last executing test programs:

48.565365126s ago: executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0001}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
utime(0x0, 0x0)

48.363740137s ago: executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x10, 0x6, 0x948, 0x438, 0x738, 0x0, 0x0, 0xf0, 0x878, 0x878, 0x878, 0x878, 0x878, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'dvmrp0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x7}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9a8)

48.288302869s ago: executing program 3:
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x600}}, {@grpquota}]}, 0xfe, 0x46a, &(0x7f0000000dc0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"})
chdir(&(0x7f0000000240)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)
getgroups(0x2, &(0x7f00000000c0)=[0xffffffffffffffff, <r1=>0xffffffffffffffff])
setresgid(0x0, r1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "fe80f8aea80baf6fa68ed65bf05547fc83e96e", 0x0, 0x7fffffff})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000d40), 0x9, 0x61d, &(0x7f0000000700)="$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")
mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x28}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000001400))
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1b8a877, &(0x7f0000000000)={[{@nr_inodes}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000200), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x2, &(0x7f0000001280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}, 0x3)
syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00')

47.609868294s ago: executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ax25_SIOCDELRT(r0, 0x8930, &(0x7f0000000000)={@bcast={0xa2, 0xa6, 0xa8, 0x3a}, @default, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @bcast]})

47.124331838s ago: executing program 1:
syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8000, &(0x7f0000000240)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',resize,nodiscard,usrquota,errors=remount-ro,discard,resize=0x0000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=macgaelic,uid=', @ANYRESHEX=0x0, @ANYBLOB=',noquota,grpquota,nointegrity,uid=', @ANYRESDEC=0x0, @ANYBLOB=',smackfstransmute=noquota,uid=', @ANYRESOCT, @ANYBLOB=',permit_directio,id=\x00\x00', @ANYRESDEC=0xee01, @ANYBLOB="2c6f626a5f757365723df326265b275d242c412c00"], 0x1, 0x61ac, &(0x7f00000003c0)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240), 0x264e33, 0x0)

47.018092945s ago: executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}}, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[])

44.644008222s ago: executing program 3:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000010007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000049009125745c7388641f9c0e0a"], 0xfe33)

44.112430204s ago: executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0xc0189436, 0x1000000000000)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000580)=""/198, 0xc6}], 0x1, 0x1000, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x15)
ioctl$TCSETSF2(r3, 0x404c4701, &(0x7f00000000c0)={0x0, 0x0, 0x2000000, 0x0, 0x0, "eb0004f5076d3000", 0x3c2c})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000000500030000000000180001801400020073797a5f74756e000000000000000000"], 0x34}}, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c)
ioctl$TCSETSF2(0xffffffffffffffff, 0x5412, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sysinfo(&(0x7f00000004c0)=""/131)

43.897989857s ago: executing program 1:
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x600}}, {@grpquota}]}, 0xfe, 0x46a, &(0x7f0000000dc0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"})
chdir(&(0x7f0000000240)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)
getgroups(0x2, &(0x7f00000000c0)=[0xffffffffffffffff, <r1=>0xffffffffffffffff])
setresgid(0x0, r1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "fe80f8aea80baf6fa68ed65bf05547fc83e96e", 0x0, 0x7fffffff})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000d40), 0x9, 0x61d, &(0x7f0000000700)="$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")
mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x28}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000001400))
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1b8a877, &(0x7f0000000000)={[{@nr_inodes}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000200), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x2, &(0x7f0000001280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}, 0x3)
syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00')

41.470792132s ago: executing program 1:
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8], [0x0, 0x1], [0xfb]], '\x00', [{}, {}, {}, {0x0, 0x1, 0x0, 0x1}]})

39.336209342s ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

38.999579805s ago: executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0x0, 0x0, 0x0, "3ad56a5de30d9c238ab0b14a505bcd461b61ea4929fe544124026fb9fd63c24a"})

34.607399953s ago: executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001980)={0xc, {"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", 0xd00}}, 0x1006)

32.862928573s ago: executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
pipe2(&(0x7f0000001440)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r3, 0x0, 0x2000, 0x0)

31.850552269s ago: executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

31.822319394s ago: executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="6c0900000600"})

31.58631269s ago: executing program 4:
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
ftruncate(r0, 0x8001)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff})
fallocate(r0, 0x8, 0x0, 0x1000)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0xfffffffffffff000, 0x5})

31.245380583s ago: executing program 4:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000001000)="7e212b3f29cefd1b800547e40a99b7bf1f", 0x11}], 0x1}, 0x0)

31.092338927s ago: executing program 4:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
keyctl$session_to_parent(0x12)

30.751667159s ago: executing program 2:
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
close(r0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000048, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

30.468476423s ago: executing program 0:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f00000003c0)={[{@shortname_mixed}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fat=@nocase}, {@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@rodir}, {@uni_xlate}, {@shortname_mixed}, {@shortname_lower}, {@shortname_mixed}]}, 0x25, 0x34f, &(0x7f00000004c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)

30.032666131s ago: executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0)

29.960929381s ago: executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
pipe2(&(0x7f0000001440)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r3, 0x0, 0x2000, 0x0)

29.834405271s ago: executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1f}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]]}, 0x3c}}, 0x0)

29.819818613s ago: executing program 2:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000100100000d0000000a00000000000001"], 0x18}}], 0x2, 0xc800)

29.765458591s ago: executing program 2:
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@multicast2}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x4}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

29.298271284s ago: executing program 2:
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file3\x00', 0x800002, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x5515, &(0x7f000000af40)="$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")
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000004c0)='./bus\x00', 0xa04255, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRESHEX=0x0], 0xfd, 0x345, &(0x7f0000000e40)="$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")
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x80102)
r1 = creat(&(0x7f0000000600)='./file0\x00', 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x8)

28.259963524s ago: executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x6, 0x0, 0x2}]}, 0x30}}, 0x0)

3.072356396s ago: executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r2}, 0x38)
close(r0)

0s ago: executing program 4:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006600), 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = fcntl$dupfd(r1, 0x408, 0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='\x00', &(0x7f0000000140)='ramfs\x00', 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
write$tun(r3, 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1010083, &(0x7f0000000280)=ANY=[@ANYBLOB='C'], 0x1, 0x1de, &(0x7f00000002c0)="$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")
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262<k\xa8\x88\x01\x00fhD\xe7\xb6\x17\x80\x95\xa8\x1e\t\xb01KB\xcb\x00\x1e\x7fE\x7f\x02\x00\x00\x00y<nGR\x94\x99\xb8\x89\x9b\x8f\xd5\xe6\x02\xb5C\xad\"u\xf4>\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3)
fcntl$addseals(r5, 0x409, 0x0)
fcntl$setstatus(r5, 0x4, 0x42800)
mmap(&(0x7f0000586000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@delchain={0x84, 0x65, 0x4, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x1, 0x9}, {0x1, 0xc}, {0xa, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast1}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0xa5}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @multicast2}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0x0, 0xeaa6b629b6c15f53, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}]}}]}, 0x84}}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f00000005c0)=0x80000001, 0x4)
openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r9, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
setsockopt$sock_int(r8, 0x1, 0x0, &(0x7f0000000040), 0x4)
umount2(&(0x7f0000000000)='./file0\x00', 0x8)

kernel console output (not intermixed with test programs):

1: p2 p3 p7
[  111.581457][ T4418] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  111.820370][ T4424] loop4: detected capacity change from 0 to 512
[  114.059956][ T3630] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  114.298548][ T3630] usb 5-1: Using ep0 maxpacket: 8
[  114.428663][ T3630] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[  114.471265][ T3630] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  114.623901][ T3630] usb 5-1: config 135 has no interface number 0
[  114.766457][ T3630] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  115.028763][ T3630] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  115.054412][ T3630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.080133][ T3630] usb 5-1: Product: syz
[  115.093851][ T3630] usb 5-1: Manufacturer: syz
[  115.108951][ T3630] usb 5-1: SerialNumber: syz
[  115.183068][ T3630] usb 5-1: Found UVC 0.00 device syz (18ec:3288)
[  115.195587][ T3630] usb 5-1: No valid video chain found.
[  115.323693][ T4455] loop1: detected capacity change from 0 to 256
[  115.361922][ T4451] loop2: detected capacity change from 0 to 4096
[  115.396805][ T4455] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  115.410776][ T4451] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  115.440695][ T3630] usb 5-1: USB disconnect, device number 4
[  115.492759][ T4451] ntfs3: loop2: mft corrupted
[  115.525161][ T4451] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  115.564346][ T4451] ntfs3: loop2: Failed to load $LogFile.
[  116.079822][ T4439] loop0: detected capacity change from 0 to 32768
[  116.113835][ T4439] XFS: ikeep mount option is deprecated.
[  116.141935][ T4439] XFS: ikeep mount option is deprecated.
[  116.184846][ T4465] nfs4: Unexpected value for 'rdma'
[  116.295210][ T4439] XFS (loop0): Mounting V5 Filesystem
[  116.311251][   T48] Bluetooth: hci5: sending frame failed (-49)
[  116.319423][ T3592] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  116.460542][ T4439] XFS (loop0): Ending clean mount
[  116.478958][ T4439] XFS (loop0): Quotacheck needed: Please wait.
[  116.541435][ T4439] XFS (loop0): Quotacheck: Done.
[  116.669344][ T3674] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  117.005552][ T3584] XFS (loop0): Unmounting Filesystem
[  117.038669][ T3674] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.207840][ T4487] loop1: detected capacity change from 0 to 2048
[  117.222339][ T3674] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  117.328713][ T3674] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  117.337812][ T3674] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  117.360694][ T3674] usb 3-1: SerialNumber: syz
[  117.652234][ T3674] usb 3-1: 0:2 : does not exist
[  117.819796][ T3630] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  117.847372][ T3674] usb 3-1: USB disconnect, device number 8
[  117.999308][ T4125] udevd[4125]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  118.000924][ T4487]  loop1: p2 p3 p7
[  118.068543][ T3630] usb 5-1: Using ep0 maxpacket: 8
[  118.145877][ T4504] nfs4: Unexpected value for 'rdma'
[  118.188696][ T3630] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[  118.209985][ T3630] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  118.279584][ T3630] usb 5-1: config 135 has no interface number 0
[  118.328650][ T3630] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  118.749963][ T3592] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  118.759346][ T3592] Bluetooth: hci3: Injecting HCI hardware error event
[  118.771077][ T3592] Bluetooth: hci3: hardware error 0x00
[  119.388720][ T3630] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  119.445848][ T3630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.501488][ T3630] usb 5-1: Product: syz
[  119.517699][ T3630] usb 5-1: Manufacturer: syz
[  119.543629][ T3630] usb 5-1: SerialNumber: syz
[  119.620730][ T3630] usb 5-1: Found UVC 0.00 device syz (18ec:3288)
[  119.634955][ T3630] usb 5-1: No valid video chain found.
[  119.853068][ T3674] usb 5-1: USB disconnect, device number 5
[  120.558013][ T4521] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET)
[  120.613900][ T4525] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  120.818868][ T3582] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  120.828662][ T3582] Bluetooth: hci0: Injecting HCI hardware error event
[  120.837253][ T3593] Bluetooth: hci0: hardware error 0x00
[  120.845594][ T3674] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  121.145870][ T4536] loop3: detected capacity change from 0 to 512
[  121.175009][ T4536] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  121.217587][ T4536] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  121.238647][ T3674] usb 3-1: device descriptor read/all, error -71
[  121.287158][ T4536] EXT4-fs (loop3): 1 truncate cleaned up
[  121.293181][ T4536] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  121.365801][ T3586] EXT4-fs (loop3): unmounting filesystem.
[  121.449411][ T4530] loop1: detected capacity change from 0 to 32768
[  121.457641][ T4530] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4530)
[  121.471789][ T3592] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  121.482804][ T4530] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.748003][   T48] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  121.755870][ T3592] Bluetooth: hci5: command 0x1003 tx timeout
[  121.862978][ T4530] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  122.030105][ T4530] BTRFS info (device loop1): using free space tree
[  122.418529][ T3592] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  122.427309][ T3592] Bluetooth: hci2: Injecting HCI hardware error event
[  122.436053][   T48] Bluetooth: hci2: hardware error 0x00
[  122.456144][ T4556] loop0: detected capacity change from 0 to 4096
[  122.527278][ T4530] BTRFS info (device loop1): enabling ssd optimizations
[  122.819540][ T4576] loop2: detected capacity change from 0 to 512
[  122.883505][ T3577] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.936952][ T4576] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  122.975093][ T4576] ext4 filesystem being mounted at /root/syzkaller-testdir1373149103/syzkaller.8ijP3j/63/bus supports timestamps until 2038 (0x7fffffff)
[  123.018903][ T3593] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  123.341400][ T4585] hub 9-0:1.0: USB hub found
[  123.350490][ T4585] hub 9-0:1.0: 8 ports detected
[  124.633328][   T48] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  125.191471][ T3583] EXT4-fs (loop2): unmounting filesystem.
[  125.372891][ T3593] Bluetooth: hci5: sending frame failed (-49)
[  125.382445][   T48] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  125.573143][ T4623] loop2: detected capacity change from 0 to 256
[  125.676921][ T4627] loop1: detected capacity change from 0 to 512
[  125.836803][ T4627] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  125.858665][ T4627] ext4 filesystem being mounted at /root/syzkaller-testdir1256588429/syzkaller.08Lwgj/85/bus supports timestamps until 2038 (0x7fffffff)
[  126.106968][ T4631] syz-executor.2[4631] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  126.107086][ T4631] syz-executor.2[4631] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  128.995624][   T48] Bluetooth: hci4: command tx timeout
[  129.385219][ T3577] EXT4-fs (loop1): unmounting filesystem.
[  129.710216][ T3593] Bluetooth: hci5: sending frame failed (-49)
[  129.717664][   T48] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  129.902317][ T4664] loop2: detected capacity change from 0 to 256
[  130.270410][ T4672] syz-executor.2[4672] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  130.270856][ T4672] syz-executor.2[4672] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  131.407909][ T4682] loop3: detected capacity change from 0 to 64
[  131.463785][ T4682] MINIX-fs: bad superblock
[  131.706551][ T4665] loop4: detected capacity change from 0 to 32768
[  131.741955][ T4665] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4665)
[  131.767021][ T4692] loop3: detected capacity change from 0 to 256
[  131.769299][ T4659] loop1: detected capacity change from 0 to 32768
[  131.792662][ T4665] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.814887][ T4692] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  131.835195][ T4665] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  131.851754][ T4665] BTRFS info (device loop4): using free space tree
[  131.863237][   T27] audit: type=1800 audit(1717797000.221:4): pid=4659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=7 res=0 errno=0
[  131.948062][ T4709] loop3: detected capacity change from 0 to 256
[  132.035034][ T4676] loop0: detected capacity change from 0 to 32768
[  132.085703][ T4676] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4676)
[  132.146042][ T4665] BTRFS info (device loop4): enabling ssd optimizations
[  132.215631][ T4676] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  132.238476][ T4676] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  132.247173][ T4676] BTRFS info (device loop0): force zlib compression, level 3
[  132.327330][ T4723] syz-executor.3[4723] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  132.327727][ T4723] syz-executor.3[4723] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  132.409020][ T4676] BTRFS info (device loop0): enabling auto defrag
[  132.588412][ T4676] BTRFS info (device loop0): enabling disk space caching
[  132.705960][ T4676] BTRFS info (device loop0): max_inline at 0
[  132.960624][ T4676] BTRFS info (device loop0): force clearing of disk cache
[  132.971185][ T3578] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  133.012472][ T4676] BTRFS info (device loop0): turning on sync discard
[  133.040921][ T1252] ieee802154 phy0 wpan0: encryption failed: -22
[  133.047391][ T1252] ieee802154 phy1 wpan1: encryption failed: -22
[  133.082117][ T4725] loop2: detected capacity change from 0 to 64
[  133.098884][ T4725] MINIX-fs: bad superblock
[  133.099373][ T4676] BTRFS info (device loop0): disk space caching is enabled
[  133.413523][ T4676] BTRFS info (device loop0): enabling ssd optimizations
[  133.433714][ T4676] BTRFS info (device loop0): rebuilding free space tree
[  133.462882][ T4676] BTRFS info (device loop0): disabling free space tree
[  133.471231][ T4676] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  133.481614][ T4676] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  133.537990][ T4733] loop3: detected capacity change from 0 to 2048
[  133.602037][ T4758] loop2: detected capacity change from 0 to 256
[  133.712247][ T4758] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  133.821071][ T3584] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  133.827729][ T4733]  loop3: p2 p3 p7
[  134.360130][ T4780] loop4: detected capacity change from 0 to 64
[  134.396183][ T4780] MINIX-fs: bad superblock
[  134.912384][ T4795] hub 9-0:1.0: USB hub found
[  134.917967][ T4795] hub 9-0:1.0: 8 ports detected
[  136.008563][   T22] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  136.289881][   T22] usb 3-1: Using ep0 maxpacket: 16
[  136.418553][   T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.435997][   T22] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  136.458790][   T22] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  136.476585][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.497001][   T22] usb 3-1: config 0 descriptor??
[  136.937117][ T4840] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  136.979342][ T4840] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  137.002885][   T22] HID 045e:07da: Invalid code 65791 type 1
[  137.038175][   T22] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input17
[  137.054835][ T4845] loop0: detected capacity change from 0 to 256
[  137.072487][   T22] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  137.113564][ T4845] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  137.140882][ T4826] loop4: detected capacity change from 0 to 32768
[  137.173885][ T4826] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4826)
[  137.192005][ T4826] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  137.208969][   T27] audit: type=1804 audit(1717797005.561:5): pid=4849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2319962787/syzkaller.Jz1by1/70/file0/bus/bus" dev="overlay" ino=10 res=1 errno=0
[  137.234770][    C0] vkms_vblank_simulate: vblank timer overrun
[  137.245541][ T4826] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  137.259850][ T4826] BTRFS info (device loop4): using free space tree
[  137.368041][ T4826] BTRFS info (device loop4): enabling ssd optimizations
[  137.501963][ T3578] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  138.582465][   T26] usb 3-1: USB disconnect, device number 11
[  138.652269][ T4869] loop0: detected capacity change from 0 to 2048
[  138.827977][ T4881] loop1: detected capacity change from 0 to 1764
[  139.095936][ T4893] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  139.142846][ T4869]  loop0: p2 p3 p7
[  139.205718][ T4893] batman_adv: batadv0: Adding interface: team0
[  139.238083][ T4893] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.263466][    C0] vkms_vblank_simulate: vblank timer overrun
[  139.321713][ T4893] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  139.344162][ T4898] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  139.367359][ T4898] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'.
[  139.417557][ T4898] device team0 entered promiscuous mode
[  139.436446][ T4898] device team_slave_0 entered promiscuous mode
[  139.445448][ T4898] device team_slave_1 entered promiscuous mode
[  139.491772][ T4898] 8021q: adding VLAN 0 to HW filter on device team0
[  139.537722][ T4898] batman_adv: batadv0: Interface activated: team0
[  139.590879][ T4898] batman_adv: batadv0: Interface deactivated: team0
[  139.619114][ T4898] batman_adv: batadv0: Removing interface: team0
[  139.641946][ T4898] bridge0: port 3(team0) entered blocking state
[  139.648760][ T4898] bridge0: port 3(team0) entered disabled state
[  139.663201][ T4898] bridge0: port 3(team0) entered blocking state
[  139.671352][ T4898] bridge0: port 3(team0) entered forwarding state
[  140.296897][ T4891] loop3: detected capacity change from 0 to 32768
[  140.353264][ T4913] loop4: detected capacity change from 0 to 512
[  140.368434][ T4885] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  140.638774][ T4885] usb 3-1: Using ep0 maxpacket: 8
[  140.756510][ T4924] loop0: detected capacity change from 0 to 64
[  140.795845][ T4924] hfs: creator requires a 4 character value
[  140.803500][ T4924] hfs: unable to parse mount options
[  140.934486][ T4885] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  140.953629][ T4885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.964972][ T4885] usb 3-1: Product: syz
[  140.973136][ T4885] usb 3-1: Manufacturer: syz
[  140.978021][ T4885] usb 3-1: SerialNumber: syz
[  140.988299][ T4885] usb 3-1: config 0 descriptor??
[  141.040693][ T4885] option 3-1:0.0: GSM modem (1-port) converter detected
[  141.158024][ T4939] loop0: detected capacity change from 0 to 256
[  141.309593][ T4943] Bluetooth: MGMT ver 1.22
[  141.417791][ T4943] device  entered promiscuous mode
[  141.493815][ T4947] syz-executor.0[4947] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  141.494277][ T4947] syz-executor.0[4947] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  142.390004][ T4946] loop4: detected capacity change from 0 to 2048
[  142.770631][ T4959] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  143.122115][ T4597] usb 3-1: USB disconnect, device number 12
[  143.546466][ T4946]  loop4: p2 p3 p7
[  143.549408][ T4597] option 3-1:0.0: device disconnected
[  143.882791][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  143.949241][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  144.001012][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  144.047290][ T4967] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  144.111977][ T4973] loop4: detected capacity change from 0 to 2048
[  144.131201][ T4970] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.3'.
[  144.146488][ T4973] EXT4-fs: Ignoring removed mblk_io_submit option
[  144.189629][ T4973] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  144.458967][ T3578] EXT4-fs (loop4): unmounting filesystem.
[  144.623960][ T4987] loop4: detected capacity change from 0 to 64
[  144.696015][ T4958] loop0: detected capacity change from 0 to 32768
[  144.717299][ T4958] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4958)
[  144.772467][ T4958] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  144.789895][ T4958] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  144.818846][ T4958] BTRFS info (device loop0): force zlib compression, level 3
[  144.837070][ T4958] BTRFS info (device loop0): enabling auto defrag
[  144.865015][ T4958] BTRFS info (device loop0): enabling disk space caching
[  144.890326][ T4958] BTRFS info (device loop0): max_inline at 0
[  144.915228][ T4958] BTRFS info (device loop0): force clearing of disk cache
[  144.953314][ T4958] BTRFS info (device loop0): turning on sync discard
[  144.986179][ T4958] BTRFS info (device loop0): disk space caching is enabled
[  145.196957][ T4958] BTRFS info (device loop0): enabling ssd optimizations
[  145.216302][ T4958] BTRFS info (device loop0): rebuilding free space tree
[  145.270325][ T4992] loop3: detected capacity change from 0 to 8192
[  145.291933][ T4958] BTRFS info (device loop0): disabling free space tree
[  145.316166][ T4958] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  145.337373][ T4992] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  145.357145][ T4958] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  145.377492][ T4992] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  145.397864][ T4992] REISERFS (device loop3): using ordered data mode
[  145.404659][ T4992] reiserfs: using flush barriers
[  145.427934][ T4992] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  145.486383][ T4992] REISERFS (device loop3): checking transaction log (loop3)
[  145.546754][ T5018] loop4: detected capacity change from 0 to 2048
[  145.559959][ T4992] REISERFS (device loop3): Using r5 hash to sort names
[  145.571402][ T5018] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  145.769509][ T5018] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  145.942724][ T4992] reiserfs: enabling write barrier flush mode
[  146.217390][ T5018] EXT4-fs (loop4): failed to initialize system zone (-117)
[  146.224882][ T5018] EXT4-fs (loop4): mount failed
[  146.277514][ T4992] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  146.290038][ T3584] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  146.486766][ T5018] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  146.768470][ T5039] loop2: detected capacity change from 0 to 64
[  146.816937][   T27] audit: type=1326 audit(1717797015.171:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aca07cf69 code=0x7ffc0000
[  146.817989][ T5043] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  146.898529][   T27] audit: type=1326 audit(1717797015.211:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aca07cf69 code=0x7ffc0000
[  146.982586][   T27] audit: type=1326 audit(1717797015.221:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aca07cf69 code=0x7ffc0000
[  147.051930][   T27] audit: type=1326 audit(1717797015.221:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aca07cf69 code=0x7ffc0000
[  147.087506][ T5051] loop3: detected capacity change from 0 to 17
[  147.116787][   T27] audit: type=1326 audit(1717797015.221:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aca07cf69 code=0x7ffc0000
[  147.140574][ T5051] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  147.162352][   T27] audit: type=1326 audit(1717797015.221:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4aca07a6e7 code=0x7ffc0000
[  147.209056][ T5051] BFS-fs: bfs_iget(): Bad inode number loop3:00000002
[  147.231155][   T27] audit: type=1326 audit(1717797015.221:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4aca0403b9 code=0x7ffc0000
[  147.277468][   T27] audit: type=1326 audit(1717797015.221:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f4aca07cf69 code=0x7ffc0000
[  147.356233][   T27] audit: type=1326 audit(1717797015.231:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4aca07a6e7 code=0x7ffc0000
[  147.429904][   T27] audit: type=1326 audit(1717797015.231:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4aca0403b9 code=0x7ffc0000
[  147.645694][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  147.678260][ T5062] loop4: detected capacity change from 0 to 2048
[  147.728593][ T5062] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  147.765519][ T5062] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  147.805212][ T5062] EXT4-fs (loop4): failed to initialize system zone (-117)
[  147.855094][ T5062] EXT4-fs (loop4): mount failed
[  147.949953][ T5077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  148.679404][ T5062] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  148.790482][ T5086] loop4: detected capacity change from 0 to 17
[  148.810871][ T5086] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  148.863634][ T5086] BFS-fs: bfs_iget(): Bad inode number loop4:00000002
[  149.515362][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  150.464558][ T5131] loop0: detected capacity change from 0 to 512
[  150.547766][ T5131] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #16: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[  150.605874][ T5131] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 16 (err -117)
[  150.620528][ T5143] loop3: detected capacity change from 0 to 2048
[  150.662849][ T5131] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  150.688600][ T5131] ext4 filesystem being mounted at /root/syzkaller-testdir2266955834/syzkaller.O8srYc/91/file1 supports timestamps until 2038 (0x7fffffff)
[  150.731513][ T5146] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.784835][ T5131] EXT4-fs error (device loop0): __ext4_get_inode_loc:4495: comm syz-executor.0: Invalid inode table block 2135579478 in block_group 0
[  150.849596][ T5150] loop2: detected capacity change from 0 to 16
[  150.867153][ T3584] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 3: comm syz-executor.0: lblock 0 mapped to illegal pblock 3 (length 1)
[  150.895110][ T5150] erofs: (device loop2): erofs_read_inode: unsupported datalayout 5 of nid 36
[  150.965584][ T3584] EXT4-fs (loop0): unmounting filesystem.
[  150.977577][ T3584] EXT4-fs error (device loop0): __ext4_get_inode_loc:4495: comm syz-executor.0: Invalid inode table block 2135579478 in block_group 0
[  151.011052][ T3584] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  151.028727][ T3584] EXT4-fs error (device loop0): ext4_quota_off:7066: inode #3: comm syz-executor.0: mark_inode_dirty error
[  151.177535][ T5156] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  151.433018][ T4885] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  151.609456][ T5164] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  151.758780][ T4885] usb 3-1: Using ep0 maxpacket: 32
[  151.929749][ T4885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  152.277864][ T4885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  152.342545][ T4885] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  152.378461][   T27] kauditd_printk_skb: 251 callbacks suppressed
[  152.378481][   T27] audit: type=1326 audit(1717797020.691:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5165 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248867cf69 code=0x7ffc0000
[  152.448453][ T4885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.461943][   T27] audit: type=1326 audit(1717797020.691:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5165 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248867cf69 code=0x7ffc0000
[  152.487357][   T27] audit: type=1326 audit(1717797020.691:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5165 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f248867cf69 code=0x7ffc0000
[  152.518593][   T27] audit: type=1326 audit(1717797020.691:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5165 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248867cf69 code=0x7ffc0000
[  152.529303][ T4885] usb 3-1: config 0 descriptor??
[  152.554563][   T27] audit: type=1326 audit(1717797020.691:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5165 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f248867cf69 code=0x7ffc0000
[  152.604196][   T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.613036][ T5173] loop1: detected capacity change from 0 to 512
[  152.615909][ T5150] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  152.624661][   T27] audit: type=1326 audit(1717797020.821:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5165 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248867cf69 code=0x7ffc0000
[  152.656019][   T27] audit: type=1326 audit(1717797020.821:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5165 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f248867a6e7 code=0x7ffc0000
[  152.683297][   T27] audit: type=1326 audit(1717797020.821:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5165 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f24886403b9 code=0x7ffc0000
[  152.713207][ T4885] hub 3-1:0.0: USB hub found
[  152.721777][   T27] audit: type=1326 audit(1717797020.821:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5165 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f248867cf69 code=0x7ffc0000
[  152.749942][ T5173] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[  152.777685][   T27] audit: type=1326 audit(1717797020.821:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5165 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f248867a6e7 code=0x7ffc0000
[  152.824229][ T5173] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 16 (err -117)
[  152.865373][   T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.891032][ T5173] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  152.914858][ T5173] ext4 filesystem being mounted at /root/syzkaller-testdir1256588429/syzkaller.08Lwgj/122/file1 supports timestamps until 2038 (0x7fffffff)
[  152.985514][   T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.003436][ T5173] EXT4-fs error (device loop1): __ext4_get_inode_loc:4495: comm syz-executor.1: Invalid inode table block 2135579478 in block_group 0
[  153.028779][ T4885] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[  153.055612][ T3577] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 3: comm syz-executor.1: lblock 0 mapped to illegal pblock 3 (length 1)
[  153.097688][   T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.145598][ T3577] EXT4-fs (loop1): unmounting filesystem.
[  153.155677][ T3577] EXT4-fs error (device loop1): __ext4_get_inode_loc:4495: comm syz-executor.1: Invalid inode table block 2135579478 in block_group 0
[  153.201075][ T3577] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  153.225390][ T3577] EXT4-fs error (device loop1): ext4_quota_off:7066: inode #3: comm syz-executor.1: mark_inode_dirty error
[  153.308196][ T5188] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  153.332186][ T3593] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  153.342832][ T3593] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  153.351542][ T3593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  153.366871][ T3593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  153.377341][ T3593] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  153.388574][ T3593] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  153.395985][ T4885] hid-generic 0003:046D:C314.0006: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.2-1/input0
[  153.556155][ T5150] loop2: detected capacity change from 0 to 1024
[  153.739269][   T22] usb 3-1: USB disconnect, device number 13
[  153.767760][    C0] vxcan1: j1939_tp_rxtimer: 0xffff8880560fc000: rx timeout, send abort
[  153.830480][ T5189] chnl_net:caif_netlink_parms(): no params data found
[  153.973078][ T5201] loop4: detected capacity change from 0 to 512
[  153.994226][ T5201] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  154.016770][ T5201] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  154.054859][ T5201] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz-executor.4: bg 0: block 18: invalid block bitmap
[  154.079111][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.086719][ T5201] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6171: Corrupt filesystem
[  154.086765][ T5189] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.109490][ T5201] EXT4-fs (loop4): 1 truncate cleaned up
[  154.112791][ T5189] device bridge_slave_0 entered promiscuous mode
[  154.115178][ T5201] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  154.163434][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.178170][ T5201] ext2 filesystem being mounted at /root/syzkaller-testdir4222194783/syzkaller.t74Mb4/116/file1 supports timestamps until 2038 (0x7fffffff)
[  154.179371][ T5189] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.236371][ T5189] device bridge_slave_1 entered promiscuous mode
[  154.278083][    C0] vxcan1: j1939_tp_rxtimer: 0xffff8880560fc000: abort rx timeout. Force session deactivation
[  154.539845][ T5189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.570152][ T5189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.599083][ T3592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  154.615791][ T3592] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  154.620171][ T3578] EXT4-fs (loop4): unmounting filesystem.
[  154.630145][ T3593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  154.640028][ T3593] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  154.647873][ T3593] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  154.665986][ T3593] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  154.754382][ T5189] team0: Port device team_slave_0 added
[  154.771314][   T46] device hsr_slave_0 left promiscuous mode
[  154.781532][   T46] device hsr_slave_1 left promiscuous mode
[  154.789438][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.797299][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.808750][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.816589][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.863756][   T46] device bridge_slave_1 left promiscuous mode
[  154.881146][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.917947][   T46] device bridge_slave_0 left promiscuous mode
[  154.935078][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.967103][   T46] device veth1_macvtap left promiscuous mode
[  154.985021][   T46] device veth0_macvtap left promiscuous mode
[  154.994033][   T46] device veth1_vlan left promiscuous mode
[  155.005185][   T46] device veth0_vlan left promiscuous mode
[  155.402757][   T46] team0 (unregistering): Port device team_slave_1 removed
[  155.428071][   T46] team0 (unregistering): Port device team_slave_0 removed
[  155.446315][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.458710][   T48] Bluetooth: hci2: command tx timeout
[  155.490995][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.641785][   T46] bond0 (unregistering): Released all slaves
[  155.775467][ T5189] team0: Port device team_slave_1 added
[  155.810825][ T5227] loop3: detected capacity change from 0 to 32768
[  155.991382][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.025552][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.064792][ T5189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.082371][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.089679][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.118828][ T5189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.261325][ T5189] device hsr_slave_0 entered promiscuous mode
[  156.275146][ T5189] device hsr_slave_1 entered promiscuous mode
[  156.283047][ T5189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  156.292007][ T5189] Cannot create hsr debugfs directory
[  156.489020][ T5217] chnl_net:caif_netlink_parms(): no params data found
[  156.738775][   T48] Bluetooth: hci1: command tx timeout
[  156.753738][ T5217] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.769264][ T5217] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.787405][ T5217] device bridge_slave_0 entered promiscuous mode
[  156.931204][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.942177][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.968867][ T5217] device bridge_slave_1 entered promiscuous mode
[  157.142567][ T5217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.175215][ T5217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.425681][ T5217] team0: Port device team_slave_0 added
[  157.558609][   T48] Bluetooth: hci2: command tx timeout
[  157.743728][ T5217] team0: Port device team_slave_1 added
[  157.886172][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  158.230357][ T5257] loop4: detected capacity change from 0 to 8192
[  158.281090][ T5257] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  158.333525][ T5257] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  158.351810][ T5257] REISERFS (device loop4): using ordered data mode
[  158.358648][ T5257] reiserfs: using flush barriers
[  158.366188][ T5257] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  158.389414][ T5257] REISERFS (device loop4): checking transaction log (loop4)
[  158.393376][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.405337][ T5257] REISERFS (device loop4): Using r5 hash to sort names
[  158.415678][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.433168][ T5257] reiserfs: enabling write barrier flush mode
[  158.474468][ T5257] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  158.493140][ T5217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.538117][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.553525][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.658550][ T5217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.802987][ T5217] device hsr_slave_0 entered promiscuous mode
[  158.818521][ T3593] Bluetooth: hci1: command tx timeout
[  158.839977][ T5217] device hsr_slave_1 entered promiscuous mode
[  158.869232][ T5217] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  158.876848][ T5217] Cannot create hsr debugfs directory
[  158.888389][ T4884] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  158.935591][ T5189] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  158.961531][ T5189] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  159.021563][ T5189] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  159.038590][ T5189] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  159.082716][ T5274] loop4: detected capacity change from 0 to 256
[  159.128461][ T4884] usb 3-1: Using ep0 maxpacket: 8
[  159.140773][ T5274] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  159.182950][ T5268] loop3: detected capacity change from 0 to 32768
[  159.354174][ T5189] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.445827][ T5217] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.488697][ T4884] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  159.497792][ T4884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.519159][ T5278] xt_CT: You must specify a L4 protocol and not use inversions on it
[  159.528267][ T5189] 8021q: adding VLAN 0 to HW filter on device team0
[  159.538494][ T4884] usb 3-1: Product: syz
[  159.542728][ T4884] usb 3-1: Manufacturer: syz
[  159.547361][ T4884] usb 3-1: SerialNumber: syz
[  159.558956][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  159.574948][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  159.597678][ T4884] usb 3-1: config 0 descriptor??
[  159.618806][ T3593] Bluetooth: hci2: command tx timeout
[  159.637509][ T5217] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.649854][ T4884] option 3-1:0.0: GSM modem (1-port) converter detected
[  159.697364][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  159.721339][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  159.757187][ T4595] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.765901][ T4595] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.817836][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  159.943237][ T5282] serio: Serial port pts0
[  159.963417][ T5217] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.031146][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  160.040287][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  160.074359][ T4600] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.081525][ T4600] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.090211][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  160.109392][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  160.118790][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  160.128148][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  160.139812][ T5287] openvswitch: : Dropping previously announced user features
[  160.171155][ T5217] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.186818][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  160.196446][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  160.205540][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  160.214573][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  160.223563][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  160.233250][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  160.242355][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  160.271092][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  160.575249][ T5217] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  160.614658][ T5217] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  160.644097][ T5217] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  160.679349][ T5217] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  160.698868][ T4884] usb 3-1: USB disconnect, device number 14
[  160.707325][ T4884] option 3-1:0.0: device disconnected
[  160.899003][ T3593] Bluetooth: hci1: command tx timeout
[  160.951982][   T27] kauditd_printk_skb: 77 callbacks suppressed
[  160.951999][   T27] audit: type=1326 audit(1717797029.311:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5309 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92df87cf69 code=0x7ffc0000
[  160.974776][ T5311] loop4: detected capacity change from 0 to 8
[  160.994187][   T27] audit: type=1326 audit(1717797029.311:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5309 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92df87cf69 code=0x7ffc0000
[  161.027403][   T27] audit: type=1326 audit(1717797029.311:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5309 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92df87cf69 code=0x7ffc0000
[  161.036500][ T5311] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  161.070536][   T27] audit: type=1326 audit(1717797029.311:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5309 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92df87cf69 code=0x7ffc0000
[  161.095621][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  161.105668][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  161.118086][ T5189] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.127968][   T27] audit: type=1326 audit(1717797029.351:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5309 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92df87cf69 code=0x7ffc0000
[  161.188012][ T5311] cramfs: root is not a directory
[  161.201239][   T27] audit: type=1326 audit(1717797029.351:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5309 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92df87cf69 code=0x7ffc0000
[  161.277539][   T27] audit: type=1326 audit(1717797029.351:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5309 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92df87cf69 code=0x7ffc0000
[  161.278070][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  161.339559][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  161.361163][   T27] audit: type=1326 audit(1717797029.351:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5309 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f92df87cf69 code=0x7ffc0000
[  161.370459][ T5217] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.441244][   T27] audit: type=1326 audit(1717797029.351:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5309 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92df87cf69 code=0x7ffc0000
[  161.492669][   T27] audit: type=1326 audit(1717797029.351:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5309 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92df87cf69 code=0x7ffc0000
[  161.516729][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  161.535149][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  161.591727][ T5217] 8021q: adding VLAN 0 to HW filter on device team0
[  161.623735][ T5189] device veth0_vlan entered promiscuous mode
[  161.659165][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  161.667373][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  161.689257][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  161.697334][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  161.698693][ T3593] Bluetooth: hci2: command tx timeout
[  161.719149][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  161.728140][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  161.739066][ T4600] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.746322][ T4600] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.754316][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  161.763406][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  161.772161][ T4600] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.779867][ T4600] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.792083][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  161.819236][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  161.854709][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  161.865103][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  161.877492][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  161.896243][ T5189] device veth1_vlan entered promiscuous mode
[  161.948140][ T5217] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  161.978942][ T5217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  161.999637][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  162.009182][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  162.019013][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  162.028571][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  162.038069][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  162.047949][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  162.057182][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  162.105219][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  162.115033][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  162.134058][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  162.186735][ T5189] device veth0_macvtap entered promiscuous mode
[  162.219262][ T5189] device veth1_macvtap entered promiscuous mode
[  162.309002][   T14] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  162.317849][ T5314] loop3: detected capacity change from 0 to 32768
[  162.354552][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.372990][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.385520][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.396771][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.406812][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.417569][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.436456][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.448071][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.459785][ T5189] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.473116][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  162.481799][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  162.490107][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  162.500345][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  162.511461][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.523834][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.540013][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.552115][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.558750][   T14] usb 3-1: Using ep0 maxpacket: 16
[  162.562267][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.588469][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.600900][ T5189] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.629678][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  162.649292][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  162.671857][ T5189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.683011][ T5189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.684544][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.708654][ T5189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.717494][ T5189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.726630][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.778446][   T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  162.795967][   T14] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  162.805593][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  162.820335][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  162.831362][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.845664][ T5217] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.885464][   T14] usb 3-1: config 0 descriptor??
[  162.917210][   T46] device hsr_slave_0 left promiscuous mode
[  162.932546][   T46] device hsr_slave_1 left promiscuous mode
[  162.942810][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.954167][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.967850][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.983071][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.987775][ T3593] Bluetooth: hci1: command tx timeout
[  163.005604][   T46] bridge0: port 3(team0) entered disabled state
[  163.017988][   T46] device bridge_slave_1 left promiscuous mode
[  163.032233][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.050004][   T46] device bridge_slave_0 left promiscuous mode
[  163.056373][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.074678][   T46] device veth1_macvtap left promiscuous mode
[  163.081487][   T46] device veth0_macvtap left promiscuous mode
[  163.087734][   T46] device veth1_vlan left promiscuous mode
[  163.094823][   T46] device veth0_vlan left promiscuous mode
[  163.395417][   T14] microsoft 0003:045E:07DA.0007: No inputs registered, leaving
[  163.417514][   T14] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  163.443064][   T46] device team_slave_1 left promiscuous mode
[  163.453607][   T14] microsoft 0003:045E:07DA.0007: no inputs found
[  163.466549][   T14] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway
[  163.491145][   T46] team0 (unregistering): Port device team_slave_1 removed
[  163.506223][   T46] device team_slave_0 left promiscuous mode
[  163.515764][   T46] team0 (unregistering): Port device team_slave_0 removed
[  163.530725][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.555698][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.581961][ T4884] usb 3-1: USB disconnect, device number 15
[  163.703427][   T46] bond0 (unregistering): Released all slaves
[  163.807406][ T5348] device vlan2 entered promiscuous mode
[  163.829548][ T5348] bridge0: port 3(vlan2) entered blocking state
[  163.842356][ T5348] bridge0: port 3(vlan2) entered disabled state
[  163.897725][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  163.925966][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  163.965866][ T5364] loop3: detected capacity change from 0 to 32768
[  163.975275][ T4038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.996869][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  163.998809][ T4038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.006306][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  164.028727][ T5217] device veth0_vlan entered promiscuous mode
[  164.073879][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  164.085613][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  164.109897][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  164.140533][ T5217] device veth1_vlan entered promiscuous mode
[  164.154006][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  164.154660][ T4187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.207827][ T4187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.246676][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  164.257743][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  164.286698][ T5217] device veth0_macvtap entered promiscuous mode
[  164.313372][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  164.329961][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  164.410272][ T5217] device veth1_macvtap entered promiscuous mode
[  164.433908][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  164.450481][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  164.471959][ T5373] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  164.497227][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.518738][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.548236][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.568180][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.603908][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.634416][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.677056][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.711835][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.780764][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.797680][ T5033] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  164.813193][ T5033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  164.836772][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.857838][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.897659][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.923422][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.939039][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.949712][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.961350][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.984094][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  165.001090][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  165.030574][ T5217] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.046097][ T5217] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.080714][ T5217] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.097373][ T5217] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.191393][ T5389] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'.
[  165.226930][ T5389] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'.
[  165.363824][ T3643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.398170][ T3643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.453249][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  165.510158][ T3643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.519768][ T3643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.564727][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  165.938026][ T5413] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[  166.144268][ T5381] loop2: detected capacity change from 0 to 32768
[  166.199908][ T5381] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5381)
[  166.232459][ T5420] loop1: detected capacity change from 0 to 1024
[  166.267809][ T5381] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  166.297592][ T5381] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  166.320967][ T5381] BTRFS info (device loop2): enabling auto defrag
[  166.353395][ T5381] BTRFS info (device loop2): force clearing of disk cache
[  166.378508][ T5381] BTRFS info (device loop2): using free space tree
[  166.399654][ T3643] hfsplus: b-tree write err: -5, ino 4
[  166.653029][ T5381] BTRFS info (device loop2): enabling ssd optimizations
[  166.699074][ T5381] BTRFS info (device loop2): rebuilding free space tree
[  166.837397][ T5399] loop4: detected capacity change from 0 to 32768
[  167.069038][ T3583] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  167.134395][ T5466] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  167.577843][   T27] kauditd_printk_skb: 53 callbacks suppressed
[  167.577859][   T27] audit: type=1800 audit(1717797035.931:417): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="/" dev="fuse" ino=1 res=0 errno=0
[  167.679586][ T5487] 9pnet_fd: p9_fd_create_tcp (5487): problem connecting socket to 127.0.0.1
[  167.895453][ T5493] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'.
[  167.910740][ T3018] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  167.928184][ T5497] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  167.979166][ T5496] loop4: detected capacity change from 0 to 1024
[  168.068211][ T4038] hfsplus: b-tree write err: -5, ino 4
[  168.159111][ T3018] usb 2-1: Using ep0 maxpacket: 8
[  168.448701][ T3018] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  168.473075][ T3018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.489474][ T5523] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'.
[  168.502548][ T3018] usb 2-1: Product: syz
[  168.513784][ T3018] usb 2-1: Manufacturer: syz
[  168.526608][ T3018] usb 2-1: SerialNumber: syz
[  168.553373][ T3018] usb 2-1: config 0 descriptor??
[  168.605812][ T3018] option 2-1:0.0: GSM modem (1-port) converter detected
[  168.800656][ T5543] loop3: detected capacity change from 0 to 256
[  168.834485][ T5543] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  168.916926][ T5543] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  168.927300][ T5550] device  entered promiscuous mode
[  169.025038][ T5548] loop2: detected capacity change from 0 to 4096
[  169.043415][ T5548] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  169.519796][ T4597] usb 2-1: USB disconnect, device number 3
[  169.532367][ T4597] option 2-1:0.0: device disconnected
[  169.718503][ T5575] loop0: detected capacity change from 0 to 40427
[  169.731715][ T5575] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  169.739893][ T5575] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  169.756096][ T5575] F2FS-fs (loop0): invalid crc value
[  169.770442][ T5575] F2FS-fs (loop0): Found nat_bits in checkpoint
[  169.870497][ T5575] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  169.878120][ T5575] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  169.906787][   T27] audit: type=1800 audit(1717797038.261:418): pid=5575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=10 res=0 errno=0
[  170.193382][   T27] audit: type=1800 audit(1717797038.551:419): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1941 res=0 errno=0
[  170.460221][ T3593] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  170.470147][ T3593] Bluetooth: hci4: Injecting HCI hardware error event
[  170.482931][ T3593] Bluetooth: hci4: hardware error 0x00
[  170.960489][ T5189] syz-executor.0: attempt to access beyond end of device
[  170.960489][ T5189] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  171.010950][ T5608] loop2: detected capacity change from 0 to 2048
[  171.035688][ T5608] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  171.879457][ T5608] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  171.901262][ T5608] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  171.911991][ T5608] UDF-fs: Scanning with blocksize 512 failed
[  171.972116][ T5608] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  172.313778][ T5637] loop1: detected capacity change from 0 to 256
[  172.340376][ T5637] exfat: Deprecated parameter 'namecase'
[  172.358877][ T5637] exfat: Deprecated parameter 'namecase'
[  172.364716][ T5637] exfat: Deprecated parameter 'utf8'
[  172.400411][ T5637] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0x01284b2f, utbl_chksum : 0xe619d30d)
[  172.731545][ T5656] loop2: detected capacity change from 0 to 256
[  172.738545][ T3593] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  173.514020][ T5661] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[  173.863592][ T5682] loop1: detected capacity change from 0 to 256
[  173.883732][ T5682] exfat: Deprecated parameter 'namecase'
[  173.889768][ T5682] exfat: Deprecated parameter 'namecase'
[  173.895605][ T5682] exfat: Deprecated parameter 'utf8'
[  173.907638][ T5682] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0x01284b2f, utbl_chksum : 0xe619d30d)
[  173.945349][ T5684] loop2: detected capacity change from 0 to 1024
[  173.955149][ T5681] loop4: detected capacity change from 0 to 2048
[  174.081808][ T5681] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  174.116532][ T5681] ext4 filesystem being mounted at /root/syzkaller-testdir4222194783/syzkaller.t74Mb4/160/bus supports timestamps until 2038 (0x7fffffff)
[  174.320766][ T5699] loop3: detected capacity change from 0 to 256
[  175.160026][ T3578] EXT4-fs (loop4): unmounting filesystem.
[  175.433669][ T5719] loop1: detected capacity change from 0 to 512
[  175.472142][ T5719] EXT4-fs (loop1): orphan cleanup on readonly fs
[  175.473171][ T5721] loop4: detected capacity change from 0 to 256
[  175.502849][ T5719] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 248: padding at end of block bitmap is not set
[  175.533201][ T5721] exfat: Deprecated parameter 'namecase'
[  175.556096][ T5721] exfat: Deprecated parameter 'namecase'
[  175.582758][ T5721] exfat: Deprecated parameter 'utf8'
[  175.591083][ T5726] loop0: detected capacity change from 0 to 8192
[  175.599788][ T5726] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  175.603533][ T5719] Quota error (device loop1): write_blk: dquota write failed
[  175.613612][ T5726] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  175.635813][ T5721] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0x01284b2f, utbl_chksum : 0xe619d30d)
[  175.648171][ T5719] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  175.655051][ T5726] REISERFS (device loop0): using ordered data mode
[  175.660006][ T5719] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz-executor.1: Failed to acquire dquot type 1
[  175.678466][ T5726] reiserfs: using flush barriers
[  175.694133][ T5719] EXT4-fs (loop1): 1 truncate cleaned up
[  175.700435][ T5726] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  175.701714][ T5719] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  175.732929][ T5726] REISERFS (device loop0): checking transaction log (loop0)
[  175.778190][ T5719] autofs4:pid:5719:autofs_fill_super: called with bogus options
[  175.778587][ T5726] REISERFS (device loop0): Using r5 hash to sort names
[  175.858083][ T5726] reiserfs: enabling write barrier flush mode
[  175.875068][ T5726] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  175.929525][   T27] audit: type=1804 audit(1717797044.281:420): pid=5726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3823765595/syzkaller.vQWbpS/33/file0/file0" dev="loop0" ino=2 res=1 errno=0
[  176.103607][ T5735] loop4: detected capacity change from 0 to 2048
[  176.266576][ T5735] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  176.283457][ T5735] ext4 filesystem being mounted at /root/syzkaller-testdir4222194783/syzkaller.t74Mb4/163/bus supports timestamps until 2038 (0x7fffffff)
[  177.283545][ T3578] EXT4-fs (loop4): unmounting filesystem.
[  177.442423][ T5756] loop0: detected capacity change from 0 to 2048
[  177.482081][ T5756] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  177.510957][ T5756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  177.565078][ T5769] loop3: detected capacity change from 0 to 1024
[  177.714819][ T3966] hfsplus: b-tree write err: -5, ino 4
[  178.064039][ T5783] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  178.475091][ T5783] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  178.942934][ T5787] device bond0 entered promiscuous mode
[  178.951218][ T5787] device bond_slave_0 entered promiscuous mode
[  178.957684][ T5787] device bond_slave_1 entered promiscuous mode
[  178.968105][ T5787] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  178.992715][ T5787] device bond0 left promiscuous mode
[  179.007880][ T5787] device bond_slave_0 left promiscuous mode
[  179.035979][ T5787] device bond_slave_1 left promiscuous mode
[  179.251124][ T5804] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  179.270804][ T5804] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  179.335904][ T5807] loop4: detected capacity change from 0 to 16
[  179.375162][ T5807] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  179.434285][ T5812] loop3: detected capacity change from 0 to 128
[  179.577427][ T5217] EXT4-fs (loop1): unmounting filesystem.
[  179.794732][ T5828] loop1: detected capacity change from 0 to 512
[  179.817968][ T5828] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  179.845854][ T5834] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  179.865232][ T5834] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  179.876817][ T5828] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  179.923918][ T5828] ext4 filesystem being mounted at /root/syzkaller-testdir2326933995/syzkaller.Fw1opS/27/file0 supports timestamps until 2038 (0x7fffffff)
[  179.959947][ T5838] loop3: detected capacity change from 0 to 1024
[  179.987972][ T5828] EXT4-fs: Cannot change journaled quota options when quota turned on
[  180.000857][ T5843] loop4: detected capacity change from 0 to 1024
[  180.010263][ T5847] loop2: detected capacity change from 0 to 128
[  180.038509][ T5828] EXT4-fs error (device loop1): __ext4_new_inode:1281: comm syz-executor.1: failed to insert inode 16: doubly allocated?
[  180.063973][ T5843] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  180.087010][ T3643] hfsplus: b-tree write err: -5, ino 4
[  180.105476][ T5217] EXT4-fs (loop1): unmounting filesystem.
[  180.316009][ T3578] EXT4-fs (loop4): unmounting filesystem.
[  180.416816][ T5869] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  180.435270][ T5869] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  180.598520][   T22] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  180.809556][ T5865] loop3: detected capacity change from 0 to 32768
[  180.822462][ T5865] gfs2: fsid=.: Trying to join cluster "lock_nolock", "."
[  180.830264][ T5865] gfs2: fsid=.: Now mounting FS (format 0)...
[  180.844151][ T5865] gfs2: not a GFS2 filesystem
[  180.849355][ T5865] gfs2: fsid=.: can't read superblock
[  180.854969][ T5865] gfs2: fsid=.: can't read superblock: -22
[  181.008800][   T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  181.023140][   T22] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  181.046741][ T5879] loop0: detected capacity change from 0 to 512
[  181.076121][ T5879] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  181.119203][ T5879] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  181.128301][ T5879] ext4 filesystem being mounted at /root/syzkaller-testdir3823765595/syzkaller.vQWbpS/47/file0 supports timestamps until 2038 (0x7fffffff)
[  181.142771][ T5883] loop3: detected capacity change from 0 to 128
[  181.155777][   T22] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  181.173776][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  181.189978][   T22] usb 3-1: SerialNumber: syz
[  181.208142][ T5879] EXT4-fs: Cannot change journaled quota options when quota turned on
[  181.239219][ T5879] EXT4-fs error (device loop0): __ext4_new_inode:1281: comm syz-executor.0: failed to insert inode 16: doubly allocated?
[  181.288230][ T5189] EXT4-fs (loop0): unmounting filesystem.
[  181.515315][ T5895] netlink: 'syz-executor.4': attribute type 8 has an invalid length.
[  181.557468][ T5895] netlink: 'syz-executor.4': attribute type 7 has an invalid length.
[  181.579637][ T5895] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.4'.
[  181.710799][   T22] usb 3-1: USB disconnect, device number 16
[  181.723727][ T5908] loop0: detected capacity change from 0 to 1024
[  181.746914][ T5909] loop1: detected capacity change from 0 to 2048
[  181.756121][ T5912] loop3: detected capacity change from 0 to 256
[  181.779826][ T5909] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  181.795642][ T5914] loop4: detected capacity change from 0 to 512
[  181.807356][ T5909] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  181.818230][ T5914] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  181.826406][ T5912] FAT-fs (loop3): Directory bread(block 64) failed
[  181.835406][ T5912] FAT-fs (loop3): Directory bread(block 65) failed
[  181.855085][ T5912] FAT-fs (loop3): Directory bread(block 66) failed
[  181.875034][ T5914] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  181.881520][ T5912] FAT-fs (loop3): Directory bread(block 67) failed
[  181.890668][ T5912] FAT-fs (loop3): Directory bread(block 68) failed
[  181.897235][ T5912] FAT-fs (loop3): Directory bread(block 69) failed
[  181.905960][ T5912] FAT-fs (loop3): Directory bread(block 70) failed
[  181.912659][ T5912] FAT-fs (loop3): Directory bread(block 71) failed
[  181.916814][ T5914] ext4 filesystem being mounted at /root/syzkaller-testdir4222194783/syzkaller.t74Mb4/177/file0 supports timestamps until 2038 (0x7fffffff)
[  181.919371][ T5912] FAT-fs (loop3): Directory bread(block 72) failed
[  181.919409][ T5912] FAT-fs (loop3): Directory bread(block 73) failed
[  181.966180][ T5908] EXT4-fs: Ignoring removed orlov option
[  181.992401][ T5908] EXT4-fs (loop0): Test dummy encryption mode enabled
[  182.017720][ T5908] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  182.093587][ T5914] EXT4-fs: Cannot change journaled quota options when quota turned on
[  182.145555][ T5914] EXT4-fs error (device loop4): __ext4_new_inode:1281: comm syz-executor.4: failed to insert inode 16: doubly allocated?
[  182.240517][ T3578] EXT4-fs (loop4): unmounting filesystem.
[  182.282395][ T5925] loop3: detected capacity change from 0 to 8192
[  182.332544][ T5925] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  182.349255][ T5925] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  182.364006][ T5925] REISERFS (device loop3): using ordered data mode
[  182.372095][ T5925] reiserfs: using flush barriers
[  182.374254][ T5908] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  182.380308][ T5925] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  182.408935][ T5925] REISERFS (device loop3): checking transaction log (loop3)
[  182.419393][ T5925] REISERFS (device loop3): Using r5 hash to sort names
[  182.433524][ T5925] reiserfs: enabling write barrier flush mode
[  182.448677][ T5925] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  182.550525][   T27] audit: type=1804 audit(1717797050.911:421): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2319962787/syzkaller.Jz1by1/181/file0/file0" dev="loop3" ino=2 res=1 errno=0
[  182.680405][ T5908] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  182.728801][ T5908] overlayfs: upper fs does not support tmpfile.
[  182.826108][ T5908] fscrypt (loop0): Error allocating 'xts(aes)' transform: -4
[  182.854162][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  182.942299][ T5960] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  182.946707][ T5962] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  182.975965][ T5189] EXT4-fs (loop0): unmounting filesystem.
[  182.986013][ T5955] device bond0 entered promiscuous mode
[  183.019498][ T5964] netlink: 'syz-executor.3': attribute type 8 has an invalid length.
[  183.024910][ T5955] device bond_slave_0 entered promiscuous mode
[  183.048235][ T5955] device bond_slave_1 entered promiscuous mode
[  183.051822][ T5964] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
[  183.076431][ T5955] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  183.084377][ T5964] __nla_validate_parse: 1 callbacks suppressed
[  183.084394][ T5964] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.3'.
[  183.124675][ T5955] device bond0 left promiscuous mode
[  183.133537][ T5969] loop1: detected capacity change from 0 to 512
[  183.147468][ T5955] device bond_slave_0 left promiscuous mode
[  183.155317][ T5969] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  183.164742][ T5955] device bond_slave_1 left promiscuous mode
[  183.227992][ T5969] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  183.246028][ T5969] ext4 filesystem being mounted at /root/syzkaller-testdir2326933995/syzkaller.Fw1opS/39/file0 supports timestamps until 2038 (0x7fffffff)
[  183.357882][ T5969] EXT4-fs: Cannot change journaled quota options when quota turned on
[  183.397058][ T5969] EXT4-fs error (device loop1): __ext4_new_inode:1281: comm syz-executor.1: failed to insert inode 16: doubly allocated?
[  183.519499][ T5217] EXT4-fs (loop1): unmounting filesystem.
[  183.557854][ T5983] loop3: detected capacity change from 0 to 512
[  183.573418][ T5983] EXT4-fs: Ignoring removed mblk_io_submit option
[  183.608592][ T5983] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  183.649497][ T3018] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  183.683711][ T5983] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002]
[  183.709882][ T5983] System zones: 1-12
[  183.745035][ T5983] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.3: corrupted in-inode xattr
[  183.807631][ T5983] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 15 (err -117)
[  183.861001][ T5983] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  183.912220][ T5967] loop0: detected capacity change from 0 to 32768
[  183.925326][ T5967] XFS: ikeep mount option is deprecated.
[  183.937681][ T5967] XFS (loop0): Mounting V5 Filesystem
[  183.965481][ T5985] loop4: detected capacity change from 0 to 8192
[  184.001923][ T5983] loop3: detected capacity change from 512 to 64
[  184.011723][ T5985] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  184.028749][ T3018] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  184.042808][ T5985] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  184.049145][ T3018] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  184.116759][ T5967] XFS (loop0): Ending clean mount
[  184.131255][ T5985] REISERFS (device loop4): using ordered data mode
[  184.138652][ T3018] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  184.153059][ T3018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  184.156787][ T5967] XFS (loop0): Quotacheck needed: Please wait.
[  184.182439][ T5985] reiserfs: using flush barriers
[  184.182770][ T3018] usb 3-1: SerialNumber: syz
[  184.208476][ T5985] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  184.255998][ T5985] REISERFS (device loop4): checking transaction log (loop4)
[  184.286064][ T5967] XFS (loop0): Quotacheck: Done.
[  184.297145][ T5985] REISERFS (device loop4): Using r5 hash to sort names
[  184.352308][ T5985] reiserfs: enabling write barrier flush mode
[  184.373510][ T5983] syz-executor.3: attempt to access beyond end of device
[  184.373510][ T5983] loop3: rw=2049, sector=72, nr_sectors = 20 limit=64
[  184.396743][ T5985] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  184.424911][ T5983] EXT4-fs warning (device loop3): ext4_end_bio:347: I/O error 10 writing to inode 13 starting block 36)
[  184.457216][ T5189] XFS (loop0): Unmounting Filesystem
[  184.477645][   T27] audit: type=1804 audit(1717797052.831:422): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4222194783/syzkaller.t74Mb4/182/file0/file0" dev="loop4" ino=2 res=1 errno=0
[  184.527735][ T5983] Buffer I/O error on device loop3, logical block 36
[  184.535009][ T5983] Buffer I/O error on device loop3, logical block 37
[  184.556148][ T5983] Buffer I/O error on device loop3, logical block 38
[  184.562892][ T5983] Buffer I/O error on device loop3, logical block 39
[  184.569600][ T5983] Buffer I/O error on device loop3, logical block 40
[  184.576306][ T5983] Buffer I/O error on device loop3, logical block 41
[  184.640631][ T5983] Buffer I/O error on device loop3, logical block 42
[  184.647477][ T5983] Buffer I/O error on device loop3, logical block 43
[  184.654455][ T5983] Buffer I/O error on device loop3, logical block 44
[  184.661164][ T5983] Buffer I/O error on device loop3, logical block 45
[  184.699627][ T3018] usb 3-1: USB disconnect, device number 17
[  184.784066][ T3586] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 18: comm syz-executor.3: path /root/syzkaller-testdir2319962787/syzkaller.Jz1by1/185/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  184.884075][ T3586] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 18: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  184.944609][ T3586] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 18: comm syz-executor.3: path /root/syzkaller-testdir2319962787/syzkaller.Jz1by1/185/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  184.958405][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  185.004891][ T3586] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 18: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  185.048889][ T3586] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 18: comm syz-executor.3: path /root/syzkaller-testdir2319962787/syzkaller.Jz1by1/185/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  185.075520][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  185.124186][ T3586] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 18: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  185.185806][ T3586] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 18: comm syz-executor.3: path /root/syzkaller-testdir2319962787/syzkaller.Jz1by1/185/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  185.209306][ T6012] device bond0 entered promiscuous mode
[  185.281991][ T6012] device bond_slave_0 entered promiscuous mode
[  185.294415][ T6012] device bond_slave_1 entered promiscuous mode
[  185.327979][ T3586] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 18: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  185.366114][ T6012] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  185.412630][ T3586] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 18: comm syz-executor.3: path /root/syzkaller-testdir2319962787/syzkaller.Jz1by1/185/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  185.439727][ T3586] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 18: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  186.311537][ T6012] device bond0 left promiscuous mode
[  186.324330][ T6012] device bond_slave_0 left promiscuous mode
[  186.330649][ T6012] device bond_slave_1 left promiscuous mode
[  186.727898][ T6030] loop4: detected capacity change from 0 to 512
[  186.820295][ T6010] loop1: detected capacity change from 0 to 32768
[  186.821550][ T3586] EXT4-fs (loop3): unmounting filesystem.
[  186.841135][ T6030] EXT4-fs (loop4): orphan cleanup on readonly fs
[  186.870948][ T6030] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 248: padding at end of block bitmap is not set
[  187.023151][ T6032] loop2: detected capacity change from 0 to 1024
[  187.044381][ T6030] Quota error (device loop4): write_blk: dquota write failed
[  187.066289][ T6030] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  187.128440][ T6030] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz-executor.4: Failed to acquire dquot type 1
[  187.424851][ T6030] EXT4-fs (loop4): 1 truncate cleaned up
[  187.653294][   T46] hfsplus: b-tree write err: -5, ino 4
[  187.816113][ T6030] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  187.970733][ T6030] autofs4:pid:6030:autofs_fill_super: called with bogus options
[  189.263490][ T6047] loop1: detected capacity change from 0 to 512
[  189.311295][ T6047] EXT4-fs: Ignoring removed mblk_io_submit option
[  189.328875][   T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  189.333307][ T6047] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  189.340697][   T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  189.357517][   T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  189.382073][   T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  189.389711][ T6026] loop0: detected capacity change from 0 to 32768
[  189.396973][   T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  189.404654][   T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  189.432251][ T6026] XFS: attr2 mount option is deprecated.
[  189.443780][ T6047] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002]
[  189.460214][ T6047] System zones: 1-12
[  189.470137][ T6026] XFS: ikeep mount option is deprecated.
[  189.477723][ T6026] XFS: noikeep mount option is deprecated.
[  189.509831][ T6047] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.1: corrupted in-inode xattr
[  189.560224][ T6047] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 15 (err -117)
[  189.608462][ T6047] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  189.685342][ T4327] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.755494][ T6047] loop1: detected capacity change from 512 to 64
[  189.818180][ T4327] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.897894][ T6057] loop2: detected capacity change from 0 to 256
[  189.918095][ T6047] syz-executor.1: attempt to access beyond end of device
[  189.918095][ T6047] loop1: rw=2049, sector=72, nr_sectors = 20 limit=64
[  189.944995][ T4327] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.955744][ T6047] EXT4-fs warning (device loop1): ext4_end_bio:347: I/O error 10 writing to inode 13 starting block 36)
[  189.977607][ T6057] FAT-fs (loop2): Directory bread(block 64) failed
[  189.995273][ T6057] FAT-fs (loop2): Directory bread(block 65) failed
[  190.003464][ T6047] Buffer I/O error on device loop1, logical block 36
[  190.005994][ T6057] FAT-fs (loop2): Directory bread(block 66) failed
[  190.010173][ T6047] Buffer I/O error on device loop1, logical block 37
[  190.042283][ T6057] FAT-fs (loop2): Directory bread(block 67) failed
[  190.051169][ T6057] FAT-fs (loop2): Directory bread(block 68) failed
[  190.057957][ T6057] FAT-fs (loop2): Directory bread(block 69) failed
[  190.058644][ T6047] Buffer I/O error on device loop1, logical block 38
[  190.064845][ T6057] FAT-fs (loop2): Directory bread(block 70) failed
[  190.071161][ T6047] Buffer I/O error on device loop1, logical block 39
[  190.071184][ T6047] Buffer I/O error on device loop1, logical block 40
[  190.071197][ T6047] Buffer I/O error on device loop1, logical block 41
[  190.099205][ T6057] FAT-fs (loop2): Directory bread(block 71) failed
[  190.105866][ T6057] FAT-fs (loop2): Directory bread(block 72) failed
[  190.112518][ T6057] FAT-fs (loop2): Directory bread(block 73) failed
[  190.128169][ T6047] Buffer I/O error on device loop1, logical block 42
[  190.134921][ T6047] Buffer I/O error on device loop1, logical block 43
[  190.141627][ T6047] Buffer I/O error on device loop1, logical block 44
[  190.148337][ T6047] Buffer I/O error on device loop1, logical block 45
[  190.237078][ T4327] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.333522][ T5217] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir2326933995/syzkaller.Fw1opS/45/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  190.377034][ T6067] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  190.397812][ T5217] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 18: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  190.472995][ T5217] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir2326933995/syzkaller.Fw1opS/45/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  190.498986][ T6048] chnl_net:caif_netlink_parms(): no params data found
[  190.528646][ T6069] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  190.568693][ T5217] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 18: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  190.636514][ T5217] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir2326933995/syzkaller.Fw1opS/45/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  190.981059][ T5217] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 18: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  191.152464][ T3578] EXT4-fs (loop4): unmounting filesystem.
[  191.253968][ T5217] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir2326933995/syzkaller.Fw1opS/45/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  191.425402][ T5217] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 18: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  191.459615][   T48] Bluetooth: hci4: command tx timeout
[  191.479378][ T5217] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir2326933995/syzkaller.Fw1opS/45/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  191.504250][ T6082] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.4'.
[  191.543258][ T5217] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 18: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  191.617714][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.634378][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.644357][ T6048] device bridge_slave_0 entered promiscuous mode
[  191.679935][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.688191][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.699938][ T6048] device bridge_slave_1 entered promiscuous mode
[  191.817441][ T6048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.851022][ T6048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.029021][ T6048] team0: Port device team_slave_0 added
[  192.074101][ T6048] team0: Port device team_slave_1 added
[  192.224050][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.231527][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.260427][ T6048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  192.326146][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.347873][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.377300][ T5217] EXT4-fs (loop1): unmounting filesystem.
[  192.386321][ T6048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.521229][ T6084] loop0: detected capacity change from 0 to 32768
[  192.544751][ T6084] XFS: attr2 mount option is deprecated.
[  192.571021][ T6084] XFS: ikeep mount option is deprecated.
[  192.593629][ T6084] XFS: noikeep mount option is deprecated.
[  192.609853][ T4327] device hsr_slave_0 left promiscuous mode
[  192.649927][ T4327] device hsr_slave_1 left promiscuous mode
[  192.684975][ T6084] XFS (loop0): Mounting V5 Filesystem
[  192.695270][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.745142][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.774467][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.788426][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.806975][ T4327] device bridge_slave_1 left promiscuous mode
[  192.828570][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.860062][ T4327] device bridge_slave_0 left promiscuous mode
[  192.866384][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.898110][ T6084] XFS (loop0): Ending clean mount
[  192.921510][ T4327] device veth1_macvtap left promiscuous mode
[  192.927624][ T4327] device veth0_macvtap left promiscuous mode
[  192.929016][ T6084] XFS (loop0): Quotacheck needed: Please wait.
[  192.949698][ T4327] device veth1_vlan left promiscuous mode
[  192.955559][ T4327] device veth0_vlan left promiscuous mode
[  193.015716][ T6084] XFS (loop0): Quotacheck: Done.
[  193.186016][ T5189] XFS (loop0): Unmounting Filesystem
[  193.473659][ T3593] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  193.485478][ T3593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  193.494971][ T3593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  193.503532][ T3593] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  193.519768][ T3592] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  193.530400][ T3592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  193.548934][   T48] Bluetooth: hci4: command tx timeout
[  193.636282][ T6107] loop0: detected capacity change from 0 to 512
[  193.660780][ T6094] loop4: detected capacity change from 0 to 32768
[  193.682697][ T6107] ext4: Unknown parameter 'seclabel'
[  193.711457][ T6094] gfs2: fsid=.: Trying to join cluster "lock_nolock", "."
[  193.728021][ T6094] gfs2: fsid=.: Now mounting FS (format 0)...
[  193.755124][ T6094] gfs2: not a GFS2 filesystem
[  193.762272][ T6094] gfs2: fsid=.: can't read superblock
[  193.767702][ T6094] gfs2: fsid=.: can't read superblock: -22
[  193.970521][ T4327] team0 (unregistering): Port device team_slave_1 removed
[  194.019817][ T4327] team0 (unregistering): Port device team_slave_0 removed
[  194.158873][ T4327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.409024][ T4327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.423257][ T1252] ieee802154 phy0 wpan0: encryption failed: -22
[  194.431588][ T1252] ieee802154 phy1 wpan1: encryption failed: -22
[  195.133021][ T4327] bond0 (unregistering): Released all slaves
[  195.224727][ T6048] device hsr_slave_0 entered promiscuous mode
[  195.243841][ T6048] device hsr_slave_1 entered promiscuous mode
[  195.618903][ T3592] Bluetooth: hci4: command tx timeout
[  195.624428][ T3592] Bluetooth: hci1: command tx timeout
[  195.781752][ T6125] loop4: detected capacity change from 0 to 40427
[  195.789997][ T6125] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  195.797695][ T6125] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  195.809777][ T6125] F2FS-fs (loop4): invalid crc value
[  195.840284][ T6125] F2FS-fs (loop4): Found nat_bits in checkpoint
[  195.921799][ T6125] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  195.929236][ T6125] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  195.971210][   T27] audit: type=1800 audit(1717797064.331:423): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=10 res=0 errno=0
[  196.029673][ T6104] chnl_net:caif_netlink_parms(): no params data found
[  196.751527][ T6104] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.799384][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.847049][ T6104] device bridge_slave_0 entered promiscuous mode
[  196.905888][ T6104] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.933594][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.942695][ T6104] device bridge_slave_1 entered promiscuous mode
[  196.943104][ T3578] syz-executor.4: attempt to access beyond end of device
[  196.943104][ T3578] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  196.999449][ T6104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.025546][ T6104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.191524][ T6104] team0: Port device team_slave_0 added
[  197.221431][ T6104] team0: Port device team_slave_1 added
[  197.313397][ T6157] loop2: detected capacity change from 0 to 2048
[  197.330349][ T6104] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.330368][ T6104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.330396][ T6104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.332384][ T6104] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.332402][ T6104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.332430][ T6104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.385092][ T6159] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  197.512950][ T6104] device hsr_slave_0 entered promiscuous mode
[  197.513763][ T6104] device hsr_slave_1 entered promiscuous mode
[  197.514279][ T6104] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.514382][ T6104] Cannot create hsr debugfs directory
[  197.524505][ T6048] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  197.547711][ T6048] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  197.551132][ T6048] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  197.554664][ T6048] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  197.698494][ T3592] Bluetooth: hci1: command tx timeout
[  197.698562][ T3592] Bluetooth: hci4: command tx timeout
[  197.961738][ T6165] loop4: detected capacity change from 0 to 1024
[  198.011377][ T6104] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.053016][ T6048] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.093180][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  198.093918][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  198.143532][ T6104] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.172234][ T6048] 8021q: adding VLAN 0 to HW filter on device team0
[  198.180638][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  198.181642][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  198.182757][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.182878][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.185273][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  198.191012][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  198.191686][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  198.192182][ T4597] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.192246][ T4597] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.293751][ T6104] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.307958][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  198.318701][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  198.387756][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  198.389749][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  198.390581][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  198.392908][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  198.393707][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  198.394320][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  198.402185][ T6104] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.408183][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  198.423732][ T6048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  198.424553][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  198.436403][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  198.437129][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  198.452331][   T27] audit: type=1800 audit(1717797066.811:424): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1954 res=0 errno=0
[  198.563979][   T27] audit: type=1800 audit(1717797066.921:425): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1954 res=0 errno=0
[  198.772187][ T6176] loop4: detected capacity change from 0 to 512
[  198.773855][ T6176] EXT4-fs (loop4): bad block size 8192
[  198.784854][ T6104] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  198.983131][ T6178] loop2: detected capacity change from 0 to 2048
[  199.053110][ T6104] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  199.091109][ T6178] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  199.130890][ T6178] ext4 filesystem being mounted at /root/syzkaller-testdir1373149103/syzkaller.8ijP3j/182/file0 supports timestamps until 2038 (0x7fffffff)
[  199.160852][ T6104] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  199.171148][ T6104] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  199.778675][   T48] Bluetooth: hci1: command tx timeout
[  199.878992][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  199.887180][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  199.979118][ T6178] loop2: detected capacity change from 2048 to 0
[  199.990690][ T6048] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.035422][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  200.049860][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  200.079353][ T3583] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor.2: path /root/syzkaller-testdir1373149103/syzkaller.8ijP3j/182/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  200.159710][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  200.180346][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  200.202357][ T6048] device veth0_vlan entered promiscuous mode
[  200.223518][ T3583] EXT4-fs (loop2): unmounting filesystem.
[  200.234416][ T6104] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.264817][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  200.279496][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  200.302447][ T6048] device veth1_vlan entered promiscuous mode
[  200.327864][ T6104] 8021q: adding VLAN 0 to HW filter on device team0
[  200.350400][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  200.366407][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  200.421516][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  200.440265][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  200.456159][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.463346][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.479223][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  200.488195][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  200.512680][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.519933][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.556095][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  200.583312][ T6048] device veth0_macvtap entered promiscuous mode
[  200.596976][ T6203] ieee802154 phy0 wpan0: encryption failed: -22
[  200.601799][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  200.636476][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  200.647194][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  200.673626][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  200.696086][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  200.719494][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  200.738455][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  200.752959][   T27] audit: type=1800 audit(1717797069.111:426): pid=6209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1954 res=0 errno=0
[  200.795470][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  200.819834][ T6048] device veth1_macvtap entered promiscuous mode
[  200.836076][ T6104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  200.862396][   T27] audit: type=1800 audit(1717797069.221:427): pid=6210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1954 res=0 errno=0
[  200.868880][ T6104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  200.964307][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  200.986425][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  201.022613][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  201.042846][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  201.082276][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  201.102908][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  201.132815][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  201.175839][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  201.227336][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.247508][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.265013][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.288817][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.306681][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.317794][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.340866][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.363167][ T6218] loop0: detected capacity change from 0 to 256
[  201.363326][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.396521][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.416049][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  201.430174][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  201.460985][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.478668][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.488829][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.506119][ T6218] FAT-fs (loop0): Directory bread(block 64) failed
[  201.507187][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.513120][ T6218] FAT-fs (loop0): Directory bread(block 65) failed
[  201.529743][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.536703][ T6218] FAT-fs (loop0): Directory bread(block 66) failed
[  201.545994][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.547629][ T6218] FAT-fs (loop0): Directory bread(block 67) failed
[  201.565997][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.573423][ T6218] FAT-fs (loop0): Directory bread(block 68) failed
[  201.573462][ T6218] FAT-fs (loop0): Directory bread(block 69) failed
[  201.573547][ T6218] FAT-fs (loop0): Directory bread(block 70) failed
[  201.573577][ T6218] FAT-fs (loop0): Directory bread(block 71) failed
[  201.573654][ T6218] FAT-fs (loop0): Directory bread(block 72) failed
[  201.601492][ T6104] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.614926][ T6218] FAT-fs (loop0): Directory bread(block 73) failed
[  201.629012][ T4327] device  left promiscuous mode
[  201.684486][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  201.699800][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  201.715497][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  201.726727][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  201.744111][ T6048] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.783554][ T6048] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.796974][ T6048] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.805919][ T6048] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.859340][   T48] Bluetooth: hci1: command tx timeout
[  202.238927][ T6231] kvm: emulating exchange as write
[  203.165674][ T6233] loop2: detected capacity change from 0 to 40427
[  203.181218][ T6233] F2FS-fs (loop2): invalid crc value
[  203.220980][ T6233] F2FS-fs (loop2): Found nat_bits in checkpoint
[  203.318046][ T6233] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[  203.348519][ T6233] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  203.393748][ T6233] syz-executor.2: attempt to access beyond end of device
[  203.393748][ T6233] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  203.505140][ T3583] syz-executor.2: attempt to access beyond end of device
[  203.505140][ T3583] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  203.521185][ T3583] syz-executor.2: attempt to access beyond end of device
[  203.521185][ T3583] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  229.077981][ T3592] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  229.089843][ T3592] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  229.101662][ T3592] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  229.110597][ T3592] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  229.121173][ T3592] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  229.128726][ T3593] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  231.219915][   T48] Bluetooth: hci3: command tx timeout
[  232.030437][ T3593] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  232.040741][ T3593] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  232.050729][ T3593] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  232.064172][ T3593] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  232.073533][ T3593] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  232.081174][ T3593] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  232.326760][ T3593] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  232.337844][ T3593] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  232.346790][ T3593] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  232.356135][ T3593] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  232.372611][ T3593] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  232.385946][ T3593] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  233.308584][ T3593] Bluetooth: hci3: command tx timeout
[  234.104399][ T3593] Bluetooth: hci5: command tx timeout
[  234.418658][ T3593] Bluetooth: hci6: command tx timeout
[  235.378597][ T3593] Bluetooth: hci3: command tx timeout
[  236.178584][ T3593] Bluetooth: hci5: command tx timeout
[  236.498452][ T3593] Bluetooth: hci6: command tx timeout
[  237.458608][ T3593] Bluetooth: hci3: command tx timeout
[  238.258768][ T3593] Bluetooth: hci5: command tx timeout
[  238.578568][ T3593] Bluetooth: hci6: command tx timeout
[  240.338603][ T3593] Bluetooth: hci5: command tx timeout
[  240.658630][ T3593] Bluetooth: hci6: command tx timeout
[  253.175374][   T48] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  253.193531][   T48] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  253.202105][   T48] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  253.210159][   T48] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  253.219516][   T48] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  253.226805][   T48] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  255.298678][ T3593] Bluetooth: hci7: command tx timeout
[  255.859914][ T1252] ieee802154 phy0 wpan0: encryption failed: -22
[  255.866301][ T1252] ieee802154 phy1 wpan1: encryption failed: -22
[  257.378644][ T3593] Bluetooth: hci7: command tx timeout
[  258.144320][   T48] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  258.157786][   T48] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  258.166407][   T48] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  258.174396][   T48] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  258.182161][   T48] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  258.190142][   T48] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  259.459427][ T3593] Bluetooth: hci7: command tx timeout
[  260.258640][ T3593] Bluetooth: hci8: command tx timeout
[  261.540112][ T3593] Bluetooth: hci7: command tx timeout
[  262.338421][ T3593] Bluetooth: hci8: command tx timeout
[  264.418523][ T3593] Bluetooth: hci8: command tx timeout
[  266.498429][ T3593] Bluetooth: hci8: command tx timeout
[  278.419419][   T48] Bluetooth: hci2: command 0x0406 tx timeout
[  294.372534][ T3593] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  294.384921][ T3593] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  294.394945][ T3593] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  294.405217][ T3593] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  294.414343][ T3593] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  294.421865][ T3593] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  296.498467][   T48] Bluetooth: hci9: command tx timeout
[  297.116772][ T3592] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  297.130247][ T3592] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  297.139347][ T3592] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  297.147273][ T3592] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  297.158671][ T3592] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  297.166105][ T3592] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  297.308597][   T48] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  297.319126][   T48] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  297.328494][   T48] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  297.336523][   T48] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  297.345777][   T48] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  297.353190][   T48] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  298.579945][ T3592] Bluetooth: hci9: command tx timeout
[  299.218473][ T3592] Bluetooth: hci10: command tx timeout
[  299.379764][ T3592] Bluetooth: hci11: command tx timeout
[  300.658578][ T3592] Bluetooth: hci9: command tx timeout
[  301.298409][ T3592] Bluetooth: hci10: command tx timeout
[  301.458493][ T3592] Bluetooth: hci11: command tx timeout
[  302.738434][ T3592] Bluetooth: hci9: command tx timeout
[  303.378418][ T3592] Bluetooth: hci10: command tx timeout
[  303.538437][ T3592] Bluetooth: hci11: command tx timeout
[  305.458529][ T3592] Bluetooth: hci10: command tx timeout
[  305.618468][ T3592] Bluetooth: hci11: command tx timeout
[  314.258480][ T3592] Bluetooth: hci4: command 0x0406 tx timeout
[  317.308558][ T1252] ieee802154 phy0 wpan0: encryption failed: -22
[  317.314902][ T1252] ieee802154 phy1 wpan1: encryption failed: -22
[  318.291392][ T3593] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  318.308229][ T3593] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  318.319255][ T3593] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  318.327438][ T3593] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  318.335256][ T3593] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  318.342835][ T3593] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  319.378525][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  320.418532][   T48] Bluetooth: hci12: command tx timeout
[  322.498407][   T48] Bluetooth: hci12: command tx timeout
[  323.353150][ T3592] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  323.363436][ T3592] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  323.372129][ T3592] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  323.381564][ T3592] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  323.389300][ T3592] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  323.398115][ T3592] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  324.578488][ T3592] Bluetooth: hci12: command tx timeout
[  325.458443][ T3592] Bluetooth: hci13: command tx timeout
[  326.658567][ T3592] Bluetooth: hci12: command tx timeout
[  327.558356][ T3592] Bluetooth: hci13: command tx timeout
[  329.618606][ T3592] Bluetooth: hci13: command tx timeout
[  331.698382][ T3592] Bluetooth: hci13: command tx timeout
[  349.298445][   T28] INFO: task kworker/1:0:22 blocked for more than 143 seconds.
[  349.306056][   T28]       Not tainted 6.1.92-syzkaller #0
[  349.311671][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  349.320506][   T28] task:kworker/1:0     state:D stack:20120 pid:22    ppid:2      flags:0x00004000
[  349.335156][   T28] Workqueue: events linkwatch_event
[  349.340500][   T28] Call Trace:
[  349.343797][   T28]  <TASK>
2024/06/07 21:53:37 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  349.346751][   T28]  __schedule+0x142d/0x4550
[  349.389213][   T28]  ? __sched_text_start+0x8/0x8
[  349.394148][   T28]  ? print_irqtrace_events+0x210/0x210
[  349.425031][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[  349.445225][   T28]  ? _raw_spin_unlock_irq+0x1f/0x40
[  349.465436][   T28]  ? lockdep_hardirqs_on+0x94/0x130
[  349.478492][   T28]  schedule+0xbf/0x180
[  349.482618][   T28]  schedule_preempt_disabled+0xf/0x20
[  349.488042][   T28]  __mutex_lock+0x6b9/0xd80
[  349.508343][   T28]  ? __mutex_lock+0x53c/0xd80
[  349.513082][   T28]  ? linkwatch_event+0xa/0x50
[  349.517781][   T28]  ? mutex_lock_nested+0x10/0x10
[  349.538386][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[  349.543651][   T28]  ? process_one_work+0x7a9/0x11d0
[  349.558399][   T28]  linkwatch_event+0xa/0x50
[  349.562991][   T28]  process_one_work+0x8a9/0x11d0
[  349.567995][   T28]  ? worker_detach_from_pool+0x260/0x260
[  349.604997][   T28]  ? _raw_spin_lock_irqsave+0x120/0x120
[  349.610663][   T28]  ? kthread_data+0x4e/0xc0
[  349.615206][   T28]  ? wq_worker_running+0x97/0x190
[  349.642629][   T28]  worker_thread+0xa47/0x1200
[  349.647428][   T28]  kthread+0x28d/0x320
[  349.673050][   T28]  ? worker_clr_flags+0x190/0x190
[  349.678145][   T28]  ? kthread_blkcg+0xd0/0xd0
[  349.708431][   T28]  ret_from_fork+0x1f/0x30
[  349.713054][   T28]  </TASK>
[  349.728420][   T28] INFO: task kworker/0:3:3018 blocked for more than 143 seconds.
[  349.748518][   T28]       Not tainted 6.1.92-syzkaller #0
[  349.754207][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[