last executing test programs:

1m2.391182258s ago: executing program 0 (id=72):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000000640)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,errors=continue,iocharset=cp869,discard=0x0000000000000005,nodiscard,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00}tU,\v\x00'/17, @ANYRESHEX=0xee01, @ANYBLOB=',\x00'], 0x24, 0x61b6, &(0x7f000001b700)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
creat(&(0x7f0000000080)='./file1\x00', 0x30)
fcntl$setlease(r0, 0x400, 0x1)
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')

1m1.232659216s ago: executing program 0 (id=79):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00')
r1 = fanotify_init(0x0, 0x400)
fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
getdents64(r2, 0x0, 0x0)

1m1.049450838s ago: executing program 0 (id=80):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x1ba, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x4000010, &(0x7f0000000080)={0x11, 0x17, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0)

1m0.99268767s ago: executing program 0 (id=81):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

1m0.28519211s ago: executing program 0 (id=88):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x4078bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xffff, 0x2}, {0xd, 0x18}}}, 0x24}}, 0x20040004)

59.130938497s ago: executing program 0 (id=93):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @random="3f168ca5c1c1"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}], @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0xff, 0xfd, 0xfff, 0x401}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44840}, 0x0)

58.991248119s ago: executing program 32 (id=93):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @random="3f168ca5c1c1"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}], @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0xff, 0xfd, 0xfff, 0x401}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44840}, 0x0)

31.557848278s ago: executing program 5 (id=272):
r0 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000200)={0x9, 0x2, 0xfffffff9, 0x5, '\x00', 0x10})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x4000000})
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0xc1105511, &(0x7f0000000040))

31.245420933s ago: executing program 5 (id=277):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xf5d, @loopback}, 0x4e)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xff, 0x100}, &(0x7f0000000180)=0x8)

31.058528256s ago: executing program 5 (id=281):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x81, 0x3ff}}]}}]}, 0x48}}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000)

30.834308999s ago: executing program 5 (id=285):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$eJzs3c9vHFcdAPDvjH82desEeoAKSIFCQFF2400bVb00uYBQVQlRcUAcUmNvLJPdrPGuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IBixQjATSopkdu1t7XW/j9S71fj7SaObN23nf9+LMvJm39rwAxtZzEbETEdMR8UZEzBf7k2KJO50l+9yjve2l/b3tpSTa7df/nuT52b7oOibzZFHmbER846sR30mOx21ubj1YrNWq60W63KqvlZubWzdW64sr1ZXqw0rl9sLtmy/derEysLZerf9y9yurr37zN7/+9Lu/3/nyD7JqzRV53e0YpE7Tpw7jZCYj4tXzCDYCE8V6esT14PGkEfGxiPhcfv7Px0T+vxMAuMja7floz3enAYCLLs3HwJK0VIwFzEWalkqdMbxn4lJaazRb1+83Nh4ud8bKLsdUen+1Vr15ZeaP38vvGKaSLL2Q5+X5ebpyJH0rIq5ExI9nnsjTpaVGbXl0tz0AMNaePNL//2um0//3oce3egDAR8bsqCsAAAyd/h8Axo/+HwDGTx/9f/Fl/8651wUAGA7P/wAwfvT/ADB+9P8AMFa+/tpr2dLeL95/vfzm5saDxps3lqvNB6X6xlJpqbG+VlppNFbyd/bUTyuv1misLbwQG2+VW9Vmq9zc3LpXb2w8bN3L3+t9rzo1lFYBAB/kytV3/pBExM7LT+RLdM3loK+Giy0ddQWAkZkYdQWAkTHbF4yv/p/xf3eu9QBGp+fLvGd7br7fTz9EEL9nBP9Xrn2y//F/czzDxWL8H8bX443/vzLwegDDZ/wfxle7nRyd83/6MAsAuJDO8Dv+7R8O6iYEGKnTJvMeyPf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcMHMRcR3I0lLxVzgc5GmpVLEUxFxOaaS+6u16s2IeDquRsTUTJZeGHWlAYAzSv+aFPN/XZt/fu5o7nTy75l8HRHf/9nrP3lrsdVaX8j2/+Nw/8zB9GGV9447w7yCAECfnuvzc3n/XSnWXQ/yj/a2lw6W7s+nA67nUbt347/FVMRL+3vb+dLJmYzJfD2b30tc+mdSpDtzkT4bERMDiL/zdkR8olf7k3xs5HIx82l3/ChiPzXU+On74qd5Xmed3Xx9fAB1gXHzzt2IuNPr/EuLa2rv8382v0Kd3e7dTmEH1779rvgH17+JHvGTD3HN333ht187trM938l7O+LZyV7xk8P4yQnxn+8z/p8+9ZkfvXJCXvvnEdeid/zuWOVWfa3c3Ny6sVpfXKmuVB9WKrcXbt986daLlXI+Rl0+GKk+7m8vX3/6pLpl7b90QvzZnu2fPjz2C322/xf/eePbn/2A+F/6fO+f/zM943dkfeIX+4y/eOlXJ07fncVfPqH9p/38r/cZ/92/bC33+VEAYAiam1sPFmu16vqZNrKn0EGUc2wjq+JACzxl488xyALvnO3wqfP6Vz33jcnDe8XBlvytrMQhNycdeCvOtPGosxHnHmu01yXg/L130o+6JgAAAAAAAAAAAAAAwEmG8adLo24jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9f/AgAA//91qMwl")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x21)
getdents64(r0, 0x0, 0x0)

29.638630388s ago: executing program 5 (id=290):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
read$FUSE(r0, &(0x7f0000001940)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
stat(0x0, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f00000003c0)={0xa8, 0x0, r1, [{{0x4, 0x2, 0x5, 0x1, 0x8, 0x8, {0x4, 0x10, 0x0, 0x4, 0x3, 0x6, 0x3, 0x8f1, 0x7, 0xa000, 0x0, 0x0, r2, 0x39, 0x3ff}}, {0x3, 0x400, 0x0, 0xfffface3}}]}, 0xa8)

28.294752208s ago: executing program 5 (id=304):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffb, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)

28.041173752s ago: executing program 33 (id=304):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffb, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)

3.830826972s ago: executing program 4 (id=460):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x0)
r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r2 = fanotify_init(0xf00, 0x80000)
fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0)
fallocate(r0, 0x0, 0x1000000, 0x3)

3.696973834s ago: executing program 1 (id=464):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file2\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x185042, 0x120)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x1)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3.696737204s ago: executing program 4 (id=465):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x2a, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}, {'28'}}}}, 0x38)

3.095543643s ago: executing program 4 (id=469):
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x1e0, &(0x7f0000000040)={0x0, 0x1, 0x4})
mq_timedreceive(r0, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0)
mq_timedreceive(r0, &(0x7f0000000080)=""/92, 0x5c, 0x0, 0x0)

3.071050414s ago: executing program 3 (id=470):
r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r1, r1, r2, 0x0, 0x80000000, 0x7fffffff, 0x0, 0x0, 0x5, 0xe, 0x200400, 0x31e})

3.022560684s ago: executing program 1 (id=472):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='vlan0\x00', 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

2.907426066s ago: executing program 3 (id=474):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000)

2.768634268s ago: executing program 1 (id=475):
syz_mount_image$hfs(&(0x7f0000001740), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f00000004c0)=ANY=[@ANYBLOB="71756965742c636f6465706167653d63703836352c63726561746f723df0e007ba2c6469725f756d61736b3d30303030303030303030303030303030303030303030352c6469725f756d61736b3d30303030303030303030303030303030303030303030342c706172743d3078303030303030303030303030303030362c00725b841ff18a058915ec6999a1cec1e300e26b71985209f2f9735b4624aabf646f453ab27eccfe4ac64acaa865ced046361ece34bb1dc37979ab8447dba3bf25d70f926a218a4fef9634778135b1723fb20cf8793a8330b843bcb5b1f14f1c7c8e21cd47f15c34c1a0460262ed748b8a840fbf5740f96540011f"], 0x11, 0x2b6, &(0x7f0000000200)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

2.716298279s ago: executing program 3 (id=477):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
mlock(&(0x7f0000002000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020)

2.488928532s ago: executing program 1 (id=479):
r0 = socket$inet6(0xa, 0x2, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)={0x30, r2, 0x101, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000)

2.272965915s ago: executing program 1 (id=484):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = dup(r1)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0x604, 0x0)

2.105370358s ago: executing program 4 (id=486):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

1.961210281s ago: executing program 6 (id=487):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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")
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="080000000200000022"], 0x0)

1.916170961s ago: executing program 4 (id=489):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009640)=[{{&(0x7f0000000300)=@hci, 0x80, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/66, 0x42}], 0x1}}, {{&(0x7f0000000700)=@rc, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=""/69, 0x45}, 0x6}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{&(0x7f0000008d80)=@ieee802154, 0x80, 0x0}, 0x80e}], 0x5, 0x40010143, &(0x7f00000098c0)={0x77359400})
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)

1.461065608s ago: executing program 6 (id=490):
gettid()
timer_create(0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb75, &(0x7f0000000c40)="$eJzs3c9rHFUcAPDvzG7S9IdmKx6MCA0ItSJukqZ6KIIteFQQFEpvrsm2hG5b26RgQ9H0pCfx4M2TgtCb+B8UL95EvPXgQQ8ixSLFU3uJzOzsdm12k6bddEry+cDsvjdvt+87he++N503nQB2rMnsJY2YiIgvk4jxYn8aEaN5aSxipf25O7evzN29fWUuidXV9/5JIin2df6spHjfm71U82/Grz9GPFNZ2+/i5eUzjVarebGoTy2d/Whq8fLyqwtnG6ebp5vnZl+fmZmZnp19bXjHeuHPI7/XFt469tnR1qUXvlg+kcSx2Fe09R7HsEzGZPfvpFc1Ik4Ou7OSVIrj6XecAAA8edKeOdxEjEclL7WNR32h1OAAAACAofg0IlYBAACAbS5x/g8AAADbXGcdwJ3bV+Y6W7krEoDH5dbxiKjdu7f/bjf/q7GSv4/FSETs+TfpuTOofb93bQj9T0bEteYn9WyLLboPH+hv5WpEPNdv/E/y/K/l/4vH2vxPI2J6CP1P3leX//D4PEr+HxtC//IfAAAAAAAAhuf68faF/LXX/9Lu+p/oc/2v0ufa3cPY+PpfenMI3QB93Doe8UZE3F2z/i/tfKRWKWpP5esBRpJTC63mdEQ8HRGHYmRXVp9Zp4+fp76fGNTWu/4v27L+O2sBizhuVnf9/zvzjaXGoxwz0HbrasTz1X75n3TH/2TA+t93H7CPgy///fmgto3zH9gqq99EHOw7/t97oluy7vP5pvLpwFRnUtDH19e+/WFQ//IfypON/3vWz/9a0vu8zsXN93Hhuz8ODGp72Pn/aPJ+/lTR0WLfx42lpYszEaPJ22v3H958zLAddfKhky9Z/h96sf/5/3rz/yzJPih+JdKIaBTvWf3D+/o8eOK3nwbFY/yH8mT5P7+p8X/zhTd/OfnOoP4fbPw/ko/ph4o9/v0P1vegCVp2nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAkSSNiXyRpvVtO03o9Ym9EPBt70tb5xaVXTp2/dG4+a4uoxUh6aqHVnI6I8XY9yeozefle/fB99dmI2B8RX43vzuv1ufOt+bIPHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK69EbEvkrQeEWleTtN6vd3213jZ0QEAAABDUys7AAAAAGDLOf8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BHtP3D9RhIRK0d351tmtGgbKTUyYKulZQcAlKZSdgBAaaplBwCUxjk+kGzQPjawxQwCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYCd5aeL6jSQiVo7uzrfMaNE2UmpkwFZLyw4AKE2l7ACA0lTLDgAojXN8INmgfWxgixkEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE6yeHn5TKPVal5UUFBQ6BbK/mUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgO/svAAD//zaBADg=")
lchown(&(0x7f0000000040)='./file1\x00', 0x0, 0xee00)

1.428755829s ago: executing program 3 (id=491):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10)
mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000e00)={[{@none}]})

1.33923781s ago: executing program 4 (id=492):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000400)={0x2, 0x200, 0x7})

1.169008302s ago: executing program 3 (id=493):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad", 0x1)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
writev(r1, &(0x7f0000000240)=[{&(0x7f0000001100)='}', 0x1}], 0x1)

1.057788004s ago: executing program 3 (id=494):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x63, 0x4200, 0x0, 0x0}], 0x1})

1.002801295s ago: executing program 6 (id=495):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000640)={@remote, @empty, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x40000, 0x40, 0x0, 0x100, 0x0, 0x40180043, r3})

937.002626ms ago: executing program 2 (id=496):
r0 = socket$unix(0x1, 0x5, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x0, 0x0, 0x0)

779.738218ms ago: executing program 2 (id=497):
r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e)
close(r0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

753.891889ms ago: executing program 6 (id=498):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x86}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
clock_getres(0x2, 0x0)
syz_read_part_table(0x5c2, &(0x7f0000000f00)="$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")

616.083541ms ago: executing program 2 (id=499):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002"], 0x44}}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20040884}, 0x40000)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

476.940743ms ago: executing program 2 (id=500):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRESOCT=0x0], 0x3, 0x276, &(0x7f00000008c0)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = dup(r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

406.162934ms ago: executing program 6 (id=501):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x195)
write$cgroup_pid(r0, &(0x7f0000000140), 0x12)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0xc, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x49c781})
io_uring_enter(r1, 0x3516, 0x4, 0x0, 0x0, 0x0)

208.972107ms ago: executing program 2 (id=502):
r0 = signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8)
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x100000000000, 0x0, 0xffffffffffffffff})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
unshare(0x2040400)
read$eventfd(r1, &(0x7f0000000080), 0x8)

13.81531ms ago: executing program 1 (id=503):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000500)={[{@dots}, {@fat=@discard}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@errors_continue}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {}, {@nodots}, {@fat=@debug}, {@nodots}, {@fat=@showexec}, {@fat=@flush}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x2}}]}, 0x1, 0x1f0, &(0x7f0000000300)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f00000029c0)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b55c8f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e20c6770a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5fa747cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921bd7d80000c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4048ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)

5.43724ms ago: executing program 6 (id=504):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2c02000010000b05"], 0x22c}], 0x1}, 0x0)

0s ago: executing program 2 (id=505):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007})
fcntl$addseals(r1, 0x409, 0xb)

kernel console output (not intermixed with test programs):

d promiscuous mode
[   67.139533][ T4176] device veth1_vlan entered promiscuous mode
[   67.150812][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.161247][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.170626][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.178803][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.214673][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.223424][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.245968][ T4177] device veth0_vlan entered promiscuous mode
[   67.270065][ T4177] device veth1_vlan entered promiscuous mode
[   67.278516][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.291519][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.300289][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.312728][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.321529][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.353339][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.363439][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.373595][ T4173] device veth0_vlan entered promiscuous mode
[   67.384954][ T4176] device veth0_macvtap entered promiscuous mode
[   67.399481][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.412361][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.425740][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.438884][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.449976][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.461543][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.473428][ T4176] device veth1_macvtap entered promiscuous mode
[   67.489532][ T4173] device veth1_vlan entered promiscuous mode
[   67.500709][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.509596][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.520373][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.530143][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.539342][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.548464][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.557753][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.567074][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.590817][ T4169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.602033][ T4169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.611238][ T4169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.620265][ T4169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.657261][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.660677][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.677071][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.677366][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.687339][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.707126][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.719289][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.734960][ T4218] Bluetooth: hci1: command 0x040f tx timeout
[   67.744724][ T4218] Bluetooth: hci3: command 0x040f tx timeout
[   67.754049][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.762167][ T4218] Bluetooth: hci4: command 0x040f tx timeout
[   67.764966][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.777466][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.786427][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.795762][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.805028][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.816095][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.826995][ T1325] Bluetooth: hci2: command 0x040f tx timeout
[   67.830499][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.833133][ T1325] Bluetooth: hci0: command 0x040f tx timeout
[   67.846781][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.861742][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.878405][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.904842][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.913677][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.931300][ T4173] device veth0_macvtap entered promiscuous mode
[   67.941460][ T4176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.950844][ T4176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.960217][ T4176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.970089][ T4176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.981966][ T4177] device veth0_macvtap entered promiscuous mode
[   67.998191][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.011525][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.021055][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.030001][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.044600][ T4173] device veth1_macvtap entered promiscuous mode
[   68.058524][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.061662][ T4177] device veth1_macvtap entered promiscuous mode
[   68.066805][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.111314][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.120233][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.130361][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.181426][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.198471][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.208785][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.220317][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.230462][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.241185][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.253300][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.269093][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.280866][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.327451][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.338748][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.348777][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.354089][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.371669][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.383653][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.393861][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.404454][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.417312][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.425111][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.436361][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.446509][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.459605][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.470755][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.481544][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.491699][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.502609][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.519796][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.537714][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.551886][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.561759][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.588213][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.599854][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.647898][ T4173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.663966][ T4173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.673622][ T4173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.689697][ T4173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.707460][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.742715][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.751409][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.768175][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.776615][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.788810][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.799853][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.810842][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.821940][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.832731][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.843048][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.854853][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.867211][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.887547][ T4216] kernel read not supported for file [timerfd] (pid: 4216 comm: kworker/1:6)
[   68.914901][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.946230][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.956808][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.967039][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.979437][ T4177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.990671][ T4177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.999858][ T4177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.009065][ T4177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.043725][ T4262] netlink: 'syz.3.8': attribute type 4 has an invalid length.
[   69.156603][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.166072][ T4261] netlink: 'syz.3.8': attribute type 4 has an invalid length.
[   69.201584][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.274664][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.296761][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.359657][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.402816][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.404641][ T1483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.440087][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.460216][ T1483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.460620][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.480197][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.501594][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.514455][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.546133][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.581747][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.673591][ T4279] tipc: Started in network mode
[   69.681831][ T4279] tipc: Node identity ac14140f, cluster identity 4711
[   69.689944][ T4279] tipc: New replicast peer: 255.255.255.255
[   69.699756][ T4279] tipc: Enabled bearer <udp:syz2>, priority 10
[   69.819091][ T4218] Bluetooth: hci4: command 0x0419 tx timeout
[   69.838319][ T4218] Bluetooth: hci3: command 0x0419 tx timeout
[   69.856931][ T4218] Bluetooth: hci1: command 0x0419 tx timeout
[   69.895516][ T4219] Bluetooth: hci0: command 0x0419 tx timeout
[   69.905049][ T1325] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   69.920882][ T4219] Bluetooth: hci2: command 0x0419 tx timeout
[   69.963076][ T4291] loop0: detected capacity change from 0 to 64
[   70.174495][ T4218] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   70.274525][ T1325] usb 3-1: config 0 has an invalid interface number: 156 but max is 1
[   70.283008][ T4297] loop4: detected capacity change from 0 to 8192
[   70.290211][ T1325] usb 3-1: config 0 has no interface number 1
[   70.298869][ T1325] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[   70.305209][ T4216] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   70.309230][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.326546][ T4297] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[   70.331050][ T1325] usb 3-1: config 0 descriptor??
[   70.340445][ T4297] REISERFS (device loop4): using ordered data mode
[   70.350021][ T4297] reiserfs: using flush barriers
[   70.358141][ T4297] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   70.409247][ T4297] REISERFS (device loop4): checking transaction log (loop4)
[   70.411853][ T1325] usb 3-1: MIDIStreaming interface descriptor not found
[   70.424342][ T4218] usb 2-1: Using ep0 maxpacket: 32
[   70.463269][ T1325] gspca_main: spca561-2.14.0 probing abcd:cdee
[   70.527462][ T4297] REISERFS (device loop4): Using tea hash to sort names
[   70.539766][ T4297] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[   70.544671][ T4218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.574367][ T4218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.609422][ T4218] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   70.634590][ T4218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.663797][ T4218] usb 2-1: config 0 descriptor??
[   70.684671][ T1325] spca561: probe of 3-1:0.0 failed with error -22
[   70.705515][ T4160] tipc: Node number set to 2886997007
[   70.720236][ T1325] usb 3-1: USB disconnect, device number 2
[   70.785818][ T4216] usb 4-1: unable to get BOS descriptor or descriptor too short
[   70.849363][ T4216] usb 4-1: not running at top speed; connect to a high speed hub
[   70.954546][ T4216] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   71.037830][ T4302] udevd[4302]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   71.164573][ T4216] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   71.183151][ T4218] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[   71.183929][ T4216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.214374][ T4216] usb 4-1: Product: syz
[   71.219041][ T4216] usb 4-1: Manufacturer: syz
[   71.223660][ T4216] usb 4-1: SerialNumber: syz
[   71.258626][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[   71.265649][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[   71.295798][ T4216] usb 4-1: bad CDC descriptors
[   71.426063][ T4309] loop0: detected capacity change from 0 to 32768
[   71.462305][ T4309] =======================================================
[   71.462305][ T4309] WARNING: The mand mount option has been deprecated and
[   71.462305][ T4309]          and is ignored by this kernel. Remove the mand
[   71.462305][ T4309]          option from the mount to silence this warning.
[   71.462305][ T4309] =======================================================
[   71.531350][ T4218] usb 2-1: USB disconnect, device number 2
[   71.548589][ T4249] usb 4-1: USB disconnect, device number 2
[   71.631936][ T4309] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[   71.639996][ T4316] loop2: detected capacity change from 0 to 4096
[   71.665932][ T4309] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   71.772847][ T4316] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   71.805967][ T4177] ocfs2: Unmounting device (7,0) on (node local)
[   71.890475][   T26] audit: type=1800 audit(1748877214.371:2): pid=4316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.24" name="file1" dev="loop2" ino=15 res=0 errno=0
[   72.032397][ T4329] loop0: detected capacity change from 0 to 256
[   72.168891][ T4333] loop3: detected capacity change from 0 to 512
[   72.186170][ T4335] smc: net device wg0 applied user defined pnetid SYZ0
[   72.227033][ T4335] smc: net device wg0 erased user defined pnetid SYZ0
[   72.281169][ T4329] attempt to access beyond end of device
[   72.281169][ T4329] loop0: rw=2049, want=260, limit=256
[   72.283550][ T4333] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,usrquota,,errors=continue. Quota mode: writeback.
[   72.328069][ T4340] attempt to access beyond end of device
[   72.328069][ T4340] loop0: rw=2049, want=264, limit=256
[   72.364531][ T4333] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   72.399516][ T4340] Buffer I/O error on dev loop0, logical block 65, lost async page write
[   72.408682][ T4340] attempt to access beyond end of device
[   72.408682][ T4340] loop0: rw=2049, want=320, limit=256
[   72.421674][ T4329] attempt to access beyond end of device
[   72.421674][ T4329] loop0: rw=2049, want=264, limit=256
[   72.433840][ T4329] attempt to access beyond end of device
[   72.433840][ T4329] loop0: rw=2049, want=268, limit=256
[   72.445217][ T4329] Buffer I/O error on dev loop0, logical block 66, lost async page write
[   72.651908][ T4219] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   72.656900][ T4349] netlink: 'syz.1.36': attribute type 3 has an invalid length.
[   72.694797][ T4349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.36'.
[   72.872962][ T4351] Zero length message leads to an empty skb
[   72.896694][ T4219] usb 3-1: Using ep0 maxpacket: 32
[   73.020112][ T4219] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[   73.036467][ T4219] usb 3-1: config 0 has no interface number 0
[   73.121603][ T4336] loop4: detected capacity change from 0 to 32768
[   73.178692][ T4361] IPVS: persistence engine module ip_vs_pe_ not found
[   73.224701][ T4219] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   73.243100][ T4219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.253159][ T4219] usb 3-1: Product: syz
[   73.258130][ T4219] usb 3-1: Manufacturer: syz
[   73.262946][ T4219] usb 3-1: SerialNumber: syz
[   73.315881][ T4219] usb 3-1: config 0 descriptor??
[   73.333280][ T4369] loop3: detected capacity change from 0 to 1024
[   73.341900][ T4336] XFS (loop4): Mounting V5 Filesystem
[   73.356656][ T4219] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   73.519793][ T4336] XFS (loop4): Ending clean mount
[   73.573969][ T4336] XFS (loop4): Quotacheck needed: Please wait.
[   73.583633][ T4219] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   73.623436][ T4219] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   73.747840][ T4336] XFS (loop4): Quotacheck: Done.
[   73.869354][ T4355] loop1: detected capacity change from 0 to 32768
[   73.946693][   T26] audit: type=1804 audit(1748877216.431:3): pid=4336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.30" name="/newroot/7/file0/bus" dev="loop4" ino=4428 res=1 errno=0
[   73.996090][ T4216] usb 3-1: USB disconnect, device number 3
[   73.998270][ T4355] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   74.005805][   T26] audit: type=1800 audit(1748877216.431:4): pid=4336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.30" name="bus" dev="loop4" ino=4428 res=0 errno=0
[   74.014340][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -108
[   74.042485][ T4216] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   74.062277][ T4216] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   74.076376][ T4216] quatech2 3-1:0.51: device disconnected
[   74.090842][ T4385] loop0: detected capacity change from 0 to 64
[   74.108045][ T4169] XFS (loop4): Unmounting Filesystem
[   74.152124][ T4385] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[   74.163744][ T4355] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   74.482701][ T4173] ocfs2: Unmounting device (7,1) on (node local)
[   74.793389][ T4383] loop3: detected capacity change from 0 to 32768
[   74.846762][ T4397] loop0: detected capacity change from 0 to 64
[   74.851421][ T4398] loop4: detected capacity change from 0 to 256
[   74.859051][ T4392] loop2: detected capacity change from 0 to 8192
[   74.945176][ T4392] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   74.971797][ T4398] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[   74.992058][   T26] audit: type=1800 audit(1748877217.471:5): pid=4383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.47" name="file1" dev="loop3" ino=4 res=0 errno=0
[   75.262396][ T4177] hfs: node 4:3 still has 2 user(s)!
[   75.647042][ T4412] loop3: detected capacity change from 0 to 1024
[   75.727598][ T4412] EXT4-fs (loop3): Ignoring removed nobh option
[   75.735888][ T4412] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   75.784540][ T4160] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   75.802768][ T4412] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,jqfmt=vfsold,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,nobarrier,jqfmt=vfsold,nojournal_checksum,dioread_nolock,,errors=continue. Quota mode: none.
[   75.931370][ T4420] loop1: detected capacity change from 0 to 8192
[   75.994327][ T4420] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[   76.064913][ T4403] loop2: detected capacity change from 0 to 32768
[   76.070592][ T4420] REISERFS (device loop1): using ordered data mode
[   76.094312][ T4160] usb 1-1: Using ep0 maxpacket: 8
[   76.123267][ T4420] reiserfs: using flush barriers
[   76.132332][ T4420] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   76.173764][ T4403] XFS (loop2): Mounting V5 Filesystem
[   76.196921][ T4420] REISERFS (device loop1): checking transaction log (loop1)
[   76.218757][ T4420] REISERFS (device loop1): Using r5 hash to sort names
[   76.228002][ T4420] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   76.237595][ T4160] usb 1-1: config 0 has no interfaces?
[   76.330871][ T4160] usb 1-1: config 0 has no interfaces?
[   76.335626][ T4409] loop4: detected capacity change from 0 to 32768
[   76.371688][ T4403] XFS (loop2): Ending clean mount
[   76.381588][ T4403] XFS (loop2): Quotacheck needed: Please wait.
[   76.389957][ T4409] XFS: attr2 mount option is deprecated.
[   76.397845][ T4409] XFS: ikeep mount option is deprecated.
[   76.404021][ T4409] XFS: noikeep mount option is deprecated.
[   76.448276][ T4160] usb 1-1: config 0 has no interfaces?
[   76.496067][ T4403] XFS (loop2): Quotacheck: Done.
[   76.536709][ T4160] usb 1-1: config 0 has no interfaces?
[   76.540567][   T26] audit: type=1800 audit(1748877219.021:6): pid=4403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.55" name="bus" dev="loop2" ino=9292 res=0 errno=0
[   76.542360][ T4160] usb 1-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a
[   76.675835][ T4160] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.686987][ T4160] usb 1-1: config 0 descriptor??
[   76.698964][ T4409] XFS (loop4): Mounting V5 Filesystem
[   76.822348][ T4176] XFS (loop2): Unmounting Filesystem
[   77.011470][ T4409] XFS (loop4): Ending clean mount
[   77.024104][ T4409] XFS (loop4): Quotacheck needed: Please wait.
[   77.073113][ T1325] usb 1-1: USB disconnect, device number 2
[   77.118937][ T4409] XFS (loop4): Quotacheck: Done.
[   77.941627][ T4469] capability: warning: `syz.1.75' uses 32-bit capabilities (legacy support in use)
[   78.010199][ T4468] loop2: detected capacity change from 0 to 2048
[   78.031308][ T4469] program syz.1.75 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   78.093447][ T4468]  loop2: p1 < > p2 < > p3 p4
[   78.114313][ T4468] loop2: partition table partially beyond EOD, truncated
[   78.155641][ T4468] loop2: p1 start 2305 is beyond EOD, truncated
[   78.162047][ T4468] loop2: p2 start 4294902784 is beyond EOD, truncated
[   78.171799][ T4169] XFS (loop4): Unmounting Filesystem
[   78.233161][ T4453] loop3: detected capacity change from 0 to 32768
[   78.253308][ T4468] loop2: p3 start 3724543488 is beyond EOD, truncated
[   78.317120][ T4468] loop2: p4 size 8192 extends beyond EOD, truncated
[   78.327926][ T4453] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.68 (4453)
[   78.490537][ T4453] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   78.530409][ T4453] BTRFS info (device loop3): setting nodatacow, compression disabled
[   78.599940][ T4453] BTRFS info (device loop3): doing ref verification
[   78.627246][ T4453] BTRFS info (device loop3): use no compression
[   78.633546][ T4453] BTRFS info (device loop3): force clearing of disk cache
[   78.648640][ T4465] loop0: detected capacity change from 0 to 32768
[   78.681569][ T4453] BTRFS info (device loop3): enabling disk space caching
[   78.708325][ T4453] BTRFS info (device loop3): disabling disk space caching
[   78.731528][ T4453] BTRFS info (device loop3): has skinny extents
[   78.855596][ T4188] udevd[4188]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   78.915503][ T4482] syz.4.76 uses obsolete (PF_INET,SOCK_PACKET)
[   79.038550][   T26] audit: type=1800 audit(1748877221.521:7): pid=4472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.77" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[   79.103543][ T4453] BTRFS info (device loop3): clearing free space tree
[   79.119958][ T4453] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   79.131443][ T4453] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   79.347969][ T4504] loop0: detected capacity change from 0 to 1024
[   79.488245][ T4504] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,dax=inode,nolazytime,abort,dax=inode,lazytime,noload,bsddf,noauto_da_alloc,,errors=continue. Quota mode: none.
[   79.604365][ T1325] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   79.844559][ T1325] usb 5-1: Using ep0 maxpacket: 8
[   79.967838][ T1325] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.971735][ T4177] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[   79.982706][ T1325] usb 5-1: config 0 interface 0 has no altsetting 0
[   80.021415][ T1325] usb 5-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[   80.035661][ T4177] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[   80.043831][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.099213][ T1325] usb 5-1: config 0 descriptor??
[   80.152456][ T4527] loop2: detected capacity change from 0 to 256
[   80.272159][ T4527] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   80.332044][ T4527] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   80.397335][ T4527] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[   80.551701][ T4527] exFAT-fs (loop2): hint_cluster is invalid (17)
[   80.624060][ T4507] udc-core: couldn't find an available UDC or it's busy
[   80.644479][ T4507] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   80.653369][   T26] audit: type=1800 audit(1748877223.131:8): pid=4527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.91" name="bus" dev="loop2" ino=1048596 res=0 errno=0
[   80.794602][ T1325] usbhid 5-1:0.0: can't add hid device: -71
[   80.804799][ T1325] usbhid: probe of 5-1:0.0 failed with error -71
[   80.840422][ T1325] usb 5-1: USB disconnect, device number 2
[   81.034047][  T156] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.179789][ T4542] loop3: detected capacity change from 0 to 512
[   81.200272][  T156] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.273926][ T4542] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   81.308038][  T156] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.344355][ T4542] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   81.412656][ T4542] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   81.488082][ T4542] EXT4-fs (loop3): 1 truncate cleaned up
[   81.493834][ T4542] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,journal_ioprio=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,lazytime,grpjquota=,quota,,errors=continue. Quota mode: writeback.
[   81.538416][  T156] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.538946][ T1108] cfg80211: failed to load regulatory.db
[   81.714127][   T26] audit: type=1800 audit(1748877224.191:9): pid=4542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.95" name="file2" dev="loop3" ino=16 res=0 errno=0
[   81.776800][   T26] audit: type=1800 audit(1748877224.191:10): pid=4542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.95" name="file2" dev="loop3" ino=16 res=0 errno=0
[   82.073766][ T4557] program syz.3.98 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   82.504840][ T4549] chnl_net:caif_netlink_parms(): no params data found
[   83.398086][ T4549] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.417002][ T4549] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.450805][ T4549] device bridge_slave_0 entered promiscuous mode
[   83.468625][ T4549] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.483980][ T4549] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.503507][ T4549] device bridge_slave_1 entered promiscuous mode
[   83.529995][ T4612] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   83.663152][ T1325] Bluetooth: hci4: command 0x0409 tx timeout
[   83.678128][ T4549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.772898][ T4549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.929517][ T4549] team0: Port device team_slave_0 added
[   83.939042][ T4549] team0: Port device team_slave_1 added
[   83.981876][ T4549] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.005605][ T4549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.124727][ T4549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.152558][ T4626] loop4: detected capacity change from 0 to 2048
[   84.159898][ T4549] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.186082][ T4549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.244009][ T4626] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[   84.283717][ T4549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.365528][ T4626] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,minixdf,barrier=0x00000000000027dd,grpjquota=,errors=continue,. Quota mode: none.
[   84.469784][ T4626] overlayfs: fs on './file0/../file0' does not support file handles, falling back to index=off,nfs_export=off.
[   84.519812][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.124'.
[   84.813895][ T4549] device hsr_slave_0 entered promiscuous mode
[   84.897263][ T4549] device hsr_slave_1 entered promiscuous mode
[   84.929363][ T4549] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.962318][ T4549] Cannot create hsr debugfs directory
[   85.063932][ T4661] loop1: detected capacity change from 0 to 4096
[   85.134470][ T4216] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   85.278718][ T4672] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   85.524682][ T4216] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.558409][ T4216] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   85.591375][  T156] device hsr_slave_0 left promiscuous mode
[   85.613713][  T156] device hsr_slave_1 left promiscuous mode
[   85.623506][  T156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.641613][  T156] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.650845][  T156] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.659171][  T156] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.669265][  T156] device bridge_slave_1 left promiscuous mode
[   85.677519][  T156] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.728119][  T156] device bridge_slave_0 left promiscuous mode
[   85.734510][    T7] Bluetooth: hci4: command 0x041b tx timeout
[   85.741144][  T156] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.771559][  T156] device veth1_macvtap left promiscuous mode
[   85.780741][  T156] device veth0_macvtap left promiscuous mode
[   85.784869][ T4216] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   85.798049][  T156] device veth1_vlan left promiscuous mode
[   85.801483][ T4216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.804283][  T156] device veth0_vlan left promiscuous mode
[   85.812373][ T4216] usb 5-1: Product: syz
[   85.822158][ T4216] usb 5-1: Manufacturer: syz
[   85.827238][ T4216] usb 5-1: SerialNumber: syz
[   86.133861][  T156] team0 (unregistering): Port device team_slave_1 removed
[   86.152189][  T156] team0 (unregistering): Port device team_slave_0 removed
[   86.169802][  T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.185200][  T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.192150][ T4216] usb 5-1: 0:2 : does not exist
[   86.207108][ T4216] usb 5-1: USB disconnect, device number 3
[   86.281705][  T156] bond0 (unregistering): Released all slaves
[   86.463262][ T4549] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   86.496434][ T4549] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   86.529864][ T4188] udevd[4188]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   86.531685][ T4549] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   86.591164][ T4549] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   86.709539][ T4549] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.758775][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   86.767615][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   86.779735][ T4549] 8021q: adding VLAN 0 to HW filter on device team0
[   86.794458][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   86.805495][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   86.814038][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.821173][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.855153][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   86.863702][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   86.874513][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   86.883035][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.890694][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.905508][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   86.914997][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   86.924694][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   86.933963][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   86.995043][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   87.003119][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   87.026040][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   87.035364][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   87.043862][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   87.058656][ T4549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   87.071597][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   87.098581][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   87.111433][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   87.328391][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   87.348610][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   87.373702][ T4549] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.753374][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   87.769057][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   87.806166][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   87.814423][ T1325] Bluetooth: hci4: command 0x040f tx timeout
[   87.828851][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   87.845589][ T4549] device veth0_vlan entered promiscuous mode
[   87.860771][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   87.870021][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   87.887985][ T4549] device veth1_vlan entered promiscuous mode
[   87.926486][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   87.951981][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   87.965026][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   87.974001][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   87.989661][ T4549] device veth0_macvtap entered promiscuous mode
[   88.001084][ T4549] device veth1_macvtap entered promiscuous mode
[   88.026927][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.043340][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.062669][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.088264][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.100334][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.126598][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.157651][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.182793][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.201496][ T4549] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.210394][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   88.229538][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   88.259676][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   88.270486][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   88.293525][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.320551][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.344245][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.364266][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.384309][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.395981][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.414293][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.434325][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.459876][ T4549] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.470431][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   88.479849][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   88.491726][ T4549] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.501287][ T4549] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.511359][ T4549] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.520395][ T4549] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.638126][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.680711][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.709137][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   88.728296][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.737128][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.750901][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   89.012303][ T4756] loop1: detected capacity change from 0 to 64
[   89.335296][ T4216] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   89.469731][ T4764] loop4: detected capacity change from 0 to 8192
[   89.508671][ T4764] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[   89.533523][ T4764] REISERFS (device loop4): using ordered data mode
[   89.540367][ T4764] reiserfs: using flush barriers
[   89.553645][ T4764] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   89.575129][ T4764] REISERFS (device loop4): checking transaction log (loop4)
[   89.602753][ T4764] REISERFS (device loop4): Using r5 hash to sort names
[   89.611024][ T4216] usb 3-1: Using ep0 maxpacket: 16
[   89.625168][ T4764] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   89.648197][ T4764] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[   89.703074][ T4764] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   89.766354][ T4216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.804379][ T4216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.853477][ T4216] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[   89.877337][ T4216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.895336][ T4219] Bluetooth: hci4: command 0x0419 tx timeout
[   89.946090][ T4216] usb 3-1: config 0 descriptor??
[   89.986436][ T4782] loop3: detected capacity change from 0 to 8192
[   90.024873][ T4787] loop1: detected capacity change from 0 to 1024
[   90.072896][ T4782] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[   90.089879][ T4782] REISERFS (device loop3): using ordered data mode
[   90.130830][ T4782] reiserfs: using flush barriers
[   90.161484][ T4792] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   90.228028][ T4782] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   90.271551][ T4782] REISERFS (device loop3): checking transaction log (loop3)
[   90.325811][ T4782] REISERFS (device loop3): Using r5 hash to sort names
[   90.360639][ T4782] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   90.436346][ T4216] appleir 0003:05AC:8241.0002: unknown main item tag 0x0
[   90.443455][ T4216] appleir 0003:05AC:8241.0002: unknown main item tag 0x0
[   90.465038][ T1108] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   90.507853][ T4216] appleir 0003:05AC:8241.0002: unknown main item tag 0x0
[   90.563156][ T4216] appleir 0003:05AC:8241.0002: unknown main item tag 0x0
[   90.591234][ T4216] appleir 0003:05AC:8241.0002: item fetching failed at offset 4/5
[   90.624957][ T4813] loop4: detected capacity change from 0 to 128
[   90.641236][ T4216] appleir 0003:05AC:8241.0002: parse failed
[   90.663646][ T4216] appleir: probe of 0003:05AC:8241.0002 failed with error -22
[   90.701187][ T4216] usb 3-1: USB disconnect, device number 4
[   90.865119][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.917092][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.966952][ T1108] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   90.993219][ T4813] EXT4-fs (loop4): Test dummy encryption mode enabled
[   91.004491][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.060672][ T1108] usb 2-1: config 0 descriptor??
[   91.112264][ T4829] loop3: detected capacity change from 0 to 2048
[   91.130876][ T4813] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue. Quota mode: none.
[   91.170366][ T4813] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   91.319597][ T4829] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   91.429596][ T4829] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[   91.552341][ T4829] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232
[   91.558455][ T1108] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0
[   91.594392][ T1108] cm6533_jd 0003:0D8C:0022.0003: item fetching failed at offset 4/5
[   91.638433][ T1108] cm6533_jd 0003:0D8C:0022.0003: parse failed
[   91.675449][ T1108] cm6533_jd: probe of 0003:0D8C:0022.0003 failed with error -22
[   91.761080][ T1108] usb 2-1: USB disconnect, device number 3
[   91.867700][ T4856] tipc: Started in network mode
[   91.882233][ T4856] tipc: Node identity 4, cluster identity 4711
[   91.895225][ T4856] tipc: Node number set to 4
[   92.049271][ T4840] loop5: detected capacity change from 0 to 40427
[   92.144489][ T1325] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   92.231292][ T4861] capability: warning: `syz.5.164' uses deprecated v2 capabilities in a way that may be insecure
[   92.524564][ T1325] usb 4-1: config 0 has no interfaces?
[   92.684638][ T1325] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   92.693888][ T4219] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   92.705372][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.713654][ T1325] usb 4-1: Product: syz
[   92.726691][ T1325] usb 4-1: Manufacturer: syz
[   92.732113][ T1325] usb 4-1: SerialNumber: syz
[   92.801749][ T4883] process 'syz.5.174' launched './file0' with NULL argv: empty string added
[   92.826766][ T1325] usb 4-1: config 0 descriptor??
[   92.944310][ T4219] usb 2-1: Using ep0 maxpacket: 8
[   93.040071][ T4887] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   93.093847][ T4855] udc-core: couldn't find an available UDC or it's busy
[   93.120306][ T4855] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   93.234599][ T4219] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[   93.255459][ T4219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.307018][ T4219] usb 2-1: Product: syz
[   93.321430][ T4219] usb 2-1: Manufacturer: syz
[   93.336726][ T4219] usb 2-1: SerialNumber: syz
[   93.372879][ T4219] usb 2-1: config 0 descriptor??
[   93.440775][ T4219] usb 4-1: USB disconnect, device number 3
[   93.566982][ T4880] loop4: detected capacity change from 0 to 131072
[   93.602980][ T4895] loop5: detected capacity change from 0 to 1024
[   93.632281][ T4880] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[   93.640913][ T4880] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   93.673632][ T4895] EXT4-fs (loop5): Ignoring removed orlov option
[   93.687635][ T4532] usb 2-1: USB disconnect, device number 4
[   93.693878][ T4880] F2FS-fs (loop4): invalid crc value
[   93.706498][ T4895] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[   93.714834][ T4897] loop2: detected capacity change from 0 to 64
[   93.754779][ T4880] F2FS-fs (loop4): Found nat_bits in checkpoint
[   93.824071][ T4880] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   93.832077][ T4880] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   93.836804][ T4895] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[   93.881039][   T26] audit: type=1800 audit(1748877236.361:11): pid=4880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.173" name="file1" dev="loop4" ino=7 res=0 errno=0
[   94.277671][ T4909] vcan0: tx drop: invalid da for name 0x0000000000000001
[   94.404514][    T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   94.764505][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.776054][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.786086][    T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   94.799094][    T7] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   94.808551][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.818608][    T7] usb 3-1: config 0 descriptor??
[   95.296389][    T7] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd
[   95.305681][    T7] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[   95.318051][    T7] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   95.501723][    C1] vcan0: j1939_tp_rxtimer: 0xffff88806023dc00: rx timeout, send abort
[   95.589457][    T7] usb 3-1: USB disconnect, device number 5
[   96.011349][    C1] vcan0: j1939_tp_rxtimer: 0xffff88806023dc00: abort rx timeout. Force session deactivation
[   96.432670][ T4928] loop2: detected capacity change from 0 to 8192
[   96.503478][ T4928] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[   96.516543][ T4928] REISERFS (device loop2): using ordered data mode
[   96.523585][ T4928] reiserfs: using flush barriers
[   96.624657][ T4928] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   96.700522][ T4928] REISERFS (device loop2): checking transaction log (loop2)
[   96.720949][ T4928] REISERFS (device loop2): Using r5 hash to sort names
[   96.750454][ T4928] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   97.022117][ T4926] loop4: detected capacity change from 0 to 32768
[   97.082339][ T4926] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.185 (4926)
[   97.120757][ T4926] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[   97.140754][ T4926] BTRFS info (device loop4): using free space tree
[   97.174572][ T4926] BTRFS info (device loop4): has skinny extents
[   97.274353][ T4219] psmouse serio2: Failed to reset mouse on : -5
[   97.397739][ T4926] BTRFS info (device loop4): enabling ssd optimizations
[   97.547950][ T4979] loop2: detected capacity change from 0 to 512
[   97.571652][ T4942] loop3: detected capacity change from 0 to 32768
[   97.746152][ T4979] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   97.764661][ T4979] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.856108][ T4942] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.190 (4942)
[   97.905450][ T4942] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   97.944357][ T4942] BTRFS info (device loop3): enabling disk space caching
[   97.958419][ T4942] BTRFS info (device loop3): enabling auto defrag
[   97.974635][ T4942] BTRFS info (device loop3): doing ref verification
[   97.984690][ T4942] BTRFS info (device loop3): use no compression
[   98.011698][ T4942] BTRFS info (device loop3): force clearing of disk cache
[   98.053028][ T4942] BTRFS info (device loop3): disabling disk space caching
[   98.124522][ T4942] BTRFS info (device loop3): has skinny extents
[   98.379095][ T4942] BTRFS info (device loop3): enabling ssd optimizations
[   98.411418][ T4942] BTRFS info (device loop3): clearing free space tree
[   98.439998][ T4942] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   98.453507][ T4942] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   98.484429][ T4249] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   98.636050][ T4942] BTRFS info (device loop3): balance: start -d -m -s
[   98.695860][ T4942] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata
[   98.844382][ T4249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   98.865111][ T4249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.919509][ T4249] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   98.930481][ T4249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.963061][ T4942] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata
[   98.967936][ T4249] usb 3-1: config 0 descriptor??
[   99.012110][ T4942] BTRFS info (device loop3): balance: canceled
[   99.192441][ T5039] loop4: detected capacity change from 0 to 8192
[   99.333493][ T5039] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[   99.344115][ T5039] REISERFS (device loop4): using ordered data mode
[   99.360758][ T5039] reiserfs: using flush barriers
[   99.381014][ T5039] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   99.398939][ T5039] REISERFS (device loop4): checking transaction log (loop4)
[   99.452747][ T5039] REISERFS (device loop4): Using r5 hash to sort names
[   99.490330][ T5039] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[   99.570204][ T5054] loop3: detected capacity change from 0 to 4096
[   99.704646][ T4249] usb 3-1: string descriptor 0 read error: -22
[   99.733711][ T5054] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[   99.763116][ T5054] ntfs3: loop3: Failed to load $Extend.
[   99.927928][ T4249] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input7
[  100.060607][ T4249] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input8
[  100.116606][ T4249] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0
[  100.166076][ T4249] usb 3-1: USB disconnect, device number 6
[  100.261371][ T5069] fido_id[5069]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  100.614268][   T23] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[  100.966245][ T4219] misc userio: Buffer overflowed, userio client isn't keeping up
[  100.974937][   T23] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  100.990195][   T23] usb 5-1: config 0 has no interface number 0
[  101.018285][   T23] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  101.032830][   T23] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  101.052859][   T23] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  101.062082][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.130945][   T23] usb 5-1: config 0 descriptor??
[  101.184856][ T5072] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  101.224823][ T5111] loop2: detected capacity change from 0 to 1024
[  101.228155][   T23] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  101.302337][ T5111] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,nodiscard,,errors=continue. Quota mode: none.
[  101.415273][ T5050] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  101.484082][ T1325] usb 5-1: USB disconnect, device number 4
[  101.587927][ T5101] loop1: detected capacity change from 0 to 40427
[  101.691343][ T5101] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff
[  101.704315][ T5050] usb 4-1: Using ep0 maxpacket: 16
[  101.782503][ T5101] F2FS-fs (loop1): invalid crc value
[  101.827145][ T5101] F2FS-fs (loop1): Found nat_bits in checkpoint
[  101.848596][ T5050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.866592][ T5050] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  101.902210][ T5050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.931001][ T5050] usb 4-1: config 0 descriptor??
[  101.936829][ T5101] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  102.024334][   T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  102.087839][ T5101] F2FS-fs (loop1) : inject evict_inode fail in f2fs_evict_inode of evict+0x485/0x870
[  102.126949][ T5101] overlayfs: failed to resolve './file0': -2
[  102.186040][ T5140] loop4: detected capacity change from 0 to 8192
[  102.198381][ T4173] attempt to access beyond end of device
[  102.198381][ T4173] loop1: rw=2049, want=45120, limit=40427
[  102.250629][ T5140] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  102.268165][ T4219] input: PS/2 Generic Mouse as /devices/serio2/input/input6
[  102.297349][ T5140] REISERFS (device loop4): using ordered data mode
[  102.304260][ T5140] reiserfs: using flush barriers
[  102.314331][ T5140] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  102.331759][ T5140] REISERFS (device loop4): checking transaction log (loop4)
[  102.347451][ T5140] REISERFS (device loop4): Using r5 hash to sort names
[  102.355303][ T5140] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  102.404553][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.432020][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.472751][   T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  102.478693][ T5050] asus 0003:0B05:17E0.0006: item fetching failed at offset 5/7
[  102.504661][ T5050] asus 0003:0B05:17E0.0006: Asus hid parse failed: -22
[  102.511595][ T5050] asus: probe of 0003:0B05:17E0.0006 failed with error -22
[  102.517115][   T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  102.519111][ T4219] psmouse serio2: Failed to enable mouse on 
[  102.590371][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.615953][   T23] usb 3-1: config 0 descriptor??
[  102.724894][ T5050] usb 4-1: USB disconnect, device number 4
[  102.891730][ T5156] netlink: 52 bytes leftover after parsing attributes in process `syz.1.228'.
[  102.921926][ T5156] netlink: 'syz.1.228': attribute type 1 has an invalid length.
[  103.108001][   T23] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  103.137931][   T23] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  103.473954][ T4217] usb 3-1: USB disconnect, device number 7
[  103.496909][ T5176] loop3: detected capacity change from 0 to 128
[  103.843536][ T5178] loop1: detected capacity change from 0 to 32768
[  103.931211][ T5176] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  103.934165][ T5178] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  103.950458][ T5178] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  103.990996][ T5178] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  104.004441][ T4251] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  104.004675][ T4302] udevd[4302]: incorrect ext4 checksum on /dev/loop3
[  104.011633][ T4251] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  104.055703][ T4251] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 44ms
[  104.074378][ T4251] gfs2: fsid=syz:syz.0: jid=0: Done
[  104.081673][ T5178] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  104.168650][ T5195] loop4: detected capacity change from 0 to 4096
[  104.284628][ T5195] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  104.310286][ T5199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'.
[  104.373718][ T5178] gfs2: fsid=syz:syz.0: found 1 quota changes
[  104.387122][ T5199] netlink: 48 bytes leftover after parsing attributes in process `syz.2.239'.
[  104.580959][ T5178] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  104.580959][ T5178]   inode = 11 2339
[  104.580959][ T5178]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465
[  104.600435][    C1] vkms_vblank_simulate: vblank timer overrun
[  104.607229][ T5178] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  104.627289][ T5178] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[  104.641442][ T5178] CPU: 1 PID: 5178 Comm: syz.1.237 Not tainted 5.15.184-syzkaller #0
[  104.649542][ T5178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  104.659641][ T5178] Call Trace:
[  104.662975][ T5178]  <TASK>
[  104.665923][ T5178]  dump_stack_lvl+0x168/0x230
[  104.670628][ T5178]  ? show_regs_print_info+0x20/0x20
[  104.675870][ T5178]  ? load_image+0x3b0/0x3b0
[  104.680667][ T5178]  ? __lock_acquire+0x7c60/0x7c60
[  104.685716][ T5178]  ? do_raw_spin_unlock+0x11d/0x230
[  104.690945][ T5178]  gfs2_assert_warn_i+0x18f/0x2c0
[  104.696018][ T5178]  gfs2_quota_cleanup+0x4b4/0x6a0
[  104.701079][ T5178]  gfs2_make_fs_ro+0x237/0x5d0
[  104.705963][ T5178]  ? gfs2_dinode_out+0xb00/0xb00
[  104.710924][ T5178]  ? _raw_spin_unlock+0x24/0x40
[  104.715820][ T5178]  ? gfs2_glock_nq+0xcb0/0x1550
[  104.720717][ T5178]  gfs2_withdraw+0x5f9/0x1460
[  104.725422][ T5178]  ? gfs2_lm+0x220/0x220
[  104.729675][ T5178]  ? gfs2_freeze_lock+0x52/0xc0
[  104.734536][ T5178]  ? gfs2_consist_inode_i+0xc0/0xe0
[  104.739741][ T5178]  gfs2_inode_refresh+0xb5e/0xfe0
[  104.744769][ T5178]  ? do_promote+0x71a/0xab0
[  104.749275][ T5178]  ? gfs2_inode_metasync+0xf0/0xf0
[  104.754390][ T5178]  ? __lock_acquire+0x7c60/0x7c60
[  104.759524][ T5178]  inode_go_lock+0x127/0x470
[  104.764128][ T5178]  do_promote+0x741/0xab0
[  104.768468][ T5178]  finish_xmote+0x514/0xb70
[  104.773012][ T5178]  do_xmote+0x7b6/0x1120
[  104.777266][ T5178]  gfs2_glock_nq+0xc7a/0x1550
[  104.781953][ T5178]  do_sync+0x486/0xc00
[  104.786064][ T5178]  ? slot_put+0x1e0/0x1e0
[  104.790411][ T5178]  ? do_sync+0x47e/0xc00
[  104.794669][ T5178]  ? do_raw_spin_unlock+0x11d/0x230
[  104.799886][ T5178]  gfs2_quota_sync+0x32c/0x6f0
[  104.804670][ T5178]  gfs2_sync_fs+0x48/0xb0
[  104.809001][ T5178]  sync_filesystem+0xe6/0x220
[  104.813693][ T5178]  gfs2_reconfigure+0x120/0xcd0
[  104.818552][ T5178]  ? shrink_dcache_sb+0x35d/0x3b0
[  104.823576][ T5178]  ? gfs2_get_tree+0x1e0/0x1e0
[  104.828349][ T5178]  ? dentry_lru_isolate+0x2e0/0x2e0
[  104.833550][ T5178]  ? __might_sleep+0xf0/0xf0
[  104.838136][ T5178]  ? preempt_count_add+0x8d/0x190
[  104.843177][ T5178]  ? hook_sb_remount+0x19/0xc0
[  104.847952][ T5178]  ? bpf_lsm_sb_remount+0x5/0x10
[  104.852897][ T5178]  reconfigure_super+0x219/0x880
[  104.857845][ T5178]  vfs_fsconfig_locked+0x18d/0x3f0
[  104.862960][ T5178]  __se_sys_fsconfig+0x61b/0x750
[  104.867903][ T5178]  ? __x64_sys_fsconfig+0xc0/0xc0
[  104.872926][ T5178]  ? vtime_user_exit+0x2dc/0x400
[  104.877866][ T5178]  ? lockdep_hardirqs_on+0x94/0x140
[  104.883060][ T5178]  ? __x64_sys_fsconfig+0x1c/0xc0
[  104.888079][ T5178]  do_syscall_64+0x4c/0xa0
[  104.892489][ T5178]  ? clear_bhb_loop+0x30/0x80
[  104.897160][ T5178]  ? clear_bhb_loop+0x30/0x80
[  104.901834][ T5178]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  104.907737][ T5178] RIP: 0033:0x7f3e7f085969
[  104.912150][ T5178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.931762][ T5178] RSP: 002b:00007f3e7ceed038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  104.940173][ T5178] RAX: ffffffffffffffda RBX: 00007f3e7f2acfa0 RCX: 00007f3e7f085969
[  104.948138][ T5178] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004
[  104.956102][ T5178] RBP: 00007f3e7f107ab1 R08: 0000000000000000 R09: 0000000000000000
[  104.964075][ T5178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.972082][ T5178] R13: 0000000000000000 R14: 00007f3e7f2acfa0 R15: 00007fffa563b518
[  104.980368][ T5178]  </TASK>
[  104.983545][    C1] vkms_vblank_simulate: vblank timer overrun
[  104.996416][ T5178] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  105.005303][ T5178] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  105.012825][ T5178] gfs2: fsid=syz:syz.0: File system withdrawn
[  105.019304][ T5178] CPU: 1 PID: 5178 Comm: syz.1.237 Not tainted 5.15.184-syzkaller #0
[  105.027390][ T5178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  105.037467][ T5178] Call Trace:
[  105.040767][ T5178]  <TASK>
[  105.043711][ T5178]  dump_stack_lvl+0x168/0x230
[  105.048439][ T5178]  ? kobject_uevent_env+0x371/0x890
[  105.053665][ T5178]  ? show_regs_print_info+0x20/0x20
[  105.058885][ T5178]  ? load_image+0x3b0/0x3b0
[  105.063405][ T5178]  ? kobject_uevent_env+0x371/0x890
[  105.068626][ T5178]  ? lockref_put_or_lock+0x6e/0xb0
[  105.073776][ T5178]  gfs2_withdraw+0x111b/0x1460
[  105.078616][ T5178]  ? gfs2_lm+0x220/0x220
[  105.082896][ T5178]  ? gfs2_consist_inode_i+0xc0/0xe0
[  105.088136][ T5178]  gfs2_inode_refresh+0xb5e/0xfe0
[  105.093204][ T5178]  ? do_promote+0x71a/0xab0
[  105.097733][ T5178]  ? gfs2_inode_metasync+0xf0/0xf0
[  105.102874][ T5178]  ? __lock_acquire+0x7c60/0x7c60
[  105.108067][ T5178]  inode_go_lock+0x127/0x470
[  105.112695][ T5178]  do_promote+0x741/0xab0
[  105.117151][ T5178]  finish_xmote+0x514/0xb70
[  105.121695][ T5178]  do_xmote+0x7b6/0x1120
[  105.126142][ T5178]  gfs2_glock_nq+0xc7a/0x1550
[  105.130848][ T5178]  do_sync+0x486/0xc00
[  105.134932][ T5178]  ? slot_put+0x1e0/0x1e0
[  105.139285][ T5178]  ? do_sync+0x47e/0xc00
[  105.143628][ T5178]  ? do_raw_spin_unlock+0x11d/0x230
[  105.148926][ T5178]  gfs2_quota_sync+0x32c/0x6f0
[  105.153731][ T5178]  gfs2_sync_fs+0x48/0xb0
[  105.158066][ T5178]  sync_filesystem+0xe6/0x220
[  105.162756][ T5178]  gfs2_reconfigure+0x120/0xcd0
[  105.167618][ T5178]  ? shrink_dcache_sb+0x35d/0x3b0
[  105.172651][ T5178]  ? gfs2_get_tree+0x1e0/0x1e0
[  105.177418][ T5178]  ? dentry_lru_isolate+0x2e0/0x2e0
[  105.182648][ T5178]  ? __might_sleep+0xf0/0xf0
[  105.187236][ T5178]  ? preempt_count_add+0x8d/0x190
[  105.192348][ T5178]  ? hook_sb_remount+0x19/0xc0
[  105.197123][ T5178]  ? bpf_lsm_sb_remount+0x5/0x10
[  105.202165][ T5178]  reconfigure_super+0x219/0x880
[  105.207197][ T5178]  vfs_fsconfig_locked+0x18d/0x3f0
[  105.212309][ T5178]  __se_sys_fsconfig+0x61b/0x750
[  105.217247][ T5178]  ? __x64_sys_fsconfig+0xc0/0xc0
[  105.222360][ T5178]  ? vtime_user_exit+0x2dc/0x400
[  105.227311][ T5178]  ? lockdep_hardirqs_on+0x94/0x140
[  105.232509][ T5178]  ? __x64_sys_fsconfig+0x1c/0xc0
[  105.237562][ T5178]  do_syscall_64+0x4c/0xa0
[  105.241986][ T5178]  ? clear_bhb_loop+0x30/0x80
[  105.246661][ T5178]  ? clear_bhb_loop+0x30/0x80
[  105.251335][ T5178]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  105.257317][ T5178] RIP: 0033:0x7f3e7f085969
[  105.262164][ T5178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.281941][ T5178] RSP: 002b:00007f3e7ceed038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  105.290362][ T5178] RAX: ffffffffffffffda RBX: 00007f3e7f2acfa0 RCX: 00007f3e7f085969
[  105.298334][ T5178] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004
[  105.306305][ T5178] RBP: 00007f3e7f107ab1 R08: 0000000000000000 R09: 0000000000000000
[  105.314275][ T5178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.322252][ T5178] R13: 0000000000000000 R14: 00007f3e7f2acfa0 R15: 00007fffa563b518
[  105.330327][ T5178]  </TASK>
[  105.333451][    C1] vkms_vblank_simulate: vblank timer overrun
[  105.947474][ T5228] loop3: detected capacity change from 0 to 8192
[  106.177533][ T5228] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  106.217340][ T5228] REISERFS (device loop3): using ordered data mode
[  106.269079][ T5240] loop4: detected capacity change from 0 to 32768
[  106.284511][ T5228] reiserfs: using flush barriers
[  106.291808][ T5228] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  106.321479][ T5228] REISERFS (device loop3): checking transaction log (loop3)
[  106.333502][ T5228] REISERFS (device loop3): Using r5 hash to sort names
[  106.345148][ T5240] XFS: ikeep mount option is deprecated.
[  106.393786][ T5240] XFS (loop4): Mounting V5 Filesystem
[  106.437641][ T5228] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  106.501133][ T5240] XFS (loop4): Ending clean mount
[  106.514577][ T5240] XFS (loop4): Quotacheck needed: Please wait.
[  106.552126][ T5247] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  106.785959][ T5240] XFS (loop4): Quotacheck: Done.
[  106.805439][ T5262] loop2: detected capacity change from 0 to 1024
[  106.888436][ T4169] XFS (loop4): Unmounting Filesystem
[  107.036004][ T5262] attempt to access beyond end of device
[  107.036004][ T5262] loop2: rw=0, want=201326594, limit=1024
[  107.128516][ T5262] Buffer I/O error on dev loop2, logical block 100663296, async page read
[  107.198435][ T5262] attempt to access beyond end of device
[  107.198435][ T5262] loop2: rw=0, want=201326594, limit=1024
[  107.208012][ T5265] loop1: detected capacity change from 0 to 8192
[  107.254822][ T5262] Buffer I/O error on dev loop2, logical block 100663296, async page read
[  107.329791][ T5265] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  107.389369][ T5265] REISERFS (device loop1): using ordered data mode
[  107.484345][ T5265] reiserfs: using flush barriers
[  107.508131][ T5265] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  107.606529][ T5279] netlink: 14528 bytes leftover after parsing attributes in process `syz.5.262'.
[  107.640267][ T5265] REISERFS (device loop1): checking transaction log (loop1)
[  107.675780][ T5265] REISERFS (device loop1): Using r5 hash to sort names
[  107.683024][ T5265] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  107.754640][ T5287] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  107.900736][ T5293] device syzkaller1 entered promiscuous mode
[  108.040758][ T5300] loop5: detected capacity change from 0 to 256
[  108.147242][ T5300] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  108.428578][ T5306] loop4: detected capacity change from 0 to 32768
[  108.499555][ T5306] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.259 (5306)
[  108.574399][ T5306] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  108.583770][ T5306] BTRFS info (device loop4): setting nodatacow, compression disabled
[  108.591978][ T5306] BTRFS info (device loop4): turning on sync discard
[  108.600081][ T5306] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  108.610882][ T5306] BTRFS info (device loop4): trying to use backup root at mount time
[  108.619158][ T5306] BTRFS info (device loop4): enabling auto defrag
[  108.625724][ T5306] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  108.635519][ T5306] BTRFS info (device loop4): force lzo compression, level 0
[  108.642984][ T5306] BTRFS info (device loop4): using free space tree
[  108.649653][ T5306] BTRFS info (device loop4): has skinny extents
[  108.814313][ T4219] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  109.064370][ T5306] BTRFS info (device loop4): enabling ssd optimizations
[  109.234473][ T4219] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.258374][ T4219] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.289573][ T4219] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[  109.344410][   T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  109.352673][ T5365] loop8: detected capacity change from 0 to 8
[  109.364007][ T5368] loop5: detected capacity change from 0 to 512
[  109.406270][ T4303] Dev loop8: unable to read RDB block 8
[  109.439751][ T4303]  loop8: unable to read partition table
[  109.459057][ T4303] loop8: partition table beyond EOD, truncated
[  109.477747][ T5365] Dev loop8: unable to read RDB block 8
[  109.478577][ T5368] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  109.494801][ T5365]  loop8: unable to read partition table
[  109.515636][ T4219] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  109.530306][ T5368] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.531733][ T5365] loop8: partition table beyond EOD, 
[  109.551718][ T4219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.557593][ T5368] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.285: path /: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0
[  109.605980][ T5365] truncated
[  109.609301][ T5365] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  109.618812][   T21] usb 4-1: Using ep0 maxpacket: 16
[  109.653069][ T4219] usb 3-1: Product: syz
[  109.672974][ T4219] usb 3-1: Manufacturer: syz
[  109.687211][ T5368] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 12: comm syz.5.285: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  109.708635][ T4219] usb 3-1: SerialNumber: syz
[  109.734605][   T21] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.756049][   T21] usb 4-1: config 0 interface 0 has no altsetting 0
[  109.777587][ T5368] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz.5.285: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  109.804479][   T21] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  109.813601][   T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.824082][ T5380] loop1: detected capacity change from 0 to 64
[  109.845125][   T21] usb 4-1: config 0 descriptor??
[  109.868749][ T5368] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 14: comm syz.5.285: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  109.981573][ T5368] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 15: comm syz.5.285: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  109.994762][ T5312] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  110.001291][    C1] vkms_vblank_simulate: vblank timer overrun
[  110.080692][ T4188] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (4188)
[  110.112591][ T5368] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 16: comm syz.5.285: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  110.133134][    C1] vkms_vblank_simulate: vblank timer overrun
[  110.349195][ T5368] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 17: comm syz.5.285: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  110.371472][   T21] elecom 0003:056E:010D.0008: unknown main item tag 0x0
[  110.390881][   T21] elecom 0003:056E:010D.0008: unknown main item tag 0x0
[  110.409934][   T21] elecom 0003:056E:010D.0008: unexpected long global item
[  110.430213][   T21] elecom: probe of 0003:056E:010D.0008 failed with error -22
[  110.464885][ T4549] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz-executor: path /41/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0
[  110.601284][ T4549] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 12: comm syz-executor: path /41/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  110.622536][   T21] usb 4-1: USB disconnect, device number 5
[  110.633498][ T5404] loop4: detected capacity change from 0 to 1024
[  110.663394][ T4549] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /41/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  110.709059][ T5312] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  110.733313][ T4549] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.'
[  110.748023][ T4549] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.'
[  110.762807][ T4549] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.'
[  110.783440][ T4549] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.'
[  110.807227][ T4549] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.'
[  110.853024][ T4549] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.'
[  110.911799][ T4549] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.'
[  110.927731][ T5410] input input9: cannot allocate more than FF_MAX_EFFECTS effects
[  110.949134][ T4549] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.'
[  110.961352][ T4219] cdc_ncm 3-1:1.0: bind() failure
[  110.982776][ T4549] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.'
[  111.002249][ T4219] cdc_ncm: probe of 3-1:1.1 failed with error -71
[  111.012307][ T4549] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.'
[  111.034495][ T4219] cdc_mbim: probe of 3-1:1.1 failed with error -71
[  111.054554][ T4219] usbtest: probe of 3-1:1.1 failed with error -71
[  111.063693][ T5412] loop4: detected capacity change from 0 to 1024
[  111.095379][ T4219] usb 3-1: USB disconnect, device number 8
[  111.207441][  T154] hfsplus: b-tree write err: -5, ino 4
[  111.404385][ T5385] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  111.572666][ T5426] loop2: detected capacity change from 0 to 128
[  111.723692][  T154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.824423][ T5385] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  111.855705][ T5385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.879543][  T154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.879896][ T5385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.908119][ T5385] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  111.960084][ T5428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'.
[  112.003236][  T154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.014489][ T5385] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  112.023647][ T5385] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  112.042919][ T5385] usb 2-1: Manufacturer: syz
[  112.055517][ T5385] usb 2-1: config 0 descriptor??
[  112.121049][ T5434] loop3: detected capacity change from 0 to 256
[  112.144492][  T154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.387176][ T5424] loop4: detected capacity change from 0 to 40427
[  112.541067][ T5424] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  112.607185][ T5424] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  112.626993][ T5385] appleir 0003:05AC:8243.0009: unknown main item tag 0x0
[  112.639335][ T5385] appleir 0003:05AC:8243.0009: No inputs registered, leaving
[  112.659633][ T5385] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  112.797496][ T5424] F2FS-fs (loop4): Found nat_bits in checkpoint
[  112.890685][ T5431] loop2: detected capacity change from 0 to 32768
[  112.999162][ T5455] loop3: detected capacity change from 0 to 128
[  113.016433][ T5385] usb 2-1: USB disconnect, device number 5
[  113.039549][ T5424] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  113.072105][ T5424] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  113.100723][ T5437] chnl_net:caif_netlink_parms(): no params data found
[  113.149139][ T5455] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  113.189027][ T5431] XFS (loop2): Mounting V5 Filesystem
[  113.225239][ T5455] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  113.355483][ T5437] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.362679][ T5437] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.412865][ T5431] XFS (loop2): Ending clean mount
[  113.448954][ T5437] device bridge_slave_0 entered promiscuous mode
[  113.490083][ T5437] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.554429][ T5437] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.579931][ T5437] device bridge_slave_1 entered promiscuous mode
[  113.706665][ T4176] XFS (loop2): Unmounting Filesystem
[  113.760432][ T5437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.828818][ T5437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.083250][ T5437] team0: Port device team_slave_0 added
[  114.114763][ T5437] team0: Port device team_slave_1 added
[  114.284698][ T5437] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.312521][ T5437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.390251][ T5437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.492125][ T5437] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.509555][ T5437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.545763][ T5512] syz.2.314 sent an empty control message without MSG_MORE.
[  114.556459][ T5437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.611868][  T154] device hsr_slave_0 left promiscuous mode
[  114.624590][ T4219] Bluetooth: hci4: command 0x0409 tx timeout
[  114.648964][  T154] device hsr_slave_1 left promiscuous mode
[  114.676729][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.715041][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.751541][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.762507][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.770868][  T154] device bridge_slave_1 left promiscuous mode
[  114.787214][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.797850][  T154] device bridge_slave_0 left promiscuous mode
[  114.804577][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.821224][ T5522] program syz.2.321 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  114.831944][  T154] device veth1_macvtap left promiscuous mode
[  114.838355][  T154] device veth0_macvtap left promiscuous mode
[  114.844956][  T154] device veth1_vlan left promiscuous mode
[  114.850904][  T154] device veth0_vlan left promiscuous mode
[  115.209405][ T4251] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  115.210742][  T154] team0 (unregistering): Port device team_slave_1 removed
[  115.249166][  T154] team0 (unregistering): Port device team_slave_0 removed
[  115.269546][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.300968][ T5527] loop3: detected capacity change from 0 to 32768
[  115.310249][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.340846][ T5527] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.323 (5527)
[  115.376243][ T5527] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  115.389489][ T5527] BTRFS info (device loop3): using free space tree
[  115.397771][ T5527] BTRFS info (device loop3): has skinny extents
[  115.450574][  T154] bond0 (unregistering): Released all slaves
[  115.523261][ T5527] BTRFS info (device loop3): enabling ssd optimizations
[  115.584858][ T4251] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.665826][ T5437] device hsr_slave_0 entered promiscuous mode
[  115.717096][ T5437] device hsr_slave_1 entered promiscuous mode
[  115.742835][ T5437] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  115.753452][ T5437] Cannot create hsr debugfs directory
[  115.768097][ T4251] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  115.779339][ T4251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.822372][ T4251] usb 3-1: Product: syz
[  115.830200][ T4251] usb 3-1: Manufacturer: syz
[  115.835183][ T4251] usb 3-1: SerialNumber: syz
[  115.851115][ T4251] usb 3-1: config 0 descriptor??
[  115.896031][ T4251] usb 3-1: bad CDC descriptors
[  115.901256][ T4251] usb 3-1: unsupported MDLM descriptors
[  116.430945][ T4985] usb 3-1: USB disconnect, device number 9
[  116.700017][ T4219] Bluetooth: hci4: command 0x041b tx timeout
[  116.713205][ T5437] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  116.748792][ T5437] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  116.815297][ T5437] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  116.884922][ T5437] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  117.540048][ T5437] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.598118][ T5599] loop4: detected capacity change from 0 to 32768
[  117.646130][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  117.681539][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  117.690267][ T5599] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  117.699181][ T5599] BTRFS info (device loop4): max_inline at 0
[  117.706178][ T5599] BTRFS info (device loop4): turning off barriers
[  117.712628][ T5599] BTRFS info (device loop4): turning on sync discard
[  117.719673][ T5599] BTRFS info (device loop4): turning on flush-on-commit
[  117.726687][ T5599] BTRFS info (device loop4): enabling disk space caching
[  117.733735][ T5599] BTRFS info (device loop4): force clearing of disk cache
[  117.741001][ T5599] BTRFS info (device loop4): allowing degraded mounts
[  117.747912][ T5599] BTRFS info (device loop4): enabling ssd optimizations
[  117.754910][ T5599] BTRFS info (device loop4): disabling tree log
[  117.761185][ T5599] BTRFS info (device loop4): disk space caching is enabled
[  117.761309][ T5437] 8021q: adding VLAN 0 to HW filter on device team0
[  117.768533][ T5599] BTRFS info (device loop4): has skinny extents
[  117.869999][ T4986] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  117.934905][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  117.959474][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  118.008925][ T1483] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.016066][ T1483] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.124308][ T4986] usb 4-1: Using ep0 maxpacket: 32
[  118.152190][ T5599] BTRFS info (device loop4): clearing free space tree
[  118.159271][ T5599] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  118.169080][ T5599] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  118.244461][ T4986] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  118.264995][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  118.285170][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  118.285999][ T4986] usb 4-1: config 0 has no interface number 0
[  118.312764][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  118.343432][ T1483] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.350932][ T1483] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.384557][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  118.405047][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  118.474722][ T4986] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  118.483984][ T4986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.494749][ T4986] usb 4-1: Product: syz
[  118.499245][ T4986] usb 4-1: Manufacturer: syz
[  118.516355][ T4986] usb 4-1: SerialNumber: syz
[  118.547068][ T4986] usb 4-1: config 0 descriptor??
[  118.585577][ T4986] smsc95xx v2.0.0
[  118.784504][ T5385] Bluetooth: hci4: command 0x040f tx timeout
[  118.922941][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  118.963565][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  118.990838][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  119.017202][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  119.025841][ T4986] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  119.036882][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  119.063489][ T4986] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  119.106522][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  119.171804][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  119.216894][ T5437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  119.249724][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  119.251785][ T5662] loop2: detected capacity change from 0 to 512
[  119.277563][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  119.292085][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  119.332718][ T5662] EXT4-fs (loop2): Ignoring removed orlov option
[  119.359718][ T5662] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002]
[  119.368036][ T5660] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  119.434675][ T5662] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.349: corrupted in-inode xattr
[  119.480824][ T5670] device syzkaller1 entered promiscuous mode
[  119.554476][ T4986] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  119.575470][ T5662] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.349: couldn't read orphan inode 15 (err -117)
[  119.582805][ T4986] smsc95xx: probe of 4-1:0.67 failed with error -71
[  119.624460][ T5662] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,data_err=ignore,nombcache,noblock_validity,nodiscard,norecovery,,errors=continue. Quota mode: none.
[  119.665573][ T4986] usb 4-1: USB disconnect, device number 6
[  119.756152][ T5662] EXT4-fs error (device loop2): ext4_check_dx_root:2266: inode #2: comm syz.2.349: Corrupt dir, invalid name_len for '..', running e2fsck is recommended
[  119.811619][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  119.842010][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  119.875033][ T5437] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.975184][ T5684] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  120.864757][ T5052] Bluetooth: hci4: command 0x0419 tx timeout
[  120.883328][ T5703] loop1: detected capacity change from 0 to 2048
[  120.896150][ T5689] loop4: detected capacity change from 0 to 131072
[  120.969443][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  120.982267][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  121.000565][ T5689] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(1024)
[  121.009447][ T5689] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  121.036685][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  121.070824][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  121.102545][ T5689] F2FS-fs (loop4): Found nat_bits in checkpoint
[  121.112711][ T5437] device veth0_vlan entered promiscuous mode
[  121.163149][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  121.196939][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  121.221741][ T5689] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  121.229260][ T5689] F2FS-fs (loop4): Mounted with checkpoint version = 1b41e955
[  121.250372][ T5437] device veth1_vlan entered promiscuous mode
[  121.299287][ T5703] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,acl,,errors=continue. Quota mode: none.
[  121.449612][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  121.472344][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  121.512041][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  121.537588][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  121.555876][ T5437] device veth0_macvtap entered promiscuous mode
[  121.622616][ T5437] device veth1_macvtap entered promiscuous mode
[  121.676741][ T5437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.733572][ T5437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.744284][ T4274] wlan1: Trigger new scan to find an IBSS to join
[  121.763776][ T5695] loop3: detected capacity change from 0 to 32768
[  121.786046][ T5437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.847452][ T5437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.865423][ T5437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.878025][ T5437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.888954][ T5437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.900623][ T5437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.952330][ T5437] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.968820][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  121.987857][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  122.001042][ T5695] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.358 (5695)
[  122.005307][ T5729] loop2: detected capacity change from 0 to 4096
[  122.025078][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  122.058586][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  122.096900][ T5437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.111373][ T5695] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  122.124164][ T5437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.151866][ T5437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.163537][ T5695] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  122.193748][ T5437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.204235][ T5695] BTRFS info (device loop3): use zstd compression, level 3
[  122.211477][ T5695] BTRFS info (device loop3): using free space tree
[  122.218544][ T5437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.254228][ T5437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.254945][ T5695] BTRFS info (device loop3): has skinny extents
[  122.288328][ T5437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.339995][ T5437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.381576][ T5437] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.418563][ T5729] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  122.460051][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  122.469938][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  122.482579][ T5437] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.492388][ T5437] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.509162][ T5437] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.519225][ T5437] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.674452][ T5695] BTRFS info (device loop3): enabling ssd optimizations
[  122.795783][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.822795][   T26] audit: type=1800 audit(1748877265.301:12): pid=5695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.358" name="file1" dev="loop3" ino=260 res=0 errno=0
[  122.864554][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.914504][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  122.928503][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.974384][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.004775][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  123.081878][   T26] audit: type=1800 audit(1748877265.561:13): pid=5764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.358" name="file1" dev="loop3" ino=260 res=0 errno=0
[  123.161596][ T5732] loop1: detected capacity change from 0 to 40427
[  123.313853][ T5732] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(5120)
[  123.317852][ T5769] loop6: detected capacity change from 0 to 1024
[  123.361051][ T5732] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  123.467908][ T5769] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodiscard,errors=continue,barrier,norecovery,debug_want_extra_isize=0x0000000000000004,lazytime,nodelalloc,usrquota,noauto_da_alloc,block_validity,init_itable,,errors=continue. Quota mode: writeback.
[  123.527773][ T5732] F2FS-fs (loop1): Found nat_bits in checkpoint
[  123.543605][   T26] audit: type=1800 audit(1748877266.021:14): pid=5769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.307" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 res=0 errno=0
[  123.926399][ T5732] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  123.933581][ T5732] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  124.126901][ T5794] tipc: Started in network mode
[  124.131832][ T5794] tipc: Node identity ac14142f, cluster identity 4711
[  124.232529][ T5794] tipc: New replicast peer: 0.0.0.0
[  124.297062][ T5794] tipc: Enabled bearer <udp:syz2>, priority 10
[  124.334722][ T5799] netlink: 32 bytes leftover after parsing attributes in process `syz.6.372'.
[  124.482613][ T4173] attempt to access beyond end of device
[  124.482613][ T4173] loop1: rw=2049, want=45112, limit=40427
[  124.643434][ T5802] loop2: detected capacity change from 0 to 8192
[  124.776842][ T4814] wlan1: Trigger new scan to find an IBSS to join
[  124.786507][ T5802] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  124.847962][ T5802] REISERFS (device loop2): using ordered data mode
[  124.914982][ T5802] reiserfs: using flush barriers
[  124.970696][ T5802] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  125.051888][ T5802] REISERFS (device loop2): checking transaction log (loop2)
[  125.115838][ T5802] REISERFS (device loop2): Using r5 hash to sort names
[  125.180589][ T5802] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  125.237606][ T5802] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  125.321359][ T5802] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  125.358456][ T5814] loop6: detected capacity change from 0 to 32768
[  125.376794][ T5825] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  125.394319][ T5573] tipc: Node number set to 2886997039
[  125.451706][ T5814] ERROR: (device loop6): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3
[  125.451706][ T5814] 
[  125.473462][ T5825] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  125.538200][ T5814] ERROR: (device loop6): remounting filesystem as read-only
[  125.950502][ T5841] loop1: detected capacity change from 0 to 2048
[  126.040587][ T5841] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  126.054424][ T5813] loop3: detected capacity change from 0 to 32768
[  126.061825][ T5841] NILFS (loop1): mounting unchecked fs
[  126.130789][ T5841] NILFS (loop1): recovery complete
[  126.184792][ T5855] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  126.313025][ T5813] XFS (loop3): Mounting V5 Filesystem
[  126.560108][ T5813] XFS (loop3): Ending clean mount
[  126.611070][ T5880] loop6: detected capacity change from 0 to 512
[  126.730641][ T4172] XFS (loop3): Unmounting Filesystem
[  126.751042][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'.
[  126.894451][ T5880] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,sysvgroups,errors=remount-ro,. Quota mode: writeback.
[  126.977718][ T5880] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  127.280088][ T5880] EXT4-fs error (device loop6): ext4_get_first_dir_block:3605: inode #12: block 32: comm syz.6.392: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  127.524573][ T5880] EXT4-fs (loop6): Remounting filesystem read-only
[  127.614024][ T5880] EXT4-fs error (device loop6): ext4_get_first_dir_block:3608: inode #12: comm syz.6.392: directory missing '.'
[  127.704783][ T5880] EXT4-fs (loop6): Remounting filesystem read-only
[  127.735479][ T4272] wlan1: Creating new IBSS network, BSSID 46:c2:93:47:8d:8b
[  127.845292][ T5894] loop2: detected capacity change from 0 to 131072
[  127.977588][ T5894] XFS (loop2): Mounting V5 Filesystem
[  128.029748][ T5921] loop1: detected capacity change from 0 to 1024
[  128.180549][ T5898] loop4: detected capacity change from 0 to 32768
[  128.273200][ T5921] hfsplus: xattr search failed
[  128.375407][ T5898] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  128.399712][ T5894] XFS (loop2): Starting recovery (logdev: internal)
[  128.424469][ T5894] XFS (loop2): Ending recovery (logdev: internal)
[  128.485070][ T5898] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  128.766789][ T4176] XFS (loop2): Unmounting Filesystem
[  129.100976][ T5952] loop1: detected capacity change from 0 to 256
[  129.153232][ T5952] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d)
[  129.305693][ T5950] loop3: detected capacity change from 0 to 8192
[  129.445570][ T5950] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  129.484430][ T5950] REISERFS (device loop3): using ordered data mode
[  129.518139][ T5950] reiserfs: using flush barriers
[  129.562333][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'.
[  129.582487][ T5950] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  129.614337][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'.
[  129.694418][ T5950] REISERFS (device loop3): checking transaction log (loop3)
[  129.732462][ T5950] REISERFS (device loop3): Using r5 hash to sort names
[  129.775968][ T5950] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  129.816293][ T5944] loop6: detected capacity change from 0 to 32768
[  129.907732][ T5944] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.409 (5944)
[  129.966083][ T5944] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  130.012821][ T5944] BTRFS info (device loop6): using free space tree
[  130.051094][ T5944] BTRFS info (device loop6): has skinny extents
[  130.122457][ T4169] ocfs2: Unmounting device (7,4) on (node local)
[  130.327341][ T5944] BTRFS info (device loop6): enabling ssd optimizations
[  130.496014][ T5960] loop2: detected capacity change from 0 to 32768
[  130.615037][ T5960] XFS (loop2): Mounting V5 Filesystem
[  130.685145][ T5957] loop1: detected capacity change from 0 to 32768
[  130.830742][ T5957] find_entry called with index = 0
[  130.831302][ T5960] XFS (loop2): Ending clean mount
[  130.881295][ T5960] XFS (loop2): Quotacheck needed: Please wait.
[  130.894391][ T5957] read_mapping_page failed!
[  130.902934][  T156] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared)
[  130.929749][ T5957] ERROR: (device loop1): txCommit: 
[  130.929749][ T5957] 
[  131.005242][ T5996] read_mapping_page failed!
[  131.013930][ T5960] XFS (loop2): Quotacheck: Done.
[  131.064374][ T5996] ERROR: (device loop1): txCommit: 
[  131.064374][ T5996] 
[  131.193621][ T4272] read_mapping_page failed!
[  131.209112][ T4272] ERROR: (device loop1): txCommit: 
[  131.209112][ T4272] 
[  131.221218][ T4272] jfs_write_inode: jfs_commit_inode failed!
[  131.283993][ T4176] XFS (loop2): Unmounting Filesystem
[  131.810975][ T6008] loop4: detected capacity change from 0 to 32768
[  131.825812][ T6008] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.423 (6008)
[  131.983299][ T6001] loop3: detected capacity change from 0 to 32768
[  132.081672][ T6008] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  132.090811][ T6008] BTRFS info (device loop4): enabling auto defrag
[  132.097753][ T6008] BTRFS info (device loop4): doing ref verification
[  132.104697][ T6008] BTRFS info (device loop4): max_inline at 0
[  132.110712][ T6008] BTRFS info (device loop4): force clearing of disk cache
[  132.117894][ T6008] BTRFS info (device loop4): turning on sync discard
[  132.125030][ T6008] BTRFS info (device loop4): disabling free space tree
[  132.132434][ T6008] BTRFS info (device loop4): has skinny extents
[  132.324345][ T1108] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  132.479635][ T6008] BTRFS info (device loop4): enabling ssd optimizations
[  132.489154][ T6008] BTRFS info (device loop4): clearing free space tree
[  132.496205][ T6008] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  132.505947][ T6008] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  132.698618][ T1108] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  132.717317][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.723733][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  132.748465][ T1108] usb 2-1: config 1 has no interface number 0
[  132.784040][ T1108] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.851443][ T1108] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  132.868487][ T1108] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  133.040560][ T1108] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  133.057909][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.084270][ T1108] usb 2-1: Product: syz
[  133.088674][ T1108] usb 2-1: Manufacturer: syz
[  133.093639][ T6060] loop6: detected capacity change from 0 to 512
[  133.100896][ T1108] usb 2-1: SerialNumber: syz
[  133.255441][ T6060] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  133.300881][ T6060] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  133.344941][ T6060] System zones: 0-2, 18-18, 34-35
[  133.361354][ T6050] loop3: detected capacity change from 0 to 32768
[  133.380023][ T6060] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  133.410426][ T6060] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 3: comm syz.6.430: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=0, rec_len=0, size=2048 fake=0
[  133.558651][ T6050] XFS (loop3): Mounting V5 Filesystem
[  133.577303][ T4217] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  133.687250][ T6050] XFS (loop3): Ending clean mount
[  133.716383][ T6077] netlink: 'syz.6.431': attribute type 10 has an invalid length.
[  133.780969][ T6077] team0: Device veth1_vlan failed to register rx_handler
[  133.827948][ T4172] XFS (loop3): Unmounting Filesystem
[  133.894515][ T4217] usb 3-1: Using ep0 maxpacket: 8
[  134.034583][ T4217] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.048147][ T4217] usb 3-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  134.058439][ T4217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.084457][ T1108] cdc_ncm 2-1:1.1: bind() failure
[  134.112513][ T4217] usb 3-1: config 0 descriptor??
[  134.309195][ T4216] usb 2-1: USB disconnect, device number 6
[  134.393073][ T4217] usb 3-1: USB disconnect, device number 10
[  134.574834][ T6093] loop6: detected capacity change from 0 to 32768
[  134.646536][ T6093] XFS (loop6): Mounting V5 Filesystem
[  134.702697][ T6095] loop3: detected capacity change from 0 to 32768
[  134.736670][ T6095] XFS: ikeep mount option is deprecated.
[  134.742543][ T6095] XFS: noikeep mount option is deprecated.
[  134.852428][ T6095] XFS (loop3): Mounting V5 Filesystem
[  134.854005][ T6093] XFS (loop6): Ending clean mount
[  135.087271][ T6095] XFS (loop3): Ending clean mount
[  135.139421][ T6095] XFS (loop3): Quotacheck needed: Please wait.
[  135.149274][ T5437] XFS (loop6): Unmounting Filesystem
[  135.323662][ T6095] XFS (loop3): Quotacheck: Done.
[  135.462458][ T4172] XFS (loop3): Unmounting Filesystem
[  136.150404][ T4220] hid-generic 0005:0457:0009.000A: unknown main item tag 0x0
[  136.258519][ T4220] hid-generic 0005:0457:0009.000A: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  136.336703][ T6163] loop2: detected capacity change from 0 to 256
[  136.374004][ T6167] loop6: detected capacity change from 0 to 512
[  136.399250][ T6168] loop1: detected capacity change from 0 to 1024
[  136.430742][ T6167] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  136.477342][   T26] audit: type=1800 audit(1748877278.961:15): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.464" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=25 res=0 errno=0
[  136.515568][ T6171] device syzkaller1 entered promiscuous mode
[  136.519201][    C0] vkms_vblank_simulate: vblank timer overrun
[  136.557780][ T6167] EXT4-fs (loop6): 1 truncate cleaned up
[  136.563641][ T6167] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback.
[  136.784652][ T6178] loop3: detected capacity change from 0 to 512
[  136.873254][ T6178] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  137.375749][ T6199] loop1: detected capacity change from 0 to 64
[  137.866781][ T6225] loop6: detected capacity change from 0 to 1024
[  138.062847][ T6231] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  138.124373][ T5383] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  138.229354][ T6236] loop6: detected capacity change from 0 to 512
[  138.369225][ T6236] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.487: casefold flag without casefold feature
[  138.427307][ T6239] loop2: detected capacity change from 0 to 4096
[  138.454041][ T6236] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.487: couldn't read orphan inode 15 (err -117)
[  138.461133][ T6239] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00
[  138.480754][ T6236] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  138.534470][ T5383] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8
[  138.564801][ T5383] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  138.568425][ T6240] raw_sendmsg: syz.4.489 forgot to set AF_INET. Fix it!
[  138.609972][ T6239] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00
[  138.619901][ T5383] usb 2-1: config 1 interface 0 has no altsetting 0
[  138.630230][ T6239] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00
[  138.671497][ T6239] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00
[  138.710253][ T6239] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00
[  138.752711][ T6239] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00
[  138.771535][ T6253] cgroup: Need name or subsystem set
[  138.783917][ T6239] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00
[  138.828023][ T6239] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00
[  138.844698][ T5383] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  138.854325][ T5383] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.859275][ T6250] loop6: detected capacity change from 0 to 4096
[  138.869839][ T5383] usb 2-1: Product: syz
[  138.874046][ T5383] usb 2-1: Manufacturer: syz
[  138.879338][ T6239] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00
[  138.902194][ T6239] ntfs3: loop2: try to read out of volume at offset 0x3fffffe0c00
[  138.910622][ T5383] usb 2-1: SerialNumber: syz
[  138.938739][ T6223] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  139.001750][ T6250] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  139.229401][ T4217] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  139.237862][ T5383] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8
[  139.324432][ T4249] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  139.446847][ T6278] loop6: detected capacity change from 0 to 2048
[  139.478277][ T4216] usb 2-1: USB disconnect, device number 7
[  139.503521][ T4188] Alternate GPT is invalid, using primary GPT.
[  139.524714][ T4188]  loop6: p1 p2 p3
[  139.548105][ T4216] usblp0: removed
[  139.554475][ T4217] usb 5-1: Using ep0 maxpacket: 32
[  139.577752][ T4249] usb 4-1: Using ep0 maxpacket: 16
[  139.620712][ T6278] Alternate GPT is invalid, using primary GPT.
[  139.624314][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[  139.628329][ T6278]  loop6: p1 p2 p3
[  139.636028][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[  139.644230][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[  139.679368][ T6286] loop2: detected capacity change from 0 to 256
[  139.704480][ T4217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.715811][ T4249] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.715861][ T4249] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  139.715887][ T4249] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.718443][ T4249] usb 4-1: config 0 descriptor??
[  139.733438][ T4217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.780440][ T6286] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  139.865418][ T4217] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  139.870191][ T6292] cgroup: fork rejected by pids controller in /syz6
[  139.899144][ T4217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.929651][ T4187] udevd[4187]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  139.929728][ T4302] udevd[4302]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  139.982871][ T4188] udevd[4188]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  139.995670][ T4217] usb 5-1: config 0 descriptor??
[  140.076314][ T4187] udevd[4187]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  140.102796][ T6304] loop1: detected capacity change from 0 to 256
[  140.107630][ T4302] udevd[4302]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  140.125067][ T4188] udevd[4188]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  140.227815][ T4249] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  140.244282][ T4249] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  140.254618][ T4249] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  140.267371][ T4249] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  140.281895][   T26] audit: type=1800 audit(1748877282.761:16): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.503" name="file1" dev="loop1" ino=1048608 res=0 errno=0
[  140.319164][ T4249] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  140.334734][ T4249] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  140.435044][ T6265] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  140.447081][ T6265] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  140.455514][ T6265] CPU: 1 PID: 6265 Comm: syz.3.494 Not tainted 5.15.184-syzkaller #0
[  140.463602][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  140.473671][ T6265] RIP: 0010:mcp_i2c_xfer+0x58/0x420
[  140.478900][ T6265] Code: 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 f9 c4 67 fa 48 8b 1b 48 89 d8 48 c1 e8 03 4d 89 f4 48 89 04 24 <42> 80 3c 30 00 74 08 48 89 df e8 d9 c4 67 fa 4c 8b 33 4d 8d ae 70
[  140.498716][ T6265] RSP: 0018:ffffc9000335fb30 EFLAGS: 00010246
[  140.504806][ T6265] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000
[  140.512801][ T6265] RDX: ffffc9000cc81000 RSI: 0000000000001003 RDI: 0000000000001004
[  140.520771][ T6265] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed100c467cd3
[  140.528740][ T6265] R10: ffffed100c467cd3 R11: 1ffff1100c467cd2 R12: dffffc0000000000
[  140.536799][ T6265] R13: 1ffff1100c467c2b R14: dffffc0000000000 R15: ffff888029d551a0
[  140.544778][ T6265] FS:  00007fb7aa6b36c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  140.550500][ T4217] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  140.553732][ T6265] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.553750][ T6265] CR2: 0000200000002580 CR3: 0000000079245000 CR4: 00000000003506e0
[  140.553769][ T6265] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  140.587991][ T6265] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  140.596421][ T6265] Call Trace:
[  140.599760][ T6265]  <TASK>
[  140.602755][ T6265]  ? mcp_gpio_get+0x260/0x260
[  140.607459][ T6265]  __i2c_transfer+0x864/0x2060
[  140.612267][ T6265]  ? rwsem_down_read_slowpath+0x990/0x990
[  140.618020][ T6265]  ? i2c_cmd+0x110/0x110
[  140.622287][ T6265]  ? __might_fault+0xb7/0x110
[  140.626990][ T6265]  i2c_transfer+0x24c/0x390
[  140.631520][ T6265]  ? __i2c_transfer+0x2060/0x2060
[  140.636559][ T6265]  ? __might_fault+0xb3/0x110
[  140.641257][ T6265]  ? _copy_from_user+0x111/0x170
[  140.646188][ T6265]  i2cdev_ioctl_rdwr+0x3da/0x6c0
[  140.651220][ T6265]  i2cdev_ioctl+0x5ba/0x750
[  140.655810][ T6265]  ? i2cdev_write+0x120/0x120
[  140.660517][ T6265]  ? bpf_lsm_file_ioctl+0x5/0x10
[  140.665451][ T6265]  ? security_file_ioctl+0x7c/0xa0
[  140.670602][ T6265]  ? i2cdev_write+0x120/0x120
[  140.675323][ T6265]  __se_sys_ioctl+0xfa/0x170
[  140.680282][ T6265]  do_syscall_64+0x4c/0xa0
[  140.684696][ T6265]  ? clear_bhb_loop+0x30/0x80
[  140.689372][ T6265]  ? clear_bhb_loop+0x30/0x80
[  140.694126][ T6265]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  140.700028][ T6265] RIP: 0033:0x7fb7ac84b969
[  140.704441][ T6265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.724082][ T6265] RSP: 002b:00007fb7aa6b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  140.732517][ T6265] RAX: ffffffffffffffda RBX: 00007fb7aca72fa0 RCX: 00007fb7ac84b969
[  140.740501][ T6265] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 0000000000000004
[  140.748466][ T6265] RBP: 00007fb7ac8cdab1 R08: 0000000000000000 R09: 0000000000000000
[  140.756438][ T6265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  140.756556][ T4217] usb 5-1: USB disconnect, device number 5
[  140.764417][ T6265] R13: 0000000000000000 R14: 00007fb7aca72fa0 R15: 00007ffd7f782048
[  140.764444][ T6265]  </TASK>
[  140.764463][ T6265] Modules linked in:
[  140.802774][ T6265] ---[ end trace d50a37f64f119079 ]---
[  140.808510][ T6265] RIP: 0010:mcp_i2c_xfer+0x58/0x420
[  140.813868][ T6265] Code: 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 f9 c4 67 fa 48 8b 1b 48 89 d8 48 c1 e8 03 4d 89 f4 48 89 04 24 <42> 80 3c 30 00 74 08 48 89 df e8 d9 c4 67 fa 4c 8b 33 4d 8d ae 70
[  140.834510][ T6265] RSP: 0018:ffffc9000335fb30 EFLAGS: 00010246
[  140.840733][ T6265] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000
[  140.849173][ T6265] RDX: ffffc9000cc81000 RSI: 0000000000001003 RDI: 0000000000001004
[  140.858261][ T6265] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed100c467cd3
[  140.866844][ T6265] R10: ffffed100c467cd3 R11: 1ffff1100c467cd2 R12: dffffc0000000000
[  140.875247][ T6265] R13: 1ffff1100c467c2b R14: dffffc0000000000 R15: ffff888029d551a0
[  140.883407][ T6265] FS:  00007fb7aa6b36c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  140.897525][ T6265] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.906205][ T6265] CR2: 00007f5136decf17 CR3: 0000000079245000 CR4: 00000000003506e0
[  140.914715][ T6265] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  140.922849][ T6265] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  140.931544][ T6265] Kernel panic - not syncing: Fatal exception
[  140.937856][ T6265] Kernel Offset: disabled
[  140.942187][ T6265] Rebooting in 86400 seconds..