last executing test programs:

6m36.016173409s ago: executing program 2 (id=135):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b40), 0x2000, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0)
ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000140)=0xe64)
shutdown(r1, 0x0)
sendfile(r1, r2, 0x0, 0xdc)
r3 = open(0x0, 0x0, 0x0)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
ioctl$RTC_EPOCH_SET(r4, 0x4008700e, 0xfffffffffffffffe)
getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000080))
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x14}, @in=@private=0xa010100, 0x4e25, 0xffff, 0x4e24, 0x1, 0x2, 0x0, 0x80, 0x88}, {0x9, 0xfffffffffffffff9, 0x1, 0x101, 0x2, 0x3, 0x100000001, 0x6}, {0x0, 0x7a8, 0x1, 0x3}, 0xfffffff9, 0x6e6bb0, 0x1, 0x1, 0x1, 0x3}, {{@in=@loopback, 0x4d6, 0xff}, 0xa, @in=@empty, 0x3504, 0x1, 0x1, 0x4, 0x81, 0x2}}, 0xe8)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x107042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42102, 0x119)
pwritev2(r5, &(0x7f0000000200)=[{&(0x7f0000001b40)}], 0x1, 0x8000, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9a)
r6 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xd)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x61}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
shmat(r6, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x300001a, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32], 0xd, 0x2af, &(0x7f0000000840)="$eJzs3c2KI1UUAOBTSXW6/IE04kYRLNCFq2barZuOMoLYKyWCutDg9IAkYSANAVswzmqewKXv4SO4ceMbCG4FdzOLlpL6mySYzgxjzMD4fatD3TrnnqrbpFc5+fK16fjWnSTu3v8tsiyJzmmcxoMkjqITre8jDQDg2fGgKOLP4kky087uuwEA9qH+/1972r0AAPvx8aeffTg4O7v5UZ5n8Ur/3nyYRMT03nxYrw9ux9cxifO4Ef24iigequP3Pzi7GWleOoo3p4v5sMycfvFLU3/wR0SVfxL9ONqcf5LXVvIX8+FBPB95DG4ftK324+XN+W9vyI9hL956Y6X/4+jHr1/FnZjErShzl/nfneT5e8UP97/9vNymzE86MTys7lsquvs8FwAAAAAAAAAAAAAAAAAAAAAAnm3HeZ7U43uq+T3lpWb+TveqWj/OW0fr83nq/KQtVM8HKqIZ0bMo4sd2vs6NPM+L5sZlfhqvpn5YAAAAAAAAAAAAAAAAAAAAAEoX31yOR5PJ+WwnQTsNoP1a/5PWOV258npcjkfd6wsebt8rW7mSRjzXPnjZ69Y2Ik1jR6/lUUHZ1O4rHy4P95Oog/ZgdrrXS+/WRS/Ho7xZal/yeJQ8aq+sPbifVpd6Mbt4Mf5NY0X1J3FVrJ9p9rDV9azejt5G74WNS38VRfF4dd75vT6j5kpSjdh4vN0PmmDjA5ZB9s+z+Pn6gtd+ZHR39dkDAAAAAAAAAAAAAAAAAACsW37pd8Pi3a2pnf+sKQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYs+b3/7sRUQXnsywiqqBZ2hAsmuRt9zRBL2YXT/kRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+B/4OwAA//+g/0z+")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r7, 0x1000)
fsync(r7)
shmctl$IPC_RMID(0x0, 0x0)

6m34.891391214s ago: executing program 2 (id=138):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000bc0)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="2c5a8f655de6deff18ef0977c40da3e75b6476813ddf0749af13c930472d7b259fb7a7a7f374a7033b449e122f8603f529b72cd1457284334ca3724b6cb0e4c67113a6b1be5af03d810a643ddb89df182e1b830aeb4f9bc742c107f3788287a185caeb123a4d86e0a04c12a18db90d00c70a1381bbc08b41cc2cc6804bd1f618f3882236691801696e922c11311a73cd16a2a521ba0577bf6ba4f03cbea79911b0cdb903d00cf697304892e7ab4f6616f63b4e0115bc81c45033a268c7692dcbd9931d8d796f71c1f3b2ae664ad3225692bcc9b34a21c4f20941260b7308cbf6ca66", 0xe2}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x20044810)

6m33.377843118s ago: executing program 2 (id=145):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000100)="f20f210e66b806000f00d0b8008000000f23d80f21f835c00000100f23f8650f6be53e0fc718676f0f0dbccc55d900000f09f30f09650fb028", 0x39}], 0x1, 0x0, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

6m32.280041033s ago: executing program 2 (id=151):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0)
ioctl$FITRIM(r0, 0xc0185879, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='utf8=0,nonumtail=0,iocharset=iso8859-14,check=strict,uni_xlate=1,shortname=lower,shoru~ame=winnt,flush,\x00'], 0x1, 0x216, &(0x7f0000000e00)="$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")
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000001900)='./bus\x00', 0x0, 0x21002, 0x0)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x4c02, &(0x7f0000000140))
ftruncate(r1, 0x5c)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x8000, 0x0)

6m30.613064281s ago: executing program 2 (id=158):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000e40)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@nostrict}, {@uid_forget}, {@anchor={'anchor', 0x3d, 0x91}}, {@gid}, {@dmode={'dmode', 0x3d, 0x404}}, {@undelete}, {@partition={'partition', 0x3d, 0x1}}, {@unhide}]}, 0x1, 0xc43, &(0x7f00000001c0)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000100)=""/155, 0x9b)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

6m29.874138031s ago: executing program 2 (id=161):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB='8'], 0x138)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

6m27.77616241s ago: executing program 32 (id=161):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB='8'], 0x138)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

2m22.929973238s ago: executing program 5 (id=959):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={<r1=>0x0, 0x0, <r2=>0x0}, &(0x7f00000013c0)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(r0, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, r2}}}], 0x20, 0x4010}}], 0x1, 0x8095)

2m22.175347699s ago: executing program 5 (id=964):
r0 = semget$private(0x0, 0x4000000009, 0x0)
io_submit(0x0, 0x0, 0x0)
semop(0x0, 0x0, 0x0)
semtimedop(0x0, &(0x7f0000000040)=[{0x6}, {}], 0x2, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000))

2m21.861281808s ago: executing program 5 (id=966):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_io_uring_setup(0x6908, &(0x7f0000000440)={0x0, 0xfffffffe, 0x10100, 0x3, 0xb5}, 0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_setup(0x1862, &(0x7f00000004c0)={0x0, 0xd823, 0x0, 0x0, 0x200000}, &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2})
io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PIO_UNIMAPCLR(r10, 0x4b68, 0x0)

2m18.68421681s ago: executing program 5 (id=974):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, 0x0, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"})
write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xd)
getsockopt$inet6_int(r0, 0x29, 0x13, 0xffffffffffffffff, &(0x7f0000000240)=0xffffff52)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100))
r3 = syz_open_pts(r2, 0x0)
r4 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040))
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000006d40)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b5500005f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a0a08b55db183ec794a5d9953cd3e04ed42987344ab9528d5c797965c4696da13605033397fbc6a33784bcc44a085b6344f39a21e52b225d5dc87a8e9835a60dcdd96222ed3a16a7dd58ccfcb2846c2799f5612caed0361cbcecd6f69ec93f5075b38f872b0c25baae18776ba19eb32d5a380d696fef541e0c8bba19aa739e4314a6134ed00e4b1844f7fa03ee43a7e7c75f864bdc67aa5"], 0x1, 0x14fe, &(0x7f0000002ac0)="$eJzs3QnYjtXWOPC19t43L4knybzXXjdPMmySJEOSDEmSJEmmhCRJkpBMmZKQhMxJ5pBMIZnnKXOSHEmShIQk+3+9dfqc83W+r3P+53x/3/+863dd9/Xsde177XvvZ73vcw/XO3zTYXCVelUr1mFm+Kfgry/dASAFAPoBQBYAiACgZNaSWVP7M2js/s8dRPxrPTjtSs9AXElS/7RN6p+2Sf3TNql/2ib1T9uk/mmb1D9tk/oLkZZtm57rGtnS7vbPP/9P+fVFnv//f0jO/2mb1P/fzZkM/8jeUv9/J5dCCP9YhtQ/bZP6p21S/7RN6p+2Sf3TNqm/EGnZlX7+LNuV3a70158QQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiLThfLjMAMBv7Ss9LyGEEEIIIYQQQvzrhPRXegZCCCGEEEIIIYT4n4egQIOBCNJBekiBDJARroJMcDVkhiyQgGsgK1wL2eA6yA45ICfkgtyQB/KCBQIHDDHkg/yQhOuhANwABaEQFIYi4KEoFIMboTjcBCXgZigJt0ApuBVKQxkoC+XgNigPt0MFuAMqwp1QCSpDFagKd0E1uBuqwz1QA+6FmnAf1IL7oTY8AHXgQagLD0E9eBjqwyPQABpCI2gMTf6v8l+ALvAidIVu0B16QE94CXpBb+gDfaEfvAz94RUYAK/CQBgEg+E1GAKvw1B4A4bBcBgBb8JIGAWjYQyMhXEwHt6CCfA2TIR3YBJMhikwFabBdJgB78JMmAWz4T2YA+/DXJgH82EBLIQPYBEshiXwISyFj2AZLIcVsBJWwWpYA2thHayHDbARNsFm2AJbYRt8DNthB+yEXbAb9sBe+AT2waewHz6DA/D5P5h/7j/ld0RAQIUKDRpMh+kwBVMwI2bETJgJM2NmTGACs2JWzIbZMDtmx5yYE3NjbsyLeZGQkJExH+bDJCaxABbAglgQC2Nh9OixGBbD4ngTlsASWBJLYikshaWxDJbBclgOy2N5rIAVsCJWxEpYCatgFbwL78K7sTpWxxpYA2tiTayFtbA21sY6WAfrYl2sh/WwPtbHBtgAG2EjbIJNsCk2xWbYDFtgC2yJLbEVtsLW2BrbYBtsi22xHbbD9tgeO2AH7IidsBO+gC/gi/gidsNKqgf2xJ7YC3thH+yLffFl7I+v4Cv4Kg7EQTgYX8PX8HUcimdxGA7HETgCy6tROBrHIKtxOB7H4wScgBNxIk7CyTgZp+I0nI4zcAbOxFk4C9/DOfg+vo/zcB4uwIW4EBfhYlyCS3ApnsNluBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34MX6MO3AH7sJduAf34Cf4CX6Kn+JAPIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfwJJ7C03gKz+AZPIvn8Dyexwt4AS/iRbyEl1K/+VUqo4xKp9KpFJWiMqqMKpPKpDKrzCqhEiqryqqyqWwqu8qucqqcKrfKrfKqvIoUKVaxyqfyqaRKqgKqgCqoCqrCqrDyyqtiqpgqroqrEqqEKqluUaXUraq0KqOa+3KqnCqvWvgK6g5VUVVUlVRlVUVVVVVVNVVNVVfVVQ1VQ9VUNVUtdb+qrXpgH3xQpVamnhqE9dVgbKAaqkaqsXodH1VN1VBsppqrFupxNRyHYSvV1LdWT6k2ajS2Vc+oMfisaq/GYQf1vOqoOqnO6gXVRTXzXVU3NQl7qJ5qKvZSvVUf1VfNxMoqtWJV1KtqoBqkBqvX1AJ8XQ1Vb6hhargaod5UI9UoNVqNUWPVODVevaUmqLfVRPWOmqQmqylqqpqmpqsZqR+tapaard5Tc9T7aq6ap+arBWqh+kAtUovVEvWhWqo+UsvUcrVCrVSr1Gq1Rq1V69R6tUFtVJsiUFvUVrVNfay2qx1qp9qldqs9aq/6RO1Tn6r96jN1QH2uDqo/qUPqC3VYfamOqK/UUfW1Oqa+UcfVt+qE+k6dVKfUafW9OqN+UGfVOXVe/aguqJ/URfWzuqSCAo1aaa2NjnQ6nV6n6Aw6o75KZ9JX68w6i07oa3RWfa3Opq/T2XUOnVPn0rl1Hp1XW03aadaxzqfz66S+XhfQN+iCupAurItor4vqYvpGXVzfpEvom3VJfYsupW/VpXUZXVaX07fp8vp2XUHfoSvqO3UlXVlX0VX1XbqavltX1/foGvpeXVPfp2vp+3Vt/YCuox/UdfVDup5+WNfXj+gGuqFupBvrJvpR3VQ/ppvp5rqFfly31E/oVvpJ3Vo/pdvop3Vb/Yxup5/V7fVzuoN+XnfUnXRn/bO+pIPuqrvp7rqH7qlf0r10b91H99X99Mu6v35FD9Cv6oF6kB6sX9ND9Ot6qH5DD9PD9Qj9ph6pR+nReoweq8fp8fotPUG/rSfqd/QkPVlP0VP1ND1d9/nzSLP/jvy3/0b+gF+OvlVv0x/r7XqH3ql36d16j96r9+p9ep/er/frA/qAPqgP6kP6kD6sD+sj+og+qo/qY/qYPq6P6xP6hD6pT+kf9ff6jP5Bn9Xn9Dn9o76gL+iLf34PwKBRRhtjIpPOpDcpJoPJaK4ymczVJrPJYhLmGpPVXGuymetMdpPD5DS5TG6Tx+Q11pBxhk1s8pn8JmmuNwXMDaagKWQKmyLGm6KmmLnxn87/o/k1MU1MU9PUNDPNTAvTwrQ0LU0r08q0Nq1NG9PGtDVtTTvTzrQ37U0H08F0NB1NZ9PZdDFdTACA7qa76WleMr1Mb9PH9DX9zMumv+lvBpgBZqAZaAabwWaIGWKGmqFmmBlmRpgRZqQZaUab0WasGWvGm/FmgplgJpqJZpKZZKaYKWaamWZmmBlmpplpZpvZZo6ZY+aauWa+mW8WmoVmkVlklpglZqlZapaZ5Wa5WWlWmtVmtVlr1pr1Zr3ZaDaazWazWWZ++wHNnWan2W12m71mr9ln9pn9Zr85YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmJPmpDltTpsz5ow5a86a8+a8uWAumIvmorlkLqVe9kUqUpGJTJQuShelRClRxihjlCnKFGWOMkeJKBFljbJG2aLrouxRjihnlCvKHeWJ8kY2oshFHMVRvih/lIyujwpEN0QFo0JR4ahI5KOiUbHoxqh4dFNUIro5KhndEpWKbo1KR2WislG56LaofHR7VCG6I6oY3RlViipHVaKq0V1RtejuqHp0T1QjujeqGd0X1Yruj2pHD0R1ogejutFDUb3o4ah+9EjUIGoYNYoaR03+peOHcDbHY76r7Wa72x62p33J9rK9bR/b1/azL9v+9hU7wL5qB9pBdrB9zQ6xr9uh9g07zA63I+ybdqQdZUfbMXasHWfH27fsBPu2nWjfsZPsZDvFTrXT7HQ7w75rZ9pZdrZ9z86x79u5dp6dbxfYhfYDu8gutkvsh3ap/cgus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVbrMf2+12h91pd9nddo/daz+x++yndr/9zB6wn9uD9k/2kP3CHrZf2iP2K3vUfm2P2W/scfutPWG/syftKXvafm/P2B/sWXvOnrc/2gv2J3vR/mwv2ZB6cZ96eidDhtJROkqhFMpIGSkTZaLMlJkSlKCslJWyUTbKTtkpJ+Wk3JSb8lJeSsXElI/yUZKSVIAKUEEqSIWpMHnyVIyKUXEqTiWoBJWkklSKSlFpKk1lKfWkeRvdTrfTHXQH3Ul3UmWqTFWpKlWjalSdqlMNqkE1qSbVolpUm2pTHapDdaku1aN6VJ/qUwNqQI2oETWhJtSUmlIzakYtqAW1pJbUilpRa2pNbagNtaW21I7aUXtqTx2oA3WkjtSZOlMX6kJdqSt1p+7Uk3pSL+pFfagP9aN+1J/60wAaQANpIA2mwTSEhtBQGkrDaDiNoDdpJI2i0TSGxtI4Gk/jaQJNoIk0kSbRJJpCU2gaTaMZNINm0kyaTbNpDs2huTSX5tN8WkgLaREtoiW0hJbSUlpGy2gFraBVtIrW0BpaR+toA22gTbSJttAW2kbbaDttp520k3bTbtpLe2kf7aP9tJ8O0AE6SAfpEB2iw3SYjtAROkpH6Rgdo+N0nE7QCTpJJ/E0naYzdIbO0lk6T+fpAv1EF+lnukSBUlwGl9Fd5TK5q11ml8WluAzdAOA/4pwul8vt8ri8zrrsLsdfxeScK+gKucKuiPOuqCvmbvxdXLpHGVfWlXO3ufLudlfBlXZ/HVdzd7vq7h5Xw93rqrq7/iqu6e5ztdzDrrZ7xNVxDV1d19jVcw+7+u4R18A1dI1cY9fSPeFauSdda/eUa+Oe/l28yC1269x6t8FtdPvcp+68+9Edc9+4C+4n19V1c/3cy66/e8UNcK+6gW7Q7+IR7k030o1yo90YN9aN+108xU1109x0N8O962a6Wb+LF7oP3By3xM1189x8t+CXOHVOS9yHbqn7yC1zy90Kt9KtcqvdGrf2P+a60m12W9xWt9d94ra7HW6n2+V2uz2/xKnr2O8+cwfc5+6o+9odcl+4w+64O+K++iVOXd9x96074b5zJ90pd9p97864H9xZd+6X9aeu/Xv3s7vkggNGVqzZcMTpOD2ncAbOyFdxJr6aM3MWTvA1nJWv5Wx8HWfnHJyTc3FuzsN52TKxY+aY83F+TvL1XIBv4IJciAtzEfZclIvxjVycb+ISfDOX5Fu4FN/KpbkMl+VyfBuX59u5At/BFflOrsSVuQpX5bu4Gt/N1fkersH3ck2+j2vx/VybH+A6/CDX5Ye4Hj/M9fkRbsANuRE35ib8KDflx7gZN+cW/Di35Ce4FT/JrfkpbsNPc1t+htvxs9yen+MO/Dx35E7cmV/gLvwid+Vu3J17cE9+iXtxb+7Dfbkfv8z9+RUewK/yQB7Eg/k1HsKv81B+g4fxcB7Bb/JIHsWjeQyP5XE8nt/iCfw2T+R3eBJP5ik8lafxdJ7B7/JMnsWz+T2ew+/zXJ7H83kBL+QPeBEv5iX8IS/lj3gZL+cVvJJX8Wpew2t5Ha/nDbyRN/Fm3sJbeRt/zNt5B+/kXbyb9/Be/oT38ae8nz/jA/w5H+Q/8SH+gg/zl3yEv+Kj/DUf42/4OH/LJ/g7Psmn+DR/z2f4Bz7L5/g8/8gX+Ce+yD/zJQ4MMcYq1rGJozhdnD5OiTPEGeOr4kzx1XHmOEuciK+Js8bXxtni6+LscY44Z5wrzh3nifPGNqbYxRzHcb44f5yMr48LxDfEBeNCceG4SOzjonGx+Ma4eHxTXCK+OS4Z3xKXim+NS8dl4rJxufi2uHx8e1whviOuGN8ZV4orx1XiqvFdcbX47rh6fE9cI743LhHfF9eK749rxw/EdeIH47rxQ3G9+OG4fvxI3CBuGDeKG8dN4kfjpvFjcbO4edwifjxuGT8Rt4qfjFvHT8Vt4qf/sL973CPuGb8UvxSHcI+en1yQXJj8ILkouTi5JPlhcmnyo+Sy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObkluTWZAhV04NHr7z2xkc+nU/vU3wGn9Ff5TP5q31mn8Un/DU+q7/WZ/PX+ew+h8/pc/ncPo/P660n7zz72Ofz+X3SX+8L+Bt8QV/IF/ZFvPdFfTHf2DfxTXxT/5hv5pv7Fv5x/7h/wj/hn/RP+qd8G/+0b+uf8e38s769f84/55/3HX0n39m/4Lv4F31X38139919T9/T9/K9fB/fx/fz/Xx/398P8AP8QD/QD/aD/RA/xA/1Q/0wP8yP8CP8SD/Sj/aj/Vg/1o/34/0EP8FP9BP9JD/JT/FT/DQ/zc/wM/xMP9PP9rP9HD/Hz/Vz/Xw/3y/0C/0iv8gv8Uv8Ur/UL/PL/Aq/wq/yq/wav8av8+v8Br/Bb/Kb/Ba/xW/z2/x2v93v9Dv9br/b7/V7/T6/z+/3+/0Bf8Af9Af9IX/IH/Zf+iP+K3/Uf+2P+W/8cf+tP+G/8yf9KX/af+/P+B/8WX/On/c/+gv+J3/R/+wv+eDHJ95KTEi8nZiYeCcxKTE5MSUxNTEtMT0xI/FuYmZiVmJ24r3EnMT7ibmJeYn5iQWJhYkPEosSixNLEh8mliY+SixLLE+sSKxMrEqsToSQZ3sc8oX8IRmuDwXCDaFgKBQKhyLBh6KhWLgxFA83hRLh5lAy3BJKhVtD6VAmlA2PhAahYWgUGocm4dHQNDwWmoXmoUV4PLQMT4RW4cnQOjwV2oSnQ9vwTGgXng3tw3OhQ3g+dAydQufwQugSXgxdQ7fQPfQIPcNLoVfoHfqEvqFfeDn0D6+EAeHVMDAMCoPDa2FIeD0MDW+EYWF4GBHeDCPDqDA6jAljw7gwPrwVJoS3w8TwTpgUJocpYWqYFqaHGeHdMDPMCrPDe2FOeD/MDfPC/LAgLAwfhEVhcVgSPgxLw0dhWVgeVoSVYVVYHdaEtWFdWB82hI1hU9gctoStYVv4OGwPO8LOsCvsDnvC3vBJ2Bc+DfvDZ+FA+DwcDH8Kh8IX4XD4MhwJX4Wj4etwLHwTjodvw4nwXTgZToXT4ftwJvwQzoZz4Xz4MVwIP4WL4edwSX5nTQghhBDi76L/oL/Hf5Gj/tzuCQBX78h15D/3b8r+a7t3+twtEwDwVLcOD/62VarUvXv3P++7TEOUfx4AJC7np4PL8XJoAU9Aa2gOxf+jP+UvjtVbdbrA/934AFHyFoCMf5GTmv9bfHn8m/7m+nurUXP+2/E1RMl5AAXzX87JAJfjy+OX+C/Gz9H0D8bP8MV4gGZ/kZMJLseXxy8Gj8HT0Pqv9hRCCCGEEEIIIX7VW5Vt90f3t6n357nN5Zz0cDn+W/fnQgghhBBCCCGE+N/l2U6dn3y0devm7aTxP9UIWX59q/+3zEca0vg7Glf6k0kIIYQQQgjxr3b5ov9Kz0QIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhEi7/l/8ObHfjvVH/2tQCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGE+Hf1fwIAAP//drU5SA==")
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x101002, 0x0)
fchmod(r5, 0x10)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000100)={@local, <r6=>0x0}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xee9ff1c29565e19f}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=@bridge_getlink={0x44, 0x12, 0x1, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, r6, 0x10, 0x10427}, [@IFLA_NUM_TX_QUEUES={0x8}, @IFLA_PHYS_PORT_ID={0x7, 0x22, 'b]b'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20040804)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

2m17.345804307s ago: executing program 5 (id=982):
open(0x0, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24)

2m16.861077151s ago: executing program 5 (id=985):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
keyctl$join(0x1, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @multicast1}, &(0x7f00000001c0)=0xc)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r3, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r4, r3, 0x0, 0x100000000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/114, 0x72)

2m1.669457335s ago: executing program 33 (id=985):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
keyctl$join(0x1, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @multicast1}, &(0x7f00000001c0)=0xc)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r3, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r4, r3, 0x0, 0x100000000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/114, 0x72)

1m28.146074323s ago: executing program 4 (id=1059):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x100000, @mcast1, 0x5a}, 0x1c)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc)
r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000100)={[{@shortname_mixed}, {@utf8}, {@fat=@fmask={'fmask', 0x3d, 0x36}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0xba5}}, {@shortname_lower}, {@uni_xlateno}, {@utf8}, {@fat=@check_strict}, {@utf8no}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7}}, {@rodir}, {@fat=@flush}, {@fat=@nfs_nostale_ro}, {@rodir}, {}]}, 0x6, 0x2b8, &(0x7f0000000640)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open_by_handle_at(r2, &(0x7f0000000240)=@reiserfs_2={0x8, 0x72}, 0x0)
keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
r3 = gettid()
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x2, 0x4, @tid=r3}, &(0x7f0000000140)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
rt_sigtimedwait(&(0x7f0000000180)={[0x2]}, 0x0, 0x0, 0x8)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000002c0)={0x0, 0x100, 0x0, 0x0, 0x6})
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
r7 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r7, &(0x7f0000001440)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x18}}], 0x1, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

1m25.348381509s ago: executing program 4 (id=1062):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000))

1m24.628746098s ago: executing program 4 (id=1066):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
close(r1)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000017c0)={{r2}, &(0x7f0000001740), &(0x7f0000001780)='%pI4   \x00'}, 0x20)

1m18.206993763s ago: executing program 4 (id=1068):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@bridge_delneigh={0x1a, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20, 0x52}}, 0x1c}}, 0x90)

1m17.689381061s ago: executing program 4 (id=1070):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)

1m16.737673672s ago: executing program 4 (id=1073):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8341)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
read$msr(r0, &(0x7f0000019680)=""/102360, 0x18fd8)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522)
ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401)

1m2.794999109s ago: executing program 6 (id=999):
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x4ed, &(0x7f0000000540)="$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")
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x44000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380), 0x0)
sendmmsg(r3, &(0x7f0000000080), 0x10, 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
msgget$private(0x0, 0x730)

1m0.79717839s ago: executing program 34 (id=1073):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8341)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
read$msr(r0, &(0x7f0000019680)=""/102360, 0x18fd8)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522)
ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401)

58.673157428s ago: executing program 6 (id=1104):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000098"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

58.180698582s ago: executing program 6 (id=1106):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

56.425292509s ago: executing program 6 (id=1110):
r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000001c0)=0x51)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000000", 0x6}], 0x1, 0x0, 0x0)

50.812190748s ago: executing program 6 (id=1113):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
umount2(&(0x7f0000000040)='.\x00', 0x2)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fb91a00}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
keyctl$setperm(0x5, 0x0, 0x150b2a2f)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="f595e2c7091b2ad686c18bcda63b3389ee86577c82c1422162f4640eac4c8a74a525cf", 0x23)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

32.056216461s ago: executing program 35 (id=1113):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
umount2(&(0x7f0000000040)='.\x00', 0x2)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fb91a00}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
keyctl$setperm(0x5, 0x0, 0x150b2a2f)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="f595e2c7091b2ad686c18bcda63b3389ee86577c82c1422162f4640eac4c8a74a525cf", 0x23)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

21.452058759s ago: executing program 1 (id=1151):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x40}, 0x1, 0x7}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

20.384553996s ago: executing program 1 (id=1153):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1}})

19.229523734s ago: executing program 1 (id=1155):
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008002, &(0x7f0000000d40)={[{@grpquota}, {@delalloc}, {@resuid}, {}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@nomblk_io_submit}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080))
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0)
connect$vsock_stream(r3, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x4)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000240)=@v1={0x0, @aes128, 0x0, @desc2})
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x4)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000016c0)=@v2={0x2, @aes256, 0x2, '\x00', @c})

18.740822511s ago: executing program 7 (id=1102):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x4, 0x9, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x40000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17.883500528s ago: executing program 3 (id=1158):
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
ioctl$sock_bt_hci(r0, 0x400448ca, 0x0)

17.461694522s ago: executing program 7 (id=1159):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x173)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1, &(0x7f00000000c0)=ANY=[], 0x1e, 0x1b3, &(0x7f00000007c0)="$eJzKKC4sZmBgYPj7sSaZwYEBDNgY+BhuMzIysDAggBs7hH7FBqH1oPwXUEWaUPFFUPo/FBRXVmUn5uSkFtGQgV2OCepyUkwEqUeXuvIxlp9UcwYbg4MBjxpGMgIKJ+M/kYo5McJ5yDPimSHhSB0Dvwy0d4pYBkWoEs9gxJRCcO0bmRjeglP69Y81ySBGArSUAomlQDAjshpQbB5BUiPFAsaMzAz/4WpAhR+Io87AwKBfklugX1xZpZuZm5iemp6aZ2RkbGZgYmBgaqSflpmTagAhGZGsgBVRIBpU9oLKVE4keVYGBoZ70AKWC6kwZngJsRbmNKg8I7JeUDn8H1pIaygzoAAmhv/8YL0cCDMYGQ7A9UK1MYCCIIRBDaSMobyBEUlUBWwKCwPYSx4MjAzMUI4hrNJghNvFAZbQS87PSWlnYGRghGlbzsACN8PwMQMrmMOGcCNExtiiASbUDqVVoLQHlF4OpR9DaXlG1LqIBWzCEyhPowHkxIrEkpIiQ7bzUC2GoFoPLGbEBpM1EoDbzAK19RMbqudk2BlGwSgYBaNgFIyCUTAKhhgABAAA//+nmVjW")
inotify_init1(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1000, 0x0, 0x3, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
getpid()
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0xfffffffffffffffd)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000ff01000004000000fb01000000440000", @ANYRES32=r2, @ANYBLOB="5d07000000000080000000db000000000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0000000000000000020000"], 0x50)
bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r4, 0x0, 0x20000000}, 0x20)
r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$update(0x2, r5, 0x0, 0x0)
socket(0x1, 0x5, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x4)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

17.330075542s ago: executing program 0 (id=1160):
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x7b)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setpriority(0x2, 0x0, 0x80)

9.881622444s ago: executing program 7 (id=1161):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000006"], 0x0, 0x26, 0x0, 0xb, 0x0, 0x0, @void, @value}, 0x28)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000", 0x36}], 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc)

9.185501594s ago: executing program 0 (id=1162):
r0 = syz_io_uring_setup(0xec8, &(0x7f0000000c00)={0x0, 0xfffffffc, 0x2, 0x0, 0x2f1}, &(0x7f0000000500)=<r1=>0x0, &(0x7f0000000600))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffffa, 0x0, 0x4)
io_uring_enter(r0, 0xd8c, 0x6fba, 0x3, &(0x7f0000000080)={[0xfffffffffffffbff]}, 0x8)

8.941659449s ago: executing program 3 (id=1163):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = semget$private(0x0, 0x207, 0x0)
semctl$GETALL(r1, 0x0, 0xd, 0x0)

8.516636148s ago: executing program 3 (id=1164):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./file1\x00', 0x8010, &(0x7f0000000180)={[{@utf8}, {@shortname_winnt}, {@numtail}]}, 0xfe, 0x2b6, &(0x7f0000000580)="$eJzs3U9rY1UUAPDz8q/RLpKFKxF8i1m4sUxm68IMUkHsSsnCP6CDMwNDEwYaCIyKcVZ+Ahcu/B7u3Atu/AaCH8CF4CADV17ea9I2bdpU00r9/Ta5nHvOu+fmvbard/vpK6P9+4/HD59++Wu021nU+tGPZ1l0oxaHvg4A4CZ5llL8nkrrVTZqm+oJANisI3//m2ekbC2H3tx0WwDABr3/wYfv3t3b230vz9sRo28mgyzKz3L+7sN4FMN4ELejE88j0lw5fvudvd1o5IVu3BpNJ/UYRIw++XmRGrP6XnSie3p9Ly/N6gfFysVnM16MyLKIR/2ikTvRiZeW6ov53Tun1MegFa+1q00W6+9EJ375LB7HMO5HUbtY/6tenr+Vvv3zi4+K5KI+m04GW7O8hVS/6nsDAAAAAAAAAAAAAAAAAAAAAMDNtZPPdePWqAhV5+/Un8/md47Nz87Xqc3my/osojUbnDgfaJri+8PzdW7neZ6yMn9xvk8jXm5E49o2DgAAAAAAAAAAAAAAAAAAAP8h4yef798bDh8c/CuD6iX/+Wv9l71O/0jk1VidvLXWWlGv0oteT+b0fvp4NI8Um7hM85NmHrGq5+ZS5IWin/Ov/FdKKWVZxOo2/lja1/FB8yJrnTPYXp1TfME/frf9+v697LzvsH144344OtWKg/GTE/c0snU6TGs9fq0VOa3qibnQdbb/4Q/RG7+Vi1WRbI1dNKtBnPX4tdd6nq/udxAAAAAAAAAAAAAAAAAAAFBavPR7LNyKiHY8XVla23BrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBlFv//f43BtCo+PSelNJ1HWnEwvuYtAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D/wdwAAAP//KNZm6Q==")
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x5)

7.969616378s ago: executing program 3 (id=1165):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x24020400)
setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000)=0xffffff7f, 0x4)

7.496912696s ago: executing program 1 (id=1166):
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008001)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40086610, 0x0)
setpgid(0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', 0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7)

7.286835471s ago: executing program 3 (id=1167):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000940)='./bus\x00', 0x8, &(0x7f00000004c0)={[{@autodefrag}, {@acl}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@ssd}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@ssd}, {@noenospc_debug}, {@barrier}, {@nodiscard}, {@acl}]}, 0x1, 0x55a4, &(0x7f000000ac40)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
write$char_usb(r0, &(0x7f0000009f00)="ab137c", 0x3)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
sendfile(r0, r0, 0x0, 0x1000200201005)

6.713453967s ago: executing program 1 (id=1168):
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000cc0)={{}, "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"})
syz_open_procfs(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff, 0x0, '\x00\x00@\x00'})
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x12)

6.003793739s ago: executing program 0 (id=1169):
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @none}}}, 0xe)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0)

3.98115277s ago: executing program 0 (id=1170):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_loaded', 0x880, 0x0)
fstat(r0, &(0x7f0000004b40))

3.925416783s ago: executing program 1 (id=1171):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file1\x00', 0x41c, &(0x7f00000001c0)=ANY=[], 0x1, 0xa75, &(0x7f0000000ac0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0)

3.273445678s ago: executing program 0 (id=1172):
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
ioctl$sock_bt_hci(r0, 0x400448ca, 0x0)

2.547764444s ago: executing program 3 (id=1173):
socket(0x10, 0x803, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff)
r0 = open(0x0, 0x1c1042, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x880, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, 0x0)
ioctl$VIDIOC_S_CROP(r1, 0x4014563c, 0x0)
set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2)
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000100)={[{@acl}, {@direct_io}, {@norecovery}, {@shared_inode_numbers}, {@journal_flush_disabled}, {@norecovery}, {@nocow}, {@btree_node_mem_ptr_optimization}, {@no_data_io}]}, 0x1, 0x5906, &(0x7f0000010b40)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xa0)

0s ago: executing program 0 (id=1174):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r2, @ANYBLOB="ea02000000000000280012800b00010062726964676500001800028005001900800000000c0021000000000000000000111dfe3e5fe6"], 0x48}}, 0x0)

kernel console output (not intermixed with test programs):

lem.
[  294.791367][ T6579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.050189][ T6696] loop1: detected capacity change from 0 to 512
[  295.103317][ T6696] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  295.186657][ T6696] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[  295.207961][ T6696] System zones: 1-12
[  295.276451][ T6696] EXT4-fs (loop1): 1 truncate cleaned up
[  295.284413][ T6696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.426805][ T6579] hsr_slave_0: entered promiscuous mode
[  295.523960][ T6696] syz.1.198 (pid 6696) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  295.532791][ T6579] hsr_slave_1: entered promiscuous mode
[  295.584043][ T5879] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  295.608073][ T6579] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  295.616243][ T6579] Cannot create hsr debugfs directory
[  295.716964][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'.
[  295.773420][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'.
[  295.897677][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.943319][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  295.953940][ T5879] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  295.963279][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  296.394859][ T5879] usb 5-1: New USB device found, idVendor=0086, idProduct=0b5b, bcdDevice=e1.c5
[  296.404344][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.419416][ T5879] usb 5-1: Product: syz
[  296.426191][ T5879] usb 5-1: Manufacturer: syz
[  296.431637][ T5879] usb 5-1: SerialNumber: syz
[  296.526095][ T5879] usb 5-1: config 0 descriptor??
[  296.785658][ T5879] usb 5-1: USB disconnect, device number 4
[  296.862729][ T6713] binder: binder_mmap: 6712 20001000-20005000 bad vm_flags failed -1
[  297.195765][ T6579] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  297.266283][ T6579] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  297.426921][ T6579] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  297.629062][ T6579] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  297.790961][ T5850] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  297.999075][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.010538][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.020930][ T5850] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  298.030291][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.193317][ T5850] usb 2-1: config 0 descriptor??
[  298.609955][ T6579] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.850713][ T6579] 8021q: adding VLAN 0 to HW filter on device team0
[  298.963390][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.971164][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.983349][ T5850] lg-g15 0003:046D:C222.0004: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0
[  299.121474][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.129241][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.147709][ T5850] usb 2-1: USB disconnect, device number 5
[  299.525510][ T6740] loop0: detected capacity change from 0 to 512
[  300.480868][ T6579] 8021q: adding VLAN 0 to HW filter on device batadv0
[  302.643156][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'.
[  302.837923][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.225'.
[  303.700498][ T6579] veth0_vlan: entered promiscuous mode
[  303.754310][ T6579] veth1_vlan: entered promiscuous mode
[  303.934606][ T6579] veth0_macvtap: entered promiscuous mode
[  303.961808][ T6579] veth1_macvtap: entered promiscuous mode
[  304.022340][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.033585][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.043826][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.054588][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.064724][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.075494][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.085665][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.103190][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.120273][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.141775][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.153265][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.163521][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.176418][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.186959][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.204308][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.217177][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.227936][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.242872][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_1
[  304.262839][ T6579] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.272036][ T6579] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.281213][ T6579] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.290264][ T6579] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.388348][ T5856] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  304.921017][ T5856] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  304.930483][ T5856] usb 5-1: config 1 has no interface number 1
[  304.937034][ T5856] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  304.950321][ T5856] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7
[  305.110192][ T5856] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  305.120867][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.129142][ T5856] usb 5-1: Product: syz
[  305.134200][ T5856] usb 5-1: Manufacturer: syz
[  305.139076][ T5856] usb 5-1: SerialNumber: syz
[  305.295749][ T6793] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  306.176314][ T5856] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  306.461821][ T5856] usb 5-1: USB disconnect, device number 5
[  306.551423][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'.
[  306.626234][ T6834] netlink: 'syz.3.235': attribute type 2 has an invalid length.
[  306.936572][   T29] audit: type=1326 audit(1731471632.760:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.4.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c1f7e719 code=0x7ffc0000
[  307.087073][ T6225] udevd[6225]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  307.758920][ T6850] loop3: detected capacity change from 0 to 16
[  307.833550][ T6850] erofs: (device loop3): mounted with root inode @ nid 36.
[  307.868003][ T6850] erofs: (device loop3): z_erofs_readahead: readahead error at folio 12 @ nid 36
[  307.878959][ T6850] erofs: (device loop3): z_erofs_readahead: readahead error at folio 8 @ nid 36
[  307.892883][ T6850] syz.3.240: attempt to access beyond end of device
[  307.892883][ T6850] loop3: rw=524288, sector=296, nr_sectors = 16 limit=16
[  307.908233][ T6850] syz.3.240: attempt to access beyond end of device
[  307.908233][ T6850] loop3: rw=524288, sector=304, nr_sectors = 16 limit=16
[  307.923593][ T6850] syz.3.240: attempt to access beyond end of device
[  307.923593][ T6850] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  307.939313][ T6850] syz.3.240: attempt to access beyond end of device
[  307.939313][ T6850] loop3: rw=524288, sector=1049272, nr_sectors = 16 limit=16
[  307.954877][ T6850] syz.3.240: attempt to access beyond end of device
[  307.954877][ T6850] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16
[  307.969472][ T6850] syz.3.240: attempt to access beyond end of device
[  307.969472][ T6850] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16
[  307.984617][ T6850] syz.3.240: attempt to access beyond end of device
[  307.984617][ T6850] loop3: rw=524288, sector=376, nr_sectors = 16 limit=16
[  308.060347][ T6850] syz.3.240: attempt to access beyond end of device
[  308.060347][ T6850] loop3: rw=0, sector=8, nr_sectors = 16 limit=16
[  308.074292][ T6850] erofs: (device loop3): z_erofs_read_folio: read error -5 @ 8200 of nid 36
[  309.001721][ T6864] loop0: detected capacity change from 0 to 1024
[  309.051657][ T6864] EXT4-fs: Ignoring removed i_version option
[  309.324116][ T6864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.722287][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'.
[  309.739678][ T6881] netlink: 'syz.3.246': attribute type 2 has an invalid length.
[  309.881108][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.253075][ T6888] loop1: detected capacity change from 0 to 512
[  310.386071][   T29] audit: type=1326 audit(1731471636.200:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906cb7e719 code=0x7ffc0000
[  310.959652][ T6888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.974976][ T6888] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  311.602754][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.844953][ T3917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.856339][ T3917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.113928][ T6917] loop3: detected capacity change from 0 to 512
[  312.290844][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.299046][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.352344][ T6917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  312.365815][ T6917] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  313.000138][ T6930] loop5: detected capacity change from 0 to 8
[  313.173076][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.339196][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'.
[  313.349271][ T6933] netlink: 'syz.1.259': attribute type 2 has an invalid length.
[  313.582338][ T6936] netlink: 'syz.3.260': attribute type 4 has an invalid length.
[  313.929297][ T6936] netlink: 'syz.3.260': attribute type 4 has an invalid length.
[  314.013171][   T29] audit: type=1326 audit(1731471639.790:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c1f7e719 code=0x7ffc0000
[  314.037304][   T29] audit: type=1326 audit(1731471639.790:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c1f7e719 code=0x7ffc0000
[  314.658382][ T6946] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2037023801 (65184761632 ns) > initial count (20561400768 ns). Using initial count to start timer.
[  314.703925][ T6952] loop3: detected capacity change from 0 to 256
[  314.717684][ T6951] loop1: detected capacity change from 0 to 512
[  314.975330][ T6951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.988752][ T6951] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  315.542960][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.194283][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'.
[  316.209208][ T6976] netlink: 'syz.0.273': attribute type 2 has an invalid length.
[  316.326631][   T29] audit: type=1326 audit(1731471642.070:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6978 comm="syz.5.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  316.412332][ T6971] loop1: detected capacity change from 0 to 512
[  316.656672][ T6980] loop3: detected capacity change from 0 to 512
[  316.666279][ T6980] EXT4-fs: Ignoring removed oldalloc option
[  316.704362][ T6980] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  316.813651][ T6980] EXT4-fs (loop3): 1 truncate cleaned up
[  316.822955][ T6980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.844648][ T6971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.857874][ T6971] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  316.946295][ T6991] netlink: 'syz.4.275': attribute type 4 has an invalid length.
[  316.989051][ T6991] netlink: 'syz.4.275': attribute type 4 has an invalid length.
[  316.991843][ T6980] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.272: corrupted in-inode xattr: overlapping e_value 
[  317.131690][ T6980] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1772: inode #15: comm syz.3.272: unable to update i_inline_off
[  317.144883][ T6980] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  317.579715][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.671424][ T7000] loop4: detected capacity change from 0 to 512
[  317.790058][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.846050][ T7006] loop3: detected capacity change from 0 to 512
[  317.921810][ T7000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  317.935240][ T7000] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  318.147303][ T7006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  318.161821][ T7006] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  318.648453][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.679268][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.993851][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'.
[  319.028999][ T7021] netlink: 'syz.4.288': attribute type 2 has an invalid length.
[  319.283799][ T7027] loop1: detected capacity change from 0 to 256
[  319.409983][ T7027] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  319.512682][   T29] audit: type=1326 audit(1731471645.330:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  320.340383][ T7043] loop4: detected capacity change from 0 to 512
[  320.473020][ T7038] loop1: detected capacity change from 0 to 512
[  320.497279][ T7048] loop5: detected capacity change from 0 to 512
[  320.890443][ T7056] loop0: detected capacity change from 0 to 512
[  320.899563][ T7056] ext4: Unknown parameter 'smackfshat'
[  320.940839][ T7056] loop0: detected capacity change from 0 to 512
[  320.948957][ T7056] EXT4-fs: Ignoring removed mblk_io_submit option
[  320.956354][ T7056] ext4: Unknown parameter 'mask'
[  321.332886][ T7043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  321.346199][ T7043] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  321.423716][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'.
[  321.433177][ T7066] netlink: 'syz.3.301': attribute type 2 has an invalid length.
[  321.482279][ T7048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  321.495612][ T7048] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  321.661688][ T6579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.762476][ T7038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  321.778251][ T7038] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  321.821318][   T29] audit: type=1800 audit(1731471647.590:15): pid=7043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.297" name="bus" dev="loop4" ino=18 res=0 errno=0
[  322.324798][   T29] audit: type=1326 audit(1731471648.150:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  322.363697][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.450572][   T29] audit: type=1326 audit(1731471648.190:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  322.629643][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.761792][ T7086] syzkaller0: entered promiscuous mode
[  322.767542][ T7086] syzkaller0: entered allmulticast mode
[  323.181989][ T7090] netlink: 'syz.5.308': attribute type 1 has an invalid length.
[  323.932727][ T5856] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  323.949718][ T7102] loop3: detected capacity change from 0 to 1024
[  324.144189][ T5856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  324.155317][ T5856] usb 2-1: config 0 has no interfaces?
[  324.227983][ T7101] hfsplus: invalid extended attribute record
[  324.237265][ T5856] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  324.247180][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.255719][ T5856] usb 2-1: Product: syz
[  324.260127][ T5856] usb 2-1: Manufacturer: syz
[  324.266653][ T5856] usb 2-1: SerialNumber: syz
[  324.389959][ T5856] usb 2-1: config 0 descriptor??
[  324.656817][ T5856] usb 2-1: USB disconnect, device number 6
[  324.761682][ T7110] netlink: 'syz.5.314': attribute type 2 has an invalid length.
[  325.455325][ T7121] loop5: detected capacity change from 0 to 512
[  325.791165][ T7121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  325.811253][ T7121] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  326.913466][ T6579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.115737][ T7151] netlink: 'syz.3.326': attribute type 2 has an invalid length.
[  328.667381][ T7162] loop5: detected capacity change from 0 to 512
[  329.144807][ T7162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  329.158257][ T7162] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  329.528686][ T7170] loop1: detected capacity change from 0 to 1024
[  329.921337][   T29] audit: type=1800 audit(1731471655.720:18): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.330" name="file1" dev="loop5" ino=15 res=0 errno=0
[  330.181141][   T29] audit: type=1800 audit(1731471655.770:19): pid=7178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.330" name="file2" dev="loop5" ino=16 res=0 errno=0
[  330.252246][ T7170] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  330.340448][ T7170] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  330.670950][ T6579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.724576][ T6186] hfsplus: b-tree write err: -5, ino 4
[  330.898774][ T7184] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 60902 - 0
[  330.908072][ T7184] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 60902 - 0
[  330.917540][ T7184] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 60902 - 0
[  330.928830][ T7184] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 60902 - 0
[  330.939135][ T7184] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 45782 - 0
[  330.948527][ T7184] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 45782 - 0
[  330.957794][ T7184] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 45782 - 0
[  330.967018][ T7184] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 45782 - 0
[  330.976394][ T7184] geneve2: entered promiscuous mode
[  330.981944][ T7184] geneve2: entered allmulticast mode
[  331.262549][ T7189] Zero length message leads to an empty skb
[  331.426937][ T7186] loop3: detected capacity change from 0 to 1024
[  331.442872][ T7192] netlink: 'syz.4.338': attribute type 2 has an invalid length.
[  331.631382][ T7186] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  331.799133][ T7197] loop5: detected capacity change from 0 to 2048
[  332.287753][ T7209] netlink: 'syz.4.344': attribute type 4 has an invalid length.
[  332.296874][ T7197] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  332.311579][ T7186] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  332.406897][ T7197] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  332.428669][ T7209] netlink: 'syz.4.344': attribute type 4 has an invalid length.
[  332.450331][ T7186] EXT4-fs (loop3): orphan cleanup on readonly fs
[  332.465399][ T7186] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.336: Freeing blocks not in datazone - block = 0, count = 4096
[  332.607714][ T7186] EXT4-fs (loop3): 1 orphan inode deleted
[  332.615512][ T7186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  333.112116][ T7186] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 16: comm syz.3.336: path /84/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  333.161791][ T7186] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 17: comm syz.3.336: path /84/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  333.247152][ T7186] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 18: comm syz.3.336: path /84/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  333.662020][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.787728][ T7226] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 41471 - 0
[  333.807462][ T7226] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 41471 - 0
[  333.816884][ T7226] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 41471 - 0
[  333.826221][ T7226] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 41471 - 0
[  333.836011][ T7226] netdevsim netdevsim5 netdevsim0: set [1, 2] type 2 family 0 port 46435 - 0
[  333.845289][ T7226] netdevsim netdevsim5 netdevsim1: set [1, 2] type 2 family 0 port 46435 - 0
[  333.854689][ T7226] netdevsim netdevsim5 netdevsim2: set [1, 2] type 2 family 0 port 46435 - 0
[  333.864044][ T7226] netdevsim netdevsim5 netdevsim3: set [1, 2] type 2 family 0 port 46435 - 0
[  333.873360][ T7226] geneve2: entered promiscuous mode
[  333.878777][ T7226] geneve2: entered allmulticast mode
[  334.583690][ T7237] netlink: 'syz.5.350': attribute type 2 has an invalid length.
[  335.024952][ T7239] loop3: detected capacity change from 0 to 2048
[  335.169861][ T7239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.945185][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.075915][ T7253] netlink: 'syz.4.355': attribute type 4 has an invalid length.
[  336.184596][ T7253] netlink: 'syz.4.355': attribute type 4 has an invalid length.
[  336.206774][ T5856] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  336.386736][ T5856] usb 1-1: Using ep0 maxpacket: 16
[  336.394450][ T5856] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  336.394631][ T5856] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  336.394793][ T5856] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  336.406813][ T5856] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  336.406980][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.407121][ T5856] usb 1-1: Product: syz
[  336.407229][ T5856] usb 1-1: Manufacturer: syz
[  336.407337][ T5856] usb 1-1: SerialNumber: syz
[  336.586805][ T7264] loop3: detected capacity change from 0 to 164
[  336.748684][ T7264] Unable to read rock-ridge attributes
[  337.090140][ T5856] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  337.288998][   T44] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  337.406307][ T7272] loop4: detected capacity change from 0 to 512
[  337.416818][ T7272] EXT4-fs: Ignoring removed orlov option
[  337.429678][ T7272] EXT4-fs: Mount option(s) incompatible with ext2
[  337.461551][   T44] usb 4-1: Using ep0 maxpacket: 8
[  337.502299][   T44] usb 4-1: config 0 has an invalid descriptor of length 193, skipping remainder of the config
[  337.513260][   T44] usb 4-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  337.522918][   T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.526535][ T7274] netlink: 'syz.1.363': attribute type 2 has an invalid length.
[  337.634578][   T44] usb 4-1: config 0 descriptor??
[  337.938361][ T5856] usb 1-1: 2:1: cannot get freq at ep 0x82
[  337.971609][   T44] usb 4-1: USB disconnect, device number 2
[  338.165537][ T7276] loop4: detected capacity change from 0 to 1024
[  338.399760][ T5857] usb 1-1: USB disconnect, device number 4
[  338.648000][ T7276] EXT4-fs: Ignoring removed orlov option
[  338.685028][ T7279] loop5: detected capacity change from 0 to 1024
[  338.740161][ T7276] EXT4-fs (loop4): Test dummy encryption mode enabled
[  338.763604][ T7276] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  338.874369][ T7276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.901925][ T5796] Bluetooth: hci0: command 0x0406 tx timeout
[  338.910192][ T5796] Bluetooth: hci3: command 0x0406 tx timeout
[  338.918275][ T5801] Bluetooth: hci1: command 0x0406 tx timeout
[  338.927543][ T5809] Bluetooth: hci2: command 0x0406 tx timeout
[  339.612834][ T7276] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  340.380358][ T7276] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  340.527338][ T7308] loop0: detected capacity change from 0 to 128
[  340.535175][ T7303] netlink: 'syz.3.370': attribute type 4 has an invalid length.
[  340.589389][ T7305] netlink: 'syz.3.370': attribute type 4 has an invalid length.
[  340.596409][ T7300] loop5: detected capacity change from 0 to 2048
[  340.631832][ T7300] udf: Bad value for 'bs'
[  340.818591][ T7308] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  340.882048][ T7308] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  341.039090][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.220346][ T7320] loop1: detected capacity change from 0 to 256
[  341.513753][ T7320] exfat: Deprecated parameter 'namecase'
[  341.794461][ T7320] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  341.830349][ T7326] loop3: detected capacity change from 0 to 256
[  341.972150][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  341.978889][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  342.024792][ T7308] fscrypt (loop0, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  342.039498][ T7308] fscrypt (loop0, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  342.134085][ T7331] netlink: 'syz.5.376': attribute type 2 has an invalid length.
[  342.234873][   T29] audit: type=1800 audit(1731471667.970:20): pid=7341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.373" name="file1" dev="loop1" ino=1048611 res=0 errno=0
[  342.451120][ T7320] exFAT-fs (loop1): error, tried to truncate zeroed cluster.
[  342.458856][ T7320] exFAT-fs (loop1): Filesystem has been set read-only
[  343.597070][   T29] audit: type=1326 audit(1731471669.410:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  343.769085][   T29] audit: type=1326 audit(1731471669.460:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  343.884333][   T29] audit: type=1326 audit(1731471669.630:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  343.907086][   T29] audit: type=1326 audit(1731471669.630:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  343.935656][   T29] audit: type=1326 audit(1731471669.630:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  344.084561][ T5795] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  344.430182][ T7371] netlink: 'syz.0.385': attribute type 4 has an invalid length.
[  344.558727][ T7377] loop1: detected capacity change from 0 to 256
[  344.573766][ T7377] exfat: Unknown parameter '0xffffffffffffffff"lÊ%ßug~L;Ë»åhºåêû�æþ_5mœ™ÿ%ÇÅöe
[  344.573766][ T7377] ãò(õ§±'
[  344.800071][ T7379] netlink: 'syz.0.385': attribute type 4 has an invalid length.
[  344.886418][ T7380] netlink: 'syz.4.388': attribute type 5 has an invalid length.
[  344.894730][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.388'.
[  345.513279][ T7385] loop1: detected capacity change from 0 to 2048
[  345.617315][ T7385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  345.885254][ T7385] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  346.045032][ T7385] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 64 with max blocks 33 with error 28
[  346.058346][ T7385] EXT4-fs (loop1): This should not happen!! Data will be lost
[  346.058346][ T7385] 
[  346.068479][ T7385] EXT4-fs (loop1): Total free blocks count 0
[  346.074815][ T7385] EXT4-fs (loop1): Free/Dirty block details
[  346.088743][ T7385] EXT4-fs (loop1): free_blocks=66060288
[  346.097002][ T7385] EXT4-fs (loop1): dirty_blocks=48
[  346.102574][ T7385] EXT4-fs (loop1): Block reservation details
[  346.108778][ T7385] EXT4-fs (loop1): i_reserved_data_blocks=3
[  346.658287][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.861962][ T7419] loop0: detected capacity change from 0 to 16
[  347.988008][ T7419] erofs: (device loop0): mounted with root inode @ nid 36.
[  349.422203][ T7427] netlink: 'syz.3.403': attribute type 4 has an invalid length.
[  349.566833][ T7430] netlink: 'syz.3.403': attribute type 4 has an invalid length.
[  349.627785][ T7429] loop0: detected capacity change from 0 to 1024
[  350.131809][ T7436] netlink: 'syz.4.405': attribute type 5 has an invalid length.
[  350.139705][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'.
[  350.541210][ T5850] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  350.608345][ T7429] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  350.618354][ T7429] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  350.807435][ T5850] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  350.817041][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.825521][ T5850] usb 6-1: Product: syz
[  350.829920][ T5850] usb 6-1: Manufacturer: syz
[  350.834873][ T5850] usb 6-1: SerialNumber: syz
[  350.872400][ T3917] hfsplus: b-tree write err: -5, ino 4
[  350.921421][ T7453] loop3: detected capacity change from 0 to 1024
[  350.965865][ T5850] usb 6-1: config 0 descriptor??
[  350.975153][ T7453] EXT4-fs: Ignoring removed nobh option
[  350.981978][ T7453] ext2: Unknown parameter 'nouser_xattr'
[  351.005676][ T5850] ch341 6-1:0.0: ch341-uart converter detected
[  351.232610][ T5850] usb 6-1: failed to receive control message: -121
[  351.239646][ T5850] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121
[  351.361671][ T7453] kvm: emulating exchange as write
[  351.439452][ T5850] usb 6-1: USB disconnect, device number 2
[  351.446814][ T1926] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  351.533039][ T5850] ch341 6-1:0.0: device disconnected
[  351.667815][ T1926] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  351.678619][ T1926] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  351.800425][ T1926] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  351.816671][ T1926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  351.827130][ T1926] usb 2-1: SerialNumber: syz
[  352.131348][ T7467] loop0: detected capacity change from 0 to 512
[  352.239394][ T1926] usb 2-1: 0:2 : does not exist
[  352.671154][   T44] kernel write not supported for file /239/net/softnet_stat (pid: 44 comm: kworker/1:1)
[  352.771829][ T7467] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.415: casefold flag without casefold feature
[  352.946285][ T7467] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.415: couldn't read orphan inode 15 (err -117)
[  353.063176][ T1926] usb 2-1: USB disconnect, device number 7
[  353.272980][ T7467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.106541][ T7482] netlink: 'syz.3.418': attribute type 4 has an invalid length.
[  354.424170][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  354.450124][ T7484] netlink: 'syz.3.418': attribute type 4 has an invalid length.
[  354.708804][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.331411][ T7490] netlink: 'syz.5.420': attribute type 5 has an invalid length.
[  355.339416][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.420'.
[  356.282595][ T7510] netlink: 'syz.3.429': attribute type 1 has an invalid length.
[  356.291762][   T44] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  356.504412][   T44] usb 5-1: Using ep0 maxpacket: 16
[  356.701320][ T1926] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  356.787070][   T44] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  356.796989][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.799215][ T7518] loop3: detected capacity change from 0 to 128
[  356.805406][   T44] usb 5-1: Product: syz
[  356.805519][   T44] usb 5-1: Manufacturer: syz
[  356.821129][   T44] usb 5-1: SerialNumber: syz
[  356.892769][ T7518] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  356.902778][   T44] usb 5-1: config 0 descriptor??
[  356.928745][   T44] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  356.938144][ T1926] usb 1-1: Using ep0 maxpacket: 32
[  356.940384][   T44] usb 5-1: Detected FT232H
[  356.960227][ T1926] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  356.971262][ T1926] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  356.980549][ T1926] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  356.990383][ T1926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.098648][ T7518] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  357.142252][ T1926] usb 1-1: config 0 descriptor??
[  357.158599][   T44] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  357.282586][ T7518] process 'syz.3.432' launched './file1' with NULL argv: empty string added
[  357.625547][   T44] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  358.306981][   T44] usb 5-1: USB disconnect, device number 6
[  359.325965][   T44] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  359.338217][   T44] ftdi_sio 5-1:0.0: device disconnected
[  359.578916][ T7534] netlink: 'syz.3.434': attribute type 4 has an invalid length.
[  359.770097][ T5857] usb 1-1: USB disconnect, device number 5
[  359.951356][ T7538] netlink: 'syz.3.434': attribute type 4 has an invalid length.
[  361.353975][ T7550] loop1: detected capacity change from 0 to 164
[  361.476067][ T7554] loop0: detected capacity change from 0 to 2048
[  361.697115][ T7554] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  361.752121][ T5850] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  362.031104][ T5850] usb 2-1: Using ep0 maxpacket: 16
[  362.118636][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[  362.130490][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024
[  362.142338][ T5850] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  362.161628][ T5850] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  362.172932][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.484003][ T5850] usb 2-1: config 0 descriptor??
[  363.512525][ T7559] loop3: detected capacity change from 0 to 256
[  363.573473][ T5850] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input8
[  363.733926][ T7559] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  363.762964][ T5850] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  363.879944][ T7574] netlink: 'syz.4.450': attribute type 4 has an invalid length.
[  363.901728][   T44] usb 2-1: USB disconnect, device number 8
[  364.026380][ T7574] netlink: 'syz.4.450': attribute type 4 has an invalid length.
[  366.897942][ T7642] loop1: detected capacity change from 0 to 1024
[  366.915303][ T7643] loop4: detected capacity change from 0 to 256
[  366.924698][ T7643] exfat: Deprecated parameter 'namecase'
[  368.117584][ T7642] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  368.875325][ T7642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.899470][ T7643] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  369.356034][   T29] audit: type=1804 audit(1731471695.170:26): pid=7642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.454" name="/newroot/95/file0/bus" dev="loop1" ino=18 res=1 errno=0
[  369.379615][   T29] audit: type=1804 audit(1731471695.180:27): pid=7642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.454" name="/newroot/95/file0/bus" dev="loop1" ino=18 res=1 errno=0
[  369.671653][ T7643] exFAT-fs (loop4): failed to read sector(0x100)
[  369.678399][ T7643] exFAT-fs (loop4): failed to load upcase table
[  369.687834][ T7643] exFAT-fs (loop4): failed to recognize exfat type
[  370.504354][ T7698] loop5: detected capacity change from 0 to 256
[  370.639909][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.781066][ T7706] loop3: detected capacity change from 0 to 164
[  370.888438][ T7698] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  371.171167][ T5850] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  371.332679][ T5850] usb 4-1: Using ep0 maxpacket: 16
[  371.378786][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[  371.390409][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024
[  371.402124][ T5850] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  371.415538][ T5850] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  371.425009][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.620182][ T5850] usb 4-1: config 0 descriptor??
[  372.140972][ T5850] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0006/input/input9
[  372.880484][ T7724] tap0: tun_chr_ioctl cmd 2148553947
[  373.455973][ T5850] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  373.495349][ T5850] usb 4-1: USB disconnect, device number 3
[  375.620824][ T7758] loop3: detected capacity change from 0 to 512
[  375.939028][ T7758] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002]
[  375.947999][ T7758] System zones: 1-12
[  376.103325][ T7758] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.481: corrupted in-inode xattr: invalid ea_ino
[  376.242763][ T7758] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.481: couldn't read orphan inode 15 (err -117)
[  376.508595][ T7758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.787592][ T7758] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.481: invalid indirect mapped block 234881024 (level 0)
[  377.542481][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.490891][ T7798] loop4: detected capacity change from 0 to 1024
[  378.516517][ T7798] EXT4-fs: Ignoring removed orlov option
[  378.541649][ T7798] EXT4-fs (loop4): Test dummy encryption mode enabled
[  378.578551][ T7798] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  378.725042][ T7798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  381.596745][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.374263][ T7861] netdevsim0: mtu less than device minimum
[  383.851985][ T7882] tap0: tun_chr_ioctl cmd 1074025677
[  383.857852][ T7882] tap0: linktype set to 512
[  384.592816][ T7898] netlink: 'syz.4.524': attribute type 3 has an invalid length.
[  384.600908][ T7898] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.524'.
[  384.661658][ T7897] delete_channel: no stack
[  384.696388][ T7903] netlink: 'syz.3.526': attribute type 29 has an invalid length.
[  384.749210][ T7906] netlink: 'syz.3.526': attribute type 29 has an invalid length.
[  384.802910][ T7905] netlink: 'syz.0.527': attribute type 29 has an invalid length.
[  384.826971][ T7907] netlink: 'syz.3.526': attribute type 29 has an invalid length.
[  384.874159][ T7905] netlink: 'syz.0.527': attribute type 29 has an invalid length.
[  384.893366][ T7903] netlink: 'syz.3.526': attribute type 29 has an invalid length.
[  385.020964][ T7910] netlink: 'syz.0.527': attribute type 2 has an invalid length.
[  385.028879][ T7910] netlink: 36 bytes leftover after parsing attributes in process `syz.0.527'.
[  385.843488][ T7922] netlink: 60 bytes leftover after parsing attributes in process `syz.4.531'.
[  385.855160][ T7922] bond0: entered promiscuous mode
[  385.860427][ T7922] bond_slave_0: entered promiscuous mode
[  385.867422][ T7922] bond_slave_1: entered promiscuous mode
[  385.874504][ T7922] bond0: entered allmulticast mode
[  385.879848][ T7922] bond_slave_0: entered allmulticast mode
[  385.885988][ T7922] bond_slave_1: entered allmulticast mode
[  385.929034][ T7925] netlink: 207968 bytes leftover after parsing attributes in process `syz.3.533'.
[  387.302908][ T7951] netlink: 'syz.4.544': attribute type 3 has an invalid length.
[  387.311386][ T7951] netlink: 132 bytes leftover after parsing attributes in process `syz.4.544'.
[  387.385130][ T7950] syzkaller0: entered promiscuous mode
[  387.390994][ T7950] syzkaller0: entered allmulticast mode
[  387.436355][ T7957] netlink: 4093 bytes leftover after parsing attributes in process `syz.3.541'.
[  387.476090][ T7952] netlink: 4093 bytes leftover after parsing attributes in process `syz.3.541'.
[  387.504775][ T7953] netlink: 4093 bytes leftover after parsing attributes in process `syz.3.541'.
[  389.208868][ T7983] netlink: 'syz.0.552': attribute type 3 has an invalid length.
[  389.217134][ T7983] netlink: 3285 bytes leftover after parsing attributes in process `syz.0.552'.
[  390.158488][ T7996] netlink: 56 bytes leftover after parsing attributes in process `syz.1.557'.
[  391.975815][ T8023] loop3: detected capacity change from 0 to 2048
[  392.095723][ T8023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  392.364380][ T8039] netlink: 56 bytes leftover after parsing attributes in process `syz.0.573'.
[  392.663560][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.802274][ T8066] netlink: 40 bytes leftover after parsing attributes in process `syz.4.586'.
[  396.824856][ T8098] netlink: 40 bytes leftover after parsing attributes in process `syz.0.598'.
[  397.416282][ T8102] ip6gre1: entered allmulticast mode
[  399.742837][ T8111] syzkaller0: entered promiscuous mode
[  399.748578][ T8111] syzkaller0: entered allmulticast mode
[  401.376936][ T8125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.609'.
[  401.742176][ T8128] loop5: detected capacity change from 0 to 2048
[  401.766316][ T8130] bridge0: port 3(netdevsim0) entered blocking state
[  401.773797][ T8130] bridge0: port 3(netdevsim0) entered disabled state
[  401.786930][ T8130] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  401.799139][ T8130] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  401.808816][ T8130] bridge0: port 3(netdevsim0) entered blocking state
[  401.816196][ T8130] bridge0: port 3(netdevsim0) entered forwarding state
[  402.540019][ T8128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  402.806094][ T6579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.092476][ T8153] netlink: 40 bytes leftover after parsing attributes in process `syz.3.621'.
[  403.394083][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  403.401316][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  406.324237][ T8171] loop3: detected capacity change from 0 to 2048
[  406.582931][ T8171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  407.243009][ T8186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.633'.
[  407.345531][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.218636][ T8193] fuse: Bad value for 'fd'
[  409.092235][ T8214] loop5: detected capacity change from 0 to 2048
[  409.394492][ T8208] syzkaller0: entered promiscuous mode
[  409.400248][ T8208] syzkaller0: entered allmulticast mode
[  409.607039][ T8214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  410.602386][ T5796] Bluetooth: hci4: command 0x0406 tx timeout
[  412.297020][ T8225] netlink: 40 bytes leftover after parsing attributes in process `syz.4.647'.
[  414.156546][ T6579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.770775][ T8264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.662'.
[  417.874703][ T8261] syzkaller0: entered promiscuous mode
[  417.880449][ T8261] syzkaller0: entered allmulticast mode
[  417.985468][ T8267] netlink: 'syz.4.663': attribute type 4 has an invalid length.
[  418.494274][ T8275] ISOFS: Unable to identify CD-ROM format.
[  420.018989][ T8281] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  421.802041][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.676'.
[  422.432019][ T8315] netlink: 'syz.1.681': attribute type 4 has an invalid length.
[  427.510790][ T8349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.689'.
[  428.172256][ T8353] netlink: 'syz.4.692': attribute type 4 has an invalid length.
[  430.907353][ T8374] netlink: 'syz.5.699': attribute type 29 has an invalid length.
[  431.025118][ T8374] netlink: 'syz.5.699': attribute type 29 has an invalid length.
[  431.641044][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.5.704'.
[  431.718835][ T8383] geneve3: entered promiscuous mode
[  431.724471][ T8383] geneve3: entered allmulticast mode
[  432.228136][ T8391] netlink: 'syz.1.706': attribute type 4 has an invalid length.
[  434.433040][ T8420] netlink: 'syz.1.715': attribute type 29 has an invalid length.
[  434.662413][ T8421] netlink: 'syz.1.715': attribute type 2 has an invalid length.
[  434.670312][ T8421] netlink: 132 bytes leftover after parsing attributes in process `syz.1.715'.
[  434.682691][ T8423] netlink: 36 bytes leftover after parsing attributes in process `syz.3.717'.
[  434.912637][ T8425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.718'.
[  434.934007][ T8425] geneve3: entered promiscuous mode
[  434.939457][ T8425] geneve3: entered allmulticast mode
[  435.808770][ T8435] netlink: 'syz.1.721': attribute type 4 has an invalid length.
[  435.999488][ T5850] kernel write not supported for file /vcs (pid: 5850 comm: kworker/0:4)
[  436.480114][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.729'.
[  436.756564][ T8450] geneve3: entered promiscuous mode
[  436.762205][ T8450] geneve3: entered allmulticast mode
[  436.867895][ T8454] netlink: 'syz.3.731': attribute type 29 has an invalid length.
[  436.881883][ T8454] netlink: 'syz.3.731': attribute type 2 has an invalid length.
[  436.889875][ T8454] netlink: 132 bytes leftover after parsing attributes in process `syz.3.731'.
[  437.490378][ T8465] netlink: 'syz.0.735': attribute type 4 has an invalid length.
[  438.006607][ T8471] loop0: detected capacity change from 0 to 512
[  438.082814][ T8471] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.738: bg 0: block 5: invalid block bitmap
[  438.151934][ T8471] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  438.164432][ T8471] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.738: invalid indirect mapped block 3 (level 2)
[  438.190891][ T8471] EXT4-fs (loop0): 1 orphan inode deleted
[  438.196897][ T8471] EXT4-fs (loop0): 1 truncate cleaned up
[  438.205422][ T8471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  438.522300][ T8471] EXT4-fs error (device loop0): ext4_check_dx_root:2220: inode #2: comm syz.0.738: Corrupt dir, invalid name_len for '.', running e2fsck is recommended
[  438.690428][   T29] audit: type=1326 audit(1731471764.510:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8482 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c1f7e719 code=0x7ffc0000
[  438.775060][ T8481] loop5: detected capacity change from 0 to 1024
[  438.780983][   T29] audit: type=1326 audit(1731471764.560:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8482 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9c1f7e719 code=0x7ffc0000
[  438.804836][   T29] audit: type=1326 audit(1731471764.560:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8482 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c1f7e719 code=0x7ffc0000
[  438.828626][   T29] audit: type=1326 audit(1731471764.560:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8482 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c1f7e719 code=0x7ffc0000
[  438.853174][   T29] audit: type=1326 audit(1731471764.560:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8482 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9c1f7e719 code=0x7ffc0000
[  438.876004][   T29] audit: type=1326 audit(1731471764.560:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8482 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c1f7e719 code=0x7ffc0000
[  438.898633][   T29] audit: type=1326 audit(1731471764.560:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8482 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9c1f7e719 code=0x7ffc0000
[  438.921337][   T29] audit: type=1326 audit(1731471764.560:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8482 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c1f7e719 code=0x7ffc0000
[  438.943948][   T29] audit: type=1326 audit(1731471764.570:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8482 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fe9c1f7e719 code=0x7ffc0000
[  438.998025][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.020395][ T8481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.201410][   T29] audit: type=1326 audit(1731471765.000:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.5.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  439.461822][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'.
[  439.992488][ T6579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.014345][ T8505] netlink: 'syz.4.748': attribute type 4 has an invalid length.
[  445.451232][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'.
[  445.671981][   T29] kauditd_printk_skb: 8 callbacks suppressed
[  445.672049][   T29] audit: type=1326 audit(1731471771.470:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  445.701082][   T29] audit: type=1326 audit(1731471771.470:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  445.928309][ T8538] netlink: 'syz.4.760': attribute type 4 has an invalid length.
[  446.082528][ T8537] loop1: detected capacity change from 0 to 1024
[  446.249856][   T29] audit: type=1326 audit(1731471771.610:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  446.273245][   T29] audit: type=1326 audit(1731471771.620:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  446.296010][   T29] audit: type=1326 audit(1731471771.620:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  446.318762][   T29] audit: type=1326 audit(1731471771.630:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  446.341500][   T29] audit: type=1326 audit(1731471771.640:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  446.364149][   T29] audit: type=1326 audit(1731471771.640:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  446.386740][   T29] audit: type=1326 audit(1731471771.640:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  446.409351][   T29] audit: type=1326 audit(1731471771.670:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  446.436176][ T8537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  447.885591][ T8558] loop0: detected capacity change from 0 to 764
[  448.075556][ T8558] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  448.108953][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.670477][ T8562] netlink: 'syz.3.766': attribute type 11 has an invalid length.
[  448.679245][ T8562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.766'.
[  450.710839][   T29] kauditd_printk_skb: 8 callbacks suppressed
[  450.710913][   T29] audit: type=1326 audit(1731471776.300:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.765" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f906cb7e719 code=0x0
[  451.382809][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'.
[  451.604224][   T29] audit: type=1326 audit(1731471777.410:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.5.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  451.627981][   T29] audit: type=1326 audit(1731471777.420:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.5.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  451.651997][   T29] audit: type=1326 audit(1731471777.420:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.5.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  451.675382][   T29] audit: type=1326 audit(1731471777.420:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.5.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  451.698602][   T29] audit: type=1326 audit(1731471777.420:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.5.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  451.721553][   T29] audit: type=1326 audit(1731471777.420:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.5.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  451.724142][ T8587] netlink: 'syz.3.773': attribute type 4 has an invalid length.
[  451.744148][   T29] audit: type=1326 audit(1731471777.420:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.5.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  451.744369][   T29] audit: type=1326 audit(1731471777.420:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.5.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  451.797320][   T29] audit: type=1326 audit(1731471777.430:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.5.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  452.742078][ T8600] loop1: detected capacity change from 0 to 128
[  453.432127][ T8600] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  453.455485][ T8596] loop3: detected capacity change from 0 to 1024
[  453.492382][ T8600] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  453.566407][ T8600] fscrypt: AES-128-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  454.123886][ T8600] fscrypt (loop1): Missing crypto API support for AES-128-CBC-ESSIV (API name: "essiv(cbc(aes),sha256)")
[  454.224270][ T8596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  454.981968][ T5791] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  456.247238][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.581652][ T8642] netlink: 'syz.1.787': attribute type 4 has an invalid length.
[  459.158168][ T8675] loop3: detected capacity change from 0 to 1024
[  459.321050][ T8675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  459.812126][   T29] kauditd_printk_skb: 8 callbacks suppressed
[  459.812202][   T29] audit: type=1326 audit(1731471785.630:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  459.848770][   T29] audit: type=1326 audit(1731471785.670:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  459.871427][   T29] audit: type=1326 audit(1731471785.670:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  460.839489][   T29] audit: type=1326 audit(1731471786.360:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  460.863173][   T29] audit: type=1326 audit(1731471786.360:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  460.887809][   T29] audit: type=1326 audit(1731471786.360:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  461.022142][   T29] audit: type=1326 audit(1731471786.840:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  461.271698][   T29] audit: type=1326 audit(1731471787.060:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  461.294528][   T29] audit: type=1326 audit(1731471787.060:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  461.317345][   T29] audit: type=1326 audit(1731471787.060:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  462.494205][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.529281][ T8712] loop4: detected capacity change from 0 to 2048
[  463.581763][ T8720] netlink: 'syz.3.808': attribute type 4 has an invalid length.
[  464.013597][ T8712] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  464.934022][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  464.941064][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  465.240345][ T8735] loop5: detected capacity change from 0 to 1024
[  468.616379][ T8735] EXT4-fs warning (device loop5): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop5.
[  468.813874][ T8750] netlink: 'syz.0.826': attribute type 4 has an invalid length.
[  470.881377][ T5850] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  471.131162][ T1926] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  471.215697][ T5850] usb 2-1: Using ep0 maxpacket: 16
[  471.239187][ T5850] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  471.248797][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  471.259391][ T5850] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  471.438661][ T1926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  471.450479][ T1926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  471.460831][ T1926] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  471.470164][ T1926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.577639][ T5850] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  471.589196][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.597875][ T5850] usb 2-1: Product: syz
[  471.602417][ T5850] usb 2-1: Manufacturer: syz
[  471.607265][ T5850] usb 2-1: SerialNumber: syz
[  471.730358][ T1926] usb 1-1: config 0 descriptor??
[  472.054887][ T8781] netlink: 'syz.5.838': attribute type 4 has an invalid length.
[  472.486401][ T8783] loop3: detected capacity change from 0 to 1024
[  472.686974][ T8783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  473.107361][ T8790] loop0: detected capacity change from 0 to 1024
[  473.171474][   T29] audit: type=1326 audit(1731471798.960:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  473.475771][   T29] audit: type=1326 audit(1731471799.030:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  473.498479][   T29] audit: type=1326 audit(1731471799.140:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  473.521334][   T29] audit: type=1326 audit(1731471799.140:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  473.543923][   T29] audit: type=1326 audit(1731471799.200:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  473.566450][   T29] audit: type=1326 audit(1731471799.200:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  473.589156][   T29] audit: type=1326 audit(1731471799.230:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  473.611865][   T29] audit: type=1326 audit(1731471799.230:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  473.634581][   T29] audit: type=1326 audit(1731471799.250:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  473.657284][   T29] audit: type=1326 audit(1731471799.250:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8697e719 code=0x7ffc0000
[  474.208077][ T1926] hid-led 0003:27B8:01ED.0007: probe with driver hid-led failed with error -71
[  474.601521][ T5850] usb 2-1: 0:2 : does not exist
[  474.644069][ T1926] usb 1-1: USB disconnect, device number 6
[  475.100455][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.670074][ T5850] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1)
[  477.725330][ T5850] usb 2-1: USB disconnect, device number 9
[  477.757613][ T8820] netlink: 'syz.5.850': attribute type 4 has an invalid length.
[  478.536010][   T29] kauditd_printk_skb: 19 callbacks suppressed
[  478.536093][   T29] audit: type=1800 audit(1731471804.350:121): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.851" name="/" dev="fuse" ino=1 res=0 errno=0
[  479.348372][ T6228] udevd[6228]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  479.969793][ T8832] loop5: detected capacity change from 0 to 1024
[  482.922790][ T8832] EXT4-fs warning (device loop5): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop5.
[  483.009434][ T8852] loop3: detected capacity change from 0 to 512
[  483.202678][ T8852] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  483.276889][ T8852] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[  483.521062][ T8857] loop4: detected capacity change from 0 to 256
[  483.567679][ T8859] netlink: 'syz.5.864': attribute type 4 has an invalid length.
[  483.668699][ T8857] exfat: Deprecated parameter 'namecase'
[  483.674969][ T8857] exfat: Deprecated parameter 'namecase'
[  483.759438][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'.
[  484.021245][ T8857] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d)
[  485.330016][   T29] audit: type=1800 audit(1731471810.090:122): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.866" name="file1" dev="loop4" ino=1048612 res=0 errno=0
[  488.613402][ T8877] loop4: detected capacity change from 0 to 128
[  488.807675][ T8877] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  489.111820][ T8875] loop1: detected capacity change from 0 to 1024
[  489.278281][ T8877] syz.4.872: attempt to access beyond end of device
[  489.278281][ T8877] loop4: rw=3, sector=6950, nr_sectors = 2 limit=128
[  489.292224][ T8877] syz.4.872: attempt to access beyond end of device
[  489.292224][ T8877] loop4: rw=2051, sector=6952, nr_sectors = 942 limit=128
[  489.431036][ T8875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  489.785468][   T29] audit: type=1326 audit(1731471815.600:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  489.936811][ T8890] netlink: 'syz.0.878': attribute type 4 has an invalid length.
[  490.090856][   T29] audit: type=1326 audit(1731471815.640:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  490.114054][   T29] audit: type=1326 audit(1731471815.720:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  490.136829][   T29] audit: type=1326 audit(1731471815.720:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  490.159626][   T29] audit: type=1326 audit(1731471815.750:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  490.182300][   T29] audit: type=1326 audit(1731471815.750:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  490.204998][   T29] audit: type=1326 audit(1731471815.770:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  492.965174][ T8901] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  493.901540][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.187420][ T8905] loop0: detected capacity change from 0 to 1024
[  494.314464][ T8911] loop5: detected capacity change from 0 to 256
[  494.326917][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'.
[  494.532006][ T5879] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  494.600741][ T8905] hfsplus: xattr search failed
[  494.627656][ T8911] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  495.131627][ T5879] usb 4-1: unable to get BOS descriptor or descriptor too short
[  495.162272][ T5879] usb 4-1: not running at top speed; connect to a high speed hub
[  495.186649][ T8917] loop4: detected capacity change from 0 to 764
[  495.212102][ T5879] usb 4-1: config 1 interface 0 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0
[  495.222414][ T5879] usb 4-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  495.235895][ T5879] usb 4-1: config 1 interface 0 has no altsetting 0
[  495.267063][ T5879] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  495.282113][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.290397][ T5879] usb 4-1: Product: syz
[  495.297239][ T5879] usb 4-1: Manufacturer: syz
[  495.302166][ T5879] usb 4-1: SerialNumber: syz
[  495.739498][ T8927] netlink: 'syz.4.892': attribute type 4 has an invalid length.
[  495.741382][ T8923] loop0: detected capacity change from 0 to 1024
[  495.928507][ T8923] hfsplus: invalid btree flag
[  495.969739][ T8923] hfsplus: failed to load catalog file
[  496.216223][ T8909] loop3: detected capacity change from 0 to 1024
[  496.317285][ T8930] loop1: detected capacity change from 0 to 1024
[  496.502328][ T5879] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  496.626676][ T8932] loop0: detected capacity change from 0 to 512
[  496.801028][ T5879] usb 4-1: USB disconnect, device number 4
[  496.846894][ T8930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  496.896527][ T8932] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.887: casefold flag without casefold feature
[  496.968943][ T8932] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.887: couldn't read orphan inode 15 (err -117)
[  497.047841][ T8932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  497.424535][   T29] audit: type=1326 audit(1731471823.230:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  497.778253][   T29] audit: type=1326 audit(1731471823.280:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  497.801133][   T29] audit: type=1326 audit(1731471823.320:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  497.823870][   T29] audit: type=1326 audit(1731471823.340:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  497.846715][   T29] audit: type=1326 audit(1731471823.340:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  497.869418][   T29] audit: type=1326 audit(1731471823.360:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  497.891996][   T29] audit: type=1326 audit(1731471823.370:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  497.914649][   T29] audit: type=1326 audit(1731471823.400:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff01d37e719 code=0x7ffc0000
[  498.078791][ T2984] hfsplus: b-tree write err: -5, ino 4
[  498.318754][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.810117][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.392526][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.896'.
[  505.875416][ T8980] loop0: detected capacity change from 0 to 128
[  508.344592][ T8985] loop5: detected capacity change from 0 to 2048
[  508.353708][ T8985] udf: Bad value for 'umask'
[  508.650930][ T8980] EXT4-fs: error -4 creating inode table initialization thread
[  508.962215][ T8980] EXT4-fs (loop0): mount failed
[  516.533868][ T9012] loop5: detected capacity change from 0 to 1024
[  516.544372][ T9012] EXT4-fs: Invalid want_extra_isize 127
[  517.864431][ T9017] loop5: detected capacity change from 0 to 128
[  517.873185][ T9017] vfat: Unknown parameter ''
[  517.924568][ T9017] loop5: detected capacity change from 0 to 512
[  517.933549][ T9017] EXT4-fs: Ignoring removed orlov option
[  519.727331][ T9017] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[  519.737510][ T9017] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.919: invalid indirect mapped block 2683928664 (level 1)
[  519.757977][ T9017] EXT4-fs (loop5): 1 truncate cleaned up
[  519.766173][ T9017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  519.869884][ T9017] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.129398][ T9044] loop5: detected capacity change from 0 to 1024
[  524.028274][ T9059] loop5: detected capacity change from 0 to 1024
[  524.056174][ T9056] loop3: detected capacity change from 0 to 2048
[  524.065421][ T9056] journal_path: Lookup failure for './file1'
[  524.071937][ T9056] EXT4-fs: error: could not find journal device path
[  524.292181][ T9059] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  525.361226][ T9080] loop5: detected capacity change from 0 to 128
[  526.273501][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  526.280293][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  527.745484][   T44] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  527.766613][ T9106] loop1: detected capacity change from 0 to 128
[  527.800792][ T5879] usb 1-1: new low-speed USB device number 7 using dummy_hcd
[  527.845088][ T9106] EXT4-fs (loop1): Test dummy encryption mode enabled
[  527.961216][   T44] usb 6-1: Using ep0 maxpacket: 8
[  528.007943][ T9106] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  528.072324][   T44] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[  528.080997][   T44] usb 6-1: config 0 has no interface number 0
[  528.087497][   T44] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  528.099214][   T44] usb 6-1: New USB device found, idVendor=0878, idProduct=1400, bcdDevice=df.31
[  528.108664][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.167481][ T9106] ext4 filesystem being mounted at /189/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  528.414095][   T44] usb 6-1: config 0 descriptor??
[  528.431222][   T44] smsc95xx v2.0.0
[  528.435174][   T44] smsc95xx 6-1:0.214 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  528.446252][   T44] smsc95xx 6-1:0.214: probe with driver smsc95xx failed with error -22
[  528.649592][ T9106] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  528.766919][ T5879] usb 1-1: Invalid ep0 maxpacket: 64
[  528.836183][   T44] usb 6-1: USB disconnect, device number 3
[  528.910774][ T5879] usb 1-1: new low-speed USB device number 8 using dummy_hcd
[  529.181084][ T5879] usb 1-1: Invalid ep0 maxpacket: 64
[  529.218747][ T5879] usb usb1-port1: attempt power cycle
[  529.253665][ T5791] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  529.514562][ T9124] loop3: detected capacity change from 0 to 512
[  529.597108][ T9124] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent
[  529.640119][ T5879] usb 1-1: new low-speed USB device number 9 using dummy_hcd
[  529.731234][ T5879] usb 1-1: device descriptor read/8, error -71
[  529.938495][   T29] audit: type=1326 audit(1731471855.750:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.5.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  529.961647][   T29] audit: type=1326 audit(1731471855.750:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.5.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  529.984400][   T29] audit: type=1326 audit(1731471855.790:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.5.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  530.007141][   T29] audit: type=1326 audit(1731471855.790:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.5.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  530.030178][   T29] audit: type=1326 audit(1731471855.790:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.5.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  530.052929][   T29] audit: type=1326 audit(1731471855.810:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.5.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  530.075650][   T29] audit: type=1326 audit(1731471855.810:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.5.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  530.098498][   T29] audit: type=1326 audit(1731471855.840:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.5.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  530.121149][   T29] audit: type=1326 audit(1731471855.840:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.5.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  530.143995][   T29] audit: type=1326 audit(1731471855.840:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.5.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7eca77e719 code=0x7ffc0000
[  530.305914][ T9124] xt_CT: No such helper "syz0"
[  530.512168][ T9134] loop4: detected capacity change from 0 to 1024
[  530.586331][ T9134] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  530.636610][ T9134] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  530.685137][ T9138] loop0: detected capacity change from 0 to 1024
[  530.697959][ T9134] EXT4-fs (loop4): orphan cleanup on readonly fs
[  530.736573][ T9134] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  530.751623][ T9134] EXT4-fs (loop4): Cannot turn on quotas: error -5
[  530.759137][ T9138] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  530.800282][ T9134] EXT4-fs (loop4): 1 truncate cleaned up
[  530.835313][ T9138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  530.892867][ T9134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  530.913952][ T9137] loop1: detected capacity change from 0 to 2048
[  530.988081][ T9137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  531.430037][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.483455][ T9135] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.962: bg 0: block 234: padding at end of block bitmap is not set
[  531.559616][ T9135] EXT4-fs (loop1): Remounting filesystem read-only
[  531.817861][ T9152] loop3: detected capacity change from 0 to 256
[  532.004310][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.126590][ T9152] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  532.459068][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  534.337855][ T9170] loop1: detected capacity change from 0 to 8
[  534.562187][ T9182] loop5: detected capacity change from 0 to 128
[  534.716922][ T9182] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  534.725280][ T9182] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  534.981943][ T9180] loop3: detected capacity change from 0 to 1024
[  535.009067][ T9185] loop0: detected capacity change from 0 to 1024
[  535.174232][ T5806] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  535.368367][ T6579] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  535.406698][ T7675] hfsplus: b-tree write err: -5, ino 4
[  538.532012][ T9183] hfsplus: xattr search failed
[  538.645581][ T5796] Bluetooth: hci4: command 0x0406 tx timeout
[  541.262405][ T5806] Bluetooth: hci4: command 0x0406 tx timeout
[  544.308275][ T5806] Bluetooth: hci4: command 0x0406 tx timeout
[  546.339969][ T5806] Bluetooth: hci4: command 0x0406 tx timeout
[  547.055462][ T9239] loop0: detected capacity change from 0 to 512
[  547.271171][ T9239] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.995: casefold flag without casefold feature
[  547.409344][ T9239] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.995: couldn't read orphan inode 15 (err -117)
[  547.546049][ T9239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  547.690962][ T9239] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #2: comm syz.0.995: directory missing '.'
[  547.806480][ T9246] loop3: detected capacity change from 0 to 512
[  547.873962][ T9246] EXT4-fs (loop3): Test dummy encryption mode enabled
[  547.881125][ T9246] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  548.671809][ T5806] Bluetooth: hci4: command 0x0406 tx timeout
[  550.743176][ T9246] EXT4-fs (loop3): 1 truncate cleaned up
[  550.750076][ T9246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  550.864269][ T5806] Bluetooth: hci4: command 0x0406 tx timeout
[  551.315396][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  551.407187][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  551.815538][ T5796] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  551.897000][ T5796] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  551.907911][ T5796] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  551.926776][ T5796] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  551.940274][ T5796] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  551.949695][ T5796] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  552.733286][   T44] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  552.900948][   T44] usb 4-1: Using ep0 maxpacket: 16
[  552.927958][   T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  552.938651][   T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  553.036233][ T5796] Bluetooth: hci4: command 0x0406 tx timeout
[  553.227697][   T44] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  553.237378][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.246046][   T44] usb 4-1: Product: syz
[  553.250436][   T44] usb 4-1: Manufacturer: syz
[  553.255363][   T44] usb 4-1: SerialNumber: syz
[  554.014404][ T5796] Bluetooth: hci5: command tx timeout
[  554.031548][   T44] usb 4-1: 0:2 : does not exist
[  555.753913][ T9256] chnl_net:caif_netlink_parms(): no params data found
[  556.141433][ T5796] Bluetooth: hci5: command tx timeout
[  557.887475][ T5857] usb 4-1: USB disconnect, device number 5
[  558.302583][ T5796] Bluetooth: hci5: command tx timeout
[  559.383906][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  559.455763][ T9256] bridge0: port 1(bridge_slave_0) entered blocking state
[  559.463520][ T9256] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.471577][ T9256] bridge_slave_0: entered allmulticast mode
[  559.480741][ T9256] bridge_slave_0: entered promiscuous mode
[  559.769719][ T9256] bridge0: port 2(bridge_slave_1) entered blocking state
[  559.777530][ T9256] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.794060][ T9256] bridge_slave_1: entered allmulticast mode
[  559.803480][ T9256] bridge_slave_1: entered promiscuous mode
[  560.642345][ T5806] Bluetooth: hci5: command tx timeout
[  565.001651][ T9304] lo: entered promiscuous mode
[  565.014203][ T9304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  565.042847][ T9256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  566.260076][ T9318] loop4: detected capacity change from 0 to 128
[  566.535626][ T9256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  566.999596][ T9256] team0: Port device team_slave_0 added
[  567.095215][ T9256] team0: Port device team_slave_1 added
[  567.330215][ T7675] Bluetooth: hci6: Frame reassembly failed (-84)
[  567.564906][ T9256] batman_adv: batadv0: Adding interface: batadv_slave_0
[  567.573646][ T9256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  567.600790][ T9256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  567.706255][ T9256] batman_adv: batadv0: Adding interface: batadv_slave_1
[  567.713637][ T9256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  567.740280][ T9256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  568.266719][ T9256] hsr_slave_0: entered promiscuous mode
[  568.346720][ T9256] hsr_slave_1: entered promiscuous mode
[  568.376825][ T9256] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  568.384880][ T9256] Cannot create hsr debugfs directory
[  569.371714][ T5806] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  569.416103][ T9256] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  569.474184][ T9256] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  569.797150][ T9256] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  569.953539][ T9334] loop4: detected capacity change from 0 to 8192
[  570.016202][ T4891] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.027113][ T4891] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 41471 - 0
[  570.037949][ T4891] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 46435 - 0
[  570.163867][ T9256] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  570.262074][ T4891] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.272839][ T4891] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 41471 - 0
[  570.283715][ T4891] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 46435 - 0
[  570.427241][ T4891] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.445889][ T4891] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 41471 - 0
[  570.458933][ T4891] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 46435 - 0
[  570.542624][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  570.542704][   T29] audit: type=1800 audit(1731471896.340:153): pid=9334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1022" name="bus" dev="loop4" ino=1048628 res=0 errno=0
[  570.837947][ T4891] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.849220][ T4891] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 41471 - 0
[  570.860073][ T4891] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 46435 - 0
[  571.628374][ T9256] 8021q: adding VLAN 0 to HW filter on device bond0
[  573.103666][ T9256] 8021q: adding VLAN 0 to HW filter on device team0
[  573.156227][  T745] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.163987][  T745] bridge0: port 1(bridge_slave_0) entered forwarding state
[  573.192176][   T29] audit: type=1800 audit(1731471899.020:154): pid=9346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1022" name="bus" dev="loop4" ino=1048628 res=0 errno=0
[  573.218049][   T29] audit: type=1800 audit(1731471899.020:155): pid=9347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1022" name="bus" dev="loop4" ino=1048628 res=0 errno=0
[  573.269916][  T745] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.277774][  T745] bridge0: port 2(bridge_slave_1) entered forwarding state
[  573.426637][ T9256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  573.437479][ T9256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  573.560020][ T4891] bridge_slave_1: left allmulticast mode
[  573.567776][ T4891] bridge_slave_1: left promiscuous mode
[  573.575776][ T4891] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.689736][ T4891] bridge_slave_0: left allmulticast mode
[  573.695640][ T4891] bridge_slave_0: left promiscuous mode
[  573.702215][ T4891] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.296127][ T4891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  575.325100][ T4891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  575.340448][ T4891] bond0 (unregistering): Released all slaves
[  577.830013][ T9393] loop0: detected capacity change from 0 to 2048
[  577.946188][ T9395] loop4: detected capacity change from 0 to 1024
[  577.982383][ T9393] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  577.990255][ T9393] UDF-fs: Scanning with blocksize 512 failed
[  578.191408][ T9393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  578.571683][ T5795] UDF-fs: warning (device loop0): udf_evict_inode: Inode 818 (mode 100755) has inode size 134220898 different from extent length 134221824. Filesystem need not be standards compliant.
[  581.545946][ T9430] loop0: detected capacity change from 0 to 512
[  581.602965][ T9430] EXT4-fs: Ignoring removed bh option
[  581.787427][ T9430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  581.801100][ T9430] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  582.027002][ T9430] EXT4-fs error (device loop0): ext4_rename:3814: inode #16: comm syz.0.1052: target of rename is already freed
[  582.324923][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  583.870923][ T9457] loop4: detected capacity change from 0 to 1024
[  583.882856][ T9457] EXT4-fs: Ignoring removed nomblk_io_submit option
[  583.975405][ T9457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  584.049311][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1058'.
[  584.139461][   T29] audit: type=1800 audit(1731471909.950:156): pid=9457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1058" name="file2" dev="loop4" ino=16 res=0 errno=0
[  584.443654][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.571176][ T9366] sched: DL replenish lagged too much
[  585.934050][ T4891] hsr_slave_0: left promiscuous mode
[  586.051238][ T4891] hsr_slave_1: left promiscuous mode
[  586.122193][ T4891] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  586.129832][ T4891] batman_adv: batadv0: Removing interface: batadv_slave_0
[  586.309639][ T4891] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  586.318597][ T4891] batman_adv: batadv0: Removing interface: batadv_slave_1
[  586.460110][ T9480] loop4: detected capacity change from 0 to 256
[  586.515900][ T4891] veth1_macvtap: left promiscuous mode
[  586.521774][ T4891] veth0_macvtap: left promiscuous mode
[  586.527460][ T4891] veth1_vlan: left promiscuous mode
[  586.533079][ T4891] veth0_vlan: left promiscuous mode
[  586.713108][ T9480] trusted_key: encrypted_key: key user:syz not found
[  587.727447][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  587.746221][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  590.134281][ T4891] team0 (unregistering): Port device team_slave_1 removed
[  591.732376][ T4891] team0 (unregistering): Port device team_slave_0 removed
[  594.442908][ T9256] 8021q: adding VLAN 0 to HW filter on device batadv0
[  595.698680][ T9521] loop1: detected capacity change from 0 to 256
[  595.843092][ T9521] exfat: Bad value for 'uid'
[  595.849135][ T9521] exfat: Bad value for 'uid'
[  596.828629][ T9533] input: syz0 as /devices/virtual/input/input10
[  596.880217][ T9536] loop1: detected capacity change from 0 to 8
[  597.041854][ T9536] SQUASHFS error: Failed to read block 0x4de: -5
[  597.049502][ T9536] SQUASHFS error: Failed to read block 0x4de: -5
[  597.079939][   T29] audit: type=1800 audit(1731471922.890:157): pid=9536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1076" name="file1" dev="loop1" ino=5 res=0 errno=0
[  598.026849][ T9550] Bluetooth: MGMT ver 1.23
[  598.178497][ T9256] veth0_vlan: entered promiscuous mode
[  598.282906][ T9256] veth1_vlan: entered promiscuous mode
[  598.543923][ T9256] veth0_macvtap: entered promiscuous mode
[  598.607871][ T9256] veth1_macvtap: entered promiscuous mode
[  598.792749][ T9554] mmap: syz.1.1081 (9554) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  598.897553][ T9256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.913574][ T9256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.925272][ T9256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.935971][ T9256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.945981][ T9256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.956782][ T9256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.966859][ T9256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.977502][ T9256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.991246][ T9256] batman_adv: batadv0: Interface activated: batadv_slave_0
[  599.362105][ T9256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  599.373284][ T9256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  599.383564][ T9256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  599.394409][ T9256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  599.404983][ T9256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  599.422704][ T9256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  599.435853][ T9256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  599.447835][ T9256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  599.464202][ T9256] batman_adv: batadv0: Interface activated: batadv_slave_1
[  599.578568][ T9256] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  599.587870][ T9256] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  599.597098][ T9256] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  599.606239][ T9256] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  601.554369][ T9580] loop1: detected capacity change from 0 to 2048
[  601.691239][ T5806] Bluetooth: hci4: command 0x1003 tx timeout
[  601.692168][ T5796] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  601.763030][ T9580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  601.791947][ T9590] loop3: detected capacity change from 0 to 16
[  601.920819][ T9590] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700)
[  604.280122][ T9590] loop3: detected capacity change from 0 to 256
[  605.499523][ T9590] FAT-fs (loop3): Directory bread(block 64) failed
[  605.506557][ T9590] FAT-fs (loop3): Directory bread(block 65) failed
[  605.513720][ T9590] FAT-fs (loop3): Directory bread(block 66) failed
[  605.520654][ T9590] FAT-fs (loop3): Directory bread(block 67) failed
[  605.527554][ T9590] FAT-fs (loop3): Directory bread(block 68) failed
[  605.534506][ T9590] FAT-fs (loop3): Directory bread(block 69) failed
[  605.541578][ T9590] FAT-fs (loop3): Directory bread(block 70) failed
[  605.548342][ T9590] FAT-fs (loop3): Directory bread(block 71) failed
[  605.555967][ T9590] FAT-fs (loop3): Directory bread(block 72) failed
[  605.562936][ T9590] FAT-fs (loop3): Directory bread(block 73) failed
[  606.197951][ T9594] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  606.502566][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  607.460914][   T44] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  607.680960][   T44] usb 2-1: Using ep0 maxpacket: 16
[  607.706417][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  607.718159][   T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  607.731548][   T44] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  607.741166][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.903507][   T44] usb 2-1: config 0 descriptor??
[  608.686441][   T44] usbhid 2-1:0.0: can't add hid device: -71
[  608.699910][   T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  608.871048][   T44] usb 2-1: USB disconnect, device number 10
[  609.007337][ T4891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  609.015638][ T4891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  609.135015][ T4613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  609.148850][ T4613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  610.782216][ T9644] loop6: detected capacity change from 0 to 512
[  610.821028][ T2984] Bluetooth: hci4: Frame reassembly failed (-84)
[  610.860120][ T9644] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  610.874768][ T9645] loop1: detected capacity change from 0 to 256
[  611.005121][ T9645] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  613.759184][ T5796] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  613.760351][ T5806] Bluetooth: hci4: command 0x1003 tx timeout
[  614.011963][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  614.020896][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  614.032772][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  614.047510][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  614.062944][ T5806] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  614.071437][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  615.403265][ T9676] loop1: detected capacity change from 0 to 512
[  615.961678][ T9676] EXT4-fs (loop1): Invalid log block size: 4294967295
[  616.186821][ T5806] Bluetooth: hci4: command tx timeout
[  616.641666][ T9659] chnl_net:caif_netlink_parms(): no params data found
[  617.528896][ T9676] loop1: detected capacity change from 0 to 1024
[  621.782715][ T5806] Bluetooth: hci4: command tx timeout
[  621.891239][ T9676] hfsplus: failed to load extents file
[  621.931744][ T5879] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  621.939673][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[  622.818898][ T7685] Bluetooth: hci6: Frame reassembly failed (-84)
[  623.780010][ T9659] bridge0: port 1(bridge_slave_0) entered blocking state
[  623.798638][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.806983][ T9659] bridge_slave_0: entered allmulticast mode
[  623.817221][ T9659] bridge_slave_0: entered promiscuous mode
[  623.850343][ T9659] bridge0: port 2(bridge_slave_1) entered blocking state
[  623.860123][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state
[  623.868123][ T9659] bridge_slave_1: entered allmulticast mode
[  623.877276][ T9659] bridge_slave_1: entered promiscuous mode
[  623.891983][ T5796] Bluetooth: hci4: command tx timeout
[  624.182380][ T9659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  624.503908][ T9659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  624.819248][ T5806] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  624.954858][ T9728] loop3: detected capacity change from 0 to 256
[  625.410074][ T9659] team0: Port device team_slave_0 added
[  625.481014][ T9659] team0: Port device team_slave_1 added
[  625.788992][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_0
[  625.797215][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  625.823564][ T9659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  625.981350][ T5796] Bluetooth: hci4: command tx timeout
[  626.066666][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_1
[  626.073853][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  626.102445][ T9659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  626.657053][ T9659] hsr_slave_0: entered promiscuous mode
[  626.719634][ T9659] hsr_slave_1: entered promiscuous mode
[  626.763245][ T9659] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  626.763312][ T9659] Cannot create hsr debugfs directory
[  628.576521][ T9659] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  628.590788][ T9739] loop1: detected capacity change from 0 to 4096
[  628.659043][ T9659] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  628.671379][ T5857] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  628.715531][ T9659] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  628.739866][ T9659] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  628.841573][ T9739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  629.001978][ T5857] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  629.002151][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.002316][ T5857] usb 1-1: Product: syz
[  629.002421][ T5857] usb 1-1: Manufacturer: syz
[  629.002532][ T5857] usb 1-1: SerialNumber: syz
[  629.048782][ T5857] usb 1-1: config 0 descriptor??
[  629.073603][ T5857] ch341 1-1:0.0: ch341-uart converter detected
[  630.062917][ T9659] 8021q: adding VLAN 0 to HW filter on device bond0
[  630.201828][ T9659] 8021q: adding VLAN 0 to HW filter on device team0
[  630.280109][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state
[  630.280718][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state
[  630.371294][ T2984] bridge0: port 2(bridge_slave_1) entered blocking state
[  630.371735][ T2984] bridge0: port 2(bridge_slave_1) entered forwarding state
[  630.711567][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.249960][ T5857] usb 1-1: failed to send control message: -71
[  632.256759][ T5857] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  632.454756][ T5857] usb 1-1: USB disconnect, device number 11
[  632.463411][ T5857] ch341 1-1:0.0: device disconnected
[  633.066236][ T9659] 8021q: adding VLAN 0 to HW filter on device batadv0
[  635.052074][ T5806] Bluetooth: hci6: command 0x1003 tx timeout
[  635.059355][ T5796] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  635.625514][ T9659] veth0_vlan: entered promiscuous mode
[  635.741015][ T9659] veth1_vlan: entered promiscuous mode
[  638.542313][ T9659] veth0_macvtap: entered promiscuous mode
[  638.566456][ T9659] veth1_macvtap: entered promiscuous mode
[  638.624582][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.635363][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.645450][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.657472][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.667572][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.678331][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.688804][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.699551][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.709707][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.720841][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.736187][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_0
[  638.757501][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  638.768291][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.778377][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  638.789350][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.799432][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  638.810182][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.820518][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  638.831363][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.841535][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  638.852287][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.867351][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_1
[  638.889981][ T9659] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  638.902019][ T9659] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  638.911104][ T9659] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  638.920126][ T9659] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  643.395910][ T5806] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  643.415781][ T5806] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  643.600321][ T5806] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  643.729344][ T5806] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  643.737916][ T9693] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  643.804530][ T5806] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  643.826767][ T5806] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  644.017073][ T9693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  644.029320][ T9693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  644.040012][ T9693] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  644.053575][ T9693] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  644.066889][ T9693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.637414][ T9693] usb 2-1: config 0 descriptor??
[  645.432323][ T9693] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  645.439926][ T9693] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x5
[  645.520806][ T9693] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  645.631474][ T9693] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  645.820903][ T9693] usb 2-1: USB disconnect, device number 11
[  646.478853][ T5806] Bluetooth: hci6: command tx timeout
[  647.108127][ T9834] loop3: detected capacity change from 0 to 1024
[  647.328943][ T9809] chnl_net:caif_netlink_parms(): no params data found
[  647.744276][ T9834] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  647.867038][ T9834] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  647.883639][ T7685] Bluetooth: hci7: Frame reassembly failed (-84)
[  648.287350][  T745] hfsplus: b-tree write err: -5, ino 4
[  648.493022][ T5796] Bluetooth: hci6: command tx timeout
[  649.056416][ T9857] loop3: detected capacity change from 0 to 128
[  649.149286][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  649.156412][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  649.281772][ T9857] netlink: 'syz.3.1148': attribute type 10 has an invalid length.
[  649.294724][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1148'.
[  649.854472][   T29] audit: type=1804 audit(1731471975.680:158): pid=9860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1148" name="/newroot/251/bus/bus" dev="loop3" ino=1048636 res=1 errno=0
[  649.876802][   T29] audit: type=1800 audit(1731471975.680:159): pid=9860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1148" name="bus" dev="loop3" ino=1048636 res=0 errno=0
[  649.947329][ T5806] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  650.034536][ T9809] bridge0: port 1(bridge_slave_0) entered blocking state
[  650.042158][ T9809] bridge0: port 1(bridge_slave_0) entered disabled state
[  650.049803][ T9809] bridge_slave_0: entered allmulticast mode
[  650.057996][ T9809] bridge_slave_0: entered promiscuous mode
[  650.376808][ T9809] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.384339][ T9809] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.392073][ T9809] bridge_slave_1: entered allmulticast mode
[  650.400094][ T9809] bridge_slave_1: entered promiscuous mode
[  650.586294][ T5796] Bluetooth: hci6: command tx timeout
[  651.303391][ T9809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  651.458207][ T9809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  652.122647][ T7685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  652.131095][ T7685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  652.161383][ T9809] team0: Port device team_slave_0 added
[  652.315278][ T9809] team0: Port device team_slave_1 added
[  652.658117][ T5796] Bluetooth: hci6: command tx timeout
[  652.859979][ T9890] loop3: detected capacity change from 0 to 256
[  652.898698][ T9809] batman_adv: batadv0: Adding interface: batadv_slave_0
[  652.906404][ T9809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  652.932722][ T9809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  653.008071][ T4613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  653.016217][ T4613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  653.536818][ T9809] batman_adv: batadv0: Adding interface: batadv_slave_1
[  653.544190][ T9809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  653.570600][ T9809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  654.793679][ T9809] hsr_slave_0: entered promiscuous mode
[  654.937268][ T9809] hsr_slave_1: entered promiscuous mode
[  655.013776][ T9809] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  655.027800][ T9809] Cannot create hsr debugfs directory
[  655.094332][ T2984] Bluetooth: hci7: Frame reassembly failed (-84)
[  655.517079][ T9909] loop7: detected capacity change from 0 to 8
[  656.751276][ T9913] trusted_key: encrypted_key: insufficient parameters specified
[  657.967497][ T5796] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  664.106811][ T9929] loop3: detected capacity change from 0 to 256
[  666.308879][ T9809] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  666.399055][ T9809] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  666.535562][ T9809] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  666.682110][ T9809] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  668.066952][ T9809] 8021q: adding VLAN 0 to HW filter on device bond0
[  668.298101][ T9809] 8021q: adding VLAN 0 to HW filter on device team0
[  668.423262][  T745] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.430869][  T745] bridge0: port 1(bridge_slave_0) entered forwarding state
[  668.726656][  T745] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.734156][  T745] bridge0: port 2(bridge_slave_1) entered forwarding state
[  669.113546][ T9809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  669.124392][ T9809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  669.569004][ T9950] loop1: detected capacity change from 0 to 2048
[  669.760661][ T9950] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  669.936481][ T7685] Bluetooth: hci7: Frame reassembly failed (-84)
[  670.066025][ T9950] syz.1.1171: attempt to access beyond end of device
[  670.066025][ T9950] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  670.121170][ T9956] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  671.793382][ T9960] loop3: detected capacity change from 0 to 32768
[  671.969822][ T5806] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  671.999439][ T9963] syz.1.1171: attempt to access beyond end of device
[  671.999439][ T9963] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048
[  672.014407][ T9963] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3)
[  672.030115][ T9963] NILFS (loop1): error -5 reading inode: ino=12
[  672.301912][ T9960] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,norecovery,nojournal_transaction_names,allocator_stuck_timeout=32767,nocow,no_data_io
[  672.332220][ T9960] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  672.685986][ T9960] bcachefs (loop3): accounting_read... done
[  672.692640][ T9960] bcachefs (loop3): alloc_read... done
[  672.698429][ T9960] bcachefs (loop3): stripes_read... done
[  672.704523][ T9960] bcachefs (loop3): snapshots_read... done
[  672.757699][ T9960] bcachefs (loop3): going read-write
[  672.871817][ T9974] =====================================================
[  672.878918][ T9974] BUG: KMSAN: uninit-value in bch2_copygc+0x1d3f/0x58f0
[  672.886639][ T9974]  bch2_copygc+0x1d3f/0x58f0
[  672.892375][ T9974]  bch2_copygc_thread+0x7f7/0xfa0
[  672.897492][ T9974]  kthread+0x3e2/0x540
[  672.902180][ T9974]  ret_from_fork+0x6d/0x90
[  672.906775][ T9974]  ret_from_fork_asm+0x1a/0x30
[  672.911851][ T9974] 
[  672.914233][ T9974] Local variable b205.i created at:
[  672.919479][ T9974]  bch2_copygc+0x15b3/0x58f0
[  672.924256][ T9974]  bch2_copygc_thread+0x7f7/0xfa0
[  672.929376][ T9974] 
[  672.931903][ T9974] CPU: 0 UID: 0 PID: 9974 Comm: bch-copygc/loop Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0
[  672.949234][ T9974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  672.961627][ T9974] =====================================================
[  672.968674][ T9974] Disabling lock debugging due to kernel taint
[  672.975712][ T9974] Kernel panic - not syncing: kmsan.panic set ...
[  672.982210][ T9974] CPU: 0 UID: 0 PID: 9974 Comm: bch-copygc/loop Tainted: G    B              6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0
[  672.994963][ T9974] Tainted: [B]=BAD_PAGE
[  672.999221][ T9974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  673.009393][ T9974] Call Trace:
[  673.012765][ T9974]  <TASK>
[  673.015755][ T9974]  dump_stack_lvl+0x216/0x2d0
[  673.020628][ T9974]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  673.026539][ T9974]  dump_stack+0x1e/0x30
[  673.030840][ T9974]  panic+0x4e2/0xcf0
[  673.034882][ T9974]  ? kmsan_get_metadata+0x111/0x1c0
[  673.040181][ T9974]  kmsan_report+0x2c7/0x2d0
[  673.044777][ T9974]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  673.050685][ T9974]  ? __msan_warning+0x95/0x120
[  673.055583][ T9974]  ? bch2_copygc+0x1d3f/0x58f0
[  673.060449][ T9974]  ? bch2_copygc_thread+0x7f7/0xfa0
[  673.065759][ T9974]  ? kthread+0x3e2/0x540
[  673.070147][ T9974]  ? ret_from_fork+0x6d/0x90
[  673.074834][ T9974]  ? ret_from_fork_asm+0x1a/0x30
[  673.079902][ T9974]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  673.085818][ T9974]  ? kmsan_get_metadata+0x13e/0x1c0
[  673.091112][ T9974]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  673.097567][ T9974]  ? kmsan_get_metadata+0x13e/0x1c0
[  673.102859][ T9974]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  673.108762][ T9974]  ? _raw_spin_unlock_irqrestore+0x3f/0x60
[  673.114686][ T9974]  ? kmsan_get_metadata+0x13e/0x1c0
[  673.119972][ T9974]  ? kmsan_get_metadata+0x13e/0x1c0
[  673.125259][ T9974]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  673.131161][ T9974]  ? kmsan_get_metadata+0x13e/0x1c0
[  673.136454][ T9974]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  673.142356][ T9974]  __msan_warning+0x95/0x120
[  673.147060][ T9974]  bch2_copygc+0x1d3f/0x58f0
[  673.151753][ T9974]  ? bch2_copygc+0x418/0x58f0
[  673.156542][ T9974]  ? bch2_copygc+0x418/0x58f0
[  673.161334][ T9974]  ? bch2_copygc+0x418/0x58f0
[  673.166117][ T9974]  bch2_copygc_thread+0x7f7/0xfa0
[  673.171246][ T9974]  ? bch2_copygc_thread+0x214/0xfa0
[  673.176569][ T9974]  kthread+0x3e2/0x540
[  673.180756][ T9974]  ? __pfx_bch2_copygc_thread+0x10/0x10
[  673.186418][ T9974]  ? __pfx_kthread+0x10/0x10
[  673.191133][ T9974]  ret_from_fork+0x6d/0x90
[  673.195642][ T9974]  ? __pfx_kthread+0x10/0x10
[  673.200345][ T9974]  ret_from_fork_asm+0x1a/0x30
[  673.205289][ T9974]  </TASK>
[  673.208683][ T9974] Kernel Offset: disabled
[  673.213070][ T9974] Rebooting in 86400 seconds..