last executing test programs:

2m27.345262116s ago: executing program 4 (id=55):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5)

2m27.02455702s ago: executing program 4 (id=56):
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000100)})
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0x1, 0x4, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x7fffffffffffffff, 0x0, 0x10000, 0x8d], 0x100000, 0x240046})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m26.704630373s ago: executing program 4 (id=60):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2000003, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f6465636f6d706f7365008000000000000042000fc32c6e6f636172726965722c6e6f6465636e6d706f736500a580263e005a80c976898113cb9f4680642ce86dd3b5d3ba4a739e6654e4a1277ef2dd52ea98c5ea630da0c29cd73f8b9f4fd077e97f3ec1acc1ac9132611fb53a41b8fdb6b9"], 0x1, 0x62c, &(0x7f0000000680)="$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")
open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x24)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)

2m26.433938466s ago: executing program 4 (id=61):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mlockall(0x3)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

2m21.831087388s ago: executing program 4 (id=89):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c2", 0x23)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(0x0, r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000100037040100"/20, @ANYRES32=r3, @ANYBLOB="0b440700012c00001c0012800b00010067726574617000000c00028008000700ac1414aa5d1b05358ce8159e4de2549cec4f51cb1b770b7f832796e4c220f73c1540eeb16fba4e3c7f8c68d22a3127ba69b4dc417eee1bc3ead35052e5e7a4112e5828bc05ed58c088b266f8246b71794ed3375bf1d656bfaaf5c12dc91c267e0f5ac2f6f268199e4c9fc92043b429185282d10a9f656e36efe4182cd36a19628cbac15cc2b9f7ce024f3257add524ec7efa87d1a3a85ee2e5e30b63b09c46a6a8253de5d907a09f37677ca8be3b59d6879c4d0f6546ea34dbf32e84786a8a"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850)
sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}}], 0x2, 0x4880)
r4 = accept4(r0, 0x0, 0x0, 0x800)
r5 = accept4$bt_l2cap(r4, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x80000)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80004}, 0x1c)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x40b, 0x9, 0xfffffffe})
write$bt_hci(r6, &(0x7f0000000080)=ANY=[], 0x6)
sendmmsg$alg(r4, 0x0, 0x0, 0x8040)
r8 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="1b0000001a007f029e741683c28f7b331d00000000390000000000", 0x1b}], 0x1}, 0x24000080)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000800cb8004000880100001"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000084)
recvmsg(r5, &(0x7f0000002a40)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002940)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x2, &(0x7f0000002980)=""/151, 0x97}, 0x40010002)

2m20.847989599s ago: executing program 4 (id=92):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1ff}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xd, 0x1, 0x40], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xffffffffffffff41, 0x8, 0x40}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb8}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtaction={0xec, 0x30, 0x1, 0x0, 0x800000, {}, [{0xd8, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0xb, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x88, 0x2, 0x0, 0x0, {{0xa}, {0xffffffffffffff28}, {0x5a, 0x6, "37924aae4170e50e888b352b2f2cd5c2a8a2f619a636b0be232f595d2ab166429e10674c2b80ab86d43a038509e8259ed0939f1da30cd13fc869bb95f87bf2debcc142d13aa608bba402ce32a8d2a1811f8dd8fe7300"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}, 0xec}}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x3c, r9, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc7f, 0x34}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2c00001c}, 0x40890)
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, &(0x7f00000007c0)={{@_ha_fsid={[0x5, 0xe5f7]}, {0xfd, 0x6, 0x3ff, 0x4}}, {{[0x7, 0x7, 0x2, 0x1]}, 0x0, 0x1, 0x5, 0x0, &(0x7f00000005c0)=[{{@_ha_fsid={[0x9, 0x6]}, {0x5, 0x4, 0xd37, 0x6}}, 0x9, 0x0, '%\x00'}, {{@_ha_fsid={[0x101, 0xffffff80]}, {0x5, 0x4, 0x4, 0xf4}}, 0x5, 0x0, '\x00'}, {{@_ha_fsid={[0x8, 0x1ff]}, {0x2, 0x4, 0x7, 0x40}}, 0xfffffffe, 0x0, 'pedit\x00'}, {{@_ha_fsid={[0x9, 0x6c5eae41]}, {0xe1a, 0x79, 0x7fa3, 0x2}}, 0x0, 0x0, '\x00'}]}})
setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000400)=[{0x3, 0x2, {0x0, 0x1}, {0x3, 0xf0, 0x2}, 0x1, 0xff}, {0x1, 0x2, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x1}, 0xfe}, {0x1, 0x1, {0x1, 0xf0, 0x4}, {0x1, 0xff, 0x3}, 0xff, 0xfe}], 0x60)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @dev}}, @sadb_sa={0x2}, @sadb_x_sa2={0x2, 0x13, 0x1}]}, 0x60}, 0x1, 0x7}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000500)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x70bd0a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffc3d, 0xfffffff8}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc014}, 0x4000040)
socket$l2tp(0x2, 0x2, 0x73)

2m5.775991677s ago: executing program 32 (id=92):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1ff}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xd, 0x1, 0x40], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xffffffffffffff41, 0x8, 0x40}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb8}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtaction={0xec, 0x30, 0x1, 0x0, 0x800000, {}, [{0xd8, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0xb, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x88, 0x2, 0x0, 0x0, {{0xa}, {0xffffffffffffff28}, {0x5a, 0x6, "37924aae4170e50e888b352b2f2cd5c2a8a2f619a636b0be232f595d2ab166429e10674c2b80ab86d43a038509e8259ed0939f1da30cd13fc869bb95f87bf2debcc142d13aa608bba402ce32a8d2a1811f8dd8fe7300"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}, 0xec}}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x3c, r9, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc7f, 0x34}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2c00001c}, 0x40890)
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, &(0x7f00000007c0)={{@_ha_fsid={[0x5, 0xe5f7]}, {0xfd, 0x6, 0x3ff, 0x4}}, {{[0x7, 0x7, 0x2, 0x1]}, 0x0, 0x1, 0x5, 0x0, &(0x7f00000005c0)=[{{@_ha_fsid={[0x9, 0x6]}, {0x5, 0x4, 0xd37, 0x6}}, 0x9, 0x0, '%\x00'}, {{@_ha_fsid={[0x101, 0xffffff80]}, {0x5, 0x4, 0x4, 0xf4}}, 0x5, 0x0, '\x00'}, {{@_ha_fsid={[0x8, 0x1ff]}, {0x2, 0x4, 0x7, 0x40}}, 0xfffffffe, 0x0, 'pedit\x00'}, {{@_ha_fsid={[0x9, 0x6c5eae41]}, {0xe1a, 0x79, 0x7fa3, 0x2}}, 0x0, 0x0, '\x00'}]}})
setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000400)=[{0x3, 0x2, {0x0, 0x1}, {0x3, 0xf0, 0x2}, 0x1, 0xff}, {0x1, 0x2, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x1}, 0xfe}, {0x1, 0x1, {0x1, 0xf0, 0x4}, {0x1, 0xff, 0x3}, 0xff, 0xfe}], 0x60)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @dev}}, @sadb_sa={0x2}, @sadb_x_sa2={0x2, 0x13, 0x1}]}, 0x60}, 0x1, 0x7}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000500)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x70bd0a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffc3d, 0xfffffff8}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc014}, 0x4000040)
socket$l2tp(0x2, 0x2, 0x73)

55.338873353s ago: executing program 3 (id=567):
socket$key(0xf, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
accept4$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10, 0x80800)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
close(r0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000440)={'macvlan1\x00', 0x2})
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010800000000000001000500000005000100070000000900020073797a30000000000c00078008001240fffffffe050004000000000012000300686173683a6e65742c706f7274000000050005000a"], 0x58}, 0x1, 0x0, 0x0, 0x40280d5}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x58, 0x1412, 0x200, 0x70bd2a, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0xffffffff}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8004)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff110002", 0x18)

55.044115216s ago: executing program 3 (id=569):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3cb, 0x1, 0x401}, {0x2, 0x49a, 0x109, 0x4, 0x6, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x8000)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r9, 0x2c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="7cb17231cc0ee9da6f", 0x9}], 0x1}, 0x4)

54.478592802s ago: executing program 3 (id=570):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

54.354346554s ago: executing program 3 (id=572):
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x20e, &(0x7f0000000dc0)="$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")
mount(&(0x7f0000000ac0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b00)='./file1\x00', 0x0, 0x1000, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000001e80)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2b6, &(0x7f0000000480)="$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")
mount$9p_fd(0x0, 0x0, 0x0, 0xa, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xf8)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)

54.012916407s ago: executing program 3 (id=575):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0xfff, 0x2, 0x8, 0x3, 0x1, 0x6, 0x7ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x6, 0xffffffef, 0x7fffffff, 0xffffffff, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r9, 0x0, 0x20040054)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5)

50.741253794s ago: executing program 3 (id=591):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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")
mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x42000, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
socket$vsock_stream(0x28, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)

50.373689378s ago: executing program 33 (id=591):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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")
mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x42000, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
socket$vsock_stream(0x28, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)

7.20729873s ago: executing program 1 (id=755):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001", @ANYRES64=r0], 0x0, 0x0, 0x0}, 0x0)

6.055924973s ago: executing program 5 (id=764):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1)

5.928987254s ago: executing program 2 (id=767):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1000000, &(0x7f0000000140)=ANY=[], 0xfb, 0x6b0, &(0x7f0000000300)="$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")
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20, 0x1)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)
unlink(&(0x7f0000000100)='./file0\x00')
unlink(0x0)
llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0xd8)

5.811814495s ago: executing program 5 (id=770):
syz_usb_connect$uac3(0x5, 0x90, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x80, 0x30, 0xc, {0x8, 0xb, 0x2, 0x1, 0x1, 0x22, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x6, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0xe1, 0x5, {0xa, 0x25, 0x25, 0x10000, 0xd1, 0xb1e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfff9, 0x3, 0x1, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x248, 0xcb, 0x9, 0x8, {0xa, 0x25, 0x25, 0x3, 0xf7, 0xf800}}}}}}}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
pipe2$9p(0x0, 0x4880)

5.693755177s ago: executing program 0 (id=771):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

5.529393129s ago: executing program 2 (id=772):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x1020, @remote}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0)

5.41107349s ago: executing program 2 (id=773):
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800)
openat$kvm(0xffffffffffffff9c, 0x0, 0x8c3, 0x0)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0xc000)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000000c0)={0x1028, 0x32, 0x5, 0xfffffffe, 0xb, 0x0, 0x3, 0xa6, 0x1})
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c090)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x1, 0x0, 0x3, {0x4, 0x21}, 0x14, 0x7})
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, 0x0, 0x0)
connect$inet(r5, 0x0, 0x0)
sendmmsg(r5, 0x0, 0x0, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000100)=@req={0x8, 0xfffffffc}, 0x10)

4.731871917s ago: executing program 1 (id=774):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000140)=0xc3, 0x2)
connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

4.4652118s ago: executing program 0 (id=775):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x3}, 0x6e)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x9)

3.452126682s ago: executing program 0 (id=778):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)

3.450466092s ago: executing program 2 (id=779):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r1=>0x0})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x48050)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1e}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xff73}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x40040)

3.395511472s ago: executing program 1 (id=780):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpu.max\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0xe1)

3.273324093s ago: executing program 2 (id=782):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x4a1e, &(0x7f0000000280)=ANY=[], 0x4, 0x32e, &(0x7f0000000a40)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001580)={0x8, {"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", 0x1000}}, 0x1006)
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x20)
ioctl$FIBMAP(r0, 0x1, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
syz_emit_vhci(&(0x7f0000000340)=ANY=[], 0xe)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="043e751d"], 0x24)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086607, 0xff7f1f32b37f0008)

3.211952274s ago: executing program 1 (id=783):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x1020, @remote}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0)

3.170305715s ago: executing program 6 (id=784):
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, 0x0, 0x40008090)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r2)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'})

3.084745506s ago: executing program 1 (id=785):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r4, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
ptrace$PTRACE_SETSIGMASK(0x420b, r4, 0x0, 0x0)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_int(r9, 0x0, 0x8, &(0x7f0000000040)=0xfff, 0x4)
recvmmsg(r9, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0x87}], 0x1, 0x0, 0x0)
write$sndseq(r8, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9})
accept(0xffffffffffffffff, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f8666f2a66536f30f1eea66ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x28}], 0x1, 0x11, 0x0, 0x0)

3.041125206s ago: executing program 6 (id=786):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="0000db9ce4", 0x5, 0x7b14, 0x0, 0x0)

2.941308228s ago: executing program 6 (id=787):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff0000", @ANYRES32=r2, @ANYBLOB="8300040000000000400012800800010073697400340002800500090029000000060010000b00000008000c000000008006000d000900000008000300e0"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)

1.616881482s ago: executing program 5 (id=788):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x3}, 0x6e)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
ioctl$TCXONC(r2, 0x540a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x9)

1.561554492s ago: executing program 1 (id=789):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'lo\x00'})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_setup(0x2a69, &(0x7f0000002240)={0x0, 0x0, 0x2, 0x2})
r5 = socket$alg(0x26, 0x5, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r2)
sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000041)
bind$alg(r5, 0x0, 0x0)
accept4(r5, 0x0, 0x0, 0x80000)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10)
listen(r6, 0x5)

1.489358273s ago: executing program 0 (id=790):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000140)={[{@errors_remount}, {@inode_readahead_blks}, {@lazytime}, {@oldalloc}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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")
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6e)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x4, 0x0, 0x85c, 0x5})
write$binfmt_elf64(r0, 0x0, 0x5b0)

1.118448868s ago: executing program 6 (id=791):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r6, 0x0, 0x8000)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r9, 0x2c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="7cb17231cc0ee9da6f", 0x9}], 0x1}, 0x4)

534.110264ms ago: executing program 5 (id=792):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8890)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={<r1=>0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000000180)=0xc)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200008c6, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB="00646d61736b3d309a02003030303030303030303135322c696f63686172e8ffffff69736f383835392d312c6769643d00000000000000", @ANYRES16=r3, @ANYRESHEX=r2, @ANYRES64=r1, @ANYRESOCT=r3], 0x81, 0x14ff, &(0x7f0000002a80)="$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")
sendmsg$unix(0xffffffffffffffff, 0x0, 0x40)
lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0xffff7fff, 0x2}, {0x1ff, 0x8}]}, 0x14, 0x2)

371.846766ms ago: executing program 6 (id=793):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x17, 0x3})

277.277417ms ago: executing program 0 (id=794):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r1 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, 0x0, 0x58)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[], 0x64}}, 0x0)
socket(0x10, 0x80002, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d089149a070000000000000018000000", @ANYRES32, @ANYBLOB="00000000000000006608fdff0000000018000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x34, r5, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)

194.276598ms ago: executing program 2 (id=795):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1, 0x371, &(0x7f0000002980)="$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")
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001380))
getdents(r1, 0x0, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='P', 0x0, 0x8000}, 0x50)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x3c}}, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)

190.402288ms ago: executing program 5 (id=796):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x1020, @remote}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0)

37.192509ms ago: executing program 6 (id=797):
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, 0x0, 0x40008090)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r2)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'})

32.55678ms ago: executing program 0 (id=798):
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0)
faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x1100)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, 0x0, &(0x7f0000001500)=""/87, 0x0, 0xeeee0000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x801, 0x80000)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, &(0x7f0000000440)=""/176, 0x0, 0x8000000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

0s ago: executing program 5 (id=799):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x3c, 0x5f, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@nested={0x28, 0x141, 0x0, 0x1, [@nested={0x21, 0x64, 0x0, 0x1, [@generic="d363b0283605b18a529a09dc2138da080ce4bc1dbff4b9c670a41f88b8"]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)

kernel console output (not intermixed with test programs):

_hcd.1/usb2/report_descriptor': No such file or directory
[   92.710228][ T1108] usb 3-1: BAAD HEADPHONE p_chmask mismatch
[   92.727800][ T1108] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[   92.744822][ T1108] usb 3-1: USB disconnect, device number 3
[   92.981809][ T4338] udevd[4338]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   93.006885][ T4770] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   93.075154][   T13] usb 1-1: USB disconnect, device number 5
[   93.125481][ T4774] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   95.785960][ T4784] loop2: detected capacity change from 0 to 1024
[   95.972190][ T4784] hfsplus: request for non-existent node 3 in B*Tree
[   96.066429][ T4784] hfsplus: request for non-existent node 3 in B*Tree
[   96.161725][ T4784] hfsplus: walked past end of dir
[   96.198289][   T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   96.292014][ T4794] loop0: detected capacity change from 0 to 2048
[   96.308052][   T23] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   96.373836][ T4794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   96.758963][ T4803] fido_id[4803]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   97.679272][ T4797] chnl_net:caif_netlink_parms(): no params data found
[   98.065658][ T4797] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.075637][ T4797] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.087898][ T4797] device bridge_slave_0 entered promiscuous mode
[   98.135911][ T4837] device syzkaller0 entered promiscuous mode
[   98.145301][ T4797] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.160448][ T4797] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.185827][ T4797] device bridge_slave_1 entered promiscuous mode
[   98.289986][ T1108] Bluetooth: hci5: command 0x0409 tx timeout
[   98.332775][ T4845] loop2: detected capacity change from 0 to 512
[   98.379623][ T4797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.402530][ T4797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.506592][ T4845] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.193: iget: bad i_size value: 38620345925642
[   98.657767][ T4797] team0: Port device team_slave_0 added
[   98.690654][ T4845] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.193: couldn't read orphan inode 15 (err -117)
[   98.777365][ T4797] team0: Port device team_slave_1 added
[   98.787135][ T4845] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback.
[   98.898593][ T4797] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.979775][ T4797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.129856][ T4797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.226845][ T4797] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.237002][ T4797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.273393][ T4797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.905164][ T4847] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  100.136896][ T4797] device hsr_slave_0 entered promiscuous mode
[  100.205936][ T4797] device hsr_slave_1 entered promiscuous mode
[  100.269172][ T4797] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.340166][ T4797] Cannot create hsr debugfs directory
[  100.373061][   T13] Bluetooth: hci5: command 0x041b tx timeout
[  100.444535][ T4867] loop2: detected capacity change from 0 to 2048
[  100.466091][ T4864] device syzkaller0 entered promiscuous mode
[  100.572549][ T4867] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  100.645541][ T4867] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[  100.897022][ T4873] device syzkaller0 entered promiscuous mode
[  100.980286][ T4880] loop3: detected capacity change from 0 to 1024
[  101.014677][ T4880] hfsplus: Filesystem is marked locked, mounting read-only.
[  101.057796][ T4880] hfsplus: filesystem is marked locked, leaving read-only.
[  101.071690][ T4797] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  101.094624][ T4797] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  101.136173][ T4797] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  101.162580][ T4885] loop1: detected capacity change from 0 to 128
[  101.202409][ T4797] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  101.264446][ T4885] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  101.441013][ T4885] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.764824][   T13] Bluetooth: hci5: command 0x040f tx timeout
[  102.812153][ T4899] device syzkaller0 entered promiscuous mode
[  102.838903][ T4897] loop0: detected capacity change from 0 to 2048
[  102.892281][ T4797] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.939555][  T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  103.000561][  T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  103.008937][ T4903] loop1: detected capacity change from 0 to 2048
[  103.015736][ T4905] loop2: detected capacity change from 0 to 512
[  103.039287][ T4797] 8021q: adding VLAN 0 to HW filter on device team0
[  103.075672][  T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  103.087882][  T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  103.102511][  T367] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.110542][  T367] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.128052][ T4903] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  103.143495][ T4905] EXT4-fs (loop2): Ignoring removed nobh option
[  103.161082][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  103.180910][ T4905] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  103.188566][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  103.202538][ T4905] EXT4-fs (loop2): inline encryption not supported
[  103.268261][ T4909] loop0: detected capacity change from 0 to 512
[  103.271534][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  103.313083][ T4903] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000814,. Quota mode: writeback.
[  103.393696][ T1282] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.403150][ T1282] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.415459][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  103.465958][ T4909] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.216: invalid indirect mapped block 4294967295 (level 1)
[  103.476231][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  103.495686][ T4909] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.216: invalid indirect mapped block 4294967295 (level 1)
[  103.531983][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  103.547860][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  103.564872][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  103.581354][ T4909] EXT4-fs (loop0): 2 truncates cleaned up
[  103.602893][  T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  103.617608][ T4909] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback.
[  103.657882][    C0] vkms_vblank_simulate: vblank timer overrun
[  103.674974][  T367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  103.717654][  T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  103.761605][  T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  103.783933][ T4920] Zero length message leads to an empty skb
[  103.792496][ T4905] EXT4-fs (loop2): Test dummy encryption mode enabled
[  103.820384][  T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  103.836993][  T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  103.848357][ T4924] loop1: detected capacity change from 0 to 512
[  103.872919][ T4905] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  103.901745][ T4909] EXT4-fs error (device loop0): ext4_get_parent:1906: inode #11: comm syz.0.216: bad parent inode number: 3
[  103.918152][ T4905] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.214: invalid indirect mapped block 2683928664 (level 1)
[  103.941404][    C0] vkms_vblank_simulate: vblank timer overrun
[  103.959136][ T4905] EXT4-fs (loop2): 1 truncate cleaned up
[  103.967698][ T4905] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,nomblk_io_submit,inlinecrypt,usrjquota=.sb=0x0000000000000007,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,test_dummy_encryption,,,errors=continue. Quota mode: writeback.
[  104.009545][    C0] vkms_vblank_simulate: vblank timer overrun
[  104.115724][ T4923] device syzkaller0 entered promiscuous mode
[  104.314891][ T4924] EXT4-fs (loop1): 1 orphan inode deleted
[  104.328761][ T4924] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  104.351640][ T4924] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.855549][   T13] Bluetooth: hci5: command 0x0419 tx timeout
[  105.304603][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.323125][    C0] vkms_vblank_simulate: vblank timer overrun
[  105.689389][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.805327][ T4797] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.900994][ T4953] device syzkaller0 entered promiscuous mode
[  106.133377][ T4965] loop3: detected capacity change from 0 to 16
[  106.210166][ T4965] erofs: (device loop3): mounted with root inode @ nid 36.
[  106.232430][ T4970] netlink: 48 bytes leftover after parsing attributes in process `syz.0.230'.
[  106.284476][ T4965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.228'.
[  106.312397][ T4969] loop2: detected capacity change from 0 to 2048
[  106.341189][ T4965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.228'.
[  106.399393][ T4972] device syzkaller0 entered promiscuous mode
[  106.436938][ T4969] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  106.490476][ T4969] UDF-fs: Scanning with blocksize 512 failed
[  106.557410][ T4969] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  106.645627][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  106.676903][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  106.737921][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  106.792269][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  106.942157][ T4797] device veth0_vlan entered promiscuous mode
[  107.022551][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  107.130101][   T26] audit: type=1804 audit(1778270672.781:6): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.229" name="/newroot/47/file1/file1" dev="loop2" ino=818 res=1 errno=0
[  107.194258][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  107.565364][ T4797] device veth1_vlan entered promiscuous mode
[  107.776054][   T26] audit: type=1326 audit(1778270673.451:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4987 comm="syz.3.236" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f076e448dd9 code=0x0
[  107.949295][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  107.981749][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  108.024129][ T4797] device veth0_macvtap entered promiscuous mode
[  108.087395][ T4797] device veth1_macvtap entered promiscuous mode
[  108.194230][ T4797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.230734][ T4797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.296815][ T4797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.349768][ T4797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.412824][ T4797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.433762][ T4797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.458544][ T4797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.057234][ T4797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.162603][ T4797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.175883][ T4797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.179968][ T5007] netlink: 36 bytes leftover after parsing attributes in process `syz.3.241'.
[  109.190661][ T4797] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.216716][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  109.230402][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  109.240993][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  109.255198][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  109.370160][ T5011] device syzkaller0 entered promiscuous mode
[  109.444180][ T4797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.510355][ T4797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.572961][ T4797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.597986][ T4797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.630610][ T4797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.652371][ T4797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.668303][ T4797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.694202][ T4797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.712370][ T4797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.732910][ T4797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.762668][ T4797] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.884666][  T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  109.901900][  T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  109.917016][ T4797] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.930504][ T4797] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.952318][ T4797] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.965616][ T4797] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.106691][ T5035] loop1: detected capacity change from 0 to 128
[  110.191626][ T5035] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  110.293264][  T367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.319827][  T367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.334071][ T5035] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  110.425626][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  110.451540][  T367] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  110.509325][ T5045] loop3: detected capacity change from 0 to 256
[  110.527672][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.557595][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.588826][ T5048] capability: warning: `syz.1.254' uses deprecated v2 capabilities in a way that may be insecure
[  110.673634][   T26] audit: type=1800 audit(1778270676.351:8): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.253" name="file1" dev="loop3" ino=1048597 res=0 errno=0
[  110.736970][  T367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  111.005703][ T5054] loop3: detected capacity change from 0 to 1024
[  111.050379][ T5056] loop5: detected capacity change from 0 to 1024
[  111.062169][ T5061] loop0: detected capacity change from 0 to 2048
[  111.135486][ T5056] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  111.237556][ T5061] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  111.256714][ T5056] EXT4-fs (loop5): mounted filesystem without journal. Opts: nomblk_io_submit,nodioread_nolock,noquota,barrier,quota,nodioread_nolock,,errors=continue. Quota mode: writeback.
[  111.301793][ T5056] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.432962][ T5069] loop2: detected capacity change from 0 to 512
[  111.461186][ T5070] device syzkaller0 entered promiscuous mode
[  111.606939][ T5069] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  111.661540][ T5069] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  111.676469][ T5076] loop1: detected capacity change from 0 to 1024
[  111.699432][ T5069] System zones: 0-1, 15-15, 18-18, 34-34
[  111.780543][ T5069] EXT4-fs (loop2): orphan cleanup on readonly fs
[  111.796085][ T5069] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  111.808782][ T5069] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  111.838653][ T5069] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  111.870606][ T5069] EXT4-fs (loop2): 1 truncate cleaned up
[  111.940396][ T5069] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  112.015694][ T5087] loop3: detected capacity change from 0 to 2048
[  112.020023][ T4234] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  112.038167][ T5069] fscrypt (loop2, inode 16): Error -61 getting encryption context
[  112.088453][ T5094] fscrypt (loop2, inode 16): Error -61 getting encryption context
[  112.116462][ T5087] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  112.160525][ T5069] fscrypt (loop2, inode 16): Error -61 getting encryption context
[  112.290723][ T5090] loop1: detected capacity change from 0 to 512
[  112.370729][ T4234] usb 6-1: Using ep0 maxpacket: 16
[  112.376059][ T5090] EXT4-fs (loop1): Ignoring removed oldalloc option
[  112.448727][ T5090] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  112.540959][ T5090] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  112.560419][ T4234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.618669][ T4234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.651992][ T4234] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  112.657659][ T5090] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  112.668632][ T4234] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  112.697553][ T4234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.705139][ T5101] loop3: detected capacity change from 0 to 512
[  112.712828][ T5090] EXT4-fs (loop1): 1 truncate cleaned up
[  112.727355][ T4234] usb 6-1: config 0 descriptor??
[  112.734229][ T5090] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,errors=remount-ro,noload,oldalloc,. Quota mode: none.
[  112.857014][ T5101] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  112.862350][ T5090] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none.
[  112.925225][ T5101] EXT4-fs (loop3): 1 truncate cleaned up
[  112.982491][ T5105] loop0: detected capacity change from 0 to 1024
[  113.027555][ T5101] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  113.219665][ T5105] hfsplus: request for non-existent node 16777216 in B*Tree
[  113.290679][ T4234] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0004/input/input5
[  113.305666][ T5105] hfsplus: request for non-existent node 16777216 in B*Tree
[  113.352682][ T5105] hfsplus: request for non-existent node 16777216 in B*Tree
[  113.428151][ T4266] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  113.485003][ T5116] hub 8-0:1.0: USB hub found
[  113.496134][ T5116] hub 8-0:1.0: 1 port detected
[  113.648892][ T5117] device syzkaller0 entered promiscuous mode
[  113.670083][ T5105] hfsplus: request for non-existent node 16777216 in B*Tree
[  113.753117][ T5113] hfsplus: request for non-existent node 16777216 in B*Tree
[  113.802976][ T5113] hfsplus: request for non-existent node 16777216 in B*Tree
[  114.011645][ T4234] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  114.033707][ T4234] usb 6-1: USB disconnect, device number 2
[  114.106021][ T5126] loop0: detected capacity change from 0 to 128
[  114.160021][ T5126] EXT4-fs (loop0): Test dummy encryption mode enabled
[  114.203596][ T5126] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  114.229952][ T4266] usb 4-1: Using ep0 maxpacket: 32
[  114.262761][ T5126] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  114.390888][ T5128] fido_id[5128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  114.430185][ T4266] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  114.453190][ T4266] usb 4-1: config 0 has no interface number 0
[  114.584230][ T5132] loop2: detected capacity change from 0 to 4096
[  114.653223][ T5132] EXT4-fs (loop2): Test dummy encryption mode enabled
[  114.658975][ T5144] loop5: detected capacity change from 0 to 128
[  114.674797][ T4266] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  114.707110][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.710060][ T4895] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  114.737407][ T4266] usb 4-1: Product: syz
[  114.746517][ T4266] usb 4-1: Manufacturer: syz
[  114.760641][ T5132] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  114.809866][ T4266] usb 4-1: SerialNumber: syz
[  114.846999][ T5132] System zones: 0-5
[  114.850883][ T4266] usb 4-1: config 0 descriptor??
[  114.871909][ T5132] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,stripe=0x0000000000000002,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback.
[  114.880982][ T5126] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  114.932837][ T5144] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  114.951027][ T4266] smsc95xx v2.0.0
[  114.989921][ T4895] usb 1-1: Using ep0 maxpacket: 16
[  115.034774][   T26] audit: type=1800 audit(1778270680.711:9): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.283" name="file1" dev="loop5" ino=94 res=0 errno=0
[  115.218785][   T26] audit: type=1800 audit(1778270680.711:10): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.283" name="file1" dev="loop5" ino=94 res=0 errno=0
[  115.269921][   T26] audit: type=1800 audit(1778270680.711:11): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.283" name="file1" dev="loop5" ino=94 res=0 errno=0
[  115.309233][ T5135] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  115.400136][ T4895] usb 1-1: string descriptor 0 read error: -22
[  115.449406][ T4895] usb 1-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40
[  115.497298][ T4895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.518004][ T5160] loop5: detected capacity change from 0 to 2048
[  115.587221][ T4895] usb 1-1: Fast Track Pro switching to config #2
[  115.594614][ T5162] input: syz1 as /devices/virtual/input/input6
[  115.606509][ T4266] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[  115.655518][ T4266] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  115.732605][ T4266] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  115.769006][ T4266] smsc95xx: probe of 4-1:0.67 failed with error -71
[  115.822553][ T4266] usb 4-1: USB disconnect, device number 2
[  115.854523][ T4234] usb 1-1: USB disconnect, device number 6
[  116.202595][ T5164] EXT4-fs (loop1): Ignoring removed bh option
[  116.258646][ T5164] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  116.277525][ T5164] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block
[  116.277525][ T5164] 
[  116.410869][ T5173] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7
[  116.448817][ T5176] device syzkaller0 entered promiscuous mode
[  116.987588][ T5191] set_capacity_and_notify: 1 callbacks suppressed
[  116.987605][ T5191] loop3: detected capacity change from 0 to 1764
[  117.008841][ T5193] loop1: detected capacity change from 0 to 256
[  117.150099][ T2333] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  117.228485][ T5191] loop3: detected capacity change from 0 to 1024
[  117.299816][ T5191] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  117.323849][ T5191] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block
[  117.323849][ T5191] 
[  117.600182][ T2333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.854605][ T2333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.259837][ T2333] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  118.554715][ T2333] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  118.574982][ T2333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.591018][ T2333] usb 3-1: config 0 descriptor??
[  118.636539][ T5216] loop3: detected capacity change from 0 to 2048
[  119.593058][ T5224] loop0: detected capacity change from 0 to 512
[  119.617355][ T5216] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,data_err=abort,,errors=continue. Quota mode: writeback.
[  119.688291][ T5224] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  119.734905][ T5216] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.782064][ T2333] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  119.799842][ T2333] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  119.835834][   T26] audit: type=1800 audit(1778270685.511:12): pid=5224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.308" name="file1" dev="loop0" ino=1048601 res=0 errno=0
[  119.836804][ T2333] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  119.892805][ T5229] loop5: detected capacity change from 0 to 128
[  119.907835][ T5224] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  119.927690][ T5224] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548)
[  119.954734][ T2333] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  119.964238][ T2333] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  119.982682][ T5229] EXT4-fs (loop5): Ignoring removed nobh option
[  120.001086][ T2333] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  120.028422][ T2333] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  120.056115][ T5229] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none.
[  120.087600][ T5229] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  120.138049][ T2333] usb 3-1: USB disconnect, device number 4
[  120.226711][ T5232] fido_id[5232]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  120.523613][ T5239] loop5: detected capacity change from 0 to 128
[  120.574258][ T5240] loop3: detected capacity change from 0 to 1024
[  120.675865][ T5244] loop1: detected capacity change from 0 to 1024
[  120.744681][ T5244] EXT4-fs (loop1): Ignoring removed orlov option
[  120.880184][ T4233] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  121.116870][ T5244] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none.
[  121.200293][ T4233] usb 1-1: Using ep0 maxpacket: 32
[  121.491156][ T4233] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[  121.591811][ T5251] loop5: detected capacity change from 0 to 512
[  121.615953][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.636452][ T5251] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  121.699937][ T4233] usb 1-1: Product: syz
[  121.705046][ T4233] usb 1-1: Manufacturer: syz
[  121.734309][ T4233] usb 1-1: SerialNumber: syz
[  121.817502][ T5251] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  121.874798][ T5251] FAT-fs (loop5): Filesystem has been set read-only
[  121.905644][ T5257] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  122.069328][ T5261] loop3: detected capacity change from 0 to 1024
[  122.085132][ T5259] loop2: detected capacity change from 0 to 2048
[  122.112412][ T5264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.322'.
[  122.141137][ T4233] usb 1-1: MIDIStreaming interface descriptor not found
[  122.151401][ T5261] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  122.178580][ T5265] loop5: detected capacity change from 0 to 1024
[  122.194798][ T5264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.322'.
[  122.217365][ T5261] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block
[  122.217365][ T5261] 
[  122.242504][ T5264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.322'.
[  122.265686][ T4233] usb 1-1: USB disconnect, device number 7
[  122.313516][ T5265] EXT4-fs (loop5): Ignoring removed bh option
[  122.386861][ T5265] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,sb=0x0000000000000040,. Quota mode: none.
[  122.429611][ T5268] 9pnet: Insufficient options for proto=fd
[  122.768250][ T5270] udevd[5270]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  122.845137][ T5280] loop1: detected capacity change from 0 to 1764
[  122.927671][ T5285] loop0: detected capacity change from 0 to 128
[  124.174967][ T5308] loop1: detected capacity change from 0 to 128
[  124.337448][ T5308] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none.
[  124.380814][ T5308] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.594402][ T5323] loop5: detected capacity change from 0 to 1024
[  124.731937][ T5308] EXT4-fs error (device loop1): ext4_check_dx_root:2266: inode #2: comm syz.1.337: Corrupt dir, invalid name for '.', running e2fsck is recommended
[  124.752360][ T5322] netlink: 232 bytes leftover after parsing attributes in process `syz.3.341'.
[  124.797378][ T5323] hfsplus: invalid file type 0113366 for inode 2
[  124.807095][ T5323] hfsplus: failed to load root directory
[  124.926038][ T5336] loop3: detected capacity change from 0 to 16
[  125.022213][ T5336] erofs: (device loop3): mounted with root inode @ nid 36.
[  125.130550][ T5336] attempt to access beyond end of device
[  125.130550][ T5336] loop3: rw=524288, want=32, limit=16
[  125.151122][ T5343] loop1: detected capacity change from 0 to 256
[  125.190407][ T5336] erofs: (device loop3): z_erofs_readahead: readahead error at page 7 @ nid 89
[  125.214985][ T5336] erofs: (device loop3): z_erofs_readahead: readahead error at page 5 @ nid 89
[  125.231910][ T5336] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89
[  125.244427][ T5336] attempt to access beyond end of device
[  125.244427][ T5336] loop3: rw=524288, want=56, limit=16
[  125.274649][ T5343] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  125.276012][ T5336] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  125.350062][   T26] audit: type=1800 audit(1778270691.031:13): pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.350" name="file1" dev="loop1" ino=1048607 res=0 errno=0
[  125.412609][ T5348] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  125.475091][ T5343] attempt to access beyond end of device
[  125.475091][ T5343] loop1: rw=0, want=34359738496, limit=256
[  125.478118][   T26] audit: type=1800 audit(1778270691.091:14): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.347" name="file2" dev="loop3" ino=89 res=0 errno=0
[  125.518441][   T21] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  125.528616][ T4233] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  125.664520][   T26] audit: type=1800 audit(1778270691.341:15): pid=5348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.347" name="file3" dev="loop3" ino=89 res=0 errno=0
[  125.707408][ T5336] syz.3.347 (5336) used greatest stack depth: 19984 bytes left
[  125.782068][ T4233] usb 6-1: Using ep0 maxpacket: 32
[  125.900366][ T4233] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.977885][ T4233] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.081086][   T21] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  126.101566][ T5358] loop3: detected capacity change from 0 to 1024
[  126.103246][   T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.126047][ T5358] EXT4-fs (loop3): Ignoring removed bh option
[  126.150505][ T5361] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  126.155789][   T21] usb 1-1: Product: syz
[  126.204160][ T5358] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000006,minixdf,barrier=0x0000000000000004,nolazytime,barrier=0x0000000000000006,lazytime,errors=remount-ro,sb=0x0000000000000000,bh,init_itable,. Quota mode: none.
[  126.233535][ T4233] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  126.255777][   T21] usb 1-1: Manufacturer: syz
[  126.263799][ T4233] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  126.275862][   T21] usb 1-1: SerialNumber: syz
[  126.291563][ T4233] usb 6-1: Product: syz
[  126.298469][ T4233] usb 6-1: Manufacturer: syz
[  126.375707][ T4233] hub 6-1:4.0: USB hub found
[  126.610273][ T4233] hub 6-1:4.0: config failed, can't read hub descriptor (err -22)
[  126.710654][ T4233] usb 6-1: USB disconnect, device number 3
[  128.197777][ T5390] set_capacity_and_notify: 1 callbacks suppressed
[  128.197794][ T5390] loop0: detected capacity change from 0 to 16
[  128.284519][ T5395] loop5: detected capacity change from 0 to 1024
[  129.160454][   T21] rtl8150 1-1:1.0: couldn't reset the device
[  129.162064][ T5398] loop1: detected capacity change from 0 to 1024
[  129.174809][   T21] rtl8150: probe of 1-1:1.0 failed with error -5
[  129.230297][   T21] usb 1-1: USB disconnect, device number 8
[  129.334853][ T5398] EXT4-fs (loop1): inline encryption not supported
[  129.447679][ T5398] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,inlinecrypt,init_itable,. Quota mode: none.
[  129.649812][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  129.739725][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  129.959740][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  130.329776][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  130.344025][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  130.354884][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  130.364879][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  130.375919][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  130.387309][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  130.399731][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  130.409777][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  130.473563][ T5395] hfsplus: bad catalog entry type
[  130.655266][ T5416] loop2: detected capacity change from 0 to 512
[  130.674756][ T4395] hfsplus: b-tree write err: -5, ino 25
[  130.693854][ T4395] hfsplus: b-tree write err: -5, ino 4
[  130.769037][ T4395] hfsplus: b-tree write err: -5, ino 2
[  130.908366][ T5424] loop5: detected capacity change from 0 to 1024
[  131.144157][ T5416] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.376: missing EA_INODE flag
[  131.366452][ T5424] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  131.387947][ T5416] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.376: error while reading EA inode 12 err=-117
[  131.447368][ T5424] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,mblk_io_submit,auto_da_alloc,errors=remount-ro,. Quota mode: none.
[  131.456214][ T5416] EXT4-fs (loop2): 1 orphan inode deleted
[  131.477443][ T5424] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.527321][ T5416] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  131.551191][ T5444] loop0: detected capacity change from 0 to 8
[  131.569541][ T5424] EXT4-fs error (device loop5): ext4_free_blocks:6231: comm syz.5.378: Freeing blocks not in datazone - block = 0, count = 16
[  131.602895][ T5424] EXT4-fs (loop5): Remounting filesystem read-only
[  131.816381][ T5424] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.378: bg 0: block 112: padding at end of block bitmap is not set
[  132.078016][ T5424] EXT4-fs (loop5): Remounting filesystem read-only
[  132.150468][ T5424] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  132.213350][ T5424] EXT4-fs (loop5): Remounting filesystem read-only
[  132.843583][ T5481] loop2: detected capacity change from 0 to 256
[  132.853923][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  132.854017][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  133.042402][ T5481] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  133.078196][ T5485] loop3: detected capacity change from 0 to 16
[  133.091224][ T5487] loop0: detected capacity change from 0 to 512
[  133.210240][ T5492] overlayfs: failed to resolve './file1': -2
[  133.728307][ T5487] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  133.849169][ T5497] loop5: detected capacity change from 0 to 7
[  133.881801][ T5487] EXT4-fs (loop0): 1 truncate cleaned up
[  133.888545][ T5487] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,auto_da_alloc=0x0000000000000003,debug_want_extra_isize=0x0000000000000068,lazytime,discard,lazytime,abort,,errors=continue. Quota mode: none.
[  133.954133][ T4338] Dev loop5: unable to read RDB block 7
[  133.962025][ T4338]  loop5: AHDI p1 p2 p3
[  133.967795][ T4338] loop5: partition table partially beyond EOD, truncated
[  133.984536][ T4338] loop5: p1 start 1601398130 is beyond EOD, truncated
[  133.999042][ T4338] loop5: p2 start 1702059890 is beyond EOD, truncated
[  134.081320][ T5497] Dev loop5: unable to read RDB block 7
[  134.140158][ T5497]  loop5: AHDI p1 p2 p3
[  134.170046][ T5497] loop5: partition table partially beyond EOD, truncated
[  134.193698][ T5497] loop5: p1 start 1601398130 is beyond EOD, truncated
[  134.227689][ T5497] loop5: p2 start 1702059890 is beyond EOD, truncated
[  134.592282][   T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  134.796506][ T5534] overlayfs: failed to resolve './file1': -2
[  134.878080][   T23] usb 4-1: Using ep0 maxpacket: 16
[  135.010633][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.070419][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.207374][   T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  135.335271][   T23] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  135.396171][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.416115][ T5546] loop1: detected capacity change from 0 to 128
[  135.436883][   T23] usb 4-1: config 0 descriptor??
[  135.459571][ T5546] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  135.539994][   T26] audit: type=1800 audit(1778270701.211:16): pid=5546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.421" name="file1" dev="loop1" ino=94 res=0 errno=0
[  135.637880][   T26] audit: type=1800 audit(1778270701.271:17): pid=5546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.421" name="file1" dev="loop1" ino=94 res=0 errno=0
[  135.669923][ T1108] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  135.718709][ T5551] loop2: detected capacity change from 0 to 2048
[  135.863928][ T5551] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.998011][   T23] usbhid 4-1:0.0: can't add hid device: -71
[  136.018671][   T23] usbhid: probe of 4-1:0.0 failed with error -71
[  136.115272][   T23] usb 4-1: USB disconnect, device number 3
[  136.550437][ T5559] loop5: detected capacity change from 0 to 1024
[  136.658884][ T5559] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  136.822166][ T5559] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none.
[  136.868824][ T5562] loop3: detected capacity change from 0 to 16
[  136.940262][ T1108] usb 1-1: unable to get BOS descriptor or descriptor too short
[  136.983099][ T5559] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.426: missing EA_INODE flag
[  137.009964][ T5559] EXT4-fs (loop5): Remounting filesystem read-only
[  137.047595][ T5559] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.426: error while reading EA inode 11 err=-117
[  137.076441][ T5562] erofs: (device loop3): mounted with root inode @ nid 36.
[  137.087361][ T1108] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 250, changing to 7
[  137.128990][ T5566] loop2: detected capacity change from 0 to 1024
[  137.139639][ T5559] EXT4-fs (loop5): Remounting filesystem read-only
[  137.299188][ T5570] loop3: detected capacity change from 0 to 256
[  137.330924][ T1108] usb 1-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40
[  137.343740][ T5566] hfsplus: b-tree write err: -5, ino 4
[  137.361599][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.392517][ T1108] usb 1-1: Product: syz
[  137.411261][ T1108] usb 1-1: Manufacturer: syz
[  137.426624][ T1108] usb 1-1: SerialNumber: syz
[  137.474436][ T5570] FAT-fs (loop3): Directory bread(block 64) failed
[  137.519862][ T5570] FAT-fs (loop3): Directory bread(block 65) failed
[  137.574560][ T5570] FAT-fs (loop3): Directory bread(block 66) failed
[  137.610649][ T5570] FAT-fs (loop3): Directory bread(block 67) failed
[  137.724116][ T5570] FAT-fs (loop3): Directory bread(block 68) failed
[  138.225172][ T5570] FAT-fs (loop3): Directory bread(block 69) failed
[  138.580750][ T5570] FAT-fs (loop3): Directory bread(block 70) failed
[  138.660083][ T5570] FAT-fs (loop3): Directory bread(block 71) failed
[  138.667675][ T5570] FAT-fs (loop3): Directory bread(block 72) failed
[  138.678071][ T5586] loop5: detected capacity change from 0 to 1024
[  138.703864][ T5591] loop0: detected capacity change from 0 to 256
[  138.711181][ T1108] usb 1-1: 1:1 : incorrect wMaxPacketSize for BADD profile
[  138.740345][ T5570] FAT-fs (loop3): Directory bread(block 73) failed
[  138.760701][ T1108] usb 1-1: incorrect wMaxPacketSize 0x8 for BADD profile
[  138.832643][ T5586] EXT4-fs (loop5): Ignoring removed bh option
[  138.833495][ T1108] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  138.870304][ T5591] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  139.182888][ T5599] loop1: detected capacity change from 0 to 1024
[  139.274280][ T1108] usb 1-1: USB disconnect, device number 9
[  139.515085][ T5599] process 'syz.1.438' launched './file0' with NULL argv: empty string added
[  139.776693][ T5586] EXT4-fs (loop5): mounted filesystem without journal. Opts: nolazytime,dioread_lock,noquota,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,sb=0x0000000000000009,bsdgroups,bh,init_itable,,errors=continue. Quota mode: none.
[  140.061223][ T5607] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  140.121301][ T4337] udevd[4337]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  140.151601][ T5591] attempt to access beyond end of device
[  140.151601][ T5591] loop0: rw=524288, want=34359738496, limit=256
[  140.207162][ T5591] attempt to access beyond end of device
[  140.207162][ T5591] loop0: rw=0, want=34359738496, limit=256
[  140.310191][   T21] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  140.350043][   T26] audit: type=1800 audit(1778270706.031:18): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.437" name="file1" dev="loop0" ino=1048612 res=0 errno=0
[  140.397039][ T5591] [syz.0.437/5591] FS: loop0 File: /file1 would truncate fibmap result
[  140.790792][   T21] usb 4-1: unable to get BOS descriptor or descriptor too short
[  140.920818][   T21] usb 4-1: not running at top speed; connect to a high speed hub
[  141.140842][   T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.449860][   T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  141.492913][ T5631] loop0: detected capacity change from 0 to 1024
[  141.514540][ T5634] loop1: detected capacity change from 0 to 256
[  141.556737][ T5634] FAT-fs (loop1): Directory bread(block 64) failed
[  141.581390][ T5634] FAT-fs (loop1): Directory bread(block 65) failed
[  141.640561][ T5634] FAT-fs (loop1): Directory bread(block 66) failed
[  141.668690][ T5634] FAT-fs (loop1): Directory bread(block 67) failed
[  141.699211][ T5634] FAT-fs (loop1): Directory bread(block 68) failed
[  141.728819][ T5634] FAT-fs (loop1): Directory bread(block 69) failed
[  141.770662][ T5631] Bluetooth: hci0: unsupported parameter 255
[  141.788805][ T5634] FAT-fs (loop1): Directory bread(block 70) failed
[  141.798414][   T21] usb 4-1: string descriptor 0 read error: -22
[  141.812327][   T21] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  141.829117][ T5631] Bluetooth: hci0: unsupported parameter 255
[  142.026637][ T5634] FAT-fs (loop1): Directory bread(block 71) failed
[  142.154862][ T5634] FAT-fs (loop1): Directory bread(block 72) failed
[  142.378812][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.481050][ T5634] FAT-fs (loop1): Directory bread(block 73) failed
[  142.564491][   T21] usb 4-1: 0:2 : does not exist
[  143.286823][ T5649] loop3: detected capacity change from 0 to 512
[  143.400224][   T21] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[  143.461312][ T5649] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  143.472578][ T5654] loop0: detected capacity change from 0 to 1024
[  143.486594][ T5649] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  143.529112][ T5650] loop5: detected capacity change from 0 to 8192
[  143.530379][ T5649] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  143.544637][ T5656] loop1: detected capacity change from 0 to 1024
[  143.632182][   T21] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  143.643203][ T5654] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,errors=remount-ro,. Quota mode: none.
[  143.649549][ T5650] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  143.670529][ T5654] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.688196][ T5656] EXT4-fs (loop1): Ignoring removed bh option
[  143.790630][ T5650] FAT-fs (loop5): Filesystem has been set read-only
[  143.798711][ T5656] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  143.824205][ T5654] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.455: inode has both inline data and extents flags
[  143.864090][ T5656] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block
[  143.864090][ T5656] 
[  143.880042][   T21] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  143.897593][ T5649] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,dioread_nolock,abort,grpjquota=,mblk_io_submit,init_itable,nomblk_io_submit,grpquota,min_batch_time=0x000000000000007a,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback.
[  143.960033][ T5650] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  143.996087][ T5654] EXT4-fs (loop0): Remounting filesystem read-only
[  144.005643][ T5649] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  144.031210][ T5650] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  144.082846][ T5662] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  144.092841][   T21] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[  144.138604][   T21] usb 4-1: USB disconnect, device number 4
[  144.172925][ T5650] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  144.364762][   T26] audit: type=1800 audit(1778270710.041:19): pid=5665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.454" name="file2" dev="loop3" ino=16 res=0 errno=0
[  145.565289][ T5676] loop5: detected capacity change from 0 to 256
[  145.702202][ T5676] FAT-fs (loop5): Directory bread(block 64) failed
[  145.719981][ T5676] FAT-fs (loop5): Directory bread(block 65) failed
[  145.770004][ T5676] FAT-fs (loop5): Directory bread(block 66) failed
[  145.777463][ T5676] FAT-fs (loop5): Directory bread(block 67) failed
[  145.853702][ T5676] FAT-fs (loop5): Directory bread(block 68) failed
[  145.874738][ T5686] loop1: detected capacity change from 0 to 256
[  145.884444][ T5682] loop3: detected capacity change from 0 to 1024
[  145.899897][ T5676] FAT-fs (loop5): Directory bread(block 69) failed
[  145.918552][ T5676] FAT-fs (loop5): Directory bread(block 70) failed
[  145.938023][ T5676] FAT-fs (loop5): Directory bread(block 71) failed
[  145.947523][ T5676] FAT-fs (loop5): Directory bread(block 72) failed
[  145.956111][ T5676] FAT-fs (loop5): Directory bread(block 73) failed
[  146.014148][ T5686] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  146.048666][ T5682] hfsplus: request for non-existent node 3 in B*Tree
[  146.077267][ T5689] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  146.113468][ T5682] hfsplus: request for non-existent node 3 in B*Tree
[  146.421099][ T5686] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008)
[  146.472984][ T5686] exFAT-fs (loop1): Filesystem has been set read-only
[  146.589835][ T5695] loop0: detected capacity change from 0 to 2048
[  146.784189][ T5701] loop2: detected capacity change from 0 to 2048
[  146.793731][ T5695] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  146.797827][ T5705] loop5: detected capacity change from 0 to 512
[  146.882179][ T5701] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  146.913611][ T5701] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  146.958179][ T5705] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00)
[  146.960034][   T26] audit: type=1800 audit(1778270712.601:20): pid=5705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.471" name="file2" dev="loop5" ino=1048619 res=0 errno=0
[  146.998478][ T5705] FAT-fs (loop5): Filesystem has been set read-only
[  147.034736][ T5705] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00)
[  147.058281][ T5701] fs-verity: sha512 using implementation "sha512-avx2"
[  147.063195][ T5705] attempt to access beyond end of device
[  147.063195][ T5705] loop5: rw=2049, want=17179852770, limit=512
[  147.088067][ T5709] loop1: detected capacity change from 0 to 2048
[  147.178975][    T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  147.242669][    T7] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  147.399272][ T5709] UDF-fs: iocharset defauovrs not found
[  147.500183][ T5714] loop0: detected capacity change from 0 to 4096
[  147.665716][ T5721] loop2: detected capacity change from 0 to 1764
[  147.785667][ T5714] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  147.810099][ T5714] EXT4-fs (loop0): Test dummy encryption mode enabled
[  147.831866][ T5714] EXT4-fs (loop0): Ignoring removed orlov option
[  147.945204][ T5730] netlink: 12 bytes leftover after parsing attributes in process `syz.5.477'.
[  148.736458][ T5714] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,bsddf,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback.
[  148.949952][ T5737] loop5: detected capacity change from 0 to 512
[  149.056426][ T5737] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  149.094771][ T5737] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  149.195256][ T5737] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  149.240664][ T5737] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  149.261323][ T5737] System zones: 0-2, 18-18, 34-35
[  149.269414][ T5737] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  149.295031][ T5754] erofs: (device loop2): mounted with root inode @ nid 36.
[  149.306588][ T5744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'.
[  149.377627][ T5745] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  149.429827][   T21] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  149.671799][ T5741] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  149.699788][   T21] usb 1-1: Using ep0 maxpacket: 16
[  149.734475][ T5741] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 658 with error 28
[  149.768736][ T5741] EXT4-fs (loop1): This should not happen!! Data will be lost
[  149.768736][ T5741] 
[  149.782375][ T5765] netlink: 80 bytes leftover after parsing attributes in process `syz.5.490'.
[  149.798643][ T5741] EXT4-fs (loop1): Total free blocks count 0
[  149.817272][ T5741] EXT4-fs (loop1): Free/Dirty block details
[  149.835548][ T5741] EXT4-fs (loop1): free_blocks=4096
[  149.849321][   T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.878970][ T5741] EXT4-fs (loop1): dirty_blocks=688
[  149.886347][   T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.908505][ T5767] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  149.923379][ T5741] EXT4-fs (loop1): Block reservation details
[  149.937242][   T21] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  149.960198][   T21] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  149.979835][ T5741] EXT4-fs (loop1): i_reserved_data_blocks=43
[  149.980124][ T5767] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  149.992761][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.021644][   T21] usb 1-1: config 0 descriptor??
[  150.058879][ T5767] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102]
[  150.083264][ T5767] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80)
[  150.105350][ T5767] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features
[  150.123729][ T5767] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,noblock_validity,jqfmt=vfsv0,barrier=0x000000000000d95a,jqfmt=vfsold,,errors=continue. Quota mode: none.
[  150.158302][ T5773] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  150.183236][ T5773] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.232821][ T5771] EXT4-fs (loop3): 1 truncate cleaned up
[  150.271640][ T5771] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  150.349659][ T5770] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.492: Invalid inode table block 1435707004 in block_group 0
[  150.379179][ T4241] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[  150.447809][ T4241] EXT4-fs (loop1): This should not happen!! Data will be lost
[  150.447809][ T4241] 
[  150.459902][ T5770] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  150.475729][ T5770] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #15: comm syz.3.492: mark_inode_dirty error
[  150.512432][   T21] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  150.529250][   T21] microsoft 0003:045E:07DA.0007: collection stack underflow
[  150.539594][ T5770] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.492: Invalid inode table block 1435707004 in block_group 0
[  150.556746][   T21] microsoft 0003:045E:07DA.0007: item 0 2 0 12 parsing failed
[  150.600290][   T21] microsoft 0003:045E:07DA.0007: parse failed
[  150.648860][ T5771] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.492: Invalid inode table block 1435707004 in block_group 0
[  150.649222][   T21] microsoft: probe of 0003:045E:07DA.0007 failed with error -22
[  150.760335][   T21] usb 1-1: USB disconnect, device number 10
[  150.803791][ T4199] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1435707004 in block_group 0
[  150.868235][ T4199] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  150.928267][ T4199] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #15: comm syz-executor: mark_inode_dirty error
[  150.977218][ T4241] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm kworker/u4:5: Invalid inode table block 1435707004 in block_group 0
[  151.174740][ T5790] set_capacity_and_notify: 5 callbacks suppressed
[  151.174757][ T5790] loop3: detected capacity change from 0 to 512
[  151.228469][ T5790] EXT4-fs (loop3): Test dummy encryption mode enabled
[  151.257682][ T5790] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  151.330198][ T5790] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.497: bad orphan inode 131083
[  151.389821][ T1108] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  151.495466][ T5790] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none.
[  151.613110][ T5796] device syzkaller0 entered promiscuous mode
[  151.800699][ T1108] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  151.926815][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.250445][ T1108] usb 6-1: config 0 descriptor??
[  152.331380][ T1108] cp210x 6-1:0.0: cp210x converter detected
[  152.516439][ T5801] loop3: detected capacity change from 0 to 256
[  152.589930][ T5801] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  152.610249][ T5804] device syzkaller0 entered promiscuous mode
[  152.738170][ T5800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'.
[  152.760630][ T1108] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: 2
[  152.881472][ T5813] loop3: detected capacity change from 0 to 1024
[  153.130613][ T1111] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[  153.570365][ T1111] usb 3-1: unable to get BOS descriptor or descriptor too short
[  153.760927][ T1111] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  153.889828][ T1108] cp210x 6-1:0.0: failed to get vendor val 0x370c size 15: -71
[  153.915397][ T1108] cp210x 6-1:0.0: GPIO initialisation failed: -71
[  153.929495][ T1108] usb 6-1: cp210x converter now attached to ttyUSB0
[  153.942096][ T1108] usb 6-1: USB disconnect, device number 4
[  153.952333][ T1108] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  154.000254][ T1108] cp210x 6-1:0.0: device disconnected
[  154.023103][ T1111] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  154.046204][ T1111] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 4
[  154.121011][ T5827] Illegal XDP return value 1609756988, expect packet loss!
[  154.140118][ T1111] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  154.380189][ T5837] device syzkaller0 entered promiscuous mode
[  154.430076][ T1111] usb 3-1: string descriptor 0 read error: -22
[  154.447766][ T1111] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  154.488165][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.574462][ T1111] usb 3-1: low speed audio streaming not supported
[  154.609921][ T1111] usb 3-1: low speed audio streaming not supported
[  154.632089][ T5848] loop1: detected capacity change from 0 to 512
[  154.690135][ T5851] loop3: detected capacity change from 0 to 512
[  154.747291][ T5848] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  154.809228][ T2333] usb 3-1: USB disconnect, device number 5
[  154.915908][ T5851] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  154.940260][ T5848] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,inode_readahead_blks=0x0000000000000800,discard,,errors=continue. Quota mode: writeback.
[  155.020640][ T5854] mmap: syz.5.513 (5854) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  155.049954][ T5848] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  155.063202][ T5851] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.080286][ T1111] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  155.113382][ T5848] EXT4-fs (loop1): shut down requested (1)
[  155.138831][ T5851] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  155.173249][ T4643] udevd[4643]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  155.183164][ T5851] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  155.218598][ T5851] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.518: Failed to acquire dquot type 0
[  155.500062][ T1111] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  155.548322][ T5867] loop3: detected capacity change from 0 to 256
[  155.573385][ T1111] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.627009][ T1111] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  155.640249][ T5867] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  155.679924][ T1111] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  155.699834][ T5867] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  155.717631][ T5867] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  155.820666][ T5874] device syzkaller0 entered promiscuous mode
[  155.869971][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'.
[  155.891182][ T1111] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  155.923524][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.939655][ T1111] usb 1-1: Product: syz
[  155.951806][ T1111] usb 1-1: Manufacturer: syz
[  155.959134][ T1111] usb 1-1: SerialNumber: syz
[  156.008058][ T5878] device syzkaller0 entered promiscuous mode
[  156.010972][ T1111] cdc_ncm 1-1:1.0: skipping garbage
[  156.172117][ T5885] loop5: detected capacity change from 0 to 16
[  156.228866][ T5885] erofs: (device loop5): mounted with root inode @ nid 36.
[  156.247490][ T5885] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  156.268364][ T5885] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117]
[  156.507044][ T5890] loop1: detected capacity change from 0 to 512
[  156.715361][ T5890] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  156.803651][ T5890] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended
[  156.885023][ T5890] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.532: inode #15: comm syz.1.532: iget: illegal inode #
[  157.007823][ T5890] EXT4-fs (loop1): Remounting filesystem read-only
[  157.079867][ T5890] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.532: couldn't read orphan inode 15 (err -117)
[  157.140017][ T1111] cdc_ncm 1-1:1.0: bind() failure
[  157.160510][ T1111] cdc_ncm: probe of 1-1:1.1 failed with error -71
[  157.170698][ T5890] EXT4-fs (loop1): Remounting filesystem read-only
[  157.178838][ T5890] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback.
[  157.210169][ T1111] cdc_mbim: probe of 1-1:1.1 failed with error -71
[  157.232587][ T1111] usbtest: probe of 1-1:1.1 failed with error -71
[  157.241415][ T5900] device syzkaller0 entered promiscuous mode
[  157.280735][ T1111] usb 1-1: USB disconnect, device number 11
[  157.306364][ T5902] loop2: detected capacity change from 0 to 1024
[  157.362759][ T5890] EXT4-fs (loop1): shut down requested (2)
[  157.488670][   T26] audit: type=1800 audit(1778270723.161:21): pid=5902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.535" name="file1" dev="loop2" ino=20 res=0 errno=0
[  157.505276][ T5902] hfsplus: request for non-existent node 16777216 in B*Tree
[  157.640867][ T5902] hfsplus: request for non-existent node 16777216 in B*Tree
[  157.659965][ T5909] loop1: detected capacity change from 0 to 1024
[  157.717045][ T5909] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  157.787296][ T5908] device syzkaller0 entered promiscuous mode
[  157.868789][   T26] audit: type=1800 audit(1778270723.541:22): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.537" name=08 dev="loop1" ino=910 res=0 errno=0
[  158.067497][ T5920] loop2: detected capacity change from 0 to 256
[  158.147923][ T5912] device syzkaller0 entered promiscuous mode
[  158.254974][ T5920] FAT-fs (loop2): Directory bread(block 64) failed
[  158.299452][ T5920] FAT-fs (loop2): Directory bread(block 65) failed
[  158.308236][   T21] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  158.352713][ T5920] FAT-fs (loop2): Directory bread(block 66) failed
[  158.437816][ T5920] FAT-fs (loop2): Directory bread(block 67) failed
[  158.496294][ T5920] FAT-fs (loop2): Directory bread(block 68) failed
[  158.511411][ T5920] FAT-fs (loop2): Directory bread(block 69) failed
[  158.521733][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'.
[  158.533226][ T5920] FAT-fs (loop2): Directory bread(block 70) failed
[  158.575733][ T5920] FAT-fs (loop2): Directory bread(block 71) failed
[  158.605665][ T5920] FAT-fs (loop2): Directory bread(block 72) failed
[  158.619275][ T5920] FAT-fs (loop2): Directory bread(block 73) failed
[  159.746851][ T5947] device syzkaller0 entered promiscuous mode
[  159.890869][ T5949] loop1: detected capacity change from 0 to 1024
[  159.992773][ T5951] device syzkaller0 entered promiscuous mode
[  160.005005][   T26] audit: type=1800 audit(1778270725.681:23): pid=5949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.550" name="file1" dev="loop1" ino=20 res=0 errno=0
[  160.027690][ T5953] loop3: detected capacity change from 0 to 256
[  160.129661][ T5953] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  160.189438][ T5953] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  160.248168][ T5953] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  160.439020][ T5964] loop2: detected capacity change from 0 to 1024
[  160.533672][ T5964] EXT4-fs (loop2): Ignoring removed bh option
[  160.553232][ T5971] loop0: detected capacity change from 0 to 512
[  160.709238][ T5964] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,noquota,nolazytime,inode_readahead_blks=0x0000000000000100,nodioread_nolock,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  160.786986][ T5971] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  161.232550][ T5971] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.538595][ T5981] loop1: detected capacity change from 0 to 512
[  161.751265][ T5988] loop3: detected capacity change from 0 to 256
[  161.776968][ T5981] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue. Quota mode: writeback.
[  161.800411][ T5981] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.851289][ T5994] device syzkaller0 entered promiscuous mode
[  161.911610][ T5988] FAT-fs (loop3): Directory bread(block 64) failed
[  161.939571][ T5988] FAT-fs (loop3): Directory bread(block 65) failed
[  161.948859][ T5988] FAT-fs (loop3): Directory bread(block 66) failed
[  161.959246][ T5988] FAT-fs (loop3): Directory bread(block 67) failed
[  161.998931][ T5988] FAT-fs (loop3): Directory bread(block 68) failed
[  162.010340][ T5988] FAT-fs (loop3): Directory bread(block 69) failed
[  162.018991][ T5988] FAT-fs (loop3): Directory bread(block 70) failed
[  162.035827][ T5988] FAT-fs (loop3): Directory bread(block 71) failed
[  162.065072][ T5988] FAT-fs (loop3): Directory bread(block 72) failed
[  162.093410][ T5988] FAT-fs (loop3): Directory bread(block 73) failed
[  162.119936][    T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  162.138127][ T5996] loop1: detected capacity change from 0 to 1024
[  162.380025][    T7] usb 6-1: Using ep0 maxpacket: 16
[  163.329895][   T26] audit: type=1800 audit(1778270728.981:24): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.563" name="file1" dev="loop1" ino=20 res=0 errno=0
[  163.710066][    T7] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  163.739535][    T7] usb 6-1: config 0 has no interface number 0
[  163.755623][    T7] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  163.810310][    T7] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  164.027587][ T6016] device syzkaller0 entered promiscuous mode
[  164.070156][    T7] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[  164.090486][    T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.119758][    T7] usb 6-1: Product: syz
[  164.124352][    T7] usb 6-1: Manufacturer: syz
[  164.145688][    T7] usb 6-1: SerialNumber: syz
[  164.171654][    T7] usb 6-1: config 0 descriptor??
[  164.400541][ T6020] device syzkaller0 entered promiscuous mode
[  164.460598][    T7] usb 6-1: USB disconnect, device number 6
[  164.654047][ T6029] loop3: detected capacity change from 0 to 8
[  164.908993][ T4199] SQUASHFS error: Unable to read directory block [631:72]
[  164.983821][ T4199] SQUASHFS error: Unable to read inode 0x0
[  165.025173][ T4199] SQUASHFS error: Unable to read inode 0x0
[  165.143275][ T6042] loop1: detected capacity change from 0 to 256
[  165.148258][ T6041] loop5: detected capacity change from 0 to 1024
[  165.229946][ T6041] EXT4-fs (loop5): Ignoring removed orlov option
[  165.269226][ T6041] EXT4-fs (loop5): inline encryption not supported
[  165.330638][ T6042] FAT-fs (loop1): Directory bread(block 64) failed
[  165.338823][ T6042] FAT-fs (loop1): Directory bread(block 65) failed
[  165.348708][ T6041] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block
[  165.348708][ T6041] 
[  165.401079][ T6042] FAT-fs (loop1): Directory bread(block 66) failed
[  165.437381][ T6042] FAT-fs (loop1): Directory bread(block 67) failed
[  165.514566][ T6042] FAT-fs (loop1): Directory bread(block 68) failed
[  165.559884][ T6042] FAT-fs (loop1): Directory bread(block 69) failed
[  165.567698][ T6042] FAT-fs (loop1): Directory bread(block 70) failed
[  165.612325][ T6042] FAT-fs (loop1): Directory bread(block 71) failed
[  165.640182][ T6042] FAT-fs (loop1): Directory bread(block 72) failed
[  165.647286][ T6042] FAT-fs (loop1): Directory bread(block 73) failed
[  165.665063][ T4236] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  166.334852][ T4236] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  166.369745][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.471378][ T4236] usb 1-1: config 0 descriptor??
[  166.511333][ T4236] cp210x 1-1:0.0: cp210x converter detected
[  166.582695][ T6050] device syzkaller0 entered promiscuous mode
[  166.838275][ T6057] device syzkaller0 entered promiscuous mode
[  166.950062][ T4236] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: 2
[  167.380512][ T4236] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71
[  167.416160][ T4236] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  167.592579][ T4236] usb 1-1: cp210x converter now attached to ttyUSB0
[  167.784348][ T4236] usb 1-1: USB disconnect, device number 12
[  167.843212][ T4236] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  167.914843][ T4236] cp210x 1-1:0.0: device disconnected
[  168.107696][ T6074] loop2: detected capacity change from 0 to 2048
[  168.248036][ T6074] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  168.280684][ T6078] APIC base relocation is unsupported by KVM
[  168.309330][ T6077] loop5: detected capacity change from 0 to 2048
[  168.325012][ T4241] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.906522][ T6077] EXT4-fs (loop5): failed to initialize system zone (-117)
[  168.955608][ T4241] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.020085][ T6077] EXT4-fs (loop5): mount failed
[  169.378463][ T4241] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.453483][ T6090] loop0: detected capacity change from 0 to 256
[  169.536457][ T6092] loop2: detected capacity change from 0 to 512
[  169.583122][ T6090] FAT-fs (loop0): Directory bread(block 64) failed
[  169.607898][ T4241] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.631078][ T6094] loop1: detected capacity change from 0 to 2048
[  169.643593][ T6092] EXT4-fs (loop2): Ignoring removed nobh option
[  169.659850][ T6090] FAT-fs (loop0): Directory bread(block 65) failed
[  169.688316][ T6092] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  169.703267][ T6094] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  169.715961][ T6090] FAT-fs (loop0): Directory bread(block 66) failed
[  169.732201][ T6090] FAT-fs (loop0): Directory bread(block 67) failed
[  169.801924][ T6090] FAT-fs (loop0): Directory bread(block 68) failed
[  169.826583][ T6092] EXT4-fs (loop2): 1 truncate cleaned up
[  169.844055][ T6092] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none.
[  169.869915][ T6090] FAT-fs (loop0): Directory bread(block 69) failed
[  169.876956][ T6090] FAT-fs (loop0): Directory bread(block 70) failed
[  169.888167][ T6090] FAT-fs (loop0): Directory bread(block 71) failed
[  169.895355][ T6090] FAT-fs (loop0): Directory bread(block 72) failed
[  169.903593][ T6090] FAT-fs (loop0): Directory bread(block 73) failed
[  170.040545][ T4266] Bluetooth: hci0: command 0x0401 tx timeout
[  170.407668][ T6100] loop1: detected capacity change from 0 to 128
[  170.612141][ T6100] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  170.667196][ T6100] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  170.845170][   T26] audit: type=1800 audit(1778270736.521:25): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.597" name="file1" dev="loop1" ino=89 res=0 errno=0
[  170.924092][ T6087] chnl_net:caif_netlink_parms(): no params data found
[  171.341728][ T6121] loop1: detected capacity change from 0 to 512
[  171.387840][ T6109] device syzkaller0 entered promiscuous mode
[  171.399936][    T7] Bluetooth: hci4: command 0x0409 tx timeout
[  171.415379][ T6121] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  171.477795][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.483596][ T6121] EXT4-fs (loop1): 1 truncate cleaned up
[  171.493375][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.521976][ T6087] device bridge_slave_0 entered promiscuous mode
[  171.544154][ T6121] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none.
[  171.698530][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.709277][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.736325][ T6087] device bridge_slave_1 entered promiscuous mode
[  171.753713][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'.
[  171.776329][ T6140] loop1: detected capacity change from 0 to 2048
[  171.834557][ T6140] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  171.938926][ T6137] device syzkaller0 entered promiscuous mode
[  172.019018][ T6143] loop2: detected capacity change from 0 to 1024
[  172.119860][ T4266] Bluetooth: hci0: command 0x0c1a tx timeout
[  172.254347][ T6143] EXT4-fs (loop2): Ignoring removed orlov option
[  172.586860][ T6143] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,nodioread_nolock,grpjquota=,,errors=continue. Quota mode: none.
[  172.781283][ T6087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.805588][ T6143] EXT4-fs error (device loop2): __ext4_new_inode:1292: comm syz.2.604: failed to insert inode 15: doubly allocated?
[  172.851669][ T6087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.882893][ T6087] team0: Port device team_slave_0 added
[  172.894477][ T6143] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[  172.910287][ T6087] team0: Port device team_slave_1 added
[  172.980400][ T6087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.004535][ T6150] loop0: detected capacity change from 0 to 4096
[  173.031931][ T6087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.082817][ T6087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.109924][ T6150] EXT4-fs (loop0): Test dummy encryption mode enabled
[  173.118776][ T6156] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  173.166010][ T6150] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103]
[  173.184977][ T6156] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback.
[  173.198821][ T6150] System zones: 0-5
[  173.206992][ T6150] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback.
[  173.260011][ T6156] ext4 filesystem being mounted at /67/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.291488][ T6162] set_capacity_and_notify: 1 callbacks suppressed
[  173.291504][ T6162] loop2: detected capacity change from 0 to 256
[  173.309550][ T6087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.329980][    T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  173.356987][ T6087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.412184][ T6162] FAT-fs (loop2): Directory bread(block 64) failed
[  173.449863][ T6162] FAT-fs (loop2): Directory bread(block 65) failed
[  173.456881][ T6162] FAT-fs (loop2): Directory bread(block 66) failed
[  173.479783][ T4266] Bluetooth: hci4: command 0x041b tx timeout
[  173.497233][ T6087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.550006][ T6162] FAT-fs (loop2): Directory bread(block 67) failed
[  173.558423][ T4797] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 34 in block_group 0
[  173.578275][ T6162] FAT-fs (loop2): Directory bread(block 68) failed
[  173.642867][ T6162] FAT-fs (loop2): Directory bread(block 69) failed
[  173.649959][    T7] usb 2-1: Using ep0 maxpacket: 16
[  173.657896][ T4797] EXT4-fs (loop5): Remounting filesystem read-only
[  173.680104][ T4797] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  173.695130][ T6162] FAT-fs (loop2): Directory bread(block 70) failed
[  173.721038][ T4797] EXT4-fs (loop5): Remounting filesystem read-only
[  173.731699][ T6162] FAT-fs (loop2): Directory bread(block 71) failed
[  173.754572][ T6162] FAT-fs (loop2): Directory bread(block 72) failed
[  173.759795][ T4797] EXT4-fs error (device loop5): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  173.773354][ T6162] FAT-fs (loop2): Directory bread(block 73) failed
[  173.791885][ T4797] EXT4-fs (loop5): Remounting filesystem read-only
[  173.802359][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.818701][ T6087] device hsr_slave_0 entered promiscuous mode
[  173.819302][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.856750][    T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  173.871737][ T4797] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 34 in block_group 0
[  173.915561][    T7] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  173.928167][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.941451][ T6087] device hsr_slave_1 entered promiscuous mode
[  173.965197][    T7] usb 2-1: config 0 descriptor??
[  173.973730][ T6087] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  173.988193][ T4797] EXT4-fs (loop5): Remounting filesystem read-only
[  174.026280][ T4797] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  174.048972][ T6087] Cannot create hsr debugfs directory
[  174.072243][ T4797] EXT4-fs (loop5): Remounting filesystem read-only
[  174.084305][ T4797] EXT4-fs error (device loop5): ext4_quota_off:6542: inode #4: comm syz-executor: mark_inode_dirty error
[  174.098972][ T4797] EXT4-fs (loop5): Remounting filesystem read-only
[  174.532127][ T6176] netlink: 32 bytes leftover after parsing attributes in process `syz.0.610'.
[  174.861929][    T7] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  174.870438][    T7] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max
[  174.881032][    T7] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max
[  174.889338][    T7] microsoft 0003:045E:07DA.0008: item fetching failed at offset 32/34
[  174.901863][    T7] microsoft 0003:045E:07DA.0008: parse failed
[  174.909154][    T7] microsoft: probe of 0003:045E:07DA.0008 failed with error -22
[  175.057034][ T6180] loop5: detected capacity change from 0 to 1024
[  175.132897][ T1326] usb 2-1: USB disconnect, device number 3
[  175.181153][ T6180] attempt to access beyond end of device
[  175.181153][ T6180] loop5: rw=34817, want=5780, limit=1024
[  175.185608][   T26] audit: type=1800 audit(1778270740.851:26): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.609" name="file1" dev="loop5" ino=20 res=0 errno=0
[  175.208796][ T6180] attempt to access beyond end of device
[  175.208796][ T6180] loop5: rw=34817, want=395261, limit=1024
[  175.258706][ T6180] attempt to access beyond end of device
[  175.258706][ T6180] loop5: rw=34817, want=395262, limit=1024
[  175.280018][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'.
[  175.359950][ T4236] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  175.533037][ T4241] device hsr_slave_0 left promiscuous mode
[  175.548956][ T4241] device hsr_slave_1 left promiscuous mode
[  175.594478][ T1326] Bluetooth: hci4: command 0x040f tx timeout
[  175.622677][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.623516][ T6194] loop5: detected capacity change from 0 to 2048
[  175.631030][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.656208][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.684681][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.687966][ T6194] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  175.728524][ T4241] device bridge_slave_1 left promiscuous mode
[  175.740136][ T4236] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.747461][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.770871][ T4236] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  175.806557][ T4236] usb 1-1: config 1 has no interface number 0
[  175.828665][ T4236] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.881072][ T4236] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  175.928724][ T4236] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 255
[  175.966540][ T4236] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  176.170329][ T4236] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  176.199213][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.263155][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.439783][ T4236] usb 1-1: Product: syz
[  176.453324][ T4236] usb 1-1: Manufacturer: syz
[  176.488852][ T4236] usb 1-1: SerialNumber: syz
[  176.564628][ T4241] device veth1_macvtap left promiscuous mode
[  176.595211][ T4241] device veth0_macvtap left promiscuous mode
[  176.636358][ T4241] device veth1_vlan left promiscuous mode
[  176.664495][ T4241] device veth0_vlan left promiscuous mode
[  176.840230][ T6182] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  176.927879][ T6221] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  177.051749][ T6224] loop2: detected capacity change from 0 to 256
[  177.103008][ T6224] FAT-fs (loop2): Directory bread(block 64) failed
[  177.116262][ T6224] FAT-fs (loop2): Directory bread(block 65) failed
[  177.123880][ T6224] FAT-fs (loop2): Directory bread(block 66) failed
[  177.131586][ T6224] FAT-fs (loop2): Directory bread(block 67) failed
[  177.143645][ T6224] FAT-fs (loop2): Directory bread(block 68) failed
[  177.152015][ T6224] FAT-fs (loop2): Directory bread(block 69) failed
[  177.159510][ T6224] FAT-fs (loop2): Directory bread(block 70) failed
[  177.171073][ T6224] FAT-fs (loop2): Directory bread(block 71) failed
[  177.178261][ T6224] FAT-fs (loop2): Directory bread(block 72) failed
[  177.187126][ T6224] FAT-fs (loop2): Directory bread(block 73) failed
[  177.385726][ T4241] team0 (unregistering): Port device team_slave_1 removed
[  177.413030][ T4241] team0 (unregistering): Port device team_slave_0 removed
[  177.428818][ T4241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.446624][ T4241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.698783][ T6182] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  177.818743][ T4236] cdc_ncm 1-1:1.1: bind() failure
[  178.114655][ T4236] usb 1-1: USB disconnect, device number 13
[  178.201128][ T4234] Bluetooth: hci4: command 0x0419 tx timeout
[  178.236510][ T4241] bond0 (unregistering): Released all slaves
[  178.462841][ T6233] loop5: detected capacity change from 0 to 256
[  178.527537][ T6235] loop1: detected capacity change from 0 to 2048
[  178.603422][ T6235] UDF-fs: error (device loop1): udf_read_inode: (ino 1312) failed !bh
[  178.613863][ T6087] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  178.640006][ T6235] UDF-fs: Scanning with blocksize 512 failed
[  178.664392][ T6087] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  178.675221][ T6235] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  178.742138][ T6087] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  178.750310][ T6235] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  178.779352][ T6242] loop5: detected capacity change from 0 to 512
[  178.795441][ T6087] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  178.803356][ T6235] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  178.872468][ T6235] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  178.908565][ T6242] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  179.001865][ T6235] UDF-fs: Scanning with blocksize 1024 failed
[  179.031931][ T6242] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[  179.072577][ T6087] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.092796][ T6087] 8021q: adding VLAN 0 to HW filter on device team0
[  179.104715][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  179.170804][ T6242] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  179.199207][ T6235] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  179.215356][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  179.260832][ T6235] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  179.272922][ T6242] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.626: attempt to clear invalid blocks 33619980 len 1
[  179.287074][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  179.308562][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  179.317718][ T6235] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  179.357073][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.364855][ T5602] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.373644][ T6235] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  179.385601][ T6242] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.626: invalid indirect mapped block 1819239214 (level 0)
[  179.425970][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  179.442590][ T6242] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.626: invalid indirect mapped block 1819239214 (level 1)
[  179.469880][ T6235] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  179.478171][ T6235] UDF-fs: Scanning with blocksize 2048 failed
[  179.497493][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  179.530399][ T6242] EXT4-fs (loop5): 1 truncate cleaned up
[  179.536287][ T6242] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,init_itable=0x0000000000000004,mblk_io_submit,noblock_validity,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback.
[  179.580595][ T6235] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  179.592544][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.599727][ T5602] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.617468][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  179.638087][ T6235] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  179.663405][ T6235] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  179.690049][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  179.698391][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  179.743103][ T6235] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  179.744672][ T6242] EXT4-fs (loop5): shut down requested (1)
[  179.782060][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  179.796966][ T6235] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  179.842873][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  179.858472][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  179.907530][ T6235] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  179.948729][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  179.952145][ T6235] UDF-fs: Scanning with blocksize 4096 failed
[  179.983426][ T6235] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[  180.052829][ T6267] hub 8-0:1.0: USB hub found
[  180.058570][ T6267] hub 8-0:1.0: 1 port detected
[  180.164809][ T6265] loop0: detected capacity change from 0 to 2048
[  180.187809][ T6087] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  180.199422][ T6087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  180.406976][ T6265] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  180.486978][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.624'.
[  180.580420][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  180.606625][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  180.657003][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  180.743404][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  180.788230][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  180.951042][ T6278] device syzkaller0 entered promiscuous mode
[  180.958258][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  181.005634][ T6294] loop5: detected capacity change from 0 to 256
[  181.012834][    T7] Bluetooth: hci1: command 0x0406 tx timeout
[  181.020428][    T7] Bluetooth: hci3: command 0x0406 tx timeout
[  181.049945][    T7] Bluetooth: hci2: command 0x0406 tx timeout
[  181.129078][ T6281] device syzkaller0 entered promiscuous mode
[  181.407394][ T6298] loop2: detected capacity change from 0 to 8192
[  181.794893][ T6298] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  181.924264][ T6298] FAT-fs (loop2): Filesystem has been set read-only
[  182.473491][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  182.500032][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  182.547362][ T6087] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.631497][ T6306] loop5: detected capacity change from 0 to 256
[  182.687954][ T6306] exFAT-fs (loop5): failed to load alloc-bitmap
[  182.694463][ T6306] exFAT-fs (loop5): failed to recognize exfat type
[  182.879462][ T6319] loop0: detected capacity change from 0 to 256
[  183.003359][ T6317] loop1: detected capacity change from 0 to 4096
[  183.010815][ T6319] exfat: Bad value for 'uid'
[  183.129861][ T1111] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  183.392664][ T6317] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  183.493661][ T1111] usb 3-1: device descriptor read/64, error -71
[  183.857331][ T6333] loop5: detected capacity change from 0 to 256
[  183.879986][ T1111] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  183.965347][ T6333] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8943bfe8, utbl_chksum : 0xe619d30d)
[  184.091134][ T6333] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  184.101092][ T1111] usb 3-1: device descriptor read/64, error -71
[  184.142226][ T6339] loop1: detected capacity change from 0 to 512
[  184.193811][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  184.224358][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  184.224980][ T1111] usb usb3-port1: attempt power cycle
[  184.256126][ T6339] EXT4-fs (loop1): Test dummy encryption mode enabled
[  184.285856][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  184.292367][ T6339] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  184.326021][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  184.380917][ T6087] device veth0_vlan entered promiscuous mode
[  184.393480][ T6339] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.647: bad orphan inode 131083
[  184.429987][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  184.513089][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  184.532348][ T6339] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none.
[  184.575878][ T6087] device veth1_vlan entered promiscuous mode
[  184.689807][ T1111] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  184.745218][ T6087] device veth0_macvtap entered promiscuous mode
[  184.800796][ T1111] usb 3-1: device descriptor read/8, error -71
[  184.804581][ T6087] device veth1_macvtap entered promiscuous mode
[  184.821001][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  185.031592][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  185.394495][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  185.584392][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  185.660552][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  185.773241][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  185.845574][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.903817][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.945125][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.968958][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.012063][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.061514][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.109753][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.149469][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.178754][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.201038][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.227953][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.526931][  T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  186.580329][  T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  186.737742][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.817054][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.848126][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.975167][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.987908][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.001664][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.014286][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.027363][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.056528][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.103483][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.168899][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.181471][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  187.193790][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  187.225714][ T6087] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.248691][ T6087] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.278570][ T6087] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.287943][ T6087] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.350976][ T4630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.367512][ T4630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.411977][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  188.588276][ T4630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.626186][ T4630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.059327][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  190.101415][ T6400] loop2: detected capacity change from 0 to 16
[  190.144794][ T6400] erofs: (device loop2): mounted with root inode @ nid 36.
[  190.186262][ T6432] loop6: detected capacity change from 0 to 512
[  190.266694][ T6439] device syzkaller0 entered promiscuous mode
[  190.410453][ T6432] EXT4-fs (loop6): 1 truncate cleaned up
[  190.469915][ T6432] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  191.246151][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'.
[  191.271658][ T6431] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.592: Invalid inode table block 1435707004 in block_group 0
[  191.322065][ T6431] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  191.445727][ T6431] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #15: comm syz.6.592: mark_inode_dirty error
[  191.498011][ T6431] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.592: Invalid inode table block 1435707004 in block_group 0
[  191.553936][ T6432] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.592: Invalid inode table block 1435707004 in block_group 0
[  191.777170][ T6460] binder: 6458:6460 ioctl 4018620d 0 returned -22
[  191.791141][ T6087] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1435707004 in block_group 0
[  191.836181][ T6087] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  191.893657][ T6460] loop0: detected capacity change from 0 to 1024
[  192.040508][ T6087] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #15: comm syz-executor: mark_inode_dirty error
[  192.489265][ T5210] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm kworker/u4:14: Invalid inode table block 1435707004 in block_group 0
[  192.557159][ T6460] EXT4-fs (loop0): Ignoring removed oldalloc option
[  192.809015][ T6460] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,auto_da_alloc=0x00000000000000e6,oldalloc,nobarrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  192.889873][ T6477] binder: 6474:6477 ioctl c00c620f 2000000022c0 returned -22
[  192.963931][ T6460] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.368566][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  194.441318][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  195.135404][ T6493] device syzkaller0 entered promiscuous mode
[  195.430693][ T2333] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  195.482626][ T6504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.687'.
[  195.552480][ T6504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.687'.
[  195.596801][ T6508] loop0: detected capacity change from 0 to 1024
[  195.669983][ T2333] usb 7-1: Using ep0 maxpacket: 16
[  195.791947][ T2333] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.813687][   T26] audit: type=1800 audit(1778270761.481:27): pid=6508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.686" name="file1" dev="loop0" ino=20 res=0 errno=0
[  195.825292][ T2333] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.903355][ T2333] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  195.924609][ T2333] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  195.935332][ T2333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.036892][ T2333] usb 7-1: config 0 descriptor??
[  197.999387][ T6529] loop5: detected capacity change from 0 to 128
[  198.075141][ T6529] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  198.100000][ T2333] usbhid 7-1:0.0: can't add hid device: -71
[  198.117147][ T6529] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  198.157903][ T2333] usbhid: probe of 7-1:0.0 failed with error -71
[  199.516833][ T2333] usb 7-1: USB disconnect, device number 2
[  199.607031][ T6529] syz.5.693 (pid 6529) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  199.686873][ T6529] fscrypt: AES-128-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  199.859134][ T6549] netlink: 64 bytes leftover after parsing attributes in process `syz.6.698'.
[  200.002513][ T6551] device syzkaller0 entered promiscuous mode
[  200.064664][ T6557] device syzkaller0 entered promiscuous mode
[  200.243487][ T6564] loop6: detected capacity change from 0 to 1024
[  200.357628][   T26] audit: type=1800 audit(1778270766.031:28): pid=6564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.702" name="file1" dev="loop6" ino=20 res=0 errno=0
[  200.525138][ T6571] loop5: detected capacity change from 0 to 1024
[  202.598714][ T2333] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  202.643635][ T4241] hfsplus: b-tree write err: -5, ino 25
[  202.653053][ T4241] hfsplus: b-tree write err: -5, ino 4
[  202.698271][ T4241] hfsplus: b-tree write err: -5, ino 2
[  202.739918][ T4241] hfsplus: b-tree write err: -5, ino 26
[  202.747012][ T6604] netlink: 64 bytes leftover after parsing attributes in process `syz.0.711'.
[  202.890166][ T2333] usb 2-1: Using ep0 maxpacket: 16
[  203.010302][ T2333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.036806][ T2333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  203.069268][ T2333] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  203.100422][ T2333] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  203.116640][ T2333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.118728][ T6615] device syzkaller0 entered promiscuous mode
[  203.138746][ T2333] usb 2-1: config 0 descriptor??
[  203.188193][ T6622] device syzkaller0 entered promiscuous mode
[  203.483190][ T6631] loop2: detected capacity change from 0 to 512
[  203.525165][ T6636] loop0: detected capacity change from 0 to 8
[  203.542372][ T6631] EXT4-fs (loop2): Ignoring removed orlov option
[  203.641569][ T6631] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  203.689937][ T2333] usbhid 2-1:0.0: can't add hid device: -71
[  203.696508][ T2333] usbhid: probe of 2-1:0.0 failed with error -71
[  203.708235][ T6636] SQUASHFS error: zlib decompression failed, data probably corrupt
[  203.730118][ T6631] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  203.741575][ T6636] SQUASHFS error: Failed to read block 0x4de: -5
[  203.748422][ T6636] SQUASHFS error: Failed to read block 0x4e2: -5
[  203.758732][ T6636] SQUASHFS error: Failed to read block 0x9ca: -5
[  203.763287][ T2333] usb 2-1: USB disconnect, device number 4
[  203.765348][ T6636] SQUASHFS error: Failed to read block 0x2cf2: -5
[  203.778725][ T4235] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  203.798336][ T6636] SQUASHFS error: Failed to read block 0x52cf2: -5
[  203.805408][ T6636] SQUASHFS error: Failed to read block 0x535f2: -5
[  203.828845][   T26] audit: type=1800 audit(1778270769.501:29): pid=6636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.718" name="file1" dev="loop0" ino=5 res=0 errno=0
[  203.874848][   T26] audit: type=1800 audit(1778270769.501:30): pid=6631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.716" name="file1" dev="loop2" ino=15 res=0 errno=0
[  203.992110][ T6650] loop6: detected capacity change from 0 to 512
[  204.039539][ T6650] EXT4-fs (loop6): Unrecognized mount option "(" or missing value
[  204.079981][ T4235] usb 6-1: Using ep0 maxpacket: 32
[  204.239897][ T4235] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.426119][ T4235] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.563713][ T4235] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  205.026266][ T6663] loop1: detected capacity change from 0 to 1024
[  205.079938][ T4235] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  205.129856][ T6663] EXT4-fs (loop1): Ignoring removed orlov option
[  205.150042][ T4235] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  205.189025][ T4235] usb 6-1: Product: syz
[  205.205358][ T6668] netlink: 64 bytes leftover after parsing attributes in process `syz.0.724'.
[  205.224250][ T4235] usb 6-1: Manufacturer: syz
[  205.229011][ T4235] usb 6-1: SerialNumber: syz
[  205.293618][ T4235] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input9
[  205.367711][ T6674] device syzkaller0 entered promiscuous mode
[  205.429020][ T6663] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,nodioread_nolock,grpjquota=,,errors=continue. Quota mode: none.
[  205.599860][ T4237] usb 6-1: USB disconnect, device number 7
[  205.642008][ T6663] EXT4-fs error (device loop1): __ext4_new_inode:1292: comm syz.1.723: failed to insert inode 15: doubly allocated?
[  205.700935][ T6663] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem
[  205.768152][ T4237] appletouch 6-1:1.0: input: appletouch disconnected
[  205.822131][ T6680] loop0: detected capacity change from 0 to 1024
[  205.940602][ T6682] loop6: detected capacity change from 0 to 16
[  206.092393][ T6684] device syzkaller0 entered promiscuous mode
[  206.113312][ T6682] erofs: (device loop6): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832
[  206.278560][ T6687] loop0: detected capacity change from 0 to 1024
[  206.436442][   T26] audit: type=1800 audit(1778270772.111:31): pid=6631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.716" name="file1" dev="loop2" ino=15 res=0 errno=0
[  206.722283][ T6697] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6697]
[  207.679814][ T6703] netlink: 64 bytes leftover after parsing attributes in process `syz.5.736'.
[  207.891453][  T367] wlan1: Trigger new scan to find an IBSS to join
[  209.038224][ T2333] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  209.468997][ T2333] usb 6-1: Using ep0 maxpacket: 8
[  210.267390][ T6745] loop2: detected capacity change from 0 to 512
[  210.349968][ T2333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  210.352029][ T6742] device syzkaller0 entered promiscuous mode
[  210.379064][ T2333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  210.408473][ T2333] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  210.437132][ T2333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  210.448081][ T2333] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  210.468765][ T2333] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  210.489573][ T2333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.512637][ T2333] usb 6-1: config 0 descriptor??
[  210.549521][ T6745] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal
[  210.642075][ T4630] wlan1: Trigger new scan to find an IBSS to join
[  211.018139][ T4198] Bluetooth: hci6: urb ffff88801ec06700 submission failed (90)
[  211.065677][ T2333] usb 6-1: USB disconnect, device number 8
[  211.541545][ T6759] netlink: 64 bytes leftover after parsing attributes in process `syz.1.750'.
[  211.609643][ T6763] loop2: detected capacity change from 0 to 2048
[  211.662667][  T154] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00
[  211.755917][ T6763] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  211.818961][ T6782] loop6: detected capacity change from 0 to 256
[  211.848493][ T6784] loop5: detected capacity change from 0 to 512
[  211.958151][ T6782] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  212.043965][ T6782] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779264)
[  212.088968][ T6782] FAT-fs (loop6): Filesystem has been set read-only
[  212.112006][ T6784] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  212.240671][ T6303] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  212.259974][ T6784] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.509857][ T6303] usb 2-1: Using ep0 maxpacket: 32
[  212.641182][ T6303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.720660][ T6798] device syzkaller0 entered promiscuous mode
[  212.769564][ T6803] loop6: detected capacity change from 0 to 1024
[  212.801890][ T6303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.811950][ T6303] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  212.821032][ T6303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.866372][ T6303] usb 2-1: config 0 descriptor??
[  212.919883][ T6805] netlink: 64 bytes leftover after parsing attributes in process `syz.0.765'.
[  212.941119][ T6303] hub 2-1:0.0: USB hub found
[  213.043543][ T6811] loop2: detected capacity change from 0 to 1024
[  213.170047][ T6303] hub 2-1:0.0: 1 port detected
[  213.211119][ T4269] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  213.258836][ T6811] hfsplus: invalid xattr key length: 0
[  213.390648][ T6303] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  213.397439][ T6303] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  213.429784][ T4235] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  213.549932][ T6303] usbhid 2-1:0.0: can't add hid device: -71
[  213.558489][ T6303] usbhid: probe of 2-1:0.0 failed with error -71
[  213.590975][ T4269] usb 7-1: config 0 has an invalid interface number: 64 but max is 0
[  213.599473][ T4269] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  213.627171][ T4269] usb 7-1: config 0 has no interface number 0
[  213.714522][ T4235] usb 6-1: Using ep0 maxpacket: 8
[  213.863168][ T6303] usb 2-1: USB disconnect, device number 5
[  213.880965][ T4269] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  213.891260][ T4269] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.899842][ T4269] usb 7-1: Product: syz
[  213.905069][ T4269] usb 7-1: Manufacturer: syz
[  213.910147][ T4269] usb 7-1: SerialNumber: syz
[  213.937964][ T4269] usb 7-1: config 0 descriptor??
[  214.040370][ T4235] usb 6-1: unable to get BOS descriptor or descriptor too short
[  214.192645][ T4235] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 203, changing to 7
[  214.254781][ T4269] usb 7-1: Found UVC 0.08 device syz (046d:0823)
[  214.273981][ T4269] usb 7-1: No valid video chain found.
[  214.309275][ T4269] usb 7-1: USB disconnect, device number 3
[  214.771796][ T4235] usb 6-1: string descriptor 0 read error: -22
[  214.870668][ T4235] usb 6-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[  214.889115][ T4235] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.314270][ T6833] netlink: 64 bytes leftover after parsing attributes in process `syz.6.776'.
[  215.379027][ T6835] device syzkaller0 entered promiscuous mode
[  215.489919][ T4235] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  215.520300][ T4235] snd-usb-audio: probe of 6-1:1.0 failed with error -2
[  215.568636][ T4235] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  215.610224][ T4235] snd-usb-audio: probe of 6-1:1.1 failed with error -2
[  215.640237][ T4235] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  215.708192][ T4235] snd-usb-audio: probe of 6-1:1.2 failed with error -2
[  215.740689][ T4235] usb 6-1: USB disconnect, device number 9
[  216.002056][ T4643] udevd[4643]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  217.296130][ T4235] Bluetooth: hci4: command 0x0405 tx timeout
[  217.304494][ T6856] netlink: 64 bytes leftover after parsing attributes in process `syz.6.787'.
[  217.580701][ T6866] loop2: detected capacity change from 0 to 128
[  217.803444][ T6868] loop0: detected capacity change from 0 to 512
[  217.859858][ T6866] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  217.879848][ T4634] wlan1: Trigger new scan to find an IBSS to join
[  217.954216][ T6868] EXT4-fs (loop0): Ignoring removed oldalloc option
[  218.185980][ T6868] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,inode_readahead_blks=0x0000000000000000,lazytime,oldalloc,. Quota mode: writeback.
[  218.241173][ T6876] device syzkaller0 entered promiscuous mode
[  218.319981][ T6868] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  218.347700][ T6868] EXT4-fs (loop0): shut down requested (0)
[  218.453937][ T6880] loop5: detected capacity change from 0 to 256
[  218.527658][ T6880] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d)
[  218.909902][ T4555] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2
[  218.917163][ T6894] loop2: detected capacity change from 0 to 256
[  219.020476][ T6894] FAT-fs (loop2): Directory bread(block 64) failed
[  219.055627][ T6894] FAT-fs (loop2): Directory bread(block 65) failed
[  219.106994][ T6894] FAT-fs (loop2): Directory bread(block 66) failed
[  219.171916][ T6894] FAT-fs (loop2): Directory bread(block 67) failed
[  219.201357][ T6894] FAT-fs (loop2): Directory bread(block 68) failed
[  219.218718][ T6894] FAT-fs (loop2): Directory bread(block 69) failed
[  219.246863][ T6894] FAT-fs (loop2): Directory bread(block 70) failed
[  219.267590][ T6894] FAT-fs (loop2): Directory bread(block 71) failed
[  219.288002][ T6894] FAT-fs (loop2): Directory bread(block 72) failed
[  219.314540][ T6894] FAT-fs (loop2): Directory bread(block 73) failed
[  220.976848][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'.
[  221.730165][    T9] wlan1: Trigger new scan to find an IBSS to join
[  224.841164][ T4628] wlan1: Trigger new scan to find an IBSS to join
[  227.881336][ T4628] wlan1: Trigger new scan to find an IBSS to join
[  228.820324][ T4628] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00