last executing test programs:

6m2.330929477s ago: executing program 32 (id=109):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in6=@loopback, 0xfffd, 0x1, 0x0, 0x0, 0xa}, {0x2, 0x6, 0x6, 0x0, 0x7, 0x4, 0x1}, {0x4000000005c, 0x7, 0xfffffffffffffff9, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d6, 0x32}, 0xa, @in6=@mcast2, 0xffffffde, 0x0, 0x2, 0x7f, 0x7}}, 0xe8)
sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x4004874)

5m53.332381182s ago: executing program 4 (id=157):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
readv(r1, &(0x7f0000001800)=[{&(0x7f0000000680)=""/42, 0x2a}], 0x1)

5m52.98522056s ago: executing program 4 (id=158):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0)

5m52.809726938s ago: executing program 4 (id=159):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001000010025bd7000fbdbdf2500000000", @ANYRES32=r0, @ANYBLOB="10080400030a000008003a"], 0x30}}, 0x4000014)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x24000000)

5m52.467745196s ago: executing program 4 (id=161):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6465636f6d706f73652c666f7263652c666f7263652c756d61736b3d30303030303030303030303030303030303030303031302c6e6c733d64656661756c742c00d4023937168c6a03faba6a3338c76bbb2cc123a1966858d8147d2c8f6696a3afb73a4233a7d6d17cbf793d9f3d5dc088fadadfdb7688c6a99fb22e09bb9b1fbe01fd94fae1e35f93fdbc2d26ac49430c71a16ad073e2416238a4b5f8c9877c553b2690fd7148fad9a9579680000d1a5caad58758c05f80c742dfc96510890d6ab62c3d6bc97ea00353e76f0f436500c88ef1b3ec52d6d1b6189c2c09e76160176ee4c21e9bcebdcac3565569f673575a04183f4095c2743d1547baa170a07fb5b39c0af610bbf13953ecb5e354858f41aa5b7bf2fbde", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$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")
chroot(&(0x7f0000000a40)='./file0\x00')
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0)

5m51.906401114s ago: executing program 4 (id=162):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
unshare(0x6020400)
fchown(r1, 0x0, 0x0)

5m51.287041666s ago: executing program 4 (id=168):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[], 0x0, 0x1a, 0x0, 0x1}, 0x28)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x212, @time={0x2000, 0xffffff}, 0x3, {0x1, 0xfc}})

5m50.952631182s ago: executing program 33 (id=168):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[], 0x0, 0x1a, 0x0, 0x1}, 0x28)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x212, @time={0x2000, 0xffffff}, 0x3, {0x1, 0xfc}})

5m24.575400896s ago: executing program 6 (id=377):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@multicast1, 0x200, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8000, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x3504, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0xc004004)
sendmmsg$inet6(r0, &(0x7f0000006e80)=[{{&(0x7f0000002080)={0xa, 0x4e1f, 0x2, @rand_addr=' \x01\x00', 0xd1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)="d5", 0x1}], 0x1}}], 0x1, 0x20002845)

5m24.274551432s ago: executing program 6 (id=381):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x11}, @TCA_PIE_ALPHA={0x8, 0x4, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x6048041}, 0x4000000)

5m23.817622675s ago: executing program 6 (id=385):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x106)
getdents64(r0, 0x0, 0x22)

5m23.463658633s ago: executing program 6 (id=387):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4421, &(0x7f0000004500)="$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")
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00')

5m22.286543803s ago: executing program 6 (id=393):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0xde5d, 0xffffffffffffffff, 0x8, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

5m19.56086725s ago: executing program 6 (id=413):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)

5m19.103666074s ago: executing program 34 (id=413):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)

4m40.540048584s ago: executing program 0 (id=637):
r0 = semget$private(0x0, 0x4, 0x2c1)
semtimedop(0x0, &(0x7f00000004c0)=[{0x2, 0xffff, 0x1000}], 0x1, 0x0)
r1 = semget(0x1, 0x3, 0x39c)
semop(r1, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1)
semop(r0, &(0x7f00000000c0)=[{0x1, 0xc, 0x1000}], 0x1)

4m39.41107568s ago: executing program 0 (id=639):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0)

4m39.138911825s ago: executing program 0 (id=642):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006900), 0x180, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x40000039})

4m38.887202017s ago: executing program 0 (id=645):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901)
mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, &(0x7f0000000200)={0x84, 0x70, 0x0, {r0}}, 0x20)

4m38.717646375s ago: executing program 0 (id=646):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x7, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}}], 0x1, 0x4000000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r2, 0x12, 0x80}, 0xc)

4m38.107025747s ago: executing program 0 (id=647):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]})
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24000001}, 0x800)
io_setup(0x7, &(0x7f0000000000)=<r0=>0x0)
syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_pgetevents(r0, 0x2, 0x0, 0x0, 0x0, 0x0)

4m37.211556682s ago: executing program 35 (id=647):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]})
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24000001}, 0x800)
io_setup(0x7, &(0x7f0000000000)=<r0=>0x0)
syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_pgetevents(r0, 0x2, 0x0, 0x0, 0x0, 0x0)

3m16.590936219s ago: executing program 5 (id=1107):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x200, 0x70bd2d, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xae, 0xfff, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d4, 0x3c}, 0x0, @in6=@empty, 0x0, 0x1, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41)

3m16.075097985s ago: executing program 5 (id=1110):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x2, 0x3, 0x0, 0x1}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, &(0x7f0000005280))

3m15.757981102s ago: executing program 5 (id=1112):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
listen(r0, 0xb0)

3m14.463245017s ago: executing program 5 (id=1121):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x12424d0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}})
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

3m13.139093924s ago: executing program 5 (id=1126):
openat$dir(0xffffffffffffff9c, &(0x7f0000006080)='./file0\x00', 0x40040, 0x2a)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}})
r1 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file1'}, 0xb)

3m12.062876688s ago: executing program 5 (id=1130):
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f0000000480)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@utf8no}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@fat=@umask={'umask', 0x3d, 0x1ffc000000}}, {@shortname_lower}, {@shortname_mixed}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@uni_xlate}, {@uni_xlate}, {@shortname_win95}, {@numtail}]}, 0x26, 0x358, &(0x7f00000008c0)="$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")
connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0)

3m11.087267047s ago: executing program 36 (id=1130):
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f0000000480)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@utf8no}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@fat=@umask={'umask', 0x3d, 0x1ffc000000}}, {@shortname_lower}, {@shortname_mixed}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@uni_xlate}, {@uni_xlate}, {@shortname_win95}, {@numtail}]}, 0x26, 0x358, &(0x7f00000008c0)="$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")
connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0)

1m50.30399703s ago: executing program 3 (id=1421):
set_mempolicy(0x4005, &(0x7f0000000180)=0x1004, 0x4)
r0 = userfaultfd(0x80801)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

1m49.10599606s ago: executing program 3 (id=1428):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0032006c00ae1ecebf96fccb8a69f4a8ea113bda4a1e87a726a9dcf01d4bf4543b835eb2b9e6066dc6b060d90b6ca4385a4244aa53e0a0acaebd0c1dd5d380385e85b29008b29f2fb4a93ebe5ace1c105e684d1fd61659e8decea319f675e039904905a8130e2f3c8d5c7a22b4487a331c727612ff1ddd6aabd0e4ab29212632a15e835fac77a7c827"], 0x1, 0x174, &(0x7f0000000240)="$eJzs281uElEYgOFvAH/iysSdcWfV+lMGCpou9VKadmwap2qsmzYu9Aq8Bq/M3oALb0BMR8BEGCaRyAnyPKsvvEzmsDjM2UwAm6vzPLLIYutyvnP95udbWeoVASsySnz/HyMgnfZF6hUAaXx7EXEREV+/fziI9tbM8/myf5z01r3Z/inidmfcs/vx4I8++hLVZ7/69tzrb0z7w7l9++7k/o/icTyJnehGHr3oj/vh9PrhkqcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZVFt2mvvALrXh5XBa92n6l6v3afrXquw19UNuvVb178KY8XLRMYI7Wkvu/3bD/Ow37H0jn9Oz81X5ZFu8MBoNhOqT+ZwL+tfz9ydv89Ox85/hk/6g4Kl4P+8Nne4PB3tNeXp3s88Xne2B9/X7op14JAAAAAAAAAPC3dqP+3RoAAOD/sorXiVL/RgAAAAAAAAAAAAAAWHc/AwAA//8c7qwa")
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e070502"], 0xa)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x16)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc9, 0x1ff}]}}}, 0x8)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0)

1m48.490604041s ago: executing program 3 (id=1429):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

1m47.590545206s ago: executing program 3 (id=1434):
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4040800)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x141000, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{}, 0x86, 0x48, 0x59})

1m47.263008263s ago: executing program 3 (id=1436):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000c00)='./bus\x00', 0x80020, 0x0, 0x1, 0x0, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
getdents64(r0, &(0x7f0000000ac0)=""/143, 0x8f)

1m46.378123017s ago: executing program 3 (id=1450):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363403eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28eb31b138b544ce3ec809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20)

1m31.135061546s ago: executing program 37 (id=1450):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363403eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28eb31b138b544ce3ec809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20)

6.555387559s ago: executing program 9 (id=1933):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffe}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)

5.582862169s ago: executing program 9 (id=1946):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x7f}, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1)
sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

4.924727801s ago: executing program 7 (id=1954):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x67)
r1 = accept4(r0, 0x0, 0x0, 0x800)
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RREAD(r3, &(0x7f0000000480)=ANY=[], 0xb)
splice(r2, 0x0, r1, 0x0, 0x9aa3, 0x1)

4.767586289s ago: executing program 1 (id=1956):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x5}, 0x94)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x4009, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

4.678000324s ago: executing program 7 (id=1957):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
rename(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0)
syz_open_procfs(0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x48)

4.490722294s ago: executing program 9 (id=1958):
syz_mount_image$exfat(&(0x7f0000002000), &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000002140)={[{@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@namecase}, {@namecase}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@errors_remount}, {@namecase}]}, 0x1, 0x1538, &(0x7f00000006c0)="$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")
socket$unix(0x1, 0x1, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1c0, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0xb25})
getdents(r0, &(0x7f0000001880)=""/4093, 0xffd)

4.490054984s ago: executing program 1 (id=1959):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f0000000280)=ANY=[@ANYBLOB='longad,iocharset=macinuit,anchor=00000000000000002311,adinicb,adinicb,iocharset=iso8859-7,mode=0000000000000000000\x00\x0010,mode=00000000000000000000177,gid=forget,novrs,iocharset=iso8859-15,iocharset=cp936,adinicb,\x00'], 0x1, 0xc4d, &(0x7f0000000f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xd5)
write$UHID_INPUT(r0, &(0x7f0000000bc0)={0x8, {"133cad2b41e25c31b17e3534903cc5205385b715b1be4a51b6c85b0eafd4865704ec743aaaa7d1d2f80e2b14e5c440d80e68d4a6785b1e42526a298995295b1a70157a9745df0345e18d4cd2c18f14a21a237ae7fcd97a0e73b61fe9ca148a05bf23effb0b15c193854261de9d1a753fdb0187e30ad3e467af7b3453b72745b4f8198d6c454662e6289dc67c15a86742e1e1a2a2c9784bf6520a4e421d2c8d5103f9f8272c5b7458742a5edc9c146cf69a14befe2afd0065f82cbb2a5ca552d0c080d97ebacfdf232a26964a55677186b627a355d4a99f870cae6336025ef63ef4e4dc6aa484ebcdecdd1b68567b4d0912623735dc3c32a899a06cf08b0743d8ef8028b338e4d5a21006205ae90701fc5766bbd285f05f6e9dd928350bf306e066e7fd60fcb3058ea0cb3d46380b33af32aa984581512835ca93d1ee95147f563ce302fcee9c80bb7a4608e2d4b9e37af227d94080517643f18695d2e9527cb5323f12a62ed5a13d14f52c30510c17f4f22b99182b6844abc8486ac109a16f7cf9c472078b95229b2ef1ee32041ef4e69f8bd08b4c8c7750e9b1b963dc160ec7a63b4795e341bdda260f40487a1dc12956b567a622058543ee675db4f26431995ad2c095e16e6274c15ebda2be0119249f3fee6ffe63ff189bca4b2cd0fbb1d347401fb58faac69aa74f67f2df3397c05ffaa7bf61740e3632ae0c5e4bdc634861c7a109a2e092ac2e02f6449444f9c73605ebca5af39bb3f5b70d3db3bb7d519631cfceb1a42ae8e5acacbdf443c9aaa6acd5996e57223cc8b69df00967164554c4945f7a460c55d327b38a91551a24bd6e5f20b50248bc5e2a2dbdc16f8ef6b79f531b22dd8227c127ba260faf73cf3be955c365782658066f03db04d7631be1676543bffd3a3db9f35d4f85497a7de5ce6beb63aad87505577b835b5f3965fb1a23156a50d258de36847af2f1b828ea2122436e5e50309146f90b5c0522814d46b072bbe4990a855045facf68a30c9be2b5cb69c6d511eff6b275c904b5113d2dac34b6614a27b6624660d5383e93b5e9e2e92edba118a4f691841e6d849bba5722d41bd5cc8361908aa873b8d3fe5c20c6cb06a3458bd9ea2d52eae615ba470f83a59a3916c5d98c0262a4254233783986a477512c369649e3ae1ceb81be8e82167a1d5a250f1ae41ef36b567129a88bfa719badefa6f63f183e92d52d0aa4e62197058ba458c37f8416c5c36be65d7272d90b814b1f00ea5dc51a158fd9b6384951776a07c72344b63ce7378695c679ace694e73305d18be2f364059fb661e7ca5a88e36552bb0d3a4f3c3fda2b8cd55aa366e093c4de74096ecd6ea7ea68fcc75018109c6425bd774a1773f915ace75edcdb008f6153f0114e9b3ee49dd10ee941608c610303dd28b794bdeb559d0eb8f8c02db234d96fc52377e4ffe4cefc7fc62aecb6c828e53e0ca1e097db5021fe44d9a019bbeabe457d0ca4522dd11cb6a83a691707ea978cec54040ab5fa367f82099952b28f25b9d35d56f8897398ef164e3eecd385fd3bc2e2b3abe0b9364278ee2c9057bd26426ad0cf9fd3f049949d522e591ea9ec84ac838b9c630f8fb07c8ba03f9a10d0bc37d2421401172c40237e356930ccaca75209e4c036858cd2b8a999a6cf7dc134bfa4fd7dda5a5bd8262da13d062c841673487f295d25c007805cd0a0c37ce9cafcbecb3592cae0f07c81e80755eb999b191d403de2d4bebf2cc93f69a2d429997c217b8fda7c122a1eda153e4955b040969815bcc96b3cf94ceb3901665b7e618417cd22e76fc12422489286916b5de9b714300ce905f040ee247b1d470f21f09b12c461e4210194ba2972ab9f0b30b814e5b0b1ee1086e8206e0f7b07fe9d0c55f0091648e2a66a36e453c00814d6858e0b9ce9ad7256821ef1f05791ca17825a2f664f6538db0a5d4dbbb0f1e748ceb622a4cefbf3b7159b4098ba3308d63f6f929945e47393344bb6a26619261332605c14768d3b9dd0b875aa6c0079af5bc43d8ba24eb89c06f012cea9c0b49cb5a0161526256655cc74d41c48334644c2a8487589cd4347580c0c0029634301008fbf29b292043cb9fbfecc08083f495eb52ead19f41b1d0f3796d0068de68a6680b3a811555428f8bf060d1a0fd537a3a59c38cc1db03696822f508bbd7395cd9ec3f1f8afbcc9658a03dc56650575ccb726bc1a75e6cd4158fec0e04305866b080e0cd90ecb80de6fbbb9d4fe8f1d7f5452ca4e82fcf9c748acd0127ee52754a112db5fb4569b9e2a6397879978d9f9fd720b80b8aaf21dad0aa7b87f760824233bc6419f873620e4fe67779ab02cc5db5b75d29f18aa604f05589fa4ca94c293749d4e3f1af3153ee40954f63ee0e690b6559ee9262ab31ff6617ef1feb5713d77e96b5b84fb14f51da32566e7f7068670b6e8176ffbf21fa22d3bf11fcaf04633e5d9995df4c4e3ad4b9b3933ff39d3d2d32bc9bf455f383068fdd4b4e79b6899efe39f81edd5b9d03da0844e1b4a0a7e31836cb12c4f266143144793ecabec24c595f2deb8b7f352cf1408a73e918c69f984c28fac46e6730b3142fea08ee9f7649eef33a6f90a976763b46d9e028d839ee75620f69eb885f9032aaecfb4176a0e94b9bff546b281ae366efd46ab6b6e35c3ce757abee7bde928f3f762910e2d7ff586a9eae0412828efc7a067a336e89caa63a11cf14956a90683ca6941ab8c0c63e22600cace5e80609e41d6eab39d8ae531e58429fa91a51268ccc36ef22ca0021040a849a50f4df24809800fa1a4c64fa4378f5862b0cd950dafb5ad292a3eb2dccf859733b75c6043c85e3a83df79c94d2c913f7a851364c24c656095e8486166678ffdd5e29c69768310abd8f33c3d9c3c87dee88779fe552004bb611fa457eac17ea02343a9765a8b5694f461ae93d93936c4c3f47c325709a7ce51b61b8c88ff49a745b27c13708b5d55bd971158b90c43dd90db9ef5493fd31fb63595f43b7e19b5a5c6a008d86152745050362c45f0567875030d6baa03cbe46f5d66e47f98da05c1c3134f2d68c319b7ca48f4db53ea43df02086bf44e0c6fb242c2ab76e37f8bac022ba795a049bd9475da8f5fdced49769e71ff45c59677fd8ffc3f3ccc84af8d91193f8a42c6c1e1fead58ac035d55544dc7cc69502da44a67e666d6db577357c92867453a7591089ffcdecb862fd49d8b57012ad88af2ae202eb9e44042cf2484da0aa2a233f616ea863287911baef336608e672cf54d22c25f98c297517cfb8bade0e54c278a2c1708bbc7e5b49d43517e9a96257c9cc8d93b47f0cdfd1a720e8fb56656427aa025e1e54bce5f81d8adaf51c85726c5efac7ab1d9a7e2fcaece7c22446489dd9de7b901a567cd3f17e8dae79bc50d3f9916e6280afda849ca45171612e995574e68e129742bdec079cdf5564dcef6ad111c693728814df5db4765bdd9935199f2502918cb6c823811a506555665546127a309944e5522a0cb25d5dffc8c7101e63252cab4b78a6c6c77ba0c36edd3d5ee60f3330197e39f7d7c3d8f6dd0f4648ce7124908f3cca1ca00d0ab32ae7b201d1502df04cb50fd331debf54301c33e8f3906609f696a3c61c99642d766102622b7ed967230dac1bd4129a997e73c96f2e91103cf51f0b32dc820ba8f9bf950b46ac9e58b4c7de7549fb1c262f45fff7c42a38873820c789f85725102ccb6d862e986484ddacb3464751626d5d802ffb82be917ed6186ca8428cdd1424820ebfd413fa3c32308f182c05f3473f15a01a047a9bf6241c26b3e46786e20bab7e60e6af46a28bdd32473f5e065e2aa24b344227423446c5fded0793caefcacb207cf88456496e42227feb2addfb7a9daa4b15ecf4f84a4cd98a4d9907fe3c771e05f4d17d1628fbd4c3080c6e774fa078ba03655cf87ebdac2a186e832de7a3fa6a74f92882d877e79a4f5a8664c7b6b0f96f7a462bbf215c79ca51c31bbd979c0cd8b79432c2418f7ce7b0920849d27f124cf0f9a9ad0852f0e850e92fac58b86fed850e8df26c4487d553065f5052c02f0b148946bba211a73aca1dc9aede70e20aafc88c9b55230fc7a9015f336c2cdc3e81b0ed96888bf6ac4037e53ca2625c117c4abaf3ede81553208b21d69d24c0306fd068878c04b42015bf55aef8e22dbdc8f9a8d605b347acdfcdfc56335580bef503f38873fabd22247a9bd096f135fbed44eca26680dad4d9b8013868a50ef8889eacc6424390fd99949a4c4e874bb9887da4c2cee98debbefa368791fc04841768bfd414f361925d613b66ba718a7096e7e50d5e1b5090643c1c52f1332f7d1675ef4afc0901eaa4affcba0dc93b2a08bf2b7dd93e1ec728519bd2cdb5ff31f562dfab790856e8887400e58731652180311317d6f03ab4b157b62ee29186e102258dbabc78e494d01621370264a17f2914d60bcb855375ea1e4de5e2b7648260a9bf133f2b4fa92bc677b045de485b07f8e3eb4294601936e9b658f61180fd21b93fda0f20b4a75ec984e17ba87b7cceb8852066015ebf3c3beeabaef0a657e64021d99d8fbbaed1effab7c3b974192379d1a04bba321e9491c81c008283f49d6c1af51f1ed357a1edec8347187922e2b4c0ed455a6f96f0e0d3bfec589bb6558e91b0e982cdf562a0f5d205f2d2a3dac9f49d066c32cfa8bb9beda1feb3b1b2cb2eab0b3b12e46b5406d7836e2ba3c35fe4316d6be42cc8901a9a6458ef182ef1097857637ba7df169e12f0c3bac0af1b9bdb704c1053470fc3a15e3134ca8e78bfd0b401189947ef3f5a295d16701994fdf5a246c84f1b34dde7f80bc42bc554c3f768354fb548f5cbe581ef901c16a37bf0a2bc12f03b34105a2f682b4944b195ec3e338cc0f256861f1165ff15fbbfabac2e86f617adbe19d7b1aaa39006157437420d3c18cd05eabd1c80fb561062eb86fcad5754a0212356d49ff805da01105a3c4266825679ce6a8e6ca4003f585008dd2471f3e2c3c489b81748d8f35b4c5cf1f97a8546468fdc921a0654affe549774312fadc36ef7393786b1c7a7de526887c38e673a348c22ded7eaa0f6af7d852bd60ffcac6c9c7f8c8266b44270263674fe698dc162dc5911a0027795d3c3d861e54f3aa205ae200ef557c2396effb0dee1de7dc482667e12d8a1dbb263860dec04a18cd55432209d48da2cf608effa0ea4316cef17feebb13335dcdaf0d2ad25770c7806e4d8899b7121957ef65ef508f9a49b644c29978b8489ab8a57c97cec78f84e18b88568b0a847013b796a6825131bd62ddef52c4c5329dca4dc213fbc958316370afbcd7471136c0fcf861ab23c56832b17d169352ceb000ebdfc62fe9c6b9d6c0cd2c48c0f59c5b97f225f3991dbc0cd67b5302233841781888ba25e40a8b6b124f22ecd4861fca4d1d7e2272fd0019dbe16bae2abafd541897eae22c9e212f8f2509ca562dc880d11949ca3ff2db1da88ffd387f5b55969135d7b80e4955a6e9512c8b1bd6667f62784ad5b3fdab1dba7e7b422d1a9228c2dfc061d01b187295060186cd69a64a6d10e81490ef90cd0ec3bc59ec8fc9d8cda3a4d65f2d109fcf9a26334905b64ddd4692a00a12edb8e94f7d95d4641c0a11ac1df31295cebab37ed77d8c05f08143a288d8e0502402d4812aec5c71860a6397f0cbeed52371b0bb6fd38007eef2168d399750c4adc1c02e07dbd049d3a0f7bc038d6c52c91c74b6200d150763fb1a4aa3a968b6d5df3f22bf42a7b254585651b50e63fa9898ee74f66ead5c39a3cf5bfc", 0x1000}}, 0x1006)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0)
read(r1, &(0x7f0000001400)=""/4096, 0x1000)

4.422777206s ago: executing program 7 (id=1960):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000)
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0xa20, 0x1114}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0x80bc}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)

4.037643106s ago: executing program 7 (id=1961):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

3.883480134s ago: executing program 8 (id=1962):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x10004004, &(0x7f0000000140)={0xa, 0x4e21, 0x765, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x905c3b80}, 0x1c)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0xfffffef8}, 0xdb2a}], 0x1, 0x40032060, 0x0)

3.811126548s ago: executing program 9 (id=1963):
fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x3, 0x374}, &(0x7f0000000100), &(0x7f0000000140), 0x0)
io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)

3.754335401s ago: executing program 1 (id=1964):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000)

3.730868682s ago: executing program 2 (id=1965):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f00000000c0)={[{@nombcache}, {@inlinecrypt}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x844d}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x46b, &(0x7f0000000b00)="$eJzs3M1vVFUbAPDn3s4AL/AyFfEDBK2isfGjpQWVhS40mrjQxEQXuKxtIchADa2JEKLVGFwaEvfGpYl/gStXRl2ZuNW9ISFKTEA3jrkz99LOMFOmMO1A5/dLLpwz98w958k953LmnBkCGFgj2R9JxPaI+DUiKo1sc4GRxl9XL5+b/vvyuekkarU3/0jq5a5cPjddFC3ety3PjKYR6adJXkmz+TNnT0xVq7On8/z4wsn3xufPnH36+MmpY7PHZk9NHj586ODEc89OPtOTOLM2Xdnz4dze3a++feH16SMX3vnxm6y99+5rnF8eRze2d1FmJAv8z1pd67nHVlPZHeDf2lKcSanfraFbQxGR3a5yffxXYiiWbl4lXvmkr40D1lT2zN7c+fRiDdjAkuh3C4D+KP6hzz7/Fsc6TT1uC5debHwAyuK+mh+NM6VI8zLlNax/JCKOLP7zZXZEyzpErc26AQDArfoum/88df38r7430ijywra8bCUihiPirojYGRF3R8SuiLgnL3tfRNy/yvpbt4aun3+mF282tm5k87/n872t5vlfMfuL4aE89/96/OXk6PHq7IGI2BERo1HenOUn2l28uMTLv3zeqf7l87/syOov5oL5RS6WWhboZqYWpno1Kb30ccSeUrv4k2s7AVlf2B0Re1Z36R1F4vgTX+/tVOjG8a+gB/tMta8iHm/c/8Voib+QrLw/Ob4lqrMHxotecb2ffj7/Rqf6byn+Hsju/9bm/t9SovJXsny/dn71dZz/7bOOnylLN9n/NyVv1fdgN+WvfTC1sHB6ImJT8lo93/T65NJ7i3xRPot/dP9S/BFL439n/p4s/gciIuvE+yLiwYh4KL93D0fEIxGxf4X4f3jp0Xc7nbsd7v9M2+fftf4/3Hz/V58YOvH9t53q7+75d6ieGs1fqT//bqBzc7bkJW62NwMAAMCdJ61/lz1Jx66l03RsrPF9+V2xNa3OzS88eXTu/VMzje+8D0c5LVa6KsvWQyeSxfyKjfxkvlZcnD+Yrxt/MfS/en5seq460+fYYdBt6zD+M78P9bt1wJq70T6a5wBsXK3jP+1TO4D15/faMLiMfxhc3Y7/Q2vcDmD9tRv/H7XkrQHCxmT+D4PL+IfBZfzD4DL+YSDdyu/61ypRWuHX++uWKK/4nwhInI30tmiGRJtEqQeju88PJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB75LwAA//+MOu7f")
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r1, 0xfffffffffffffffe, 0xff80)
close_range(r0, 0xffffffffffffffff, 0x0)

3.219068857s ago: executing program 8 (id=1966):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000000, &(0x7f0000000500)=ANY=[], 0x9, 0x221, &(0x7f00000001c0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20040a, &(0x7f00000001c0)={[{@grpjquota}, {@errors_continue}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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")
shmctl$IPC_INFO(0x0, 0x3, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)

3.184538349s ago: executing program 9 (id=1967):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, 0x0)

3.144032701s ago: executing program 2 (id=1968):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
write$tun(r0, &(0x7f0000002840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x69, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f"}}, 0x77)

2.845000896s ago: executing program 8 (id=1969):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e6576650000140002800500040001000000050008000100000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.471038755s ago: executing program 8 (id=1970):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000740)=ANY=[@ANYBLOB="12e01b3989dd1341"], 0x1000f)

2.418840068s ago: executing program 2 (id=1971):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10002, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000)
getdents64(r0, &(0x7f0000000240)=""/101, 0x65)

2.227421117s ago: executing program 7 (id=1972):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
close_range(r0, r1, 0x0)
fcntl$dupfd(r3, 0x0, r2)

2.18425485s ago: executing program 8 (id=1973):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

2.087156875s ago: executing program 2 (id=1974):
r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x8)
r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0)
pread64(r3, &(0x7f0000000100)=""/215, 0xd7, 0x42)

2.066423445s ago: executing program 9 (id=1975):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)

1.884785295s ago: executing program 7 (id=1976):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x1, 0x0, &(0x7f0000000040))
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000000)='./file0\x00')
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x204001, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)

1.854482376s ago: executing program 2 (id=1977):
r0 = gettid()
timer_create(0x9, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0)
keyctl$reject(0x13, 0x0, 0x100, 0x202, 0x0)

1.217263508s ago: executing program 1 (id=1978):
fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x3, 0x374}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)

930.110793ms ago: executing program 1 (id=1979):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x336)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local})
close(0x3)

735.015313ms ago: executing program 2 (id=1980):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = io_uring_setup(0x1a8, &(0x7f00000000c0)={0x0, 0x20fca0, 0x0, 0x2000003, 0x122f})
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x13, &(0x7f0000001bc0), 0x2)

491.747455ms ago: executing program 1 (id=1981):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="de21c43da8e7c71cce9560332140fb6091cdd9177355fad834d9a3fa08a8772cc95d42120f5476962a26a6a9548741d2dc04ecb717bc23bd95419620bcd434c104011eb7f4b8ca25e4e3aa742fe8936a65c618dfb3bdf526eb51f1315a6f2b4aefc4f05ae81ab0cdb05b546566337ea6a6f9fe107b13"], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x12)

0s ago: executing program 8 (id=1982):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150)

kernel console output (not intermixed with test programs):

peed USB device number 6 using dummy_hcd
[  278.158727][ T4681] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  278.200678][ T4681] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.235003][ T4681] usb 9-1: Product: syz
[  278.249325][ T4681] usb 9-1: Manufacturer: syz
[  278.262848][ T4681] usb 9-1: SerialNumber: syz
[  278.298535][ T4681] usb 9-1: config 0 descriptor??
[  278.518323][ T4681] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  279.150696][ T4283] Bluetooth: hci0: command 0x040f tx timeout
[  279.158822][ T4681] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71
[  279.199459][ T4681] usb 9-1: USB disconnect, device number 6
[  279.540059][ T7330] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  279.564993][ T7873] team0 (unregistering): Port device team_slave_1 removed
[  279.753315][ T7873] team0 (unregistering): Port device team_slave_0 removed
[  279.767803][ T7330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.805430][ T7330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.817702][ T7330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  279.833492][ T7330] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  279.865287][ T7330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.882919][ T7330] usb 4-1: config 0 descriptor??
[  279.939708][ T8358] loop8: detected capacity change from 0 to 2048
[  279.986827][ T7873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  280.064691][ T8358] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  280.203543][ T8359] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  280.249294][   T26] audit: type=1800 audit(1776997517.952:36): pid=8358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1163" name="file2" dev="loop8" ino=16 res=0 errno=0
[  280.286600][ T7873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  280.307618][ T8358] NILFS error (device loop8): nilfs_lookup: deleted inode referenced: 12
[  280.334343][ T7330] kovaplus 0003:1E7D:2D50.0014: unknown main item tag 0x0
[  280.360624][ T7330] kovaplus 0003:1E7D:2D50.0014: unknown main item tag 0x0
[  280.369087][ T7330] kovaplus 0003:1E7D:2D50.0014: unknown main item tag 0x0
[  280.380411][ T8358] Remounting filesystem read-only
[  280.429042][ T7330] kovaplus 0003:1E7D:2D50.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0
[  280.526623][ T4681] usb 4-1: USB disconnect, device number 17
[  280.754483][ T6545] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer
[  280.909678][ T8363] fido_id[8363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  281.230953][ T4283] Bluetooth: hci0: command 0x0419 tx timeout
[  282.258677][ T7873] bond0 (unregistering): Released all slaves
[  282.365594][ T8391] loop8: detected capacity change from 0 to 128
[  282.429690][ T8391] FAT-fs (loop8): bogus number of FAT structure
[  282.500250][ T8391] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; no bootstrapping code
[  282.560278][ T8391] FAT-fs (loop8): Can't find a valid FAT filesystem
[  282.789694][ T8272] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.955974][ T8272] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.010554][ T8272] device bridge_slave_0 entered promiscuous mode
[  283.027265][ T8272] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.035600][ T8272] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.045199][ T8272] device bridge_slave_1 entered promiscuous mode
[  283.283913][ T8272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  283.396966][ T8272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  283.789278][ T8272] team0: Port device team_slave_0 added
[  283.887548][ T8418] input: syz1 as /devices/virtual/input/input10
[  283.903905][ T8272] team0: Port device team_slave_1 added
[  283.932282][ T8418] input: failed to attach handler leds to device input10, error: -6
[  284.113664][ T8272] batman_adv: batadv0: Adding interface: batadv_slave_0
[  284.185828][ T8272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.212131][    C0] vkms_vblank_simulate: vblank timer overrun
[  284.340466][ T8272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  284.431150][ T8272] batman_adv: batadv0: Adding interface: batadv_slave_1
[  284.438257][ T8272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.464432][    C0] vkms_vblank_simulate: vblank timer overrun
[  284.553841][ T8430] loop3: detected capacity change from 0 to 64
[  284.643630][ T8430] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  284.680185][ T8272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  284.847401][ T8430] MINIX-fs warning: remounting unchecked fs, running fsck is recommended
[  284.910969][ T8272] device hsr_slave_0 entered promiscuous mode
[  284.978327][ T8272] device hsr_slave_1 entered promiscuous mode
[  285.001596][ T8442] MINIX-fs warning: remounting unchecked fs, running fsck is recommended
[  285.029849][ T8272] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  285.056611][ T8272] Cannot create hsr debugfs directory
[  285.106413][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'.
[  285.944035][ T8458] loop8: detected capacity change from 0 to 764
[  286.055874][ T8272] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  286.099231][ T8272] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  286.200738][ T8272] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  286.282131][ T8272] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  286.407163][ T8467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1195'.
[  286.671768][ T8470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1195'.
[  287.278489][ T8272] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.310660][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1204'.
[  287.330882][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  287.345984][ T8492] "syz.2.1205" (8492) uses obsolete ecb(arc4) skcipher
[  287.365607][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  287.379725][ T8272] 8021q: adding VLAN 0 to HW filter on device team0
[  287.402378][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  287.416872][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  287.435467][ T7879] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.442758][ T7879] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.467343][ T4681] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  287.490174][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  287.507033][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  287.517415][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  287.533771][ T7879] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.541107][ T7879] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.566205][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  287.592739][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  287.602669][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  287.630829][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  287.658277][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  287.671518][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  287.698327][ T4681] usb 4-1: Using ep0 maxpacket: 32
[  287.712855][ T4681] usb 4-1: config 0 has no interfaces?
[  287.732028][ T4681] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  287.742285][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  287.758108][ T4681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.772475][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  287.798535][ T4681] usb 4-1: Product: syz
[  287.809191][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  287.830396][ T4681] usb 4-1: Manufacturer: syz
[  287.845018][ T4681] usb 4-1: SerialNumber: syz
[  287.856096][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  287.882971][ T4681] usb 4-1: config 0 descriptor??
[  287.905311][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  287.967209][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  288.525504][ T8508] device geneve2 entered promiscuous mode
[  289.274754][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  289.296900][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  289.346928][ T8272] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.368602][   T27] usb 4-1: USB disconnect, device number 18
[  291.655444][ T8545] loop7: detected capacity change from 0 to 131072
[  291.891258][ T8545] XFS (loop7): Mounting V5 Filesystem
[  292.057259][ T8545] XFS (loop7): Starting recovery (logdev: internal)
[  292.110575][ T8545] XFS (loop7): Ending recovery (logdev: internal)
[  292.119386][ T8545] XFS (loop7): Quotacheck needed: Please wait.
[  292.270301][ T8545] XFS (loop7): Quotacheck: Done.
[  292.681352][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  292.690790][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  292.783381][ T5649] XFS (loop7): Unmounting Filesystem
[  292.806349][ T8272] device veth0_vlan entered promiscuous mode
[  292.870701][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  292.896667][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  292.948257][ T8272] device veth1_vlan entered promiscuous mode
[  292.996106][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  293.021678][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  293.050949][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  293.090359][ T7330] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  293.157193][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  293.172107][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  293.213223][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  293.263287][ T8272] device veth0_macvtap entered promiscuous mode
[  293.304307][ T7330] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  293.330225][ T7330] usb 9-1: config 0 has no interface number 0
[  293.331009][ T8272] device veth1_macvtap entered promiscuous mode
[  293.353659][ T7330] usb 9-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  293.408085][ T7330] usb 9-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.460024][ T7330] usb 9-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  293.479523][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.491912][ T7330] usb 9-1: config 0 interface 1 has no altsetting 0
[  293.499612][ T7330] usb 9-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  293.528451][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.573829][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.586667][ T7330] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.604930][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.635344][ T7330] usb 9-1: config 0 descriptor??
[  293.665583][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.685118][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.698973][ T8272] batman_adv: batadv0: Interface activated: batadv_slave_0
[  294.349773][ T7330] uclogic 0003:145F:0212.0015: pen parameters not found
[  294.379133][ T7330] uclogic 0003:145F:0212.0015: interface is invalid, ignoring
[  294.420024][ T7330] usb 9-1: USB disconnect, device number 7
[  294.630921][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  294.680479][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  294.721095][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  294.749162][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  294.787784][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.821152][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.862285][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.882918][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.893224][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.929796][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.959858][ T8272] batman_adv: batadv0: Interface activated: batadv_slave_1
[  295.021614][ T7856] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  295.043083][ T7856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  295.089459][ T8272] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.110407][ T8272] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.119185][ T8272] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.168823][ T8272] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.582110][ T7856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.640284][ T7856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.763701][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  295.815042][ T7845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.870683][ T7845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.933198][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  298.506001][ T8633] loop3: detected capacity change from 0 to 512
[  298.900525][ T4283] Bluetooth: hci2: command 0x0406 tx timeout
[  299.688317][ T8648] device syzkaller1 entered promiscuous mode
[  300.138404][ T8662] loop7: detected capacity change from 0 to 128
[  300.345139][   T26] audit: type=1800 audit(1776997538.052:37): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1250" name="file2" dev="loop7" ino=1048666 res=0 errno=0
[  300.367734][ T8662] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100)
[  300.400557][ T8662] FAT-fs (loop7): Filesystem has been set read-only
[  300.419506][ T8662] syz.7.1250: attempt to access beyond end of device
[  300.419506][ T8662] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  300.468168][ T8662] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100)
[  300.510177][ T8662] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100)
[  300.546552][ T8662] syz.7.1250: attempt to access beyond end of device
[  300.546552][ T8662] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128
[  300.652687][ T8662] syz.7.1250: attempt to access beyond end of device
[  300.652687][ T8662] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128
[  300.807708][ T8662] syz.7.1250: attempt to access beyond end of device
[  300.807708][ T8662] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128
[  300.951736][ T8662] syz.7.1250: attempt to access beyond end of device
[  300.951736][ T8662] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128
[  301.479168][ T8685] loop7: detected capacity change from 0 to 64
[  302.042006][ T8692] device netdevsim0 entered promiscuous mode
[  302.092153][ T8692] device batadv_slave_1 entered promiscuous mode
[  302.136012][ T7856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr2: link becomes ready
[  302.217352][ T8664] loop9: detected capacity change from 0 to 40427
[  302.316599][ T8664] F2FS-fs (loop9): invalid crc value
[  302.382213][ T8664] F2FS-fs (loop9): Found nat_bits in checkpoint
[  302.521095][ T8697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1261'.
[  302.680370][ T8664] F2FS-fs (loop9): Start checkpoint disabled!
[  302.779173][ T8664] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  303.180706][ T8705] loop7: detected capacity change from 0 to 2048
[  303.219024][ T8705] EXT4-fs: Ignoring removed i_version option
[  303.252404][ T8664] syz.9.1252: attempt to access beyond end of device
[  303.252404][ T8664] loop9: rw=2049, sector=49152, nr_sectors = 8 limit=40427
[  303.348619][ T8705] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  303.370580][ T8705] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  303.732401][ T5649] EXT4-fs (loop7): unmounting filesystem.
[  303.871734][ T7879] kworker/u4:24: attempt to access beyond end of device
[  303.871734][ T7879] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  305.152318][ T8727] device vlan2 entered promiscuous mode
[  305.198678][ T8727] device bond0 entered promiscuous mode
[  305.228754][ T8727] device bond_slave_0 entered promiscuous mode
[  305.275174][ T8727] device bond_slave_1 entered promiscuous mode
[  305.551105][ T8721] loop7: detected capacity change from 0 to 32768
[  305.780458][ T8721] XFS (loop7): Mounting V5 Filesystem
[  306.140781][ T8721] XFS (loop7): Ending clean mount
[  307.180758][ T5649] XFS (loop7): Unmounting Filesystem
[  307.820411][ T4316] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  308.104121][ T4316] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  308.148301][ T4316] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  308.235200][ T4316] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  308.270358][ T4316] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  308.306247][ T4316] usb 10-1: SerialNumber: syz
[  308.655885][ T4316] usb 10-1: 0:2 : does not exist
[  308.769302][ T4316] usb 10-1: USB disconnect, device number 2
[  308.907439][ T8781] loop3: detected capacity change from 0 to 512
[  309.025232][ T8781] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  309.097352][ T8781] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  309.127352][ T8781] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  309.140676][ T4283] Bluetooth: hci3: command 0x0406 tx timeout
[  309.173573][ T4410] udevd[4410]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  309.222889][ T7332] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  309.360589][   T26] audit: type=1800 audit(1776997547.072:38): pid=8781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1278" name="file2" dev="loop3" ino=16 res=0 errno=0
[  309.471249][ T7332] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  309.520435][ T7332] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  309.567945][ T7332] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  309.652364][ T7332] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.766745][ T4267] EXT4-fs (loop3): unmounting filesystem.
[  310.017440][ T7332] usb 9-1: usb_control_msg returned -32
[  310.024720][ T7332] usbtmc 9-1:16.0: can't read capabilities
[  310.669397][ T4682] usb 9-1: USB disconnect, device number 8
[  311.962270][ T8789] loop7: detected capacity change from 0 to 32768
[  312.074124][ T8789] XFS (loop7): Mounting V5 Filesystem
[  312.167343][ T8789] XFS (loop7): Ending clean mount
[  312.208768][ T8789] XFS (loop7): Quotacheck needed: Please wait.
[  312.386419][ T8789] XFS (loop7): Quotacheck: Done.
[  312.530487][   T26] audit: type=1800 audit(1776997550.242:39): pid=8789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1281" name="file1" dev="loop7" ino=6150 res=0 errno=0
[  312.809512][ T5649] XFS (loop7): Unmounting Filesystem
[  313.062566][ T8794] loop9: detected capacity change from 0 to 32768
[  316.163262][ T8838] loop9: detected capacity change from 0 to 40427
[  316.285961][ T8838] F2FS-fs (loop9): build fault injection attr: rate: 14, type: 0x3ffff
[  316.338862][ T8838] F2FS-fs (loop9): build fault injection attr: rate: 0, type: 0xe4
[  316.426340][ T8838] F2FS-fs (loop9): invalid crc value
[  316.489487][ T8838] F2FS-fs (loop9): Found nat_bits in checkpoint
[  316.777458][ T8838] F2FS-fs (loop9) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20
[  316.990922][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1297'.
[  317.307471][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  317.313972][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  317.493850][ T8871] xt_hashlimit: size too large, truncated to 1048576
[  318.277946][ T8878] overlayfs: failed to clone upperpath
[  318.921884][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1304'.
[  320.992696][ T8883] loop8: detected capacity change from 0 to 32768
[  321.148349][   T26] audit: type=1800 audit(1776997558.852:40): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1303" name="file1" dev="loop8" ino=4 res=0 errno=0
[  321.209975][ T4315] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  321.429279][ T4315] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  321.494145][ T4315] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  321.586730][ T4315] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  321.639795][ T4315] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  321.732190][ T4315] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  321.797078][ T4315] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  321.850109][ T4315] usb 10-1: Product: syz
[  321.854497][ T4315] usb 10-1: SerialNumber: syz
[  321.891530][ T8910] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  322.137592][ T8910] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  322.190308][ T8910] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  322.878061][ T8910] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  322.890357][ T8910] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  323.139383][ T4315] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42
[  323.148597][ T4315] cdc_ncm 10-1:1.0: setting tx_max = 184
[  323.246268][ T4315] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  323.397082][ T4315] usb 10-1: USB disconnect, device number 3
[  323.411730][ T4315] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP)
[  324.500319][ T4316] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  324.706003][ T4316] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  324.740777][ T4316] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.813515][ T4316] usb 10-1: config 0 descriptor??
[  324.871427][ T4316] cp210x 10-1:0.0: cp210x converter detected
[  325.275199][ T4316] cp210x 10-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  325.391106][ T4316] usb 10-1: cp210x converter now attached to ttyUSB0
[  325.588906][ T4316] usb 10-1: USB disconnect, device number 4
[  325.809798][ T4316] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  326.037739][ T4316] cp210x 10-1:0.0: device disconnected
[  328.286778][ T9014] sctp: [Deprecated]: syz.9.1334 (pid 9014) Use of int in max_burst socket option.
[  328.286778][ T9014] Use struct sctp_assoc_value instead
[  328.938469][ T9025] loop3: detected capacity change from 0 to 2048
[  329.065803][ T9025] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  329.862077][ T9035] loop9: detected capacity change from 0 to 2048
[  330.000358][ T9035] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  330.644113][ T9051] loop8: detected capacity change from 0 to 256
[  330.756318][ T9053] loop7: detected capacity change from 0 to 512
[  330.774017][ T9051] exfat: Deprecated parameter 'namecase'
[  330.816190][ T9051] exfat: Deprecated parameter 'utf8'
[  330.926663][ T9051] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  330.966217][ T9053] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.1346: missing EA_INODE flag
[  331.049071][ T9053] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1346: error while reading EA inode 12 err=-117
[  331.180168][ T9053] EXT4-fs (loop7): 1 orphan inode deleted
[  331.185992][ T9053] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  331.823972][ T9070] loop8: detected capacity change from 0 to 64
[  331.837977][ T5649] EXT4-fs (loop7): unmounting filesystem.
[  332.491492][ T9072] loop9: detected capacity change from 0 to 4096
[  332.596308][ T9072] ntfs3: loop9: ntfs_set_state r=3 failed, -22.
[  333.102935][ T7845] ntfs3: loop9: ntfs3_write_inode r=3 failed, -22.
[  333.156120][ T8272] ntfs3: loop9: ntfs_set_state r=3 failed, -22.
[  333.167478][ T8272] ntfs3: loop9: Mark volume as dirty due to NTFS errors
[  333.228319][ T8272] ntfs3: loop9: ntfs_set_state r=3 failed, -22.
[  333.279651][ T7879] ntfs3: loop9: ntfs3_write_inode r=3 failed, -22.
[  333.287277][ T8272] ntfs3: loop9: ntfs_evict_inode r=3 failed, -22.
[  333.738695][ T9097] loop3: detected capacity change from 0 to 2048
[  333.842627][ T9097] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  333.973283][ T9097] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  334.409661][ T4267] EXT4-fs (loop3): unmounting filesystem.
[  334.514514][ T9114] loop9: detected capacity change from 0 to 64
[  334.678451][ T9114] hfs: keylen 1794 too large
[  334.729426][ T9114] hfs: keylen 1794 too large
[  334.857955][ T9125] loop7: detected capacity change from 0 to 128
[  336.698678][ T9141] loop8: detected capacity change from 0 to 256
[  336.897756][ T9141] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  337.118463][   T26] audit: type=1800 audit(1776997574.822:41): pid=9141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1372" name="file1" dev="loop8" ino=1048673 res=0 errno=0
[  337.745864][ T9132] loop3: detected capacity change from 0 to 32768
[  338.015983][ T9132] XFS (loop3): Mounting V5 Filesystem
[  338.143355][ T9132] XFS (loop3): Ending clean mount
[  338.223442][ T9150] loop8: detected capacity change from 0 to 4096
[  338.572045][ T4267] XFS (loop3): Unmounting Filesystem
[  341.759449][ T9208] loop9: detected capacity change from 0 to 128
[  341.922210][ T9208] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  342.009543][ T9208] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  342.112817][ T9208] EXT4-fs (loop9): shut down requested (0)
[  342.439217][ T9182] loop7: detected capacity change from 0 to 32768
[  342.590544][ T8272] EXT4-fs (loop9): unmounting filesystem.
[  343.282208][ T9231] loop9: detected capacity change from 0 to 4096
[  343.436182][ T9237] loop7: detected capacity change from 0 to 512
[  343.576330][ T9237] EXT4-fs (loop7): 1 truncate cleaned up
[  343.635221][ T9237] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  343.675306][ T9239] loop3: detected capacity change from 0 to 2048
[  343.783177][ T9239] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  343.930118][ T9243] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  344.119741][   T26] audit: type=1800 audit(1776997581.822:42): pid=9239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1392" name="file2" dev="loop3" ino=16 res=0 errno=0
[  344.185334][ T9239] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12
[  344.257383][ T9239] Remounting filesystem read-only
[  344.420675][ T5649] EXT4-fs (loop7): unmounting filesystem.
[  344.746079][ T9221] loop8: detected capacity change from 0 to 32768
[  344.932267][   T26] audit: type=1800 audit(1776997582.642:43): pid=9221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1389" name="file2" dev="loop8" ino=5 res=0 errno=0
[  345.370902][ T9221] ERROR: (device loop8): dbAlloc: the hint is outside the map
[  345.370902][ T9221] 
[  345.476236][ T4267] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  345.490605][ T9259] input: syz0 as /devices/virtual/input/input11
[  345.580213][ T9221] ERROR: (device loop8): remounting filesystem as read-only
[  345.589059][ T9221] ialloc: diAlloc returned -5!
[  347.206309][ T9285] device syzkaller1 entered promiscuous mode
[  347.281512][ T9286] ceph: No mds server is up or the cluster is laggy
[  348.808824][ T9315] loop9: detected capacity change from 0 to 2048
[  348.972870][ T9315] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  349.070293][ T9319] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  349.170346][   T26] audit: type=1800 audit(1776997586.872:44): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1408" name="file2" dev="loop9" ino=16 res=0 errno=0
[  349.197783][ T9322] NILFS error (device loop9): nilfs_lookup: deleted inode referenced: 12
[  349.223320][ T9298] loop7: detected capacity change from 0 to 32768
[  349.362848][ T9328] overlayfs: failed to clone lowerpath
[  349.513746][ T9322] Remounting filesystem read-only
[  349.605162][ T9298] XFS (loop7): Mounting V5 Filesystem
[  349.781181][ T9298] XFS (loop7): Ending clean mount
[  350.253563][ T8272] NILFS (loop9): disposed unprocessed dirty file(s) when detaching log writer
[  350.348632][ T5649] XFS (loop7): Unmounting Filesystem
[  350.553132][ T9341] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1415'.
[  350.584360][ T9341] device xfrm1 entered promiscuous mode
[  350.591538][ T9341] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1415'.
[  350.637213][ T9311] loop3: detected capacity change from 0 to 32768
[  350.927652][   T26] audit: type=1800 audit(1776997588.632:45): pid=9311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1409" name="file2" dev="loop3" ino=5 res=0 errno=0
[  350.962346][ T9311] ERROR: (device loop3): dbAlloc: the hint is outside the map
[  350.962346][ T9311] 
[  351.040439][ T9311] ERROR: (device loop3): remounting filesystem as read-only
[  351.136849][ T9346] device bond1 entered promiscuous mode
[  351.147817][ T9311] ialloc: diAlloc returned -5!
[  351.237901][ T9346] 8021q: adding VLAN 0 to HW filter on device bond1
[  351.301091][ T9348] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  351.469125][ T9348] 8021q: adding VLAN 0 to HW filter on device bond1
[  351.499369][ T4316] libceph: connect (1)[c::]:6789 error -101
[  351.511074][ T4316] libceph: mon0 (1)[c::]:6789 connect error
[  351.528175][ T9353] ceph: No mds server is up or the cluster is laggy
[  351.537905][ T4316] libceph: connect (1)[c::]:6789 error -101
[  351.545248][ T4316] libceph: mon0 (1)[c::]:6789 connect error
[  351.553606][ T9348] device lo entered promiscuous mode
[  351.595855][ T9348] bond1: (slave lo): Enslaving as an active interface with an up link
[  351.756233][ T9348] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  351.950346][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  352.699296][ T9373] loop7: detected capacity change from 0 to 128
[  352.824473][ T9373] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  352.841993][ T9375] loop3: detected capacity change from 0 to 128
[  352.898258][ T9373] hpfs: filesystem error: improperly stopped
[  352.940112][ T9373] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  352.990103][ T9373] hpfs: You really don't want any checks? You are crazy...
[  353.025788][ T9373] hpfs: Code page index out of array
[  353.038956][ T4276] Bluetooth: hci1: hcon ffff888078536000 sent 1 < count 511
[  353.063283][ T9373] hpfs: code page support is disabled
[  353.081984][ T9373] hpfs: hpfs_map_4sectors(): unaligned read
[  353.165805][ T9373] hpfs: hpfs_map_4sectors(): unaligned read
[  353.215683][ T9373] hpfs: filesystem error: unable to find root dir
[  353.951381][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1430'.
[  354.071794][ T9388] device xfrm1 entered promiscuous mode
[  354.102647][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1430'.
[  354.194915][ T4316] libceph: connect (1)[c::]:6789 error -101
[  354.220768][ T4316] libceph: mon0 (1)[c::]:6789 connect error
[  354.273793][ T9390] ceph: No mds server is up or the cluster is laggy
[  354.292473][ T4316] libceph: connect (1)[c::]:6789 error -101
[  354.299984][ T4316] libceph: mon0 (1)[c::]:6789 connect error
[  354.734541][ T9403] loop3: detected capacity change from 0 to 1024
[  354.820220][ T9403] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  355.050550][ T9403] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  355.158499][ T9411] loop7: detected capacity change from 0 to 512
[  355.534813][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  355.703665][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  355.950424][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  356.011609][ T9393] loop9: detected capacity change from 0 to 32768
[  356.060184][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  356.164674][   T26] audit: type=1800 audit(1776997593.872:46): pid=9393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1432" name="file2" dev="loop9" ino=5 res=0 errno=0
[  356.257834][ T9393] ERROR: (device loop9): dbAlloc: the hint is outside the map
[  356.257834][ T9393] 
[  356.319147][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  356.360256][ T9393] ERROR: (device loop9): remounting filesystem as read-only
[  356.397976][ T9393] ialloc: diAlloc returned -5!
[  356.400726][ T9386] loop8: detected capacity change from 0 to 40427
[  356.418297][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  356.536990][ T9386] F2FS-fs (loop8): invalid crc value
[  356.594917][ T9386] F2FS-fs (loop8): Found nat_bits in checkpoint
[  356.644948][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  356.772551][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  357.022618][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  357.153135][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  357.175751][ T9386] F2FS-fs (loop8): Start checkpoint disabled!
[  357.401632][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  357.491139][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  357.649177][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  357.762875][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  357.928266][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  358.036122][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  358.133748][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  358.183095][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  358.286909][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  359.178918][ T9448] loop8: detected capacity change from 0 to 256
[  359.344565][ T9448] FAT-fs (loop8): Directory bread(block 64) failed
[  359.390372][ T9448] FAT-fs (loop8): Directory bread(block 65) failed
[  359.398502][ T9448] FAT-fs (loop8): Directory bread(block 66) failed
[  359.480622][ T9448] FAT-fs (loop8): Directory bread(block 67) failed
[  359.510409][ T9448] FAT-fs (loop8): Directory bread(block 68) failed
[  359.518332][ T9448] FAT-fs (loop8): Directory bread(block 69) failed
[  359.590922][ T9448] FAT-fs (loop8): Directory bread(block 70) failed
[  359.599242][ T9448] FAT-fs (loop8): Directory bread(block 71) failed
[  359.643353][ T9448] FAT-fs (loop8): Directory bread(block 72) failed
[  359.690342][ T9448] FAT-fs (loop8): Directory bread(block 73) failed
[  360.072298][ T4267] EXT4-fs: 15 callbacks suppressed
[  360.072318][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  360.245963][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  360.391961][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  360.507276][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  360.615120][ T4267] EXT4-fs error: 18 callbacks suppressed
[  360.615138][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  360.744119][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  360.769693][ T9457] loop9: detected capacity change from 0 to 256
[  360.894274][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1447'.
[  360.958526][ T9457] FAT-fs (loop9): Directory bread(block 64) failed
[  360.978197][ T9463] device xfrm1 entered promiscuous mode
[  360.982063][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  361.011459][ T9457] FAT-fs (loop9): Directory bread(block 65) failed
[  361.018210][ T9457] FAT-fs (loop9): Directory bread(block 66) failed
[  361.021284][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1447'.
[  361.065946][ T9457] FAT-fs (loop9): Directory bread(block 67) failed
[  361.124716][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  361.132626][ T9457] FAT-fs (loop9): Directory bread(block 68) failed
[  361.175858][ T9457] FAT-fs (loop9): Directory bread(block 69) failed
[  361.193245][ T9457] FAT-fs (loop9): Directory bread(block 70) failed
[  361.268066][ T9457] FAT-fs (loop9): Directory bread(block 71) failed
[  361.295436][ T9457] FAT-fs (loop9): Directory bread(block 72) failed
[  361.308716][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  361.348009][ T9457] FAT-fs (loop9): Directory bread(block 73) failed
[  361.431621][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  361.905991][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  362.119401][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  362.219679][ T9478] loop7: detected capacity change from 0 to 512
[  362.283778][ T9478] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  362.337485][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  362.365108][ T9478] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  362.423446][ T9478] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  362.507878][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  362.707275][ T9492] loop9: detected capacity change from 0 to 512
[  362.762895][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  362.783266][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  362.816404][ T9492] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  362.891934][ T9492] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.1459: iget: bad i_size value: 38620345925642
[  363.018136][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  363.045056][ T9492] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.1459: couldn't read orphan inode 15 (err -117)
[  363.114721][ T5649] EXT4-fs (loop7): unmounting filesystem.
[  363.154608][ T9492] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  363.282858][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  363.345245][ T9490] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.1459: bg 0: block 5: invalid block bitmap
[  363.506260][ T9492] EXT4-fs (loop9): shut down requested (0)
[  363.652087][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  363.770985][ T8272] EXT4-fs (loop9): unmounting filesystem.
[  363.974677][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  364.113694][ T9508] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1465'.
[  364.668341][ T9511] device syzkaller1 entered promiscuous mode
[  365.133516][ T4267] EXT4-fs: 9 callbacks suppressed
[  365.133537][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  365.390084][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  365.596532][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  365.770150][ T4267] EXT4-fs error: 8 callbacks suppressed
[  365.770170][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  365.860300][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  366.007367][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  366.065353][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  366.174501][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  366.203128][ T9527] loop8: detected capacity change from 0 to 128
[  366.217622][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  366.257218][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  366.282185][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  366.295435][ T9527] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  366.305123][ T9527] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  366.332987][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  366.352041][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  366.387625][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  366.413789][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  366.530317][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  366.559332][ T6545] EXT4-fs (loop8): unmounting filesystem.
[  366.637802][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  366.739852][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  366.927114][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  367.128228][ T4267] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  368.880510][ T9555] loop9: detected capacity change from 0 to 512
[  368.960362][ T9555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  369.029845][ T9561] loop8: detected capacity change from 0 to 128
[  369.095742][ T9555] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  369.167853][ T9555] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  369.179528][ T9561] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  369.714900][ T8272] EXT4-fs (loop9): unmounting filesystem.
[  370.154190][ T4895] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  370.298726][ T4267] EXT4-fs: 30 callbacks suppressed
[  370.298747][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  370.600154][ T4267] EXT4-fs (loop3): Remounting filesystem read-only
[  370.654552][ T9586] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  371.001173][ T4283] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  371.013294][ T4283] CPU: 1 PID: 4283 Comm: kworker/u5:7 Not tainted syzkaller #0
[  371.020900][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  371.031013][ T4283] Workqueue: hci0 hci_rx_work
[  371.035747][ T4283] Call Trace:
[  371.039074][ T4283]  <TASK>
[  371.042064][ T4283]  dump_stack_lvl+0x188/0x24e
[  371.046820][ T4283]  ? show_regs_print_info+0x12/0x12
[  371.052078][ T4283]  ? load_image+0x400/0x400
[  371.056667][ T4283]  sysfs_create_dir_ns+0x26a/0x290
[  371.061924][ T4283]  ? sysfs_warn_dup+0xa0/0xa0
[  371.066679][ T4283]  ? do_raw_spin_unlock+0x11d/0x230
[  371.071938][ T4283]  kobject_add_internal+0x61c/0xcc0
[  371.077295][ T4283]  kobject_add+0x160/0x230
[  371.081918][ T4283]  ? kobject_init+0x1d0/0x1d0
[  371.086837][ T4283]  ? klist_children_get+0x50/0x50
[  371.091913][ T4283]  ? get_device_parent+0x121/0x3f0
[  371.097083][ T4283]  device_add+0x483/0xfb0
[  371.101630][ T4283]  ? kmem_cache_free+0xf7/0x290
[  371.106712][ T4283]  hci_conn_add_sysfs+0xd1/0x1e0
[  371.111715][ T4283]  le_conn_complete_evt+0x1062/0x1670
[  371.117424][ T4283]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[  371.123733][ T4283]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  371.129439][ T4283]  ? skb_pull_data+0xf7/0x200
[  371.134168][ T4283]  hci_le_conn_complete_evt+0x183/0x440
[  371.139829][ T4283]  ? hci_remote_host_features_evt+0x270/0x270
[  371.146049][ T4283]  hci_event_packet+0x7b9/0x1280
[  371.151065][ T4283]  ? bis_list+0x280/0x280
[  371.155459][ T4283]  ? kcov_remote_start+0x27/0x7e0
[  371.160544][ T4283]  ? hci_send_to_monitor+0x9c/0x4a0
[  371.165891][ T4283]  hci_rx_work+0x3eb/0xd40
[  371.170358][ T4283]  ? _raw_spin_unlock+0x40/0x40
[  371.175373][ T4283]  ? process_one_work+0x7b0/0x1160
[  371.180621][ T4283]  process_one_work+0x8a2/0x1160
[  371.185723][ T4283]  ? worker_detach_from_pool+0x240/0x240
[  371.191508][ T4283]  ? _raw_spin_lock_irq+0xb7/0xf0
[  371.196585][ T4283]  ? _raw_spin_lock_irqsave+0x100/0x100
[  371.202267][ T4283]  ? kthread_data+0x4b/0xc0
[  371.206841][ T4283]  worker_thread+0xaa2/0x1270
[  371.211594][ T4283]  ? __kthread_parkme+0x162/0x1c0
[  371.216703][ T4283]  kthread+0x29d/0x330
[  371.220822][ T4283]  ? worker_clr_flags+0x1a0/0x1a0
[  371.225907][ T4283]  ? kthread_blkcg+0xd0/0xd0
[  371.230541][ T4283]  ret_from_fork+0x1f/0x30
[  371.235036][ T4283]  </TASK>
[  371.289651][ T4283] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  371.303374][ T4283] Bluetooth: hci0: failed to register connection device
[  372.015022][ T9610] loop7: detected capacity change from 0 to 128
[  372.100484][ T9610] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  372.917503][ T6059] EXT4-fs (loop3): unmounting filesystem.
[  373.180935][ T7854] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  373.235578][ T7845] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.532065][ T4276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  373.587405][ T4276] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  373.605856][ T4276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  373.614626][ T4276] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  373.627555][ T4276] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  373.635394][ T4276] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  373.670418][ T7845] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.699503][ T9606] loop8: detected capacity change from 0 to 32768
[  373.777592][ T9606] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.1495 (9606)
[  373.845580][ T9606] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  373.913866][ T9606] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[  373.950441][ T7845] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.974900][ T9606] BTRFS info (device loop8): using free space tree
[  374.148046][ T7845] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.235655][ T9606] BTRFS info (device loop8): enabling ssd optimizations
[  374.349355][   T26] audit: type=1800 audit(1776997612.052:47): pid=9606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1495" name="file1" dev="loop8" ino=260 res=0 errno=0
[  374.791999][ T6545] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  375.003817][ T9619] chnl_net:caif_netlink_parms(): no params data found
[  375.492909][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.507558][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.516694][ T9619] device bridge_slave_0 entered promiscuous mode
[  375.537429][ T9619] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.558270][ T9619] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.566962][ T9619] device bridge_slave_1 entered promiscuous mode
[  375.700471][ T4283] Bluetooth: hci1: command 0x0409 tx timeout
[  375.755733][ T9619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.799201][ T9619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.859058][ T9619] team0: Port device team_slave_0 added
[  375.869398][ T9619] team0: Port device team_slave_1 added
[  376.002451][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_0
[  376.011003][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.049243][ T9619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  376.101076][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_1
[  376.109304][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.142138][ T9619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  376.263134][ T9619] device hsr_slave_0 entered promiscuous mode
[  376.283702][ T9619] device hsr_slave_1 entered promiscuous mode
[  376.297560][ T9619] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  376.306247][ T9619] Cannot create hsr debugfs directory
[  377.202847][ T7845] device hsr_slave_0 left promiscuous mode
[  377.240668][ T7845] device hsr_slave_1 left promiscuous mode
[  377.271323][ T7845] device veth1_macvtap left promiscuous mode
[  377.277548][ T7845] device veth0_macvtap left promiscuous mode
[  377.285985][ T7845] device veth1_vlan left promiscuous mode
[  377.292149][ T7845] device veth0_vlan left promiscuous mode
[  377.460139][ T4283] Bluetooth: hci0: command 0x0406 tx timeout
[  377.783589][ T4276] Bluetooth: hci1: command 0x041b tx timeout
[  378.707411][ T7845] bond0 (unregistering): Released all slaves
[  378.755308][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.762362][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  379.444776][ T9619] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  379.471443][ T9619] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  379.493089][ T9619] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  379.519402][ T9619] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  379.643479][ T9619] 8021q: adding VLAN 0 to HW filter on device bond0
[  379.665210][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  379.675505][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  379.686995][ T9619] 8021q: adding VLAN 0 to HW filter on device team0
[  379.698623][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  379.708970][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  379.717777][ T4895] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.725037][ T4895] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.752563][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  379.770669][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  379.787215][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  379.796578][ T4895] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.803924][ T4895] bridge0: port 2(bridge_slave_1) entered forwarding state
[  379.818100][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  379.827525][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  379.840051][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  379.851559][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  379.860126][ T4276] Bluetooth: hci1: command 0x040f tx timeout
[  379.869438][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  379.888902][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  379.898093][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  379.915337][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  379.924000][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  379.937103][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  379.946511][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  379.959031][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  380.272778][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  380.284193][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  380.304356][ T9619] 8021q: adding VLAN 0 to HW filter on device batadv0
[  380.327615][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  380.338235][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  380.370856][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  380.379169][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  380.390617][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  380.399585][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  380.409736][ T9619] device veth0_vlan entered promiscuous mode
[  380.437655][ T9619] device veth1_vlan entered promiscuous mode
[  380.479541][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  380.488451][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  380.500079][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  380.508820][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  380.523092][ T9619] device veth0_macvtap entered promiscuous mode
[  380.539783][ T9619] device veth1_macvtap entered promiscuous mode
[  380.562660][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.574008][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.585160][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.596344][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.606435][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.616933][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.626938][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.637720][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.649015][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_0
[  380.662203][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  380.678904][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.689076][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  380.700237][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.710150][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  380.720815][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.730934][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  380.741608][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.752677][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_1
[  380.760698][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  380.770532][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  380.778744][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  380.788650][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  380.798363][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  380.807492][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  380.821211][ T9619] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.830757][ T9619] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.839500][ T9619] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.850010][ T9619] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.939439][ T7887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.954035][ T7887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.962228][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  380.992202][ T7879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.001586][ T7879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.010203][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  381.249517][ T9695] loop8: detected capacity change from 0 to 2048
[  381.345636][ T9702] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  381.427305][   T26] audit: type=1800 audit(1776997619.132:48): pid=9695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1508" name="file1" dev="loop8" ino=15 res=0 errno=0
[  381.733395][ T9702] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  381.760410][ T9702] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4)
[  381.790039][ T9702] Remounting filesystem read-only
[  381.801341][ T6545] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer
[  381.940197][ T4283] Bluetooth: hci1: command 0x0419 tx timeout
[  382.439377][ T9719] loop1: detected capacity change from 0 to 512
[  382.481573][ T9719] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  382.612479][ T9719] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  382.649146][ T9719] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  382.721234][ T9731] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  383.082506][ T9741] loop8: detected capacity change from 0 to 512
[  383.152512][ T9741] EXT4-fs (loop8): 1 truncate cleaned up
[  383.160742][ T9741] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  383.187449][ T9619] EXT4-fs (loop1): unmounting filesystem.
[  383.199171][ T9741] overlayfs: upper fs needs to support d_type.
[  383.517163][ T9751] loop1: detected capacity change from 0 to 512
[  383.585176][ T9751] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  383.597326][ T6545] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[  383.636782][ T6545] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[  383.686795][ T9751] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  383.702609][ T6545] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[  383.736064][ T9759] device hsr0 entered promiscuous mode
[  383.752591][ T6545] EXT4-fs (loop8): unmounting filesystem.
[  383.765908][ T9759] device macsec1 entered promiscuous mode
[  383.788327][ T9751] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #11: comm syz.1.1512: corrupted inode contents
[  383.845252][ T9751] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #11: comm syz.1.1512: mark_inode_dirty error
[  383.870891][ T9751] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1512: invalid indirect mapped block 1 (level 1)
[  383.925822][ T9751] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #11: comm syz.1.1512: corrupted inode contents
[  383.978932][ T9751] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  384.008000][ T9751] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #11: comm syz.1.1512: corrupted inode contents
[  384.037317][ T9751] EXT4-fs error (device loop1): ext4_truncate:4325: inode #11: comm syz.1.1512: mark_inode_dirty error
[  384.077107][ T9751] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  384.112786][ T9751] EXT4-fs (loop1): 1 truncate cleaned up
[  384.147012][ T9751] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  384.481192][ T9619] EXT4-fs (loop1): unmounting filesystem.
[  384.493975][ T9780] loop9: detected capacity change from 0 to 512
[  384.643343][ T9775] loop8: detected capacity change from 0 to 8192
[  384.668095][ T9780] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  384.725904][ T9775] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  384.795725][ T9780] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  384.810171][ T9775] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal
[  384.838649][ T9775] REISERFS (device loop8): using ordered data mode
[  384.869983][ T9775] reiserfs: using flush barriers
[  384.891215][ T9775] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  384.930012][ T4675] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  384.980583][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  384.991145][ T9775] REISERFS (device loop8): checking transaction log (loop8)
[  385.010651][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  385.018284][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  385.089790][ T9791] device bridge_slave_0 left promiscuous mode
[  385.127929][ T9791] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.143604][ T4675] usb 8-1: config 0 has no interfaces?
[  385.149298][ T4675] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  385.189133][ T4675] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.227858][ T4675] usb 8-1: config 0 descriptor??
[  385.293032][ T9775] REISERFS (device loop8): Using tea hash to sort names
[  385.297490][ T8272] EXT4-fs (loop9): unmounting filesystem.
[  385.308542][ T9791] device bridge_slave_1 left promiscuous mode
[  385.345359][ T9791] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.353335][ T9775] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage.
[  385.388289][ T9791] bond0: (slave bond_slave_0): Releasing backup interface
[  385.488969][ T9791] device bond_slave_0 left promiscuous mode
[  385.586373][ T7345] usb 8-1: USB disconnect, device number 9
[  385.644548][   T26] audit: type=1800 audit(1776997623.352:49): pid=9775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1521" name="file1" dev="loop8" ino=4 res=0 errno=0
[  385.810993][ T9791] team0: Port device team_slave_0 removed
[  385.893436][ T9791] team0: Port device team_slave_1 removed
[  385.925496][ T9791] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  385.957907][ T9791] batman_adv: batadv0: Removing interface: batadv_slave_0
[  385.993896][ T9791] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  386.030054][ T9791] batman_adv: batadv0: Removing interface: batadv_slave_1
[  386.077241][ T9791] device hsr0 left promiscuous mode
[  386.303871][ T9808] loop9: detected capacity change from 0 to 512
[  386.335730][ T9790] loop1: detected capacity change from 0 to 40427
[  386.386454][ T9808] EXT4-fs (loop9): 1 truncate cleaned up
[  386.445225][ T9808] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  386.476359][ T9790] F2FS-fs (loop1): invalid crc value
[  386.513293][ T9790] F2FS-fs (loop1): Found nat_bits in checkpoint
[  386.620757][ T9808] overlayfs: upper fs needs to support d_type.
[  386.713554][ T9790] F2FS-fs (loop1): Start checkpoint disabled!
[  386.774085][ T9790] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  386.856855][ T8272] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[  386.931600][ T8272] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[  386.990789][ T8272] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[  387.041026][ T8272] EXT4-fs (loop9): unmounting filesystem.
[  387.219393][ T7854] kworker/u4:14: attempt to access beyond end of device
[  387.219393][ T7854] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  388.361620][ T9849] loop8: detected capacity change from 0 to 512
[  388.389011][ T9847] loop1: detected capacity change from 0 to 2048
[  388.494493][ T9849] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  388.512626][ T9847] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  388.588460][ T9849] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  388.972673][ T6545] EXT4-fs (loop8): unmounting filesystem.
[  389.330255][ T9864] loop9: detected capacity change from 0 to 40427
[  389.382483][ T9864] F2FS-fs (loop9): build fault injection attr: rate: 14, type: 0x3ffff
[  389.392921][ T9864] F2FS-fs (loop9): build fault injection attr: rate: 0, type: 0xe4
[  389.440121][ T9864] F2FS-fs (loop9): invalid crc value
[  389.467658][ T9864] F2FS-fs (loop9): Found nat_bits in checkpoint
[  389.502433][ T9864] F2FS-fs (loop9) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20
[  389.563344][ T9864] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  389.692150][ T9864] F2FS-fs (loop9) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6eb/0x1b10
[  389.744717][ T9864] F2FS-fs (loop9) : inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x123/0xbd0
[  389.912120][ T8272] syz-executor: attempt to access beyond end of device
[  389.912120][ T8272] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  390.200090][ T4315] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  390.293378][ T9888] loop7: detected capacity change from 0 to 1024
[  390.421858][ T4315] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  390.452526][ T4315] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  390.483817][ T9893] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1551'.
[  390.504877][ T4315] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  390.544643][ T4315] usb 2-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7
[  390.593111][ T4315] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  390.630062][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.679472][ T9883] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  390.827062][ T9898] tls_set_device_offload: netdev not found
[  390.922811][ T9883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  390.950992][ T9883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.002667][ T4315] usbhid 2-1:2.0: can't add hid device: -71
[  391.014535][ T4315] usbhid: probe of 2-1:2.0 failed with error -71
[  391.042121][ T4315] usb 2-1: USB disconnect, device number 2
[  391.308109][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  391.359188][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  391.401078][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  391.459682][ T9907] device bridge_slave_0 left promiscuous mode
[  391.502793][ T9907] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.554840][ T9907] device bridge_slave_1 left promiscuous mode
[  391.574062][ T9907] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.611666][ T9907] bond0: (slave bond_slave_0): Releasing backup interface
[  391.639976][ T4315] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  391.640931][ T9907] device bond_slave_0 left promiscuous mode
[  391.690514][ T9907] bond0: (slave bond_slave_1): Releasing backup interface
[  391.721515][ T9907] device bond_slave_1 left promiscuous mode
[  391.840124][ T4315] usb 2-1: Using ep0 maxpacket: 32
[  391.848580][ T4315] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  391.897120][ T4315] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  391.911982][ T9907] team0: Port device team_slave_0 removed
[  391.936840][ T4315] usb 2-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7
[  391.990014][ T4315] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  391.990540][ T9907] team0: Port device team_slave_1 removed
[  392.039997][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.084048][ T9901] loop7: detected capacity change from 0 to 32768
[  392.093388][ T9907] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  392.179767][ T9907] batman_adv: batadv0: Removing interface: batadv_slave_0
[  392.202899][   T26] audit: type=1800 audit(1776997629.902:50): pid=9901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1554" name="file1" dev="loop7" ino=4 res=0 errno=0
[  392.490713][ T4315] hid-thrustmaster 0003:044F:B65D.0016: unknown main item tag 0x0
[  392.508677][ T4315] hid-thrustmaster 0003:044F:B65D.0016: unknown main item tag 0x0
[  392.561124][ T4315] hid-thrustmaster 0003:044F:B65D.0016: unknown main item tag 0x0
[  392.601424][ T4315] hid-thrustmaster 0003:044F:B65D.0016: unknown main item tag 0x0
[  392.609393][ T4315] hid-thrustmaster 0003:044F:B65D.0016: unknown main item tag 0x0
[  392.625966][ T9907] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  392.627147][ T9901] read_mapping_page failed!
[  392.650124][ T9907] batman_adv: batadv0: Removing interface: batadv_slave_1
[  392.665594][ T9907] device hsr0 left promiscuous mode
[  392.720978][ T4315] hid-thrustmaster 0003:044F:B65D.0016: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0
[  392.774295][ T4315] hid-thrustmaster 0003:044F:B65D.0016: setup data couldn't be sent
[  392.818888][    C0] hid-thrustmaster 0003:044F:B65D.0016: URB to get model id failed with error -71
[  392.856380][ T4315] usb 2-1: USB disconnect, device number 3
[  393.139490][ T9933] loop9: detected capacity change from 0 to 512
[  393.189730][ T9931] fido_id[9931]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  393.250838][ T9933] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  393.329241][ T9933] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  393.380514][ T9933] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  393.440622][ T9946] netlink: 172 bytes leftover after parsing attributes in process `syz.8.1568'.
[  393.957777][ T8272] EXT4-fs (loop9): unmounting filesystem.
[  395.770161][ T7330] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  395.962045][ T7330] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  396.000595][ T7330] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  396.044169][ T7330] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  396.113295][ T7330] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  396.155389][ T7330] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.180339][ T4276] Bluetooth: hci0: command 0x0406 tx timeout
[  396.200393][ T7330] usb 9-1: config 0 descriptor??
[  396.642716][ T7330] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving
[  396.675127][ T7330] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  397.230252][T10038] loop7: detected capacity change from 0 to 4096
[  397.274118][T10038] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  397.313259][T10038] NILFS (loop7): mounting unchecked fs
[  397.413084][T10038] NILFS (loop7): recovery complete
[  397.458575][T10042] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  398.021486][T10052] device bond1 entered promiscuous mode
[  398.027461][T10052] 8021q: adding VLAN 0 to HW filter on device bond1
[  398.102858][T10056] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  398.172926][T10056] 8021q: adding VLAN 0 to HW filter on device bond1
[  398.234330][T10056] device lo entered promiscuous mode
[  398.254500][T10056] bond1: (slave lo): Enslaving as an active interface with an up link
[  398.294938][T10056] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  398.344187][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  398.749823][ T7345] usb 9-1: USB disconnect, device number 9
[  398.906514][T10075] loop9: detected capacity change from 0 to 16
[  398.938279][T10075] erofs: (device loop9): erofs_init_device: empty device tag @ pos 0
[  399.831907][T10081] loop8: detected capacity change from 0 to 131072
[  399.863534][T10081] F2FS-fs (loop8): Invalid log sectorsize (67108873)
[  399.870411][T10081] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  399.880154][T10081] F2FS-fs (loop8): invalid crc value
[  400.027087][T10081] F2FS-fs (loop8): Found nat_bits in checkpoint
[  400.097274][T10081] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  400.104541][T10081] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  401.522535][T10121] device syzkaller1 entered promiscuous mode
[  402.581709][T10110] loop9: detected capacity change from 0 to 32768
[  402.681308][T10137] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  402.737178][T10110] XFS (loop9): Mounting V5 Filesystem
[  402.768454][T10110] XFS (loop9): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  402.866077][T10137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  402.887407][T10110] XFS (loop9): Starting recovery (logdev: internal)
[  402.900539][T10137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  402.926624][T10110] XFS (loop9): Ending recovery (logdev: internal)
[  402.974392][T10137] device bridge_slave_0 left promiscuous mode
[  403.034931][T10137] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.101431][T10110] XFS (loop9): Metadata corruption detected at xfs_btree_lookup_get_block+0x447/0x650, xfs_bnobt block 0x8
[  403.120119][T10110] XFS (loop9): Unmount and run xfs_repair
[  403.132000][T10137] device bridge_slave_1 left promiscuous mode
[  403.194070][T10137] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.217568][T10110] XFS (loop9): Internal error ltbno + ltlen > bno at line 1955 of file fs/xfs/libxfs/xfs_alloc.c.  Caller xfs_free_ag_extent+0xe67/0x1340
[  403.233392][T10110] CPU: 1 PID: 10110 Comm: syz.9.1617 Not tainted syzkaller #0
[  403.240922][T10110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  403.251009][T10110] Call Trace:
[  403.254297][T10110]  <TASK>
[  403.257230][T10110]  dump_stack_lvl+0x188/0x24e
[  403.261922][T10110]  ? __xfs_printk+0x90/0x90
[  403.266520][T10110]  ? show_regs_print_info+0x12/0x12
[  403.271747][T10110]  ? xfs_alloc_get_rec+0x286/0x570
[  403.276955][T10110]  xfs_corruption_error+0x11e/0x170
[  403.282261][T10110]  ? xfs_free_ag_extent+0xe67/0x1340
[  403.287575][T10110]  xfs_free_ag_extent+0xea1/0x1340
[  403.292713][T10110]  ? xfs_free_ag_extent+0xe67/0x1340
[  403.298147][T10110]  ? xfs_free_agfl_block+0x340/0x340
[  403.303461][T10110]  ? xfs_defer_finish_noroll+0xd46/0x1e60
[  403.309289][T10110]  ? xfs_free_file_space+0x4c7/0xaa0
[  403.314628][T10110]  ? xfs_collapse_file_space+0x259/0x670
[  403.320279][T10110]  ? xfs_file_fallocate+0x4a5/0xbf0
[  403.325533][T10110]  ? __x64_sys_fallocate+0xbd/0x100
[  403.330750][T10110]  ? do_syscall_64+0x4c/0xa0
[  403.335356][T10110]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  403.341534][T10110]  __xfs_free_extent+0x243/0x3b0
[  403.346687][T10110]  xfs_trans_free_extent+0x3e3/0x8b0
[  403.352055][T10110]  ? xfs_efi_item_free+0xb0/0xb0
[  403.357010][T10110]  ? slab_pre_alloc_hook+0x59/0x310
[  403.362230][T10110]  ? xfs_trans_add_item+0x16f/0x330
[  403.367459][T10110]  xfs_extent_free_finish_item+0x2e/0x90
[  403.373314][T10110]  ? xfs_extent_free_create_done+0x150/0x150
[  403.379571][T10110]  xfs_defer_finish_noroll+0xf4d/0x1e60
[  403.385321][T10110]  ? __xfs_trans_commit+0x267/0xe00
[  403.390728][T10110]  ? xfs_da3_node_add+0xb00/0xb00
[  403.396046][T10110]  __xfs_trans_commit+0x267/0xe00
[  403.401135][T10110]  ? xfs_trans_reserve_quota_nblks+0x14e/0x2b0
[  403.407316][T10110]  ? xfs_trans_commit+0x20/0x20
[  403.412279][T10110]  ? xfs_trans_alloc_inode+0x196/0x340
[  403.417827][T10110]  ? xfs_bunmapi+0x5e/0xd0
[  403.422504][T10110]  xfs_free_file_space+0x4c7/0xaa0
[  403.427795][T10110]  ? xfs_flush_unmap_range+0xd0/0xd0
[  403.433129][T10110]  ? xfs_vn_update_time+0x337/0x520
[  403.438356][T10110]  ? xfs_vn_fiemap+0x100/0x100
[  403.443331][T10110]  ? current_time+0x196/0x2b0
[  403.448043][T10110]  xfs_collapse_file_space+0x259/0x670
[  403.453553][T10110]  ? xfs_free_file_space+0xaa0/0xaa0
[  403.458854][T10110]  ? file_modified_flags+0x390/0x440
[  403.464701][T10110]  ? file_modified+0x20/0x20
[  403.469397][T10110]  ? truncate_pagecache_range+0x83/0xb0
[  403.475003][T10110]  xfs_file_fallocate+0x4a5/0xbf0
[  403.480059][T10110]  ? xfs_file_fsync+0xa50/0xa50
[  403.485018][T10110]  ? rcu_read_lock_any_held+0xb0/0x130
[  403.490582][T10110]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  403.495883][T10110]  ? common_file_perm+0x171/0x1c0
[  403.501046][T10110]  vfs_fallocate+0x584/0x6f0
[  403.505662][T10110]  __x64_sys_fallocate+0xbd/0x100
[  403.510711][T10110]  do_syscall_64+0x4c/0xa0
[  403.515154][T10110]  ? clear_bhb_loop+0x60/0xb0
[  403.519948][T10110]  ? clear_bhb_loop+0x60/0xb0
[  403.524733][T10110]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  403.530644][T10110] RIP: 0033:0x7f141d59cdd9
[  403.535087][T10110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  403.554983][T10110] RSP: 002b:00007f141e465028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  403.563422][T10110] RAX: ffffffffffffffda RBX: 00007f141d815fa0 RCX: 00007f141d59cdd9
[  403.571417][T10110] RDX: 0000000000004000 RSI: 0000000000000008 RDI: 0000000000000004
[  403.579398][T10110] RBP: 00007f141d632d69 R08: 0000000000000000 R09: 0000000000000000
[  403.587562][T10110] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000
[  403.595552][T10110] R13: 00007f141d816038 R14: 00007f141d815fa0 R15: 00007fffee320d68
[  403.603554][T10110]  </TASK>
[  403.672445][T10137] bond0: (slave bond_slave_0): Releasing backup interface
[  403.694553][T10110] XFS (loop9): Corruption detected. Unmount and run xfs_repair
[  403.826670][T10110] XFS (loop9): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1798/0x1e60 (fs/xfs/libxfs/xfs_defer.c:580).  Shutting down filesystem.
[  403.917591][T10137] bond0: (slave bond_slave_1): Releasing backup interface
[  403.929644][T10110] XFS (loop9): Please unmount the filesystem and rectify the problem(s)
[  404.224661][T10137] team0: Port device team_slave_0 removed
[  404.316521][T10137] team0: Port device team_slave_1 removed
[  404.353333][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  404.378373][T10137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  404.420781][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  404.466472][T10137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  404.973921][T10188] loop8: detected capacity change from 0 to 128
[  405.118983][T10191] syz.8.1634: attempt to access beyond end of device
[  405.118983][T10191] loop8: rw=2049, sector=145, nr_sectors = 296 limit=128
[  405.210980][ T8272] XFS (loop9): Unmounting Filesystem
[  405.828816][T10209] netlink: 'syz.1.1641': attribute type 4 has an invalid length.
[  406.026882][T10214] loop7: detected capacity change from 0 to 256
[  406.155262][T10214] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d)
[  406.333620][T10216] loop1: detected capacity change from 0 to 256
[  407.689998][ T4315] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  407.940044][ T7335] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  407.949968][ T4315] usb 8-1: Using ep0 maxpacket: 8
[  408.042512][ T4315] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  408.056081][ T4315] usb 8-1: config 179 has no interface number 0
[  408.069658][ T4315] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  408.081213][ T4315] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  408.092890][ T4315] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  408.104843][ T4315] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  408.118042][ T4315] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  408.131496][ T7335] usb 10-1: Using ep0 maxpacket: 32
[  408.131929][ T4315] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  408.146314][ T4315] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.146938][ T7335] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  408.157703][T10245] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  408.256574][ T7335] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  408.283974][ T7335] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  408.330023][ T7335] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.378247][ T7335] usb 10-1: config 0 descriptor??
[  408.388457][ T7335] hub 10-1:0.0: USB hub found
[  408.500119][ T4316] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  408.578692][ T4315] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input12
[  408.599148][ T7335] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  408.716635][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  408.760206][ T4316] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  408.822551][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.860794][ T4316] usb 2-1: config 0 descriptor??
[  408.873145][ T4315] usb 8-1: USB disconnect, device number 10
[  408.873216][    C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  408.873259][    C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  408.937796][ T4315] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  409.004890][ T7335] hid-generic 0003:046D:C31C.0018: item fetching failed at offset 0/1
[  409.035036][ T7335] hid-generic: probe of 0003:046D:C31C.0018 failed with error -22
[  409.083786][ T4316] usbhid 2-1:0.0: can't add hid device: -71
[  409.094170][ T4316] usbhid: probe of 2-1:0.0 failed with error -71
[  409.126427][ T4316] usb 2-1: USB disconnect, device number 4
[  409.563952][ T4315] usb 10-1: reset high-speed USB device number 5 using dummy_hcd
[  410.257237][T10281] loop8: detected capacity change from 0 to 131072
[  410.274311][T10281] F2FS-fs (loop8): invalid crc value
[  410.313976][T10281] F2FS-fs (loop8): Found nat_bits in checkpoint
[  410.327647][ T4315] usbhid 10-1:0.0: reset_resume error -71
[  410.357503][T10281] F2FS-fs (loop8): Cannot turn on quotas: -2 on 2
[  410.379644][T10281] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  410.403741][ T4315] usb 10-1: USB disconnect, device number 5
[  410.560044][ T4316] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  410.760207][ T4316] usb 2-1: Using ep0 maxpacket: 8
[  410.777352][ T4316] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  410.828056][ T4316] usb 2-1: config 0 has no interface number 0
[  410.838217][ T4316] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  410.877757][ T4316] usb 2-1: config 0 interface 52 has no altsetting 0
[  410.895763][ T4316] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  410.939733][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.982693][ T4316] usb 2-1: config 0 descriptor??
[  411.113936][T10310] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  411.140041][ T4316] usb 2-1: Can not set alternate setting to 1, error: -71
[  411.149377][ T4316] synaptics_usb: probe of 2-1:0.52 failed with error -71
[  411.173221][ T4316] usb 2-1: USB disconnect, device number 5
[  411.213623][T10308] bond1: (slave lo): Releasing backup interface
[  411.276612][T10308] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  411.323000][T10308] device lo left promiscuous mode
[  411.364419][T10308] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  411.400120][T10308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  411.430342][T10308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  411.457261][T10308] device bridge_slave_0 left promiscuous mode
[  411.473395][T10308] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.544243][T10308] device bridge_slave_1 left promiscuous mode
[  411.566447][T10308] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.621076][T10308] bond0: (slave bond_slave_0): Releasing backup interface
[  411.724147][T10308] bond0: (slave bond_slave_1): Releasing backup interface
[  412.131504][T10308] team0: Port device team_slave_0 removed
[  412.458701][T10308] team0: Port device team_slave_1 removed
[  412.491586][T10308] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  412.499251][T10308] batman_adv: batadv0: Removing interface: batadv_slave_0
[  412.572737][T10308] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  412.612453][T10308] batman_adv: batadv0: Removing interface: batadv_slave_1
[  413.030327][T10347] Bluetooth: MGMT ver 1.22
[  413.476592][T10357] loop8: detected capacity change from 0 to 128
[  413.586167][T10357] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  413.636861][T10357] hpfs: filesystem error: improperly stopped
[  413.664663][T10357] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  413.694391][T10357] hpfs: You really don't want any checks? You are crazy...
[  413.740129][T10357] hpfs: Code page index out of array
[  413.745525][T10357] hpfs: code page support is disabled
[  413.787892][T10357] hpfs: hpfs_map_4sectors(): unaligned read
[  413.820040][T10357] hpfs: hpfs_map_4sectors(): unaligned read
[  413.826025][T10357] hpfs: filesystem error: unable to find root dir
[  413.957128][T10340] loop9: detected capacity change from 0 to 32768
[  414.036289][   T26] audit: type=1800 audit(1776997651.742:51): pid=10340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1679" name="file1" dev="loop9" ino=4 res=0 errno=0
[  415.060235][ T4276] Bluetooth: hci0: Opcode 0x1407 failed: -110
[  415.067400][ T4276] Bluetooth: hci0: command 0x1407 tx timeout
[  415.094848][T10353] loop7: detected capacity change from 0 to 32768
[  415.156088][T10353] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  415.172680][T10353] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  415.181787][T10353] BTRFS info (device loop7): enabling disk space caching
[  415.189061][T10353] BTRFS info (device loop7): enabling free space tree
[  415.196444][T10353] BTRFS info (device loop7): setting nodatasum
[  415.206620][T10353] BTRFS info (device loop7): enabling auto defrag
[  415.215261][T10353] BTRFS info (device loop7): max_inline at 0
[  415.228404][T10353] BTRFS info (device loop7): using free space tree
[  415.240884][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1693'.
[  415.518616][T10353] BTRFS info (device loop7): enabling ssd optimizations
[  415.730504][ T5649] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  416.090003][ T4315] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  416.120057][ T4681] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  416.315313][ T4315] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  416.329416][ T4681] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  416.369794][ T4681] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  416.390167][ T4315] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  416.432803][ T4315] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.442890][ T4681] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  416.475423][ T4315] usb 10-1: Product: syz
[  416.479759][ T4315] usb 10-1: Manufacturer: syz
[  416.487040][ T4681] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.517011][ T4315] usb 10-1: SerialNumber: syz
[  416.527814][T10410] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  416.919758][ T4681] usb 9-1: USB disconnect, device number 10
[  416.944648][T10423] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  417.002785][T10423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  417.060685][T10423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  417.116281][T10423] device bridge_slave_0 left promiscuous mode
[  417.141426][T10423] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.166733][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1700'.
[  417.184204][T10423] device bridge_slave_1 left promiscuous mode
[  417.199264][T10423] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.263007][T10423] bond0: (slave bond_slave_0): Releasing backup interface
[  417.307974][T10423] bond0: (slave bond_slave_1): Releasing backup interface
[  417.615508][ T4315] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42
[  417.625585][ T4315] cdc_ncm 10-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  417.659158][T10423] team0: Port device team_slave_0 removed
[  417.689972][ T4315] cdc_ncm 10-1:1.0: setting rx_max = 2048
[  417.740631][T10423] team0: Port device team_slave_1 removed
[  417.747544][T10423] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  417.757136][T10423] batman_adv: batadv0: Removing interface: batadv_slave_0
[  417.816887][ T4315] cdc_ncm 10-1:1.0: setting tx_max = 88
[  417.896609][T10423] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  417.938376][T10423] batman_adv: batadv0: Removing interface: batadv_slave_1
[  417.983196][T10442] loop8: detected capacity change from 0 to 64
[  418.126269][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1704'.
[  418.136804][ T4315] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  418.200211][ T4315] usb 10-1: USB disconnect, device number 6
[  418.210705][ T4315] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP)
[  418.460527][T10452] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1706'.
[  418.530551][T10454] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1706'.
[  420.455787][T10491] loop7: detected capacity change from 0 to 8192
[  420.527010][T10491] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  420.558120][T10491] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal
[  420.570145][T10491] REISERFS (device loop7): using ordered data mode
[  420.599254][T10491] reiserfs: using flush barriers
[  420.666644][T10491] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  420.798168][T10491] REISERFS (device loop7): checking transaction log (loop7)
[  420.841779][T10491] REISERFS (device loop7): Using r5 hash to sort names
[  420.874319][T10491] REISERFS (device loop7): using 3.5.x disk format
[  420.891903][T10470] loop8: detected capacity change from 0 to 40427
[  420.901152][T10491] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  420.973256][T10470] F2FS-fs (loop8): Found nat_bits in checkpoint
[  421.202608][T10510] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3717, free_space(entry_count) 2
[  421.229555][T10470] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  421.268880][T10510] REISERFS error (device loop7): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  421.317304][T10510] REISERFS (device loop7): Remounting filesystem read-only
[  421.353573][   T26] audit: type=1800 audit(1776997659.052:52): pid=10470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1713" name="file1" dev="loop8" ino=10 res=0 errno=0
[  421.582151][ T6545] syz-executor: attempt to access beyond end of device
[  421.582151][ T6545] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  422.819988][ T4315] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  423.019944][ T4315] usb 8-1: Using ep0 maxpacket: 32
[  423.038130][T10545] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.1723'.
[  423.038710][ T4315] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  423.119063][ T4315] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.179775][ T4315] gspca_main: nw80x-2.14.0 probing 055f:d001
[  423.402927][ T7332] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  423.450018][ T7332] hid-generic 0000:0000:0000.0019: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  424.376633][ T4315] gspca_nw80x: reg_w err -71
[  424.410543][ T4315] nw80x: probe of 8-1:3.0 failed with error -71
[  424.483586][ T4315] usb 8-1: USB disconnect, device number 11
[  425.141667][T10574] netlink: 'syz.7.1737': attribute type 3 has an invalid length.
[  425.149487][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1737'.
[  425.269351][T10580] netlink: 'syz.8.1739': attribute type 4 has an invalid length.
[  425.511762][T10584] loop1: detected capacity change from 0 to 4096
[  425.627355][T10584] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  425.667388][T10584] ntfs3: loop1: Failed to load $Extend.
[  425.808122][   T26] audit: type=1326 audit(1776997663.512:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.7.1743" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc77759cdd9 code=0x0
[  425.967549][ T7863] ntfs3: loop1: ntfs3_write_inode r=9 failed, -22.
[  425.985193][ T9619] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22.
[  426.013977][ T9619] ntfs3: loop1: ntfs_evict_inode r=9 failed, -22.
[  426.569144][T10615] IPv6: Can't replace route, no match found
[  427.770056][ T7332] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  427.980113][ T7332] usb 2-1: Using ep0 maxpacket: 16
[  427.987755][ T7332] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  428.016994][ T7332] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  428.351449][ T7332] usb 2-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40
[  428.367027][ T7332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.375658][ T7332] usb 2-1: Product: syz
[  428.380501][ T7332] usb 2-1: Manufacturer: syz
[  428.385696][ T7332] usb 2-1: SerialNumber: syz
[  428.443927][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'.
[  428.518481][T10673] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  428.528378][T10673] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  428.537241][T10673] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  428.546327][T10673] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  428.636234][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'.
[  428.735227][ T7332] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  428.795195][ T7332] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to g@b4.vu
[  428.842918][ T7332] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  428.934542][ T7332] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  428.947675][T10681] xt_socket: unknown flags 0xe4
[  428.987085][ T4410] udevd[4410]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  429.005566][ T7332] usb 2-1: USB disconnect, device number 6
[  429.457104][T10693] loop7: detected capacity change from 0 to 1024
[  429.492084][T10693] ext4: Unknown parameter 'nombcach'
[  429.509027][ T7869] Bluetooth: (null): Invalid header checksum
[  429.519623][ T7869] Bluetooth: (null): Invalid header checksum
[  430.110756][T10704] loop7: detected capacity change from 0 to 8192
[  430.206436][T10704]  loop7: p1 p3 p4
[  430.237781][T10704] loop7: partition table partially beyond EOD, truncated
[  430.260161][T10704] loop7: p1 start 393217 is beyond EOD, truncated
[  430.312728][T10704] loop7: p3 size 395700 extends beyond EOD, truncated
[  430.401450][T10704] loop7: p4 start 117571584 is beyond EOD, truncated
[  430.890517][ T4315] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  431.007578][ T4410] udevd[4410]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  431.250116][ T4315] usb 9-1: Using ep0 maxpacket: 8
[  431.257830][ T4315] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  431.286888][ T4315] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  431.336184][ T4315] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  431.376992][ T4315] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  431.429980][ T4315] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  431.449124][T10729] loop9: detected capacity change from 0 to 512
[  431.455961][ T4315] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.668257][T10729] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  431.694438][T10729] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  431.730962][ T4315] usb 9-1: GET_CAPABILITIES returned 0
[  431.736620][ T4315] usbtmc 9-1:16.0: can't read capabilities
[  431.978028][T10713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  431.994304][T10739] loop7: detected capacity change from 0 to 512
[  432.033088][ T8272] EXT4-fs (loop9): unmounting filesystem.
[  432.047291][T10713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  432.109692][    C1] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  432.119162][    C1] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  432.128575][    C1] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  432.143361][T10739] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  432.155458][ T4315] usb 9-1: USB disconnect, device number 11
[  432.223806][T10739] EXT4-fs (loop7): 1 truncate cleaned up
[  432.257398][T10739] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  432.497404][ T5649] EXT4-fs (loop7): unmounting filesystem.
[  432.720873][T10754] loop7: detected capacity change from 0 to 1024
[  432.728346][T10754] EXT4-fs: Ignoring removed bh option
[  432.809476][T10754] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  433.452596][ T5649] EXT4-fs (loop7): unmounting filesystem.
[  433.894672][ T7335] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  433.928569][ T7335] hid-generic 0000:0000:0000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  434.282326][T10761] loop8: detected capacity change from 0 to 32768
[  434.448068][T10761] XFS (loop8): Mounting V5 Filesystem
[  434.465089][T10794] loop7: detected capacity change from 0 to 4096
[  434.602064][T10794] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512)
[  434.661372][T10761] XFS (loop8): Ending clean mount
[  434.676159][ T4682] XFS (loop8): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 
[  434.706468][ T4682] XFS (loop8): Unmount and run xfs_repair
[  434.747039][ T4682] XFS (loop8): First 128 bytes of corrupted metadata buffer:
[  434.787493][ T4682] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  434.822202][ T4682] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  434.879599][ T4682] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  434.919947][ T4682] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37  ..............@7
[  434.981681][ T4682] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  435.035025][ T4682] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  435.090291][ T4682] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00  ................
[  435.137613][ T4682] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  435.170485][T10761] XFS (loop8): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 4 error 74
[  435.199715][T10761] XFS (loop8): Failed to initialize disk quotas.
[  435.308614][   T26] audit: type=1800 audit(1776997673.012:54): pid=10761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1790" name="file1" dev="loop8" ino=6150 res=0 errno=0
[  435.539214][ T5649] ntfs3: loop7: ntfs_sync_fs r=1a failed, -22.
[  435.600605][ T5649] ntfs3: loop7: ntfs_evict_inode r=1a failed, -22.
[  435.607211][ T5649] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  435.666360][ T6545] XFS (loop8): Unmounting Filesystem
[  436.252470][ T4682] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  436.481925][ T4682] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  436.522928][ T4682] usb 2-1: config 0 has no interfaces?
[  436.528508][ T4682] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  436.568260][ T4682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.605793][ T4682] usb 2-1: config 0 descriptor??
[  437.126037][ T4312] usb 2-1: USB disconnect, device number 7
[  437.257964][T10847] loop7: detected capacity change from 0 to 2048
[  437.358277][T10847] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  437.501113][   T26] audit: type=1800 audit(1776997675.212:55): pid=10847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1810" name="file1" dev="loop7" ino=1367 res=0 errno=0
[  437.522864][ T4682] psmouse serio2: Failed to reset mouse on : -5
[  438.449961][ T4675] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  438.652786][ T4675] usb 2-1: unable to get BOS descriptor or descriptor too short
[  438.674863][ T4675] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40
[  438.710602][ T4675] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.739586][ T4675] usb 2-1: Product: syz
[  438.750403][ T4675] usb 2-1: Manufacturer: syz
[  438.755078][ T4675] usb 2-1: SerialNumber: syz
[  439.006575][ T4312] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  439.213685][ T4312] usb 8-1: Using ep0 maxpacket: 32
[  439.225894][ T4312] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  439.267777][ T4312] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  439.297646][ T4312] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  439.317561][ T4312] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.334975][ T4312] usb 8-1: config 0 descriptor??
[  439.415697][ T4675] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  439.635783][ T4675] usb 2-1: USB disconnect, device number 8
[  439.800296][ T4312] savu 0003:1E7D:2D5A.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0
[  439.903217][ T4410] udevd[4410]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  440.160178][ T7330] usb 8-1: USB disconnect, device number 12
[  440.186937][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  440.193483][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  440.414343][T10925] fido_id[10925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  440.972026][T10952] netlink: 'syz.2.1840': attribute type 10 has an invalid length.
[  441.036443][T10952] device wlan1 entered promiscuous mode
[  441.057489][T10952] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  441.125872][ T4682] misc userio: Buffer overflowed, userio client isn't keeping up
[  441.428598][T10940] loop9: detected capacity change from 0 to 32768
[  441.488389][T10940] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 scanned by syz.9.1837 (10940)
[  441.570716][T10940] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  441.661205][T10940] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm
[  441.746851][T10940] BTRFS info (device loop9): using free space tree
[  442.210044][T10940] BTRFS info (device loop9): enabling ssd optimizations
[  442.415721][ T4682] input: PS/2 Generic Mouse as /devices/serio2/input/input13
[  442.720174][ T4682] psmouse serio2: Failed to enable mouse on 
[  443.122139][ T8272] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  443.793940][T11012] loop7: detected capacity change from 0 to 131072
[  443.895032][T11012] F2FS-fs (loop7): Found nat_bits in checkpoint
[  443.959987][T11012] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  443.984426][T11012] F2FS-fs (loop7): lookup inode (7) has corrupted xattr
[  444.004808][   T26] audit: type=1800 audit(1776997681.712:56): pid=11012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1853" name="file2" dev="loop7" ino=8 res=0 errno=0
[  446.405106][T11090] loop9: detected capacity change from 0 to 4096
[  447.295424][ T8272] ntfs3: loop9: ntfs_evict_inode r=5 failed, -22.
[  447.327259][ T8272] ntfs3: loop9: Mark volume as dirty due to NTFS errors
[  447.708435][T11088] loop1: detected capacity change from 0 to 40427
[  447.771250][T11088] F2FS-fs (loop1): Invalid segment count (0)
[  447.777414][T11088] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  447.823762][T11088] F2FS-fs (loop1): invalid crc value
[  447.843674][T11088] F2FS-fs (loop1): Found nat_bits in checkpoint
[  447.850639][T11116] loop8: detected capacity change from 0 to 128
[  447.990679][T11116] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  448.038037][T11088] F2FS-fs (loop1): Start checkpoint disabled!
[  448.045031][T11116] hpfs: filesystem error: improperly stopped
[  448.071637][T11116] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  448.084017][T11088] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  448.097778][T11088] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  448.109931][T11116] hpfs: You really don't want any checks? You are crazy...
[  448.137644][T11116] hpfs: Code page index out of array
[  448.149931][T11116] hpfs: code page support is disabled
[  448.189761][T11116] hpfs: hpfs_map_4sectors(): unaligned read
[  448.203146][T11116] hpfs: hpfs_map_4sectors(): unaligned read
[  448.209168][T11116] hpfs: filesystem error: unable to find root dir
[  448.283707][T11116] hpfs: hpfs_map_4sectors(): unaligned read
[  449.480162][ T7345] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  449.695223][ T7345] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  449.714770][ T7345] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  449.755013][ T7345] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.815405][ T7345] usb 9-1: config 0 descriptor??
[  450.037621][ T7345] ath6kl: Failed to submit usb control message: -71
[  450.051179][ T7345] ath6kl: unable to send the bmi data to the device: -71
[  450.063987][ T7345] ath6kl: Unable to send get target info: -71
[  450.073956][ T7345] ath6kl: Failed to init ath6kl core: -71
[  450.122989][ T7345] ath6kl_usb: probe of 9-1:0.0 failed with error -71
[  450.157435][ T7345] usb 9-1: USB disconnect, device number 12
[  450.449934][ T4356] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  450.496364][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1905'.
[  450.526420][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1905'.
[  450.548760][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1905'.
[  450.619886][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1905'.
[  450.650074][ T4356] usb 8-1: Using ep0 maxpacket: 8
[  450.660653][ T4356] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  450.685282][ T4356] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.753001][ T4356] usb 8-1: Product: syz
[  450.757326][ T4356] usb 8-1: Manufacturer: syz
[  451.026951][ T4356] usb 8-1: SerialNumber: syz
[  451.649783][ T4356] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  451.668163][ T4356] usb 8-1: clock source 0 is not valid, cannot use
[  451.800985][T11220] loop1: detected capacity change from 0 to 4096
[  451.831942][T11220] EXT4-fs: Ignoring removed orlov option
[  451.911527][T11220] EXT4-fs (loop1): Test dummy encryption mode enabled
[  451.937650][T11223] loop9: detected capacity change from 0 to 4096
[  451.996767][T11223] ntfs3: loop9: Different NTFS' sector size (4096) and media sector size (512)
[  452.025479][T11220] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  452.098283][ T4356] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  452.110208][ T4356] usb 8-1: clock source 0 is not valid, cannot use
[  452.130053][ T4356] usb 8-1: 2:1: cannot get freq (v2/v3): err -71
[  452.150174][ T4356] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  452.202629][T11220] EXT4-fs error (device loop1): ext4_get_first_dir_block:3603: inode #12: block 80: comm syz.1.1914: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  452.280732][ T4356] usb 8-1: USB disconnect, device number 13
[  452.330061][ T7332] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  452.403027][T11220] EXT4-fs error (device loop1): ext4_get_first_dir_block:3605: inode #12: comm syz.1.1914: directory missing '..'
[  452.506582][ T8272] ntfs3: loop9: ntfs_sync_fs r=1a failed, -22.
[  452.515270][ T8272] ntfs3: loop9: ntfs_evict_inode r=1a failed, -22.
[  452.530068][ T7332] usb 9-1: Using ep0 maxpacket: 32
[  452.559173][ T8272] ntfs3: loop9: Mark volume as dirty due to NTFS errors
[  452.581276][ T7332] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  452.632349][ T7332] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  452.678167][ T7332] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.723862][T11232] udevd[11232]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  452.745332][ T7332] usb 9-1: config 0 descriptor??
[  452.793382][ T9619] EXT4-fs (loop1): unmounting filesystem.
[  452.806247][ T7332] hub 9-1:0.0: USB hub found
[  453.008602][ T7332] hub 9-1:0.0: 1 port detected
[  453.300120][  T127] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  453.489968][  T127] usb 8-1: Using ep0 maxpacket: 8
[  453.497171][  T127] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  453.537364][  T127] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  453.577951][  T127] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  453.631434][  T127] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  453.682627][  T127] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  453.726588][  T127] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  453.754406][  T127] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.039502][  T127] usb 8-1: usb_control_msg returned -32
[  454.050657][  T127] usbtmc 8-1:16.0: can't read capabilities
[  454.084944][ T7330] usb 9-1: USB disconnect, device number 13
[  454.330117][ T7332] usb 9-1-port1: config error
[  454.346687][T11279] loop1: detected capacity change from 0 to 4096
[  454.390461][T11279] EXT4-fs: inline encryption not supported
[  454.420213][T11279] EXT4-fs (loop1): Test dummy encryption mode enabled
[  454.438794][T11279] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  454.450436][T11279] System zones: 0-5
[  454.493991][T11279] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  454.928681][T11279] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  455.092333][ T9619] EXT4-fs (loop1): unmounting filesystem.
[  455.127192][  T127] usb 8-1: USB disconnect, device number 14
[  456.042385][T11327] loop8: detected capacity change from 0 to 2048
[  456.084852][T11327] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  456.187747][   T26] audit: type=1800 audit(1776997693.892:57): pid=11327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1940" name="file1" dev="loop8" ino=1367 res=0 errno=0
[  456.463597][T11342] netlink: 'syz.8.1948': attribute type 1 has an invalid length.
[  457.378816][T11357] loop8: detected capacity change from 0 to 4096
[  457.484242][T11365] loop9: detected capacity change from 0 to 256
[  457.495470][T11357] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  457.519480][T11365] exfat: Deprecated parameter 'namecase'
[  457.546399][T11357] ntfs3: loop8: Failed to load $Extend.
[  457.560135][T11365] exfat: Deprecated parameter 'namecase'
[  457.572637][T11365] exfat: Deprecated parameter 'namecase'
[  457.613214][T11366] loop1: detected capacity change from 0 to 2048
[  457.627945][T11365] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xd6f0c8a0, utbl_chksum : 0xe619d30d)
[  457.697130][T11366] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  457.867216][   T26] audit: type=1800 audit(1776997695.572:58): pid=11366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1959" name="file1" dev="loop1" ino=1367 res=0 errno=0
[  457.948016][ T7845] ntfs3: loop8: ntfs3_write_inode r=9 failed, -22.
[  458.004924][ T6545] ntfs3: loop8: ntfs_sync_fs r=9 failed, -22.
[  458.022798][ T6545] ntfs3: loop8: ntfs_evict_inode r=9 failed, -22.
[  458.705258][T11391] loop8: detected capacity change from 0 to 8
[  459.083643][T11403] netlink: 'syz.8.1969': attribute type 1 has an invalid length.
[  459.180469][T11403] 8021q: adding VLAN 0 to HW filter on device bond2
[  459.234997][T11405] bond2: (slave geneve2): making interface the new active one
[  459.247520][T11405] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  459.256937][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  459.531610][T11410] overlayfs: failed to clone lowerpath
[  460.115489][T11417] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.170081][ T4356] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[  460.355572][T11417] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.373488][ T4356] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  460.407952][ T4356] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  460.463418][ T4356] usb 10-1: config 0 interface 0 has no altsetting 0
[  460.493371][ T4356] usb 10-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  460.534577][ T4356] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.590773][T11417] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.606675][ T4356] usb 10-1: config 0 descriptor??
[  460.942524][T11417] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.134662][T11426] loop7: detected capacity change from 0 to 32768
[  461.155350][T11426] (syz.7.1976,11426,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  461.201780][T11426] (syz.7.1976,11426,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  461.227114][   T26] audit: type=1326 audit(1776997698.932:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11443 comm="syz.2.1980" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4bdfd9cdd9 code=0x0
[  461.274461][ T4356] hid-steam 0003:28DE:1102.001C: unknown main item tag 0x0
[  461.290040][T11426] JBD2: Ignoring recovery information on journal
[  461.350760][ T4356] hid-steam 0003:28DE:1102.001C: unknown main item tag 0x0
[  461.369345][T11417] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  461.411264][ T4356] hid-steam 0003:28DE:1102.001C: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.9-1/input0
[  461.462533][T11426] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  461.496042][ T4356] hid-steam 0003:28DE:1102.001D: unknown main item tag 0x0
[  461.510311][T11417] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  461.536618][T11417] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  461.545120][ T4356] hid-steam 0003:28DE:1102.001D: unknown main item tag 0x0
[  461.595898][ T4356] hid-steam 0003:28DE:1102.001D: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.9-1/input0
[  461.652529][T11417] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  461.750531][ T4356] hid-steam 0003:28DE:1102.001C: Steam Controller 'XXXXXXXXXX' connected
[  461.793364][ T4356] input: Steam Controller as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:28DE:1102.001C/input/input14
[  461.888607][ T4356] usb 10-1: USB disconnect, device number 7
[  461.961437][T11426] 
[  461.963912][T11426] ======================================================
[  461.971228][T11426] WARNING: possible circular locking dependency detected
[  461.978381][T11426] syzkaller #0 Not tainted
[  461.982841][T11426] ------------------------------------------------------
[  461.989901][T11426] syz.7.1976/11426 is trying to acquire lock:
[  461.996008][T11426] ffff88805346dc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x307/0x770
[  462.005391][T11426] 
[  462.005391][T11426] but task is already holding lock:
[  462.012956][T11426] ffff888061a78990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x200f/0x2230
[  462.022243][T11426] 
[  462.022243][T11426] which lock already depends on the new lock.
[  462.022243][T11426] 
[  462.032776][T11426] 
[  462.032776][T11426] the existing dependency chain (in reverse order) is:
[  462.041931][T11426] 
[  462.041931][T11426] -> #2 (jbd2_handle){++++}-{0:0}:
[  462.049284][T11426]        jbd2_log_wait_commit+0x16c/0x4c0
[  462.055059][T11426]        ocfs2_try_to_free_truncate_log+0x316/0x350
[  462.061799][T11426]        ocfs2_write_begin_nolock+0x3437/0x44f0
[  462.068347][T11426]        ocfs2_write_begin+0x1c2/0x320
[  462.073929][T11426]        generic_perform_write+0x2fa/0x5c0
[  462.079877][T11426]        __generic_file_write_iter+0x148/0x2a0
[  462.086095][T11426]        ocfs2_file_write_iter+0x1660/0x1f00
[  462.092130][T11426]        __kernel_write_iter+0x285/0x650
[  462.097814][T11426]        dump_user_range+0x412/0x850
[  462.103152][T11426]        elf_core_dump+0x30a6/0x35d0
[  462.108489][T11426]        do_coredump+0x165b/0x22f0
[  462.113652][T11426]        get_signal+0x10aa/0x1350
[  462.118725][T11426]        arch_do_signal_or_restart+0xc4/0x1350
[  462.125078][T11426]        exit_to_user_mode_loop+0x70/0x110
[  462.130939][T11426]        exit_to_user_mode_prepare+0xee/0x180
[  462.137055][T11426]        irqentry_exit_to_user_mode+0x5/0x30
[  462.143080][T11426]        exc_page_fault+0x88/0x100
[  462.148256][T11426]        asm_exc_page_fault+0x22/0x30
[  462.153673][T11426] 
[  462.153673][T11426] -> #1 (&oi->ip_alloc_sem){++++}-{3:3}:
[  462.161541][T11426]        down_write+0x36/0x60
[  462.166353][T11426]        ocfs2_try_remove_refcount_tree+0xb3/0x340
[  462.172908][T11426]        ocfs2_truncate_file+0xe35/0x1580
[  462.178942][T11426]        ocfs2_setattr+0x16b8/0x1d30
[  462.184364][T11426]        notify_change+0xc74/0xf40
[  462.189675][T11426]        do_truncate+0x1ac/0x240
[  462.194649][T11426]        do_coredump+0x2043/0x22f0
[  462.199801][T11426]        get_signal+0x10aa/0x1350
[  462.204896][T11426]        arch_do_signal_or_restart+0xc4/0x1350
[  462.211183][T11426]        exit_to_user_mode_loop+0x70/0x110
[  462.217042][T11426]        exit_to_user_mode_prepare+0xee/0x180
[  462.223154][T11426]        irqentry_exit_to_user_mode+0x5/0x30
[  462.229180][T11426]        exc_page_fault+0x88/0x100
[  462.234347][T11426]        asm_exc_page_fault+0x22/0x30
[  462.239763][T11426] 
[  462.239763][T11426] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}:
[  462.247718][T11426]        __lock_acquire+0x2d07/0x7d10
[  462.253225][T11426]        lock_acquire+0x1bb/0x4a0
[  462.254446][T11461] loop9: detected capacity change from 0 to 512
[  462.258452][T11426]        down_read+0x42/0x2d0
[  462.269502][T11426]        ocfs2_init_acl+0x307/0x770
[  462.274922][T11426]        ocfs2_mknod+0x15e8/0x25b0
[  462.280078][T11426]        ocfs2_mkdir+0x1b6/0x4b0
[  462.285064][T11426]        vfs_mkdir+0x387/0x570
[  462.289938][T11426]        do_mkdirat+0x1d8/0x440
[  462.294872][T11426]        __x64_sys_mkdirat+0x85/0x90
[  462.300295][T11426]        do_syscall_64+0x4c/0xa0
[  462.305276][T11426]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  462.311907][T11426] 
[  462.311907][T11426] other info that might help us debug this:
[  462.311907][T11426] 
[  462.322175][T11426] Chain exists of:
[  462.322175][T11426]   &oi->ip_xattr_sem --> &oi->ip_alloc_sem --> jbd2_handle
[  462.322175][T11426] 
[  462.324539][T11461] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  462.335336][T11426]  Possible unsafe locking scenario:
[  462.335336][T11426] 
[  462.335347][T11426]        CPU0                    CPU1
[  462.335352][T11426]        ----                    ----
[  462.335356][T11426]   lock(jbd2_handle);
[  462.335372][T11426]                                lock(&oi->ip_alloc_sem);
[  462.335387][T11426]                                lock(jbd2_handle);
[  462.335401][T11426]   lock(&oi->ip_xattr_sem);
[  462.335413][T11426] 
[  462.335413][T11426]  *** DEADLOCK ***
[  462.335413][T11426] 
[  462.335418][T11426] 8 locks held by syz.7.1976/11426:
[  462.335431][T11426]  #0: ffff888027e62460 (sb_writers#30){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  462.409381][T11426]  #1: ffff88805346df48 (&type->i_mutex_dir_key#21/1){+.+.}-{3:3}, at: filename_create+0x208/0x470
[  462.413370][T11470] 9pnet_fd: p9_fd_create_tcp (11470): problem connecting socket to 127.0.0.1
[  462.420178][T11426]  #2: ffff888045c22648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16d/0x4810
[  462.420251][T11426]  #3: ffff888045c21808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16d/0x4810
[  462.420304][T11426]  #4: ffff888045c242c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x11e/0x2700
[  462.420365][T11426]  #5: ffff888027e62650 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_mknod+0xf77/0x25b0
[  462.420421][T11426]  #6: ffff8880779148e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0
[  462.420468][T11426]  #7: ffff888061a78990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x200f/0x2230
[  462.420515][T11426] 
[  462.420515][T11426] stack backtrace:
[  462.420521][T11426] CPU: 0 PID: 11426 Comm: syz.7.1976 Not tainted syzkaller #0
[  462.514578][T11426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  462.524671][T11426] Call Trace:
[  462.527982][T11426]  <TASK>
[  462.530948][T11426]  dump_stack_lvl+0x188/0x24e
[  462.535666][T11426]  ? load_image+0x400/0x400
[  462.540210][T11426]  ? show_regs_print_info+0x12/0x12
[  462.545465][T11426]  ? print_circular_bug+0x12b/0x1a0
[  462.550935][T11426]  check_noncircular+0x296/0x330
[  462.555919][T11426]  ? add_chain_block+0x940/0x940
[  462.560995][T11426]  ? lockdep_lock+0xf1/0x1f0
[  462.565636][T11426]  ? _find_first_zero_bit+0xcf/0x100
[  462.570967][T11426]  __lock_acquire+0x2d07/0x7d10
[  462.575872][T11426]  ? verify_lock_unused+0x140/0x140
[  462.581285][T11426]  ? __find_get_block+0xbfb/0xec0
[  462.586447][T11426]  ? verify_lock_unused+0x140/0x140
[  462.591696][T11426]  ? __ocfs2_journal_access+0x66d/0x8c0
[  462.597387][T11426]  lock_acquire+0x1bb/0x4a0
[  462.601938][T11426]  ? ocfs2_init_acl+0x307/0x770
[  462.606937][T11426]  ? __might_sleep+0xd0/0xd0
[  462.611568][T11426]  ? read_lock_is_recursive+0x10/0x10
[  462.616995][T11426]  ? do_raw_spin_unlock+0x11d/0x230
[  462.622245][T11426]  down_read+0x42/0x2d0
[  462.626543][T11426]  ? ocfs2_init_acl+0x307/0x770
[  462.631447][T11426]  ocfs2_init_acl+0x307/0x770
[  462.636176][T11426]  ? ocfs2_acl_chmod+0x330/0x330
[  462.641249][T11426]  ? dquot_alloc_inode+0x889/0xa20
[  462.646497][T11426]  ? ocfs2_journal_access+0x40/0x40
[  462.651750][T11426]  ? ocfs2_block_signals+0x97/0xe0
[  462.657006][T11426]  ? ocfs2_init_security_get+0x135/0x1a0
[  462.662692][T11426]  ocfs2_mknod+0x15e8/0x25b0
[  462.667335][T11426]  ? ocfs2_mkdir+0x4b0/0x4b0
[  462.671983][T11426]  ? ocfs2_inode_lock_tracker+0x433/0x700
[  462.677839][T11426]  ? __kmem_cache_free+0xb6/0x1f0
[  462.682907][T11426]  ? __lock_acquire+0x7d10/0x7d10
[  462.687983][T11426]  ? do_raw_spin_lock+0x128/0x2f0
[  462.693054][T11426]  ? ocfs2_inode_unlock_tracker+0x26c/0x2e0
[  462.699081][T11426]  ? __lock_acquire+0x7d10/0x7d10
[  462.704158][T11426]  ? __rwlock_init+0x140/0x140
[  462.708962][T11426]  ? ocfs2_lookup+0x4c9/0xa70
[  462.713680][T11426]  ? do_raw_spin_unlock+0x11d/0x230
[  462.718921][T11426]  ? put_pid+0xda/0x120
[  462.723122][T11426]  ocfs2_mkdir+0x1b6/0x4b0
[  462.727584][T11426]  ? make_kgid+0x660/0x660
[  462.732042][T11426]  ? ocfs2_symlink+0x2870/0x2870
[  462.733492][T11475] fido_id[11475]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory
[  462.737000][T11426]  ? HAS_UNMAPPED_ID+0x1d3/0x230
[  462.737027][T11426]  ? ocfs2_getattr+0x360/0x360
[  462.737056][T11426]  ? inode_permission+0xef/0x480
[  462.752679][T11461] EXT4-fs error (device loop9): ext4_orphan_get:1431: comm syz.9.1985: bad orphan inode 131083
[  462.756738][T11426]  ? bpf_lsm_inode_mkdir+0x5/0x10
[  462.764687][T11461] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  462.766520][T11426]  ? security_inode_mkdir+0xb3/0x100
[  462.796026][T11426]  vfs_mkdir+0x387/0x570
[  462.800340][T11426]  do_mkdirat+0x1d8/0x440
[  462.804720][T11426]  ? vfs_mkdir+0x570/0x570
[  462.809189][T11426]  __x64_sys_mkdirat+0x85/0x90
[  462.813997][T11426]  do_syscall_64+0x4c/0xa0
[  462.818545][T11426]  ? clear_bhb_loop+0x60/0xb0
[  462.823268][T11426]  ? clear_bhb_loop+0x60/0xb0
[  462.827988][T11426]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  462.834007][T11426] RIP: 0033:0x7fc77759bc47
[  462.838480][T11426] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  462.848891][   T26] audit: type=1800 audit(1776997700.542:60): pid=11461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1985" name="file1" dev="loop9" ino=15 res=0 errno=0
[  462.858276][T11426] RSP: 002b:00007fc778386e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  462.858305][T11426] RAX: ffffffffffffffda RBX: 00007fc778386ee0 RCX: 00007fc77759bc47
[  462.858319][T11426] RDX: 00000000000001ff RSI: 0000200000000040 RDI: 00000000ffffff9c
[  462.858332][T11426] RBP: 0000200000000000 R08: 0000200000000040 R09: 0000000000000000
[  462.858348][T11426] R10: 0000200000000000 R11: 0000000000000246 R12: 0000200000000040
[  462.917314][T11461] EXT4-fs (loop9): shut down requested (2)
[  462.919926][T11426] R13: 00007fc778386ea0 R14: 0000000000000000 R15: 0000000000000000
[  462.919956][T11426]  </TASK>
[  462.937648][T11486] loop1: detected capacity change from 0 to 512
[  462.990440][T11486] EXT4-fs: Ignoring removed orlov option
[  462.997968][ T4356] hid-steam 0003:28DE:1102.001C: Steam Controller 'XXXXXXXXXX' disconnected
[  463.029580][T11486] EXT4-fs (loop1): Test dummy encryption mode enabled
[  463.039206][ T8272] EXT4-fs (loop9): unmounting filesystem.
[  463.044744][T11486] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  463.063116][T11486] EXT4-fs (loop1): 1 truncate cleaned up
[  463.068849][T11486] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  463.102298][ T5649] ocfs2: Unmounting device (7,7) on (node local)
[  463.159026][ T9619] EXT4-fs (loop1): unmounting filesystem.