last executing test programs:

1m52.969739072s ago: executing program 4 (id=39):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
recvfrom(r0, 0x0, 0x0, 0x40000141, 0x0, 0x0)

1m52.870836902s ago: executing program 4 (id=41):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x1480e, &(0x7f0000000200)={[{@map_off}, {@nocompress, 0x0}, {@dmode={'dmode', 0x3d, 0xffff}}, {@session={'session', 0x3d, 0x1b}}, {@nocompress}, {@check_relaxed, 0x41}, {}, {}, {@unhide}, {@map_acorn}, {@session={'session', 0x3d, 0x428}}, {@uid}]}, 0x0, 0x67b, &(0x7f0000000980)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)

1m52.60116213s ago: executing program 4 (id=44):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}]}]}]}, 0x40}}, 0x0)

1m52.49810817s ago: executing program 4 (id=46):
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x1c, &(0x7f0000000040)={<r1=>0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0x7)
r3 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000200)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=r1, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00', @ANYRESHEX=r2, @ANYRES32=r0, @ANYRES8=r1, @ANYRES64], 0x0, 0x2c5, &(0x7f0000000840)="$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")
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

1m52.292299869s ago: executing program 4 (id=49):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

1m51.778734428s ago: executing program 4 (id=53):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x3, 0x24, 0xffffffff, 0x1, 0x1f469e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x3, 0x5, 0x3c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x3, 0x0, 0x80, 0x0, 0x5, 0xfffffff7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x8, 0x0, 0x7, 0x9, 0x2f, 0xe, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x0, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x4, 0xb, 0x48c9368d, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x202, 0xffffffff, 0xf, 0x8, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x1, 0x1, 0x5, 0x1, 0x1, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x6, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0x4a2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x2, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x80000009, 0x1, 0x6c1b, 0x0, 0x3, 0x8, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)

1m51.174375975s ago: executing program 32 (id=53):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x3, 0x24, 0xffffffff, 0x1, 0x1f469e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x3, 0x5, 0x3c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x3, 0x0, 0x80, 0x0, 0x5, 0xfffffff7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x8, 0x0, 0x7, 0x9, 0x2f, 0xe, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x0, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x4, 0xb, 0x48c9368d, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x202, 0xffffffff, 0xf, 0x8, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x1, 0x1, 0x5, 0x1, 0x1, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x6, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0x4a2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x2, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x80000009, 0x1, 0x6c1b, 0x0, 0x3, 0x8, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)

1m29.123609601s ago: executing program 1 (id=198):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="00c3ff", 0xd}, {&(0x7f0000000000)='G', 0x1}], 0x2)

1m28.102113697s ago: executing program 1 (id=201):
r0 = socket(0x200000100000011, 0x803, 0x0)
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x22a, &(0x7f0000000800)="$eJzs3TFrU10YB/AnbUr7Fl7SQSiK4BX30FbcU6SCGFCUDDpZbIvS1IKFgg5tnfwS+hV0dBUcxNUvIIJUwaV16iBE6q1JG5LYWpMr5vdb8nDv+d/z3CTkkCEnt08vLc4tryxsb2/GyEhuKF+KUuzkYiwGYjBSGwEA/Et2arXYqqWy7gUA6A3rPwD0n07rf26jfuxa7zsDALrF938A6D83bt66Ml0uz1zfSkYilp6sVlYr6WN6fnoh7kU15mMiCvEtolaX1pcul2cmkl2fxqKytL6XX1+tDB7MT0YhxlrnJ5PUwfxQjO7l34/GfExFIU60zk+1yg9FxLl98xejEO/uxHJUYy52s4382mSSXLxabpp/+Mc4AAAAAAAAAAAAAAAAAAAAAADohmJS13L/nmKx3fk0v39/oP867g/UvL9PPk7ls713AAAAAAAAAAAAAAAAAAAA+FusPHy0OFutzj/oVNx/+/z1r8YcssjtzXvc6xy/+P/sx6ftxzw+yvPzZ4tXZ3o86XBEHDX1ZvPuyfMr4xfajYl813oe+J0X5Ushokv9vPhZlL5m+X5uKgabj4w/K82+XPvw+bDXyfBDCQAAAAAAAAAAAAAAAAAA+lTjR79ZdwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Wn8/3/Xio2s7xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL4HAAD//9lkp1I=")
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000007c0)={'batadv0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="90030ee7ff072d2200000e210806000108000604"], 0x120)

1m27.754993717s ago: executing program 1 (id=204):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000180)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280)=[0x80001], &(0x7f0000000200), 0x0})

1m27.568198566s ago: executing program 1 (id=205):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x1000440, &(0x7f0000000b40)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRESHEX, @ANYRESHEX=0x0], 0x1, 0x129b, &(0x7f0000000c40)="$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")
open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x4)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x1c, 0x14, "ef359f413bb90152f7d7d1ce5d29c37bbc78f297f069a8499dc2aac63a01000000000000d749652cd9c084a003ea000000000000b600000000000500", "036c47c67808200400000000000000335263bdbcef549ba097fce47ddfdd753abd955c00042a00fffffffffffeffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"})

1m27.010382464s ago: executing program 1 (id=209):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e20, 0x4, @mcast2={0xff, 0x5}, 0x3ff}, r2}}, 0x48)
close_range(r0, 0xffffffffffffffff, 0x0)

1m26.356236592s ago: executing program 1 (id=214):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10b142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xf4240}], 0x1, 0x800001, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

1m26.046833991s ago: executing program 33 (id=214):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10b142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xf4240}], 0x1, 0x800001, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

1m12.563998085s ago: executing program 0 (id=276):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
write$binfmt_script(r1, &(0x7f0000000080), 0xfdef)
read(r0, &(0x7f0000000040)=""/3, 0xfdef)

1m12.497311145s ago: executing program 0 (id=277):
syz_mount_image$xfs(&(0x7f00000003c0), &(0x7f0000000000)='./file0\x00', 0xc018, &(0x7f0000000040), 0x1, 0x9825, &(0x7f000001c900)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000e25acb00c143b9edcae2e5982d0533f6e4fc7961760000000000000000cd63"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x1001, 0x0)
removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@known='trusted.overlay.upper\x00')

1m11.474261292s ago: executing program 0 (id=282):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x42, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x4000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x4, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x50000000}]}}}}}}}, 0x0)

1m9.815385366s ago: executing program 0 (id=297):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
umount2(&(0x7f0000000100)='./file0/file0\x00', 0x4)

1m9.606067795s ago: executing program 0 (id=299):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r2=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

1m9.071719143s ago: executing program 0 (id=302):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x4}}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa062}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x88}}, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0xa98)

1m8.657821242s ago: executing program 34 (id=302):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x4}}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa062}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x88}}, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0xa98)

31.905636848s ago: executing program 7 (id=547):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r2}, 0x10)

29.462767979s ago: executing program 7 (id=559):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x76d, &(0x7f0000000f80)="$eJzs3c1rHOUfAPDvbF6b9vdLBEHrKSBooHRjamwVPFQ8iGChoGfbZbMNNZtsyW5KEwJaRPAiqHgQ9NKzL/Xm1Zer/hcepKVqWqx4kMhsZttts5ts2iRrm88Hpn2emdl857sz8zzP7gw7AexZo+k/uYiDEfFhEjGczU8ioq9e6o04vrbezZXlYjolsbr6+u9JfZ0bK8vFaHpNan9WeTwifngv4lBufdzq4tJMoVwuzWf18drsufHq4tLhs7OF6dJ0ae7oxOTkkWPPHTu6fYn++fPSgasfvfL018f/fvexyx/8mMTxOJAtbs5ju4zGaPae9KVv4R1e3u5gXZZ0ewO4J+mp2bN2lsfBGI6eegkAeJi9HRGrrQ22mQ8APPCSdv0/APCQanwPcGNludiYuvuNxO669lJEDK7l37i+ubakN7tmN1i/Djp0I7njykgSESPbEH80Ij7/9s0v0yl26DokQCvvXIyI0yOj69v/ZN09C1v1TAfrjN5V1/7B7vkuHf8832r8l7s1/okW45+BFufuvdj8/M9d2YYwbaXjvxeb7m272ZR/ZqQnq/2vPubrS86cLZfStu3/ETEWfQNpfWKDGGPX/7neblnz+O+Pj9/6Io2f/n97jdyV3oE7XzNVqBXuJ+dm1y5GPNHbKv/k1v5P2ox/T3YY49UX3v+s3bI0/zTfxrQ+/521einiqZb7//YdbcmG9yeO1w+H8cZB0cI3v3w61C5+8/5PpzR+47PAbkj3/9DG+Y8kzfdrVrce46dLw9+3W7Z5/q2P//7kjXq5P5t3oVCrzU9E9CevrZ9/5PZrs/q+yNZP8x97svX5v9Hxn34mPN1h/r1Xf/vq3vPfWWn+U1va/1svXL4509Mufmf7f7JeGsvmdNL+dbqB9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECnchFxIJJc/lY5l8vn157h/WgM5cqVau3QmcrC3FTUn5U9En25xk9dDjf9HupE9nv4jfqRu+rPRsQjEfHJwL56PV+slKe6nTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZPa3ef5/6teBbm8dALBjBru9AQDArtP/A8Deo/8HgL1H/w8Ae4/+HwD2Hv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+zkiRPptPrXynIxrU+dX1yYqZw/PFWqzuRnF4r5YmX+XH66Upkul/LFyuxmf69cqZybjLmFC+O1UrU2Xl1cOjVbWZirnTo7W5gunSr17UpWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA11cWlmUK5XJpXUFD4rxb6s9N1F4Nu1nLs2/nGCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAB8G8AAAD//62JJXw=")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0)
r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1, 0xc})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

28.894329548s ago: executing program 7 (id=565):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ppoll(&(0x7f0000000080)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0)

28.575620507s ago: executing program 7 (id=571):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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")
open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fallocate(r0, 0x100000011, 0x0, 0x28000000)

28.045519185s ago: executing program 7 (id=576):
r0 = io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0x1246, 0x80, 0x1, 0xe0})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000540)='0', 0x1}], 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

27.394610102s ago: executing program 7 (id=578):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014})
close_range(r0, r1, 0x0)

26.963248031s ago: executing program 35 (id=578):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014})
close_range(r0, r1, 0x0)

3.300491011s ago: executing program 8 (id=736):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000980)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000340)='module_request\x00', r0}, 0x10)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000140))

3.121359731s ago: executing program 8 (id=740):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000000640)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="2c6e6f6465636f6d706f000800006172726965722c6e6f64e5636f6d706f6b3d303030303030303030303030e2333030304b30303030352c7569643d00000000420000b594308195cf155e4c7346c3a6bd0a4340b9605f451266dffb78daeee2c1d9d6bc03bc633f9e0d4c92561bc81ba764ea4c720d3ec350df8b557ed78ef8e601747af2e6446294a384754d4a5cdd6f8e28d45857cb86777b5cc2107a3427ef62d59f41e5ed3cc7a0fac311e8fbc847b0cd2c78e706ac4e26d0147a1fcf1a1deb30c6814ad82e7723293a1554a1aaec656616ec3ab4c8ee6cdcbc7ded35e0b79b42d932b0e8f0600dc00767117ef6", @ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRESDEC], 0x1, 0x6f0, &(0x7f0000001540)="$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")
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012)

3.03071771s ago: executing program 6 (id=741):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [], {0x10, 0x6}}, 0x24, 0x2)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000414, 0x0, 0x1, 0x0, &(0x7f0000000480))
open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0)

2.71215233s ago: executing program 8 (id=744):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, <r2=>0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={r1, r2, r3, 0x0, 0xffffffff, 0x4000000})

2.656606409s ago: executing program 3 (id=745):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x7, 0x0, [{0x1, 0xa1dd, 0x8, 0x3}, {0x1c0000017, 0xa, 0x7, 0x80000001, 0x7}, {0x4, 0x7, 0x8, 0x400, 0x2}, {0xc0000000, 0x9, 0x0, 0x4, 0x8}, {0x2, 0x9, 0x8000, 0x381b, 0x4}, {0x1, 0xd00d, 0x6, 0x9, 0x9bf}, {0x6, 0x7b4, 0xe, 0xa668, 0xe}]})

2.480112489s ago: executing program 8 (id=748):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0x0]}]]}, 0x38}}, 0x0)

2.257075218s ago: executing program 8 (id=750):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b000100000000090400000101"], 0x0)

2.177145157s ago: executing program 6 (id=751):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2b2})

1.959087287s ago: executing program 6 (id=753):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0)

1.884062327s ago: executing program 2 (id=754):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000000640)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="2c6e6f6465636f6d706f000800006172726965722c6e6f64e5636f6d706f6b3d303030303030303030303030e2333030304b30303030352c7569643d00000000420000b594308195cf155e4c7346c3a6bd0a4340b9605f451266dffb78daeee2c1d9d6bc03bc633f9e0d4c92561bc81ba764ea4c720d3ec350df8b557ed78ef8e601747af2e6446294a384754d4a5cdd6f8e28d45857cb86777b5cc2107a3427ef62d59f41e5ed3cc7a0fac311e8fbc847b0cd2c78e706ac4e26d0147a1fcf1a1deb30c6814ad82e7723293a1554a1aaec656616ec3ab4c8ee6cdcbc7ded35e0b79b42d932b0e8f0600dc00767117ef6", @ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRESDEC], 0x1, 0x6f0, &(0x7f0000001540)="$eJzs3UtoHOcdAPD/rHZXuyo4cuJHWgIRMaSlorZkIbfqpW4pRYdQQnroebHlWHgtB0kpsimN3Me9h5x6Sg+6hR5Keje054ZAyVXHQCGXnHRTmdnZl/ZtWY+kv5+YmW/me85/dmb2gZgA/m+tzkfxWSSxOv/WTrq+v7dUn9pbms6z6xFRjohCRLGxiGQjstzb+RTfTjfm5ZNB/Xy4vvLO51/tf9FYK+ZTVj4ZVq+Pcu+m3XyKuYiYype9SgNa/ORo913t3RnY3rjae5gG7FozcPGXY7UKx3bYY7eV9/F/svmw6pOct8A5lTTumz3n82zETERUIhp3/d24Ffkbga+13bMeAAAAAEyqOnmVlw7iIHbiwkkMBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL6pOp7/n+TP98/Sc5E0n/9fzko0lM90sAONfhDiZ9ON5bOTHwwAAAAAAAAAnLjXD+IgduJCc/0wyX7zfyP/3T/1rXg/tmItNuN67EQttmM7NmMxImY7Girv1La3NxezmhGXhtS8GZ/2qXlz8Bhvv+B9BgAAAAAAAIBzrjIi/0Gpd9vvY7X9+z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJwHScRUY5FNl5rp2SgUI6LSLLcb8WlElM92tBNJ+m18dvrjAAAAgGOpdK8mlTHqvPRBHMROXGiuHybZZ/4r2eflSrwfG7Ed67Ed9ViLu/ln6PRTf2F/b6m+v7f0MJ162/3plxMNPWsxGt899O/51axENe7FerbletyJJA4zhbyVV/f3ltLlw/7jepqOKflJbshopjrSd9PZ1U+y9J+7v0UoTrSLz6kwMGc2yy21IrKQjy2tcbEZgf6RGHl0ikN7WoxC65ufS8N76h/zp0M7fzpzpFTfb27OxNFI3IxC6whdGR6JiO/+4+Nf369vPLh/b2v+/OxSXx+MLHE0Eksdkbj6DYrEaAtZJC631lfjF/GrmI8vp9+OzViP30QttmNtrplfy1/P6Xx2eKQ+m+lce3vcETWuX/3GNBddY4q5+HmWqsUb2TG9EOuRxKOIWItb2d/NWGxdDdpH+PIYZ31hjCtth2vfyxatMEV1cNm/jdfki5Je6y52xLXzmjub5XVuaUfp5b5Rat7rxr8fdSh+J0+kLfxh6P3htB2NxGJHJF4Z9HpphPSvh+l8q77xYPN+7b0x+3szX6bn0Z/O1V0iPcIvRyXfuYvZPMnOqYUs75XWHbY7XuX8F5eGQk/e5Va9xpn6y3gUd7vO1B/GcizHSlb6Sla61HPHSvOutlrqvoaneek7rWLrh53O91uPot54PwTA+Tbz/Zly9b/Vf1c/qv6xer/6VuVn0z+afq0cpX+VflxcmHqz8Fry9/goftf+/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy/rcdPHtTq9bXN/olC/6xkeK1a/bD5ILEhZboSSf6onDEKJ1uPnxyObHB4Yjof3gS1CuNFbOJE82mNHVlTEdGn8NyL67QnkewePV6V0XvaDMkYXSQ9AU8rP/eYmz23t5RG1jos9Y3qCSbmjlG92L2l+YLtKDPRqzdLVPsdrwEvtvqIC8fUca88wFm7sf3wvRtbj5/8YP1h7d21d9c2SsvLKwsry7eWbtxbr68tNOYdFU7l4bfAaeh8O9FSjojXR9cd8qBWAAAAAAAAAAAA4ASdxv9CnPU+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9vq/NRfBZJLC5cX0jX9/eW6unUTLdLFiOiEBHJbyOSf0bcjsYUsx3NJYP6+XB95Z3Pv9r/ot1WsVm+ELE7sN54dvMp5iJiKl++qPbujG6v3E5O98lOWpFJA3atGbjK8QYJx/a/AAAA//9Vrea8")
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012)

1.782141606s ago: executing program 3 (id=755):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001000000c000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000001c0)={0x13, 0x10, 0x10f, {0x0, r2, 0x1000000}}, 0x18)

1.619950016s ago: executing program 6 (id=756):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff]}}]}]}]}, 0x38}}, 0x0)

1.619685646s ago: executing program 3 (id=757):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f0000001680)=ANY=[@ANYBLOB="756d61736b3d300023f7897c95c41697b74235f8e4c0f7643030303030303030303096c134362c7569643d60d3000000", @ANYBLOB="2c6d6f64653d30303030303030303030303030303030303030303030372c6164696e6963622c756e686964652c73686f727461642c66696c657365743d30303030303030303030303030303030193030322c6e6f7672732c646d6f64653d30313737373737373737373737373737373737373737352c6e6f6164696e6963622c00", @ANYRESDEC=0x0, @ANYRESDEC, @ANYBLOB="7ec9c63f090f889c5c16bf38e09f0cae0275fa24cf3ea75cd152aca4706abef8d5"], 0x4, 0xc24, &(0x7f0000001940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
r1 = gettid()
mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0x0)
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

1.605968116s ago: executing program 2 (id=758):
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x1014800, &(0x7f0000001f80)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYBLOB="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", @ANYBLOB="a240939593dcf5d96f4ae9a6a307fed9139e08b16fa6096b876c40f3645fe4793498f349e30de690cc6f68a0bd843e5fc9cd54566eb36c05efba9e7e11805a000853610e8dc7c7a9ae20", @ANYBLOB="23ea354d55dcb3fbf7f036f3f27910e04a0728241007e3d26c04e2d88ef1cfa9c3f93d9fea5a199f114d4ea413207106f15c2543536adc4b605802008db0bd0e8c87d8edad0f16f3152e57217af1d25fb6d4e968cf86a2aa62f79122", @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES16, @ANYRES16=0x0], 0x3, 0xda6, &(0x7f0000003c80)="$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")
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x20)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

1.378872795s ago: executing program 5 (id=759):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x5, 0x4, 0x800, 'pptp\x00', 'syz0\x00', {0x8}}}}, {{@ipv6={@loopback, @mcast2, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0x0, 0xff], 'veth0_macvtap\x00', 'dummy0\x00', {0xff}, {0xff}, 0x2e, 0x9, 0x1, 0x25}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
io_uring_setup(0x164b, &(0x7f0000000340)={0x0, 0x10003796, 0x4, 0xfffffffe, 0x231})
r0 = add_key$user(&(0x7f0000000280), &(0x7f0000000000), &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}})

1.378584505s ago: executing program 6 (id=760):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x1, 0x5f52, &(0x7f000000ef80)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)
open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0)

1.144960624s ago: executing program 5 (id=761):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x28, r2, 0x801, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x28}}, 0x4008090)

1.092534764s ago: executing program 3 (id=762):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000100)="520003000100b8", 0x7)

866.957743ms ago: executing program 5 (id=763):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)

795.424163ms ago: executing program 3 (id=764):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e0ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r0}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)

768.968523ms ago: executing program 2 (id=765):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f00000001c0)="0b040700e0ff030002004788aa96a13bb10e000000004305400f088d73f696ee60c5cb5ce943a7e2f3fdb4ead4bd41ff", 0x30, 0x10, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x11, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

675.039953ms ago: executing program 8 (id=766):
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=")
r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0)
write$cgroup_int(r0, &(0x7f0000000080)=0xd, 0x12)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x46042, 0x288)
write$FUSE_OPEN(r1, &(0x7f000001f540)={0xfffffffffffffffe, 0x0, 0x0, {0x0, 0x8}}, 0x20)

615.529822ms ago: executing program 5 (id=767):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x7, 0x0, [{0x1, 0xa1dd, 0x8, 0x3}, {0x1c0000017, 0xa, 0x7, 0x80000001, 0x7}, {0x4, 0x7, 0x8, 0x400, 0x2}, {0xc0000000, 0x9, 0x0, 0x4, 0x8}, {0x2, 0x9, 0x8000, 0x381b, 0x4}, {0x1, 0xd00d, 0x6, 0x9, 0x9bf}, {0x6, 0x7b4, 0xe, 0xa668, 0xe}]})

551.751772ms ago: executing program 3 (id=768):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000001380)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}]}, 0xde, 0x46d, &(0x7f0000000f00)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000000000001000000"])

391.574862ms ago: executing program 2 (id=769):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)

272.187701ms ago: executing program 5 (id=770):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffc}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0xa4}, 0x1, 0x7a00, 0x0, 0x4010041}, 0x0)

158.709971ms ago: executing program 2 (id=771):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000000)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xab)

139.779611ms ago: executing program 5 (id=772):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="93378efcd17301726272853a9fa88608996042ab60ae09f9a90efedde424f36d", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f00000009c0)=[{{&(0x7f0000000780), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000800)=""/74, 0x4a}], 0x1}}], 0x1, 0x40002023, 0x0)

89.43003ms ago: executing program 2 (id=773):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x6, 0x36f, &(0x7f0000000440)="$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")
r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0x5e02)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e)

0s ago: executing program 6 (id=774):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000c0010094000040"])

kernel console output (not intermixed with test programs):

T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.021528][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.035466][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.046545][ T5343] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  118.054832][   T11] device bridge_slave_1 left promiscuous mode
[  118.065758][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.090111][ T4933] syz-executor: attempt to access beyond end of device
[  118.090111][ T4933] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  118.107314][   T11] device bridge_slave_0 left promiscuous mode
[  118.113792][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.143954][ T5565] loop6: detected capacity change from 0 to 128
[  118.162573][   T11] device veth1_macvtap left promiscuous mode
[  118.182776][ T5565] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  118.190811][   T11] device veth0_macvtap left promiscuous mode
[  118.195679][ T4258] Bluetooth: hci1: command 0x0409 tx timeout
[  118.201136][   T41] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  118.224032][ T5565] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  118.237311][   T11] device veth1_vlan left promiscuous mode
[  118.253301][   T11] device veth0_vlan left promiscuous mode
[  118.265561][ T5343] usb 6-1: Using ep0 maxpacket: 32
[  118.272763][ T5343] usb 6-1: config 0 has an invalid interface number: 166 but max is 0
[  118.280809][   T41] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  118.312645][ T5343] usb 6-1: config 0 has no interface number 0
[  118.324474][ T5343] usb 6-1: config 0 interface 166 has no altsetting 0
[  118.387664][ T5343] usb 6-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=3c.91
[  118.420348][ T5343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.442647][ T5343] usb 6-1: Product: syz
[  118.475217][ T5343] usb 6-1: Manufacturer: syz
[  118.500526][ T5343] usb 6-1: SerialNumber: syz
[  118.518888][ T5343] usb 6-1: config 0 descriptor??
[  118.543230][ T5343] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X3C91): Eagle I
[  118.710493][ T5567] loop6: detected capacity change from 0 to 1024
[  118.737806][ T5343] usb 6-1: reset high-speed USB device number 8 using dummy_hcd
[  118.781409][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  118.782192][ T4292] usb 4-1: USB disconnect, device number 7
[  118.819118][ T4292] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  118.852149][ T4292] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  118.880107][ T4292] quatech2 4-1:0.51: device disconnected
[  118.905425][ T5343] usb 6-1: device descriptor read/64, error -32
[  119.205368][ T5343] usb 6-1: reset high-speed USB device number 8 using dummy_hcd
[  119.334898][   T41] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  119.366146][ T5343] usb 6-1: device descriptor read/64, error -32
[  119.516439][   T11] team0 (unregistering): Port device team_slave_1 removed
[  119.537216][   T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.549987][   T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.560863][   T41] usb 3-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00
[  119.570696][   T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.594920][   T41] usb 3-1: config 0 descriptor??
[  119.602417][   T11] team0 (unregistering): Port device team_slave_0 removed
[  119.648079][ T5343] usb 6-1: reset high-speed USB device number 8 using dummy_hcd
[  119.669289][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.700385][ T5343] usb 6-1: device descriptor read/8, error -32
[  119.729989][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.771784][  T127] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  119.975628][ T5343] usb 6-1: reset high-speed USB device number 8 using dummy_hcd
[  119.976585][  T127] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  120.001085][  T127] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  120.015901][ T5343] usb 6-1: device descriptor read/8, error -32
[  120.029069][   T41] wacom 0003:056A:00BC.000D: unknown main item tag 0x0
[  120.043652][  T127] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  120.058663][   T41] wacom 0003:056A:00BC.000D: Unknown device_type for 'HID 056a:00bc'. Assuming pen.
[  120.081662][  T127] usb 4-1: config 0 interface 0 has no altsetting 0
[  120.090340][   T41] wacom 0003:056A:00BC.000D: hidraw0: USB HID v0.00 Device [HID 056a:00bc] on usb-dummy_hcd.2-1/input0
[  120.105058][  T127] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  120.115888][   T41] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00BC.000D/input/input10
[  120.130672][  T127] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  120.145595][  T127] usb 4-1: config 0 interface 0 has no altsetting 0
[  120.157381][  T127] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  120.166746][  T127] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  120.178218][  T127] usb 4-1: config 0 interface 0 has no altsetting 0
[  120.183720][ T5343] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware
[  120.186402][  T127] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  120.204184][  T127] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  120.215937][ T5343] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[  120.232875][  T127] usb 4-1: config 0 interface 0 has no altsetting 0
[  120.251113][ T4292] usb 6-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2
[  120.259804][  T127] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  120.265421][ T4292] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw
[  120.276940][ T4264] Bluetooth: hci1: command 0x041b tx timeout
[  120.291109][   T41] usb 3-1: USB disconnect, device number 5
[  120.295731][ T5343] usb 6-1: USB disconnect, device number 8
[  120.353194][  T127] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  120.392454][  T127] usb 4-1: config 0 interface 0 has no altsetting 0
[  120.422456][  T127] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  120.450785][  T127] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  120.469555][  T127] usb 4-1: config 0 interface 0 has no altsetting 0
[  120.484136][  T127] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  120.502047][  T127] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  120.522823][  T127] usb 4-1: config 0 interface 0 has no altsetting 0
[  120.541099][  T127] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  120.559866][  T127] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  120.608918][  T127] usb 4-1: config 0 interface 0 has no altsetting 0
[  120.624932][  T127] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  120.641725][  T127] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  120.665144][  T127] usb 4-1: Product: syz
[  120.683018][  T127] usb 4-1: Manufacturer: syz
[  120.697752][  T127] usb 4-1: SerialNumber: syz
[  120.709112][ T5590] loop6: detected capacity change from 0 to 128
[  120.717043][  T127] usb 4-1: config 0 descriptor??
[  120.756262][  T127] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  120.774203][ T5590] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  120.781183][ T5594] sctp: [Deprecated]: syz.5.328 (pid 5594) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.781183][ T5594] Use struct sctp_sack_info instead
[  120.794020][ T5590] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.916746][ T5590] EXT4-fs (loop6): shut down requested (1)
[  121.051900][ T5149] EXT4-fs (loop6): unmounting filesystem.
[  121.147302][    C1] usb 4-1: yurex_control_callback - control failed: -71
[  121.154254][ T4249] usb 4-1: USB disconnect, device number 8
[  121.165871][ T4249] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  121.258293][   T11] bond0 (unregistering): Released all slaves
[  121.290321][ T5602] loop6: detected capacity change from 0 to 4096
[  121.298659][ T5602] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  121.359622][ T5602] ntfs3: loop6: Inode r=19 is not in use!
[  121.365815][ T5602] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  121.430074][ T5602] ntfs3: loop6: ino=1d, "file1" attr_set_size
[  121.450477][ T5536] team0: Port device team_slave_0 added
[  121.476225][ T5536] team0: Port device team_slave_1 added
[  121.541186][ T5536] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.605613][ T5536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.660813][ T5608] loop2: detected capacity change from 0 to 1024
[  121.662862][ T5536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.701583][ T5608] EXT4-fs: Ignoring removed nobh option
[  121.736503][ T5536] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.776972][ T5536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.804797][ T5613] loop5: detected capacity change from 0 to 1024
[  121.814185][ T5608] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  121.878131][ T5536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.050741][ T5536] device hsr_slave_0 entered promiscuous mode
[  122.059122][ T4316] hfsplus: b-tree write err: -5, ino 4
[  122.080673][ T5536] device hsr_slave_1 entered promiscuous mode
[  122.122780][ T5536] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  122.138081][ T5536] Cannot create hsr debugfs directory
[  122.210195][ T4933] EXT4-fs (loop2): unmounting filesystem.
[  122.306894][ T5626] loop3: detected capacity change from 0 to 512
[  122.355432][ T4258] Bluetooth: hci1: command 0x040f tx timeout
[  122.396559][ T5626] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  122.453066][ T5626] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  122.524895][ T5636] loop5: detected capacity change from 0 to 736
[  122.534980][ T5626] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  122.574454][ T5626] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  122.614399][ T5626] System zones: 0-2, 18-18, 34-34
[  122.653098][ T5626] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  122.692186][ T5636] ISOFS: unable to read i-node block
[  122.728967][ T5536] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  122.736392][ T5626] EXT4-fs (loop3): 1 truncate cleaned up
[  122.742243][ T5626] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  122.757152][ T5536] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  122.802778][ T5536] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  122.826931][ T5536] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  123.053858][ T4245] EXT4-fs (loop3): unmounting filesystem.
[  123.120144][ T5536] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.178967][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  123.210339][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  123.251241][ T5536] 8021q: adding VLAN 0 to HW filter on device team0
[  123.274834][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  123.289306][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  123.306296][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.313498][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.357371][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  123.362131][ T5659] loop5: detected capacity change from 0 to 4096
[  123.366851][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  123.380835][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  123.399605][ T5659] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  123.436453][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.443592][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.476052][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  123.493830][ T5659] ntfs: volume version 3.1.
[  123.505383][  T127] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  123.528588][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  123.546437][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  123.571334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  123.580800][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  123.591677][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  123.611086][ T5536] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  123.623728][ T5536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  123.636998][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  123.646002][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  123.654913][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  123.672509][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  123.691430][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  123.699490][  T127] usb 4-1: Using ep0 maxpacket: 32
[  123.713213][  T127] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  123.725388][ T4293] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  123.738702][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  123.746064][  T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.767668][  T127] usb 4-1: config 0 descriptor??
[  123.780200][  T127] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  123.841058][ T5668] tipc: Started in network mode
[  123.855480][ T5668] tipc: Node identity 7, cluster identity 4711
[  123.862636][ T5668] tipc: Node number set to 7
[  123.919347][ T4293] usb 7-1: Using ep0 maxpacket: 16
[  123.930850][ T4293] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  123.966210][ T4293] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  123.990353][ T4293] usb 7-1: config 0 interface 0 has no altsetting 0
[  124.000039][ T4293] usb 7-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00
[  124.013964][ T4293] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.050775][ T4293] usb 7-1: config 0 descriptor??
[  124.071527][ T4293] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  124.217223][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  124.235940][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  124.276391][ T5536] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.317272][ T5279] usb 7-1: USB disconnect, device number 2
[  124.386623][  T127] gspca_vc032x: reg_w err -71
[  124.391399][  T127] gspca_vc032x: I2c Bus Busy Wait 00
[  124.422579][  T127] gspca_vc032x: I2c Bus Busy Wait 00
[  124.430080][  T127] gspca_vc032x: I2c Bus Busy Wait 00
[  124.435628][ T4258] Bluetooth: hci1: command 0x0419 tx timeout
[  124.442797][  T127] gspca_vc032x: I2c Bus Busy Wait 00
[  124.448962][  T127] gspca_vc032x: I2c Bus Busy Wait 00
[  124.454589][  T127] gspca_vc032x: I2c Bus Busy Wait 00
[  124.464659][  T127] gspca_vc032x: I2c Bus Busy Wait 00
[  124.471157][  T127] gspca_vc032x: I2c Bus Busy Wait 00
[  124.476925][  T127] gspca_vc032x: I2c Bus Busy Wait 00
[  124.482362][  T127] gspca_vc032x: I2c Bus Busy Wait 00
[  124.488222][  T127] gspca_vc032x: I2c Bus Busy Wait 00
[  124.493652][  T127] gspca_vc032x: I2c Bus Busy Wait 00
[  124.499429][  T127] gspca_vc032x: I2c Bus Busy Wait 00
[  124.505216][  T127] gspca_vc032x: I2c Bus Busy Wait 00
[  124.511086][  T127] gspca_vc032x: I2c Bus Busy Wait 00
[  124.518699][  T127] gspca_vc032x: I2c Bus Busy Wait 00
[  124.524216][  T127] gspca_vc032x: I2c Bus Busy Wait 00
[  124.529994][  T127] gspca_vc032x: I2c Bus Busy Wait 00
[  124.536390][  T127] gspca_vc032x: Unknown sensor...
[  124.541560][  T127] vc032x: probe of 4-1:0.0 failed with error -22
[  124.564085][  T127] usb 4-1: USB disconnect, device number 9
[  124.698351][ T5686] loop2: detected capacity change from 0 to 512
[  124.768291][ T5686] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  124.799056][ T5686] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.858202][ T5686] UBIFS error (pid: 5686): cannot open "./file0", error -22
[  124.861248][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  124.881518][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  124.927337][ T5536] device veth0_vlan entered promiscuous mode
[  124.959261][ T4933] EXT4-fs (loop2): unmounting filesystem.
[  124.983611][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  125.017382][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  125.038285][ T5692] loop6: detected capacity change from 0 to 512
[  125.045287][ T5692] EXT4-fs: Ignoring removed mblk_io_submit option
[  125.084635][ T5536] device veth1_vlan entered promiscuous mode
[  125.112669][ T5692] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  125.125901][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  125.140735][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  125.162953][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  125.183765][ T5692] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz.6.359: corrupted in-inode xattr
[  125.184816][ T5679] loop5: detected capacity change from 0 to 32768
[  125.225121][ T5692] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.359: couldn't read orphan inode 15 (err -117)
[  125.276426][   T26] audit: type=1800 audit(1737568460.745:8): pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.356" name="file1" dev="loop5" ino=4 res=0 errno=0
[  125.350133][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  125.358076][ T5692] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  125.389377][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  125.427393][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  125.447146][ T5536] device veth0_macvtap entered promiscuous mode
[  125.489295][ T5536] device veth1_macvtap entered promiscuous mode
[  125.502483][ T5701] loop2: detected capacity change from 0 to 1024
[  125.525730][ T5149] EXT4-fs (loop6): unmounting filesystem.
[  125.553433][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.580488][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.603971][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.647585][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.667024][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.690289][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.710535][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.726483][ T5704] input: syz0 as /devices/virtual/input/input13
[  125.738840][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.758547][ T5536] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.770235][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.784251][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.803153][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.815192][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.832862][ T5025] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  125.857983][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.870806][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.891417][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.905016][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.950015][ T5536] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.971074][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  125.996380][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  126.026626][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  126.046442][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  126.048391][ T5025] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  126.067362][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  126.106949][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  126.126185][ T5025] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  126.139436][ T5536] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.149074][ T5536] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.162571][ T5025] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33738, setting to 1024
[  126.177398][ T5536] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.186684][ T5536] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.196300][ T5025] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024
[  126.208742][ T5025] usb 3-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9
[  126.225359][ T5025] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.272248][ T5025] usb 3-1: config 0 descriptor??
[  126.291588][ T5701] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  126.328865][ T5025] usb 3-1: MIDIStreaming interface descriptor not found
[  126.339231][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.362547][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.424628][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  126.481233][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.501430][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.550278][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  126.652492][ T5282] usb 3-1: USB disconnect, device number 6
[  126.824575][ T5722] netlink: 16 bytes leftover after parsing attributes in process `syz.3.369'.
[  126.963708][ T5710] loop5: detected capacity change from 0 to 32768
[  127.661289][ T5742] netlink: 172 bytes leftover after parsing attributes in process `syz.5.378'.
[  127.890952][ T5730] loop3: detected capacity change from 0 to 32768
[  127.941914][ T5730] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.371 (5730)
[  128.009401][ T5730] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  128.045012][ T5730] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  128.046831][ T5750] loop7: detected capacity change from 0 to 512
[  128.072538][   T26] audit: type=1326 audit(1737568463.535:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5751 comm="syz.2.382" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f298d185d29 code=0x0
[  128.113769][ T5730] BTRFS info (device loop3): using free space tree
[  128.126730][ T5750] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  128.180150][ T4249] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  128.199413][ T5750] EXT4-fs error (device loop7): ext4_orphan_get:1426: comm syz.7.383: bad orphan inode 131083
[  128.239347][ T5750] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  128.301630][ T5730] BTRFS info (device loop3): enabling ssd optimizations
[  128.409706][ T4249] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.447828][ T4249] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.471679][ T4249] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  128.493165][ T4249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.522879][ T4249] usb 6-1: config 0 descriptor??
[  128.538074][ T5536] EXT4-fs (loop7): unmounting filesystem.
[  128.642709][ T4245] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  128.951511][ T4249] hid (null): bogus close delimiter
[  129.152050][ T4249] usb 6-1: string descriptor 0 read error: -22
[  129.440662][ T5792] input: syz1 as /devices/virtual/input/input14
[  129.532975][ T4239] udevd[4239]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  129.554061][ T4249] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #100: -71
[  129.575575][ T4249] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71
[  129.583727][ T4249] uclogic 0003:256C:006D.000E: failed probing pen v1 parameters: -71
[  129.613008][ T4249] uclogic 0003:256C:006D.000E: failed probing parameters: -71
[  129.634901][ T4249] uclogic: probe of 0003:256C:006D.000E failed with error -71
[  129.665155][ T4249] usb 6-1: USB disconnect, device number 9
[  129.831611][ T5803] loop2: detected capacity change from 0 to 512
[  129.889942][ T5806] loop3: detected capacity change from 0 to 256
[  129.899092][ T5803] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  129.926155][ T5803] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  130.063052][ T4933] EXT4-fs (loop2): unmounting filesystem.
[  130.196856][ T5795] loop6: detected capacity change from 0 to 32768
[  130.217350][ T5795] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.392 (5795)
[  130.273880][ T5795] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  130.302740][ T5795] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  130.320792][ T5795] BTRFS info (device loop6): setting nodatacow, compression disabled
[  130.346673][ T5795] BTRFS info (device loop6): enabling disk space caching
[  130.353766][ T5795] BTRFS info (device loop6): setting datacow
[  130.406433][ T5795] BTRFS info (device loop6): doing ref verification
[  130.413206][ T5795] BTRFS info (device loop6): force clearing of disk cache
[  130.445035][ T5795] BTRFS info (device loop6): turning off barriers
[  130.470568][ T5795] BTRFS info (device loop6): enabling ssd optimizations
[  130.479170][ T5795] BTRFS info (device loop6): using spread ssd allocation scheme
[  130.511884][ T5795] BTRFS info (device loop6): not using ssd optimizations
[  130.520006][ T5795] BTRFS info (device loop6): not using spread ssd allocation scheme
[  130.552204][ T5795] BTRFS info (device loop6): disk space caching is enabled
[  130.884712][ T5845] loop7: detected capacity change from 0 to 256
[  130.885140][ T5795] BTRFS info (device loop6): rebuilding free space tree
[  130.923680][ T5845] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d)
[  130.965199][ T5845] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  130.968299][ T5795] BTRFS info (device loop6): disabling free space tree
[  131.023906][ T5795] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  131.042153][ T5795] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  131.042822][ T5845] exFAT-fs (loop7): error, invalid access to FAT free cluster (entry 0x00000006)
[  131.160052][ T5845] exFAT-fs (loop7): Filesystem has been set read-only
[  131.291358][   T26] audit: type=1800 audit(1737568466.755:10): pid=5795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.392" name="bus" dev="loop6" ino=263 res=0 errno=0
[  131.333687][ T5855] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  131.373784][ T5855] overlayfs: conflicting lowerdir path
[  131.377648][ T5857] mmap: syz.2.409 (5857) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  131.516369][ T5149] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  131.777005][ T5867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.413'.
[  131.830087][ T5867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  131.838157][ T5867] IPv6: NLM_F_CREATE should be set when creating new route
[  131.850661][ T5867] IPv6: NLM_F_CREATE should be set when creating new route
[  132.448738][ T5034] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  132.610486][ T5875] loop5: detected capacity change from 0 to 32768
[  132.638996][ T5034] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  132.660314][ T5034] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  132.684474][ T5034] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  132.712007][ T5034] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.729381][ T5034] usb 7-1: Product: syz
[  132.739776][ T5034] usb 7-1: Manufacturer: syz
[  132.770446][ T5034] usb 7-1: SerialNumber: syz
[  132.837197][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  132.843714][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  133.005545][ T5034] usb 7-1: 0:2 : does not exist
[  133.027381][ T5034] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  133.090782][ T5034] usb 7-1: USB disconnect, device number 3
[  133.182889][ T5891] loop2: detected capacity change from 0 to 32768
[  133.257490][   T26] audit: type=1800 audit(1737568468.725:11): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.423" name="bus" dev="loop2" ino=7 res=0 errno=0
[  133.308102][   T26] audit: type=1800 audit(1737568468.745:12): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.423" name="bus" dev="loop2" ino=7 res=0 errno=0
[  133.347153][ T4239] udevd[4239]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  133.369941][ T5903] loop3: detected capacity change from 0 to 1024
[  133.384872][ T5906] netlink: 24 bytes leftover after parsing attributes in process `syz.5.430'.
[  133.474066][ T5903] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  133.531106][ T5903] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.531172][ T5909] netlink: 24 bytes leftover after parsing attributes in process `syz.5.430'.
[  133.543630][ T5909] nbd: device at index 64 is going down
[  133.765600][ T5903] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.429: bg 0: block 393: padding at end of block bitmap is not set
[  133.885431][ T4316] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28
[  133.910586][ T4316] EXT4-fs (loop3): This should not happen!! Data will be lost
[  133.910586][ T4316] 
[  133.932873][ T4316] EXT4-fs (loop3): Total free blocks count 0
[  133.952163][ T4316] EXT4-fs (loop3): Free/Dirty block details
[  133.958741][ T4316] EXT4-fs (loop3): free_blocks=0
[  133.964024][ T4316] EXT4-fs (loop3): dirty_blocks=16
[  133.969760][ T4316] EXT4-fs (loop3): Block reservation details
[  133.977293][ T4316] EXT4-fs (loop3): i_reserved_data_blocks=1
[  133.988136][ T4245] EXT4-fs (loop3): unmounting filesystem.
[  134.205432][ T4249] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  134.381218][ T5932] loop2: detected capacity change from 0 to 64
[  134.395617][ T4249] usb 6-1: Using ep0 maxpacket: 8
[  134.403516][ T4249] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  134.432116][ T4249] usb 6-1: config 0 has no interface number 0
[  134.460485][ T4249] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  134.491915][ T4249] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  134.530439][ T4249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.558567][ T4249] usb 6-1: config 0 descriptor??
[  134.574268][ T5936] block nbd7: shutting down sockets
[  134.608132][ T4249] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  134.621618][ T5938] loop2: detected capacity change from 0 to 128
[  135.484223][ T5941] loop7: detected capacity change from 0 to 32768
[  135.493324][ T5941] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.442 (5941)
[  135.521075][ T5941] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  135.531927][ T5941] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  135.541627][ T5941] BTRFS info (device loop7): enabling auto defrag
[  135.557128][ T5941] BTRFS info (device loop7): max_inline at 0
[  135.572446][ T5941] BTRFS info (device loop7): enabling ssd optimizations
[  135.590763][ T5941] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8)
[  135.612442][ T5941] BTRFS info (device loop7): use lzo compression, level 0
[  135.632230][ T5941] BTRFS info (device loop7): using free space tree
[  135.695599][ T5033] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  135.737252][ T4249] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  135.801721][ T5350] usb 6-1: USB disconnect, device number 10
[  135.820575][ T5961] loop6: detected capacity change from 0 to 32768
[  135.865908][   T26] audit: type=1800 audit(1737568471.335:13): pid=5941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.442" name="bus" dev="loop7" ino=263 res=0 errno=0
[  135.887873][   T26] audit: type=1800 audit(1737568471.355:14): pid=5941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.442" name="bus" dev="loop7" ino=263 res=0 errno=0
[  135.902945][ T5961] JBD2: Ignoring recovery information on journal
[  135.909394][ T5033] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.926459][ T4249] usb 4-1: Using ep0 maxpacket: 16
[  135.953660][ T5033] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.968708][ T4249] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  135.973577][ T5961] (syz.6.450,5961,1):ocfs2_clear_journal_error:1092 ERROR: File system error -33024 recorded in journal 0.
[  135.979106][ T4249] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  135.997593][ T4249] usb 4-1: Product: syz
[  136.001782][ T4249] usb 4-1: Manufacturer: syz
[  136.006545][ T4249] usb 4-1: SerialNumber: syz
[  136.013391][ T4249] usb 4-1: config 0 descriptor??
[  136.018727][ T5033] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  136.058020][ T5961] (syz.6.450,5961,1):ocfs2_clear_journal_error:1094 ERROR: File system on device loop6 needs checking.
[  136.086347][ T5033] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  136.127348][ T5961] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  136.139121][ T5033] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.181868][ T5033] usb 3-1: config 0 descriptor??
[  136.242916][ T5536] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  136.608446][ T5149] ocfs2: Unmounting device (7,6) on (node local)
[  136.618165][ T5033] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[  136.660715][ T5033] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  136.762505][ T5986] loop5: detected capacity change from 0 to 8192
[  136.809796][ T5986] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  136.864203][ T5986] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  136.874805][ T5986] REISERFS (device loop5): using ordered data mode
[  136.881731][ T5986] reiserfs: using flush barriers
[  136.888597][ T5986] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  136.906198][ T5986] REISERFS (device loop5): checking transaction log (loop5)
[  136.917668][ T5033] usb 3-1: USB disconnect, device number 7
[  137.017362][ T5279] usb 4-1: USB disconnect, device number 10
[  137.191794][ T5986] REISERFS (device loop5): Using tea hash to sort names
[  137.205174][ T5986] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  137.893797][ T6013] loop3: detected capacity change from 0 to 512
[  138.083490][ T6013] EXT4-fs (loop3): 1 orphan inode deleted
[  138.103511][   T32] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  138.117404][ T6013] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  138.132709][   T32] EXT4-fs error (device loop3): ext4_release_dquot:6817: comm kworker/u4:2: Failed to release dquot type 1
[  138.151585][ T6013] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.676697][ T6029] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  138.727433][ T6010] loop7: detected capacity change from 0 to 32768
[  138.740617][ T6029] overlayfs: conflicting lowerdir path
[  138.845154][   T26] audit: type=1800 audit(1737568474.305:15): pid=6013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.463" name="file1" dev="loop3" ino=15 res=0 errno=0
[  138.939389][ T6010] XFS (loop7): Mounting V5 Filesystem
[  139.084941][ T4245] EXT4-fs (loop3): unmounting filesystem.
[  139.102110][ T4316] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  139.146577][ T6047] loop2: detected capacity change from 0 to 128
[  139.160775][ T4316] EXT4-fs error (device loop3): ext4_release_dquot:6817: comm kworker/u4:6: Failed to release dquot type 1
[  139.180610][ T6010] XFS (loop7): Ending clean mount
[  139.197922][ T6047] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  139.216799][ T6047] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.463039][ T4933] EXT4-fs (loop2): unmounting filesystem.
[  139.494833][ T5536] XFS (loop7): Unmounting Filesystem
[  139.568961][ T6056] loop2: detected capacity change from 0 to 128
[  139.711267][ T4378] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.873587][ T4378] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.010666][ T4378] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.173236][ T4378] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.192003][ T6067] loop2: detected capacity change from 0 to 2048
[  140.217752][ T6067] EXT4-fs: Ignoring removed mblk_io_submit option
[  140.302672][ T6067] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  140.415402][ T5033] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  140.418199][   T26] audit: type=1800 audit(1737568475.885:16): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.481" name="file1" dev="loop2" ino=15 res=0 errno=0
[  140.491940][ T4264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  140.497712][ T6067] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.481: bg 0: block 234: padding at end of block bitmap is not set
[  140.503205][ T4264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  140.524756][ T4264] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  140.547193][ T4264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  140.554646][ T6067] EXT4-fs (loop2): Remounting filesystem read-only
[  140.562136][ T4262] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  140.576083][ T4262] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  140.605489][ T5033] usb 4-1: Using ep0 maxpacket: 32
[  140.616922][ T5033] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.682568][ T5033] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.729501][ T5033] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  140.766847][ T5033] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  140.776147][ T5033] usb 4-1: Product: syz
[  140.780602][ T5033] usb 4-1: Manufacturer: syz
[  140.783697][ T4933] EXT4-fs (loop2): unmounting filesystem.
[  140.840140][ T5033] hub 4-1:4.0: USB hub found
[  140.878714][ T4378] tipc: Left network mode
[  140.974205][ T6085] loop6: detected capacity change from 0 to 4096
[  141.011140][ T6089] loop2: detected capacity change from 0 to 512
[  141.031115][ T5033] hub 4-1:4.0: 2 ports detected
[  141.131003][ T6089] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.489: inode #1: comm syz.2.489: iget: illegal inode #
[  141.237293][ T5033] hub 4-1:4.0: hub_hub_status failed (err = -71)
[  141.256552][ T5033] hub 4-1:4.0: config failed, can't get hub status (err -71)
[  141.291014][ T6087] loop7: detected capacity change from 0 to 32768
[  141.304503][ T6087] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.490 (6087)
[  141.356503][ T6089] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.489: error while reading EA inode 1 err=-117
[  141.367923][ T5033] usb 4-1: USB disconnect, device number 11
[  141.370388][ T6087] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  141.388403][ T6087] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  141.392025][ T6089] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.489: inode #1: comm syz.2.489: iget: illegal inode #
[  141.397537][ T6087] BTRFS info (device loop7): using free space tree
[  141.429122][ T6089] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.489: error while reading EA inode 1 err=-117
[  141.445541][   T26] audit: type=1800 audit(1737568476.915:17): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.488" name="file1" dev="loop6" ino=30 res=0 errno=0
[  141.526445][ T6089] EXT4-fs (loop2): 1 orphan inode deleted
[  141.552230][ T6089] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  141.673200][ T6087] BTRFS info (device loop7): enabling ssd optimizations
[  141.676269][ T4933] EXT4-fs (loop2): unmounting filesystem.
[  141.690660][ T6077] chnl_net:caif_netlink_parms(): no params data found
[  141.948071][ T5536] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  142.002183][ T6118] loop6: detected capacity change from 0 to 1024
[  142.107301][ T6118] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  142.135494][ T6118] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.217403][ T6118] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.493: bg 0: block 393: padding at end of block bitmap is not set
[  142.434114][   T51] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28
[  142.458393][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.471437][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.475854][   T51] EXT4-fs (loop6): This should not happen!! Data will be lost
[  142.475854][   T51] 
[  142.481648][ T6077] device bridge_slave_0 entered promiscuous mode
[  142.515493][   T51] EXT4-fs (loop6): Total free blocks count 0
[  142.521593][   T51] EXT4-fs (loop6): Free/Dirty block details
[  142.558217][   T51] EXT4-fs (loop6): free_blocks=0
[  142.567936][   T51] EXT4-fs (loop6): dirty_blocks=16
[  142.573653][ T6077] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.583368][   T51] EXT4-fs (loop6): Block reservation details
[  142.590291][   T51] EXT4-fs (loop6): i_reserved_data_blocks=1
[  142.590654][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.610443][ T5149] EXT4-fs (loop6): unmounting filesystem.
[  142.617810][ T6077] device bridge_slave_1 entered promiscuous mode
[  142.675661][ T4262] Bluetooth: hci4: command 0x0409 tx timeout
[  142.797199][   T26] audit: type=1326 audit(1737568478.265:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.6.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5390585d29 code=0x7ffc0000
[  142.864223][ T6077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.895134][   T26] audit: type=1326 audit(1737568478.295:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.6.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5390585d29 code=0x7ffc0000
[  142.933545][   T26] audit: type=1326 audit(1737568478.295:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.6.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5390585d29 code=0x7ffc0000
[  142.976878][ T6077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.987076][   T26] audit: type=1326 audit(1737568478.295:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.6.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5390585d29 code=0x7ffc0000
[  143.036006][   T26] audit: type=1326 audit(1737568478.315:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.6.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5390585d29 code=0x7ffc0000
[  143.124020][ T6077] team0: Port device team_slave_0 added
[  143.366809][ T6077] team0: Port device team_slave_1 added
[  143.440995][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.449702][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.495377][ T6077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.812891][ T6141] loop3: detected capacity change from 0 to 65536
[  143.837237][ T6141] XFS (loop3): Mounting V5 Filesystem
[  143.890290][ T6141] XFS (loop3): Ending clean mount
[  143.900347][ T6141] XFS (loop3): Quotacheck needed: Please wait.
[  143.973644][ T6141] XFS (loop3): Quotacheck: Done.
[  144.111510][ T4245] XFS (loop3): Unmounting Filesystem
[  144.123744][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.185616][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.235562][ T6077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.442174][ T4378] device hsr_slave_0 left promiscuous mode
[  144.460731][ T4378] device hsr_slave_1 left promiscuous mode
[  144.472689][ T4378] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.482989][ T4378] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.491216][ T4378] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.499138][ T4378] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.516160][ T4378] device bridge_slave_1 left promiscuous mode
[  144.522455][ T4378] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.534579][ T4378] device bridge_slave_0 left promiscuous mode
[  144.541255][ T4378] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.573170][ T4378] device veth1_macvtap left promiscuous mode
[  144.579832][ T4378] device veth0_macvtap left promiscuous mode
[  144.587963][ T4378] device veth1_vlan left promiscuous mode
[  144.593922][ T4378] device veth0_vlan left promiscuous mode
[  144.755832][ T4262] Bluetooth: hci4: command 0x041b tx timeout
[  144.883655][ T6167] loop3: detected capacity change from 0 to 512
[  144.898680][ T6167] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  144.958150][ T6167] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  144.975562][ T6167] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.083932][ T6167] EXT4-fs error (device loop3): __ext4_new_inode:1285: comm syz.3.508: failed to insert inode 16: doubly allocated?
[  145.202308][ T4245] EXT4-fs (loop3): unmounting filesystem.
[  145.531227][ T4378] team0 (unregistering): Port device team_slave_1 removed
[  145.571650][ T6171] loop3: detected capacity change from 0 to 32768
[  145.629132][ T4378] team0 (unregistering): Port device team_slave_0 removed
[  145.634150][ T6171] JBD2: Ignoring recovery information on journal
[  145.689196][ T4378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.751190][ T6171] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  145.762305][ T4378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  145.991843][ T4245] ocfs2: Unmounting device (7,3) on (node local)
[  146.682693][ T4378] bond0 (unregistering): Released all slaves
[  146.787589][ T6162] netlink: 6 bytes leftover after parsing attributes in process `syz.6.507'.
[  146.798832][ T6162] bridge_slave_0: default FDB implementation only supports local addresses
[  146.808062][ T6163] netlink: 6 bytes leftover after parsing attributes in process `syz.6.507'.
[  146.817323][ T5282] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  146.822820][ T6163] bridge_slave_0: default FDB implementation only supports local addresses
[  146.835649][ T4262] Bluetooth: hci4: command 0x040f tx timeout
[  146.933251][ T6077] device hsr_slave_0 entered promiscuous mode
[  146.940912][ T6077] device hsr_slave_1 entered promiscuous mode
[  147.019753][ T5282] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  147.040857][ T5282] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  147.052750][ T5282] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  147.062740][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.071272][ T5282] usb 4-1: Product: syz
[  147.076280][ T5282] usb 4-1: Manufacturer: syz
[  147.081081][ T5282] usb 4-1: SerialNumber: syz
[  147.322868][ T5282] usb 4-1: 0:2 : does not exist
[  147.344790][ T5282] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  147.393137][ T5282] usb 4-1: USB disconnect, device number 12
[  147.433944][ T4239] udevd[4239]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  147.928681][ T6077] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  147.949251][ T6077] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  147.984066][ T6077] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  148.009069][ T6077] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  148.164226][ T6199] loop2: detected capacity change from 0 to 7
[  148.201707][ T6199] Dev loop2: unable to read RDB block 7
[  148.215576][ T6199]  loop2: unable to read partition table
[  148.235891][ T6199] loop2: partition table beyond EOD, truncated
[  148.242532][ T6077] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.255776][ T6199] loop_reread_partitions: partition scan of loop2 (þ被) failed (rc=-5)
[  148.278510][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  148.309580][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  148.343798][ T6077] 8021q: adding VLAN 0 to HW filter on device team0
[  148.390616][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  148.418928][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  148.444594][ T6189] loop2: detected capacity change from 0 to 32768
[  148.455579][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.462722][ T4316] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.489912][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  148.532577][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  148.562409][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  148.582020][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.589252][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.610637][ T6189] XFS (loop2): Mounting V5 Filesystem
[  148.635722][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  148.650289][ T6189] XFS (loop2): Ending clean mount
[  148.658141][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  148.674041][ T6189] XFS (loop2): Quotacheck needed: Please wait.
[  148.738494][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  148.794151][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  148.809183][ T6218] loop3: detected capacity change from 0 to 256
[  148.820716][ T6189] XFS (loop2): Quotacheck: Done.
[  148.854105][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  148.879817][ T6195] loop6: detected capacity change from 0 to 40427
[  148.882021][ T6218] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  148.901709][ T6195] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  148.915766][ T4262] Bluetooth: hci4: command 0x0419 tx timeout
[  148.933455][ T6195] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  148.933862][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  148.955915][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  148.964541][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  148.981992][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  148.997024][ T6220] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.013209][ T6220] device batadv_slave_1 entered promiscuous mode
[  149.043534][ T6195] F2FS-fs (loop6): Found nat_bits in checkpoint
[  149.064486][ T6077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.142294][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  149.167802][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  149.179792][ T4933] XFS (loop2): Unmounting Filesystem
[  149.286148][ T6195] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  149.293352][ T6195] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  149.474547][ T6195] syz.6.519: attempt to access beyond end of device
[  149.474547][ T6195] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  149.500701][ T6235] loop3: detected capacity change from 0 to 1024
[  149.675280][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  149.682963][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  149.758327][ T6077] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.855988][ T6243] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  149.865081][ T6243] net_ratelimit: 2 callbacks suppressed
[  149.865099][ T6243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  150.171249][ T6251] loop3: detected capacity change from 0 to 4096
[  150.201617][ T6251] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  150.327853][ T6251] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  150.404501][ T6251] ntfs3: loop3: ino=1e, "file1" attr_set_size
[  150.485510][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  150.505271][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  150.564224][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  150.602114][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  150.630414][ T6077] device veth0_vlan entered promiscuous mode
[  150.653655][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  150.668579][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  150.688603][ T6077] device veth1_vlan entered promiscuous mode
[  150.768748][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  150.788874][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  150.809342][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  150.847799][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  150.879009][ T6077] device veth0_macvtap entered promiscuous mode
[  150.900112][ T6077] device veth1_macvtap entered promiscuous mode
[  150.938792][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.970712][ T6266] loop3: detected capacity change from 0 to 1024
[  150.985692][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.005406][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.040643][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.052272][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.082226][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.113301][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.131676][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.145725][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  151.145739][   T26] audit: type=1800 audit(1737568486.615:28): pid=6266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.543" name="bus" dev="loop3" ino=5 res=0 errno=0
[  151.180150][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.198793][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  151.214337][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  151.238234][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  151.256275][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  151.275094][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.287085][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.298548][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.309610][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.324932][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.336318][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.348259][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.357186][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  151.372204][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  151.403180][ T6077] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.415255][ T6260] loop7: detected capacity change from 0 to 32768
[  151.426690][ T6077] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.443746][ T6077] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.470287][ T6260] XFS: attr2 mount option is deprecated.
[  151.480758][ T6077] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.494861][ T6260] XFS: ikeep mount option is deprecated.
[  151.500789][ T6260] XFS: noikeep mount option is deprecated.
[  151.590295][ T6260] XFS (loop7): Mounting V5 Filesystem
[  151.687718][ T6260] XFS (loop7): Ending clean mount
[  151.709487][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.745033][ T6260] XFS (loop7): Quotacheck needed: Please wait.
[  151.755428][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.808216][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  151.843103][ T4316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.879523][ T4316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.928524][ T6260] XFS (loop7): Quotacheck: Done.
[  151.958030][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  152.144725][ T5536] XFS (loop7): Unmounting Filesystem
[  152.339566][ T6276] loop3: detected capacity change from 0 to 40427
[  152.365501][ T6276] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  152.373378][ T6276] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  152.488907][ T6276] F2FS-fs (loop3): Found nat_bits in checkpoint
[  152.661103][ T6276] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  152.676323][ T6276] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  152.681344][ T4296] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  152.716714][ T6294] loop2: detected capacity change from 0 to 32768
[  152.748057][ T6294] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.549 (6294)
[  152.802754][ T6294] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  152.814879][ T6276] syz.3.545: attempt to access beyond end of device
[  152.814879][ T6276] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  152.830287][ T6303] loop6: detected capacity change from 0 to 512
[  152.830748][ T6294] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  152.856156][ T6303] EXT4-fs: Ignoring removed orlov option
[  152.883410][ T6294] BTRFS info (device loop2): setting nodatasum
[  152.904968][ T6303] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  152.926427][ T4296] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  152.930496][ T6294] BTRFS info (device loop2): enabling auto defrag
[  152.942103][ T6294] BTRFS info (device loop2): disabling tree log
[  152.947327][ T4296] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  152.949347][ T6294] BTRFS info (device loop2): using free space tree
[  152.968864][ T6303] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.551: casefold flag without casefold feature
[  152.990116][ T6303] EXT4-fs (loop6): Remounting filesystem read-only
[  152.998073][ T6303] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.551: couldn't read orphan inode 15 (err -117)
[  153.001554][ T4296] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  153.016743][ T6303] EXT4-fs (loop6): Remounting filesystem read-only
[  153.031629][ T6303] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  153.063742][ T6303] EXT4-fs error (device loop6): ext4_check_dx_root:2266: inode #2: comm syz.6.551: Corrupt dir, invalid name_len for '.', running e2fsck is recommended
[  153.077109][ T4296] usb 6-1: config 0 interface 0 has no altsetting 0
[  153.086072][ T6303] EXT4-fs (loop6): Remounting filesystem read-only
[  153.134846][ T4296] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  153.145492][ T4296] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  153.157908][ T5149] EXT4-fs (loop6): unmounting filesystem.
[  153.157970][ T4296] usb 6-1: config 0 interface 0 has no altsetting 0
[  153.173493][ T4296] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  153.183483][ T4296] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  153.194942][ T4296] usb 6-1: config 0 interface 0 has no altsetting 0
[  153.203025][ T4296] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  153.258641][ T4296] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  153.279114][ T6294] BTRFS info (device loop2): enabling ssd optimizations
[  153.290303][ T4296] usb 6-1: config 0 interface 0 has no altsetting 0
[  153.387536][ T4296] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  153.402707][ T4296] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  153.458503][ T4296] usb 6-1: config 0 interface 0 has no altsetting 0
[  153.513438][ T4296] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  153.531771][ T4296] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  153.581267][ T4296] usb 6-1: config 0 interface 0 has no altsetting 0
[  153.584868][ T4933] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  153.603735][ T4296] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  153.668180][ T4296] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  153.699996][ T4296] usb 6-1: config 0 interface 0 has no altsetting 0
[  153.774029][ T4296] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  153.805682][ T4296] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  153.844015][ T4296] usb 6-1: config 0 interface 0 has no altsetting 0
[  153.863147][ T4296] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  153.885978][ T4296] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  153.916189][ T4296] usb 6-1: Product: syz
[  153.920948][ T4296] usb 6-1: Manufacturer: syz
[  153.941067][ T4296] usb 6-1: SerialNumber: syz
[  153.949663][ T4296] usb 6-1: config 0 descriptor??
[  154.024616][ T4296] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[  154.074192][ T6335] loop6: detected capacity change from 0 to 256
[  154.111342][ T6335] FAT-fs (loop6): Directory bread(block 1285) failed
[  154.125904][ T4294] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  154.172424][ T6335] FAT-fs (loop6): Directory bread(block 1285) failed
[  154.180064][ T6335] FAT-fs (loop6): Directory bread(block 1285) failed
[  154.217085][ T6335] FAT-fs (loop6): Directory bread(block 1285) failed
[  154.244061][ T6336] FAT-fs (loop6): Directory bread(block 1285) failed
[  154.264271][ T6336] FAT-fs (loop6): Directory bread(block 1285) failed
[  154.299167][ T6336] FAT-fs (loop6): Directory bread(block 1285) failed
[  154.335523][ T6335] FAT-fs (loop6): Directory bread(block 1285) failed
[  154.342083][ T4294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.343161][ T6335] FAT-fs (loop6): FAT read failed (blocknr 1281)
[  154.374830][ T4294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.413140][ T6337] FAT-fs (loop6): Directory bread(block 1285) failed
[  154.415636][ T4294] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  154.444086][    C1] usb 6-1: yurex_control_callback - control failed: -71
[  154.445490][   T14] usb 6-1: USB disconnect, device number 11
[  154.464321][ T4294] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  154.485426][ T4294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.493474][   T14] yurex 6-1:0.0: USB YUREX #0 now disconnected
[  154.520377][ T6342] loop2: detected capacity change from 0 to 512
[  154.550768][ T4294] usb 4-1: config 0 descriptor??
[  154.557123][ T6342] EXT4-fs: Ignoring removed mblk_io_submit option
[  154.599355][ T6342] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.566: invalid indirect mapped block 10 (level 1)
[  154.620926][ T6342] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.566: invalid indirect mapped block 8 (level 1)
[  154.636805][ T6342] EXT4-fs (loop2): 1 truncate cleaned up
[  154.642629][ T6342] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  154.721793][ T6346] loop7: detected capacity change from 0 to 2048
[  154.751943][ T4933] EXT4-fs (loop2): unmounting filesystem.
[  154.828569][ T6346] EXT4-fs error (device loop7): ext4_orphan_get:1426: comm syz.7.559: bad orphan inode 8192
[  154.903574][ T6346] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  154.976462][ T4294] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving
[  154.979492][   T26] audit: type=1800 audit(1737568490.445:29): pid=6346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.559" name="file1" dev="loop7" ino=15 res=0 errno=0
[  155.009856][ T4294] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  155.149311][ T5536] EXT4-fs (loop7): unmounting filesystem.
[  155.371642][ T5034] usb 4-1: USB disconnect, device number 13
[  155.516590][ T6369] input: syz0 as /devices/virtual/input/input17
[  155.764642][ T6373] loop7: detected capacity change from 0 to 8192
[  155.983767][ T5536] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  156.025571][ T5536] FAT-fs (loop7): Filesystem has been set read-only
[  156.032555][ T5536] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  156.047183][ T6380] loop3: detected capacity change from 0 to 22
[  156.054102][ T6380] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  156.087179][ T6380] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  156.297427][ T6371] loop5: detected capacity change from 0 to 32768
[  156.318598][ T6375] loop2: detected capacity change from 0 to 32768
[  156.341809][ T6371] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.572 (6371)
[  156.393990][ T6371] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  156.402113][ T6375] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.573 (6375)
[  156.415463][ T6371] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  156.424887][ T6371] BTRFS info (device loop5): setting nodatacow, compression disabled
[  156.455500][ T6375] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  156.466252][ T6371] BTRFS info (device loop5): max_inline at 0
[  156.472284][ T6371] BTRFS info (device loop5): enabling disk space caching
[  156.521353][ T6375] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  156.530910][ T6371] BTRFS info (device loop5): setting datasum, datacow enabled
[  156.555851][ T6371] BTRFS info (device loop5): turning on flush-on-commit
[  156.573353][ T6375] BTRFS info (device loop2): using free space tree
[  156.588480][ T6371] BTRFS info (device loop5): doing ref verification
[  156.625444][ T6371] BTRFS info (device loop5): force clearing of disk cache
[  156.685789][ T6371] BTRFS info (device loop5): enabling ssd optimizations
[  156.705142][   T51] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.735503][ T6371] BTRFS info (device loop5): turning off barriers
[  156.742066][ T6371] BTRFS info (device loop5): max_inline at 4096
[  156.791879][ T6371] BTRFS info (device loop5): disk space caching is enabled
[  156.898316][ T6378] loop6: detected capacity change from 0 to 32768
[  156.973291][ T6375] BTRFS info (device loop2): enabling ssd optimizations
[  156.979520][ T6378] XFS (loop6): Mounting V5 Filesystem
[  156.994547][   T51] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.144392][ T4933] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  157.164779][ T6378] XFS (loop6): Ending clean mount
[  157.188363][ T6378] XFS (loop6): Quotacheck needed: Please wait.
[  157.244979][ T6371] BTRFS info (device loop5): rebuilding free space tree
[  157.257371][   T51] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.320027][ T6378] XFS (loop6): Quotacheck: Done.
[  157.365573][ T6371] BTRFS info (device loop5): disabling free space tree
[  157.372594][ T6371] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  157.402233][ T6378] XFS (loop6): User initiated shutdown received.
[  157.433015][ T6382] loop3: detected capacity change from 0 to 32768
[  157.437431][ T6371] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  157.440182][ T6378] XFS (loop6): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:496).  Shutting down filesystem.
[  157.602428][ T6378] XFS (loop6): Please unmount the filesystem and rectify the problem(s)
[  157.644598][ T6382] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  157.793301][ T4262] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  157.837694][ T5149] XFS (loop6): Unmounting Filesystem
[  157.860436][ T4262] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  157.869355][ T4262] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  157.879697][ T4262] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  157.905855][ T4262] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  157.913289][ T4262] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  157.952597][ T6436] (syz.3.577,6436,1):ocfs2_rename:1282 ERROR: status = -2
[  157.961954][ T6436] (syz.3.577,6436,1):ocfs2_rename:1687 ERROR: status = -2
[  157.996464][   T51] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.124498][ T6077] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  158.225423][ T4249] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  158.290016][ T4245] ocfs2: Unmounting device (7,3) on (node local)
[  158.420964][ T4249] usb 3-1: Using ep0 maxpacket: 16
[  158.476178][ T4249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.505501][ T4249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.561530][ T4249] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  158.605791][ T4249] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  158.631250][ T4249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.682137][ T4249] usb 3-1: config 0 descriptor??
[  158.728452][ T6432] chnl_net:caif_netlink_parms(): no params data found
[  159.073536][ T6450] loop6: detected capacity change from 0 to 512
[  159.127960][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.138630][ T4249] koneplus 0003:1E7D:2E22.0011: unknown main item tag 0x0
[  159.155771][ T4249] koneplus 0003:1E7D:2E22.0011: unknown main item tag 0x0
[  159.171499][ T4249] koneplus 0003:1E7D:2E22.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0
[  159.202059][ T6450] EXT4-fs (loop6): 1 orphan inode deleted
[  159.213960][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.218012][ T6450] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  159.223233][ T6432] device bridge_slave_0 entered promiscuous mode
[  159.237663][ T4378] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  159.254663][ T4378] EXT4-fs error (device loop6): ext4_release_dquot:6817: comm kworker/u4:7: Failed to release dquot type 1
[  159.274526][ T6450] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.305738][ T6457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  159.313092][ T6457] IPv6: NLM_F_CREATE should be set when creating new route
[  159.320530][ T6457] IPv6: NLM_F_CREATE should be set when creating new route
[  159.333624][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.376370][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.388084][ T6444] loop5: detected capacity change from 0 to 40427
[  159.405548][ T6432] device bridge_slave_1 entered promiscuous mode
[  159.434140][ T6444] F2FS-fs (loop5): invalid crc value
[  159.499262][ T6444] F2FS-fs (loop5): Found nat_bits in checkpoint
[  159.556420][ T6432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  159.587121][ T5025] usb 3-1: USB disconnect, device number 8
[  159.658744][ T6444] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0
[  159.677827][ T6432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.691896][ T6444] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  159.799573][ T6444] syz.5.582: attempt to access beyond end of device
[  159.799573][ T6444] loop5: rw=2049, sector=53248, nr_sectors = 136 limit=40427
[  159.863049][ T6432] team0: Port device team_slave_0 added
[  159.883176][ T6432] team0: Port device team_slave_1 added
[  159.913009][ T6077] syz-executor: attempt to access beyond end of device
[  159.913009][ T6077] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  159.955972][ T4258] Bluetooth: hci1: command 0x0409 tx timeout
[  160.132618][ T6463] loop3: detected capacity change from 0 to 32768
[  160.158491][ T6463] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.586 (6463)
[  160.186490][   T26] audit: type=1800 audit(1737568495.655:30): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.581" name="file1" dev="loop6" ino=15 res=0 errno=0
[  160.236680][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_0
[  160.255391][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.282433][ T6463] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  160.304362][ T6463] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  160.325550][ T6463] BTRFS info (device loop3): setting nodatacow, compression disabled
[  160.333726][ T6463] BTRFS info (device loop3): force clearing of disk cache
[  160.341467][ T6432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  160.376765][ T6463] BTRFS info (device loop3): enabling ssd optimizations
[  160.383764][ T6463] BTRFS info (device loop3): using spread ssd allocation scheme
[  160.422878][ T6463] BTRFS info (device loop3): doing ref verification
[  160.464095][ T6463] BTRFS info (device loop3): disabling free space tree
[  160.474182][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.486960][ T5149] EXT4-fs (loop6): unmounting filesystem.
[  160.501385][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.528090][   T11] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  160.528199][ T6463] BTRFS info (device loop3): not using ssd optimizations
[  160.562287][   T11] EXT4-fs error (device loop6): ext4_release_dquot:6817: comm kworker/u4:1: Failed to release dquot type 1
[  160.565982][ T6463] BTRFS info (device loop3): not using spread ssd allocation scheme
[  160.595342][ T6432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  160.797790][ T6484] loop5: detected capacity change from 0 to 2048
[  160.867330][ T6484] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  160.879905][ T6484] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.894221][ T6432] device hsr_slave_0 entered promiscuous mode
[  160.902869][ T6432] device hsr_slave_1 entered promiscuous mode
[  160.935147][ T6432] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  160.970048][ T6463] BTRFS info (device loop3): rebuilding free space tree
[  160.981560][ T6432] Cannot create hsr debugfs directory
[  160.984128][ T6484] fs-verity: sha512 using implementation "sha512-avx2"
[  161.033876][ T6463] BTRFS info (device loop3): disabling free space tree
[  161.083775][ T6463] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  161.110078][ T6463] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  161.372301][   T26] audit: type=1800 audit(1737568496.835:31): pid=6463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.586" name="file2" dev="loop3" ino=261 res=0 errno=0
[  161.558092][ T4245] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  161.646821][ T6484] fs-verity (loop5, inode 13): Error -4 building Merkle tree
[  162.052302][ T4258] Bluetooth: hci1: command 0x041b tx timeout
[  162.077009][   T51] device hsr_slave_0 left promiscuous mode
[  162.083658][   T51] device hsr_slave_1 left promiscuous mode
[  162.094584][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.102283][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.119132][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.154676][   T51] device bridge_slave_1 left promiscuous mode
[  162.184511][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.210372][ T6506] netlink: 172 bytes leftover after parsing attributes in process `syz.3.590'.
[  162.234468][   T51] device bridge_slave_0 left promiscuous mode
[  162.245587][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.292601][ T6077] EXT4-fs (loop5): unmounting filesystem.
[  162.400046][   T51] device veth1_macvtap left promiscuous mode
[  162.415756][   T51] device veth0_macvtap left promiscuous mode
[  162.430920][   T51] device veth1_vlan left promiscuous mode
[  162.443676][   T51] device veth0_vlan left promiscuous mode
[  162.821239][ T6504] loop2: detected capacity change from 0 to 40427
[  162.853204][ T6504] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  162.865019][ T6504] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  162.880372][ T6504] F2FS-fs (loop2): Found nat_bits in checkpoint
[  163.031037][ T6504] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  163.044164][ T6504] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  163.170637][ T6508] loop5: detected capacity change from 0 to 40427
[  163.184827][ T6508] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  163.192829][ T6508] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  163.270311][ T6508] F2FS-fs (loop5): Found nat_bits in checkpoint
[  163.358445][ T6521] loop6: detected capacity change from 0 to 256
[  163.422778][ T6508] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  163.428613][ T6521] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  163.430251][ T6508] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  163.502057][ T6521] syz.6.597: attempt to access beyond end of device
[  163.502057][ T6521] loop6: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[  163.551279][ T6521] syz.6.597: attempt to access beyond end of device
[  163.551279][ T6521] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  163.570917][   T26] audit: type=1800 audit(1737568499.035:32): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.597" name="file1" dev="loop6" ino=1048706 res=0 errno=0
[  163.691627][ T6508] syz.5.593: attempt to access beyond end of device
[  163.691627][ T6508] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  163.995380][ T4249] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  164.135590][ T4258] Bluetooth: hci1: command 0x040f tx timeout
[  164.211747][ T4249] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.234314][ T4249] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.258603][ T4249] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  164.298503][ T4249] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  164.321338][ T4249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.353094][ T4249] usb 7-1: config 0 descriptor??
[  164.393885][   T51] team0 (unregistering): Port device team_slave_1 removed
[  164.504543][ T6526] loop2: detected capacity change from 0 to 40427
[  164.541416][ T6526] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  164.554835][   T51] team0 (unregistering): Port device team_slave_0 removed
[  164.562453][ T6526] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  164.611268][ T6526] F2FS-fs (loop2): invalid crc value
[  164.650412][ T6526] F2FS-fs (loop2): Found nat_bits in checkpoint
[  164.657926][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.735580][ T6526] F2FS-fs (loop2): Start checkpoint disabled!
[  164.770120][ T6526] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  164.777324][ T6526] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  164.786462][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.813286][ T4249] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  164.845933][ T4249] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  164.929047][ T6526] syz.2.599: attempt to access beyond end of device
[  164.929047][ T6526] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  164.944005][ T6530] loop5: detected capacity change from 0 to 32768
[  165.115689][ T6530] ERROR: (device loop5): dbFindCtl: Corrupt dmapctl page
[  165.115689][ T6530] 
[  165.128236][ T4249] usb 7-1: USB disconnect, device number 4
[  165.154087][ T6530] ERROR: (device loop5): remounting filesystem as read-only
[  165.216463][   T32] kworker/u4:2: attempt to access beyond end of device
[  165.216463][   T32] loop2: rw=2049, sector=40960, nr_sectors = 64 limit=40427
[  165.222299][ T6534] ERROR: (device loop5): dbFindCtl: Corrupt dmapctl page
[  165.222299][ T6534] 
[  165.572157][ T6536] loop2: detected capacity change from 0 to 2048
[  165.654896][ T6536] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  165.723124][   T26] audit: type=1800 audit(1737568501.185:33): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.603" name="file1" dev="loop2" ino=15 res=0 errno=0
[  165.742632][ T6536] EXT4-fs (loop2): shut down requested (0)
[  166.023355][ T4933] EXT4-fs (loop2): unmounting filesystem.
[  166.206853][ T4258] Bluetooth: hci1: command 0x0419 tx timeout
[  166.595251][ T6545] loop6: detected capacity change from 0 to 40427
[  166.641540][ T6545] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x3ffff
[  166.675009][ T6545] F2FS-fs (loop6): invalid crc value
[  166.701906][   T51] bond0 (unregistering): Released all slaves
[  166.709547][ T6545] F2FS-fs (loop6): Found nat_bits in checkpoint
[  166.815465][ T6545] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  167.088356][ T5149] syz-executor: attempt to access beyond end of device
[  167.088356][ T5149] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  167.159399][ T6432] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  167.169367][ T6432] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  167.179648][ T6432] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  167.190380][ T6432] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  167.331267][ T6564] loop5: detected capacity change from 0 to 32768
[  167.355656][ T4249] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  167.386016][ T6564] MetaData crosses page boundary!!
[  167.391732][ T6564] lblock = 631500, size  = 28672
[  167.398237][ T6564] CPU: 1 PID: 6564 Comm: syz.5.612 Not tainted 6.1.126-syzkaller #0
[  167.406279][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  167.416370][ T6564] Call Trace:
[  167.419678][ T6564]  <TASK>
[  167.422635][ T6564]  dump_stack_lvl+0x1e3/0x2cb
[  167.427350][ T6564]  ? nf_tcp_handle_invalid+0x642/0x642
[  167.432861][ T6564]  ? panic+0x764/0x764
[  167.436959][ T6564]  __get_metapage+0xb61/0x1040
[  167.441749][ T6564]  dtSearch+0x57e/0x2500
[  167.446027][ T6564]  jfs_lookup+0x17b/0x400
[  167.450366][ T6564]  ? jfs_get_parent+0xa0/0xa0
[  167.455057][ T6564]  ? do_raw_spin_unlock+0x137/0x8a0
[  167.460284][ T6564]  ? _raw_spin_unlock+0x24/0x40
[  167.465151][ T6564]  ? d_alloc+0x194/0x1d0
[  167.469417][ T6564]  lookup_one_qstr_excl+0x117/0x240
[  167.474642][ T6564]  filename_create+0x293/0x530
[  167.479421][ T6564]  ? kern_path_create+0x50/0x50
[  167.484301][ T6564]  do_symlinkat+0xf5/0x390
[  167.488723][ T6564]  ? __check_object_size+0x4dd/0xa30
[  167.494013][ T6564]  ? vfs_symlink+0x3d0/0x3d0
[  167.498611][ T6564]  ? getname_flags+0x1f9/0x4f0
[  167.503374][ T6564]  ? lockdep_hardirqs_on+0x94/0x130
[  167.508592][ T6564]  __x64_sys_symlink+0x7a/0x90
[  167.513429][ T6564]  do_syscall_64+0x3b/0xb0
[  167.517962][ T6564]  ? clear_bhb_loop+0x45/0xa0
[  167.522660][ T6564]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  167.528592][ T6564] RIP: 0033:0x7f436dd85d29
[  167.533045][ T6564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.552683][ T6564] RSP: 002b:00007f436ec10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  167.561101][ T6564] RAX: ffffffffffffffda RBX: 00007f436df75fa0 RCX: 00007f436dd85d29
[  167.569086][ T6564] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000020000580
[  167.577058][ T6564] RBP: 00007f436de01b08 R08: 0000000000000000 R09: 0000000000000000
[  167.585044][ T6564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.593016][ T6564] R13: 0000000000000000 R14: 00007f436df75fa0 R15: 00007ffc7fab08f8
[  167.601006][ T6564]  </TASK>
[  167.604645][ T6564] bread failed!
[  167.608460][ T6564] jfs_lookup: dtSearch returned -5
[  167.620619][ T6566] loop3: detected capacity change from 0 to 1024
[  167.693642][ T6566] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  167.731368][ T4249] usb 3-1: config 0 has an invalid interface number: 222 but max is 0
[  167.755803][ T4249] usb 3-1: config 0 has no interface number 0
[  167.770763][ T6566] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  167.806468][ T4249] usb 3-1: New USB device found, idVendor=054c, idProduct=087d, bcdDevice=11.38
[  167.836173][ T4249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.844217][ T4249] usb 3-1: Product: syz
[  167.874172][ T6432] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.886102][ T4249] usb 3-1: Manufacturer: syz
[  167.894963][ T4249] usb 3-1: SerialNumber: syz
[  167.908191][ T4249] usb 3-1: config 0 descriptor??
[  167.925146][ T4249] usb-storage 3-1:0.222: USB Mass Storage device detected
[  167.933783][ T6432] 8021q: adding VLAN 0 to HW filter on device team0
[  167.953605][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  167.976716][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  167.994528][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  168.012204][ T4249] usb-storage 3-1:0.222: Quirks match for vid 054c pid 087d: 4000000
[  168.042892][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  168.043255][ T4245] EXT4-fs (loop3): unmounting filesystem.
[  168.084309][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.091510][ T4316] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.129378][ T6560] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  168.130649][ T6575] loop3: detected capacity change from 0 to 512
[  168.206706][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  168.230173][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  168.253982][ T5352] usb 3-1: USB disconnect, device number 9
[  168.260356][ T6575] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  168.277898][ T4316] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.285186][ T4316] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.294951][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  168.344285][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  168.346837][ T6575] EXT4-fs (loop3): 1 truncate cleaned up
[  168.365497][ T6575] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  168.382236][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  168.464873][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  168.477865][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  168.496665][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  168.510224][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  168.526873][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  168.604289][ T6432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  168.616395][ T6432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  168.628435][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  168.638921][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  168.649986][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  168.667741][ T4245] EXT4-fs (loop3): unmounting filesystem.
[  168.674536][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  168.706671][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  169.223487][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  169.253960][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  169.307562][ T6432] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.642034][ T5353] kernel read not supported for file /video7 (pid: 5353 comm: kworker/0:14)
[  169.898817][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  169.922856][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  169.969077][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  169.986570][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  170.018501][ T6432] device veth0_vlan entered promiscuous mode
[  170.025846][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  170.034354][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  170.063982][ T6432] device veth1_vlan entered promiscuous mode
[  170.136146][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  170.152402][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  170.188450][ T6432] device veth0_macvtap entered promiscuous mode
[  170.199505][ T6432] device veth1_macvtap entered promiscuous mode
[  170.214714][ T6634] netlink: 104 bytes leftover after parsing attributes in process `syz.6.636'.
[  170.270870][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.310751][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.344635][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.366079][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.392611][ T6639] loop5: detected capacity change from 0 to 512
[  170.404819][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.425348][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.452226][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.475386][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.507712][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_0
[  170.518854][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  170.541220][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  170.555569][ T4239] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  170.568019][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  170.596904][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  170.629604][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.653531][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.653827][ T6643] loop6: detected capacity change from 0 to 2048
[  170.703900][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.714069][ T6628] loop2: detected capacity change from 0 to 32768
[  170.729285][ T6628] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.633 (6628)
[  170.738466][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.761835][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.790940][ T6643] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a002e018, mo2=0002]
[  170.801338][ T6643] System zones: 0-4
[  170.803141][ T6628] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  170.806586][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.826294][ T6643] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  170.835132][ T6643] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.845083][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.868076][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.879511][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.887354][ T6628] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  170.901308][ T6432] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.910157][ T6432] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.941868][ T6432] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.966758][ T6628] BTRFS info (device loop2): setting nodatacow, compression disabled
[  170.985541][ T6628] BTRFS info (device loop2): force clearing of disk cache
[  170.992721][ T6628] BTRFS info (device loop2): enabling ssd optimizations
[  171.020653][ T6432] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.063170][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  171.065412][ T6628] BTRFS info (device loop2): using spread ssd allocation scheme
[  171.087891][ T4264] Bluetooth: hci4: command 0x0406 tx timeout
[  171.097601][ T6628] BTRFS info (device loop2): doing ref verification
[  171.105014][ T6628] BTRFS info (device loop2): disabling free space tree
[  171.108130][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  171.123296][ T6628] BTRFS info (device loop2): not using ssd optimizations
[  171.132757][ T6628] BTRFS info (device loop2): not using spread ssd allocation scheme
[  171.309815][ T5149] EXT4-fs (loop6): unmounting filesystem.
[  171.527707][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.546117][ T6628] BTRFS info (device loop2): rebuilding free space tree
[  171.576583][ T6628] BTRFS info (device loop2): disabling free space tree
[  171.595461][ T6628] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  171.617590][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.642512][ T6628] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  171.691708][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  171.702025][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.755114][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.810836][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  171.865051][ T6683] loop3: detected capacity change from 0 to 256
[  171.924999][   T26] audit: type=1800 audit(1737568507.385:34): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.633" name="file2" dev="loop2" ino=261 res=0 errno=0
[  171.961563][ T6683] FAT-fs (loop3): Directory bread(block 64) failed
[  172.024010][ T6683] FAT-fs (loop3): Directory bread(block 65) failed
[  172.032816][ T6683] FAT-fs (loop3): Directory bread(block 66) failed
[  172.052254][ T6683] FAT-fs (loop3): Directory bread(block 67) failed
[  172.071502][ T6683] FAT-fs (loop3): Directory bread(block 68) failed
[  172.094125][ T6683] FAT-fs (loop3): Directory bread(block 69) failed
[  172.110305][ T6683] FAT-fs (loop3): Directory bread(block 70) failed
[  172.123085][ T4933] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  172.133777][ T6683] FAT-fs (loop3): Directory bread(block 71) failed
[  172.141250][ T6683] FAT-fs (loop3): Directory bread(block 72) failed
[  172.152607][ T6683] FAT-fs (loop3): Directory bread(block 73) failed
[  172.281477][ T6683] process 'syz.3.649' launched '/dev/fd/4' with NULL argv: empty string added
[  172.349723][ T6683] syz.3.649: attempt to access beyond end of device
[  172.349723][ T6683] loop3: rw=524288, sector=1160, nr_sectors = 4 limit=256
[  172.403299][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.8.653'.
[  172.427941][ T6683] syz.3.649: attempt to access beyond end of device
[  172.427941][ T6683] loop3: rw=0, sector=1160, nr_sectors = 4 limit=256
[  172.771049][ T6698] futex_wake_op: syz.6.655 tries to shift op by -1; fix this program
[  173.008854][ T6690] loop5: detected capacity change from 0 to 32768
[  173.033346][ T6690] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.651 (6690)
[  173.088484][ T6690] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  173.117326][ T6690] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  173.181745][ T6690] BTRFS info (device loop5): metadata ratio 4
[  173.192657][ T6690] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  173.205820][ T6690] BTRFS info (device loop5): force lzo compression, level 0
[  173.226533][ T6705] loop2: detected capacity change from 0 to 8192
[  173.234327][ T6690] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  173.249998][ T6710] device syzkaller1 entered promiscuous mode
[  173.264150][ T6690] BTRFS info (device loop5): trying to use backup root at mount time
[  173.278358][ T6705] Dev loop2: RDB in block 1 has bad checksum
[  173.296597][ T6690] BTRFS info (device loop5): doing ref verification
[  173.303329][ T6690] BTRFS info (device loop5): disabling tree log
[  173.329468][ T3623] Dev loop2: RDB in block 1 has bad checksum
[  173.345662][ T6690] BTRFS info (device loop5): using free space tree
[  173.416254][   T51] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0
[  173.455688][ T6690] BTRFS warning (device loop5): couldn't read tree root
[  173.462938][ T6690] BTRFS warning (device loop5): try to load backup roots slot 1
[  173.472712][ T4274] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0
[  173.486638][ T5353] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  173.494721][ T6690] BTRFS warning (device loop5): couldn't read tree root
[  173.502959][ T6690] BTRFS warning (device loop5): try to load backup roots slot 2
[  173.511503][ T6690] BTRFS error (device loop5): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  173.523749][ T6690] BTRFS warning (device loop5): couldn't read tree root
[  173.531412][ T6690] BTRFS warning (device loop5): try to load backup roots slot 3
[  173.557884][ T6690] BTRFS info (device loop5): enabling ssd optimizations
[  173.567279][ T6690] BTRFS info (device loop5): rebuilding free space tree
[  173.612014][ T6690] BTRFS info (device loop5): checking UUID tree
[  173.687948][ T5353] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.718323][ T5353] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.775441][ T5353] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  173.825410][ T5353] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.867302][ T5353] usb 7-1: config 0 descriptor??
[  173.907137][ T6077] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  173.931727][ T6741] loop8: detected capacity change from 0 to 2048
[  173.981051][ T6745] netlink: 'syz.2.666': attribute type 1 has an invalid length.
[  174.009703][ T6741] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  174.051238][ T6745] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.666'.
[  174.062013][ T6741] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  174.329466][ T6747] loop2: detected capacity change from 0 to 1024
[  174.337031][ T5353] lg-g15 0003:046D:C222.0013: unknown main item tag 0x0
[  174.344057][ T5353] lg-g15 0003:046D:C222.0013: unknown main item tag 0x0
[  174.370666][ T6749] loop3: detected capacity change from 0 to 1024
[  174.378472][ T5353] lg-g15 0003:046D:C222.0013: unknown main item tag 0x0
[  174.405448][ T5353] lg-g15 0003:046D:C222.0013: unknown main item tag 0x0
[  174.442112][ T5353] lg-g15 0003:046D:C222.0013: unknown main item tag 0x0
[  174.505455][ T5353] lg-g15 0003:046D:C222.0013: unknown main item tag 0x0
[  174.514352][ T6747] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  174.528502][ T6749] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  174.580174][ T5353] lg-g15 0003:046D:C222.0013: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.6-1/input0
[  174.707518][ T5353] usb 7-1: USB disconnect, device number 5
[  174.860876][ T4245] EXT4-fs (loop3): unmounting filesystem.
[  174.926929][   T11] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  174.976202][   T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 12 with error 28
[  175.001426][   T11] EXT4-fs (loop2): This should not happen!! Data will be lost
[  175.001426][   T11] 
[  175.023455][   T11] EXT4-fs (loop2): Total free blocks count 0
[  175.089822][   T11] EXT4-fs (loop2): Free/Dirty block details
[  175.113212][   T11] EXT4-fs (loop2): free_blocks=68451041280
[  175.129471][   T11] EXT4-fs (loop2): dirty_blocks=16
[  175.134748][   T11] EXT4-fs (loop2): Block reservation details
[  175.173176][   T11] EXT4-fs (loop2): i_reserved_data_blocks=1
[  175.173773][ T6773] loop5: detected capacity change from 0 to 256
[  175.203943][ T4933] EXT4-fs (loop2): unmounting filesystem.
[  175.269893][ T6773] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  175.548425][ T6786] loop3: detected capacity change from 0 to 256
[  175.591202][   T26] audit: type=1804 audit(1737568511.055:35): pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.683" name="/newroot/143/file1/file0" dev="loop3" ino=1048713 res=1 errno=0
[  175.829433][ T6777] loop6: detected capacity change from 0 to 32768
[  175.893117][ T6800] loop5: detected capacity change from 0 to 16
[  175.919029][ T6777] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  175.951229][ T6800] erofs: (device loop5): mounted with root inode @ nid 36.
[  175.960123][ T6777] XFS (loop6): Mounting V5 Filesystem
[  175.975728][ T5353] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  176.030851][ T6777] XFS (loop6): Ending clean mount
[  176.167301][ T5353] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.181791][ T5353] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.186169][ T6814] capability: warning: `syz.5.693' uses 32-bit capabilities (legacy support in use)
[  176.192563][ T5353] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  176.222632][ T5353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.224321][ T5353] usb 3-1: config 0 descriptor??
[  176.237405][ T5149] XFS (loop6): Unmounting Filesystem
[  176.638127][ T5353] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0
[  176.646490][ T5353] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0
[  176.659521][ T5353] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0014/input/input20
[  176.701496][ T5353] cm6533_jd 0003:0D8C:0022.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[  176.756157][ T6820] futex_wake_op: syz.6.694 tries to shift op by 32; fix this program
[  176.841428][ T5353] usb 3-1: USB disconnect, device number 10
[  177.011856][ T6826] loop8: detected capacity change from 0 to 256
[  177.053563][ T6826] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  177.072020][ T6829] loop3: detected capacity change from 0 to 8
[  177.228248][ T6829] SQUASHFS error: zlib decompression failed, data probably corrupt
[  177.241741][ T6829] SQUASHFS error: Failed to read block 0x4e8: -5
[  177.253987][   T26] audit: type=1800 audit(1737568512.715:36): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.699" name="file1" dev="loop3" ino=5 res=0 errno=0
[  177.258414][ T6834] loop6: detected capacity change from 0 to 512
[  177.326141][ T6834] EXT4-fs: Ignoring removed orlov option
[  177.373134][ T6834] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.701: casefold flag without casefold feature
[  177.420914][ T6834] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.701: couldn't read orphan inode 15 (err -117)
[  177.433757][ T6834] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  177.477733][ T6841] loop2: detected capacity change from 0 to 128
[  177.499790][ T6841] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  177.582620][ T6841] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  177.781007][ T5149] EXT4-fs (loop6): unmounting filesystem.
[  178.185071][ T6844] loop8: detected capacity change from 0 to 32768
[  178.296903][ T6844] XFS (loop8): DAX unsupported by block device. Turning off DAX.
[  178.306669][ T6844] XFS (loop8): Mounting V5 Filesystem
[  178.369063][ T6844] XFS (loop8): Ending clean mount
[  178.424886][ T6855] loop6: detected capacity change from 0 to 32768
[  178.435661][ T6855] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.710 (6855)
[  178.454213][ T6855] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  178.465076][ T6855] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  178.474117][ T6855] BTRFS info (device loop6): using free space tree
[  178.583253][ T6883] loop5: detected capacity change from 0 to 256
[  178.591309][ T6432] XFS (loop8): Unmounting Filesystem
[  178.650688][ T6883] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  178.731913][ T6855] BTRFS info (device loop6): enabling ssd optimizations
[  178.779116][ T6855] fs-verity: sha256 using implementation "sha256-avx2"
[  178.791762][ T6883] syz.5.716: attempt to access beyond end of device
[  178.791762][ T6883] loop5: rw=524288, sector=34359738496, nr_sectors = 8 limit=256
[  178.908369][ T6883] syz.5.716: attempt to access beyond end of device
[  178.908369][ T6883] loop5: rw=0, sector=34359738496, nr_sectors = 8 limit=256
[  178.973246][ T6895] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  178.976354][ T6855] fs-verity (loop6, inode 261): Error -4 building Merkle tree
[  179.020068][   T26] audit: type=1800 audit(1737568514.485:37): pid=6883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.716" name="file1" dev="loop5" ino=1048716 res=0 errno=0
[  179.241120][ T5149] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  179.269281][ T6903] loop3: detected capacity change from 0 to 128
[  179.306901][ T6903] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  179.345239][ T6903] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.562435][ T6910] loop2: detected capacity change from 0 to 1024
[  179.655561][  T127] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  179.845594][  T127] usb 6-1: Using ep0 maxpacket: 8
[  179.853882][  T127] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  179.877050][ T6921] loop8: detected capacity change from 0 to 128
[  179.894559][  T127] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  179.923606][  T127] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  179.945666][  T127] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  179.950260][ T6921] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  179.969682][  T127] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  179.980553][  T127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.006168][ T6921] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  180.070403][ T6432] EXT4-fs (loop8): unmounting filesystem.
[  180.235949][  T127] usb 6-1: GET_CAPABILITIES returned 0
[  180.241549][  T127] usbtmc 6-1:16.0: can't read capabilities
[  180.445902][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  180.455463][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  180.464678][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  180.485792][    C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  180.494963][    C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  180.506017][    C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  180.515132][    C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  180.524214][    C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  180.533329][    C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  180.542443][    C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  180.551571][    C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  180.560680][    C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  180.569779][    C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  180.578898][    C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  180.588019][    C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  180.597125][    C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2
[  180.613811][ T6914] usb 6-1: USB disconnect, device number 12
[  180.907683][ T6933] loop3: detected capacity change from 0 to 32768
[  180.991390][ T6933] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  181.003402][ T6956] loop8: detected capacity change from 0 to 1024
[  181.018571][ T6933] XFS (loop3): Mounting V5 Filesystem
[  181.032970][ T6957] loop6: detected capacity change from 0 to 512
[  181.039983][ T6957] EXT4-fs: inline encryption not supported
[  181.070144][ T6957] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  181.083566][ T6957] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.101602][ T6933] XFS (loop3): Ending clean mount
[  181.108320][ T6957] EXT4-fs error (device loop6): ext4_do_update_inode:5224: inode #2: comm syz.6.741: corrupted inode contents
[  181.205630][ T6957] EXT4-fs error (device loop6): ext4_dirty_inode:6089: inode #2: comm syz.6.741: mark_inode_dirty error
[  181.230059][ T6957] EXT4-fs error (device loop6): ext4_do_update_inode:5224: inode #2: comm syz.6.741: corrupted inode contents
[  181.324709][   T11] hfsplus: b-tree write err: -5, ino 4
[  181.341199][ T6963] EXT4-fs error (device loop6): ext4_do_update_inode:5224: inode #2: comm syz.6.741: corrupted inode contents
[  181.382771][ T4245] XFS (loop3): Unmounting Filesystem
[  181.430776][ T6963] EXT4-fs error (device loop6): ext4_dirty_inode:6089: inode #2: comm syz.6.741: mark_inode_dirty error
[  181.464325][ T6963] EXT4-fs error (device loop6): ext4_do_update_inode:5224: inode #2: comm syz.6.741: corrupted inode contents
[  181.532259][ T6963] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.741: mark_inode_dirty error
[  181.596654][ T6963] EXT4-fs error (device loop6): ext4_do_update_inode:5224: inode #2: comm syz.6.741: corrupted inode contents
[  181.618315][ T6973] loop2: detected capacity change from 0 to 8
[  181.629149][ T6963] EXT4-fs error (device loop6): ext4_dirty_inode:6089: inode #2: comm syz.6.741: mark_inode_dirty error
[  181.734077][ T6973] SQUASHFS error: Failed to read block 0x4e8: -5
[  181.735406][ T6957] EXT4-fs error (device loop6): ext4_do_update_inode:5224: inode #2: comm syz.6.741: corrupted inode contents
[  181.752806][ T6973] SQUASHFS error: Failed to read block 0x4de: -5
[  181.760044][ T6973] SQUASHFS error: Failed to read block 0x4de: -5
[  181.798527][ T6973] SQUASHFS error: Failed to read block 0x4de: -5
[  181.834703][   T26] audit: type=1800 audit(1737568517.295:38): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.747" name="file1" dev="loop2" ino=5 res=0 errno=0
[  181.878087][ T5149] EXT4-fs (loop6): unmounting filesystem.
[  182.231724][ T6996] loop2: detected capacity change from 0 to 1024
[  182.239391][ T4296] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  182.431276][ T4316] hfsplus: b-tree write err: -5, ino 4
[  182.446547][ T4296] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.466441][ T4296] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  182.514341][ T4296] usb 9-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  182.539035][ T4296] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.553242][ T4296] usb 9-1: config 0 descriptor??
[  182.586313][ T7003] loop3: detected capacity change from 0 to 2048
[  182.633630][ T7003] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  182.665811][ T7003] UDF-fs: Scanning with blocksize 512 failed
[  182.696883][ T7005] loop2: detected capacity change from 0 to 4096
[  182.718026][ T7003] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.723561][ T7005] NILFS (loop2): invalid segment: Checksum error in segment payload
[  182.778600][ T4296] usb 9-1: USB disconnect, device number 2
[  182.798219][ T7005] NILFS (loop2): trying rollback from an earlier position
[  182.882760][ T7005] NILFS (loop2): recovery complete
[  182.897834][ T7010] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  182.963537][   T26] audit: type=1800 audit(1737568518.425:39): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.758" name="bus" dev="loop2" ino=12 res=0 errno=0
[  183.031795][ T4380] udevd[4380]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  183.147189][ T7015] Bluetooth: MGMT ver 1.22
[  183.473415][ T7009] loop6: detected capacity change from 0 to 32768
[  183.568828][   T26] audit: type=1800 audit(1737568519.035:40): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.760" name="file1" dev="loop6" ino=4 res=0 errno=0
[  183.601270][ T7028] loop3: detected capacity change from 0 to 512
[  183.656442][ T7028] EXT4-fs: Ignoring removed mblk_io_submit option
[  183.694176][ T7028] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  183.707399][ T7021] loop8: detected capacity change from 0 to 8192
[  183.742201][ T7028] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002]
[  183.798995][ T7028] System zones: 1-12
[  183.809159][ T7028] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.768: corrupted in-inode xattr
[  183.834169][ T7021] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  183.864630][ T7028] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.768: couldn't read orphan inode 15 (err -117)
[  183.915661][ T7021] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal
[  183.926469][ T7028] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  183.934468][ T7021] REISERFS (device loop8): using ordered data mode
[  183.955548][ T7021] reiserfs: using flush barriers
[  183.985447][ T7021] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  184.035921][ T4292] ------------[ cut here ]------------
[  184.042254][ T4292] sysfs group 'power' not found for kobject 'ueagle-atm!eagleI.fw'
[  184.053304][ T7021] REISERFS (device loop8): checking transaction log (loop8)
[  184.061260][ T4292] WARNING: CPU: 0 PID: 4292 at fs/sysfs/group.c:280 sysfs_remove_group+0x179/0x2a0
[  184.063519][ T7043] loop2: detected capacity change from 0 to 128
[  184.070888][ T4292] Modules linked in:
[  184.070965][ T4292] CPU: 0 PID: 4292 Comm: kworker/0:6 Not tainted 6.1.126-syzkaller #0
[  184.070989][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  184.071001][ T4292] Workqueue: events request_firmware_work_func
[  184.106351][ T4292] RIP: 0010:sysfs_remove_group+0x179/0x2a0
[  184.112185][ T4292] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 4a a3 c7 ff 49 8b 14 24 48 c7 c7 e0 76 1c 8b 4c 89 f6 e8 27 2a 38 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 51 10 70 ff
[  184.130491][ T7021] REISERFS (device loop8): Using r5 hash to sort names
[  184.131950][ T4292] RSP: 0018:ffffc90004357820 EFLAGS: 00010246
[  184.144890][ T4292] RAX: c9ed0083bd9d6700 RBX: ffff88801de8a038 RCX: ffff888024e8d940
[  184.152955][ T4292] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  184.161009][ T4292] RBP: dffffc0000000000 R08: ffffffff8152b84e R09: fffff5200086ae65
[  184.169059][ T4292] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801de8a008
[  184.177178][ T4292] R13: 1ffffffff1704670 R14: ffffffff8b823360 R15: ffff88805ef920e8
[  184.178787][ T7043] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512)
[  184.185161][ T4292] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  184.185187][ T4292] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  184.185199][ T4292] CR2: 000055558b3ce5c8 CR3: 000000007c40f000 CR4: 00000000003526f0
[  184.185214][ T4292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  184.185223][ T4292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  184.185233][ T4292] Call Trace:
[  184.223545][ T7021] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage.
[  184.224825][ T4292]  <TASK>
[  184.224837][ T4292]  ? __warn+0x15a/0x520
[  184.224860][ T4292]  ? sysfs_remove_group+0x179/0x2a0
[  184.224883][ T4292]  ? report_bug+0x2af/0x500
[  184.235035][ T7043] FAT-fs (loop2): Filesystem has been set read-only
[  184.236203][ T4292]  ? sysfs_remove_group+0x179/0x2a0
[  184.236235][ T4292]  ? handle_bug+0x3d/0x70
[  184.236251][ T4292]  ? exc_invalid_op+0x16/0x40
[  184.236268][ T4292]  ? asm_exc_invalid_op+0x16/0x20
[  184.236298][ T4292]  ? __warn_printk+0x28e/0x350
[  184.236322][ T4292]  ? sysfs_remove_group+0x179/0x2a0
[  184.236342][ T4292]  ? sysfs_unmerge_group+0x108/0x130
[  184.236362][ T4292]  device_del+0x2f1/0xbd0
[  184.308048][ T4292]  ? kill_device+0x160/0x160
[  184.312699][ T4292]  ? complete_all+0x29/0x1d0
[  184.317373][ T4292]  ? __fw_load_abort+0x88/0x190
[  184.322260][ T4292]  firmware_fallback_sysfs+0x686/0x940
[  184.327833][ T4292]  _request_firmware+0xcf0/0x12b0
[  184.333008][ T4292]  ? request_firmware+0x50/0x50
[  184.337986][ T4292]  request_firmware_work_func+0x126/0x270
[  184.343781][ T4292]  ? request_firmware_nowait+0x450/0x450
[  184.349623][ T4292]  ? do_raw_spin_unlock+0x137/0x8a0
[  184.354891][ T4292]  ? process_one_work+0x7a9/0x11d0
[  184.360107][ T4292]  process_one_work+0x8a9/0x11d0
[  184.365100][ T4292]  ? worker_detach_from_pool+0x260/0x260
[  184.370837][ T4292]  ? _raw_spin_lock_irqsave+0x120/0x120
[  184.376453][ T4292]  ? kthread_data+0x4e/0xc0
[  184.381001][ T4292]  ? wq_worker_running+0x97/0x190
[  184.386129][ T4292]  worker_thread+0xa47/0x1200
[  184.390848][ T4292]  ? release_firmware_map_entry+0x186/0x186
[  184.396851][ T4292]  kthread+0x28d/0x320
[  184.400955][ T4292]  ? worker_clr_flags+0x190/0x190
[  184.406078][ T4292]  ? kthread_blkcg+0xd0/0xd0
[  184.410720][ T4292]  ret_from_fork+0x1f/0x30
[  184.415183][ T4292]  </TASK>
[  184.418283][ T4292] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  184.425669][ T4292] CPU: 0 PID: 4292 Comm: kworker/0:6 Not tainted 6.1.126-syzkaller #0
[  184.433866][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  184.443939][ T4292] Workqueue: events request_firmware_work_func
[  184.450128][ T4292] Call Trace:
[  184.453418][ T4292]  <TASK>
[  184.456357][ T4292]  dump_stack_lvl+0x1e3/0x2cb
[  184.461097][ T4292]  ? nf_tcp_handle_invalid+0x642/0x642
[  184.466591][ T4292]  ? panic+0x764/0x764
[  184.470754][ T4292]  ? 0xffffffffa0003b40
[  184.474903][ T4292]  ? vscnprintf+0x59/0x80
[  184.479234][ T4292]  panic+0x318/0x764
[  184.483139][ T4292]  ? __warn+0x169/0x520
[  184.487982][ T4292]  ? memcpy_page_flushcache+0xfc/0xfc
[  184.493352][ T4292]  ? ret_from_fork+0x1f/0x30
[  184.498051][ T4292]  __warn+0x348/0x520
[  184.502033][ T4292]  ? sysfs_remove_group+0x179/0x2a0
[  184.507248][ T4292]  report_bug+0x2af/0x500
[  184.511595][ T4292]  ? sysfs_remove_group+0x179/0x2a0
[  184.516836][ T4292]  handle_bug+0x3d/0x70
[  184.520989][ T4292]  exc_invalid_op+0x16/0x40
[  184.525536][ T4292]  asm_exc_invalid_op+0x16/0x20
[  184.530394][ T4292] RIP: 0010:sysfs_remove_group+0x179/0x2a0
[  184.536216][ T4292] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 4a a3 c7 ff 49 8b 14 24 48 c7 c7 e0 76 1c 8b 4c 89 f6 e8 27 2a 38 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 51 10 70 ff
[  184.555939][ T4292] RSP: 0018:ffffc90004357820 EFLAGS: 00010246
[  184.562035][ T4292] RAX: c9ed0083bd9d6700 RBX: ffff88801de8a038 RCX: ffff888024e8d940
[  184.570022][ T4292] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  184.577986][ T4292] RBP: dffffc0000000000 R08: ffffffff8152b84e R09: fffff5200086ae65
[  184.586141][ T4292] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801de8a008
[  184.594974][ T4292] R13: 1ffffffff1704670 R14: ffffffff8b823360 R15: ffff88805ef920e8
[  184.603774][ T4292]  ? __warn_printk+0x28e/0x350
[  184.608730][ T4292]  ? sysfs_unmerge_group+0x108/0x130
[  184.614051][ T4292]  device_del+0x2f1/0xbd0
[  184.618566][ T4292]  ? kill_device+0x160/0x160
[  184.623195][ T4292]  ? complete_all+0x29/0x1d0
[  184.627811][ T4292]  ? __fw_load_abort+0x88/0x190
[  184.632729][ T4292]  firmware_fallback_sysfs+0x686/0x940
[  184.638290][ T4292]  _request_firmware+0xcf0/0x12b0
[  184.643339][ T4292]  ? request_firmware+0x50/0x50
[  184.648207][ T4292]  request_firmware_work_func+0x126/0x270
[  184.654138][ T4292]  ? request_firmware_nowait+0x450/0x450
[  184.659980][ T4292]  ? do_raw_spin_unlock+0x137/0x8a0
[  184.665269][ T4292]  ? process_one_work+0x7a9/0x11d0
[  184.670564][ T4292]  process_one_work+0x8a9/0x11d0
[  184.675512][ T4292]  ? worker_detach_from_pool+0x260/0x260
[  184.681154][ T4292]  ? _raw_spin_lock_irqsave+0x120/0x120
[  184.686784][ T4292]  ? kthread_data+0x4e/0xc0
[  184.691376][ T4292]  ? wq_worker_running+0x97/0x190
[  184.696395][ T4292]  worker_thread+0xa47/0x1200
[  184.701072][ T4292]  ? release_firmware_map_entry+0x186/0x186
[  184.707082][ T4292]  kthread+0x28d/0x320
[  184.711146][ T4292]  ? worker_clr_flags+0x190/0x190
[  184.716166][ T4292]  ? kthread_blkcg+0xd0/0xd0
[  184.720941][ T4292]  ret_from_fork+0x1f/0x30
[  184.725552][ T4292]  </TASK>
[  184.728907][ T4292] Kernel Offset: disabled
[  184.733343][ T4292] Rebooting in 86400 seconds..