ T5774] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  347.817235][T11427] loop1: detected capacity change from 0 to 40427
[  347.885210][T11427] F2FS-fs (loop1): Found nat_bits in checkpoint
[  347.900474][T11451] loop6: detected capacity change from 0 to 8192
[  347.975106][ T5774] usb 4-1: Using ep0 maxpacket: 32
[  347.993580][ T5774] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  348.016788][ T5774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.036146][ T5774] usb 4-1: Product: syz
[  348.040381][ T5774] usb 4-1: Manufacturer: syz
[  348.049234][T11427] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  348.057349][ T5774] usb 4-1: SerialNumber: syz
[  348.066498][ T5774] usb 4-1: config 0 descriptor??
[  348.253446][T11461] fuse: Bad value for 'fd'
[  348.300117][ T5817] kernel write not supported for file /sg0 (pid: 5817 comm: kworker/0:4)
[  348.409322][ T5768] syz-executor: attempt to access beyond end of device
[  348.409322][ T5768] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  348.440094][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  348.495429][ T5774] airspy 4-1:0.0: Board ID: 00
[  348.500289][ T5774] airspy 4-1:0.0: Firmware version: 
[  348.697364][ T5774] airspy 4-1:0.0: usb_control_msg() failed -71 request 11
[  348.725710][ T5774] airspy 4-1:0.0: Registered as swradio24
[  348.746480][ T5774] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  348.793884][ T5774] usb 4-1: USB disconnect, device number 21
[  348.949171][T11474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1785'.
[  348.968252][T11474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1785'.
[  349.041268][T11475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1785'.
[  349.081368][T11475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1785'.
[  349.101830][T11475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1785'.
[  349.123669][T11475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1785'.
[  349.497660][T11485] loop4: detected capacity change from 0 to 256
[  350.603046][T11519] program syz.3.1803 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  350.881177][T11529] netlink: 884 bytes leftover after parsing attributes in process `syz.3.1808'.
[  351.513693][T11533] loop4: detected capacity change from 0 to 32768
[  351.570322][T11533] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  351.616805][T11533] XFS (loop4): Ending clean mount
[  351.806783][T11551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1815'.
[  351.827879][ T9950] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  353.367838][T11577] loop6: detected capacity change from 0 to 256
[  353.442936][T11577] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  354.356020][T11606] loop6: detected capacity change from 0 to 524287999
[  355.417034][T11629] trusted_key: encrypted_key: keyword 'uew' not recognized
[  355.502075][T11631] 9pnet: p9_errstr2errno: server reported unknown error ��
[  355.822542][T11641] loop3: detected capacity change from 0 to 64
[  355.889975][T11641] hfs: unable to locate alternate MDB
[  355.905597][T11641] hfs: continuing without an alternate MDB
[  356.583219][T11645] loop4: detected capacity change from 0 to 32768
[  356.656523][T11645] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  356.675483][ T5774] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  356.728581][T11645] XFS (loop4): Ending clean mount
[  356.749277][T11667] loop1: detected capacity change from 0 to 1024
[  356.754061][T11645] XFS (loop4): Quotacheck needed: Please wait.
[  356.867989][ T5774] usb 4-1: Using ep0 maxpacket: 16
[  356.876041][T11645] XFS (loop4): Quotacheck: Done.
[  356.891475][ T5774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.926777][T11667] gfs2: path_lookup on c::;��N���L���;o$: returned error -2
[  356.933802][ T5774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  356.981198][ T5774] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  357.045253][ T5774] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  357.065126][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.088396][ T5774] usb 4-1: config 0 descriptor??
[  357.270149][ T9950] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  357.625828][ T5774] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0
[  357.633155][ T5774] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max
[  357.798437][ T5774] microsoft 0003:045E:07DA.0011: No inputs registered, leaving
[  357.815688][ T5774] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  357.860508][ T5774] microsoft 0003:045E:07DA.0011: no inputs found
[  357.887073][ T5774] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway
[  358.171871][ T5774] usb 4-1: USB disconnect, device number 22
[  358.549202][T11702] loop6: detected capacity change from 0 to 4096
[  358.564846][T11702] EXT4-fs: Ignoring removed bh option
[  358.614442][T11702] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.765993][T11702] EXT4-fs error (device loop6): ext4_get_first_dir_block:3604: inode #12: block 80: comm syz.6.1878: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  358.805691][T11702] EXT4-fs (loop6): Remounting filesystem read-only
[  358.984681][T10143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.205265][T11719] loop4: detected capacity change from 0 to 128
[  359.265210][T11719] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  359.307263][T11719] hpfs: filesystem error: improperly stopped
[  359.336619][T11719] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  359.372161][T11719] hpfs: You really don't want any checks? You are crazy...
[  359.396374][T11719] hpfs: hpfs_map_sector(): read error
[  359.404586][T11725] loop1: detected capacity change from 0 to 64
[  359.411036][T11719] hpfs: code page support is disabled
[  359.411312][T11719] hpfs: hpfs_map_4sectors(): unaligned read
[  359.426734][T11719] hpfs: hpfs_map_4sectors(): unaligned read
[  359.432778][T11719] hpfs: filesystem error: unable to find root dir
[  359.904211][T11717] loop3: detected capacity change from 0 to 32768
[  359.971028][T11717] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  360.069079][T11717] XFS (loop3): Ending clean mount
[  360.291049][ T5767] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  360.519253][T11758] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1899'.
[  360.805785][T11765] loop3: detected capacity change from 0 to 2048
[  360.870054][T11766] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  361.385649][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1909'.
[  361.404532][T11779] loop4: detected capacity change from 0 to 4096
[  361.469936][T11779] ntfs: volume version 3.1.
[  361.508185][T11779] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  361.521313][T11779] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  361.528318][T11786] loop1: detected capacity change from 0 to 1024
[  361.562076][T11779] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated.  Mounting read-only.  Run chkdsk.
[  361.587003][T11786] hfsplus: bad catalog entry type
[  361.692314][   T61] hfsplus: b-tree write err: -5, ino 4
[  361.764310][T11788] loop3: detected capacity change from 0 to 512
[  361.894765][T11788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  361.933027][T11788] ext4 filesystem being mounted at /524/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  362.181541][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.497904][T11809] syzkaller0: tun_chr_ioctl cmd 2147767521
[  362.605817][T11813] loop4: detected capacity change from 0 to 512
[  362.723194][T11815] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1923'.
[  362.755559][T11815] sch_fq: defrate 0 ignored.
[  362.979004][T11824] pim6reg0: tun_chr_ioctl cmd 2147767517
[  363.385330][ T5863] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  363.614674][ T5863] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  363.624879][ T5863] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  363.659214][ T5863] usb 4-1: config 220 has an invalid descriptor of length 36, skipping remainder of the config
[  363.694935][ T5863] usb 4-1: config 220 has no interface number 2
[  363.701484][ T5863] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  363.725480][ T5863] usb 4-1: config 220 interface 0 has no altsetting 0
[  363.732696][ T5863] usb 4-1: config 220 interface 76 has no altsetting 0
[  363.741204][ T5863] usb 4-1: config 220 interface 1 has no altsetting 0
[  363.758048][ T5863] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  363.771323][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.780205][ T5863] usb 4-1: Product: syz
[  363.784670][ T5863] usb 4-1: Manufacturer: syz
[  363.789826][ T5863] usb 4-1: SerialNumber: syz
[  364.012546][T11852] loop4: detected capacity change from 0 to 2048
[  364.050533][T11852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  364.067957][ T5863] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  364.074385][ T5863] usb 4-1: No valid video chain found.
[  364.081449][ T5863] usb 4-1: selecting invalid altsetting 0
[  364.120963][ T5863] usb 4-1: selecting invalid altsetting 0
[  364.140838][ T5863] usbtest: probe of 4-1:220.1 failed with error -22
[  364.162035][T11854] loop1: detected capacity change from 0 to 64
[  364.164382][ T5863] usb 4-1: USB disconnect, device number 23
[  364.509175][T11858] loop4: detected capacity change from 0 to 1024
[  364.762525][T11864] Falling back ldisc for ttyS3.
[  364.952976][T11868] loop3: detected capacity change from 0 to 512
[  365.037027][T11872] misc userio: Can't change port type on an already running userio instance
[  365.445253][   T23] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  365.625266][   T23] usb 5-1: Using ep0 maxpacket: 8
[  365.648573][   T23] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  365.658589][   T27] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  365.666889][   T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  365.678219][   T23] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  365.688855][   T23] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  365.705161][   T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  365.714441][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.723106][   T23] usb 5-1: Product: syz
[  365.728284][   T23] usb 5-1: Manufacturer: syz
[  365.733379][   T23] usb 5-1: SerialNumber: syz
[  365.768588][T11874] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  365.786446][   T23] cdc_ether: probe of 5-1:1.0 failed with error -22
[  365.796218][   T23] usbtest 5-1:1.0: Linux user mode ISO test driver
[  365.802972][   T23] usbtest 5-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  365.871473][   T27] usb 4-1: Using ep0 maxpacket: 8
[  365.880204][   T27] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  365.894079][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.902377][   T27] usb 4-1: Product: syz
[  365.906929][   T27] usb 4-1: Manufacturer: syz
[  365.911564][   T27] usb 4-1: SerialNumber: syz
[  365.918473][   T27] usb 4-1: config 0 descriptor??
[  365.926379][   T27] gspca_main: se401-2.14.0 probing 047d:5003
[  366.043405][  T788] usb 5-1: USB disconnect, device number 15
[  366.092160][ T2920] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.245551][ T2920] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.384944][ T2920] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.433039][T11893] loop1: detected capacity change from 0 to 1024
[  366.558449][  T746] hfsplus: b-tree write err: -5, ino 4
[  366.566792][   T27] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29
[  366.576948][ T2920] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.782341][   T23] usb 4-1: USB disconnect, device number 24
[  366.884410][ T5770] udevd[5770]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  366.939853][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1963'.
[  366.980425][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1963'.
[  367.123890][   T28] audit: type=1326 audit(2000000317.351:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11901 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05319aeb9 code=0x7ffc0000
[  367.252438][   T28] audit: type=1326 audit(2000000317.351:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11901 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff05319aeb9 code=0x7ffc0000
[  367.338691][   T28] audit: type=1326 audit(2000000317.351:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11901 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05319aeb9 code=0x7ffc0000
[  367.386208][   T28] audit: type=1326 audit(2000000317.351:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11901 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff05319aeb9 code=0x7ffc0000
[  367.419370][T11905] loop1: detected capacity change from 0 to 2048
[  367.442678][   T28] audit: type=1326 audit(2000000317.351:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11901 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff05319aeb9 code=0x7ffc0000
[  367.482510][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  367.498234][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  367.507815][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  367.522356][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  367.536010][ T5771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  367.544056][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  367.573389][T11905] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  367.588515][T11905] UDF-fs: Scanning with blocksize 512 failed
[  367.722173][T11905] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  368.095994][T11907] ip6_vti0 speed is unknown, defaulting to 1000
[  368.266344][T11929] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  369.123551][T11949] loop1: detected capacity change from 0 to 1024
[  369.196332][T11949] EXT4-fs: Ignoring removed oldalloc option
[  369.225368][T11949] EXT4-fs: Ignoring removed bh option
[  369.255892][T11949] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  369.287718][T11952] sp0: Synchronizing with TNC
[  369.405591][T11949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.461446][T11935] loop4: detected capacity change from 0 to 40427
[  369.506861][T11935] F2FS-fs (loop4): invalid crc value
[  369.522507][T11935] F2FS-fs (loop4): Found nat_bits in checkpoint
[  369.612938][T11935] F2FS-fs (loop4): Start checkpoint disabled!
[  369.645673][ T5784] Bluetooth: hci3: command tx timeout
[  369.665652][T11935] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  369.743882][T11959] EXT4-fs error (device loop1): mb_free_blocks:1954: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt.
[  369.869715][   T28] audit: type=1804 audit(2000000320.101:35): pid=11935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1973" name="/newroot/162/file0/bus" dev="loop4" ino=10 res=1 errno=0
[  370.034928][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.211997][T11907] chnl_net:caif_netlink_parms(): no params data found
[  370.239587][  T746] kworker/u4:5: attempt to access beyond end of device
[  370.239587][  T746] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  370.317341][  T746] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  370.352626][  T746] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  370.359817][ T5863] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  370.558983][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  370.570303][ T5863] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  370.579859][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.592456][ T5863] usb 4-1: config 0 descriptor??
[  370.980809][T11907] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.045930][T11907] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.059556][ T5863] logitech 0003:046D:C50C.0012: unknown main item tag 0x0
[  371.074831][T11907] bridge_slave_0: entered allmulticast mode
[  371.082454][ T5863] logitech 0003:046D:C50C.0012: unknown main item tag 0x0
[  371.107074][T11907] bridge_slave_0: entered promiscuous mode
[  371.114822][ T5863] logitech 0003:046D:C50C.0012: unknown main item tag 0x0
[  371.136150][T11907] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.143628][ T5863] logitech 0003:046D:C50C.0012: unknown main item tag 0x0
[  371.151343][T11907] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.171703][T11907] bridge_slave_1: entered allmulticast mode
[  371.178314][ T5863] logitech 0003:046D:C50C.0012: unknown main item tag 0x0
[  371.206848][T11907] bridge_slave_1: entered promiscuous mode
[  371.212937][ T5863] logitech 0003:046D:C50C.0012: unknown main item tag 0x0
[  371.245080][ T5863] logitech 0003:046D:C50C.0012: unknown main item tag 0x0
[  371.258544][ T5863] logitech 0003:046D:C50C.0012: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.3-1/input0
[  371.271098][ T2920] hsr_slave_0: left promiscuous mode
[  371.281359][ T2920] hsr_slave_1: left promiscuous mode
[  371.286287][ T5863] usb 4-1: USB disconnect, device number 25
[  371.297339][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  371.321085][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0
[  371.350950][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  371.374468][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1
[  371.401208][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.407869][T11993] fido_id[11993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  371.428847][ T2920] bridge_slave_0: left allmulticast mode
[  371.440975][ T2920] bridge_slave_0: left promiscuous mode
[  371.447364][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.515769][ T2920] veth1_macvtap: left promiscuous mode
[  371.522359][ T2920] veth0_macvtap: left promiscuous mode
[  371.530530][ T2920] veth1_vlan: left promiscuous mode
[  371.538963][ T2920] veth0_vlan: left promiscuous mode
[  371.634614][T11998] loop4: detected capacity change from 0 to 2048
[  371.694426][T11998] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  371.726795][ T5771] Bluetooth: hci3: command tx timeout
[  371.999952][T12001] rtc_cmos 00:00: Alarms can be up to one day in the future
[  373.345802][   T23] rtc_cmos 00:00: Alarms can be up to one day in the future
[  373.638517][T12010] loop1: detected capacity change from 0 to 131072
[  373.648554][   T23] rtc_cmos 00:00: Alarms can be up to one day in the future
[  373.657138][   T23] rtc_cmos 00:00: Alarms can be up to one day in the future
[  373.664493][T12010] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  373.673101][T12010] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  373.682497][   T23] rtc_cmos 00:00: Alarms can be up to one day in the future
[  373.690803][T12010] F2FS-fs (loop1): invalid crc value
[  373.696571][   T23] rtc rtc0: __rtc_set_alarm: err=-22
[  373.716704][T12010] F2FS-fs (loop1): Found nat_bits in checkpoint
[  373.792170][T12010] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  373.799443][T12010] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  373.808201][ T5771] Bluetooth: hci3: command tx timeout
[  374.302112][ T2920] team0 (unregistering): Port device team_slave_1 removed
[  374.414866][ T2920] team0 (unregistering): Port device team_slave_0 removed
[  374.532105][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  374.630279][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  375.288002][ T2920] bond0 (unregistering): Released all slaves
[  375.444692][T11907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.489321][T11907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.673491][T11907] team0: Port device team_slave_0 added
[  375.742719][T11907] team0: Port device team_slave_1 added
[  375.874174][T11907] batman_adv: batadv0: Adding interface: batadv_slave_0
[  375.900633][ T5771] Bluetooth: hci3: command tx timeout
[  375.929688][T11907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.953741][T12040] loop4: detected capacity change from 0 to 2048
[  375.992449][T12040] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  376.047076][T11907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  376.095181][T11907] batman_adv: batadv0: Adding interface: batadv_slave_1
[  376.114178][T11907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.172126][T11907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  376.601068][T11907] hsr_slave_0: entered promiscuous mode
[  376.732728][T11907] hsr_slave_1: entered promiscuous mode
[  376.824245][T11907] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  376.838727][T11907] Cannot create hsr debugfs directory
[  376.979946][T12059] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2006'.
[  377.124342][T12062] macsec0: entered promiscuous mode
[  377.304409][T12067] loop4: detected capacity change from 0 to 1024
[  377.332483][T12067] EXT4-fs: Ignoring removed oldalloc option
[  377.384070][T12067] EXT4-fs: Ignoring removed bh option
[  377.437725][T12067] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  377.536768][T12067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  377.709136][T12083] loop1: detected capacity change from 0 to 512
[  377.774703][T12083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  377.778082][T12086] EXT4-fs error (device loop4): mb_free_blocks:1954: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt.
[  377.794641][T12083] ext4 filesystem being mounted at /527/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  377.931044][T12083] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #4: comm syz.1.2014: corrupted inode contents
[  377.949086][ T9950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.965146][ T5771] Bluetooth: hci3: command tx timeout
[  377.965488][   T27] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  377.985819][T12083] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #4: comm syz.1.2014: mark_inode_dirty error
[  378.029933][T12083] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #4: comm syz.1.2014: corrupted inode contents
[  378.101329][T12083] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #4: comm syz.1.2014: mark_inode_dirty error
[  378.138177][T12083] Quota error (device loop1): write_blk: dquota write failed
[  378.159567][T12083] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  378.180994][T12083] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.2014: Failed to acquire dquot type 1
[  378.182905][T12088] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #4: comm syz.1.2014: corrupted inode contents
[  378.236313][T12088] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #4: comm syz.1.2014: mark_inode_dirty error
[  378.237276][   T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  378.283363][T12088] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #4: comm syz.1.2014: corrupted inode contents
[  378.285014][   T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  378.318590][T12088] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #4: comm syz.1.2014: mark_inode_dirty error
[  378.334405][   T27] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  378.362406][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  378.371111][T12088] Quota error (device loop1): write_blk: dquota write failed
[  378.391179][   T27] usb 4-1: SerialNumber: syz
[  378.407660][T12088] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  378.447320][T12088] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  378.503985][T12088] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.2014: Failed to acquire dquot type 1
[  378.580680][T12090] Quota error (device loop1): do_insert_tree: Inserting already present quota entry (block 7)
[  378.634087][T12090] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota
[  378.658436][   T27] usb 4-1: 0:2 : does not exist
[  378.723405][   T27] usb 4-1: USB disconnect, device number 26
[  378.793768][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.964428][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  378.970997][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  379.128577][T12106] loop1: detected capacity change from 0 to 512
[  379.190829][T11907] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  379.204348][T12106] EXT4-fs (loop1): Test dummy encryption mode enabled
[  379.216442][T12106] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  379.235355][T11907] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  379.250959][T11907] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  379.274409][T12106] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #17: comm syz.1.2016: corrupted in-inode xattr: invalid ea_ino
[  379.300923][T11907] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  379.314261][T12106] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.2016: couldn't read orphan inode 17 (err -117)
[  379.360948][T12106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.493641][T12106] EXT4-fs (loop1): shut down requested (1)
[  379.539809][T12106] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #2: comm syz.1.2016: directory missing '..'
[  379.598138][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.669044][T11907] 8021q: adding VLAN 0 to HW filter on device bond0
[  379.759349][T11907] 8021q: adding VLAN 0 to HW filter on device team0
[  379.800165][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.807466][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.873649][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.880849][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.056095][ T5855] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  380.247868][ T5855] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  380.275143][ T5855] usb 2-1: config 0 interface 0 has no altsetting 0
[  380.281856][ T5855] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  380.326379][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.347680][ T5855] usb 2-1: config 0 descriptor??
[  380.549028][T11907] 8021q: adding VLAN 0 to HW filter on device batadv0
[  380.801015][ T5855] holtek_kbd 0003:04D9:A055.0013: unknown main item tag 0x1
[  380.828008][ T5855] holtek_kbd 0003:04D9:A055.0013: item fetching failed at offset 2/3
[  380.875931][ T5855] holtek_kbd: probe of 0003:04D9:A055.0013 failed with error -22
[  381.071080][ T5838] usb 2-1: USB disconnect, device number 28
[  381.490873][T11907] veth0_vlan: entered promiscuous mode
[  381.550638][T11907] veth1_vlan: entered promiscuous mode
[  381.669992][T11907] veth0_macvtap: entered promiscuous mode
[  381.769083][T11907] veth1_macvtap: entered promiscuous mode
[  381.875378][T11907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  381.919278][T11907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.950983][T11907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  381.965330][ T5771] Bluetooth: hci3: command tx timeout
[  382.002609][T11907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.045484][T11907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.075034][T11907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.078497][T12187] loop3: detected capacity change from 0 to 1024
[  382.112355][T11907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: ipvlan2
[  382.147432][T11907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.173966][T11907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.208966][   T12] wlan1: Trigger new scan to find an IBSS to join
[  382.215016][T11907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.258583][T11907] batman_adv: batadv0: Interface activated: batadv_slave_0
[  382.276374][   T12] ------------[ cut here ]------------
[  382.282666][   T12] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40
[  382.293940][   T12] WARNING: CPU: 0 PID: 12 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880
[  382.303903][   T12] Modules linked in:
[  382.307888][   T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0
[  382.309849][T11907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.315349][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  382.315449][   T12] Workqueue: events_unbound cfg80211_wiphy_work
[  382.342350][   T12] RIP: 0010:__rate_control_send_low+0x635/0x880
[  382.348703][   T12] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 00 cc de 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 2b a4 56 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff
[  382.368577][   T12] RSP: 0018:ffffc90000117380 EFLAGS: 00010246
[  382.374713][   T12] RAX: 80c85cb664035600 RBX: 000000000000000c RCX: ffff88801a27da00
[  382.382818][   T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  382.390891][   T12] RBP: 0000000000000084 R08: ffffc90000116f87 R09: 1ffff92000022df0
[  382.398965][   T12] R10: dffffc0000000000 R11: fffff52000022df1 R12: 0000000000000040
[  382.407044][   T12] R13: dffffc0000000000 R14: ffff88807c6d3358 R15: ffff888055de9528
[  382.415085][   T12] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  382.424067][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  382.430693][T11907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.430711][T11907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.430728][T11907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.430748][T11907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.440558][   T12] CR2: 0000001b2d818ff8 CR3: 00000000508c6000 CR4: 00000000003506f0
[  382.440585][   T12] Call Trace:
[  382.440595][   T12]  <TASK>
[  382.440621][   T12]  rate_control_send_low+0x194/0x790
[  382.440657][   T12]  rate_control_get_rate+0x20b/0x5d0
[  382.440690][   T12]  ieee80211_tx_h_rate_ctrl+0xb63/0x1790
[  382.440736][   T12]  ? ieee80211_tx_h_select_key+0x19e0/0x19e0
[  382.440759][   T12]  ? __lock_acquire+0x1273/0x7d40
[  382.440792][   T12]  ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0
[  382.440826][   T12]  invoke_tx_handlers_late+0xb6/0x1810
[  382.440860][   T12]  ? invoke_tx_handlers_early+0xa11/0x1cf0
[  382.490812][T11907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.491335][   T12]  ieee80211_tx+0x2d8/0x460
[  382.505016][T11907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.508327][   T12]  ? ieee80211_skb_resize+0x630/0x630
[  382.523679][T11907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.525092][   T12]  ? ieee80211_set_qos_hdr+0x1ca/0x510
[  382.525132][   T12]  ? __bpf_trace_tasklet+0x160/0x160
[  382.525161][   T12]  ? ieee80211_xmit+0x310/0x3f0
[  382.525188][   T12]  ? __ieee80211_tx_skb_tid_band+0x490/0x610
[  382.525212][   T12]  __ieee80211_tx_skb_tid_band+0x4d5/0x610
[  382.525252][   T12]  ? ieee80211_scan_state_send_probe+0x4b4/0x930
[  382.525278][   T12]  ieee80211_scan_state_send_probe+0x560/0x930
[  382.525332][   T12]  ieee80211_scan_work+0x4e9/0x1c40
[  382.525391][   T12]  cfg80211_wiphy_work+0x225/0x260
[  382.525427][   T12]  ? process_scheduled_works+0x96f/0x15d0
[  382.525454][   T12]  process_scheduled_works+0xa5d/0x15d0
[  382.525513][   T12]  ? assign_work+0x430/0x430
[  382.525548][   T12]  ? assign_work+0x3d0/0x430
[  382.525582][   T12]  worker_thread+0xa55/0xfc0
[  382.525638][   T12]  kthread+0x2fa/0x390
[  382.546695][T11907] batman_adv: batadv0: Interface activated: batadv_slave_1
[  382.556299][   T12]  ? pr_cont_work+0x560/0x560
[  382.556336][   T12]  ? kthread_blkcg+0xd0/0xd0
[  382.556358][   T12]  ret_from_fork+0x48/0x80
[  382.556383][   T12]  ? kthread_blkcg+0xd0/0xd0
[  382.556406][   T12]  ret_from_fork_asm+0x11/0x20
[  382.556452][   T12]  </TASK>
[  382.556464][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  382.556481][   T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0
[  382.556501][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  382.556513][   T12] Workqueue: events_unbound cfg80211_wiphy_work
[  382.556546][   T12] Call Trace:
[  382.556554][   T12]  <TASK>
[  382.556562][   T12]  dump_stack_lvl+0x18c/0x250
[  382.556595][   T12]  ? show_regs_print_info+0x20/0x20
[  382.556622][   T12]  ? load_image+0x400/0x400
[  382.556658][   T12]  panic+0x2dc/0x730
[  382.556685][   T12]  ? bpf_jit_dump+0xd0/0xd0
[  382.556716][   T12]  ? ret_from_fork_asm+0x11/0x20
[  382.556745][   T12]  __warn+0x2e0/0x470
[  382.556761][   T12]  ? __rate_control_send_low+0x635/0x880
[  382.556783][   T12]  ? __rate_control_send_low+0x635/0x880
[  382.556802][   T12]  report_bug+0x2be/0x4f0
[  382.556826][   T12]  ? __rate_control_send_low+0x635/0x880
[  382.556845][   T12]  ? __rate_control_send_low+0x635/0x880
[  382.556864][   T12]  ? __rate_control_send_low+0x637/0x880
[  382.556882][   T12]  handle_bug+0xcf/0x120
[  382.556907][   T12]  exc_invalid_op+0x1a/0x50
[  382.556930][   T12]  asm_exc_invalid_op+0x1a/0x20
[  382.556948][   T12] RIP: 0010:__rate_control_send_low+0x635/0x880
[  382.556968][   T12] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 00 cc de 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 2b a4 56 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff
[  382.556984][   T12] RSP: 0018:ffffc90000117380 EFLAGS: 00010246
[  382.557000][   T12] RAX: 80c85cb664035600 RBX: 000000000000000c RCX: ffff88801a27da00
[  382.557014][   T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  382.557025][   T12] RBP: 0000000000000084 R08: ffffc90000116f87 R09: 1ffff92000022df0
[  382.557037][   T12] R10: dffffc0000000000 R11: fffff52000022df1 R12: 0000000000000040
[  382.557050][   T12] R13: dffffc0000000000 R14: ffff88807c6d3358 R15: ffff888055de9528
[  382.557097][   T12]  rate_control_send_low+0x194/0x790
[  382.557122][   T12]  rate_control_get_rate+0x20b/0x5d0
[  382.557151][   T12]  ieee80211_tx_h_rate_ctrl+0xb63/0x1790
[  382.557188][   T12]  ? ieee80211_tx_h_select_key+0x19e0/0x19e0
[  382.557206][   T12]  ? __lock_acquire+0x1273/0x7d40
[  382.557242][   T12]  ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0
[  382.557271][   T12]  invoke_tx_handlers_late+0xb6/0x1810
[  382.557301][   T12]  ? invoke_tx_handlers_early+0xa11/0x1cf0
[  382.557333][   T12]  ieee80211_tx+0x2d8/0x460
[  382.557354][   T12]  ? ieee80211_skb_resize+0x630/0x630
[  382.557386][   T12]  ? ieee80211_set_qos_hdr+0x1ca/0x510
[  382.557412][   T12]  ? __bpf_trace_tasklet+0x160/0x160
[  382.557436][   T12]  ? ieee80211_xmit+0x310/0x3f0
[  382.557457][   T12]  ? __ieee80211_tx_skb_tid_band+0x490/0x610
[  382.557478][   T12]  __ieee80211_tx_skb_tid_band+0x4d5/0x610
[  382.557505][   T12]  ? ieee80211_scan_state_send_probe+0x4b4/0x930
[  382.557525][   T12]  ieee80211_scan_state_send_probe+0x560/0x930
[  382.557571][   T12]  ieee80211_scan_work+0x4e9/0x1c40
[  382.557622][   T12]  cfg80211_wiphy_work+0x225/0x260
[  382.557652][   T12]  ? process_scheduled_works+0x96f/0x15d0
[  382.557674][   T12]  process_scheduled_works+0xa5d/0x15d0
[  382.557727][   T12]  ? assign_work+0x430/0x430
[  382.557755][   T12]  ? assign_work+0x3d0/0x430
[  382.557782][   T12]  worker_thread+0xa55/0xfc0
[  382.557833][   T12]  kthread+0x2fa/0x390
[  382.557850][   T12]  ? pr_cont_work+0x560/0x560
[  382.557871][   T12]  ? kthread_blkcg+0xd0/0xd0
[  382.557889][   T12]  ret_from_fork+0x48/0x80
[  382.557908][   T12]  ? kthread_blkcg+0xd0/0xd0
[  382.557927][   T12]  ret_from_fork_asm+0x11/0x20
[  382.557965][   T12]  </TASK>
[  382.562551][   T12] Kernel Offset: disabled